last executing test programs: 10m40.098403373s ago: executing program 4 (id=97): syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r3, 0x1, 0x1}, 0x48) sendmsg(0xffffffffffffffff, 0x0, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x4}) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r6, 0xc0585609, &(0x7f0000000040)={0x0, 0xa}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, r4, 0x0, '\x00', 0x0, r3, 0x0, 0x5}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x2000c0d0) pselect6(0x40, &(0x7f0000000900)={0x6, 0x0, 0x1ff, 0x3, 0x5, 0x52a9396a, 0x10001, 0x8}, 0x0, &(0x7f0000000980)={0x8, 0x7fff, 0x0, 0xc, 0xf, 0x6, 0x3, 0x9}, &(0x7f00000009c0)={0x0, 0x3938700}, 0x0) 10m36.972812287s ago: executing program 4 (id=110): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth1_vlan\x00'}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r1, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x9}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x404880a}, 0x40000) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2(&(0x7f0000000000), 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100060c100000000000224e0000", 0x58}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) ptrace$ARCH_SHSTK_ENABLE(0x1e, 0x0, 0x2, 0x5001) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000"], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x8040) 10m35.742956014s ago: executing program 4 (id=113): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000001100000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x4000040) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x38044040, &(0x7f0000000040)={0x2, 0x24e23, @private=0xa0100fd}, 0x10) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x8c0) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x7d6a}], 0x1, 0x0, 0x0) 10m35.162687823s ago: executing program 4 (id=114): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f00000007c0)='./file0/file0\x00', 0x0, 0x1000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', r3, 0x0, 0x261) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000a80)={r4, 0x0, 0x0}, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x0, @multicast1}, 0xa, 0x0, 0xfffd}}, 0x26) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, r5, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x50}}, 0x0) 10m34.9738608s ago: executing program 4 (id=115): socket$inet(0x2, 0x80001, 0x84) syz_io_uring_setup(0x2afc, 0x0, &(0x7f0000000400), 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000240)={0x80, 0x1fffc, 0x2, 0x100}, 0x10) sendmsg$nl_route(r1, 0x0, 0x8001) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_GETQUOTA(0xffffffff80000701, 0x0, 0xee01, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x30) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x3}, 0x10) getpeername$llc(r2, 0x0, 0x0) 10m34.639405883s ago: executing program 4 (id=120): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) chown(0x0, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000002940), 0x40000000000017d, 0x811) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000340)={&(0x7f00000001c0), &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), 0x0, 0x4, 0x9}) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x10c0010, &(0x7f0000000440)='tr\xfb\n\x1d{\x17E\x82\xd6\r\xe1\xaa\xaew-\xad\xe62\x96n \v\xf7\x15Z2\xc3ans=rdma,Nig*\xae\xeb\xcfrk\x03\x9d\x89K\xfe\xbbFf\xebUf\xe7\xc3b$\xd4\xaa4Q\xf7\\\xd2\x19w\xf1\xd81\xe9\xa1\xa5m\xe6\xe4\x032\xf4\xc9\x18\x91D^\x8c\xfa\a\xf8\x11\xa1\xf5]IyI\xf4\\\xfd|1\x00\xf9\xcf\xe2]\xbb6\xba\xc3a\xb72\xf9V\xa3\x9b\xac1G\xd8\xf9.\xaf+\x05\xb4$\ab\x113\x85\xea \xb5\xb7q\xcb\xdfi\x18\x19\xc9\xd5\x94mc\x10\xd5\f\xbf\xd2\x9f\xe5\xc1\xbe\x86\x06\x14$\xb1\xc7|\xf5\x16\x1dG\xcf\r\xe5M\x0f\x8fL\x1f\xc3\x04pM\xc8\xe1\xdc\a\x05\xd1\x1fMv\xb1\x11\xf3\x9e\xea\x9a\xc5\x95\xe7\xe9\xff*}\xc3E~CYKX}cAWS\n.\x14l\x03\x96\xea\x00\x83s\xe8\x92\x8b\x85\xe6\xc1B(ai\xd1\x98\x12\x85\xb8') r7 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_DQEVENT(r7, 0x80885659, &(0x7f0000000240)={0x0, @src_change}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0x6}, 0x1c) 10m34.404259779s ago: executing program 32 (id=120): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) chown(0x0, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000002940), 0x40000000000017d, 0x811) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000340)={&(0x7f00000001c0), &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), 0x0, 0x4, 0x9}) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x10c0010, &(0x7f0000000440)='tr\xfb\n\x1d{\x17E\x82\xd6\r\xe1\xaa\xaew-\xad\xe62\x96n \v\xf7\x15Z2\xc3ans=rdma,Nig*\xae\xeb\xcfrk\x03\x9d\x89K\xfe\xbbFf\xebUf\xe7\xc3b$\xd4\xaa4Q\xf7\\\xd2\x19w\xf1\xd81\xe9\xa1\xa5m\xe6\xe4\x032\xf4\xc9\x18\x91D^\x8c\xfa\a\xf8\x11\xa1\xf5]IyI\xf4\\\xfd|1\x00\xf9\xcf\xe2]\xbb6\xba\xc3a\xb72\xf9V\xa3\x9b\xac1G\xd8\xf9.\xaf+\x05\xb4$\ab\x113\x85\xea \xb5\xb7q\xcb\xdfi\x18\x19\xc9\xd5\x94mc\x10\xd5\f\xbf\xd2\x9f\xe5\xc1\xbe\x86\x06\x14$\xb1\xc7|\xf5\x16\x1dG\xcf\r\xe5M\x0f\x8fL\x1f\xc3\x04pM\xc8\xe1\xdc\a\x05\xd1\x1fMv\xb1\x11\xf3\x9e\xea\x9a\xc5\x95\xe7\xe9\xff*}\xc3E~CYKX}cAWS\n.\x14l\x03\x96\xea\x00\x83s\xe8\x92\x8b\x85\xe6\xc1B(ai\xd1\x98\x12\x85\xb8') r7 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_DQEVENT(r7, 0x80885659, &(0x7f0000000240)={0x0, @src_change}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0x6}, 0x1c) 7m5.564929671s ago: executing program 0 (id=1247): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x2, 0x200) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_stall_count', 0x80, 0x1) read$msr(r1, &(0x7f00000197c0)=""/102380, 0x18fec) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000300)={0x0, 0xffffcf26, 0x0, '\x00', 0x0}) syz_open_dev$video4linux(&(0x7f0000000040), 0x2, 0x200) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_stall_count', 0x80, 0x1) (async) read$msr(r1, &(0x7f00000197c0)=""/102380, 0x18fec) (async) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000300)={0x0, 0xffffcf26, 0x0, '\x00', 0x0}) (async) 7m5.549126879s ago: executing program 0 (id=1249): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048000}, 0x8094) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0x96, 0x5d, 0x6, 0x40, 0x133e, 0x815, 0x7e66, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x87, 0x28}}]}}]}}, 0x0) 7m4.782353643s ago: executing program 0 (id=1257): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ustat(0x801, &(0x7f0000000300)) r3 = socket$inet(0x2, 0x3, 0x8d) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r4], 0x80}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) listen(0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) 7m2.324607607s ago: executing program 0 (id=1269): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x23, 0x5, 0x5) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0x8000000000000001, 0x0, 0x3}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000001010400000000000000000a000000714a1bbc8c9e5c0ef907ecef25b208752a799d7dc26d26543464cf585e7f4b0d6464a6"], 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x4040880) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x2010, r3, 0x4493c000) sendmsg$nl_xfrm(r5, 0x0, 0x20000091) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x200400, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)=0x10) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x182000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000280)={0x80, 0xa0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8}, {0x0, 0x6}, {0x0, 0xb, 0xfffffffd}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x400009, 0x6, 0x0, 0x17, 0x0, 0x1, 0x6}) 7m0.271685487s ago: executing program 0 (id=1276): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0xca352c92cb699c71, 0xffffffffffffffff, 0xd0a55000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x84, 0x30, 0xb, 0x0, 0x0, {}, [{0x70, 0x1, [@m_ct={0x6c, 0x1, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x400fdb, 0x0, 0x0, 0x0, 0x10}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "91ec1d391e41ea95e696ad6aca939047"}, @TCA_CT_LABELS={0x14, 0x7, "b4c069143122e33e22f7e8b566780204"}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102384, 0x18ff0) socket(0x10, 0x3, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000540)=0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x9e54f29ff072a93b}, 0x14}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r6 = socket$kcm(0x10, 0x7, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000240)=0x7f) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000002300)=@raw={'raw\x00', 0xc01, 0x3, 0x2298, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x2200, 0x3c8, 0x3c8, 0x2200, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x1, 0x7], 0x6, 0x2}, {0x2, [0x0, 0x6, 0x4, 0x9, 0x0, 0x89ce99baffcf6900], 0x1, 0x1}}}}, {{@uncond, 0x0, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x1, 0x1, './cgroup.net/syz1\x00', 0x2, {0x5}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0xffffff00, 0xff000000, 0xff, 0xff0000ff], 0x4e22, 0x4c20, 0x4e24, 0x4e23, 0xc9, 0x0, 0x3b, 0x83, 0x25}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x22f8) r7 = dup(r3) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x0, 0x101, 0x100}}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084) 6m59.500317275s ago: executing program 0 (id=1283): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000440)=@vmx={0x8, 0x0, 0x2080, {0xb000, 0x200000, {0x2}, 