last executing test programs: 1m54.259189781s ago: executing program 3 (id=375): unshare(0x22020600) (async) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x0, 0x4) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='pids.current\x00', 0x5000000, 0x0) readv(r2, &(0x7f00000007c0)=[{&(0x7f0000000540)=""/170, 0xaa}], 0x1) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="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", 0xfa}, {&(0x7f0000000100)="7bb94257d09340dffb8d3653300d76b07fa5184e686fec63376d6eaba378d6ac63f8fe1a6f50f7f132e0a9723837cb6bd11550a436c0c4c5a5dd23eba6d21ad0948db8a4066c3fbc2eabaecb6558caa499c32341df833de69cbecce6d620d96b8773a46b11cf90ff1a1e1fd92ad13f211440b2d5206b", 0x76}, {&(0x7f0000000480)="15c449fcdc42bfa0eb9b72c906a59f6c0f5c1fb939e7b1cc046c29f3e9a94322f64d0036557cf0c742cac5c6be9c8d75fc77ddb01af4d9e2f6deb29db47c68fde8d589ff7cd6ac9c0196171d07d27a65299260595c4d9b06793f52e524c292e0ef5f02681cc7e65944c78e", 0x6b}, {&(0x7f0000000200)="8749", 0x2}, {&(0x7f0000000240)="3625fd7d64fef43e95debd07106cda39b3aa91bf93f24a826b8746322fe7f6d07ab781157edda91dc6c13e5038cc2286ccbbf7753c79072a36f8139206e3fa28dbf3e8a3f7ddb5ac42d860a381717c1452a2a67a22f549e60e15f56fbc8859fe9ba0a5e336ee275278e62e270e5b", 0x6e}, {&(0x7f00000002c0)="5ced68359309bab5f0b1ffc8a969eb335dc80bd53cfb4e9457aff09e9ebfef4a11c8c6ec788fe0fe8f38f3d9f8f23fe61ac9e44df18cb5793102717382b41fee83bad6b89331ac3165b6d2492548153fba020916b5f5ec30def5f8cb30e11ddef5d2b5050f1a92cba40bccfd3aef335446a26195f62e55066b39156e47690eb7dc3fbdbc504c6984ba0a9962be39db8fa4810149b7875c5724632777884f01efbe6676def89abbb401ed0e186dce63524ea10d4275b229", 0xb7}, {&(0x7f0000000380)="0998328832a8a62c2d54beafe7319430ac6d5651ac53e42eadf962e845a81b75b88d", 0x22}, {&(0x7f00000003c0)="110e0982a5abd612293e91a60c0c811dce089f076103405191f1e990d25c57834c4a16209d7945f7e5b8c62ab545aee23e2d0c6c0d4e", 0x36}], 0x8}, 0x40) 1m54.132407643s ago: executing program 0 (id=377): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000004780)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x7}}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) read(r0, &(0x7f00000003c0)=""/62, 0x3e) read$rfkill(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000e00)={0x2020}, 0x2020) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x2) syz_usb_connect(0x3, 0x349, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0) 1m53.589590788s ago: executing program 3 (id=379): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) accept4$vsock_stream(r0, &(0x7f0000000040), 0x10, 0x80000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000003c0)={r1, @in6={{0xa, 0x4e24, 0xffffffff, @empty, 0x2f}}, 0x75, 0xad}, &(0x7f0000000080)=0x90) 1m53.458938979s ago: executing program 3 (id=381): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000f2ffffffffffffff00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x7, &(0x7f0000000240)=ANY=[@ANYRES32=r3], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000100)={0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x1, 0x710, 0x7be, 0x9, {{0x1b, 0x4, 0x0, 0x1f, 0x6c, 0x64, 0x0, 0x2, 0x2f, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010102, {[@ssrr={0x89, 0x27, 0xa5, [@multicast1, @empty, @remote, @local, @rand_addr=0x64010101, @rand_addr=0x64010102, @local, @private=0xa010101, @rand_addr=0x64010100]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x13, 0xb4, [@multicast2, @dev={0xac, 0x14, 0x14, 0xc}, @private=0xa010100, @remote]}, @timestamp={0x44, 0x10, 0xf3, 0x0, 0x3, [0x5, 0xfffffffb, 0x2]}, @lsrr={0x83, 0x7, 0xec, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="fc89049533e2818bab6dff1a6afacc217ae23abd8a240d0e6a2cd4f700b7cd82971d5d2c4441a698e4b020a0d244e5", 0x2f}], 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000002100000426bd7000fedbdf2502142000050000081400000008000200ffffffff08000d000400000008000200e00000020c000c400000000000000006459d709925de4b873490b1ab6e20b7e64cbfb6d52714dcafbc84bb6e82ae91fa6bf77853242984e598f5bc7a355c66b12ba0c10e175b971cc7118f24ca83e8dad3e661dfd7f01fe17475b662d7d68754bdba8826d3e81188a20769e3708d562ce9068adab139bf457ef6f86ba8b51b8ecdb2d5cfb4950acff2a8fc091fc1452c17ef633687a39422b07f5eae7b0ac6bf5de67b48877097ea66f1452a2603570c261e92a2cb3ca6d9f7e0a9dee1db5c110722a8d4c30af27a160556e6cb41518ca998d2e96d017651fb0fc25ba87a0c3f160d3aaae81647dafb96ca9d775665484dc79fb35b46f3956c201787bc033d3c056a15eae20120f0b993dd921489140516173669c50893c6d94a3b1d76e769a1aad9ce1fdc29535bb79fec3b6ba2f65bb0e2485d8e8708"], 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x87, 0x101, 0x1) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000040)='syztnl0\x00', 0x0, r4) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509"], 0x0) socket$kcm(0x11, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@delchain={0x34, 0x65, 0x200, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0x8}, {0xf, 0xf}, {0x7, 0x11}}, [@TCA_RATE={0x6, 0x5, {0x90, 0x1d}}, @TCA_RATE={0x6, 0x5, {0x6, 0x3}}]}, 0x34}}, 0x0) socket$alg(0x26, 0x5, 0x0) 1m53.385922303s ago: executing program 2 (id=382): ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000000)={0x0, 0x5, 0x5, 0x695021fbaa02d772, 0xee6, 0x1, 0x2}) syz_usb_connect(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1d3700000000090405000000000000ee0905000057779306dc0733604d000000000000000000000000000000d092c81835c57570dd93ef6dae47c23842d9813d299e6392206895ac3da9909e288d2c88b35b1164d05ac1147d386afce37a767525d01c81cd2ee759753bae7a", @ANYBLOB="eae7"], 0x0) (async) syz_usb_connect(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1d3700000000090405000000000000ee0905000057779306dc0733604d000000000000000000000000000000d092c81835c57570dd93ef6dae47c23842d9813d299e6392206895ac3da9909e288d2c88b35b1164d05ac1147d386afce37a767525d01c81cd2ee759753bae7a", @ANYBLOB="eae7"], 0x0) 1m53.193020917s ago: executing program 4 (id=385): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = open(&(0x7f0000000240)='./file2\x00', 0x145142, 0x0) ioprio_set$uid(0x3, 0xee01, 0x2007) sendfile(r4, r2, 0x0, 0x800000009) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000040), &(0x7f00000000c0)=0x4) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) dup(0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031420002bbd7000000000000900020073797a3000000001000000000000000014003300766c616f310000"], 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) io_setup(0x8, &(0x7f0000002740)=0x0) io_getevents(r6, 0x4, 0x13, &(0x7f0000000000), 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(r6, 0x1, &(0x7f0000000480)=[&(0x7f0000000880)={0x0, 0x0, 0x0, 0x7, 0x8, r7, 0x0, 0x0, 0x6}]) 1m51.716037669s ago: executing program 4 (id=386): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ed50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x11, 0x2, 0x100001) capset(&(0x7f00000006c0)={0x20080522}, &(0x7f0000000080)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r2, 0x560c, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x68}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r8, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) r9 = socket$netlink(0x10, 0x3, 0x4) writev(r9, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @dev}, 0x14) 1m50.755971326s ago: executing program 1 (id=389): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r4, 0xc01864cb, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000003460200bfa30000000000001702000000feffff7a0af0ff14ffffff79a4f0ff00000000b7060000ff0800007e640200000000005502faff037202000404000001007d60a6040000001000006a0a58fe39000f00850000005b000000bc600000000000009500000000000000a81bbfa32d51a7d0679fd43041097666ab982de7b0efc5733ed236e4add6de094e0832aaa6912a8b2ce571c4580034fb000000e3a94bd24d2eb3860d808922433e3e0f242a46b3009a54f4077db0d4968a384b0559c7919b893d3b72cd6c832e986440ff0a7e8620cb231ccd00000000000000000000007777e2704653f620b2272c3c7fea60491073847c4b7bbaed91f33fb382d91ae8e18c9b6c9f0322ec5f1c7cc5869ff455896712198c4e2ddf8b86e714229527ca40b24cfd6a1f00e891728807982d90e116bba29bb70900000000000000c63ad2e7402f9cb424ac416e66af9ebbfea905d37cf226312cb81ec8439cea06e7fa5e5b3596301460142f83b464d9e57dfdb06dcf9101000100130033d649d2110cf2e1f4682c24a314447c5e0807f0b1766ebdecbd061772daa52a38539295d3fea7a7e669441e1ff04114dfa904fb43897f8d9c3c287acba716973eadf1bf9cd0a38edc345415c42d3d2dd3339d32a5796cbe8925efd0c81af69a3e97588878d7ce18b68bc37e061d33357d6a39d33c702576cc2a8891663e3776c7a37c5c962e12102f237bbf60c0a3bf07d55b3888418de2b2ad23d25395dd4ccddf247dd2c712e2e2eaf7d432e968122cc5dcaa7ba330963b7093a58a02dba114f75e1ffd5c2912b506bfb93122fc776aadec51a367658100000000000000b148a90000000000a2a283801ff218538cb12c72b56ffb6b7a062581ec749f5700000000009f1f5ab2e02739ccd50523d3360300005cbeaf95c7d797d6e094c4a3aee025bf43cebde7e7cdbae9b1698e19eb0e6d5244c1ffb0e97628a88a5e37032f1e8f6c893e514f2b3e1028cd404a1d8fe6569da0385e65e4d523166c4213abb8dae5b1409317f29572e788af92aedb0287f2816e301fc8a24dba6fca8b270d44fe65e7bd90a5fc16387bcb5e3df18d7d2a33c72cfda827b8926a6dc6bc19ce398cb8fe48b11b7f93e6fdfb040283c9627bd40909ee4307c4197b15797af17845fbc02846d2f8543f65594cb535a9598eb067b21111dbaa58b19a52f3f12880128d08eb477ad349ca214bc7f80000000000ffb52da89cff41552996e20a585c7d265bd749eeba040fa7111c84142757709d7c475fac2839beb833327db41c6b647c7ee9ad419a6c68dd5c2ce4fa23c280518fc6e54d1b055cae5492e8c4cdd314a49631a15de2bffc920dd74e670794acec7a9da17d809bf956f1af51cf3c0711792d3071dfdaec3c66053cdb00028f6fba8da8f53de39a5999e56fc26ae866674627c8a53d3fd245050060ed40782d1d98bf1e1f5dfd4d1fb399624c12732e300818b222ce029ce01055f941721226e3e5f05d2837240f8f6831b6ef2a02ec64aae1eea9cfac06d8b7042e8ebdc6cb0d4a140e1e631d06afc99d397c5b67b290344e347c953806b298f288884335f624378b3748a4a86bbd0a62127b2c28ce3737661b98bd45965b537ece7bd4e365ffd5567df4d02034c8d488a49c6fb1a0a02eaab2f271d3a14e44211e4ff602d146f72355972860bdd14719d65301964d022819b75696ce47534c9d989d69a445095ff8fbebd2c84635acc333f2aca4623cfe9f9e6c3f9fbb4374c08e1be5eec12c329a87d335fd7a52a4e4e7c2e57fa2f0df9500347b300f84230783cb665f3fa44f5d6fa987aa93c2619ef4977f9e4d38adec323778f3bc987533ffd85fe5417398a3001b394fccbd2faee83b5e2b8a2dd18cf067b619a82c4706531b3ef336a84e825c63b9bc7b98b4ad6a471692224adef86f4c9930169dfa133e22929d5a27e10bfbcfe7c02ca451afd74d26f489e0e09cf1b596ae0c959cf26cb0c8114a9311b7f2fe2ad977074ff5f62f6777a20700414ed03ba3d7404eadd43a62ad1173491a5c099290393e1f85aeb3886fbb7f6646212054a850d58a71c6d6027cd3a5ff22e98672349f9bddb23622e2f19b39e51ced84524567ec1fcb233a2fb85371e9b08b6fd4adcd4db148ed26757123a0e604bcf6ffdcc303956e1805f1746361bd3eeb55d3fefe6ac274c2e6c78963430118942d62a465698e600dadd81a53ffd29358746e8db2499e3fca62b0ff660b0aaeedadeb194a9217e9fed2ce04cc24451871d5bcd76173ab7123cc27eef33dbb4d3c3bf1fc2df68a98345c15667388c5000000000000000000000015000000c0459f900702908d4979288d06c7159ef2663dc7ea9302b10bf2da21e3990ddf20a38adc1fd15124310daf2461224cfbfd5e6265d012d60fc9e39209ce3209720f8d7bf39bf71d0d46ed6d51eede797da70cf0b7463cffc80a7a56eeb25ed0adfb146a3221c20d51f172cf2eefe1e6b28cffc1e40a789d5513626f5c4fbf65a2b5a093634b806b7ee570f70f624ce8c02d4c1ec7a9370f42a807f1d46fe77be0637a8007343b7771788f64b36cab94a99243bc780702f98f34a80f81aeb853f97c3e9586805d1a240d7e870b15defbc6b21fdc98a79759c9b8375313deea0000000009e38e9539d6b9507b6f3f8d29992d080a13aed8879a1f2cf352fb5a376427f89d432f7fe7c0cad2ce38427fc773cef47e00000000000000000000000000000000000d09b8ee6321377ffcb6cc386f8704ae9ce6c11b4bb91d0097ef2b77e0cd28af1222e68c2745eca64fa40db07f6e5925224069d14395f7170ab9c2d396f7510f65ce5b0405d8951a70a37117d13c5b2f684c52bff2dc895f5e06e497adee9de0012dd140c592137c90319f8a578007b57aaba3fb93d29a6584313e5b58f8a71cebf77a0891f3633dba69588ec728e785e6e4431fce5a143451c7a51c22b1b605347db811eb9a461f4ef2612181aa8cafc33a2047b7ba57a5"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x37}, 0x24) r5 = accept4(r3, 0x0, 0x0, 0x80800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xba216361aaa0428}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000040000000100000080"], 0x1b) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x6, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=0x0, @ANYRES16=r7], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2, r8}, 0x94) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r5) 1m50.740366938s ago: executing program 0 (id=390): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) (async) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) (async, rerun: 32) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x39, 0x0, 0x0, 0x62, 0x86cc4097e8288a3a, 0x0, 0x0, 0x0, 0x34, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r7, 0x1d) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0xfeffffffffffff) (async) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3400000bbf26bd7000fddbdfb0eeff08651d0c56", @ANYRES32=0x0, @ANYBLOB="0102000000000100140012800b00010065727370616e000004000280"], 0x34}}, 0x24008800) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$inet6(0xa, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) (async) futex_waitv(&(0x7f0000001b00)=[{0xffb, &(0x7f0000000240)=0x200000006, 0xa}], 0x1, 0x0, 0x0, 0x1) (async) setsockopt$inet6_int(r9, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r9}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r10}]}}}]}, 0x40}, 0x1, 0xba01}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x4}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x40) syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b000100000001090400"], 0x0) (async) poll(&(0x7f0000000040)=[{r2, 0x4042}], 0x1, 0x100) 1m50.476249778s ago: executing program 0 (id=391): r0 = inotify_init() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000400)={0x80000000, &(0x7f00000007c0), 0x0}) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r2, &(0x7f0000001040)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1) preadv(r2, 0x0, 0x0, 0x61, 0xdde74e3a) preadv(r2, &(0x7f0000003340)=[{&(0x7f00000021c0)=""/4096, 0x1000}], 0x1, 0x3, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) statx(0xffffffffffffffff, 0x0, 0x48e0cdf8471afff4, 0x54663aafb2d54055, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load default user:t0000000000000004096 '], 0x31, 0xfffffffffffffffc) syncfs(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000080)='./file0\x00', 0x424) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m50.098610165s ago: executing program 3 (id=392): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x91, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='timer_expire_entry\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x88}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='ext4_ext_rm_leaf\x00', r0}, 0x18) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r6, 0x29, 0xd4, &(0x7f00000001c0)=0x9, 0x4) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) fsync(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x80010, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) madvise(&(0x7f00001bb000/0x2000)=nil, 0x2000, 0xb) sysinfo(&(0x7f00000000c0)=""/8) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x3, 0x3}, @sack_perm, @sack_perm, @sack_perm, @window={0x3, 0x1, 0x4}], 0x5) 1m49.689044593s ago: executing program 0 (id=393): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x161300, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000080)={'dvmrp0\x00'}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)={0x20, 0x40, 0x119, 0xfffffffe, 0x3000000, {0x3, 0x7c}, [@nested={0xc, 0x142, 0x0, 0x1, [@typed={0x5, 0x9, 0x0, 0x0, @binary="14"}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x161300, 0x0) (async) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000080)={'dvmrp0\x00'}) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)={0x20, 0x40, 0x119, 0xfffffffe, 0x3000000, {0x3, 0x7c}, [@nested={0xc, 0x142, 0x0, 0x1, [@typed={0x5, 0x9, 0x0, 0x0, @binary="14"}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) 1m49.50220044s ago: executing program 1 (id=394): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000ffffffef003c0000003c00000006000000040000000000000e0400000000000000000000000100000d040000000400ffef040000000000000000000010040000000000000000000002030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28) 1m49.501303599s ago: executing program 4 (id=395): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f000000c480)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000000000000000000000000001fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac141417000000000000000000000000010004d533000000e000000100000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000500000000000000000000000200000000000000000000005c001400636d6163286165732900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000035", @ANYBLOB, @ANYRES16], 0x158}}, 0x20000000) 1m49.470432874s ago: executing program 2 (id=396): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = open(&(0x7f0000000240)='./file2\x00', 0x145142, 0x0) ioprio_set$uid(0x3, 0xee01, 0x2007) sendfile(r4, r2, 0x0, 0x800000009) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000040), &(0x7f00000000c0)=0x4) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) dup(0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031420002bbd7000000000000900020073797a3000000001000000000000000014003300766c616f310000"], 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) io_setup(0x8, &(0x7f0000002740)=0x0) io_getevents(r6, 0x4, 0x13, &(0x7f0000000000), 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(r6, 0x1, &(0x7f0000000480)=[&(0x7f0000000880)={0x0, 0x0, 0x0, 0x7, 0x8, r7, 0x0, 0x0, 0x6}]) 1m49.381879632s ago: executing program 0 (id=397): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r4, 0xc01864cb, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1}) 1m49.292630661s ago: executing program 1 (id=398): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900300073797a30000000000900030073797a320000000090000000060a010400000000000000000100000008000b400000000068000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000300001800c000100626974776973650020000280080003400000000208000140000000bc0800024000000012040007800900010073797a30"], 0x104}}, 0x0) 1m49.291951403s ago: executing program 4 (id=399): r0 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000140)={{0x0, 0x2}, {0xf}}) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0xa0}}, 0x4000040) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r5, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x91}, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r5, 0x700, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'pim6reg1\x00', &(0x7f00000001c0)=@ethtool_stats={0x1d, 0x6, [0xc000000000, 0x8, 0x3, 0x0, 0x0, 0x0]}}) r6 = socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) sendmsg$kcm(r6, 0x0, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000002c0)={0x0, @initdev, @multicast2}, &(0x7f00000003c0)=0xc) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8937, &(0x7f00000000c0)={'batadv_slave_0\x00', @random="05000120ffff"}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[], 0x7) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x2}) 1m48.102540625s ago: executing program 1 (id=400): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x29, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) read$alg(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000001ac0), &(0x7f0000001b00)=0x14) r1 = socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r1}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000100)='-1\x00', 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x0, 0x12, 0x60a, 0x108, 0x202, 0x210, 0x2e8, 0x2e8, 0x210, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [0x4000000, 0x0, 0xffffffff], [0x4000000], 'pimreg\x00', 'xfrm0\x00', {}, {}, 0x3c, 0x0, 0x0, 0x44}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0x0, 0xf9}}}}, {{@ipv6={@private2, @loopback, [], [0x0, 0x0, 0xffffff00], 'vxcan1\x00', 'geneve0\x00', {}, {0xff}}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) getsockopt$inet_buf(r3, 0x0, 0x41, &(0x7f0000000180)=""/4096, &(0x7f0000001180)=0x28) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001c40)={'vcan0\x00'}) syz_open_dev$sndmidi(&(0x7f0000001c80), 0x9, 0x20000) socket$nl_netfilter(0x10, 0x3, 0xc) 1m47.942362525s ago: executing program 2 (id=401): getpid() (async) r0 = getpid() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="05000000010001", 0x7) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x24020000) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r3, r3, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, 0x0, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) (async) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) getrlimit(0x3, 0x0) (async) getrlimit(0x3, 0x0) chdir(&(0x7f0000000080)='./file1\x00') (async) chdir(&(0x7f0000000080)='./file1\x00') r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r6, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, &(0x7f0000000180)) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x800000000000001) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) 1m47.941234435s ago: executing program 0 (id=402): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$tun(0xffffffffffffff9c, 0x0, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7, 0x0, 0x0, 0x400000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000100)=0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xe2738885143d4bd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x240}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001400030500008000ffdbdf25020151ff", @ANYRES32=r9, @ANYBLOB="080002007f000001"], 0x30}, 0x1, 0x0, 0x0, 0xc090}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4041080) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) getsockopt$inet_opts(r0, 0x0, 0xf, 0x0, &(0x7f0000000040)) 1m47.529370471s ago: executing program 1 (id=403): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="61fe71b72b5f1780c202090086dd60d2339600000000000000000000000000bbff02000000000000000000000000000186009078000002000000002100000000"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000440), 0xfffffffffffffffd, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc0405602, &(0x7f00000001c0)=@fd={0x6, 0x1, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00\x00@\x00'}}) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000000280)=@srh={0x89, 0xc, 0x4, 0x6, 0x5, 0x50, 0xb0e, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4044) socket$kcm(0x10, 0x2, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) setpriority(0x2, 0x0, 0x8000000000000000) memfd_create(0x0, 0x0) (async) memfd_create(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c0002"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c0002"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 1m47.194271955s ago: executing program 2 (id=404): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r4, 0xc01864cb, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x37}, 0x24) r5 = accept4(r3, 0x0, 0x0, 0x80800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xba216361aaa0428}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000040000000100000080"], 0x1b) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x6, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=0x0, @ANYRES16=r7], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2, r8}, 0x94) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r5) 1m46.577282588s ago: executing program 1 (id=405): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x80a, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x80a, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000a40)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x1010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = accept$unix(r2, &(0x7f0000000700), &(0x7f0000000100)=0x6e) connect$unix(r3, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x5d) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000a00)=[{{&(0x7f00000007c0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000300)=""/66, 0x42}], 0x1, &(0x7f0000000900)=""/172, 0xac}, 0x3}], 0x1, 0x60, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000780)='/sys/kernel/softlockup_count', 0x0, 0x0) (async) openat$sysfs(0xffffff9c, &(0x7f0000000780)='/sys/kernel/softlockup_count', 0x0, 0x0) unshare(0x24020400) socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) getpid() (async) getpid() syz_pidfd_open(r1, 