0x1}, {"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", "48b5e36e51cd913c9fe6361cc02d7746375264cba52e9f4f0b9c54f95e108790d26a497f399b09a28236912bd076c7dd2523365884a2276bb87c2729728c7eac011d4bbf22d15cf088b551211e5f11b17eb4539f1fb279e82316f2c57a2e388d01c0835a87da3f51c0b82d9b67251c4dfea2aecf3b83ea6e99621645450ea7c86d7bf8303f53d6c9cecf507a6bbd2a5ae9fc114921dea106bda0152aff19f87b01c5c38cf7575ca181a047714024dc8047f61f2c8ae686c0b11b507e06313f01bd025490ae3e715a9eea2dca71415ee177fb11a386814d2aea6864a55ca7258d386140bc60d1c533ad01427ff7dbeb19eb1c1701f14b4e9b3361e695aa0f6434503b3818d914e67325766f9bab270a8fb3ac9a9fb34b22482d504884044cb9add2d47966ea45630a73855fa7750f7aade219f06043a7dd3f865b3ae068f1c6584f8881b3733efea1a68a6638894bd29e3acc6fc6aa935b32f88098fd306128eedc67e705981ac229ab6ac5c2f7e97a72c19b35bcf1a81be78c3a15975184849ad05ce6cffeeff35cd36f73ba2b817a830198c99d58012ce69b6992c0c7d189b5b1758d4d33d5f8e8ba7a7219ed8b19555f71b6a1fa9ef4aeb34f24d9acd5d1744138016c0217f84a08c99167f4ca1f12d7362956e4734d270db10fdfde864a6c24412e915faf66256ac6cb33ced5ec7f80d24aba17689b26a48f3bcbdcb95736339f93103551db78ae59e60d0705abda600d8cadd26ad140c30e60175c1fc29395bb741e71aa49867e00aefc810c18cb224effe42bfefe5db9856f79475a7edddf9ef8b4a1875911e1a364a2bd955084e233338cf7c6b7448933e57f985a391a531d3bc0943cd0fb182e9c582ba8a8604041328c34386acec6006323d37e794cdc0a1b6f58fb4b9e1d1e65e50d1961aabd07b56a71265aacd9fa99e647aa2e7ba14c58ec6eb5f2b59bed8ab11fd88207690515acffadbd1cffad40ec4725181b16e3cc3e7c3aefb467e0ea8bffc923d017ef073defed8591ac1e0fd6759c938c8ecf6769a9ba3c1cf75d2c7b9c08e13368368b506f01b624c57ff1ca4dc751ee44435f411174091cc7ec017cf0b93a9f2d52cc1df7bb118c93ffd8ed3f470669dcb59e3bec43c56f2af1d8d158bb00398ea65ffaa0bed434efe3a50aa3a699512c630a60b6f031ab5ffb056754337469f9f79fea00ef238c72c7390fb122c9a1bf1b4c0ca0dd3addbaf9ce90a7a2eaedc7edbcee0cb784fd4b61b3a0a4e4557b34baa71dd19742dd5425a7d9334d2c5c66cd6a5f16363ad1f958ffced6d372b0333fba28a96fc701363f332232194868481013027fcae8ea3534eabb1348c75e6f500aadc6c2d66886c47038d6c298d9b74ba0bee797217cef7c773c108363f32cfdbe062ce349580020d93a58f01f9425576cc06bd5a1d8858a1ef34c26bd93a8f583be2567ea719f3798de56671db060fbe55ae00622bd6cebc5ad51c12d7bd72ebece35f0051a562467cdb85e5adda0060b82ae396bd2213ad0b758a227247bbc38bfaa06e33efabb1773e090261923771d22c85217d53b9bc7e220ac6aa7098c07d43bdb67d2e659d541145dfc2aaf4cc91e77721efdeb1b102baf6a3580a93b0b2d98563d03fefa5e34adbdb078ca349fd21bd0f5fc63c49fef33b22a0bfa5e820be66f471b755efabd64275755e466cbb1ef60b451341bbfcb7d6c339c8683d1a73e4fc50018d28c1663bba908a0a2dd3fe530919c69e9e843b7500e75e3d2baf8b932363f9b55628556722d21fbe268302d868f23539a0620e5866cc1e17d43db765d8b3dc5103b3eccce2e2798bda2836be283e91fdf24e0046e8233932d396294cfba8a9d5677c4777492456bdf6baebbbb81b23965fbdc694bebe8ac086fb43deb5562304eb56dbf39d6905b060da7c0602ba9beeb86643b317e6b5d83b92e96d26edec23c17b79b5b4b98f9d5aaff904d68fbd1be4615881ac7d8e04d87b5613de149efc4ec69e6b0a3c4260836acec6c8a2de7a30501db460edddbd49456c34d7b55f8692bf422a81b2402994982fb0afcbae3af6dacdf2ec9177030736c8f293e6f4b02ac676d6759fb894371de5ec24d1162cb7331fbb936ddc347bfafd7280de5c210c21b91e3ac75424d31d12ef4032f979a243958c8236161b50b11a0f587c66286bc39392defb4d2f47fc3a55e48c071b0cc4e86932d9d77a26b6846424b09ae9018faa29c48397e34eb20f9b64caa0615928748db68be422ae59891051482d212a053cd89df104019c8da8adfc4dbec4f4202937dcc7e86dec5320fabd2cae057c9dccb58e2df6643dd9935b98fdac987ea6879c9d722c6b8a4dfef9667be1f388cfe73e2f867dfebd036efcc0f0383bf7b450c0dd51e805ec8e0b3d0ab84e8fe17e59202603254f9f75ca8da23b6f0bf4b4ca08d4f25b00a6e845d62dce213b9f08109db5878633a4eebdfad27298a5c2d5cd1a3e7023795710a349cc64b0bc00020eeab320012621ada7fcc2471a961fff6cdbcefa6d4c45918417610798d92588861b01e07c82d67fa725546bbe1225139a56dca7537a39bbe136b5f6093fdc63009309ccd3f55e25098d8dfb5f396d3cf4ab1112c0c392ca5532ff5e7ff699be9f976fd63a1aa5b121e2128671cd93385d9394ac08e83f53e38151c89ec278d0ed0c1a4643c286231159294f1aa0537ce4b4d8b760ca0a57169f0432d31414c62dd0b0e43013266609a7149a0241a15f5495ecba56f4ea00d22452f4051392d3a7fe39e30258e068941de7969706e625317116dbeb50d288e2f17b9e5f30777e7a7eb2549fb5a0afed1c65eaea159ce799cd0b438c5eaefb028c0f717ed77c5130c75670e0b6d415d77becaadef10c2dc67fd880dd5a6b9dd27fb221cdad555229ee9e0f2401d4754233d31f428fa3e37b62ac88f383b99f624b0c491be8e8abfa1fe6953b8a882fa81617dc12c062fc1ea400e5f15fe04b979a6bea2c5b6b265b3f727547a3e0b5b9a575f8d8223a2f4b21cd75e18acbcfc07a6e78beed9126db3c8ed1cb50e479a9d80d68d3ab97614a2fe5e1c07a791a974619c4381c2ffda6a93860aaaf7c19f27b59a4a43c4c8953d45ca516ee7caf866aff31bb3c46de37f296f0bbe38292bece6201b8f943bc0b84b62240feac0153413a95ac03a4b2eabfaf0d40192a75d48bef2836ddd70f1b07e0eeb01a03afa9539847de72d58425c943893249521df7d38c47ad768bcd221e194e86dd34df52e2343b2ab07f654dec82fdd06cd0361b84bb112dc2621f6afee0f90fdaea2a5b7002044ae187c47130fa22bc9872779a44cda4fedebea5c628800a0e929b3b69747ad89812d271d6d1c4120c22fd984869d186804c5ac7f21a39dfb19d3564dd2abd0ed1fdaac03a5d024a08b80a72e514e62c9ae3f12b7da7d3e24c050cc5a06fce1698b00e980443fcc9d72eaf82a81541690d955924a8b7cbf9344d79d14cf1d9d9ab4deadc20b3ba96bfcc9f9e9198f1610f5e64a471cc9eafd8fb477614009700d431ca30c825db09e4d721cd6a8c904535ff808967b3770fc74a604104d8ceb23c4ba3f4dfcbfc20f1e6801d56cded9a898fd22a1a12739a8e2c4a34324ac7816b404a33bb5c012b976745c8ed3a78cb3210e5a0d664b86e5eb2e5b32787130a51a540dc8e1d4370aeb07ad746b15aec19e7d921818c8486716b8384f399b63c7c6b3fff6d1c9970b0d2b872a7461f59c9a43098e1af52a17c67b0c017fa8baf23d5ae84b690295de1861287a8b049ff8e85e12622e6d5f5ddc2577cbdf16e0205839ffb4b544d1f7cd424b4dbc83bd0d70bac2d3c1529ee19c77a371d03ff6dc468bba4641b2d13ad15033386b2eab20be56d25fdfe399c218b8c50190011b04e90753fd1009e69f0bd64e14e21796aac6b930450be17ab846de1b9037440c85165fd2722a02411bf435462cc6e7d72fe78d4f7d92c71030f6e96067845ffa8c6d06e0a1cb1132f8e10bef8f2944c808aaf0c55b8717e521a4368990a17c024ded6d3c0507561f8878928ca4f16af49d838a45bd47efc039ab250242adf09396eef6bfeead515c6cfc3797b588fe163a30828621d866b105de5a20b54db814a0a39098e7564ad331e4cadcc54c31bb97185e5097397892928cbb06df7aab484e1164a62672d09928e4039e1b18b965cd0c4295613cb6e4ba2181f9e295690d3f3a97d82ff00272601175fb290fe9a7fba2f20bdce9dfaeea0d289d06e33b1bcafb6a5a773004832542bfe6174ff2cac944fcbf2e7b4e2ea7f0d8315511c38121abaf3a7585d77feca23e089ce44ed4e6daa9a95eefea9586f2924a154a64828b0d94505bb83c330cf9f0d279f79a70ef73b74dfc6bb60ec2ac586d30989a510c254dfd47b837b63293c00d315aa5d06146f604b83d7852942f7ca2d930dc8eb957c2d7427d0affdfa1acfb6e2087992b9311986115e7fa3e31a07bbb620114cb3fd3be3be2ea1f28793be9f45dda6b36affd9efe33dd2fbe6040fc55367cd6d5eb2627316c71827e9a392f71f5296de7cba37dbeeebb38afe11c53d8b77c802b810c39672bd4c1f1e6a8ab6e448a05a7824325f3251b1a39db1d767bd1cadce4558a3e74de7fbdc64c35a2280a833403280ecd89e48f615f4bb98ac52d2f12230343b074724c46fcea3b26edd9cfd1f1dc6e83fbc723b91b6445b0d9dcdb2a1a7295efeb11c02467d626cab543f58440e2dff42f3f52fe4bc4bff2627b129f5af6c7b55e0652551a99fb6d50482f4517c55693082933f0fc11ae514576672be6c119692fba7f9447ca75a969c0070c7546a6406a098d3af6c802147fce1b14063274b3647248e0db4a212fa5002b09bebb042f4553c70cc45f02cc8a705f2859a3eb03a6545265a750ece5edc02b19595f30e46f212cab2ea49c7cdd6289bf5bde8b912b104a2734e779d2dbd7ceb6b1ae072e12cddcd9a04c075ef926582ba9371a2b7c3df84cff03b8e3c3ad8d61f543a62178ed71114a8252151cd453d14568ce3440597db84563ead5a37e92fd1f6598a5ed2a5707677de41ebb57e60e0b88b49d74fe3a84ca915f6fc0c283d6cc0d7d71d8cabfab328f732cadf15fc080ab3d572434c377400aabd6425546dce456b5f530ad35fa46f2cb517e13c951f0c700cb18e0a81f923b1a4b36934b4d068f6a785819500587d9148af3cd4292190a9602f8a63c9a33e69b7b0b1a3e0a87be7f711f1a810b8d34b851c83f52372e0cb84ce87d09fa9f856c34263041c16f50a8a3401ea7e69424f3c515ca4fe4701c37726179200c4cda9f0b9d64fbb4536d77eca7120a8959d5623534dceb99f6856c4310fced0452db35fbbcd4928edaa7d5195e596db7ac3f000e193f84624d1b6bd78de970efac84b1c40b45413a9ce8e58d22fb912d9a62b6c38c1fffbe7f2b9f00d0c1ec48ee10295262465c8d914faea7c38f18735fe808db418a9f682c564cf24f578886f768319c36302662e88e79c63cb49523c3f9957104716869df27062a687df331e58119b92a4de4bb2d5e4afb923b9ac483d8ebf32711be65c09b7f568a193eb7dbada4cacde8528374f9fec6414ba5875ef3d9fef71eb998014e73de7772709ba489a1089af8846afd849fc1751b6d060c4ed7b1aa8d5c278288b9d75ebfb2efb00acd5d861cd6c42b175da27ceeb316d44eee1fd9b87901e6c721dc5feff2e6d37a0407365fe6aa54fab5b296d809b26455a7c06c1cfcec32c6aa7c6db0bf14089925eecf4558dec27dffdaf9ba949e94"}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000000)="48b8a5f8c0551b1936450f23d80f21f835400000600f23f848b800000000000000800f23c00f21f83503000e000f23f866baf80cb0f52881ef66bafc0cedf3470f09660feea806000000460f01c00f01dfc42261bf000f01c2b9e20a0000b800200000ba000000000f30", 0x6a}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x34, 0x25, 0x101, 0x70bd22, 0xfffffffc, {0xa}, [@typed={0x1f, 0x10d, 0x0, 0x0, @binary="b669019fd02c090947811045b832755b33b13b0845719e4c0d9527"}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048957}, 0x0) 6m57.781892017s ago: executing program 33 (id=1283): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000440)=@vmx={0x8, 0x0, 0x2080, {0xb000, 0x200000, {0x2}, 0x1}, {"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", "48b5e36e51cd913c9fe6361cc02d7746375264cba52e9f4f0b9c54f95e108790d26a497f399b09a28236912bd076c7dd2523365884a2276bb87c2729728c7eac011d4bbf22d15cf088b551211e5f11b17eb4539f1fb279e82316f2c57a2e388d01c0835a87da3f51c0b82d9b67251c4dfea2aecf3b83ea6e99621645450ea7c86d7bf8303f53d6c9cecf507a6bbd2a5ae9fc114921dea106bda0152aff19f87b01c5c38cf7575ca181a047714024dc8047f61f2c8ae686c0b11b507e06313f01bd025490ae3e715a9eea2dca71415ee177fb11a386814d2aea6864a55ca7258d386140bc60d1c533ad01427ff7dbeb19eb1c1701f14b4e9b3361e695aa0f6434503b3818d914e67325766f9bab270a8fb3ac9a9fb34b22482d504884044cb9add2d47966ea45630a73855fa7750f7aade219f06043a7dd3f865b3ae068f1c6584f8881b3733efea1a68a6638894bd29e3acc6fc6aa935b32f88098fd306128eedc67e705981ac229ab6ac5c2f7e97a72c19b35bcf1a81be78c3a15975184849ad05ce6cffeeff35cd36f73ba2b817a830198c99d58012ce69b6992c0c7d189b5b1758d4d33d5f8e8ba7a7219ed8b19555f71b6a1fa9ef4aeb34f24d9acd5d1744138016c0217f84a08c99167f4ca1f12d7362956e4734d270db10fdfde864a6c24412e915faf66256ac6cb33ced5ec7f80d24aba17689b26a48f3bcbdcb95736339f93103551db78ae59e60d0705abda600d8cadd26ad140c30e60175c1fc29395bb741e71aa49867e00aefc810c18cb224effe42bfefe5db9856f79475a7edddf9ef8b4a1875911e1a364a2bd955084e233338cf7c6b7448933e57f985a391a531d3bc0943cd0fb182e9c582ba8a8604041328c34386acec6006323d37e794cdc0a1b6f58fb4b9e1d1e65e50d1961aabd07b56a71265aacd9fa99e647aa2e7ba14c58ec6eb5f2b59bed8ab11fd88207690515acffadbd1cffad40ec4725181b16e3cc3e7c3aefb467e0ea8bffc923d017ef073defed8591ac1e0fd6759c938c8ecf6769a9ba3c1cf75d2c7b9c08e13368368b506f01b624c57ff1ca4dc751ee44435f411174091cc7ec017cf0b93a9f2d52cc1df7bb118c93ffd8ed3f470669dcb59e3bec43c56f2af1d8d158bb00398ea65ffaa0bed434efe3a50aa3a699512c630a60b6f031ab5ffb056754337469f9f79fea00ef238c72c7390fb122c9a1bf1b4c0ca0dd3addbaf9ce90a7a2eaedc7edbcee0cb784fd4b61b3a0a4e4557b34baa71dd19742dd5425a7d9334d2c5c66cd6a5f16363ad1f958ffced6d372b0333fba28a96fc701363f332232194868481013027fcae8ea