0x0) (async) syz_pidfd_open(r1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000a80)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r7 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], 0x0) ioctl$RNDADDENTROPY(r7, 0x40085203, &(0x7f0000004180)=ANY=[]) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0)={0x4, 0x0, [{0x0, 0xbe, &(0x7f00000001c0)=""/190}, {0x25000, 0x5e, &(0x7f0000000040)=""/94}, {0x8000000, 0x4e, &(0x7f0000000440)=""/78}, {0x10000, 0xfb, &(0x7f00000004c0)=""/251}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) 1m46.192002637s ago: executing program 3 (id=406): unshare(0x8020400) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = getpgrp(0xffffffffffffffff) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000343000/0x1000)=nil, 0x1000, 0x6) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x401) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x840000000002, 0x3, 0x9) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), 0x0, 0xfff, 0xffffffffffffffff, 0x0, 0xa0028000}, 0x38) r6 = dup(r5) ioctl$PTP_EXTTS_REQUEST2(r6, 0x40603d10, &(0x7f00000002c0)={0x9, 0x6}) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x4001, 0x3, 0x250, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x1b8, 0x206, 0x240, 0x1b8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @empty, 0xffffffff, 0x0, 'tunl0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x1}, 0x1ea, 0xc0, 0x120, 0x0, {0x390, 0x8f00}, [@common=@inet=@socket3={{0x28}, 0x1}, @common=@icmp={{0x28}, {0x12, "e07c", 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x2, 0x3, 0x1, 0x2, 0x7], 0x2, 0x5}, {0x0, [0x3, 0x6f455bfb4ce26171, 0x6, 0x6, 0x2, 0x21debfafc4f76fce], 0x3}}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xe2002454fb7b9fcc, 0xff, 'team0\x00', 'gre0\x00', {}, {0xff}, 0x8, 0x2, 0x5}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0xf9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r7, 0x11, 0x65, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) syz_genetlink_get_family_id$nl802154(&(0x7f00000021c0), 0xffffffffffffffff) 1m46.091610775s ago: executing program 2 (id=407): r0 = syz_socket_connect_nvme_tcp() fcntl$getflags(r0, 0x408) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b7000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x100000000002) sched_setscheduler(r2, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r2, 0x0, 0x4004) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/13, @ANYRES32, @ANYBLOB="000000000081000000000000000000007b8af8ff00000000000007020000f8", @ANYRES32, @ANYRESHEX=0x0, @ANYRESDEC=r0, @ANYRESOCT=r5], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000002c0012800b00010062726964"], 0x4c}}, 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000000)='qnx4\x00', 0x0, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40a00, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) 1m46.043729388s ago: executing program 4 (id=408): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000fffffff9003c0000003c00000006000000040000000000000e0400000000000000000000000100000d040000000400ffef040000000000000000000010040000000000000000000002030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28) 1m45.770482071s ago: executing program 4 (id=409): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00220f0000001600000b450200214b073c686875846c87487a3fdafb324b2bada6cd1fb17975b48c0c859bc2d05688f7f66bb71fcacb824ec8237f38fe24ddc7e29734298d70aac18fc5843b6e3aa6f46b206f110f6b20f9621719c9a3f91aaf"], 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) keyctl$reject(0x13, 0x0, 0x400, 0x8000000000000204, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r5, 0x0, 0x0}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000200)='bbr', 0x3) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0xb4040) ioctl$HIDIOCGUSAGE(r7, 0xc018480b, &(0x7f00000001c0)={0x3, 0x200, 0x38000, 0xffffffff, 0x3f04, 0x22}) 1m44.946882622s ago: executing program 3 (id=410): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000300000900030073797a320000000090000000060a010400000000000000000100000008000b400000000068000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000300001800c000100626974776973650020000280080003400000000208000140000000bc0800024000000012040007800900010073797a30"], 0x104}}, 0x0) 1m44.946138403s ago: executing program 2 (id=411): syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000800)=@abs, &(0x7f0000000140)=0x6e) connect$unix(r0, &(0x7f0000000880)=@file={0x0, './file0/file0\x00'}, 0x6e) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f0000048040)=""/102392, 0xffffff19) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002a00)=ANY=[@ANYBLOB="140000002800290200000000000000000a000000d15ed236d04c6069069ba34b65752c8d6f36c1e58b79acd37656f6c9bfd381d9c7214c1920f60d03a765c85e855822a6ed3c348c5231059a18b3c1e1aa649adeadb9dafbd9d80063b71d63837ac7a5a81972818336d3fae669ed21c88ede64eb292981578298d9459366ec654bfd4f2a"], 0x14}}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0xf) r3 = socket(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x5, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r3, &(0x7f0000000480)={0xa, 0x0, 0x471, @remote}, 0x20) sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0xc1) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000028c0)=[{{&(0x7f0000000080)=@tipc=@id, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000000480)}, 0x2}, {{&(0x7f00000004c0)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000900)=""/216, 0xd8}, {&(0x7f0000000400)=""/70, 0x46}, {&(0x7f0000000680)=""/233, 0xe9}, {&(0x7f0000000780)=""/14, 0xe}, {&(0x7f0000000240)=""/235, 0xeb}, {&(0x7f0000000a00)=""/188, 0xbc}, {&(0x7f0000000b00)=""/84, 0x54}, {&(0x7f0000000b80)=""/184, 0xb8}], 0x8, &(0x7f00000016c0)=""/4096, 0x1000}, 0xfffffee2}, {{&(0x7f0000000380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000d40)=""/70, 0x46}, {&(0x7f00000007c0)=""/63, 0x3f}, {&(0x7f0000000dc0)=""/157, 0x9d}, {&(0x7f0000000e80)=""/120, 0x78}, {&(0x7f0000000f80)=""/178, 0xb2}, {&(0x7f0000001040)=""/110, 0x6e}], 0x6}, 0x4}, {{&(0x7f0000001140)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000f00)=[{&(0x7f00000011c0)=""/226, 0xe2}], 0x1, &(0x7f00000012c0)=""/100, 0x64}, 0x8001}, {{&(0x7f0000001340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000002780), 0x0, &(0x7f0000000540)=""/142, 0x8e}, 0x4}], 0x5, 0x2, 0x0) 1m3.068982757s ago: executing program 32 (id=402): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$tun(0xffffffffffffff9c, 0x0, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7, 0x0, 0x0, 0x400000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000100)=0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xe2738885143d4bd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x240}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001400030500008000ffdbdf25020151ff", @ANYRES32=r9, @ANYBLOB="080002007f000001"], 0x30}, 0x1, 0x0, 0x0, 0xc090}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4041080) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) getsockopt$inet_opts(r0, 0x0, 0xf, 0x0, &(0x7f0000000040)) 1m2.966947424s ago: executing program 33 (id=405): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x80a, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x80a, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000a40)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x1010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = accept$unix(r2, &(0x7f0000000700), &(0x7f0000000100)=0x6e) connect$unix(r3, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x5d) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000a00)=[{{&(0x7f00000007c0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000300)=""/66, 0x42}], 0x1, &(0x7f0000000900)=""/172, 0xac}, 0x3}], 0x1, 0x60, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000780)='/sys/kernel/softlockup_count', 0x0, 0x0) (async) openat$sysfs(0xffffff9c, &(0x7f0000000780)='/sys/kernel/softlockup_count', 0x0, 0x0) unshare(0x24020400) socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) getpid() (async) getpid() syz_pidfd_open(r1, 0x0) (async) syz_pidfd_open(r1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000a80)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r7 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], 0x0) ioctl$RNDADDENTROPY(r7, 0x40085203, &(0x7f0000004180)=ANY=[]) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0)={0x4, 0x0, [{0x0, 0xbe, &(0x7f00000001c0)=""/190}, {0x25000, 0x5e, &(0x7f0000000040)=""/94}, {0x8000000, 0x4e, &(0x7f0000000440)=""/78}, {0x10000, 0xfb, &(0x7f00000004c0)=""/251}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) 1m2.857289166s ago: executing program 34 (id=411): syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000800)=@abs, &(0x7f0000000140)=0x6e) connect$unix(r0, &(0x7f0000000880)=@file={0x0, './file0/file0\x00'}, 0x6e) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f0000048040)=""/102392, 0xffffff19) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002a00)=ANY=[@ANYBLOB="140000002800290200000000000000000a000000d15ed236d04c6069069ba34b65752c8d6f36c1e58b79acd37656f6c9bfd381d9c7214c1920f60d03a765c85e855822a6ed3c348c5231059a18b3c1e1aa649adeadb9dafbd9d80063b71d63837ac7a5a81972818336d3fae669ed21c88ede64eb292981578298d9459366ec654bfd4f2a"], 0x14}}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0xf) r3 = socket(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x5, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r3, &(0x7f0000000480)={0xa, 0x0, 0x471, @remote}, 0x20) sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0xc1) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000028c0)=[{{&(0x7f0000000080)=@tipc=@id, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000000480)}, 0x2}, {{&(0x7f00000004c0)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000900)=""/216, 0xd8}, {&(0x7f0000000400)=""/70, 0x46}, {&(0x7f0000000680)=""/233, 0xe9}, {&(0x7f0000000780)=""/14, 0xe}, {&(0x7f0000000240)=""/235, 0xeb}, {&(0x7f0000000a00)=""/188, 0xbc}, {&(0x7f0000000b00)=""/84, 0x54}, {&(0x7f0000000b80)=""/184, 0xb8}], 0x8, &(0x7f00000016c0)=""/4096, 0x1000}, 0xfffffee2}, {{&(0x7f0000000380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000d40)=""/70, 0x46}, {&(0x7f00000007c0)=""/63, 0x3f}, {&(0x7f0000000dc0)=""/157, 0x9d}, {&(0x7f0000000e80)=""/120, 0x78}, {&(0x7f0000000f80)=""/178, 0xb2}, {&(0x7f0000001040)=""/110, 0x6e}], 0x6}, 0x4}, {{&(0x7f0000001140)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000f00)=[{&(0x7f00000011c0)=""/226, 0xe2}], 0x1, &(0x7f00000012c0)=""/100, 0x64}, 0x8001}, {{&(0x7f0000001340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000002780), 0x0, &(0x7f0000000540)=""/142, 0x8e}, 0x4}], 0x5, 0x2, 0x0) 1m2.701065917s ago: executing program 35 (id=410): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000300000900030073797a320000000090000000060a010400000000000000000100000008000b400000000068000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000300001800c000100626974776973650020000280080003400000000208000140000000bc0800024000000012040007800900010073797a30"], 0x104}}, 0x0) 1m2.61522814s ago: executing program 36 (id=409): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00220f0000001600000b450200214b073c686875846c87487a3fdafb324b2bada6cd1fb17975b48c0c859bc2d05688f7f66bb71fcacb824ec8237f38fe24ddc7e29734298d70aac18fc5843b6e3aa6f46b206f110f6b20f9621719c9a3f91aaf"], 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) keyctl$reject(0x13, 0x0, 0x400, 0x8000000000000204, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r5, 0x0, 0x0}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000200)='bbr', 0x3) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0xb4040) ioctl$HIDIOCGUSAGE(r7, 0xc018480b, &(0x7f00000001c0)={0x3, 0x200, 0x38000, 0xffffffff, 0x3f04, 0x22}) 7.647466649s ago: executing program 8 (id=563): r0 = socket$kcm(0x21, 0x2, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000200)="2d4cdd59cdce65311e388fe30731", 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_extract_tcp_res$synack(&(0x7f00000002c0)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x163, &(0x7f0000000440)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@void, {0x8100, 0x7, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x15, 0x4, 0x0, 0x12, 0x151, 0x64, 0x0, 0x6, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@noop, @timestamp={0x44, 0x8, 0xf, 0x0, 0x8, [0x6]}, @cipso={0x86, 0x36, 0x2, [{0x5, 0x11, "edf8d918c07c8e59397eef584c679a"}, {0x0, 0x11, "69c7883b28cd15f34f25e532268af3"}, {0x2, 0xe, "0187aff76dafe3065c1e22be"}]}]}}, {{0x4e23, 0x4e20, 0x41424344, r2, 0x0, 0x0, 0xb, 0x40, 0x1, 0x0, 0xfffa, {[@exp_fastopen={0xfe, 0x12, 0xf989, "9c647f47151b39fc377222414e5f"}, @sack_perm={0x4, 0x2}, @sack_perm={0x4, 0x2}, @nop, @nop]}}, {"0edd8ae78c3518d965d83fa4c0e4eae156e809b7b0dd2d597f3366f3d4cc0e413ad42b5d43a41309578eae3a85a0abc52e475254c1a0aed4f59285861cfe842bb54963ac2819e3e6ffb1ddaca1a790b82218cd34bf083d89352d095ec94dbdc07d8857d9adba651a89041c7b2356fbadb92681d488929ab01daa1bee58baa5ac7d882ae4da97be704ee9fbdd40dd95a45b7a30446857396972e4bce04bb55cd42c1be409a64a12873463aef21f361c4e90be68cf391054d7f94225308ddebcab0567877ce30b5684a32641e89124626a0d"}}}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = getpid() sendmmsg$unix(r3, &(0x7f000000b7c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c, 0x1, 0x2, {r4}}}], 0x20, 0x4000}}], 0x2, 0x20000000) quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000180)=@nullb, 0xffffffffffffffff, &(0x7f0000000240)) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x24, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x404f444) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) r7 = syz_open_dev$vim2m(&(0x7f0000000180), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, 0x0) socket(0x1d, 0x2, 0x6) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/wireless\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r8, &(0x7f0000004380)={0x2020}, 0x2020) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, 0x0, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000080)='highspeed', 0x9) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 6.783000555s ago: executing program 7 (id=567): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000002cc0)=ANY=[@ANYBLOB="12010000450900206505030088fb010203010902120001000060000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) syz_open_dev$MSR(&(0x7f0000002c00), 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x24, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x20800, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x40, 0xe, 0x15, {0x15, 0x21, "1033d25311ef5a1a2e3b76387ea93464ed7ecc"}}, &(0x7f0000000040)={0x0, 0x3, 0x10, @string={0x10, 0x3, "00226d6d36cb2aaba920c90e170a"}}}, &(0x7f0000000240)={0x2c, &(0x7f00000000c0)={0x0, 0x7, 0x59, "1884b54d8eb6b5851d80dc4774cc107cf2c19f4d499ab0a0f40bd4788664f4545dfd9c2afaa314c3a999b8a1ff8fb0874ebc00086d379eb5091b3a129898e17196df7bdbe75d1871fc2b1dcb52e44fdb30d24aec5b75adede8"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0xe6}, &(0x7f00000001c0)={0xc0, 0x5, 0x1, "de"}, &(0x7f0000000200)={0x40, 0x5, 0x4, "2797d166"}}) r1 = socket$key(0xf, 0x3, 0x2) shutdown(r1, 0x1) 6.612279654s ago: executing program 6 (id=569): r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f00000001c0)={'sit0\x00', 0x93}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004041}, 0x18) 6.547144548s ago: executing program 6 (id=571): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x10001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000180)={0x3d, 0x1, 0x2, "d569e861dd2f1aeb7ee8580825f457a0c04bde100000000096ba216b1e8ac19e", 0x32344d59}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0xd, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000400)={0x3, @vbi={0xc167, 0x10000, 0x6, 0x42303159, [0xffff, 0x8000], [0xffffff01, 0x2], 0x108}}) r2 = syz_open_dev$audion(&(0x7f0000000100), 0x5, 0x230080) ioctl$FBIO_WAITFORVSYNC(r2, 0x40044620, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000dc0)={0x0, 0x0, 0x0, r5}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r7, 0x11, 0x65, &(0x7f0000000040)=0x7fffffff, 0x4) sendmmsg$inet6(r7, &(0x7f0000003a80)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x4, @mcast2, 0x3}, 0x1c, 0x0}}], 0x1, 0x20000000) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x2) 6.400851849s ago: executing program 6 (id=573): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'geneve1\x00'}}, 0x1e) close(r1) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002d80)=@newtaction={0xe0, 0x30, 0x48b, 0x0, 0x0, {}, [{0xcc, 0x1, [@m_skbedit={0xc8, 0x2, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x7824, 0x20000000, 0x2, 0x5}}]}, {0x73, 0x6, "5b0c1dfec1a0cc4af4820c1151f48b0a0b9d279abc898ec21160c2fdc125386820bd3f9c9baf985b11016c1851db73a12325f6993b851c2d8425d3dd49d62db3a323175a0e96b9e477eff4d86b5cb07bbafaa32ef1126f6d3bdebaafd6bb87b6b586b50c3f80a2e3e271dde8a363a3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe0}}, 0x20000050) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000e, 0x8010, r2, 0x9a8f2000) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f00000003c0)={0x2, &(0x7f0000000080)=[{0x50, 0x1, 0x2, 0x9}, {0x6, 0x0, 0x3, 0x365}]}) write$ppp(r4, &(0x7f0000000400)='k\'', 0x2) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0x5, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000000c0)="59a545bb307f6add7d240b8ce648d698ea6ec7bc548d3df1b2c8c1f35fa118c0e750949f0c86420d25996491600519a2a02b093432450237ae32d92f61dc958e918d2851a5ce5830", 0x48}, {&(0x7f00000005c0)="0ddac662741d164b82a13849db54b9602406e4c17036da8d9e7502a1084b0f6b8a33490a267cee8b3c164e2dbbacc19dfc227809a575e8785ffc6bb0fa8b24e221e76dfaef73a142bea3e2b5f8e35d2bb7e886a0565b3a195f6038cef315a0466ab6def5609680c5e3bc65eeecf8cf653d23c70928e7cb70aeac94c33ac2f98962120a2d56698b808b217aceb0b4bf93f61301e8aff0da67744dcab8f137", 0x9e}, {&(0x7f0000000680)="64b0a31565a019d071e9265e576ae62a49b5d8a280737a5157862b36e2336bcc807023d40a696e0aa62251c405624fa7be2c60093a7ea540aaea350c9e513e9b0806e784cd5473a2927a001d8ed258a43d044065efc4d6fa33c9d924e3a27c9bd0fc070db3cb04ae57a2772bf930827f78aaec66d43fe3a799efe43ff42c37b6b82f7d5eb299be01b152d067dbc04ee7593b2fcc0e98bab2619e763d821d19755fc878c421a8dce04294be11fc799ca8fc8d983f742661d0fc38c63b7701e1b3fbb427e5c07a76889540d7d2f592f484b2b2765594e3099abd2a4949cfe1b28508ca4259eb93d1ae2c664a205b016894b75fcf63bf32e013bd0b3329989e11f7d8e00a53143350de2d6b378f1d49f217ac4284bcbb01326bde9a18f0e5cd710e419217447f292c24790b2492f79a8dd935eff9b59746f21fe7f25e8cba1c62ebe815836ecb46d6e4c14b79b7a175252a7eb8d0a330ae89b2da15ca15beb9f74ae0d1ed3eddfb56f7a5b44820f6128b5c50694460b3f887352ec180f54f05bd69c84f42d7d49cfb3734d6e19707b61f9658d0ef65af4738ca87f35ff5013f51aeed72ddcff718cdedf863d624705c4c7a52f4570a514afa81ae9bc547779a87776e5e02b656bfa8020846131af5d725e898bc255ec04e19ec8b364823e1611d27cdbcd9f2441f2020e9eae5f60a6dddd5fe1170b74263f2cd1add60d5453e235001b14e430402f084f573041786c355f97d7937658e2e92b017fb5f4c2f64b3a9f6a1a21b3c80e4eed1cd8711c04b0a95d54abbff10f0d8d9b93c46e68b80fc9fe36246624117d1149ab6a2124c4d1375ecd1c5734932bb24af7a3cb0f3f8e189db21cd3643497ffa9c0074217fa5e441ffb9746db2584cae7ed1eb2a5362de0ccc733e4eca21032d58808685579fad7c9629597c557adca5226ae37fe84652289c4054bdb922eaca448810eec859e48eb22dd7cd93cd1200b6d187b9c7edf71d7759020ad656f9512426c6be77fa1a00215bc4d6f6396642f2ed8508472c8ede17151bd8f77e4fca3e5b9e23e32f497662fd88e88bfed282bf6028681324e33d9e77d591601e433562d9ef5d4fe2e620dd9af1c26965d2edbdbcaf7b18687751aea55ff7e005b627f1eece55df24e8665c6cf737ff461ba1181b1657f273d0126017a4a692e19f053f045da2e8f415b3feb3c60694212a8e1fcddf3ab05d44ec56f725daa69911e88fe6095afae6108ecc5fdd893775b55d95b4f159eef1b325d316fef497df7cc6baa364e2c5e13c13fcc529d594bc40ea1fb60d40a2b98a96911a9825c32b5f9ef09b2184f50e70d0e06de4856b42d5c4e00e9ecfa7bfa3c5609f6bb5c9eac5b8b5fef27ecb52494886bbbab5035d8b2713a41b16c43564e25063329972f1719a19d4848dbf67c3e7ae077aca1f3049d7be9e519f6334de36e940cc800058ebcae5958598c4609f3631f58127db5b9ff2d0272066f7d75a557ee05147811268db33d1d7a4533d510f0dd3031f46f9f1425e3912b0b6fd4bb522365e3b571f66048cfe1121c5d049cf23d0cfe60985aeb9e3a0daa3e00c4417654df6ca0885a6200224e566fe0657c1658d5cb308394a29e4ef3339beae8f06306e7b1a091c64872b1dc5b2a5f88788708e150ee470b83603008af063c280207642286aec65d0daa1c2c8598db52f7767568ee1577e4f0e192d4c147dd7974cf2aea327ceea3d71c554301d748b00a27fd40d1e0e1699438aa02945e1a95f16bcc40985d7068be4a8992a72b571b1fa0ca9e087134f969304fd536dd3118f5f2803c434ec09fb8d60cf8c1af948c39063c10e604d1359a29b6d4f4c85bc7d168f3300577ed4acc41896e5986112d87bb143b64780e8555bc8b9d91fd0e11b682429abfb9e96c4309dfd5df5e0ff74aeb2ab1eea3a29a12665b4662545a80de746f96130054dba1093d2fd2986c72c22b256105f30da7263ddb19ffdce75570567c5843cb8bf613b17b244135ea714ec7228a67a6124be7ca24274b826750be7a01534a8ef8376f73a61a272e479767fd33c48bd8c17f4f0a880fc79b6d1a2856e8c30357a6967dff4238846fa8e6563abd037db9d8448d326b7ad1e0f28b1d4b97dc9a5fd8bdc53e6ee83ee271ebd5bdbe5999e4117f1ab9ab5d9cc2c3f074315a4cea3b372ee872f2681497b44e270cd0c883076c2cddb9cfe9f34d99d0d2430cf76d84a13cc0ea08dec1b9fcf0403d14ae903b509fcc06833acaacec5f528dfe3dd2938f2836e2f4d46988693c9ca709ff3ca2be76d83ceef9cc12abe365def7f2b1f4225f487bbea4c2b85e5de3fddc8203d8ba43f8b37b439f401e01cab02049d927299b5a534b555f33b1f8465d86ae4cb35a901c0752a63fa10a95c3723d163fd99c8294a7bb36339896f442eb76ffc3e2e9e3d59981405827f2990dbcdca0750423238f6148de7fa7f0d930812ca3f386ec4924cce285d47f48a9596d226eb41f8010b74f0eb69521796b12162cf8bad16b6c1e05470dfe7b0a83e349e044f860412f2926d630e67825bb76e9aa3852621028108b57b3aff201390d41e7134571bb433922fcc1c13bfda3f8cf93ded84eee45656afc9d3cdc5fee5c1c8dbcfc00a41eea45993a6621b80c001d1c06af179cf85876b83bb1aaa15f3f1ce34d4e0d32675ce525b099609ee4f991efedf79339cc790f50b37d2e703fb6e73dd1f9e11376958211d4d9a07d95ccdeeb94b1e7ac7f57e5e0ed426d45788a98e84658361fad99fbdd21f43fa84570fe241bb9d273bee8efee1d9a9e297578b28189f018ce9afd02c953e8b49ac4b4331dd2a382bb59615a7b48bb670d613facd9707f7f7d0ffaaff123bbbee097608be78a14c66b67eadb665a490c8227d513797787b308caefb41f6e3c36026271271e6c1dc9df8029b136adcc53924e025fbcad8ff9089e2752b3dc2358d85773ca5564dd1db63875949ddeb2b3c71aff90ac2e3eb10cb383d4532b8fbec835ac1a6617a11d8fcec885a335fd2a123c3d5a5a0631e636757b5adedcc375e8c85c1fe57654ba2a10211cdf18fe33317127f6995d62a8cffaa681ee126d6a1ec07cdb95ce1d5a80ef7d28bcec71b5ffc013cb1cce28410fd3524cba5a75ab99e21f949814f916acf7da88e5a944a0130e2478f0d61fec31bc3aa794b0c5e8ec1d6355348552aa6cc74e785658a3f6b66574d47cf6f9cd1e15acbcbfda7c6d6f43cec65b2623da1f99074d4620d4c644b4099d921753b149001f961199e2dff0d5134c033d6a61a6ee64610477963ecf101f5dd7837040fd5ef1728fa645bd2cd2cf2f03b0346c423d5b19e8885b7bf221c4963909845d2e6d77845b33002c1ed9311c99670f9a1d1ac8cae241a69a32ab7f8c5f6e77e23ca8f5aeb689be22d59925d782ac68521e56f0c30e8eced4aef61a43232af80ffd53431dee9054fbe73a30cbd561ac50ee2565a32f2afecd586adcfa8891cec1696b351653230e39b1ffdd3fc1cbd5c549685a1a887bf526fad90f02d1d6123b8e09dcf0398f09d3950ca01456e87949a8babb8b6b01ef4628a30491373e767620f249605d2ff9119c834460793eeea63c65fb9da9f237c1d5e9eca70cb35c3377b984e47f4a508d1bc5b22db95bf9c76031e00da3ac381c45799794d6034628fc93f12db4ed2c20f383433d307b062b9a5eb97cbb4b1d532e5c8fa89f732fb17c4cdd4c4da4473c0362bdac204dcfefc50948eddea43f8253e3ecaa94111a0854fcdee8291e87a8fca3d28df87d285762665a2c4c72dd4060d7f8d28502a560e035b9b4af31d7a73c12b06fa80048ae4872f7e0eca1441c06d6caecea0422a90461f9b8deaed9b6f30475431239af5e8031f0d84c504d2065ff5a2735f3a21c4ab4b338f75be1edff56f8f48936804c4baf26ac1937c24b44bd033971b98139345f4c99add86bfe16957eaa6f44890765ae1b065cdee5f8d1a04e512ea18ffe899eb2b5e81f9dd1a3f57e74cbf5ca092b42426a9db3fa639b303ea303c9483b73aad974be79952439b8cecc2a38bda2f04b0c477658e3e2966867c0342a482431471b694727a87c96ed12dacec34d4f4a838a236d226a8be01d005fc373ff18efd4af5a87c1743067673fffd7fe72c0f6c96dd35fbf5d46c91c01aa1168be15b663d8e9d292300a133006fc82c97ee79e3b4f924cfabdd9d8f0b8f9792c5d771bbff75323ecdd62f537f35443e99e4fc3dd2cec0a75490c626280d4b19a1bebf775d0a7620a7312b98bc6dcd3ae55b0634b87c1b7c62080e4099a2c1f71368daf9ebd053c7e33a9758588d8ab1e0a6f6e9a026bb49c95c468f380073c3e15f2729ab46e295b08a7f8aee0001cf466d956d3b94b21ed4698bab2f8505aee31480308428bf9a7978f703b54958b7d12f0e63f2644869dcfbdc73e5a05faa0aedea549ab69777f7a7065dad8d10f12d0849a3cd4b56b7ee98e6683942f8e2af6c508cf68097dbdaf7651923ab9abbd4b6f5adfe24306bfddc9b9ff0c06031e277f64e7e712b07be040ca1c593225178458747fd08424efe56e6692e8a67fb27aeb247b879d368426c13c869cd937391c2280549dc5f7537f2156e1d287756df1e33c92b555fa821e35b034f07941d9e18e4251a22d2a4f4ae3fab26e5bdf791f35e61cf027039f6d6ca3a479322c682f7ef0977fa9b6808a3a80407272dccdc71ed16852d11a8e5388c8ee369230db8ca624637300be768b7e9742d61603bf00a19e0a0ca0a703db35ffa3a77186eb2a7cf729a46bb3bbe2ec4c7374c64f1cb6474022c8d41cf29bd64335d8b94a83a8147cb05ff8385d684c20b42bf7728f015a235ce2ccd509509d73d5085025582422174b39f5cd78214ab690454e82f3f8cf0a2454a0cc9bd4178288cb263eb0c117ba613f6d7b946e76b921dc9d6c6d4bc5af8fd917abdd6c8c4b897db769cd01c56ebeaee4bfa11016de3cd6505d36520bf72fbf25977b93e69886e1ba75e82ef8ac9a66051547d8e751b1ef01d20fffa7e21b4b84bf6a596e23f1aef1155e60bd7135af3d11b169465d5c9df26e79df3b3ee7ea938683e38f7273a4b66c6b0d8afc0e445d46538ab5fb49c2f83c4cb7841c051ad50b318944fa6e1fa9c4596f73ed15dbc466d794cf4f89cfc6f2cd68da1ba43ee0d9e7656871c54c1fd4598c14e1529e8d70a2b704c9d33d04f760862abf212e8953310550fb00b438fbd958683ddc9814ba1ba20b407c35533e56a0372a69c733ad54f791860b25c0cb95e4eefe3068db4e8c59ab45dc8ec5c6ed8f665165daa6dce604d4418202ebb03cf1e5f274454496955bc30fefb90bd260820a94d6c82c925f2761b918f6821d9895acdbe962b5d575354dd5948ce4c89d5783e093bd1680f598a2f3bae4042966687417b29f607494c8b0010ca82ea380499528f8c2e5b1487295dcfa35c52b8a9c5f9fdcbde1f705a54a61550b1a146e5e4a1da1544eef64994afaebc304d21ddaf9d5ce224514561583f768b9ff22d39f5580dd3cdf63d4344863c8cbfc2f123c59619b5de5616421e5a8e44828ed9b785d7d4423a90bc42b7fe300757de07406ba9e2231ecffdeaf9c93d126c7f80c7ae6723a8d4f28955191aef7fdcc3e68d39750dec58aef80314404fac174dd71ed3501c70475cdda52acd12e95d9497ef20c26a16e0304353235887d89756ac1971532e5412a4de722cfa8183fde540682a945dedc8594b399ee01fe57797606679fd1308a2f51b98cc7d6a0bacb9599b511f51ff138baff7c41c4d0484", 