3534eabb1348c75e6f500aadc6c2d66886c47038d6c298d9b74ba0bee797217cef7c773c108363f32cfdbe062ce349580020d93a58f01f9425576cc06bd5a1d8858a1ef34c26bd93a8f583be2567ea719f3798de56671db060fbe55ae00622bd6cebc5ad51c12d7bd72ebece35f0051a562467cdb85e5adda0060b82ae396bd2213ad0b758a227247bbc38bfaa06e33efabb1773e090261923771d22c85217d53b9bc7e220ac6aa7098c07d43bdb67d2e659d541145dfc2aaf4cc91e77721efdeb1b102baf6a3580a93b0b2d98563d03fefa5e34adbdb078ca349fd21bd0f5fc63c49fef33b22a0bfa5e820be66f471b755efabd64275755e466cbb1ef60b451341bbfcb7d6c339c8683d1a73e4fc50018d28c1663bba908a0a2dd3fe530919c69e9e843b7500e75e3d2baf8b932363f9b55628556722d21fbe268302d868f23539a0620e5866cc1e17d43db765d8b3dc5103b3eccce2e2798bda2836be283e91fdf24e0046e8233932d396294cfba8a9d5677c4777492456bdf6baebbbb81b23965fbdc694bebe8ac086fb43deb5562304eb56dbf39d6905b060da7c0602ba9beeb86643b317e6b5d83b92e96d26edec23c17b79b5b4b98f9d5aaff904d68fbd1be4615881ac7d8e04d87b5613de149efc4ec69e6b0a3c4260836acec6c8a2de7a30501db460edddbd49456c34d7b55f8692bf422a81b2402994982fb0afcbae3af6dacdf2ec9177030736c8f293e6f4b02ac676d6759fb894371de5ec24d1162cb7331fbb936ddc347bfafd7280de5c210c21b91e3ac75424d31d12ef4032f979a243958c8236161b50b11a0f587c66286bc39392defb4d2f47fc3a55e48c071b0cc4e86932d9d77a26b6846424b09ae9018faa29c48397e34eb20f9b64caa0615928748db68be422ae59891051482d212a053cd89df104019c8da8adfc4dbec4f4202937dcc7e86dec5320fabd2cae057c9dccb58e2df6643dd9935b98fdac987ea6879c9d722c6b8a4dfef9667be1f388cfe73e2f867dfebd036efcc0f0383bf7b450c0dd51e805ec8e0b3d0ab84e8fe17e59202603254f9f75ca8da23b6f0bf4b4ca08d4f25b00a6e845d62dce213b9f08109db5878633a4eebdfad27298a5c2d5cd1a3e7023795710a349cc64b0bc00020eeab320012621ada7fcc2471a961fff6cdbcefa6d4c45918417610798d92588861b01e07c82d67fa725546bbe1225139a56dca7537a39bbe136b5f6093fdc63009309ccd3f55e25098d8dfb5f396d3cf4ab1112c0c392ca5532ff5e7ff699be9f976fd63a1aa5b121e2128671cd93385d9394ac08e83f53e38151c89ec278d0ed0c1a4643c286231159294f1aa0537ce4b4d8b760ca0a57169f0432d31414c62dd0b0e43013266609a7149a0241a15f5495ecba56f4ea00d22452f4051392d3a7fe39e30258e068941de7969706e625317116dbeb50d288e2f17b9e5f30777e7a7eb2549fb5a0afed1c65eaea159ce799cd0b438c5eaefb028c0f717ed77c5130c75670e0b6d415d77becaadef10c2dc67fd880dd5a6b9dd27fb221cdad555229ee9e0f2401d4754233d31f428fa3e37b62ac88f383b99f624b0c491be8e8abfa1fe6953b8a882fa81617dc12c062fc1ea400e5f15fe04b979a6bea2c5b6b265b3f727547a3e0b5b9a575f8d8223a2f4b21cd75e18acbcfc07a6e78beed9126db3c8ed1cb50e479a9d80d68d3ab97614a2fe5e1c07a791a974619c4381c2ffda6a93860aaaf7c19f27b59a4a43c4c8953d45ca516ee7caf866aff31bb3c46de37f296f0bbe38292bece6201b8f943bc0b84b62240feac0153413a95ac03a4b2eabfaf0d40192a75d48bef2836ddd70f1b07e0eeb01a03afa9539847de72d58425c943893249521df7d38c47ad768bcd221e194e86dd34df52e2343b2ab07f654dec82fdd06cd0361b84bb112dc2621f6afee0f90fdaea2a5b7002044ae187c47130fa22bc9872779a44cda4fedebea5c628800a0e929b3b69747ad89812d271d6d1c4120c22fd984869d186804c5ac7f21a39dfb19d3564dd2abd0ed1fdaac03a5d024a08b80a72e514e62c9ae3f12b7da7d3e24c050cc5a06fce1698b00e980443fcc9d72eaf82a81541690d955924a8b7cbf9344d79d14cf1d9d9ab4deadc20b3ba96bfcc9f9e9198f1610f5e64a471cc9eafd8fb477614009700d431ca30c825db09e4d721cd6a8c904535ff808967b3770fc74a604104d8ceb23c4ba3f4dfcbfc20f1e6801d56cded9a898fd22a1a12739a8e2c4a34324ac7816b404a33bb5c012b976745c8ed3a78cb3210e5a0d664b86e5eb2e5b32787130a51a540dc8e1d4370aeb07ad746b15aec19e7d921818c8486716b8384f399b63c7c6b3fff6d1c9970b0d2b872a7461f59c9a43098e1af52a17c67b0c017fa8baf23d5ae84b690295de1861287a8b049ff8e85e12622e6d5f5ddc2577cbdf16e0205839ffb4b544d1f7cd424b4dbc83bd0d70bac2d3c1529ee19c77a371d03ff6dc468bba4641b2d13ad15033386b2eab20be56d25fdfe399c218b8c50190011b04e90753fd1009e69f0bd64e14e21796aac6b930450be17ab846de1b9037440c85165fd2722a02411bf435462cc6e7d72fe78d4f7d92c71030f6e96067845ffa8c6d06e0a1cb1132f8e10bef8f2944c808aaf0c55b8717e521a4368990a17c024ded6d3c0507561f8878928ca4f16af49d838a45bd47efc039ab250242adf09396eef6bfeead515c6cfc3797b588fe163a30828621d866b105de5a20b54db814a0a39098e7564ad331e4cadcc54c31bb97185e5097397892928cbb06df7aab484e1164a62672d09928e4039e1b18b965cd0c4295613cb6e4ba2181f9e295690d3f3a97d82ff00272601175fb290fe9a7fba2f20bdce9dfaeea0d289d06e33b1bcafb6a5a773004832542bfe6174ff2cac944fcbf2e7b4e2ea7f0d8315511c38121abaf3a7585d77feca23e089ce44ed4e6daa9a95eefea9586f2924a154a64828b0d94505bb83c330cf9f0d279f79a70ef73b74dfc6bb60ec2ac586d30989a510c254dfd47b837b63293c00d315aa5d06146f604b83d7852942f7ca2d930dc8eb957c2d7427d0affdfa1acfb6e2087992b9311986115e7fa3e31a07bbb620114cb3fd3be3be2ea1f28793be9f45dda6b36affd9efe33dd2fbe6040fc55367cd6d5eb2627316c71827e9a392f71f5296de7cba37dbeeebb38afe11c53d8b77c802b810c39672bd4c1f1e6a8ab6e448a05a7824325f3251b1a39db1d767bd1cadce4558a3e74de7fbdc64c35a2280a833403280ecd89e48f615f4bb98ac52d2f12230343b074724c46fcea3b26edd9cfd1f1dc6e83fbc723b91b6445b0d9dcdb2a1a7295efeb11c02467d626cab543f58440e2dff42f3f52fe4bc4bff2627b129f5af6c7b55e0652551a99fb6d50482f4517c55693082933f0fc11ae514576672be6c119692fba7f9447ca75a969c0070c7546a6406a098d3af6c802147fce1b14063274b3647248e0db4a212fa5002b09bebb042f4553c70cc45f02cc8a705f2859a3eb03a6545265a750ece5edc02b19595f30e46f212cab2ea49c7cdd6289bf5bde8b912b104a2734e779d2dbd7ceb6b1ae072e12cddcd9a04c075ef926582ba9371a2b7c3df84cff03b8e3c3ad8d61f543a62178ed71114a8252151cd453d14568ce3440597db84563ead5a37e92fd1f6598a5ed2a5707677de41ebb57e60e0b88b49d74fe3a84ca915f6fc0c283d6cc0d7d71d8cabfab328f732cadf15fc080ab3d572434c377400aabd6425546dce456b5f530ad35fa46f2cb517e13c951f0c700cb18e0a81f923b1a4b36934b4d068f6a785819500587d9148af3cd4292190a9602f8a63c9a33e69b7b0b1a3e0a87be7f711f1a810b8d34b851c83f52372e0cb84ce87d09fa9f856c34263041c16f50a8a3401ea7e69424f3c515ca4fe4701c37726179200c4cda9f0b9d64fbb4536d77eca7120a8959d5623534dceb99f6856c4310fced0452db35fbbcd4928edaa7d5195e596db7ac3f000e193f84624d1b6bd78de970efac84b1c40b45413a9ce8e58d22fb912d9a62b6c38c1fffbe7f2b9f00d0c1ec48ee10295262465c8d914faea7c38f18735fe808db418a9f682c564cf24f578886f768319c36302662e88e79c63cb49523c3f9957104716869df27062a687df331e58119b92a4de4bb2d5e4afb923b9ac483d8ebf32711be65c09b7f568a193eb7dbada4cacde8528374f9fec6414ba5875ef3d9fef71eb998014e73de7772709ba489a1089af8846afd849fc1751b6d060c4ed7b1aa8d5c278288b9d75ebfb2efb00acd5d861cd6c42b175da27ceeb316d44eee1fd9b87901e6c721dc5feff2e6d37a0407365fe6aa54fab5b296d809b26455a7c06c1cfcec32c6aa7c6db0bf14089925eecf4558dec27dffdaf9ba949e94"}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000000)="48b8a5f8c0551b1936450f23d80f21f835400000600f23f848b800000000000000800f23c00f21f83503000e000f23f866baf80cb0f52881ef66bafc0cedf3470f09660feea806000000460f01c00f01dfc42261bf000f01c2b9e20a0000b800200000ba000000000f30", 0x6a}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x34, 0x25, 0x101, 0x70bd22, 0xfffffffc, {0xa}, [@typed={0x1f, 0x10d, 0x0, 0x0, @binary="b669019fd02c090947811045b832755b33b13b0845719e4c0d9527"}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048957}, 0x0) 17.967326291s ago: executing program 5 (id=3056): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="1802000043000701fefffffffcdbdf25037c000004004580000201"], 0x218}}, 0xc000) syz_open_dev$vim2m(0x0, 0x0, 0x2) (async) syz_open_dev$vim2m(0x0, 0x0, 0x2) socket(0x2b, 0x2, 0x0) (async) socket(0x2b, 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x18, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x1, &(0x7f0000000080)=0x1, 0x4) syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) (async) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x7) gettid() (async) r3 = gettid() r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r6, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x1, {{0x40}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48800}, 0x4800) 14.707123787s ago: executing program 5 (id=3063): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0x10001}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2}, 0x50) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r2, &(0x7f00000000c0)=""/144, 0x90, 0x2f) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40603d10, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvfrom(r3, 0x0, 0x0, 0x40, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) syz_open_procfs(0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/comedi1\x00', 0x20200, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000300)={'aio_iiro_16\x00', [0x4f23, 0x2, 0x1, 0x3, 0x1, 0xdea7, 0xe, 0x1003, 0xa, 0xa6, 0xfffffffa, 0xffffffff, 0x401, 0x8000001, 0x6, 0x105, 0xf7fffffe, 0x5, 0x2, 0x40000001, 0xfff, 0xca9f, 0x0, 0x20001e58, 0xb, 0xc3, 0x3, 0x400005, 0x800081, 0x0, 0x4]}) 11.546910303s ago: executing program 5 (id=3070): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0x10001}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2}, 0x50) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r2, &(0x7f00000000c0)=""/144, 0x90, 0x2f) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40603d10, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvfrom(r3, 0x0, 0x0, 0x40, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) syz_open_procfs(0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/comedi1\x00', 0x20200, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000300)={'aio_iiro_16\x00', [0x4f23, 0x2, 0x1, 0x3, 0x1, 0xdea7, 0xe, 0x1003, 0xa, 0xa6, 0xfffffffa, 0xffffffff, 0x401, 0x8000001, 0x6, 0x105, 0xf7fffffe, 0x5, 0x2, 0x40000001, 0xfff, 0xca9f, 0x0, 0x20001e58, 0xb, 0xc3, 0x3, 0x400005, 0x800081, 0x0, 0x4]}) 8.407796682s ago: executing program 5 (id=3079): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xfb}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000100)="ac", 0x1) recvmmsg$unix(r1, &(0x7f0000003600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10003, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0x62181) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x4, @tick, {}, {}, @raw32={[0x25fd, 0x0, 0x20000]}}], 0x1c) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000000)=0x63, 0x2) 6.952301012s ago: executing program 6 (id=3083): io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xc7}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f000026a000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000427000/0x1000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0xc29, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0xc1}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000006800010003001000fdffff7f00000000000000000c000200010000001582e400"], 0x24}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f00000df000/0x12000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x8399}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x0) write$uinput_user_dev(r4, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x0, [0x6, 0x0, 0x200, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0xffffffff, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x6, 0xb16, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xd, 0x1000, 0x0, 0xf, 0x2, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0xffffffff, 0xfffffffe, 0x0, 0xff, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffffa, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xe, 0xffffffff, 0x2, 0x2], [0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xddc, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7, 0x4], [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc045, 0x0, 0x16, 0x0, 0x4, 0x0, 0x80, 0x0, 0x3, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) write$uinput_user_dev(r4, &(0x7f0000000a40)={'syz1\x00', {0xfffd, 0xd}, 0x4d, [0x0, 0x0, 0x0, 0xbffffffd, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x120, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffc3c3, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x3, 0x3, 0x0, 0x0, 0x6, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x0, 0xfffffffc, 0xfffffffe, 0x0, 0x4, 0x0, 0x20000, 0x4, 0x0, 0x0, 0x800, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1c, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2842, 0xfffffffe, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0xfd5], [0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3153, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xfffffffc, 0xf9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ff, 0x3, 0x7fffffc, 0x0, 0x0, 0x207fff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x7ff, 0x0, 0x6, 0x2], [0x8081, 0x6ba9, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfc2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x2, 0x2, 0x0, 0x0, 0x760, 0x0, 0xe58b, 0xe, 0x800, 0x3, 0x0, 0x1, 0x1ff]}, 0x45c) add_key(&(0x7f0000000000)='id_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) io_uring_enter(r3, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) socket$netlink(0x10, 0x3, 0x0) 5.116269364s ago: executing program 5 (id=3087): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x48890, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) flistxattr(r1, &(0x7f0000000400)=""/250, 0xfa) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000080)={0x1, 0x3}, 0x8) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) 5.033330044s ago: executing program 2 (id=3088): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f0000000040)='dax\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000880010001"], 0x50) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f00000000c0)='csum\x00', &(0x7f0000000200)="1fa893252270a090aa031e24e9cb1dbaca103e9f4bc4a870e527531786e4694e77e5d065dc9a6e99e594976f9878a1512308670d41c71fe5278fa32383be996891e254cd8fe6277aae8b0bf278c0aba7fb4b3d228e8a136db83563d82649913882237ba5a54ccae8cbf86abed38a2dc7a90886517c2b839830f86659e4b3bfa988782ccc9b71c8084256b80ad31f8862e2be87f8c4e692b4ccd8ce91537046e4f00f20a0da91d044cffe9cc16e2a8543ad1ea1e371ad7bf602adf0ed38226f31b9", 0xc1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) recvfrom$inet6(r3, 0x0, 0x0, 0x12062, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r0, 0xffff, 0x4c4, 0x2}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x180, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket(0x10, 0x2, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup(r8) socket$nl_generic(0x10, 0x3, 0x10) 4.814243248s ago: executing program 6 (id=3089): r0 = socket(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000"], 0x17) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000380)={0xc}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, 0x0, 0x800) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f00000005c0)) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20048810) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000"], 0x70}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x3ef, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_HWPT_ALLOC$NONE(r6, 0x3b89, &(0x7f0000000180)={0x28, 0x1, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r0}, 0x20) 4.205601026s ago: executing program 6 (id=3090): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0xfffffffd, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x1, 0x1, {@ip4=@loopback, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @random="5fb04fe346d2"}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 3.550419171s ago: executing program 6 (id=3095): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x488000, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0xc, @val=@iter={&(0x7f0000000100)=@map_fd=r0, 0x10}}, 0x20) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) syz_clone(0x8a000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) eventfd(0xfffffff9) r1 = gettid() r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000000)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x24040040}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) fspick(r0, &(0x7f00000001c0)='./file0\x00', 0x1) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) tkill(r1, 0xb) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) getgroups(0xfffffffffffffdb2, 0xfffffffffffffffe) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x1}, 0x1c) 3.496687714s ago: executing program 2 (id=3096): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0x10001}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2}, 0x50) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r2, &(0x7f00000000c0)=""/144, 0x90, 0x2f) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40603d10, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvfrom(r3, 0x0, 0x0, 0x40, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) mmap(&(0x7f0000202000/0x2000)=nil, 0x2000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x55b23000) syz_open_procfs(0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/comedi1\x00', 0x20200, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000300)={'aio_iiro_16\x00', [0x4f23, 0x2, 0x1, 0x3, 0x1, 0xdea7, 0xe, 0x1003, 0xa, 0xa6, 0xfffffffa, 0xffffffff, 0x401, 0x8000001, 0x6, 0x105, 0xf7fffffe, 0x5, 0x2, 0x40000001, 0xfff, 0xca9f, 0x0, 0x20001e58, 0xb, 0xc3, 0x3, 0x400005, 0x800081, 0x0, 0x4]}) 2.530671966s ago: executing program 1 (id=3098): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f00000000c0)={0x53, 0x39, &(0x7f0000000000)="e41aedc331e2cae9b3489698394ae8ea85a856cd4d070ee58b29d2446ba0db7aa9f4b23749b012a86ff78e8c69f4144d8813384fdb0dc0091fcc2a36cb38bc46f1350b2067c226f7f9c0cabc5ee74fdca42b44b34dd3eedc644c4223052be13ae354b7fc6f3844a492a8b7a39e32e57ea1229bed86eb67e730fb0a8ef411ab40122a5f44445f2ff074", {0xfffffffd, 0xb, 0x34324948, 0x2, 0x90, 0x1, 0x8, 0x1}}) (async) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000100)={0x2, 0x2, @raw_data=[0x6, 0x0, 0x3f89, 0xffff0001, 0x4, 0x1, 0x2, 0x6, 0xfff, 0x0, 0x2, 0x3, 0x7, 0x67, 0x7, 0x881]}) (async) io_uring_enter(r0, 0x572a, 0x1db3, 0x11, &(0x7f0000000180)={[0x63]}, 0x8) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x2) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f00000001c0)) (async) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000340)={0x14, &(0x7f0000000200)={0x20, 0x23, 0x11, {0x11, 0x6, "e10ba81f5e41782a8c06f71ac00396"}}, &(0x7f0000000240)={0x0, 0x3, 0xca, @string={0xca, 0x3, "3444f42a123a7cbbff3f8ccfe73e7372a514652cc92b3a4b5a5a202e23e453b9f445d21b4dfbf4e58adea6660cec1d7b3268b52f1d61d3a9a95d9db30690c37eb24a772d6a1d431ceae64260f25e259b38e86eb76d303fde76b58a651586c16e9a9a0f7c92ad70aca8796f05a0ac7c418b7494561604fe00514932b3052d535a556c081df2b6279eb431c906b09633c9a1d9d166013bbbc3dc7843d198eb47a1a89b25e193101b5b65e718fe258e8c50e5765e3da3f41e98c9806b510147af3584cde1faf2c6b838"}}}, &(0x7f0000000600)={0x44, &(0x7f0000000380)={0x40, 0x14, 0xae, "65eec07e1acbbcd86a8ad15d5fc8f9e7b521ac3a36717d5df7a8caa4cc371cec8c9a975c7f994971b44f13c03abc211e3e3e40cbd2ab0647a42b5c3449917d3d4b8a57c9c048ac9b11753eab615a5661d54ca10d81521aefeea0b2a14322774792af41b978bb0ab34e0f23a614a39984d45d43e2ed012f5bbe3462b098c9194f050bc90852cd735bfcec19ade32881e1cd75833ea5a6ff53fb8221594a25459618ef62e5551ae0e5a353ef8ed841"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x20}, &(0x7f00000004c0)={0x20, 0x81, 0x2, "1929"}, &(0x7f0000000500)={0x20, 0x82, 0x1, "d5"}, &(0x7f0000000540)={0x20, 0x83, 0x2, "dcb0"}, &(0x7f0000000580)={0x20, 0x84, 0x2, 'UR'}, &(0x7f00000005c0)={0x20, 0x85, 0x3, "5fb6bf"}}) (async) r2 = syz_usb_connect(0x2, 0xabd, &(0x7f0000000680)={{0x12, 0x1, 0x210, 0xfe, 0x7a, 0xaa, 0x20, 0x403, 0xbfdd, 0x2bef, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaab, 0x3, 0x54, 0xd, 0x70, 0x6f, [{{0x9, 0x4, 0xf3, 0x1, 0xf, 0x4, 0x24, 0x80, 0x9c, [@hid_hid={0x9, 0x21, 0x8001, 0xfa, 0x1, {0x22, 0x46e}}], [{{0x9, 0x5, 0x1, 0x0, 0x40, 0x9, 0x4, 0x25}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x4, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x2}]}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x8, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0xff9f}]}}, {{0x9, 0x5, 0x1, 0x3, 0x20, 0xf, 0x0, 0x5}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x41, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x42, 0x7}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x5, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xc0, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x6}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x7, 0xaa, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x4}, @generic={0xab, 0x9, "ca5141bdc7270e1af3886872c7f9bd25513179c3b8845956ba89a3ad06f0ccb7f2fc966f74dc27c49afbdd8c34b5b1fac86fa7a025b5056e9612c67eeae29a3d6793d04a862051ad5774cb493a84922170ae17f5dea9427ea42351796cd152c9be22f1dcf8a927dae89a2ad7e847eb3233ba550b5edd53955240a270946b691393199fe6c22c1cb82e9173c78b19ec5454dda0d3d09a7fc1587f9a79e08f86d2a44e2d7e137c11439a"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x8, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xe, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x9}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3df, 