0x1000}, {&(0x7f00000003c0)="c07f3f0da4b4dd11114497eb401fbb555a843d7ed7286c15f50d2a35a82fb8d86937f5ef2555d9aec4dc1430f710243570ae473b66996b84beafce9fda514c1c5bd151142d1af6db43985a659cf5d8381109b3", 0x53}, {&(0x7f0000001680)="0cd1a8194f1bb3a65fe5d6b415c3ee46954e3a4695d9aa483fb26745bb1a16a0c968a26c9a5f8a1baa7f822bfa9073d1e7913aa0ab38aeb215770680c4e0ef416cd54912b7ebee099a732ef4b9fbf9f6254e8b309511aa5de5986de87a044752884df2c701e338d39df99a13d552ac13409863d364ca6754ec329c4f1db09fb45efe2733bdd6b7e35043dbd031d0279ea8c552fe927cf231f5ae565d04a1bc8bbbb54c294556681a925000687cfc6ce2ecfc3cdc3d7bbf88d635b3e8c493560d0999420f3f28a86628dbfea8f0bf48fd1be330869c935682b912a628ce214c7ca92e8c1d25e37d81e5", 0xe9}, {&(0x7f0000001780)="ea19a476f2f5b3fa5e0fe171b7d35dd7fa481c776682dc5362dc50d5f9718ba196e15db971362e78bcac6d6b5025dfd380f4e25ea1e9f54f96467bf02e2453415aff080ce95e185029cbacacf95a1dde0e1fe1b83340d1b02b4b2adbec0bd0145492d62d84b05b859e76addf2c5f0a47a997520f3943a9197417", 0x7a}], 0x6, &(0x7f0000001880), 0x0, 0x40000}}, {{&(0x7f00000018c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000002c80)=[{&(0x7f0000001940)="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", 0x1000}, {&(0x7f0000002940)="a0245c0c0ae4fbd4962a982a429ec1badffa36239d223e23c02edd728a34ff5a1a160a375d1fd620fc69e3fb1f574d17e37a9c098faf117a0b5a98936ab673517f9e7bde1880f5a2cb2d5df076f0714202a8dd59ce03979e2ba7fa4d191c41196d265c76859bf404e57c60fc712ee185a211", 0x72}, {&(0x7f00000029c0)="d450639e54b34f4c7cd916ea28d2b261507cc1f0e3706683e780343f440d0c96821a03730d7917365ca695f38b8cb14c7701294c9cdf0538aea0bd08505b90204583589a4ec5c792ef1f7366a3f0eaf63421b84145d26225ef9de5e2cf8030912379da4427b134b9b543eabc60da2c664839bf04209f34a79ccc6af9cbd87b633cb00088a797f4148f408a00e72dae99af93288763ca71eb95f16ab886b1", 0x9e}, {&(0x7f0000002a80)="1f7d86462ffab174e468214ff2d42cdb752e72d57f417b931f5ac2ae42af0490108acff60779dd77eb26e22b90c92f28d6b0cf9bec676fa0365bb2", 0x3b}, {&(0x7f0000002ac0)="969971ac1c2568e074d927f823f753c3ce97866ebc660c15c1f0b1f374323fa49178500296c2a2d8b222e5125836a3875bb41959cc48e8953d0e2eaa16965aaa86dbccf3505dc1485997c7299740ba343a4009fb884c0732368bb175739a2538fffe9366e37eef10e0ff7022d01c50346d29285970571d4370ace9d932427dde341ba26db6ad202f0fe357bc446fdefa9f817f6bf6952063c1df15b2de5167eae7ac347ad0d4b6453d6bd6e64913d4b4dd1648df1ac10570bd6332b1b91bdffc5087044b4428f89fa56a65cf1d6f65fdd6ab48bdbe2da62fe5164d989ce1352e702bede13c7813225da99df547e17030b7f105eea25340dd31", 0xf9}, {&(0x7f0000002bc0)="86b7676f9a08be939f42bf675c7513d6800eafb5dd916d08d6b44faa7e359307f2591bf0e50dbb469c99d99649c14bcc0a7e699dc468984d6b7abec130ff3ac98df53f32366d2e25b465db534cb05fae499174722b7b7e9721ae4e3738cadacad275998837d1df35a3839a204f78a41f9ccf10abd4f40278e3447b613fc1841333a657ee09bd8dc6ae23a769c049c2d40205f5de2eb0dd93502714a31790179601527b747cb984f37970ac57bf6775083d6a02", 0xb3}], 0x6, 0x0, 0x0, 0x8000}}], 0x2, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) r9 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r9, 0xc0045002, &(0x7f00000001c0)) 6.036966935s ago: executing program 8 (id=575): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) (async) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r3 = dup(r2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c9042, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r6) (async) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, 0x0, 0x0) pipe(&(0x7f00000001c0)) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r10 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r10, r9, 0x32) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r10, r9, 0x32) fgetxattr(r3, &(0x7f00000000c0)=@known='trusted.overlay.opaque\x00', &(0x7f0000000100)=""/14, 0xe) (async) fgetxattr(r3, &(0x7f00000000c0)=@known='trusted.overlay.opaque\x00', &(0x7f0000000100)=""/14, 0xe) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf2503000000080002000000000008000100", @ANYRES32=0x0, @ANYBLOB="d1d6d88034e87a11f99a15410ca540a636e638f0ed7ff1a728cc7f3477366c10fe5a89027462fe70ade92ee2d9de"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x8040) (async) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf2503000000080002000000000008000100", @ANYRES32=0x0, @ANYBLOB="d1d6d88034e87a11f99a15410ca540a636e638f0ed7ff1a728cc7f3477366c10fe5a89027462fe70ade92ee2d9de"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x8040) 5.689158671s ago: executing program 8 (id=576): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fstatfs(r1, 0x0) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) read$hidraw(r2, 0x0, 0x0) r3 = open(0x0, 0x2, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000084}, 0x40000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000500)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_GUEST_MEMFD(r7, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 5.415630481s ago: executing program 6 (id=577): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) read$msr(r0, &(0x7f00000000c0)=""/221, 0xdd) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x4, 0x4, 0xfffe}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', &(0x7f0000000200)={0x101002, 0x71, 0x4}, 0x18) (async) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', &(0x7f0000000200)={0x101002, 0x71, 0x4}, 0x18) mkdirat(r2, &(0x7f00000002c0)='./file1/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x10c5408, 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x10c5408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) setuid(0xee01) ioctl$FS_IOC_RESVSP(r3, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0x3}) (async) ioctl$FS_IOC_RESVSP(r3, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0x3}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) 5.16587044s ago: executing program 6 (id=578): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=@getchain={0x2c, 0x11, 0x839, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0x6}, {0x3, 0x7}, {0x2, 0x3}}, [{0x8, 0xb, 0xd3}]}, 0x2c}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000640), 0x1, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000680)={0x1f, 0x0, 0x0}) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 4.846489914s ago: executing program 5 (id=580): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'mpc624\x00', [0x8001, 0x3, 0x3, 0x5, 0x2000067, 0x7, 0x8, 0x5, 0x80000000, 0x3, 0xfffffffe, 0x1, 0x820, 0xa4c, 0x106, 0xfffffeff, 0x979d, 0x2, 0xf7fffbe7, 0x3b, 0x89, 0x2, 0xf2b, 0x4, 0xfffffbff, 0x804, 0x38, 0xc, 0x0, 0x410000, 0xfffffff8]}) ioctl$COMEDI_DEVINFO(r1, 0x80b06401, &(0x7f0000000180)) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() r3 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r3, &(0x7f0000000540), 0x0, 0x40000121, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xd) ioctl$FIONREAD(r4, 0x541b, 0xfffffffffffffffe) recvmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/181, 0xb5}], 0x1}, 0x8021) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) utime(&(0x7f0000000000)='.\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) unshare(0x40000000) syz_clone3(&(0x7f0000000240)={0x4c000000, 0x0, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4.786068443s ago: executing program 9 (id=581): connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x6, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfffffd9d) sendfile(0xffffffffffffffff, r0, 0x0, 0x8000002b) 4.72279489s ago: executing program 6 (id=582): r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f00000001c0)={'sit0\x00', 0x93}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004041}, 0x18) 3.802591287s ago: executing program 37 (id=582): r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f00000001c0)={'sit0\x00', 0x93}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004041}, 0x18) 3.799213499s ago: executing program 7 (id=584): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = open(0x0, 0x1f98fe, 0x11) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f00000000c0)=0x6e40) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat(r2, &(0x7f0000000100)='./file0\x00', 0x0, 0x22) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000180)=r3) r4 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000180)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f0000000300)='L\t\xdf\x92[\r|>\xeeZ:\xd5\x80\xe7\x1b*\x82\xb6z\xe8\xb4\xf6\x80\xb9\xa9RQ\a\x8e\x80\xd0W\x94\t\t\xc8f\x8e\x8b#&)A9\xdb\x05\a\xe8\xbe\xee@\xbc\xdb\x1d\"\xf6\x05\xac\xef\xdb\x18\xaa\x9a\xcb8q\xf63\x18d\xfbO\x8c\xf4\xc6\x14\xb4\xba_9\xcb\x059&\xda\xdf\x8d\x1d\xfe\xf6\xf3Ux\xc6w\x90\xd7\x882\xf0LO\x0f\xd4@KE\x9e\xecF\x9c\x1b\xa2\xbe\nL,\xcc\xfe}Q\xdc\xe9t\x9c\x89Z\xed\x12\xb6\xd1qj\x04\xae\x97\xe0\xbd\x88K\x9c\xb5SR\x18(\x90-]\xb6h\xb1\x11\x01\xa1\xc7\xc7\xd9;Q\xd4\xc7&Q\"\xad\xf7(\x80\x0f\xde>U\x98\x83H>\xd5\xb1Y\xb6T\xb4\xcf\xd2\x01\x1a\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='user\x00N\xbd]\x86\x8a\xa3\x7f\x00', &(0x7f0000000080)='\x00', 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xc) listen(r5, 0x3) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRESOCT=r5], 0x16) 3.731826925s ago: executing program 9 (id=585): r0 = socket$kcm(0x10, 0x2, 0x4) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x3, 0x0, [{0x80000008, 0x6, 0x4, 0xfefd, 0x80000001, 0x8, 0x3000000}, {0x0, 0x10000000, 0x1, 0x5, 0x3, 0x5, 0x2}, {0x7, 0x4, 0x6, 0xdbb, 0x9, 0x7a1, 0x1}]}) recvmmsg(r0, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40000000, 0x0) socket$kcm(0x10, 0x2, 0x4) (async) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x3, 0x0, [{0x80000008, 0x6, 0x4, 0xfefd, 0x80000001, 0x8, 0x3000000}, {0x0, 0x10000000, 0x1, 0x5, 0x3, 0x5, 0x2}, {0x7, 0x4, 0x6, 0xdbb, 0x9, 0x7a1, 0x1}]}) (async) recvmmsg(r0, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40000000, 0x0) (async) 3.4172084s ago: executing program 8 (id=586): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x1000000000006}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000280)=0x7) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x10) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f0000000380)={'broute\x00', 0x0, 0x0, 0x0, [0x200401, 0x1dc, 0x7fffffffffffffff, 0x44, 0xfff, 0x5e5], 0x1, 0x0, 0x0, [{}]}, 0x88) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r2, 0xff, 0x24, &(0x7f0000000680)="f0c46000ed618af3b5353868199868f3a15b69f7a1f52b63adc4849bd37751a0222b4886a7f2e1bf0d8ddf051440fa6be76a7cc6033656a985f0d13a43fde7cee02958b6b7133d", 0x47) syz_emit_ethernet(0x6a, &(0x7f0000000540)=ANY=[@ANYRES64=r0, @ANYBLOB="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", @ANYRESDEC=r3, @ANYRES64=r6, @ANYRES32], 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r7}, 0x18) connect$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @null}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 3.071509391s ago: executing program 5 (id=587): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r0 = getpid() sched_setscheduler(r0, 0x3, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) dup(0xffffffffffffffff) connect$netlink(0xffffffffffffffff, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x4, 0x104, 0x4}, 0x50) gettid() r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) close(r3) (async) recvmsg(r4, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) (rerun: 32) r5 = getpgid(0x0) r6 = syz_pidfd_open(r5, 0x0) pidfd_send_signal(r6, 0x11, 0x0, 0x4) (async) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='xfs\x00', 0x0, &(0x7f0000000400)) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) 3.028495234s ago: executing program 8 (id=588): socket$packet(0x11, 0x2, 0x300) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x20c) (async) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x85862) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000280)={r2, 0x1000, {0x0, 0x0, 0x0, 0x32, 0x4000000000001001, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0x3, 0x6]}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, 0x0, 0x0, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) (async) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r6, &(0x7f00000008c0)={0x2020}, 0x2020) (async) r7 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000100)={0x35, 0x0, 0x0, 0x400}, 0x10) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1800000076000d0b00400000000001000300000000000000b6abacdb818ce42a0a7a858f3ba537c1d00b408438e43c7aeaeffae9b7ba0d988fb51bb18ecd51c417046640b5d64df400ef3fc2000004134207"], 0x18}}, 0x0) (async) recvmmsg(r7, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) pread64(0xffffffffffffffff, 0x0, 0x0, 0x401) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.745541557s ago: executing program 7 (id=589): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x378, 0x380, 0x380, 0xffffffff, 0x380, 0xd8, 0x428, 0x428, 0xffffffff, 0x428, 0x428, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @remote, 0xff, 0x0, 'hsr0\x00', 'ipvlan1\x00', {0xff}, {}, 0x33, 0x2, 0x14}, 0x0, 0xa0, 0xd8, 0x48, {}, [@common=@ah={{0x30}, {[0x1, 0x3]}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x67, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x6, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x87, @gre_key=0x8}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_batadv\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr=0x8000000, @rand_addr=0x64010101, @gre_key=0xe, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vim2m(0x0, 0x1fb, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000003000000dbaaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff670000000800000018290000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005e92f4ff0000000056080000010000008500000007000000b70000000000200095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, 0x0, 0x118) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) 2.681293759s ago: executing program 9 (id=590): r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000040)=0x1) close_range(r0, r0, 0x2) close_range(r0, r0, 0x2) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r1, 0x2, &(0x7f0000000080)) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f00000000c0)={0x99b, 0x2, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f000000e780)) sendto$l2tp6(0xffffffffffffffff, &(0x7f000000e7c0)="5daf3b951900043e3d71023e6e08a6887bd0cef7116261087132afa58d50844779d984739c41bd903a08d393e6cda48d6444fe35db01d970d5f530bdab0ae60075de76fc74e278d017f317e17e7467eccac657937f2813a8061c6d91eba697ca7897c7e96f1d7c69cb95a80127577c642962b0c329c4f83f729ef15e6fbee6e1fe98a01a40b9d0a334fee9d238e5eac7f7fe188016d071340278b99ab8caa3", 0x9f, 0x40000c4, 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f000000e880)) syz_open_procfs$namespace(r1, &(0x7f000000e8c0)='ns/time\x00') ustat(0x1, &(0x7f000000e900)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f000000e940)='/proc/cgroups\x00', 0x0, 0x0) fcntl$getownex(r2, 0x10, &(0x7f000000e980)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f000000e9c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_INFO(r4, 0x80386433, &(0x7f000000ea00)=""/48) openat$fb0(0xffffffffffffff9c, &(0x7f000000ea40), 0x400000, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f000000ea80)={0x1, 0x1, 0x5, 0xff, 0x5, 0x33d, 0xfe9, 0x6}, &(0x7f000000eac0)={0x2, 0x7, 0x6, 0x0, 0x3b95, 0x5, 0x6, 0x7fff}, &(0x7f000000eb00)={0x17a, 0xbe, 0x0, 0x8, 0xffffffffffffffff, 0xf8c7, 0x10, 0x1}, &(0x7f000000eb40)={0x77359400}, &(0x7f000000ebc0)={&(0x7f000000eb80)={[0x392]}, 0x8}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f000000ec40), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f000000ec80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f000000ed40)={&(0x7f000000ec00)={0x10, 0x0, 0x0, 0x20089008}, 0xc, &(0x7f000000ed00)={&(0x7f000000ecc0)={0x1c, r6, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", ""]}, 0x1c}}, 0x4000800) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f000000ed80)={r5, 0xffffffffffffffff, 0x17, 0xf}) getsockopt$CAN_RAW_RECV_OWN_MSGS(r8, 0x65, 0x4, &(0x7f000000edc0), &(0x7f000000ee00)=0x4) mount$bind(&(0x7f000000ee40)='./file0\x00', &(0x7f000000ee80)='./file0\x00', &(0x7f000000eec0), 0x4001, 0x0) tgkill(r3, r3, 0x1b) r9 = syz_genetlink_get_family_id$batadv(&(0x7f000000ef40), r2) sendmsg$BATADV_CMD_GET_ORIGINATORS(r8, &(0x7f000000f040)={&(0x7f000000ef00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f000000f000)={&(0x7f000000ef80)={0x4c, r9, 0x410, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fffffff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x17e}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000011) getpriority(0x2, r1) ioctl$BLKGETSIZE(r8, 0x1260, &(0x7f000000f080)) 2.217683581s ago: executing program 9 (id=591): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x40100, 0x0) ioctl$FBIOBLANK(r1, 0x4611, 0x4) chdir(&(0x7f0000000340)='./file0\x00') r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1000004, 0x0) readlinkat(r2, &(0x7f0000000040)='./file0/file1\x00', &(0x7f0000000080)=""/25, 0x19) getdents(r2, &(0x7f0000000140)=""/146, 0x92) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x2003) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_REAPURB(r5, 0x4008550c, 0x0) r6 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) set_mempolicy(0x2, &(0x7f00000001c0)=0x6c76, 0x7) r7 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000027f287437261a06ccf0e70000402505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f0100000000000000000009058103ff13020c5a090582020002000000090503020002000000"], 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ecm(r7, &(0x7f0000000200)={0x14, &(0x7f0000000100)={0x20, 0x11, 0xab, {0xab, 0x8, "ae49eb04769319846ce6ed8eb56b5e7d878bedb269a0e26a2bb8e4ef0e3a57d3ef8d986799a75a5fd57948ebd0f8706878b5b23258ac9f2cedcd5e099f899868808c3339ad7a406f3e0113b2b6accebf814b108990f1cecd4697b0ce67a3dae61856a6ab55649b9196d1887bfa907bcf726efe889c5324fbf5d5fb22b1f729f2f41c76f7a0b8ac230cec66504700e74273683da0b6f0f3d358f62214d58383bf808256ed20044d0b88"}}, &(0x7f0000000440)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x1c, &(0x7f0000000480)={0x40, 0xe, 0x6d, "3897bdab843d2d623c59fc002a164272c07c82c3306b30246faaebfaac0552ffdc0c1c5ab92751e7a0109ed99e05ec2a651590a02dc39060e11f1db7c89697e63868d4dd7db5c37a85756002b9a69f1f19f81e3783f81682554934ffc68cc3ba3f9901d90e6458475c8fc0b69d"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x9c}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xa3}}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) 1.677500576s ago: executing program 7 (id=592): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sched_setscheduler(r0, 0x0, &(0x7f00000000c0)=0xfffffffb) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000070aa2cb99bcf8bce7c4abb835afc00000000000000"], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r3, 0x0, 0x8800) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000005c0)='rxrpc_call\x00', r5, 0x0, 0x3fc}, 0x18) r6 = socket$kcm(0x21, 0x2, 0x2) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) sendmsg$unix(r7, &(0x7f0000000540)={&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000001600)="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", 0x1000}, {&(0x7f00000002c0)="b1e97bfe496095fc31dd1134fb98f8c7c705175fedeb24f2ef18993c6164480cf89b0a7404d6a911a7a347edba92354dba93490ebbd099fe9926257ba75d8522d37df4eac01da75a840dc46ccffcb96ed471c87b445b8dda273c9221ee4a40bd9fd60dcad4815e6b72d53cdb226e4391703850e61b1e885bce00c86c9cadacf691f9d8854aacb79f0c25202980a0bb31808dfd7ee6edcd80369f63422c54a97fcd5995e664f3087ea7624630329aa0fb89d99f", 0xb3}, {&(0x7f0000000380)="04e9a586d89a6dab73c609fcc032aea22e5183ee4486c15d16aac9f9b10143b2fcb8d657a8d52280b6d79be68d7eccd48715375dac1645ac1cf9cf0fe705c3a5098623dc2623340e97db00f190965859ea087b0a30f49e149388fe0890d617679b27781dadaefd0edcccbafc8afdae447ac0144ef22c66c4356b47a4e8a14c9da2f94167adceedc1e1bfe04aa628b853274a3771c84f4f6f9827d7c0d8fd723f095c0f851c9eb42ce1036d459d499768e3cbe2e4b2c657c0432fdecfdad00897ba20c660fc6ff7514c6567c70bd96d6111f381c6c2f362854886054d23bc8fa055c93fb24f61422bf47f5e5b6a", 0xed}, {&(0x7f0000000480)="d71bd030a259b5849d9b7bcaa3f26a271557e15ed0ffda84a7677dd62bc22c84082181edbabe65e8408acfe704b902ebc6edab1fcc692f76c95f040cd2809fe555c6e8526df94826f40269", 0x4b}, {&(0x7f0000000500)="5e715d4ab257040ddd279b1733e43e149086d440f4e9120f96e6cda1d1f9ff559dd6b542f10e4def62db6f866a3159807e0e87237e5f63", 0x37}, {&(0x7f0000000600)="c8d60103c302f9f3d45502405e26a0a2bf97a573d02bae603decd56d2d890d1484ce017517e781b41d0f5808f6dd25db23491152bf215e073b3a3a20b91837adf4a80885a58a35bb5bd3e37c20142aa0cd3ccae844dea7b1a962c40e4eb6022d9e06f8b0d6c7a90660aa1aa6416a51e8a81b04fa38e4d936fbdad7041f1e5efc99c8f127d6aff0b426fe58625191a4f6423c7289957873c893872d1e3af36e1d1517a0cebc47e1b5e0d7224a59576b12ded184a86c4f66ba8ad312cc494c09eba74aec028ab96d6d658c654c95994df1a6c15bfe3c852b67f004acf98737a7", 0xdf}, {&(0x7f0000002600)="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", 0x1000}, {&(0x7f00000007c0)="3d82fa853b6d0e8ecd133f265eb6cefede564a66ea238083bf0154fbc7910eca3d93aaad9be23477d812373a8dc5f54d9540f6fc13c1b367a1a2f94350f26598fc34e3b7b33520995849677be801d9e595d8478f7370c46f438ce3bfae5d8d8afa", 0x61}, {&(0x7f0000000840)="82cc7c96b71055d35caef1ffa4997d39e52daf4f133d543eeae05f3bfab2adef258a7cbe305a01c87dd3612ca52502c1eb4a41a3344f9f6fcb91d79d35002e52a460b680c55c429e4cfd140a90ccc0404a347ca5d50a29593cc9bf3cc6223bd331d096056b54c1b601759879163202584029069feffa063781f5d2e9746c8b7f309e7e7b2ee8a6fc3254f0ac8c36a39716ad9f4a1cd79239bb8c840cb6f9c989479a7deb65d87b2e37916522a57f8615c4e20abff07975926e47fb584e326f9cfa06beb8bebcbc5b27a30001", 0xcc}, {&(0x7f0000000940)="6e47bcb9d31fb4c84788a8abddd22d0723f1cd3045f4437b4fca07da09336f461edd50e8877c1faa6c6b63559fedea42a77fa0aec730d818e7ce53cae959e92400e1642e4c464816f792468d84815a389ce1b2f0bb0796fe7a9d6e1115f7b89d81c5e9ca93210ecc8099373fcbe73145b0c8bb729183ba5cc72bc429f99d19d385220cafd10ed9ca902d10e5df3cbd3e2d75bb0ee1a7174f9f0e710863c35a760f6a036d57c81aee1e3d3f22f9441d47a89c29c3bc7690391353", 0xba}], 0xa, 0x0, 0x0, 0x20000041}, 0x30008065) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000700), 0x10440, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000100100000100000014e200000000000010"], 0x28}, 0x0) 1.635190363s ago: executing program 5 (id=593): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x8, 0x2, {}, {0x5, 0x1, 0x1e, 0x9, 0x10, 0xc0, "51c732d4"}, 0x8a, 0x1, {}, 0x7ff}) 1.573073658s ago: executing program 5 (id=594): syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x2, 0x2, 0x20, 0xc, 0x77, 0xff}, {0x9, 0x5, 0x9, 0x3, 0x400, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) (async) r0 = getpgrp(0x0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x40000}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r1, &(0x7f0000000400), 0x73ab994) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x48102, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r3) (async, rerun: 64) truncate(&(0x7f0000000200)='./mnt\x00', 0x4) (rerun: 64) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) (async) socket(0xb, 0x3, 0x7) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xffffff64, 0xfffffffc}, 0x0) syz_open_dev$video(0x0, 0xa7, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) (async) writev(r6, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c10000000010000000000", 0x58}], 0x1) (async) socket$nl_xfrm(0x10, 0x3, 0x6) openat$binder_debug(0xffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r7, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 64) syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x800) (rerun: 64) 1.053794941s ago: executing program 5 (id=595): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x8, 0x2, {}, {0x5, 0x1, 0x1e, 0x9, 0x10, 0xc0, "51c732d4"}, 0x8a, 0x1, {}, 0x7ff}) (fail_nth: 2) 1.05287681s ago: executing program 9 (id=596): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, 0x0}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, &(0x7f0000000200)=""/197, 0x0, 0x0, 0x2, r5}, 0x38) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x9, 0x70bd29, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8000, 0x0, 0x2}, 0x2}}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, &(0x7f0000000540)) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0xa800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002cbd7000fedbdf25020000000c00030004000000000000000c000300010000000000000014000c00fe8000000000000000000000000000aa08000700", @ANYRES32, @ANYBLOB="080002000000000005000d002a000000080001"], 0x70}, 0x1, 0x0, 0x0, 0x8000050}, 0x40000) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000180)={0x0, 0xfffffffffffffffe, r7, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r6, 0xc01864b1, &(0x7f0000000280)={r10, 0x3, 0x9, 0x3, &(0x7f0000000340)=[{0x7, 0x6, 0x2b9, 0x4800}, {0x12, 0x4, 0xff, 0xd}, {0x7ff, 0x1, 0x10, 0x7}]}) r11 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r11, 0x5406, &(0x7f0000000000)={0x565, 0x0, 0x105, 0x3, 0xe, "5f730000a9003f00"}) ioctl$TIOCL_GETMOUSEREPORTING(r11, 0x5412, &(0x7f00000006c0)=0x5f) 620.929635ms ago: executing program 5 (id=597): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000002060108000000000000000000000000050005000a0000c4050001000700000005000400000000000900020073797a31000000000c0003"], 0x44}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3, 0x1}, 0x18, 0x3) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2, 0x80805, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) io_getevents(0x0, 0x6, 0x0, &(0x7f00000003c0), &(0x7f0000000180)) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) creat(&(0x7f00000001c0)='./file2\x00', 0x0) 620.235264ms ago: executing program 7 (id=598): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') name_to_handle_at(r0, &(0x7f0000000240)='./mnt\x00', &(0x7f00000003c0)=@reiserfs_2={0x8, 0x2, {0x2, 0xa}}, 0x0, 0x400) r1 = inotify_init() open$dir(&(0x7f0000000040)='./file0\x00', 0x80040, 0x182) userfaultfd(0x1) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x684}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) close_range(r1, 0xffffffffffffffff, 0x0) 218.955387ms ago: executing program 8 (id=599): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)={0x0, 0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="050f050008"]}) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = open(&(0x7f00000001c0)='./file1\x00', 0x14da7e, 0x20) ioprio_set$pid(0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) pwritev2(r3, &(0x7f0000000700)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0xfff, 0x9, 0x1f) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001b700)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001380)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "b575b51eac31aa351f0b22b5735b9d6398c6fe8882621ed46fbf11d5ef01b5d0f6b284dabe9a6a0aa0656f09d90852403445f6ce6e54cd0d84d1bf2ac3eb84fc0ce569c8f68611594d0b1a4047e4"}, 0x59) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r1, @ANYRES8], 0xa8}, 0x1, 0x0, 0x0, 0x44855}, 0x0) 56.779316ms ago: executing program 9 (id=600): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x8, &(0x7f0000000d80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f00000000c0), &(0x7f0000000300)=r0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000040)=0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), r5) ptrace(0x10, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) eventfd(0xc33) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x3000c003}, 0x80) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000020601040000000000000000000000000c00078008000640000000010500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e657400000000bffb2648c216955eadf2594f9a8b282112759761b8fbd6cd305a1b3bfee9337edf84371ab0475b8ec7c4416bd2d503c975aaed22"], 0x54}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x3, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x53, 0x3, 0x8, 0x2, 0xb, 0x0, 0x1}, 0x0, &(0x7f0000000280)={0x3fd, 0x252c, 0x2000000000000, 0x2, 0x0, 0x9, 0x466}, 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4b000100", @ANYRES16=r6, @ANYBLOB="016c1ea0782012db0004000400000005000500ad90000001002fee00000000b78c9baa67e00893b1dbc09490d93766000000000000000000000000000000f442b7287a83d09d31d1080150a876427c2e6961c370d08e98c2cc6a85181614065c786871c1eb530a7c9dbd45bc0cd1eee03af23f9f91e56a867ec14bc64aad25a648207bf3173de3f775f060be78fdc4edeeecdcf47f5c0941dd84a4fc347cb8198d8e1b383b64893163c65f3d8cbe8b1995bbb7151dcae1eabf2a64b4e70ef69665400781624f7b8218e6de117ec76d8a5e13bf09215562b1932c2c0c4a27efd700ee4cb3a01573a66220f473e83631673830"], 0x34}, 0x1, 0x0, 0x0, 0x882}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) ioctl$KVM_INTERRUPT(r4, 0x4004ae86, &(0x7f0000000240)=0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() 0s ago: executing program 7 (id=601): r0 = socket$inet6(0xa, 0x80002, 0x88) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff43}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000005640)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=""/10, 0xa}, {&(0x7f0000000440)=""/76, 0x4c}, {&(0x7f00000003c0)=""/3, 0x3}, {&(0x7f00000004c0)=""/238, 0xee}], 0x4, &(0x7f0000000680)=""/121, 0x79}, 0x2}, {{&(0x7f0000000700)=@caif, 0x80, &(0x7f0000000880)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/153, 0x99}], 0x2, &(0x7f00000008c0)=""/22, 0x16}, 0xfff}, {{&(0x7f0000000900)=@x25={0x9, @remote}, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000000980)=""/182, 0xb6}, {&(0x7f0000000a40)=""/212, 0xd4}, {&(0x7f0000001bc0)=""/201, 0xc9}, {&(0x7f0000001cc0)=""/253, 0xfd}, {&(0x7f0000001dc0)=""/127, 0x7f}, {&(0x7f0000001e40)=""/78, 0x4e}, {&(0x7f0000001ec0)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/56, 0x38}, {&(0x7f0000002ec0)=""/4096, 0x1000}, {&(0x7f0000003ec0)=""/221, 0xdd}], 0xa, &(0x7f0000004080)=""/145, 0x91}, 0x8}, {{&(0x7f0000004140)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000046c0)=[{&(0x7f00000041c0)=""/229, 0xe5}, {&(0x7f00000042c0)=""/37, 0x25}, {&(0x7f0000004300)=""/237, 0xed}, {&(0x7f0000004400)=""/192, 0xc0}, {&(0x7f00000044c0)=""/164, 0xa4}, {&(0x7f0000004580)=""/238, 0xee}, {&(0x7f0000004680)=""/13, 0xd}], 0x7, &(0x7f0000004740)=""/247, 0xf7}, 0x8}, {{&(0x7f0000004840)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}, 0x80, &(0x7f0000004a00), 0x0, &(0x7f0000004a40)=""/205, 0xcd}, 0x34}, {{0x0, 0x0, &(0x7f0000004c40)=[{&(0x7f0000004b40)=""/210, 0xd2}], 0x1}}, {{&(0x7f0000004d80)=@ethernet={0x0, @random}, 0x80, &(0x7f0000004e80)=[{&(0x7f0000004e00)=""/96, 0x60}], 0x1}, 0x4}, {{&(0x7f0000004ec0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000005180)=[{&(0x7f0000004f40)=""/149, 0x95}, {&(0x7f0000005000)=""/80, 0x50}, {&(0x7f0000005080)=""/245, 0xf5}], 0x3}, 0x80}, {{0x0, 0x0, &(0x7f0000005580), 0x0, &(0x7f0000005600)=""/44, 0x2c}, 0x3}], 0x9, 0x2, 0x0) r6 = fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f00000000c0)=':})!+(/}$:\\\x00', &(0x7f0000000300)="f97ae64169c696f79de75b84b18fcd7b292d89b760dd4c80fcb6ab11ed8c57b945b10b225177697a3d6a58a9b0fed73b1f99527b79b70e6b22e1a3062ab5a70a7791830171b8baf0c5d0765fa4c185dfa31fdc5524665a6ae09daa8b67bc6f98b411926684583194318d7430a3ba9fe9cde5d26235bc8ae80679acb8a6a538adb2328d52fa90341c74158e66ea8abeec9f94be9ebac8cfb4db02f0bc0a0a68f0f98e830d07d9ef1c27afe17b2f5fe9fd45289e0d", 0xb4) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socket$packet(0x11, 0x0, 0x300) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000005c0)={{}, {r9, r10+60000000}}, &(0x7f0000000600)) sendmsg$inet(r8, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="1414aaac14140000000b001400000000000000000000000700000007038b010000000000"], 0x38}, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r12 = accept$alg(r11, 0x0, 0x0) sendmmsg$alg(r12, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x4924924924923d5, 0x8004) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) kernel console output (not intermixed with test programs): 5951] usb 5-1: SerialNumber: syz [ 136.596862][ T5888] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 136.637610][ T5951] kobil_sct 5-1:2.45: KOBIL USB smart card terminal converter detected [ 136.709992][ T5951] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 136.776542][ T5888] usb 1-1: Using ep0 maxpacket: 16 [ 136.784935][ T5888] usb 1-1: config index 0 descriptor too short (expected 1051, got 27) [ 136.808907][ T30] audit: type=1400 audit(1768512933.770:366): avc: denied { map } for pid=6992 comm="syz.3.289" path="socket:[11994]" dev="sockfs" ino=11994 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 136.844731][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 136.884378][ T5951] usb 5-1: USB disconnect, device number 12 [ 136.893759][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 136.923347][ T30] audit: type=1400 audit(1768512933.790:367): avc: denied { read } for pid=6992 comm="syz.3.289" path="socket:[11994]" dev="sockfs" ino=11994 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 136.971051][ T5951] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 137.031563][ T5888] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 137.048081][ T30] audit: type=1400 audit(1768512933.920:368): avc: denied { write } for pid=6992 comm="syz.3.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 137.061045][ T5951] kobil_sct 5-1:2.45: device disconnected [ 137.479228][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.531858][ T5888] usb 1-1: Product: syz [ 137.536059][ T5888] usb 1-1: Manufacturer: syz [ 137.566147][ T5888] usb 1-1: SerialNumber: syz [ 137.576735][ T7003] netlink: 12 bytes leftover after parsing attributes in process `syz.1.288'. [ 137.619221][ T5888] usb 1-1: config 0 descriptor?? [ 137.923758][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.286'. [ 137.959676][ T5888] usb 1-1: USB disconnect, device number 7 [ 138.302415][ T7025] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 138.619288][ T5888] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 139.477343][ T5888] usb 1-1: Using ep0 maxpacket: 16 [ 139.517267][ T5888] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 139.525941][ T5888] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.567249][ T30] audit: type=1400 audit(1768512936.530:369): avc: denied { connect } for pid=7031 comm="syz.2.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 139.630693][ T5888] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 139.693193][ T5888] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 139.722850][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.747666][ T5888] usb 1-1: Product: syz [ 139.756488][ T5888] usb 1-1: Manufacturer: syz [ 139.761086][ T5888] usb 1-1: SerialNumber: syz [ 139.788856][ T7039] input: syz1 as /devices/virtual/input/input6 [ 139.823595][ T30] audit: type=1400 audit(1768512936.780:370): avc: denied { append } for pid=7035 comm="syz.4.299" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 139.824834][ T7041] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 139.947061][ T7043] Cannot find del_set index 0 as target [ 140.171949][ T30] audit: type=1400 audit(1768512936.810:371): avc: denied { write } for pid=7037 comm="syz.1.300" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 140.232200][ T5888] usb 1-1: 0:2 : does not exist [ 140.259750][ T30] audit: type=1400 audit(1768512937.220:372): avc: denied { name_bind } for pid=7035 comm="syz.4.299" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 140.326543][ T30] audit: type=1400 audit(1768512937.270:373): avc: denied { read } for pid=7035 comm="syz.4.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 140.633343][ T5888] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 140.652184][ T7052] IPv6: Can't replace route, no match found [ 141.068863][ T5888] usb 1-1: USB disconnect, device number 8 [ 141.320270][ T6984] udevd[6984]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.346637][ T977] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 141.770203][ T7072] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 142.212095][ T977] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.17 [ 142.531252][ T977] usb 4-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 142.550882][ T977] usb 4-1: Product: syz [ 142.555061][ T977] usb 4-1: Manufacturer: syz [ 142.605826][ T977] usb 4-1: SerialNumber: syz [ 142.643197][ T977] usb 4-1: config 0 descriptor?? [ 142.665117][ T977] ch341 4-1:0.0: ch341-uart converter detected [ 142.943870][ T977] usb 4-1: failed to receive control message: -71 [ 142.964760][ T977] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 143.014140][ T7085] netlink: 64 bytes leftover after parsing attributes in process `syz.0.310'. [ 143.024284][ T977] usb 4-1: USB disconnect, device number 8 [ 143.051007][ T977] ch341 4-1:0.0: device disconnected [ 143.109086][ T7086] macvtap1: entered allmulticast mode [ 143.123854][ T7086] macsec0: entered allmulticast mode [ 143.202893][ T7086] veth1_macvtap: entered allmulticast mode [ 143.252397][ T7086] macsec0: left allmulticast mode [ 143.258434][ T7086] veth1_macvtap: left allmulticast mode [ 143.258734][ T7089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.310'. [ 144.253962][ T30] audit: type=1400 audit(1768512941.210:374): avc: denied { mount } for pid=7094 comm="syz.3.313" name="/" dev="ramfs" ino=13577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 144.480023][ T7104] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 144.646624][ T977] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 145.314559][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 145.396511][ T977] usb 1-1: Using ep0 maxpacket: 16 [ 145.405457][ T977] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 145.413859][ T977] usb 1-1: config 0 has no interface number 0 [ 145.423507][ T977] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 145.434685][ T977] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 145.452911][ T977] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 145.462597][ T977] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 145.472413][ T977] usb 1-1: Product: syz [ 145.476876][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 145.490125][ T9] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 145.498987][ T977] usb 1-1: SerialNumber: syz [ 145.505024][ T977] usb 1-1: config 0 descriptor?? [ 145.511017][ T9] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 145.522354][ T9] usb 5-1: config 0 has no interface number 0 [ 145.530135][ T977] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 145.537110][ T9] usb 5-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 145.555282][ T977] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input7 [ 145.567122][ T9] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 145.585707][ T9] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 145.597089][ T9] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 26159, setting to 1024 [ 145.654933][ T30] audit: type=1400 audit(1768512942.600:375): avc: denied { map } for pid=7113 comm="syz.3.319" path="/newroot/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 145.791509][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 145.799905][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 145.807167][ T977] usb 1-1: USB disconnect, device number 9 [ 145.813024][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 145.813047][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 145.845616][ T9] usb 5-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 145.864267][ T9] usb 5-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 145.887958][ T9] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 145.897408][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.911801][ T977] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 146.067311][ T9] usb 5-1: config 0 descriptor?? [ 147.086943][ T7104] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 147.094601][ T7104] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 147.175853][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 147.199606][ T9] usb 5-1: USB disconnect, device number 13 [ 147.249995][ T7125] bridge0: port 3(team0) entered blocking state [ 147.256821][ T7125] bridge0: port 3(team0) entered disabled state [ 147.321692][ T5830] udevd[5830]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.126/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.424495][ T7125] team0: entered allmulticast mode [ 147.446705][ T7125] team_slave_0: entered allmulticast mode [ 147.501965][ T7125] team_slave_1: entered allmulticast mode [ 147.515845][ T7128] Cannot find del_set index 0 as target [ 147.778083][ T7125] team0: entered promiscuous mode [ 147.798307][ T7125] team_slave_0: entered promiscuous mode [ 147.804121][ T7125] team_slave_1: entered promiscuous mode [ 147.837407][ T7125] bridge0: port 3(team0) entered blocking state [ 147.844005][ T7125] bridge0: port 3(team0) entered forwarding state [ 148.914782][ T7147] netlink: 4512 bytes leftover after parsing attributes in process `syz.3.327'. [ 148.936680][ T7147] netlink: 252 bytes leftover after parsing attributes in process `syz.3.327'. [ 148.945628][ T7147] netlink: 24 bytes leftover after parsing attributes in process `syz.3.327'. [ 149.357768][ T6624] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 149.525471][ T30] audit: type=1400 audit(1768512946.480:376): avc: denied { mounton } for pid=7150 comm="syz.1.329" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 149.562350][ T6624] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.590506][ T6624] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 149.604746][ T6624] usb 4-1: config 1 has no interface number 1 [ 149.615937][ T6624] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 149.630162][ T30] audit: type=1400 audit(1768512946.600:377): avc: denied { mount } for pid=7150 comm="syz.1.329" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 149.653759][ T6624] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 149.666234][ T6624] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 149.677505][ T6624] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.699137][ T6624] usb 4-1: Product: syz [ 149.705313][ T6624] usb 4-1: Manufacturer: syz [ 149.722924][ T6624] usb 4-1: SerialNumber: syz [ 149.832119][ T1154] nci: nci_rx_work: unknown MT 0x4 [ 149.842552][ T7173] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 150.053548][ T6624] usb 4-1: USB disconnect, device number 9 [ 151.422941][ T7130] udevd[7130]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 151.979325][ T7196] netlink: 31 bytes leftover after parsing attributes in process `syz.3.339'. [ 152.097128][ T30] audit: type=1400 audit(1768512949.060:378): avc: denied { connect } for pid=7207 comm="syz.4.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 152.158049][ T30] audit: type=1400 audit(1768512949.120:379): avc: denied { listen } for pid=7209 comm="syz.3.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 152.181261][ T30] audit: type=1400 audit(1768512949.140:380): avc: denied { accept } for pid=7209 comm="syz.3.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 152.491713][ T7214] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 153.422822][ T7223] netlink: 40 bytes leftover after parsing attributes in process `syz.3.345'. [ 153.767935][ T7233] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 153.862686][ T7233] mkiss: ax0: crc mode is auto. [ 155.350277][ T30] audit: type=1400 audit(1768512952.310:381): avc: denied { shutdown } for pid=7246 comm="syz.0.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 155.438029][ T30] audit: type=1400 audit(1768512952.380:382): avc: denied { getopt } for pid=7246 comm="syz.0.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 155.447075][ T7249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.351'. [ 155.517001][ T30] audit: type=1400 audit(1768512952.480:383): avc: denied { setopt } for pid=7252 comm="syz.2.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 155.834755][ T30] audit: type=1400 audit(1768512952.790:384): avc: denied { read } for pid=7266 comm="syz.3.357" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 155.906941][ T30] audit: type=1400 audit(1768512952.830:385): avc: denied { open } for pid=7266 comm="syz.3.357" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 156.066539][ T7112] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 156.202906][ T7271] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 156.209449][ T7271] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 156.218276][ T7271] vhci_hcd vhci_hcd.0: Device attached [ 156.246503][ T7112] usb 3-1: Using ep0 maxpacket: 32 [ 156.253012][ T7112] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.265029][ T7112] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.280215][ T7112] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 156.281596][ T7271] bridge_slave_0: left allmulticast mode [ 156.299070][ T7271] bridge_slave_0: left promiscuous mode [ 156.304662][ T7112] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 156.315897][ T7271] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.316481][ T7112] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.337852][ T7112] usb 3-1: config 0 descriptor?? [ 156.357478][ T7271] bridge_slave_1: left allmulticast mode [ 156.363228][ T7271] bridge_slave_1: left promiscuous mode [ 156.369014][ T5930] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 156.383322][ T7271] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.397147][ T7271] bond0: (slave bond_slave_0): Releasing backup interface [ 156.413858][ T7271] bond0: (slave bond_slave_1): Releasing backup interface [ 156.445059][ T7271] team0: Port device team_slave_0 removed [ 156.464298][ T7271] team0: Port device team_slave_1 removed [ 156.472289][ T7271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.480977][ T7271] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.488351][ T7030] usb 40-1: SetAddress Request (2) to port 0 [ 156.494526][ T7030] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 156.505003][ T7271] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.513689][ T7271] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.525299][ T7271] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 156.548693][ T5930] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 156.558080][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.590128][ T5930] usb 5-1: Product: syz [ 156.600997][ T5930] usb 5-1: Manufacturer: syz [ 156.613571][ T5930] usb 5-1: SerialNumber: syz [ 156.741421][ T5930] usb 5-1: config 0 descriptor?? [ 156.841212][ T7272] vhci_hcd: connection reset by peer [ 156.848717][ T13] vhci_hcd vhci_hcd.3: stop threads [ 156.858624][ T13] vhci_hcd vhci_hcd.3: release socket [ 156.864389][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 156.968747][ T5930] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 157.172402][ T7112] usbhid 3-1:0.0: can't add hid device: -71 [ 157.187802][ T7112] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 157.201187][ T7112] usb 3-1: USB disconnect, device number 11 [ 157.260212][ T7283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.360'. [ 157.363379][ T30] audit: type=1400 audit(1768512954.320:386): avc: denied { kexec_image_load } for pid=7279 comm="syz.1.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 159.354611][ T5930] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 159.423006][ T5930] usb 5-1: USB disconnect, device number 14 [ 160.433297][ T30] audit: type=1400 audit(1768512957.390:387): avc: denied { mount } for pid=7316 comm="syz.0.369" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 160.499830][ T7318] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 160.618575][ T7325] FAULT_INJECTION: forcing a failure. [ 160.618575][ T7325] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 160.632000][ T7325] CPU: 0 UID: 0 PID: 7325 Comm: syz.4.371 Not tainted syzkaller #0 PREEMPT(full) [ 160.632021][ T7325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 160.632031][ T7325] Call Trace: [ 160.632037][ T7325] [ 160.632044][ T7325] dump_stack_lvl+0x16c/0x1f0 [ 160.632071][ T7325] should_fail_ex+0x512/0x640 [ 160.632099][ T7325] should_fail_alloc_page+0xe7/0x130 [ 160.632123][ T7325] prepare_alloc_pages+0x401/0x670 [ 160.632149][ T7325] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 160.632169][ T7325] ? find_lock_lowest_rq+0x4d/0x760 [ 160.632192][ T7325] ? lock_acquire+0x179/0x330 [ 160.632210][ T7325] ? find_held_lock+0x2b/0x80 [ 160.632237][ T7325] ? mark_held_locks+0x49/0x80 [ 160.632256][ T7325] ? finish_task_switch.isra.0+0x207/0xbd0 [ 160.632281][ T7325] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 160.632302][ T7325] ? rcu_is_watching+0x12/0xc0 [ 160.632318][ T7325] ? trace_sched_exit_tp+0xd1/0x110 [ 160.632333][ T7325] ? __schedule+0x10b9/0x6150 [ 160.632362][ T7325] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 160.632382][ T7325] ? policy_nodemask+0xea/0x4e0 [ 160.632407][ T7325] alloc_pages_mpol+0x1fb/0x550 [ 160.632429][ T7325] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 160.632456][ T7325] ? irqentry_exit+0x1dd/0x8c0 [ 160.632477][ T7325] ? lockdep_hardirqs_on+0x7c/0x110 [ 160.632501][ T7325] folio_alloc_mpol_noprof+0x36/0x2f0 [ 160.632527][ T7325] vma_alloc_folio_noprof+0xed/0x1e0 [ 160.632551][ T7325] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 160.632577][ T7325] ? do_anonymous_page+0x63a/0x2190 [ 160.632606][ T7325] do_anonymous_page+0xc81/0x2190 [ 160.632640][ T7325] __handle_mm_fault+0x1ecf/0x2bb0 [ 160.632672][ T7325] ? __pfx___handle_mm_fault+0x10/0x10 [ 160.632697][ T7325] ? irqentry_exit+0x1dd/0x8c0 [ 160.632718][ T7325] ? lockdep_hardirqs_on+0x7c/0x110 [ 160.632739][ T7325] ? irqentry_exit+0x1dd/0x8c0 [ 160.632758][ T7325] ? rcu_is_watching+0x12/0xc0 [ 160.632784][ T7325] ? handle_mm_fault+0x2da/0xad0 [ 160.632807][ T7325] ? handle_mm_fault+0x2ee/0xad0 [ 160.632834][ T7325] handle_mm_fault+0x3fe/0xad0 [ 160.632863][ T7325] do_user_addr_fault+0x60c/0x1370 [ 160.632890][ T7325] ? rcu_is_watching+0x12/0xc0 [ 160.632908][ T7325] exc_page_fault+0x64/0xc0 [ 160.632930][ T7325] asm_exc_page_fault+0x26/0x30 [ 160.632945][ T7325] RIP: 0033:0x7facc805a65b [ 160.632958][ T7325] Code: 00 00 00 48 8d 3d dd 5a 19 00 48 89 c1 31 c0 e8 2b 39 ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 11 5b 19 00 48 89 34 24 48 8b 14 24 48 8b [ 160.632974][ T7325] RSP: 002b:00007facc63b2fb0 EFLAGS: 00010202 [ 160.632989][ T7325] RAX: 0000000000000000 RBX: 00007facc83e6180 RCX: 0000000000000000 [ 160.632999][ T7325] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000200000000180 [ 160.633008][ T7325] RBP: 00007facc63b4090 R08: 0000000000000000 R09: 0000000000000000 [ 160.633018][ T7325] R10: 0000200000000180 R11: 0000000000000000 R12: 0000000000000001 [ 160.633027][ T7325] R13: 00007facc83e6218 R14: 00007facc83e6180 R15: 00007ffdc7891f88 [ 160.633052][ T7325] [ 160.633291][ T7325] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 161.032051][ T30] audit: type=1400 audit(1768512957.990:388): avc: denied { ioctl } for pid=7321 comm="syz.2.372" path="socket:[14853]" dev="sockfs" ino=14853 ioctlcmd=0x943a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 161.573942][ T7030] usb 40-1: device descriptor read/8, error -110 [ 161.958762][ T30] audit: type=1400 audit(1768512958.920:389): avc: denied { getopt } for pid=7343 comm="syz.4.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 162.124993][ T7030] usb usb40-port1: attempt power cycle [ 162.222880][ T7356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.236510][ T7112] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 162.236782][ T7356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.254317][ T7357] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.381'. [ 162.303277][ T7361] netlink: 12 bytes leftover after parsing attributes in process `syz.4.384'. [ 162.416637][ T7112] usb 1-1: config 8 has an invalid interface number: 212 but max is 1 [ 162.445902][ T7112] usb 1-1: config 8 has an invalid interface number: 187 but max is 1 [ 162.454542][ T9] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 162.462559][ T7112] usb 1-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 162.471710][ T7366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.383'. [ 162.481280][ T7112] usb 1-1: config 8 has no interface number 0 [ 162.491711][ T7112] usb 1-1: config 8 has no interface number 1 [ 163.447885][ T977] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 163.455658][ T7112] usb 1-1: config 8 interface 212 altsetting 0 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 163.467171][ T7112] usb 1-1: config 8 interface 187 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 163.478069][ T7112] usb 1-1: config 8 interface 187 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 163.493101][ T7030] usb usb40-port1: unable to enumerate USB device [ 163.569681][ T9] usb 3-1: device descriptor read/64, error -71 [ 163.592613][ T7112] usb 1-1: config 8 interface 187 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 584 [ 163.602683][ T7112] usb 1-1: config 8 interface 187 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 163.613558][ T7112] usb 1-1: config 8 interface 187 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 163.625297][ T7112] usb 1-1: config 8 interface 187 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 163.636037][ T7112] usb 1-1: config 8 interface 187 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 163.648447][ T7112] usb 1-1: config 8 interface 187 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 163.659675][ T7112] usb 1-1: config 8 interface 187 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 163.673656][ T30] audit: type=1400 audit(1768512960.640:390): avc: denied { write } for pid=7358 comm="syz.1.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 163.696524][ T7369] gfs2: error -5 reading superblock [ 163.714114][ T7112] usb 1-1: config 8 interface 187 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 163.725248][ T977] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 163.796528][ T977] usb 4-1: config 0 interface 0 has no altsetting 0 [ 163.803306][ T7112] usb 1-1: config 8 interface 187 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 163.814359][ T7112] usb 1-1: config 8 interface 187 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 163.825144][ T7112] usb 1-1: config 8 interface 187 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 163.841243][ T977] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 163.850655][ T9] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 163.860053][ T977] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 163.869506][ T7112] usb 1-1: New USB device found, idVendor=19d2, idProduct=b4cb, bcdDevice=10.fb [ 163.878908][ T977] usb 4-1: Product: syz [ 163.883079][ T7112] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.891161][ T977] usb 4-1: Manufacturer: syz [ 163.896257][ T977] usb 4-1: SerialNumber: syz [ 163.909116][ T977] usb 4-1: config 0 descriptor?? [ 163.929581][ T977] usb 4-1: selecting invalid altsetting 0 [ 163.996512][ T9] usb 3-1: device descriptor read/64, error -71 [ 164.106040][ T7112] usb 1-1: string descriptor 0 read error: -71 [ 164.131974][ T9] usb usb3-port1: attempt power cycle [ 164.132210][ T30] audit: type=1400 audit(1768512961.090:391): avc: denied { getopt } for pid=7372 comm="syz.1.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 164.142058][ T7112] usb 1-1: bad CDC descriptors [ 164.168277][ T7373] overlay: Unknown parameter 'measure' [ 164.209026][ T7112] usb 1-1: USB disconnect, device number 10 [ 164.347719][ T7378] Cannot find del_set index 0 as target [ 164.348095][ T30] audit: type=1400 audit(1768512961.310:392): avc: denied { setattr } for pid=7370 comm="syz.4.386" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 164.405940][ T30] audit: type=1400 audit(1768512961.360:393): avc: denied { bind } for pid=7370 comm="syz.4.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 164.512358][ T9] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 164.557340][ T9] usb 3-1: device descriptor read/8, error -71 [ 164.868853][ T9] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 164.928983][ T9] usb 3-1: device descriptor read/8, error -71 [ 165.057856][ T9] usb usb3-port1: unable to enumerate USB device [ 165.401971][ T7030] usb 4-1: USB disconnect, device number 10 [ 165.606244][ T30] audit: type=1400 audit(1768512962.560:394): avc: denied { mount } for pid=7388 comm="syz.0.391" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 165.870639][ T30] audit: type=1400 audit(1768512962.560:395): avc: denied { watch } for pid=7388 comm="syz.0.391" path="/70/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 165.986032][ T30] audit: type=1400 audit(1768512962.790:396): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 166.068529][ T7403] netlink: 12 bytes leftover after parsing attributes in process `syz.4.395'. [ 167.644331][ T7427] Cannot find del_set index 0 as target [ 167.975820][ T7433] Bluetooth: MGMT ver 1.23 [ 168.111990][ T7434] netlink: 16 bytes leftover after parsing attributes in process `syz.0.402'. [ 168.149046][ T7433] autofs: Unknown parameter '' [ 168.159703][ T30] audit: type=1400 audit(1768512965.120:397): avc: denied { create } for pid=7432 comm="syz.2.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 168.189896][ T30] audit: type=1400 audit(1768512965.150:398): avc: denied { sys_admin } for pid=7432 comm="syz.2.401" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 168.276673][ T30] audit: type=1400 audit(1768512965.220:399): avc: denied { dac_read_search } for pid=7439 comm="syz.2.401" capability=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 169.062068][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 169.062084][ T30] audit: type=1400 audit(1768512966.020:401): avc: denied { accept } for pid=7449 comm="syz.1.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 169.306740][ T7112] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 169.456520][ T7112] usb 2-1: device descriptor read/64, error -71 [ 169.460660][ T7455] netlink: 'syz.2.407': attribute type 1 has an invalid length. [ 169.471499][ T7455] netlink: 96 bytes leftover after parsing attributes in process `syz.2.407'. [ 169.481025][ T7455] netlink: 1 bytes leftover after parsing attributes in process `syz.2.407'. [ 169.489809][ T7455] netlink: 658 bytes leftover after parsing attributes in process `syz.2.407'. [ 169.778252][ T7460] qnx4: unable to read the superblock [ 169.798751][ T30] audit: type=1400 audit(1768512966.750:402): avc: denied { read write } for pid=7454 comm="syz.2.407" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 170.118409][ T30] audit: type=1400 audit(1768512966.750:403): avc: denied { open } for pid=7454 comm="syz.2.407" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 170.143809][ T7453] Cannot find del_set index 0 as target [ 170.146777][ T7112] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 170.194019][ T30] audit: type=1400 audit(1768512966.750:404): avc: denied { ioctl } for pid=7454 comm="syz.2.407" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 170.348239][ T7112] usb 2-1: device descriptor read/64, error -71 [ 170.406529][ T5895] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 170.771280][ T7112] usb usb2-port1: attempt power cycle [ 171.288992][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.300697][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.325798][ T5895] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 171.397249][ T5895] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 171.407614][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.468564][ T7112] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 178.756572][ T7112] usb 2-1: device not accepting address 9, error -71 [ 193.911293][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 212.319709][ T5895] usb 5-1: config 0 descriptor?? [ 212.374180][ T5895] usb 5-1: can't set config #0, error -71 [ 212.463724][ T5895] usb 5-1: USB disconnect, device number 15 [ 213.032980][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 213.070688][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 213.117136][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 213.172314][ T5820] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 213.181569][ T52] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 213.189724][ T5820] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 213.209072][ T5833] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 213.217386][ T5833] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 213.226333][ T5820] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 213.236521][ T5833] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 213.243593][ T5833] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 213.261039][ T5820] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 213.269523][ T5820] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 213.277159][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 213.285377][ T5833] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 213.285421][ T52] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 213.292525][ T5820] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 213.319164][ T5820] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 213.328263][ T5820] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 213.338808][ T5820] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 213.650988][ T5820] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 213.671661][ T5823] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 213.697423][ T5823] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 213.697897][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 213.713317][ T5823] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 213.715299][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 213.721413][ T5823] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 213.729944][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 213.743250][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 213.766721][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 214.058910][ T6148] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.309150][ T6148] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.371299][ T6148] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.541031][ T30] audit: type=1400 audit(1768513011.500:405): avc: denied { module_request } for pid=7486 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 214.583751][ T6148] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.688842][ T7486] chnl_net:caif_netlink_parms(): no params data found [ 214.756405][ T7482] chnl_net:caif_netlink_parms(): no params data found [ 214.968481][ T7485] chnl_net:caif_netlink_parms(): no params data found [ 215.055611][ T7492] chnl_net:caif_netlink_parms(): no params data found [ 215.069156][ T7486] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.076263][ T7486] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.083599][ T7486] bridge_slave_0: entered allmulticast mode [ 215.091708][ T7486] bridge_slave_0: entered promiscuous mode [ 215.140491][ T7486] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.148131][ T7486] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.155915][ T7486] bridge_slave_1: entered allmulticast mode [ 215.163504][ T7486] bridge_slave_1: entered promiscuous mode [ 215.165563][ T30] audit: type=1400 audit(1768513012.130:406): avc: denied { read open } for pid=7520 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.196006][ T30] audit: type=1400 audit(1768513012.150:407): avc: denied { getattr } for pid=7520 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.240688][ T6148] bridge_slave_1: left allmulticast mode [ 215.256512][ T6148] bridge_slave_1: left promiscuous mode [ 215.262372][ T6148] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.276061][ T6148] bridge_slave_0: left allmulticast mode [ 215.284331][ T6148] bridge_slave_0: left promiscuous mode [ 215.290384][ T6148] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.306526][ T5820] Bluetooth: hci7: command tx timeout [ 215.387178][ T5820] Bluetooth: hci6: command tx timeout [ 215.407500][ T30] audit: type=1400 audit(1768513012.360:408): avc: denied { add_name } for pid=7519 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.446514][ T30] audit: type=1400 audit(1768513012.370:409): avc: denied { create } for pid=7519 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 215.471320][ T30] audit: type=1400 audit(1768513012.370:410): avc: denied { write } for pid=7519 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=3769 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 215.497645][ T30] audit: type=1400 audit(1768513012.370:411): avc: denied { append } for pid=7519 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=3769 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 215.546684][ T5820] Bluetooth: hci5: command tx timeout [ 215.560451][ T30] audit: type=1400 audit(1768513012.520:412): avc: denied { remove_name } for pid=7530 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=3769 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.587232][ T30] audit: type=1400 audit(1768513012.520:413): avc: denied { unlink } for pid=7530 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=3769 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 215.715428][ T6148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.726180][ T6148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.735923][ T6148] bond0 (unregistering): Released all slaves [ 215.772972][ T7491] chnl_net:caif_netlink_parms(): no params data found [ 215.786944][ T5820] Bluetooth: hci8: command tx timeout [ 215.823636][ T7486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.832921][ T7482] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.840261][ T7482] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.847567][ T7482] bridge_slave_0: entered allmulticast mode [ 215.854171][ T7482] bridge_slave_0: entered promiscuous mode [ 215.867620][ T5820] Bluetooth: hci1: command tx timeout [ 215.899430][ T7486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.908630][ T7482] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.915768][ T7482] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.924435][ T7482] bridge_slave_1: entered allmulticast mode [ 215.931227][ T7482] bridge_slave_1: entered promiscuous mode [ 215.962964][ T7485] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.971679][ T7485] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.978926][ T7485] bridge_slave_0: entered allmulticast mode [ 215.985618][ T7485] bridge_slave_0: entered promiscuous mode [ 216.023031][ T7482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.038362][ T7485] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.045449][ T7485] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.052934][ T7485] bridge_slave_1: entered allmulticast mode [ 216.059834][ T7485] bridge_slave_1: entered promiscuous mode [ 216.100813][ T7482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.128077][ T7486] team0: Port device team_slave_0 added [ 216.170952][ T7486] team0: Port device team_slave_1 added [ 216.206589][ T7492] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.213736][ T7492] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.221310][ T7492] bridge_slave_0: entered allmulticast mode [ 216.228141][ T7492] bridge_slave_0: entered promiscuous mode [ 216.245767][ T7485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.255626][ T7486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.262735][ T7486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.289134][ T7486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.301158][ T7491] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.308509][ T7491] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.315637][ T7491] bridge_slave_0: entered allmulticast mode [ 216.322975][ T7491] bridge_slave_0: entered promiscuous mode [ 216.331379][ T7482] team0: Port device team_slave_0 added [ 216.337272][ T7492] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.345367][ T7492] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.352952][ T7492] bridge_slave_1: entered allmulticast mode [ 216.359791][ T7492] bridge_slave_1: entered promiscuous mode [ 216.367859][ T7485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.378073][ T7486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.386024][ T7486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.412078][ T7486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.429755][ T7491] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.437576][ T7491] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.444800][ T7491] bridge_slave_1: entered allmulticast mode [ 216.452367][ T7491] bridge_slave_1: entered promiscuous mode [ 216.460426][ T7482] team0: Port device team_slave_1 added [ 216.518300][ T7492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.544678][ T7482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.551720][ T7482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.578073][ T7482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.591475][ T7492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.604066][ T6148] hsr_slave_0: left promiscuous mode [ 216.609882][ T6148] hsr_slave_1: left promiscuous mode [ 216.615494][ T6148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.622938][ T6148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.630703][ T6148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.638537][ T6148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.654060][ T6148] veth1_macvtap: left promiscuous mode [ 216.659924][ T6148] veth0_macvtap: left promiscuous mode [ 216.665512][ T6148] veth1_vlan: left promiscuous mode [ 216.671122][ T6148] veth0_vlan: left promiscuous mode [ 216.896279][ T6148] team0 (unregistering): Port device team_slave_1 removed [ 216.921091][ T6148] team0 (unregistering): Port device team_slave_0 removed [ 217.131860][ T7485] team0: Port device team_slave_0 added [ 217.140021][ T7491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.150368][ T7482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.157726][ T7482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.184582][ T7482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.219717][ T7485] team0: Port device team_slave_1 added [ 217.227003][ T7491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.281340][ T7492] team0: Port device team_slave_0 added [ 217.289700][ T7486] hsr_slave_0: entered promiscuous mode [ 217.295685][ T7486] hsr_slave_1: entered promiscuous mode [ 217.302601][ T7486] debugfs: 'hsr0' already exists in 'hsr' [ 217.309361][ T7486] Cannot create hsr debugfs