0x4, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0xf058}]}}, {{0x9, 0x5, 0xc, 0x3, 0x400, 0x69, 0xcb, 0x1, [@generic={0x5c, 0x9, "ab1359ee1a4aabeda2d288488219f5b27fc067677865525470804578fa9c931faaaa0a9792046a4a93547a48bde016307f1ef0f9824600215aaa7720d5ae1cdb9b4282257941c9802e7182a3d31dc39f680396fd82d56fe4f56c"}, @generic={0x9, 0x22, "3bd47c69c3f88e"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x618, 0x3, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf4, 0xff}, @generic={0x38, 0xd, "33881b1abb650c52dfae7477c789254367c71dd2c804b6e51405f3f7393635f61a9c1bcc9902b0cb01b6363ea2f4989bd3963683f2da"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x8, 0x4, 0xfa, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x9, 0x5}, @generic={0x8b, 0x23, "a50828d92f712378a6a1f909317ef6e9d9334db79d83d0223d8febe9bd9a07daca7afb7d2e38f7fbeaca5118458bb48a71ad08010f5cdb07e7c141cd2af36f70f6ddcfe03806679055a483ec9d71377398a11fb5414dbc8cb7b0d4779c2dde3a7305a1ae29138e9b1167322791670766b73db2c5eea52319a60cdaaa8914ae73eef7f017a3427a60a3"}]}}, {{0x9, 0x5, 0x6, 0x2, 0x3ff, 0x1, 0xe, 0x81}}, {{0x9, 0x5, 0x8, 0x1, 0x3ff, 0x8, 0x63, 0x53}}, {{0x9, 0x5, 0xe, 0xc, 0x64f011c87ecfb056, 0x6, 0x1d, 0x3}}]}}, {{0x9, 0x4, 0x5f, 0x8, 0x5, 0xef, 0x7a, 0x9d, 0xff, [], [{{0x9, 0x5, 0x5, 0x0, 0x200, 0x0, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6e, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xe1}]}}, {{0x9, 0x5, 0x2, 0x2, 0x40, 0x6, 0x97, 0xf6, [@generic={0xbf, 0x4, "57b25d5d5864ff24f42a35e945898708d6ad42a3a839622c06b825528a29b0aec84cb3177685f572ec12276fcd99fa0763622d61177c2a420b4a5ca2d21915272450039ea79f27b6f39336bbba19995fc1b5eef8c1eb7c99af30f22cb06b16f3738bfb7398de9ea91c6d52423f72ec6462821c91e3f141acbb3d859e4578507f6b0e36545211d8d9173c6771952f3228a3b289419dd67a9793d1e46a5392df714ad7e650f279c580b57cf28b9c3183c563aa29f78781fe37380382c589"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x5}]}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x5, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x22, 0x126}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x10, 0x0, 0xb3}}, {{0x9, 0x5, 0xd, 0xc, 0x7c7, 0x6, 0x8, 0x2, [@generic={0x75, 0x24, "6b3fd24a99398b159f0821feea6b89f541ec96cdf57c7ee15a9d45cc5de7a893c80fd02c040fe9e640f79f3efe3b3c610230251a64d86b3d16b29f631f64fdcca577cc468bba5e72b0ac57f374d7720825849a1dcada61307dfa1e62f2915faf1fe2b4d10c3a0d128a1d46faa89d9cb7a8351a"}, @generic={0xda, 0x24, "25c13604aaa86b5988bbba54741d4392789d25f8ef9ef3dc536d4df9af6caacbc31c13ab9f6098dd71798f00a7f17f84cf92872a9f4f60ca1e20c70963d15612f14acd7ecd667e68dc9610045eaa373debd57fecd3862dd25f9a7d1e91ddfc4826ee07388daab8d42cb41732ce10c90a7cf2693be8ec182819b9464b39e863b360e3dba26d437b006b73d1aaf516d70a6cc3de97a0b6236524d4c2ea39deecbb38756f60fce15413069a8f778545bccba6e3d912eb9f136b72fe1e25110a90fa3de69e62f3559566e0d47e71cbffcca198240ae0977bd669"}]}}]}}, {{0x9, 0x4, 0x41, 0x40, 0xf, 0x35, 0x84, 0x8a, 0x4e, [], [{{0x9, 0x5, 0x5, 0x8, 0x20, 0x5a, 0x8, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x4}]}}, {{0x9, 0x5, 0x0, 0x4, 0x10, 0x0, 0xaf, 0x7, [@generic={0xb0, 0xf, "a8bca1b1ad36b7f98c97974bf7b92fa8a39eef3f20d3d189343700ec2d941d483eac4713bcd5a6bebb80cb90e476915dc3101d77e7fff98562016546f1dc3937bccfc92fa1201f0a737788a10fbebd7419092997e37238a0b8c5db15aa652dbbd48e7536f7901beb160ffee09191a9190c7e7b68ea7fc5a4afd6660d1b71e02fedb2bdd7c3ae02c2bf9b92c8e846cd98ba4cd64d200232820c705a073a92371647b808bb60cc59da1f2163d8cc74"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x0, 0x89, 0x7, 0x8, [@generic={0x2f, 0x4, "120abfdb7e3ac04a7216e89dbbdd2010fc3f39b14251ce4eb93179c554aa4d31c58c3426dd0855813300c84702"}, @generic={0xe3, 0x3, "98819f94b0e7c92136d55128fb3969f10c6ea9da29c494df27974191cb938d21ca39a0e1cbaf49a8c9e89e4425853664a666ac004f5f76fdbbfc1371e79508c602e9345777383ca9b704234e310c373023691dafc58ce53daa489f36fbf77ef0563196c2233c986d65497f474962aba74dba26d8095c84fbe402f897a481a3c511de973a1a6eff4c839c302dbe423780acb7d6739c35ac256539716f3b72f5c41dbcea5d1640af019812290c1cc2fb5cd06064dd2e7fb04ea8da16ae87ad878a8711755c7e5abdf1387d710d0dd4d380d5deab1b11fa3b2b2c58df2d7c04b6d14f"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0x9, 0x7, 0x7, [@generic={0xaf, 0x31, "d219879c150077c074e6d84066cb525644529597aa60d2d213ca78c015b78bd22d9e040d2fabcaa03c5d7733832bf28a4cb7b58dfae8baacc0015ec880795bbb1f799fb40d6457c196bf8ffa986a651ff4f560626b665274a6d4fc68c430bdbb0069a67fbc8de04837df57cec808248e3182efb85ae1ab119193031e086a62cd85b7bc7fede1bef51f6f7ea37a29281243de2bf6a83708536560cede6141f4243f77825bf3203e6f620853aeab"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x8}]}}, {{0x9, 0x5, 0xb, 0xf334a328cf8ff971, 0x8, 0x1, 0xa0, 0x3, [@generic={0xd, 0x3, "58c8d4e6782f2d4e7f3639"}]}}, {{0x9, 0x5, 0x3, 0x18, 0x3ff, 0xdf, 0xd, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x3}]}}, {{0x9, 0x5, 0x1, 0x1, 0x3ff, 0x6, 0x6, 0x9, [@generic={0x22, 0x21, "31ec05b4a4dc2984a23ba39ca20d655ad09f67962a2d3a5ee32522da0372e4ef"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x36, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x42, 0x6, 0x8001}]}}, {{0x9, 0x5, 0x5, 0x1, 0x200, 0x81, 0x3, 0x3, [@generic={0x66, 0x10, "cc52befaff3ccc850ad19893f1773bbe880f19f98b093c834c15e40eaaaf7d2e0d57e86b9f434354f5c91dfeef70adb29d60f61fc3fffc46d07309a9b9cc932089366f59a1a023c95d8d909849aecbab1d8dfd753cb85a7a5722bdd9a2a5e20ec4a35761"}]}}, {{0x9, 0x5, 0xb, 0x1, 0x40, 0x3, 0x5, 0x3}}, {{0x9, 0x5, 0x2, 0x1, 0x8, 0x8, 0x2, 0x1, [@generic={0x6d, 0x31, "5ce62883617f5237f510e21d8e7c248a2c211bd08a4bb47e99b3de6af0886e892398d4697491f6029df1d09c0651ca1e82cef2d3e2009eff3136cd41ab7b7984c0f579e6a1bdfd2cc9dac390f9959473968195e446ea71f0c919b8f8265075e88ed67a02ecc23d9d7966f4"}, @generic={0xbc, 0x16, "9dd0bc9d70603b1a4bd9c1378dc9247a5cdb84d825c0facda1e66f262fb87969e296ed47dfb4086015cd5d27d6110888849aaa9758d5cf31134e9aebc997c1316a79c887f4d1a5e0597a034ec3cd1c0b4186c8e50912820f0d9c26ad6796ad59d7a043ca2de2943a6fce49413990e74f2ff7031d80e724b0315d2d094fd8c1001ef34e805a6df868a17295bce9118c3c0169b20320dd167baeca0a23610cad9f6cd0580743d7823a232382bb5810ca543f7ba32d66c00fe217cf"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x3, 0x21, 0xb}}, {{0x9, 0x5, 0x7, 0x8, 0x40, 0x2c, 0x3, 0xa1}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0x0, 0x4, 0x3, [@generic={0x1e, 0x24, "4806c5642f91db46f681a922cc8609de98596e25ef634005d9b4452c"}, @generic={0x90, 0x10, "4223b9b05260d86e969bafcfd74171af9887206f5f70e924ad70cc6bc2bc8cb9f32329dc29d6810c536d99b7104f79ecf72a79398784355d382cd6d1d1da951bda14911af523dc0babb550c6287b66e22db8f2d7bb8f398d2f4eb418483887cefc70c381907442932fb666b3766b9fc3742b4783e404056c314223b1cecd213c6d94216c3c4cf3987e57102d9be7"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x8, 0x8, 0x8}}]}}]}}]}}, &(0x7f0000001340)={0xa, &(0x7f0000001140)={0xa, 0x6, 0x0, 0x5, 0x3d, 0x80, 0x20, 0x1}, 0x29, &(0x7f0000001180)={0x5, 0xf, 0x29, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "996a71bb9d46f914d7c5b8e74bc2dbc5"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x5, 0x3, 0x2}]}, 0x2, [{0xbb, &(0x7f00000011c0)=@string={0xbb, 0x3, "bcc2e5e5fd968f3c19683ecb49e9d6f678677b799c52307a3210da3f0a2e42e79902ba6002e7d9595e30c5726c67e927362aa5967ee7885ae5e0abb4acc37c9ce8b4907d128235547a0e96e279d504a082deb9dc1dfc60cf433f063e592a181e73d3b5737bb4981efc18408a150890ec7e51c687a6e8ee9c05a9cd79f3c7fced88a4b6fc8fb4c7af0e6e4c0f485a328f8af0fc21dcb6b2c4edc447f7ceadad299ec0e10d3beb1a8ac406e46807e9ec420d3594aee42bd0c1cc"}}, {0xbf, &(0x7f0000001280)=@string={0xbf, 0x3, "8057df10fbe98c7767a9faf6e018e380882216860404dd90323f905892d84fd3c8635ac3aca28da8c0fde620f8eb5c43ca067f2425713532a6b01d96187a0996058712c019e2b8b9ce04421a7b0779c5e1b9320963bac2459c54a149f91912406b801844ee855835ac9f9f22741a45e3e2881334dbe9216bea591da1547f22bfc8c295cdc555655529f90a7e68cb240c3465c195245de8d43fc20e6d32bfbfa2ac86acd54b53932e4cdabc3a6a8078e1ae4d7bacff8c444d8e2e3ad72c"}}]}) (async) r3 = openat2(r0, &(0x7f0000001380)='./file0\x00', &(0x7f00000013c0)={0x0, 0x21, 0x1}, 0x18) ioctl$VIDIOC_G_AUDIO(r3, 0x80345621, &(0x7f0000001400)) syz_usb_control_io$rtl8150(r2, &(0x7f0000001500)={0x14, &(0x7f0000001440)={0x40, 0xa, 0x60, {0x60, 0x11, "e0db8c8ca4db7f12863fc5085eb6c33ab1781fb69e24ff856c43051f5d34f75cae131500ae080110262f7fe367033e4e65c3ada687f2c22d4b3e22c121c8bd3a30bc58b8a513025bf1ab3964e6ec5c1b13acc774bba0add020c9be3c565f"}}, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2428}}}, &(0x7f0000001700)={0x2c, &(0x7f0000001540)={0x0, 0xc, 0x7e, "1034346602c8a55e878726f665a8bbea16e6340bed929b95073b76b4604bcf85f128a77a22f37811582a4d397ba9969924ed284fe8a5c4a97feb967a74aebbc84750360d02741ea6ed5fff4999398e3263989cbf84ffd62a49352ae80d83cd4b3eea0b3505ed4b2c675d14ee58e695785253dc95c45f362165908da14ab9"}, &(0x7f0000001600)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000001640)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001680)={0xc0, 0x5, 0x3, "b431a2"}, &(0x7f00000016c0)={0x40, 0x5, 0x3, "1c1830"}}) (async, rerun: 32) close_range(r0, r1, 0x2) (rerun: 32) syz_usb_control_io(r2, &(0x7f0000001ac0)={0x2c, &(0x7f0000001740)={0x0, 0x22, 0x6d, {0x6d, 0x2, "68ed25a4bbe1720d4cf152238bc80bb4ff476650069cd1e4c42760b0eca2386cb3fb23a7b100330856ca17a9d620d7e8dcd791a6b2c38d587391922e72aea4a62e827aef9697459fa99db4dc2a7107e78fda3559a59c356f567b1ea0a1fffcad42fcd6ff16c3a7609fd821"}}, &(0x7f00000017c0)={0x0, 0x3, 0xfc, @string={0xfc, 0x3, "88b8fa8b623c678fcdb2a224674bbb1416b269dcada81d516349a15fb0bf589143dc7b2b202e6d5f77c48eb37f6c590151c7305df225da28cf34c89ef50c19b8320dd40e681ed92c0d3bd590d4aefb921b25289e2f29f3ac11dda0fb0e1a2b67e04cd286d788cb4987628c81d860bb3bd327de37b96202f01e9a4c91cc8eab7ce92b7b489a321d413b2ca0baa0a54088dbaaa145720d2f870b4d60db06f264c764fdbd28aa7beb2b491323ed29600c4194dbd4f2f4e21ce36b03ec690fa365731e2b1ad946d6ffb8759ad036060a183396efec9154bbc59e7fa211759576ecf30cf12f2077895a72ebe8bf75fdf32e41184b33edffb99e906001"}}, &(0x7f0000001900)={0x0, 0xf, 0x113, {0x5, 0xf, 0x113, 