directory [ 217.345630][ T7491] team0: Port device team_slave_0 added [ 217.360040][ T7492] team0: Port device team_slave_1 added [ 217.367747][ T7485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.374666][ T7485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.400794][ T5820] Bluetooth: hci7: command tx timeout [ 217.406917][ T7485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.419509][ T7491] team0: Port device team_slave_1 added [ 217.451531][ T7485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.460279][ T7485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.486706][ T5820] Bluetooth: hci6: command tx timeout [ 217.502706][ T7485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.541177][ T7482] hsr_slave_0: entered promiscuous mode [ 217.551965][ T7482] hsr_slave_1: entered promiscuous mode [ 217.564683][ T7482] debugfs: 'hsr0' already exists in 'hsr' [ 217.570702][ T7482] Cannot create hsr debugfs directory [ 217.622619][ T7492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.633610][ T7492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.638240][ T5820] Bluetooth: hci5: command tx timeout [ 217.668892][ T7492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.687079][ T7491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.694871][ T7491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.723254][ T7491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.763245][ T7492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.773260][ T7492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.800601][ T7492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.815791][ T7491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.826577][ T7491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.857969][ T7491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.868621][ T5820] Bluetooth: hci8: command tx timeout [ 217.946222][ T7485] hsr_slave_0: entered promiscuous mode [ 217.951902][ T5820] Bluetooth: hci1: command tx timeout [ 217.957897][ T7485] hsr_slave_1: entered promiscuous mode [ 217.964107][ T7485] debugfs: 'hsr0' already exists in 'hsr' [ 217.969943][ T7485] Cannot create hsr debugfs directory [ 218.030846][ T7491] hsr_slave_0: entered promiscuous mode [ 218.037659][ T7491] hsr_slave_1: entered promiscuous mode [ 218.043829][ T7491] debugfs: 'hsr0' already exists in 'hsr' [ 218.049726][ T7491] Cannot create hsr debugfs directory [ 218.078665][ T7492] hsr_slave_0: entered promiscuous mode [ 218.084673][ T7492] hsr_slave_1: entered promiscuous mode [ 218.091165][ T7492] debugfs: 'hsr0' already exists in 'hsr' [ 218.097755][ T7492] Cannot create hsr debugfs directory [ 218.192678][ T6148] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.282125][ T6148] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.376354][ T6148] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.514126][ T6148] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 218.527448][ T6148] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.555546][ T7486] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 218.576748][ T7486] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 218.601524][ T7486] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 218.634331][ T7486] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 218.799369][ T7482] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 218.811773][ T7482] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 218.821586][ T7482] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 218.831565][ T7482] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 218.852489][ T6148] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.928292][ T6148] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.945118][ T7485] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 218.957712][ T7485] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 218.968498][ T7485] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 218.995313][ T7485] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 219.026164][ T6148] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.089334][ T6148] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.154105][ T7492] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 219.178377][ T7492] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 219.208138][ T7492] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 219.242299][ T7492] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 219.264590][ T7486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.378678][ T7491] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 219.416076][ T7491] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 219.443637][ T7491] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 219.476790][ T5820] Bluetooth: hci7: command tx timeout [ 219.485912][ T6148] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.501942][ T7491] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 219.514197][ T7486] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.547925][ T5820] Bluetooth: hci6: command tx timeout [ 219.569330][ T6163] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.576528][ T6163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.605711][ T6148] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.621108][ T7482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.635904][ T6163] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.642996][ T6163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.685926][ T7482] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.718466][ T5820] Bluetooth: hci5: command tx timeout [ 219.739817][ T6148] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.758628][ T6163] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.765684][ T6163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.812700][ T6163] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.819855][ T6163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.842845][ T7485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.865951][ T6148] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.948835][ T5820] Bluetooth: hci8: command tx timeout [ 219.986200][ T7485] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.036678][ T5820] Bluetooth: hci1: command tx timeout [ 220.074986][ T6163] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.082152][ T6163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.154970][ T6163] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.162129][ T6163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.175186][ T7492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.235161][ T6148] bridge_slave_1: left allmulticast mode [ 220.257923][ T6148] bridge_slave_1: left promiscuous mode [ 220.264696][ T6148] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.276964][ T6148] bridge_slave_0: left allmulticast mode [ 220.282604][ T6148] bridge_slave_0: left promiscuous mode [ 220.292066][ T6148] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.305284][ T6148] bridge_slave_1: left allmulticast mode [ 220.312548][ T6148] bridge_slave_1: left promiscuous mode [ 220.319549][ T6148] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.328761][ T6148] bridge_slave_0: left allmulticast mode [ 220.334399][ T6148] bridge_slave_0: left promiscuous mode [ 220.340390][ T6148] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.564717][ T6148] bond0 (unregistering): Released all slaves [ 220.683868][ T6148] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 220.692237][ T6148] bridge1 (unregistering): left promiscuous mode [ 220.698607][ T6148] bridge1 (unregistering): left allmulticast mode [ 220.869913][ T6148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.881281][ T6148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.891827][ T6148] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 220.901216][ T6148] bond0 (unregistering): Released all slaves [ 220.958910][ T6148] bond1 (unregistering): Released all slaves [ 221.187193][ T6148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.197922][ T6148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.209091][ T6148] bond0 (unregistering): Released all slaves [ 221.238079][ T7492] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.295645][ T3935] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.302828][ T3935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.319538][ T7491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.357645][ T3935] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.364733][ T3935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.433615][ T7491] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.453219][ T7482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.474637][ T7486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.509852][ T7485] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 221.541915][ T3821] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.549111][ T3821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.571573][ T5820] Bluetooth: hci7: command tx timeout [ 221.627855][ T5820] Bluetooth: hci6: command tx timeout [ 221.663710][ T7492] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 221.712589][ T7492] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 221.786625][ T5820] Bluetooth: hci5: command tx timeout [ 221.797904][ T3935] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.805015][ T3935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.026662][ T5820] Bluetooth: hci8: command tx timeout [ 222.106760][ T5820] Bluetooth: hci1: command tx timeout [ 222.255388][ T7486] veth0_vlan: entered promiscuous mode [ 222.282021][ T7486] veth1_vlan: entered promiscuous mode [ 222.364547][ T7491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.380297][ T6148] hsr_slave_0: left promiscuous mode [ 222.386160][ T6148] hsr_slave_1: left promiscuous mode [ 222.392338][ T6148] batman_adv: batadv0: Interface deactivated: macsec1 [ 222.399320][ T6148] batman_adv: batadv0: Removing interface: macsec1 [ 222.410207][ T6148] hsr_slave_0: left promiscuous mode [ 222.416130][ T6148] hsr_slave_1: left promiscuous mode [ 222.424508][ T6148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.432073][ T6148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.439957][ T6148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.447389][ T6148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.457757][ T6148] hsr_slave_0: left promiscuous mode [ 222.463367][ T6148] hsr_slave_1: left promiscuous mode [ 222.469252][ T6148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.476759][ T6148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.484876][ T6148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.493090][ T6148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.515570][ T6148] batadv_slave_0: left promiscuous mode [ 222.521352][ T6148] veth1_macvtap: left promiscuous mode [ 222.527311][ T6148] veth0_macvtap: left promiscuous mode [ 222.532840][ T6148] veth1_vlan: left promiscuous mode [ 222.538369][ T6148] veth0_vlan: left promiscuous mode [ 222.544126][ T6148] veth1_macvtap: left promiscuous mode [ 222.549708][ T6148] veth0_macvtap: left promiscuous mode [ 222.555792][ T6148] veth1_macvtap: left promiscuous mode [ 222.561408][ T6148] veth0_macvtap: left promiscuous mode [ 222.567243][ T6148] veth1_vlan: left promiscuous mode [ 222.572531][ T6148] veth0_vlan: left promiscuous mode [ 223.269694][ T6148] team0 (unregistering): Port device team_slave_1 removed [ 223.293862][ T6148] team0 (unregistering): Port device team_slave_0 removed [ 223.687714][ T6148] team0 (unregistering): Port device team_slave_1 removed [ 223.717751][ T6148] team0 (unregistering): Port device team_slave_0 removed [ 223.946252][ T7485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.967937][ T7492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.032778][ T7486] veth0_macvtap: entered promiscuous mode [ 224.056154][ T7482] veth0_vlan: entered promiscuous mode [ 224.073775][ T7486] veth1_macvtap: entered promiscuous mode [ 224.135386][ T7482] veth1_vlan: entered promiscuous mode [ 224.154915][ T7486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.203980][ T7486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.274250][ T4412] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.295197][ T4412] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.328013][ T4412] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.349574][ T4412] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.399210][ T7482] veth0_macvtap: entered promiscuous mode [ 224.430654][ T7482] veth1_macvtap: entered promiscuous mode [ 224.538931][ T7491] veth0_vlan: entered promiscuous mode [ 224.563272][ T7482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.586932][ T3821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.596298][ T3821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.619372][ T7482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.651972][ T7491] veth1_vlan: entered promiscuous mode [ 224.677790][ T3821] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.697078][ T3821] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.721966][ T3821] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.741440][ T3821] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.778956][ T6163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.794190][ T6163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.845586][ T7485] veth0_vlan: entered promiscuous mode [ 224.866285][ T30] audit: type=1400 audit(1768513021.820:414): avc: denied { mounton } for pid=7486 comm="syz-executor" path="/root/syzkaller.5hDScO/syz-tmp" dev="sda1" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 224.912664][ T7485] veth1_vlan: entered promiscuous mode [ 224.937067][ T30] audit: type=1400 audit(1768513021.820:415): avc: denied { mounton } for pid=7486 comm="syz-executor" path="/root/syzkaller.5hDScO/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 225.015287][ T7491] veth0_macvtap: entered promiscuous mode [ 225.021480][ T30] audit: type=1400 audit(1768513021.820:416): avc: denied { mounton } for pid=7486 comm="syz-executor" path="/root/syzkaller.5hDScO/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=18830 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 225.034994][ T7491] veth1_macvtap: entered promiscuous mode [ 225.073562][ T30] audit: type=1400 audit(1768513021.880:417): avc: denied { mounton } for pid=7486 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 225.073985][ T7492] veth0_vlan: entered promiscuous mode [ 225.155753][ T7491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.172217][ T7491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.234705][ T7485] veth0_macvtap: entered promiscuous mode [ 225.269804][ T6157] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.278660][ T6157] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.289989][ T6157] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.305557][ T7485] veth1_macvtap: entered promiscuous mode [ 225.434577][ T7710] netlink: 4 bytes leftover after parsing attributes in process `syz.7.414'. [ 225.443585][ T7710] netlink: 4 bytes leftover after parsing attributes in process `syz.7.414'. [ 225.516832][ T6157] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.678361][ T6148] IPVS: stop unused estimator thread 0... [ 225.687096][ T7492] veth1_vlan: entered promiscuous mode [ 225.695692][ T6157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.709806][ T6157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.743251][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.751665][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.760277][ T7485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.796771][ T7485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.810917][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.818982][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.852608][ T1154] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.894126][ T1154] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.924500][ T6157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.945107][ T1154] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.957661][ T6157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.094337][ T1154] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.131635][ T7492] veth0_macvtap: entered promiscuous mode [ 226.167894][ T7492] veth1_macvtap: entered promiscuous mode [ 227.322715][ T3935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.354485][ T2940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.387674][ T3935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.407095][ T2940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.498666][ T7492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.562202][ T7492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.629486][ T2940] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.687589][ T2940] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.783490][ T2940] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.820153][ T2940] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.894419][ T7747] netlink: 'syz.6.413': attribute type 1 has an invalid length. [ 227.913793][ T7747] netlink: 'syz.6.413': attribute type 1 has an invalid length. [ 227.932118][ T7747] netlink: 'syz.6.413': attribute type 1 has an invalid length. [ 227.968196][ T24] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 228.073147][ T3821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.106332][ T3821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.163886][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.200667][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 228.239897][ T30] audit: type=1400 audit(1768513025.200:418): avc: denied { setopt } for pid=7759 comm="syz.5.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 228.272416][ T6162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.303336][ T6162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.316642][ T24] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 228.326924][ T7760] syzkaller0: entered promiscuous mode [ 228.332394][ T7760] syzkaller0: entered allmulticast mode [ 228.339497][ T30] audit: type=1400 audit(1768513025.250:419): avc: denied { execute_no_trans } for pid=7756 comm="syz.6.422" path="/1/file0" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 228.348942][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.518634][ T24] usb 9-1: config 0 descriptor?? [ 228.791570][ T30] audit: type=1400 audit(1768513025.750:420): avc: denied { create } for pid=7773 comm="syz.9.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 229.130846][ T30] audit: type=1400 audit(1768513025.780:421): avc: denied { bind } for pid=7773 comm="syz.9.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 229.176033][ T30] audit: type=1400 audit(1768513025.780:422): avc: denied { write } for pid=7773 comm="syz.9.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 229.221607][ T24] kovaplus 0003:1E7D:2D50.0004: item fetching failed at offset 2/5 [ 229.222108][ T24] kovaplus 0003:1E7D:2D50.0004: parse failed [ 229.222160][ T24] kovaplus 0003:1E7D:2D50.0004: probe with driver kovaplus failed with error -22 [ 229.432973][ T5895] usb 9-1: USB disconnect, device number 2 [ 229.631974][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880529fb400: rx timeout, send abort [ 229.641716][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880529f8400: rx timeout, send abort [ 229.657234][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880529fb400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 229.657769][ T30] audit: type=1400 audit(1768513026.610:423): avc: denied { read } for pid=5173 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 229.672424][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880529f8400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 231.545252][ T7816] trusted_key: encrypted_key: master key parameter 'us' is invalid [ 232.111817][ T7806] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 232.164744][ T7823] Cannot find del_set index 0 as target [ 232.248247][ T7818] netlink: 'syz.6.429': attribute type 1 has an invalid length. [ 232.273472][ T7818] netlink: 'syz.6.429': attribute type 2 has an invalid length. [ 233.755671][ T7855] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 234.055185][ T7836] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 234.072682][ T7112] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 234.224478][ T7876] netlink: 'syz.7.436': attribute type 10 has an invalid length. [ 234.233986][ T7873] netdevsim netdevsim7 : renamed from netdevsim0 (while UP) [ 234.241647][ T7112] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.276518][ T7112] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 234.338526][ T7112] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.350863][ T7879] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 234.450311][ T7112] usb 6-1: config 0 descriptor?? [ 234.465565][ T7112] pwc: Askey VC010 type 2 USB webcam detected. [ 234.561229][ T7876] team0: Port device dummy0 added [ 234.656550][ T5895] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 234.849692][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 234.849707][ T30] audit: type=1400 audit(1768513031.810:430): avc: denied { lock } for pid=7887 comm="syz.6.439" path="socket:[20490]" dev="sockfs" ino=20490 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 234.880406][ T7112] pwc: recv_control_msg error -32 req 02 val 2b00 [ 234.898300][ T7112] pwc: recv_control_msg error -32 req 02 val 2700 [ 234.910415][ T7112] pwc: recv_control_msg error -32 req 02 val 2c00 [ 234.919461][ T5895] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.954329][ T7892] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.966790][ T5895] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 234.975652][ T5895] usb 9-1: config 1 has no interface number 0 [ 234.995028][ T7112] pwc: recv_control_msg error -32 req 04 val 1000 [ 235.036001][ T7112] pwc: recv_control_msg error -32 req 04 val 1300 [ 235.100736][ T5895] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 235.116844][ T7899] netlink: 4 bytes leftover after parsing attributes in process `syz.6.439'. [ 235.143645][ T7112] pwc: recv_control_msg error -32 req 04 val 1400 [ 235.145316][ T7900] netlink: 'syz.9.440': attribute type 16 has an invalid length. [ 235.171083][ T7892] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.181752][ T7112] pwc: recv_control_msg error -32 req 02 val 2000 [ 235.194598][ T5895] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 235.356698][ T7112] pwc: recv_control_msg error -32 req 02 val 2100 [ 235.368603][ T7112] pwc: recv_control_msg error -32 req 04 val 1500 [ 235.375056][ T5895] usb 9-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 235.385620][ T7112] pwc: recv_control_msg error -32 req 02 val 2500 [ 235.397381][ T5895] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 235.407707][ T5895] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.415817][ T5895] usb 9-1: Product: syz [ 235.417639][ T7865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.422164][ T7112] pwc: recv_control_msg error -32 req 02 val 2400 [ 235.438849][ T5895] usb 9-1: Manufacturer: syz [ 235.443646][ T5895] usb 9-1: SerialNumber: syz [ 235.497209][ T7884] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 235.526894][ T7865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.576553][ T7112] pwc: recv_control_msg error -32 req 02 val 2600 [ 235.578083][ T7905] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7905 comm=syz.9.440 [ 235.610644][ T7112] pwc: recv_control_msg error -32 req 02 val 2900 [ 235.642637][ T7112] pwc: recv_control_msg error -32 req 02 val 2800 [ 235.682445][ T7112] pwc: recv_control_msg error -32 req 04 val 1100 [ 235.709951][ T7112] pwc: Registered as video103. [ 235.765661][ T7112] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input8 [ 235.831211][ T30] audit: type=1400 audit(1768513032.790:431): avc: denied { read } for pid=5176 comm="acpid" name="event4" dev="devtmpfs" ino=2961 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 