0x2, [@ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x7, 0xf, 0x3, [0x3f, 0xff00c0, 0xc0c0, 0xffc0, 0xff0000]}, @generic={0xee, 0x10, 0xb, "a95ab44f305b96eb8538890f0c7d4494b7094d7787d5ed9c2bfd741a6fbcd5f4af3083e0884ba67236e662d61b11efed9e6cc49ebcb9382c3a54c4349e505bf7bad337b04d877d4aa898418e12873ab9da2e87360ad24450ec9cda0126bf8535edea4801a764d314e09d19de9e38c73cf6c67de82581ab38fc9b102b6534561636745a371f99c1ae4c502be59ebe719f1b35ff246eb9758a9c6a198827ab2755e03296eb02e996a6643e0b4a3e09a82e897e9c3a8ad09e63b8c0b1a124bff90e13e596764aeebfc84299126d7ee5c5c5bdc8d11aa415e0e4fa5c97bfae9aec446544493c0bbd2cfe719a23"}]}}, &(0x7f0000001a40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x0, 0x8, 0xf6, "3712fff2", "52c129ab"}}, &(0x7f0000001a80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x18, 0x39, 0x9, 0x80, 0x3c8b, 0xa}}}, &(0x7f0000001f40)={0x84, &(0x7f0000001b00)={0x0, 0xe, 0x3e, "97e2086102f3ba41b8098e048fe19fce27b48a867e29153d0d1955de02cdb65ffe7e562e8d97e81c51276682c070208972ae5a776c1ef23f5a749b63d4fe"}, &(0x7f0000001b80)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001bc0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000001c00)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000001c40)={0x20, 0x0, 0x8, {0xa0, 0x40, [0xff00]}}, &(0x7f0000001c80)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000001cc0)={0x40, 0x9, 0x1, 0xf}, &(0x7f0000001d00)={0x40, 0xb, 0x2, "d12d"}, &(0x7f0000001d40)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000001d80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000001dc0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000001e00)={0x40, 0x19, 0x2, "20a6"}, &(0x7f0000001e40)={0x40, 0x1a, 0x2, 0xfffd}, &(0x7f0000001e80)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000001ec0)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000001f00)={0x40, 0x21, 0x1, 0x94}}) (async, rerun: 64) syz_usb_control_io(r2, &(0x7f0000002340)={0x2c, &(0x7f0000002000)={0x20, 0x8, 0xd7, {0xd7, 0x22, "ab5cb4ec955e8875790c976e8380f2227aef91e20d8a8be3c1911d2249b20a6ab72a78b10a153a840712130d80f2fb1c57b3e9b9de12fb651239c20f8d359382a1d15e2c7a558b4c9aaa53a2a806a5f146d69606a0f86b30e4e441da423a032f4813072773bbf08354ac1f987dcb2e15086b1279620a7de78683951c7b1d53c598217bd1f3854476ee2e1eb2ff6cde01c25f769ca002a53902f47dd466ca6d7286410387459612c8e0b0a677d08ff59ba0698c9465de760ef8f3858ef86ed7e9363491b4cfc9e04bf44fca9f94f9d85ef06e2bcc80"}}, &(0x7f0000002100)={0x0, 0x3, 0x3d, @string={0x3d, 0x3, "56f37a4f2a4e84f64dbffc4fa10f80ad78de9eace413ee407cef7b83e18939ad00db4d2fb4cd59c96e60da28837ee0fc1264aad6ed22b610a1fd28"}}, &(0x7f0000002180)={0x0, 0xf, 0x10d, {0x5, 0xf, 0x10d, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x8d, "08c6629a8beee30d0896bbaecdc7dfd5"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "5065d5362c166981b057cfcf6aabe7c9"}, @generic={0xb8, 0x10, 0xb, "e8f244289afbb29d8077b0c782cef30a1801f2a9afee154e1ba9dabc85ae1670fee2d1dd3652d28cb5af1252be8337a40cfaf418303231710c02be32b82a6d1a772449885383c3cc1dbbb59b1bbe05674420e6bc2975549479619cc6a625e20dea1601be90be8593b4f9d2558aa0a6dae31a498acf1a500ad4df905b824d1e3680f00c27016721cdcc4c10bf10854aea440d860de655be3bc61d82282599758b8e54be5018f6551ae752a29fe336172b286e3bccc7"}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x2, 0xf00f, 0x6, [0xc03f]}, @ssp_cap={0x18, 0x10, 0xa, 0x7, 0x3, 0x3, 0x1e0f, 0x6, [0xc0, 0xf, 0x30]}]}}, &(0x7f00000022c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x52, 0x18, 0x8, 0x6, "054edadb", "d9071496"}}, &(0x7f0000002300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x2, 0x2, 0x2, 0xd5, 0x9, 0x4155}}}, &(0x7f0000002800)={0x84, &(0x7f0000002380)={0x40, 0x14, 0x94, "b24c769e83a0a812ed5c7c5407b6a1d4a0f15aadaf47e540b251e3916c77564feb7e4b7c9e1147aa60e0ad89b32057b3b99b844d959820b78f159a5563e1d706c05f2332947ed780b7bdd41942d5c67b442bb83eccaffc02bbc3439267fc8585a8069cdd6a3e62eb46b8256e674a13e2234f95070517850fc2dcc6dbd51b29901318a3cac5db9c35f31e79d48517b420868b7d45"}, &(0x7f0000002440)={0x0, 0xa, 0x1, 0xcf}, &(0x7f0000002480)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000024c0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000002500)={0x20, 0x0, 0x4, {0x1e0, 0x1}}, &(0x7f0000002540)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000002580)={0x40, 0x9, 0x1}, &(0x7f00000025c0)={0x40, 0xb, 0x2, "5999"}, &(0x7f0000002600)={0x40, 0xf, 0x2, 0xfff7}, &(0x7f0000002640)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000002680)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, &(0x7f00000026c0)={0x40, 0x19, 0x2, "79f1"}, &(0x7f0000002700)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000002740)={0x40, 0x1c, 0x1}, &(0x7f0000002780)={0x40, 0x1e, 0x1, 0x80}, &(0x7f00000027c0)={0x40, 0x21, 0x1, 0x3}}) (async, rerun: 64) syz_genetlink_get_family_id$mptcp(&(0x7f00000028c0), r0) (async, rerun: 32) ioctl$KVM_NMI(r0, 0xae9a) (async, rerun: 32) ioctl$BLKIOOPT(r3, 0x1279, &(0x7f0000002900)) (async) syz_io_uring_setup(0x506e, &(0x7f0000002940)={0x0, 0x5c2c, 0x0, 0x2, 0x298, 0x0, r3}, &(0x7f00000029c0)=0x0, &(0x7f0000002a00)) (async) syz_io_uring_setup(0x6029, &(0x7f0000002a40)={0x0, 0x41c1, 0x80, 0x1, 0x1c6, 0x0, r0}, &(0x7f0000002ac0), &(0x7f0000002b00)=0x0) (async) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000002b40)=@IORING_OP_WRITE_FIXED={0x5, 0xc, 0x4007, @fd_index=0x1, 0xe35, 0x8801, 0xfffffff9, 0x1e, 0x0, {0x0, r6}}) socket$inet(0x2, 0x800, 0x2) (async) syz_open_dev$evdev(&(0x7f0000002b80), 0x7, 0x0) (async, rerun: 32) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x2, 0x4) (rerun: 32) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000002bc0)=0xffffffffffffffff, 0x4) (async, rerun: 64) ioctl$HIDIOCGRAWINFO(r3, 0x80084803, &(0x7f0000002c00)=""/4096) (async, rerun: 64) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000003c00)={0x40008000, 0x2, 0x4, 0x8, 0x5, {0x0, 0x2710}, {0x1, 0x2, 0xf9, 0x9, 0x9, 0xb, "818cb581"}, 0x9ef, 0x4, {}, 0x80000000, 0x0, r3}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000003c80)={0x3, 0x1, {0xffffffffffffffff}, {}, 0x1, 0x8}) write$cgroup_pid(r3, &(0x7f0000003cc0)=r7, 0x12) 2.419870895s ago: executing program 1 (id=3099): r0 = socket(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000"], 0x17) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000380)={0xc}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, 0x0, 0x800) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f00000005c0)) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20048810) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000"], 0x70}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x3ef, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_HWPT_ALLOC$NONE(r6, 0x3b89, &(0x7f0000000180)={0x28, 0x1, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r0}, 0x20) 2.361031988s ago: executing program 6 (id=3100): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x2, 0xfa19, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r3) r4 = socket(0x11, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, 0x0) bind$packet(r4, 0x0, 0x0) r6 = getpid() kcmp(r6, r6, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 2.103475539s ago: executing program 3 (id=3055): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x30, r2, 0x5, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004c001}, 0x4800) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c45, 0x0) flock(r5, 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80) flock(r6, 0x1) flock(r6, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r5, 0xc02c5341, &(0x7f0000000100)) dup3(r6, r5, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x3, 0x20000000, 0xffffffff, 0x40000804, {0x6, 0xa, 0x3, 0x67, 0xf49, 0x6, 0x2, 0x5, 0x412f, 0xe154, 0x1, 0x7f, 0x6, 0x9, "fe1d00003413000000000020b42717e47f00"}}) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3e}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00002f00630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) 1.984021052s ago: executing program 1 (id=3101): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1.913070354s ago: executing program 5 (id=3102): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9b}}, 0x0, 0x5}, 0x94) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r5 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r5, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac4824362864", 0x1f}], 0x1}}], 0x1, 0x0) 1.885391509s ago: executing program 1 (id=3103): syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x8800) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$tipc(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)="52ac", 0x2, 0x4000}, 0x20000080) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000001800090400000000000000000a000000000000000000000008001e0001000000080017804e214e2412f333a6f6f272ba20a85b2fa6d5b067d8f625225f83468fd429e3b58846d24b3876a5b2b5a10d25f56b2baf843ec9e07207eaed2c9aac71c6096270ade8614d42d0b1f97231bf1e8379562f6fea3a6d4f45c106d210666c90f805295387cb26da2e13623bf4b712c5a5bfbc56b051dc42e29ca17aa50ec588eb25e6f6c5abc1e6aa1907ff3f7ca5f342db76e220f409f2ba7e9fb8664028d0e7ef245f92261267d76a1c79edf3cc28ee9dd4eb82b01b"], 0x2c}}, 0x0) 1.689133815s ago: executing program 3 (id=3104): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x10, 0x4, 0x7) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000380)={0x50, 0x0, &(0x7f0000000300)=[@dead_binder_done, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x10a, 0x1}, @fda={0x66646185, 0x8, 0x0, 0x31}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x8, 0x0, &(0x7f0000000200)="99ed0856797a0143"}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xd, 0xc}, {0x9, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 1.644505625s ago: executing program 1 (id=3105): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = socket$l2tp(0x2, 0x2, 0x73) recvfrom(r0, &(0x7f0000000340)=""/220, 0xdc, 0x20, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x1, 0x0, {0xa, 0x4e22, 0x5, @remote, 0x7}}}, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r3 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.48899152s ago: executing program 3 (id=3106): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x2000000, [{0x40000106, 0x0, 0x102000000000000}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.382191341s