235.885651][ T30] audit: type=1400 audit(1768513032.820:432): avc: denied { open } for pid=5176 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2961 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 235.946924][ T7884] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 235.996938][ T7112] usb 6-1: USB disconnect, device number 2 [ 236.010797][ T30] audit: type=1400 audit(1768513032.820:433): avc: denied { ioctl } for pid=5176 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2961 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 236.155302][ T5895] cdc_ncm 9-1:1.1: failed GET_NTB_PARAMETERS [ 236.189455][ T5895] cdc_ncm 9-1:1.1: bind() failure [ 236.222276][ T5895] usb 9-1: USB disconnect, device number 3 [ 236.303554][ T7916] netlink: 24 bytes leftover after parsing attributes in process `syz.7.441'. [ 236.322596][ T7917] Cannot find del_set index 0 as target [ 236.372061][ T30] audit: type=1400 audit(1768513033.330:434): avc: denied { append } for pid=7920 comm="syz.9.443" name="usbmon5" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 236.677257][ T5895] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 236.946485][ T5895] usb 8-1: Using ep0 maxpacket: 8 [ 236.965031][ T5895] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 237.014761][ T5895] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.083087][ T5895] usb 8-1: Product: syz [ 237.125291][ T5895] usb 8-1: Manufacturer: syz [ 237.157260][ T5895] usb 8-1: SerialNumber: syz [ 237.257302][ T5895] usb 8-1: config 0 descriptor?? [ 237.292053][ T5895] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 237.339055][ T5895] dvb-usb: bulk message failed: -22 (2/0) [ 237.345090][ T5895] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 237.378641][ T5895] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 237.414921][ T5895] usb 8-1: media controller created [ 237.421480][ T7112] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 237.450330][ T5895] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 237.462766][ T30] audit: type=1400 audit(1768513034.430:435): avc: denied { ioctl } for pid=7956 comm="syz.8.448" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 237.490521][ T7916] netlink: 'syz.7.441': attribute type 1 has an invalid length. [ 237.499163][ T5895] dvb-usb: bulk message failed: -22 (1/0) [ 237.526183][ T5895] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 237.570980][ T7916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.587861][ T5895] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input9 [ 237.616806][ T7112] usb 6-1: Using ep0 maxpacket: 32 [ 237.633568][ T7916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.673712][ T7112] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.694858][ T5895] dvb-usb: schedule remote query interval to 50 msecs. [ 238.035013][ T5930] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 238.176298][ T7112] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.186165][ T5895] dvb-usb: bulk message failed: -22 (2/0) [ 238.194153][ T5895] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 238.204770][ T7112] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 238.214183][ T7112] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.228317][ T5895] usb 8-1: USB disconnect, device number 2 [ 238.239018][ T7112] usb 6-1: config 0 descriptor?? [ 238.293688][ T5930] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 238.343296][ T5930] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 238.448318][ T5895] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 238.449060][ T5930] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 238.536523][ T7972] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=7972 comm=syz.8.451 [ 238.569211][ T5930] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.598365][ T7960] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 238.613545][ T5930] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 238.615784][ T7975] netlink: 'syz.8.451': attribute type 1 has an invalid length. [ 238.648196][ T7975] netlink: 'syz.8.451': attribute type 1 has an invalid length. [ 238.655942][ T7975] netlink: 'syz.8.451': attribute type 1 has an invalid length. [ 238.679963][ T7112] hid_parser_main: 91 callbacks suppressed [ 238.679984][ T7112] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 238.692998][ T7112] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 238.877660][ T7112] ft260 0003:0403:6030.0005: chip code: 6424 8183 [ 239.059885][ T30] audit: type=1400 audit(1768513036.020:436): avc: denied { write } for pid=7959 comm="syz.6.449" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 239.099300][ T974] usb 7-1: USB disconnect, device number 2 [ 239.122167][ T7112] ft260 0003:0403:6030.0005: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 239.308381][ T7112] ft260 0003:0403:6030.0005: failed to retrieve status: -32, no wakeup [ 239.339982][ T7977] bridge1: entered promiscuous mode [ 239.345210][ T7977] bridge1: entered allmulticast mode [ 239.363909][ T7986] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 239.369800][ T7977] netlink: 40 bytes leftover after parsing attributes in process `syz.7.453'. [ 239.417380][ T7986] netlink: 28 bytes leftover after parsing attributes in process `syz.8.456'. [ 239.442071][ T30] audit: type=1400 audit(1768513036.400:437): avc: granted { setsecparam } for pid=7985 comm="syz.8.456" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 239.586219][ T7941] i2c i2c-1: adapter quirk: too many messages (addr 0x0006, size 0, read) [ 239.640112][ T974] usb 6-1: USB disconnect, device number 3 [ 240.047131][ T974] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 240.318491][ T5895] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 240.346619][ T974] usb 10-1: Using ep0 maxpacket: 16 [ 240.354243][ T974] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 92, changing to 10 [ 240.376374][ T974] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25895, setting to 1024 [ 240.806532][ T974] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 240.819620][ T974] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 240.828784][ T974] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.839097][ T974] usb 10-1: config 0 descriptor?? [ 240.844761][ T7999] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 240.876490][ T5895] usb 9-1: Using ep0 maxpacket: 32 [ 240.885998][ T5895] usb 9-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 240.916469][ T5895] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.931690][ T5895] usb 9-1: config 0 descriptor?? [ 240.979238][ T5895] as10x_usb: device has been detected [ 240.985947][ T5895] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 240.997656][ T8023] hfs: can't find a HFS filesystem on dev nullb0 [ 241.095201][ T5895] usb 9-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 241.133243][ T5895] as10x_usb: error during firmware upload part1 [ 241.145713][ T5895] Registered device nBox DVB-T Dongle [ 241.343680][ T3821] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.540527][ T8041] Cannot find del_set index 0 as target [ 241.820271][ T8043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.854618][ T8043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.910134][ T8043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.952698][ T8043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.616153][ T8055] netlink: 'syz.8.457': attribute type 3 has an invalid length. [ 242.624297][ T8054] zonefs (nullb0) ERROR: Not a zoned block device [ 242.635817][ T8055] netlink: 'syz.8.457': attribute type 3 has an invalid length. [ 242.666669][ T8055] netlink: 'syz.8.457': attribute type 3 has an invalid length. [ 242.742580][ T8055] netlink: 'syz.8.457': attribute type 3 has an invalid length. [ 242.759482][ T974] usbhid 10-1:0.0: can't add hid device: -71 [ 242.765560][ T974] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 242.792449][ T8055] netlink: 'syz.8.457': attribute type 3 has an invalid length. [ 242.841175][ T974] usb 10-1: USB disconnect, device number 2 [ 242.863039][ T8055] netlink: 'syz.8.457': attribute type 3 has an invalid length. [ 242.893973][ T8055] netlink: 'syz.8.457': attribute type 3 has an invalid length. [ 242.906251][ T8055] netlink: 'syz.8.457': attribute type 3 has an invalid length. [ 242.926720][ T8055] netlink: 'syz.8.457': attribute type 3 has an invalid length. [ 242.934727][ T8055] netlink: 'syz.8.457': attribute type 3 has an invalid length. [ 243.384872][ T8079] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 244.441777][ T30] audit: type=1400 audit(1768513041.400:438): avc: denied { write } for pid=8092 comm="syz.5.471" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 244.634302][ T8097] binder: 8092:8097 ioctl c0306201 2000000001c0 returned -14 [ 245.112065][ T30] audit: type=1400 audit(1768513041.430:439): avc: denied { ioctl } for pid=8092 comm="syz.5.471" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 245.160725][ T10] usb 9-1: USB disconnect, device number 4 [ 245.404177][ T30] audit: type=1400 audit(1768513041.450:440): avc: denied { set_context_mgr } for pid=8092 comm="syz.5.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 245.452187][ T30] audit: type=1400 audit(1768513041.570:441): avc: denied { map } for pid=8092 comm="syz.5.471" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 245.475622][ T10] Unregistered device nBox DVB-T Dongle [ 245.488843][ T10] as10x_usb: device has been disconnected [ 245.891554][ T8116] (syz.8.474,8116,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 245.960321][ T8116] (syz.8.474,8116,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 246.197731][ T8123] input: syz1 as /devices/virtual/input/input10 [ 246.639494][ T974] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 246.676563][ T30] audit: type=1400 audit(1768513043.620:442): avc: denied { getopt } for pid=8131 comm="syz.5.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 246.847214][ T974] usb 9-1: Using ep0 maxpacket: 8 [ 246.859719][ T974] usb 9-1: unable to get BOS descriptor or descriptor too short [ 246.902920][ T974] usb 9-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 109 [ 246.981958][ T974] usb 9-1: config 8 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 247.297613][ T7471] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 247.311020][ T974] usb 9-1: config 8 interface 0 has no altsetting 0 [ 247.329691][ T974] usb 9-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 247.344618][ T974] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.363538][ T974] usb 9-1: Product: syz [ 247.373655][ T974] usb 9-1: Manufacturer: syz [ 247.378525][ T974] usb 9-1: SerialNumber: syz [ 247.395775][ T8127] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 247.486494][ T7471] usb 8-1: Using ep0 maxpacket: 8 [ 247.501331][ T7471] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 247.517072][ T7471] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 247.541244][ T7471] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 247.587708][ T7471] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 247.613883][ T7471] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.746758][ T7471] usb 8-1: Product: syz [ 247.751297][ T7471] usb 8-1: Manufacturer: syz [ 247.766675][ T7471] usb 8-1: SerialNumber: syz [ 247.808445][ T8150] JFS: discard option not supported on device [ 247.816967][ T8150] Mount JFS Failure: -22 [ 247.821203][ T8150] jfs_mount failed w/return code = -22 [ 247.843200][ T30] audit: type=1400 audit(1768513044.790:443): avc: denied { open } for pid=8126 comm="syz.8.478" path="/dev/ptyr5" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 249.441336][ T974] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 249.463896][ T974] usb 9-1: selecting invalid altsetting 0 [ 249.484090][ T5888] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 249.579770][ T974] usb 9-1: USB disconnect, device number 5 [ 250.208778][ T8183] FAULT_INJECTION: forcing a failure. [ 250.208778][ T8183] name failslab, interval 1, probability 0, space 0, times 1 [ 250.212570][ T7471] usb 8-1: 0:2 : does not exist [ 250.238635][ T8183] CPU: 0 UID: 0 PID: 8183 Comm: syz.5.485 Tainted: G L syzkaller #0 PREEMPT(full) [ 250.238663][ T8183] Tainted: [L]=SOFTLOCKUP [ 250.238670][ T8183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 250.238680][ T8183] Call Trace: [ 250.238687][ T8183] [ 250.238693][ T8183] dump_stack_lvl+0x16c/0x1f0 [ 250.238723][ T8183] should_fail_ex+0x512/0x640 [ 250.238750][ T8183] ? __kmalloc_noprof+0xca/0x910 [ 250.238781][ T8183] should_failslab+0xc2/0x120 [ 250.238806][ T8183] __kmalloc_noprof+0xeb/0x910 [ 250.238833][ T8183] ? kernfs_fop_write_iter+0x237/0x570 [ 250.238873][ T8183] ? kernfs_fop_write_iter+0x237/0x570 [ 250.238899][ T8183] kernfs_fop_write_iter+0x237/0x570 [ 250.238930][ T8183] vfs_write+0x7d3/0x11d0 [ 250.238954][ T8183] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 250.238984][ T8183] ? __pfx_vfs_write+0x10/0x10 [ 250.239026][ T8183] ksys_write+0x12a/0x250 [ 250.239048][ T8183] ? __pfx_ksys_write+0x10/0x10 [ 250.239079][ T8183] do_syscall_64+0xcd/0xf80 [ 250.239104][ T8183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.239120][ T8183] RIP: 0033:0x7faf6e98f749 [ 250.239134][ T8183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.239149][ T8183] RSP: 002b:00007faf6f7bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 250.239165][ T8183] RAX: ffffffffffffffda RBX: 00007faf6ebe5fa0 RCX: 00007faf6e98f749 [ 250.239176][ T8183] RDX: 0000000000000009 RSI: 0000200000000280 RDI: 0000000000000009 [ 250.239185][ T8183] RBP: 00007faf6f7bc090 R08: 0000000000000000 R09: 0000000000000000 [ 250.239195][ T8183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.239204][ T8183] R13: 00007faf6ebe6038 R14: 00007faf6ebe5fa0 R15: 00007ffc2f3ec148 [ 250.239229][ T8183] [ 250.484016][ T5888] usb 10-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 250.500630][ T7471] usb 8-1: USB disconnect, device number 3 [ 250.569075][ T7477] udevd[7477]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 250.623128][ T5888] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.629441][ T30] audit: type=1400 audit(1768513047.580:444): avc: denied { bind } for pid=8203 comm="syz.6.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 250.652171][ T30] audit: type=1400 audit(1768513047.610:445): avc: denied { listen } for pid=8203 comm="syz.6.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 250.680820][ T5888] usb 10-1: config 0 descriptor?? [ 250.701800][ T5888] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 250.762819][ T8199] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 250.809164][ T30] audit: type=1400 audit(1768513047.610:446): avc: denied { accept } for pid=8203 comm="syz.6.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 250.869348][ T30] audit: type=1400 audit(1768513047.610:447): avc: denied { write } for pid=8203 comm="syz.6.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 250.917090][ T30] audit: type=1400 audit(1768513047.680:448): avc: denied { read } for pid=8203 comm="syz.6.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 250.939683][ T30] audit: type=1400 audit(1768513047.900:449): avc: denied { create } for pid=8217 comm="syz.5.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 250.960568][ T5888] gspca_sn9c2028: read1 error -32 [ 250.966351][ T5888] gspca_sn9c2028: read1 error -32 [ 250.978326][ T5931] IPVS: starting estimator thread 0... [ 251.032982][ T30] audit: type=1400 audit(1768513047.900:450): avc: denied { read write } for pid=8217 comm="syz.5.491" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 251.058611][ T5888] gspca_sn9c2028: read1 error -71 [ 251.084751][ T30] audit: type=1400 audit(1768513047.900:451): avc: denied { open } for pid=8217 comm="syz.5.491" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 251.110049][ T8220] IPVS: using max 48 ests per chain, 115200 per kthread [ 251.118832][ T5888] sn9c2028 10-1:0.0: probe with driver sn9c2028 failed with error -71 [ 251.135459][ T5888] usb 10-1: USB disconnect, device number 3 [ 251.185120][ T8226] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=8226 comm=syz.9.493 [ 251.199230][ T8226] validate_nla: 43 callbacks suppressed [ 251.199245][ T8226] netlink: 'syz.9.493': attribute type 1 has an invalid length. [ 251.213202][ T8226] netlink: 'syz.9.493': attribute type 1 has an invalid length. [ 251.223939][ T8226] netlink: 'syz.9.493': attribute type 1 has an invalid length. [ 251.256538][ T5931] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 251.276303][ T8228] sctp: [Deprecated]: syz.9.494 (pid 8228) Use of struct sctp_assoc_value in delayed_ack socket option. [ 251.276303][ T8228] Use struct sctp_sack_info instead [ 251.406596][ T8017] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 251.431007][ T5931] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 251.446453][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.464780][ T5931] usb 6-1: Product: syz [ 251.483537][ T5931] usb 6-1: Manufacturer: syz [ 251.493658][ T5931] usb 6-1: SerialNumber: syz [ 251.509120][ T5931] usb 6-1: config 0 descriptor?? [ 251.616551][ T8017] usb 8-1: device descriptor read/64, error -71 [ 252.016926][ T8017] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 252.101744][ T5888] usb 6-1: USB disconnect, device number 4 [ 252.844457][ T8017] usb 8-1: device descriptor read/64, error -71 [ 252.870853][ T30] audit: type=1400 audit(1768513049.830:452): avc: denied { read } for pid=8217 comm="syz.5.491" dev="sockfs" ino=21876 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 252.927686][ T8218] netlink: 'syz.5.491': attribute type 1 has an invalid length. [ 252.977887][ T8017] usb usb8-port1: attempt power cycle [ 253.024865][ T8252] netlink: 12 bytes leftover after parsing attributes in process `syz.5.491'. [ 253.200511][ T5931] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 253.338164][ T8017] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 253.602429][ T8017] usb 8-1: device descriptor read/8, error -71 [ 254.168937][ T8017] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 254.341367][ T30] audit: type=1400 audit(1768513051.200:453): avc: denied { ioctl } for pid=8272 comm="syz.6.505" path="socket:[21972]" dev="sockfs" ino=21972 ioctlcmd=0x8980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 254.369760][ T8017] usb 8-1: device descriptor read/8, error -71 [ 254.527336][ T8017] usb usb8-port1: unable to enumerate USB device [ 255.329009][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.995825][ T30] audit: type=1400 audit(1768513052.950:454): avc: denied { setattr } for pid=8299 comm="syz.5.512" name="SCO" dev="sockfs" ino=22010 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 256.072609][ T30] audit: type=1400 audit(1768513053.030:455): avc: denied { audit_write } for pid=8299 comm="syz.5.512" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 256.157596][ T5888] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 256.475064][ T30] audit: type=1400 audit(1768513053.430:456): avc: denied { map } for pid=8300 comm="syz.6.513" path="socket:[22014]" dev="sockfs" ino=22014 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 256.523918][ T5888] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 256.541815][ T5888] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.580445][ T5888] usb 8-1: Product: syz [ 256.591970][ T5888] usb 8-1: Manufacturer: syz [ 256.622094][ T5888] usb 8-1: SerialNumber: syz [ 256.645484][ T5888] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 256.714184][ T5874] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 256.747032][ T7030] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 256.937962][ T7030] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 256.946996][ T7030] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 256.984753][ T7030] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 257.035561][ T7030] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 257.141393][ T7030] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 257.257128][ T7030] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 257.316480][ T7030] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 257.456945][ T7030] usb 7-1: Product: syz [ 257.461887][ T7030] usb 7-1: Manufacturer: syz [ 257.603741][ T8346] netlink: 8 bytes leftover after parsing attributes in process `syz.7.509'. [ 257.879071][ T5874] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 257.922531][ T5874] ath9k_htc: Failed to initialize the device [ 257.989488][ T7030] cdc_wdm 7-1:1.0: skipping garbage [ 258.003343][ T7030] cdc_wdm 7-1:1.0: skipping garbage [ 258.025559][ T7030] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 258.031973][ T7030] cdc_wdm 7-1:1.0: Unknown control protocol [ 258.043925][ T5874] usb 8-1: ath9k_htc: USB layer deinitialized [ 258.294083][ T30] audit: type=1400 audit(1768513055.200:457): avc: denied { read write } for pid=8300 comm="syz.6.513" name="cdc-wdm0" dev="devtmpfs" ino=3048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 258.348441][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 258.348822][ T5931] usb 7-1: USB disconnect, device number 3 [ 258.355214][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 258.366930][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 258.393429][ T8320] cdc_wdm 7-1:1.0: Tx URB error: -19 [ 258.419592][ T30] audit: type=1400 audit(1768513055.200:458): avc: denied { open } for pid=8300 comm="syz.6.513" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 258.608248][ T8359] FAULT_INJECTION: forcing a failure. [ 258.608248][ T8359] name failslab, interval 1, probability 0, space 0, times 0 [ 258.642143][ T8359] CPU: 1 UID: 0 PID: 8359 Comm: syz.9.520 Tainted: G L syzkaller #0 PREEMPT(full) [ 258.642171][ T8359] Tainted: [L]=SOFTLOCKUP [ 258.642177][ T8359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 258.642185][ T8359] Call Trace: [ 258.642191][ T8359] [ 258.642198][ T8359] dump_stack_lvl+0x16c/0x1f0 [ 258.642224][ T8359] should_fail_ex+0x512/0x640 [ 258.642248][ T8359] ? fs_reclaim_acquire+0xae/0x150 [ 258.642271][ T8359] should_failslab+0xc2/0x120 [ 258.642293][ T8359] __kmalloc_noprof+0xeb/0x910 [ 258.642316][ T8359] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 258.642344][ T8359] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 258.642366][ T8359] tomoyo_realpath_from_path+0xc2/0x6e0 [ 258.642391][ T8359] ? tomoyo_profile+0x47/0x60 [ 258.642418][ T8359] tomoyo_path_number_perm+0x245/0x580 [ 258.642437][ T8359] ? tomoyo_path_number_perm+0x237/0x580 [ 258.642459][ T8359] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 258.642481][ T8359] ? find_held_lock+0x2b/0x80 [ 258.642533][ T8359] ? find_held_lock+0x2b/0x80 [ 258.642557][ T8359] ? hook_file_ioctl_common+0x144/0x410 [ 258.642588][ T8359] ? __fget_files+0x20e/0x3c0 [ 258.642615][ T8359] security_file_ioctl+0x9b/0x240 [ 258.642639][ T8359] __x64_sys_ioctl+0xb7/0x210 [ 258.642659][ T8359] do_syscall_64+0xcd/0xf80 [ 258.642682][ T8359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.642700][ T8359] RIP: 0033:0x7f1c7478f749 [ 258.642713][ T8359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.642730][ T8359] RSP: 002b:00007f1c7569c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 258.642747][ T8359] RAX: ffffffffffffffda RBX: 00007f1c749e5fa0 RCX: 00007f1c7478f749 [ 258.642757][ T8359] RDX: 0000000000000003 RSI: 0000000040044160 RDI: 0000000000000004 [ 258.642767][ T8359] RBP: 00007f1c7569c090 R08: 0000000000000000 R09: 0000000000000000 [ 258.642776][ T8359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.642785][ T8359] R13: 00007f1c749e6038 R14: 00007f1c749e5fa0 R15: 00007ffccc834278 [ 258.642810][ T8359] [ 258.967411][ T8359] ERROR: Out of memory at tomoyo_realpath_from_path. [ 258.990364][ T8361] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 260.075666][ T24] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 260.326617][ T24] usb 10-1: Using ep0 maxpacket: 32 [ 260.337764][ T24] usb 10-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.423762][ T7030] usb 8-1: USB disconnect, device number 8 [ 260.563170][ T24] usb 