ago: executing program 3 (id=3107): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fanotify_init(0x4, 0x80000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x820140, 0x0) fanotify_mark(r1, 0x71, 0x1038, r2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) r6 = socket(0x2d, 0x2, 0x0) connect$qrtr(r6, &(0x7f00000000c0)={0x2d, 0x0, 0x4000}, 0xc) connect$l2tp6(0xffffffffffffffff, &(0x7f00000023c0)={0xa, 0x0, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3}, 0x20) r7 = fanotify_init(0x10, 0x101000) ioctl$KVM_CAP_STEAL_TIME(0xffffffffffffffff, 0x4068aea3, &(0x7f0000002400)) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0x1) creat(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r7, 0x455, 0x8000008, r8, 0x0) process_vm_writev(r3, 0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000180)=""/124, 0x7c}, {&(0x7f0000000380)=""/138, 0x8a}, {0x0}, {&(0x7f0000003640)=""/4103, 0x1007}, {0x0}], 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) fanotify_mark(r7, 0x7e, 0x800003a, r8, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newtaction={0x88, 0x30, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{0x74, 0x1, [@m_skbedit={0x40, 0x1, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x401}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xf800}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x30, 0x2, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) 770.011324ms ago: executing program 1 (id=3108): r0 = fanotify_init(0x20, 0x2) bind$alg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000001100)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000100)={r5, 0x400000}, &(0x7f00000001c0)=0x7) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f0000004340)=[{{&(0x7f0000001180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000001400)=""/112, 0x70}, {&(0x7f0000001480)=""/230, 0xe6}, {&(0x7f0000001580)=""/57, 0x39}, {&(0x7f00000015c0)=""/69, 0x45}, {&(0x7f0000001640)=""/35, 0x23}, {&(0x7f0000001680)=""/86, 0x56}], 0x7, &(0x7f0000001780)=""/166, 0xa6}, 0xcbc7}, {{&(0x7f0000001840)=@nfc, 0x80, &(0x7f0000001bc0)=[{&(0x7f00000018c0)=""/129, 0x81}, {&(0x7f0000001980)=""/252, 0xfc}, {&(0x7f0000001a80)=""/212, 0xd4}, {&(0x7f0000001b80)=""/41, 0x29}], 0x4, &(0x7f0000001c00)=""/172, 0xac}, 0x8}, {{&(0x7f0000004500)=@hci, 0x80, &(0x7f0000003240)=[{&(0x7f0000001d40)=""/152, 0x98}, {&(0x7f0000001e00)=""/194, 0xc2}, {&(0x7f0000001f00)=""/238, 0xee}, {&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f0000002000)=""/22, 0x16}, {&(0x7f0000002040)=""/113, 0x71}, {&(0x7f00000020c0)=""/225, 0xe1}], 0x7, &(0x7f00000032c0)=""/249, 0xf9}, 0xfffffffb}, {{&(0x7f00000033c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000003840)=[{&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/163, 0xa3}, {&(0x7f00000021c0)=""/45, 0x2d}, {&(0x7f0000003580)=""/159, 0x9f}, {&(0x7f0000003640)=""/31, 0x1f}, {&(0x7f0000003680)=""/53, 0x35}, {&(0x7f00000036c0)=""/54, 0x36}, {&(0x7f0000003700)=""/248, 0xf8}, {&(0x7f0000003800)}], 0x9, &(0x7f0000003900)=""/45, 0x2d}, 0x1ff}, {{&(0x7f0000003940)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, &(0x7f0000003bc0)=[{&(0x7f00000039c0)=""/74, 0x4a}, {&(0x7f0000003a40)=""/179, 0xb3}, {&(0x7f0000003b00)=""/13, 0xd}, {&(0x7f0000003b40)=""/125, 0x7d}], 0x4, &(0x7f0000003c00)=""/64, 0x40}, 0x7}, {{&(0x7f0000003c40)=@nfc, 0x80, &(0x7f0000003ec0)=[{&(0x7f0000003cc0)=""/232, 0xe8}, {&(0x7f0000003dc0)=""/234, 0xea}], 0x2}, 0x2}, {{&(0x7f0000003f00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000042c0)=[{&(0x7f0000003f80)=""/182, 0xb6}, {&(0x7f0000004040)=""/149, 0x95}, {&(0x7f0000004100)=""/83, 0x53}, {&(0x7f0000004180)}, {&(0x7f00000041c0)=""/149, 0x95}, {&(0x7f0000004280)=""/19, 0x13}], 0x6}, 0x101}], 0x7, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r6, &(0x7f0000001200)={'#! ', './file0', [{0x20, '\x98\xe1Cvg\x9cO\x16\xc0TC\xe8\xb8\x91W\xb8\x84\xdf\xbe\xbd\x8f\x81!\xf2V[\x03V\xba/\xb9+\xd2\x95\xe0t\x0f<}T\v\x0f\xe8\xae\x89\xfa^\xce\xae[t/\x12\x1f\x02\x85\xbd\xbc\r(\xfd\xf2\xeeB\x12\xdc\x06\x1d\xd8\x86g\xcf\xb6\xde\xeb\xfc\xfc~A\x95\x8a6'}, {0x20, '5\xed\xe9\xe8\f\xcb\x82;\xc5\x98\"\x1c\x8d\xbb,X}\xec\x9f\xe5\xf0\x1f\x02\a\x0e\xe09\x17\xa9\xdbXP\x94}L\x17WT\xc0Rc\xe5\xd3\x9a\xcfGr3\xbaf\x8aS\xc6Q\x16\xf4\x9f\x02u.\xaf\xf3\xb8\x0e\x85a8\x03\x02\xf4\xf1\\b\x1ew\xd4F\xf1\xf9I\xe4\xca\xb1\xa51Sk\xdf\xc7\xd2\x87.b\xb9|+\x9f3@\xdfs\xa0\x01\x8fV/0\x8bo\xccQ\x9c\x9e\xae!b\xa0 \xea\xa4(C\n\x96\xdf\xd2\xd6\x91\x90\x83 \xb2\xb4\xac{\x02\xde,Ff\x98\x84\x16\x1b\x96\xac\x9e\x17\xf0\x13\xfa\xd1+\xcc\x19\x81ZZ\xa0\xde\xeb\xf3`\x0e\x87:` \x1b\xec\xc81\xb7\x91\xfdcL\xdcH/0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000080)=r9, 0x4) sendmsg$unix(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000002200)={[&(0x7f0000000340)='^-%-\\x\\$})\'!&}*', &(0x7f0000000440)='syz0']}, 0x0) fanotify_mark(r0, 0x365, 0x800101b, 0xffffffffffffffff, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x48) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x15, &(0x7f0000001340)=ANY=[@ANYBLOB="180000005af1020000003b0080ffffffffffff110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000d1000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a60000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) getresgid(&(0x7f0000001140), &(0x7f00000010c0), &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r12 = getpid() sched_setscheduler(r12, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) 568.580954ms ago: executing program 6 (id=3109): mkdirat(0xffffffffffffffff, 0x0, 0x120) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x3, &(0x7f0000000240)=0x100000000) r4 = semget$private(0x0, 0x4000000009, 0x208) semop(r4, &(0x7f00000002c0)=[{0x1, 0x8698, 0x1000}], 0x1) semop(r4, &(0x7f0000000000)=[{0x1, 0xfffb}, {0x0, 0x4, 0x800}, {0x4, 0x1ff}, {0x1, 0x7, 0x3800}, {0x7, 0x3}, {0x1, 0xb, 0x1000}, {0x0, 0x86, 0x3800}], 0x1) semctl$GETNCNT(r4, 0x1, 0xe, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x40) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000000)={0x82040480, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3}, 0x58) syz_init_net_socket$ax25(0x3, 0x3, 0xcd) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r5, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) 471.806663ms ago: executing program 3 (id=3110): r0 = fsopen(&(0x7f0000000380)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 1) 452.825659ms ago: executing program 2 (id=3111): r0 = epoll_create1(0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1}, 0x37) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) write$dsp(r3, &(0x7f0000000040), 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, 0x0) 131.828281ms ago: executing program 2 (id=3112): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000440)="b9ff0307683a268cb8f8ffff888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 103.215019ms ago: executing program 2 (id=3113): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 102.682759ms ago: executing program 3 (id=3114): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) getuid() lstat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000980)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000009c0)={0x0, 0x0, 0x0}, &(0x7f0000000a00)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r13 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r13}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r13, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r13, &(0x7f0000000080)={0x50, 0x0, r14, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x1a0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r13, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r3, &(0x7f0000008dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000300)="fcab6cafc680c54b22cadf85e015cddca62ab113a903a6639e93afea71edd1d03b0d925c2323ce1c40e84e4d15313fd1b21b5ef1710bb205586640e7ce36f7ae3347677174e5b97189da7e38ca9452a6a1e88389d7df9353c30c7c6b30bbd67e370b0f879644ba76e1b3b222f927859be4545219b357a8c5567d0a4ce6ea16454b9ef711e59888289f3acfa2ea6b48237eca42992c10fedcb760d562bdf07da27bfd63c844b479ba6b9c6d0032c1f6459fa2705041f66513d9b35dc8642ba0b23bdab6c1a0d568400a23108a8721471122d4694253001d177fed64d58c", 0xdd}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000000400)="ac414a3744966e1e80101efe62be91d037a88526d4eb38ce6d1de42b66fab82b6e5c2bb5ecd8f5d40b3049b3f56a98a0fd", 0x31}, {&(0x7f0000000440)="6e0cd24889a26421514b79b8b0d6304851b9f71745a8bf25e779caa152381bcdccd30faddbe13cb0220a6a6953659dae446b9c31ad63183627d444dde0", 0x3d}, {&(0x7f0000000480)="88d973", 0x3}, {&(0x7f00000004c0)="7920b187b2ecf79d679cd2d9828dee6c9fb20f6a188a386b5881c246e8de35e240beafdbdafdee64d4cc99f524d91f257198964f1938ec4f8c14cd82a2c5becd79aa52893a176606eeb5282d", 0x4c}, {&(0x7f0000000540)="67dbbd5f1b22cd37f9ba26140be567c5", 0x10}, {&(0x7f0000000600)="2237310e2324d8400ae46ed365c5737ae3b73b3461ffe32d78aa074d2c1f4a4d29fe960d389fdb0f164d7477f01f7dbbaef683d83665f7a9f4722631b9244b061cae5f60d6fdf2c1dc333b2b4b6ca165cf384d39c40051af92886dba196d3410f8817e24321135430bb0145eb211c8f955b764141da557b523ca27168e6c83f4e1e93f590c046027e37c0a6ebfc9908abfabada26c13e0faf068f65f0c1d9df06178897ddc6f4682cddb98effb9a229557cc8c2054caf6a403c1e499dce3ee5fc7acf9180a6b6bd7508ffc94dddb52e76fb38e588f89b690285626ed47", 0xdd}, {&(0x7f0000000700)="81b676cc3f1e11470ade02503d466e05b52ae533dd564521284029a27964dc265e899aa841795c2a55b463fc503566c9055ec80631a6248b33d9c4183e01aaf0e828989d0cc2de35b5750b5b9c04511bf880e0e9300821861a48d6869ac8e1072950623b7f6a2a80fab99af12780104de6116f2de963c7ef91524ac85df1d4a5ebc1013b236544da8375ce3fe9642d3f266bf50109f1051f185e9c9a37e688dfa5a0e9105567dc9b4c92e8a727ac6ae5b273b97602922a35131c4a778ba4f4f68478d61cff97c8cdd3e63d028f56d1925af91987de39acb58fa023219260bb74e1", 0xe1}, {&(0x7f0000000580)="f78513485dfbd92a009c09d6d9914d4c50253937ab5f3cd876198c74f2d91de1be2c38fafbc588d4505f5fcab6c593579386219a207df15a9db7671f", 0x3c}], 0xa, &(0x7f00000063c0)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r13, @ANYRES32=r0, @ANYRES32=r13, @ANYRES32=r3, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r7, @ANYRES32=r9, @ANYBLOB="0002000000", @ANYRES32=r1, @ANYRES32=0xee01, @ANYRES32=r11, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=r15, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x110, 