10-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 260.703976][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 260.723541][ T24] usb 10-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00 [ 260.760208][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.797572][ T24] usb 10-1: config 0 descriptor?? [ 261.459346][ T24] usbhid 10-1:0.0: can't add hid device: -71 [ 261.472112][ T24] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 261.477581][ T8402] netlink: 12 bytes leftover after parsing attributes in process `syz.5.531'. [ 261.497403][ T8403] FAULT_INJECTION: forcing a failure. [ 261.497403][ T8403] name failslab, interval 1, probability 0, space 0, times 0 [ 261.501575][ T24] usb 10-1: USB disconnect, device number 4 [ 261.560216][ T8403] CPU: 0 UID: 0 PID: 8403 Comm: syz.8.532 Tainted: G L syzkaller #0 PREEMPT(full) [ 261.560246][ T8403] Tainted: [L]=SOFTLOCKUP [ 261.560252][ T8403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 261.560261][ T8403] Call Trace: [ 261.560267][ T8403] [ 261.560273][ T8403] dump_stack_lvl+0x16c/0x1f0 [ 261.560298][ T8403] should_fail_ex+0x512/0x640 [ 261.560321][ T8403] ? fs_reclaim_acquire+0xae/0x150 [ 261.560344][ T8403] should_failslab+0xc2/0x120 [ 261.560364][ T8403] __kmalloc_noprof+0xeb/0x910 [ 261.560388][ T8403] ? tomoyo_encode2+0x100/0x3e0 [ 261.560413][ T8403] ? tomoyo_encode2+0x100/0x3e0 [ 261.560431][ T8403] tomoyo_encode2+0x100/0x3e0 [ 261.560456][ T8403] tomoyo_encode+0x29/0x50 [ 261.560474][ T8403] tomoyo_realpath_from_path+0x18f/0x6e0 [ 261.560500][ T8403] tomoyo_path_number_perm+0x245/0x580 [ 261.560515][ T8403] ? tomoyo_path_number_perm+0x237/0x580 [ 261.560540][ T8403] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 261.560561][ T8403] ? find_held_lock+0x2b/0x80 [ 261.560602][ T8403] ? find_held_lock+0x2b/0x80 [ 261.560623][ T8403] ? hook_file_ioctl_common+0x144/0x410 [ 261.560653][ T8403] ? __fget_files+0x20e/0x3c0 [ 261.560677][ T8403] security_file_ioctl+0x9b/0x240 [ 261.560699][ T8403] __x64_sys_ioctl+0xb7/0x210 [ 261.560719][ T8403] do_syscall_64+0xcd/0xf80 [ 261.560745][ T8403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.560762][ T8403] RIP: 0033:0x7fc8fbd8f749 [ 261.560776][ T8403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.560791][ T8403] RSP: 002b:00007fc8fcc8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 261.560808][ T8403] RAX: ffffffffffffffda RBX: 00007fc8fbfe5fa0 RCX: 00007fc8fbd8f749 [ 261.560819][ T8403] RDX: 0000000000000003 RSI: 0000000040044160 RDI: 0000000000000004 [ 261.560827][ T8403] RBP: 00007fc8fcc8c090 R08: 0000000000000000 R09: 0000000000000000 [ 261.560836][ T8403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.560845][ T8403] R13: 00007fc8fbfe6038 R14: 00007fc8fbfe5fa0 R15: 00007fff27596df8 [ 261.560868][ T8403] [ 261.562410][ T8403] ERROR: Out of memory at tomoyo_realpath_from_path. [ 262.372982][ T8416] loop2: detected capacity change from 0 to 7 [ 262.408025][ T8416] loop2: [ 262.411010][ T8416] loop2: partition table partially beyond EOD, truncated [ 262.412628][ T8413] mkiss: ax0: crc mode is auto. [ 262.984545][ T8429] Illegal XDP return value 4294967274 on prog (id 136) dev N/A, expect packet loss! [ 263.032392][ T30] audit: type=1400 audit(1768513059.990:459): avc: denied { read } for pid=5486 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 263.519639][ T8451] netlink: 12 bytes leftover after parsing attributes in process `syz.9.544'. [ 263.733791][ T8462] FAULT_INJECTION: forcing a failure. [ 263.733791][ T8462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.880747][ T8462] CPU: 0 UID: 0 PID: 8462 Comm: syz.7.545 Tainted: G L syzkaller #0 PREEMPT(full) [ 263.880771][ T8462] Tainted: [L]=SOFTLOCKUP [ 263.880774][ T8462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 263.880780][ T8462] Call Trace: [ 263.880786][ T8462] [ 263.880790][ T8462] dump_stack_lvl+0x16c/0x1f0 [ 263.880808][ T8462] should_fail_ex+0x512/0x640 [ 263.880826][ T8462] _copy_to_user+0x32/0xd0 [ 263.880843][ T8462] simple_read_from_buffer+0xcb/0x170 [ 263.880859][ T8462] proc_fail_nth_read+0x197/0x240 [ 263.880870][ T8462] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 263.880882][ T8462] ? rw_verify_area+0xcf/0x6c0 [ 263.880893][ T8462] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 263.880903][ T8462] vfs_read+0x1e4/0xcf0 [ 263.880917][ T8462] ? __pfx___mutex_lock+0x10/0x10 [ 263.880933][ T8462] ? __pfx_vfs_read+0x10/0x10 [ 263.880949][ T8462] ? __fget_files+0x20e/0x3c0 [ 263.880967][ T8462] ksys_read+0x12a/0x250 [ 263.880979][ T8462] ? __pfx_ksys_read+0x10/0x10 [ 263.880992][ T8462] ? fput+0x70/0xf0 [ 263.881002][ T8462] do_syscall_64+0xcd/0xf80 [ 263.881017][ T8462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.881027][ T8462] RIP: 0033:0x7feb10d8e15c [ 263.881035][ T8462] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 263.881045][ T8462] RSP: 002b:00007feb11cfd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 263.881055][ T8462] RAX: ffffffffffffffda RBX: 00007feb10fe5fa0 RCX: 00007feb10d8e15c [ 263.881061][ T8462] RDX: 000000000000000f RSI: 00007feb11cfd0a0 RDI: 0000000000000005 [ 263.881067][ T8462] RBP: 00007feb11cfd090 R08: 0000000000000000 R09: 0000000000000000 [ 263.881073][ T8462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.881078][ T8462] R13: 00007feb10fe6038 R14: 00007feb10fe5fa0 R15: 00007ffd67d26d08 [ 263.881092][ T8462] [ 264.516496][ T7030] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 264.678532][ T7030] usb 10-1: Using ep0 maxpacket: 8 [ 264.740401][ T7030] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 264.773510][ T7030] usb 10-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.944073][ T7030] usb 10-1: config 0 interface 0 has no altsetting 0 [ 264.961355][ T7030] usb 10-1: New USB device found, idVendor=056a, idProduct=9bba, bcdDevice= 0.00 [ 264.972902][ T7030] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.426134][ T7030] usb 10-1: config 0 descriptor?? [ 265.787446][ T8494] loop2: detected capacity change from 0 to 7 [ 265.836763][ T8494] loop2: [ 265.839843][ T8494] loop2: partition table partially beyond EOD, truncated [ 265.849530][ T8493] netlink: 666 bytes leftover after parsing attributes in process `syz.8.549'. [ 265.918767][ T8505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.958899][ T30] audit: type=1400 audit(1768513062.920:460): avc: denied { append } for pid=8490 comm="syz.8.549" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 265.993277][ T8499] faux_driver vgem: [drm] Unknown color mode 2054; guessing buffer size. [ 266.057289][ T7471] usb 10-1: USB disconnect, device number 5 [ 266.076038][ T8505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.197207][ T7112] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 266.408561][ T8524] netlink: 12 bytes leftover after parsing attributes in process `syz.5.556'. [ 266.421802][ T7112] usb 7-1: Using ep0 maxpacket: 32 [ 266.448700][ T7112] usb 7-1: config 0 has an invalid interface number: 219 but max is 0 [ 266.467465][ T7112] usb 7-1: config 0 has no interface number 0 [ 266.473619][ T7112] usb 7-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 266.509594][ T7112] usb 7-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 266.537044][ T7471] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 266.554324][ T30] audit: type=1400 audit(1768513063.510:461): avc: denied { write } for pid=8531 comm="syz.7.559" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 266.578584][ T7112] usb 7-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 266.605190][ T7112] usb 7-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 266.615670][ T7112] usb 7-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 266.625888][ T30] audit: type=1400 audit(1768513063.510:462): avc: denied { ioctl } for pid=8531 comm="syz.7.559" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 266.650686][ T7112] usb 7-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 266.685035][ T7112] usb 7-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 266.705212][ T7112] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.733397][ T7112] usb 7-1: Product: syz [ 266.746525][ T7471] usb 10-1: Using ep0 maxpacket: 8 [ 266.758806][ T7112] usb 7-1: Manufacturer: syz [ 266.765951][ T8542] netlink: 16 bytes leftover after parsing attributes in process `syz.7.559'. [ 266.785907][ T7471] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 266.803168][ T7112] usb 7-1: SerialNumber: syz [ 266.808143][ T7471] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.827582][ T7112] usb 7-1: config 0 descriptor?? [ 266.846529][ T7471] usb 10-1: Product: syz [ 266.851571][ T8543] netlink: 12 bytes leftover after parsing attributes in process `syz.7.559'. [ 266.873646][ T7471] usb 10-1: Manufacturer: syz [ 266.880794][ T8506] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 266.888139][ T30] audit: type=1400 audit(1768513063.830:463): avc: denied { accept } for pid=8531 comm="syz.7.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 266.948080][ T7471] usb 10-1: SerialNumber: syz [ 266.951438][ T8506] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 266.963749][ T7471] usb 10-1: config 0 descriptor?? [ 267.237205][ T8549] netlink: 'syz.8.561': attribute type 74 has an invalid length. [ 267.367054][ T30] audit: type=1400 audit(1768513064.320:464): avc: denied { relabelfrom } for pid=8547 comm="syz.8.561" name="" dev="pipefs" ino=22669 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 267.408821][ T7471] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 267.520357][ T7112] etas_es58x 7-1:0.219: Starting syz syz (Serial Number syz) [ 267.533472][ T7471] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 267.570980][ T7112] etas_es58x 7-1:0.219: could not retrieve the product info string [ 267.607623][ T7471] usb 10-1: USB disconnect, device number 6 [ 267.857979][ T7112] usb 7-1: USB disconnect, device number 4 [ 267.865397][ T7112] etas_es58x 7-1:0.219: Disconnecting syz syz [ 268.676358][ T8572] sctp: [Deprecated]: syz.5.564 (pid 8572) Use of int in max_burst socket option deprecated. [ 268.676358][ T8572] Use struct sctp_assoc_value instead [ 268.735488][ T30] audit: type=1400 audit(1768513065.690:465): avc: denied { ioctl } for pid=8570 comm="syz.5.564" path="socket:[22468]" dev="sockfs" ino=22468 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 269.040321][ T8599] netlink: 12 bytes leftover after parsing attributes in process `syz.9.570'. [ 269.086473][ T24] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 269.186011][ T30] audit: type=1400 audit(1768513066.140:466): avc: denied { map } for pid=8605 comm="syz.6.573" path="socket:[22507]" dev="sockfs" ino=22507 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 269.256594][ T30] audit: type=1400 audit(1768513066.140:467): avc: denied { accept } for pid=8605 comm="syz.6.573" path="socket:[22507]" dev="sockfs" ino=22507 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 269.290303][ T24] usb 8-1: New USB device found, idVendor=0565, idProduct=0003, bcdDevice=fb.88 [ 269.303772][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.316455][ T24] usb 8-1: Product: syz [ 269.320731][ T24] usb 8-1: Manufacturer: syz [ 269.335552][ T30] audit: type=1400 audit(1768513066.180:468): avc: denied { append } for pid=8605 comm="syz.6.573" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 269.366437][ T24] usb 8-1: SerialNumber: syz [ 269.388671][ T24] usb 8-1: config 0 descriptor?? [ 269.606808][ T30] audit: type=1326 audit(1768513066.570:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8615 comm="syz.8.575" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc8fbd8f749 code=0x0 [ 269.686477][ T24] kaweth 8-1:0.0: Firmware present in device. [ 269.711004][ T30] audit: type=1400 audit(1768513066.630:470): avc: denied { relabelfrom } for pid=8615 comm="syz.8.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 269.777097][ T30] audit: type=1400 audit(1768513066.630:471): avc: denied { relabelto } for pid=8615 comm="syz.8.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 269.858513][ T24] kaweth 8-1:0.0: Statistics collection: 0 [ 269.864388][ T24] kaweth 8-1:0.0: Multicast filter limit: 0 [ 269.875249][ T24] kaweth 8-1:0.0: MTU: 0 [ 269.906479][ T24] kaweth 8-1:0.0: Read MAC address 00:00:00:00:00:00 [ 269.909634][ T7112] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 269.974513][ T7112] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 270.187949][ T5820] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 270.197089][ T5820] Bluetooth: hci6: Injecting HCI hardware error event [ 270.205032][ T5820] Bluetooth: hci6: hardware error 0x00 [ 270.469298][ T24] kaweth 8-1:0.0: Error setting receive filter [ 270.475677][ T24] kaweth 8-1:0.0: probe with driver kaweth failed with error -5 [ 270.526441][ T30] audit: type=1400 audit(1768513067.460:472): avc: denied { ioctl } for pid=8627 comm="syz.8.576" path="/dev/uhid" dev="devtmpfs" ino=1273 ioctlcmd=0x7202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 270.559308][ T24] usb 8-1: USB disconnect, device number 9 [ 271.380377][ T6146] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.817347][ T30] audit: type=1400 audit(1768513068.770:473): avc: denied { listen } for pid=8673 comm="syz.7.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 271.945344][ T6146] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.991834][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 272.001015][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 272.009587][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 272.031023][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 272.042207][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 272.090716][ T6146] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.214411][ T6146] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.266504][ T5820] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 272.755595][ T6146] bridge_slave_1: left allmulticast mode [ 272.806474][ T6146] bridge_slave_1: left promiscuous mode [ 272.837993][ T6146] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.859779][ T6146] bridge_slave_0: left allmulticast mode [ 272.865441][ T6146] bridge_slave_0: left promiscuous mode [ 272.868708][ T8710] loop6: detected capacity change from 0 to 7 [ 272.880174][ T6146] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.187065][ T8710] buffer_io_error: 23 callbacks suppressed [ 273.187077][ T8710] Buffer I/O error on dev loop6, logical block 0, async page read [ 273.223855][ T30] audit: type=1400 audit(1768513070.180:474): avc: denied { ioctl } for pid=8716 comm="syz.9.590" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 273.273042][ T8710] Buffer I/O error on dev loop6, logical block 0, async page read [ 273.306574][ T8710] Buffer I/O error on dev loop6, logical block 0, async page read [ 273.329973][ T8710] Buffer I/O error on dev loop6, logical block 0, async page read [ 273.363414][ T8710] Buffer I/O error on dev loop6, logical block 0, async page read [ 273.418719][ T8710] Buffer I/O error on dev loop6, logical block 0, async page read [ 273.496247][ T8710] Buffer I/O error on dev loop6, logical block 0, async page read [ 273.530384][ T8710] ldm_validate_partition_table(): Disk read failed. [ 273.556505][ T8710] Buffer I/O error on dev loop6, logical block 0, async page read [ 273.596196][ T8710] Buffer I/O error on dev loop6, logical block 0, async page read [ 273.627844][ T8710] Buffer I/O error on dev loop6, logical block 0, async page read [ 273.635664][ T8710] Dev loop6: unable to read RDB block 0 [ 273.688953][ T8710] loop6: unable to read partition table [ 273.694674][ T8710] loop6: partition table beyond EOD, truncated [ 273.721239][ T8710] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 274.111870][ T5820] Bluetooth: hci0: command tx timeout [ 274.196478][ T5888] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 274.438646][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 274.438661][ T30] audit: type=1400 audit(1768513071.400:476): avc: denied { unmount } for pid=7492 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 274.474442][ T6146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.487566][ T6146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.500844][ T8738] FAULT_INJECTION: forcing a failure. [ 274.500844][ T8738] name failslab, interval 1, probability 0, space 0, times 0 [ 274.515828][ T8738] CPU: 0 UID: 0 PID: 8738 Comm: syz.5.595 Tainted: G L syzkaller #0 PREEMPT(full) [ 274.515858][ T8738] Tainted: [L]=SOFTLOCKUP [ 274.515864][ T8738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 274.515874][ T8738] Call Trace: [ 274.515880][ T8738] [ 274.515887][ T8738] dump_stack_lvl+0x16c/0x1f0 [ 274.515915][ T8738] should_fail_ex+0x512/0x640 [ 274.515940][ T8738] ? fs_reclaim_acquire+0xae/0x150 [ 274.515966][ T8738] should_failslab+0xc2/0x120 [ 274.515989][ T8738] __kmalloc_noprof+0xeb/0x910 [ 274.516016][ T8738] ? tomoyo_encode2+0x100/0x3e0 [ 274.516043][ T8738] ? tomoyo_encode2+0x100/0x3e0 [ 274.516064][ T8738] tomoyo_encode2+0x100/0x3e0 [ 274.516090][ T8738] tomoyo_encode+0x29/0x50 [ 274.516111][ T8738] tomoyo_realpath_from_path+0x18f/0x6e0 [ 274.516141][ T8738] tomoyo_path_number_perm+0x245/0x580 [ 274.516161][ T8738] ? tomoyo_path_number_perm+0x237/0x580 [ 274.516182][ T8738] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 274.516204][ T8738] ? find_held_lock+0x2b/0x80 [ 274.516251][ T8738] ? find_held_lock+0x2b/0x80 [ 274.516275][ T8738] ? hook_file_ioctl_common+0x144/0x410 [ 274.516307][ T8738] ? __fget_files+0x20e/0x3c0 [ 274.516335][ T8738] security_file_ioctl+0x9b/0x240 [ 274.516359][ T8738] __x64_sys_ioctl+0xb7/0x210 [ 274.516380][ T8738] do_syscall_64+0xcd/0xf80 [ 274.516407][ T8738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.516423][ T8738] RIP: 0033:0x7faf6e98f749 [ 274.516436][ T8738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.516452][ T8738] RSP: 002b:00007faf6f7bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 274.516467][ T8738] RAX: ffffffffffffffda RBX: 00007faf6ebe5fa0 RCX: 00007faf6e98f749 [ 274.516477][ T8738] RDX: 0000200000000280 RSI: 00000000c0585609 RDI: 0000000000000003 [ 274.516488][ T8738] RBP: 00007faf6f7bc090 R08: 0000000000000000 R09: 0000000000000000 [ 274.516497][ T8738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.516507][ T8738] R13: 00007faf6ebe6038 R14: 00007faf6ebe5fa0 R15: 00007ffc2f3ec148 [ 274.516531][ T8738] [ 274.766135][ T8738] ERROR: Out of memory at tomoyo_realpath_from_path. [ 274.799160][ T6146] bond0 (unregistering): Released all slaves [ 274.921799][ T8743] netlink: 16 bytes leftover after parsing attributes in process `syz.9.596'. [ 275.231661][ T8680] chnl_net:caif_netlink_parms(): no params data found [ 275.559602][ T8754] overlayfs: missing 'lowerdir' [ 275.578360][ T8759] ptrace attach of "./syz-executor exec"[7492] was attempted by "./syz-executor exec"[8759] [ 275.737347][ T8017] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 275.896530][ T8017] usb 9-1: Using ep0 maxpacket: 8 [ 275.905117][ T8017] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 275.914191][ T8017] usb 9-1: can't read configurations, error -61 [ 276.024032][ T8680] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.043817][ T8680] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.057802][ T8017] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 276.075737][ T8680] bridge_slave_0: entered allmulticast mode [ 276.118031][ T5895] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004c: 0000 [#1] SMP KASAN NOPTI [ 276.130117][ T5895] KASAN: null-ptr-deref in range [0x0000000000000260-0x0000000000000267] [ 276.138531][ T5895] CPU: 0 UID: 0 PID: 5895 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 276.149463][ T5895] Tainted: [L]=SOFTLOCKUP [ 276.153770][ T5895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 276.163814][ T5895] Workqueue: events l2cap_info_timeout [ 276.169280][ T5895] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 276.175175][ T5895] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 [ 276.186433][ T5823] Bluetooth: hci0: command tx timeout [ 276.194772][ T5895] RSP: 0018:ffffc900045bf978 EFLAGS: 00010282 [ 276.194787][ T5895] RAX: dffffc0000000000 RBX: 0000000000000260 RCX: 0000000000000000 [ 276.194797][ T5895] RDX: 0000000000000000 RSI: ffffffff893dada1 RDI: dffffc000000004c [ 276.194805][ T5895] RBP: 0000000000000260 R08: 0000000000000001 R09: 0000000000000000 [ 276.194814][ T5895] R10: 00000000ffffff80 R11: ffff888029ff0b30 R12: ffffffff893dada1 [ 276.194825][ T5895] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 276.194834][ T5895] FS: 0000000000000000(0000) GS:ffff8881248f4000(0000) knlGS:0000000000000000 [ 276.194850][ T5895] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 276.194861][ T5895] CR2: 0000561646f80300 CR3: 0000000059fb8000 CR4: 00000000003526f0 [ 276.194872][ T5895] Call Trace: [ 276.194877][ T5895] [ 276.194883][ T5895] __kasan_check_byte+0x13/0x50 [ 276.194909][ T5895] lock_acquire+0xfc/0x330 [ 276.194935][ T5895] lock_sock_nested+0x41/0xf0 [ 276.194952][ T5895] ? l2cap_sock_ready_cb+0x43/0x1a0 [ 276.194974][ T5895] l2cap_sock_ready_cb+0x43/0x1a0 [ 276.194995][ T5895] l2cap_conn_start+0x144/0xb60 [ 276.195012][ T5895] ? __pfx_l2cap_conn_start+0x10/0x10 [ 276.195028][ T5895] ? __pfx___mutex_lock+0x10/0x10 [ 276.195048][ T5895] ? debug_object_deactivate+0x1ec/0x3a0 [ 276.195073][ T5895] l2cap_info_timeout+0x81/0xa0 [ 276.325245][ T5895] process_one_work+0x9ba/0x1b20 [ 276.330189][ T5895] ? __pfx_process_one_work+0x10/0x10 [ 276.335545][ T5895] ? assign_work+0x1a0/0x250 [ 276.340123][ T5895] worker_thread+0x6c8/0xf10 [ 276.344699][ T5895] ? __pfx_worker_thread+0x10/0x10 [ 276.349789][ T5895] kthread+0x3c5/0x780 [ 276.353843][ T5895] ? __pfx_kthread+0x10/0x10 [ 276.358414][ T5895] ? rcu_is_watching+0x12/0xc0 [ 276.363158][ T5895] ? __pfx_kthread+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 276.367726][ T5895] ret_from_fork+0x983/0xb10 [ 276.372295][ T5895] ? __pfx_ret_from_fork+0x10/0x10 [ 276.377387][ T5895] ? __switch_to+0x7af/0x10d0 [ 276.382046][ T5895] ? __pfx_kthread+0x10/0x10 [ 276.386633][ T5895] ret_from_fork_asm+0x1a/0x30 [ 276.391389][ T5895] [ 276.394384][ T5895] Modules linked in: [ 276.398909][ T5895] ---[ end trace 0000000000000000 ]--- [ 276.408679][ T8680] bridge_slave_0: entered promiscuous mode [ 276.417438][ T8680] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.424514][ T8680] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.462324][ T5895] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 276.468323][ T5895] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 [ 276.488791][ T5895] RSP: 0018:ffffc900045bf978 EFLAGS: 00010282 [ 276.495427][ T5895] RAX: dffffc0000000000 RBX: 0000000000000260 RCX: 0000000000000000 [ 276.498194][ T8680] bridge_slave_1: entered allmulticast mode [ 276.503867][ T5895] RDX: 0000000000000000 RSI: ffffffff893dada1 RDI: dffffc000000004c [ 276.517949][ T8017] usb 9-1: Using ep0 maxpacket: 8 [ 276.523242][ T5895] RBP: 0000000000000260 R08: 0000000000000001 R09: 0000000000000000 [ 276.532231][ T5895] R10: 00000000ffffff80 R11: ffff888029ff0b30 R12: ffffffff893dada1 [ 276.540819][ T5895] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 276.549409][ T5895] FS: 0000000000000000(0000) GS:ffff8881248f4000(0000) knlGS:0000000000000000 [ 276.559461][ T8680] bridge_slave_1: entered promiscuous mode [ 276.565627][ T8017] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 276.573836][ T8017] usb 9-1: can't read configurations, error -61 [ 276.585246][ T8017] usb usb9-port1: attempt power cycle [ 276.593382][ T5895] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 276.602536][ T6146] hsr_slave_0: left promiscuous mode [ 276.616814][ T6146] hsr_slave_1: left promiscuous mode [ 276.627657][ T6146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.635035][ T6146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.696422][ T5895] CR2: 00007feb11cdcd58 CR3: 0000000028ca2000 CR4: 00000000003526f0 [ 276.722690][ T5895] Kernel panic - not syncing: Fatal exception [ 276.729087][ T5895] Kernel Offset: disabled [ 276.733402][ T5895] Rebooting in 86400 seconds..