0x400c0}}, {{&(0x7f0000000d00)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000010c0)=[{&(0x7f0000000d80)="176cde33d40ef7c22190c42e2453b29dec23e093b8aac0d82bdedc218604b3728aa4db20f69a39bdc90035d97e29d0f7f3c525dfd11f57801b35ee1e347cc48068cb48582c15ba75141d8f578e35e144912234d4666a8752cc2ad7bc8a09216d1f11d1d71463", 0x66}, {&(0x7f0000000e00)="3bb87066a6ead286a40ebce4128d7a7c3204bdb672679784", 0x18}, {&(0x7f0000000e40)="595b75f73e384eb569dcc6e5d8809861b13857e24faa9207c9400b308a82eedb4aa94b2dd2fa4944fe84939d16a27038b3aabc7a6ad90bbe39", 0x39}, {&(0x7f0000000e80)="d0b3957a62b6d43431c3478e22753531dcc8d6540e9667dc80942c210ea99bcd40190cd1e239a063308a917d1f0355e6d586cfb3e39819f536ed6b0323a07a717150d4a83dba8f599b17ed0d65d89124931af0b6be170db9419aeb75a08d40218d4aa732f4ac4265d8344bedcb180ebdaa7ab6e087c3b0144263f1781c095e48f8d1334ad6357f708a08185ceab25c992a9024ddb544d0347f4d802889b1a914c687260ce9c0c92ed612e2abe88973d62134047000735abf2c41253cdda770a04062", 0xc2}, {&(0x7f0000000f80)="64812102d34600b4218cce1aca11369611743648e61bf8ef088a25e49df5b35905173a199f12f430ba0598a72ed8f520e685ba06f4f09a59", 0x38}, {&(0x7f0000000fc0)="dbf87402cf5994710f4f14fad719d046191cd609ebbae7d3192a21895ac28fd293c74a065221ee087d1f6ab650bda368a454e36bd578c60013e4bc02fd", 0x3d}, {&(0x7f0000001000)="9f87079de05f3627aae11c5fe4725e258d08b18423b2f51a3ef347fa82bec38b045187da90e23bc4670c497e826b15c382ebd4b59ef4f22d955538cf17ba8d88138ac53d18877908585ccca6e9c3112d3006c02063ad242fe1f4baa7008518740608c3f8ecad07f1c5447ca47b3b4e9537a71adeb7a998f50cb33368af9cfcfe7afc54fa0a393024c0611ba366ae9f63656541a8f090e5", 0x97}], 0x7, &(0x7f00000011c0)=[@rights={{0x18, 0x1, 0x1, [r2, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r3, r0]}}, @cred={{0x1c, 0x1, 0x2, {r5, r10, r8}}}], 0x70, 0xc014}}, {{&(0x7f0000000b00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000001140)="b0f5c35ff0466434827d05affddbf207bf46ce02207f92aaab8ef7bf820ff967488bb0b91d32bc5ddce0dfd90e8bfa0e712958a0ff80be59a77931dddcbebb4e7387b2da38acc4f6983599b018de6f0070a56f4cdd2cd913cc85bd40d8821c8506d6d401c65ad7e514a36e255b1ce70f2ff6479b442672284a59afe8", 0x7c}], 0x1, &(0x7f0000006580), 0x0, 0x8000}}, {{&(0x7f0000006680)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000008b80)=[{&(0x7f0000006700)="c210ea18aa2532b8460c60ed84c8a71c801c0d6b51e48aa70934605de8e19423ca3b780a68e0054ef09cf9c75e7c01b751f1fcaebacfb6", 0x37}, {&(0x7f0000006740)="9e985baccfa8e446b1781ad1c6a5c396f430af0521ac704bd1715c370e4112f59dcb1bafcceff582fddb92b0ec", 0x2d}, {&(0x7f0000008880)="41e3e3c4dd699aa66f77cdee6311aceb43b43b24108329fcebbe8890b9acb314e59e284ebb675a580e04958730928cc5f1f4a676846809e8a30ef4d17111478575f73d407af382cae1c42549386770f234e68439e36d9bc203090bc63b7573d89202b0cec246df12676428ef55310183376d2325bce9013654dae61837e575f1ec2b", 0x82}, {&(0x7f0000008940)="2476b697e3bf8961c11c2818bcb076e5bb1f0d6064b24cb7610a507f33084a2ea579f31d8913f60eb92398243c66c4463fa6c2ae4b52bc748107cacbd4296549cf4d9841efa77eb9f037fec9474c0d07ac58a0b23a9162fa7d55d2a765183d96b40178cc3e08f063c4d5b3076da34f", 0x6f}, {&(0x7f00000089c0)="c1da3368d94ad38b5181a97eccdadc8970c9667f4d9ff70c86d26f05552c5238e3c73bc212106a6d509adf1cf717f2a618d038dbff2639134f3f3ccd927220a898266ffb5d4f7e6f7376d0f7ecf7dd75d31b101b89ddeffefdb6b2e8632be6b891ee0eab3ccdca1d6700b51e55115d14280dc8f4822564e2324b8167af37ba71608c06fa200ce7f7f4b1f19e17855e633e7750eba2f92d21ad9c24ec00", 0x9d}, {&(0x7f0000008a80)="0435a644c3f6a315da898c049c5289729709947766ad6aa068f94a9a39274ba140c817e7ea1826d83184", 0x2a}, {&(0x7f0000008ac0)="086dcc3b1659b0d24f6c05dcd0cc61fca662597493e4ae0b6fd95504551095135703a3da48e1bf89f4b5a95b1961a9f97559c5eb9076633aa9a9d135a18b364a6b884aaa", 0x44}, {&(0x7f0000008b40)="f2815408ecae6a8a13efa417027a3246859c9093064e31ec", 0x18}], 0x8, &(0x7f0000008d00)=[@cred={{0x1c, 0x1, 0x2, {r12, r15}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r13]}}, @cred={{0x1c, 0x1, 0x2, {r6, 0x0, r4}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r3, r3, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8, 0xc000}}], 0x4, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r16, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000180)={0x0, {{0xa, 0x4e22, 0x6ef, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x21, @private2, 0xfffffe01}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r16, {0x9, 0xa}, {}, {0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x5b}, @TCA_U32_DIVISOR={0x8, 0x4, 0xfb}]}}]}, 0x40}}, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x7) r17 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r18 = ioctl$KVM_CREATE_VM(r17, 0xae01, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) r19 = ioctl$KVM_CREATE_VCPU(r18, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r19, 0xc048aeca, &(0x7f0000000080)) 0s ago: executing program 2 (id=3115): syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x8800) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$tipc(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)="52ac", 0x2, 0x4000}, 0x20000080) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000001800090400000000000000000a000000000000000000000008001e0001000000080017804e214e2412f333a6f6f272ba20a85b2fa6d5b067d8f625225f83468fd429e3b58846d24b3876a5b2b5a10d25f56b2baf843ec9e07207eaed2c9aac71c6096270ade8614d42d0b1f97231bf1e8379562f6fea3a6d4f45c106d210666c90f805295387cb26da2e13623bf4b712c5a5bfbc56b051dc42e29ca17aa50ec588eb25e6f6c5abc1e6aa1907ff3f7ca5f342db76e220f409f2ba7e9fb8664028d0e7ef245f92261267d76a1c79edf3cc28ee9dd4eb82b01b"], 0x2c}}, 0x0) kernel console output (not intermixed with test programs): 989614][ T5941] usb 7-1: SerialNumber: syz [ 484.996885][ T5941] usb 7-1: config 0 descriptor?? [ 485.883498][T13508] fuse: Unknown parameter '“' [ 486.186750][ T5941] usbhid 7-1:0.8: couldn't find an input interrupt endpoint [ 486.295347][ T30] audit: type=1400 audit(1770464939.911:789): avc: denied { write } for pid=13489 comm="syz.6.2084" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 486.511109][T13521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2092'. [ 487.673510][ T5859] usb 7-1: USB disconnect, device number 21 [ 488.185753][T13544] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2097'. [ 488.592730][T13551] trusted_key: encrypted_key: insufficient parameters specified [ 488.839214][ T30] audit: type=1400 audit(1770464942.441:790): avc: denied { lock } for pid=13560 comm="syz.5.2101" path="socket:[37353]" dev="sockfs" ino=37353 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 489.606331][ T5887] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 489.894373][ T5887] usb 7-1: Using ep0 maxpacket: 32 [ 489.956309][ T5887] usb 7-1: config 1 has an invalid descriptor of length 138, skipping remainder of the config [ 490.018911][ T5887] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 490.031539][ T5887] usb 7-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=4e.fd [ 490.041029][ T5887] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.049700][ T5887] usb 7-1: Product: syz [ 490.054009][ T5887] usb 7-1: Manufacturer: syz [ 490.063168][ T5887] usb 7-1: SerialNumber: syz [ 490.126543][T13599] Cannot find del_set index 4 as target [ 490.727453][ T30] audit: type=1400 audit(1770464944.331:791): avc: denied { listen } for pid=13568 comm="syz.6.2104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 490.752244][T13574] syzkaller1: entered promiscuous mode [ 490.782253][T13574] syzkaller1: entered allmulticast mode [ 490.895704][T13605] 9p: Bad value for 'rfdno' [ 490.913366][ T30] audit: type=1400 audit(1770464944.531:792): avc: denied { audit_read } for pid=13602 comm="syz.3.2113" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 491.118605][ T30] audit: type=1400 audit(1770464944.731:793): avc: denied { search } for pid=13614 comm="syz.2.2118" name="/" dev="configfs" ino=1188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 491.173922][ T24] usb 7-1: USB disconnect, device number 22 [ 491.384566][ T30] audit: type=1400 audit(1770464944.751:794): avc: denied { search } for pid=13614 comm="syz.2.2118" name="/" dev="configfs" ino=1188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 491.446121][ T30] audit: type=1400 audit(1770464944.751:795): avc: denied { watch watch_reads } for pid=13614 comm="syz.2.2118" path="/" dev="configfs" ino=1188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 491.474304][ T30] audit: type=1400 audit(1770464944.751:796): avc: denied { search } for pid=13614 comm="syz.2.2118" name="/" dev="configfs" ino=1188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 491.498384][ T30] audit: type=1400 audit(1770464944.751:797): avc: denied { read open } for pid=13614 comm="syz.2.2118" path="/" dev="configfs" ino=1188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 493.737992][T13644] overlayfs: missing 'lowerdir' [ 494.130627][T13666] FAULT_INJECTION: forcing a failure. [ 494.130627][T13666] name failslab, interval 1, probability 0, space 0, times 0 [ 494.147940][T13666] CPU: 1 UID: 0 PID: 13666 Comm: syz.6.2131 Not tainted syzkaller #0 PREEMPT(full) [ 494.147965][T13666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 494.147975][T13666] Call Trace: [ 494.147980][T13666] [ 494.147987][T13666] dump_stack_lvl+0x100/0x190 [ 494.148014][T13666] should_fail_ex.cold+0x5/0xa [ 494.148032][T13666] should_failslab+0xc2/0x120 [ 494.148055][T13666] ? tomoyo_realpath_from_path+0xb6/0x690 [ 494.148074][T13666] __kmalloc_noprof+0xf6/0x9c0 [ 494.148097][T13666] ? tomoyo_realpath_from_path+0xb6/0x690 [ 494.148114][T13666] tomoyo_realpath_from_path+0xb6/0x690 [ 494.148138][T13666] tomoyo_path_number_perm+0x23c/0x580 [ 494.148170][T13666] ? tomoyo_path_number_perm+0x22e/0x580 [ 494.148197][T13666] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 494.148247][T13666] ? find_held_lock+0x2b/0x80 [ 494.148269][T13666] ? hook_file_ioctl_common+0x146/0x410 [ 494.148290][T13666] ? __fget_files+0x215/0x3d0 [ 494.148314][T13666] ? __fget_files+0x21f/0x3d0 [ 494.148337][T13666] security_file_ioctl+0xd3/0x230 [ 494.148356][T13666] __x64_sys_ioctl+0xb7/0x210 [ 494.148374][T13666] do_syscall_64+0xc9/0xf80 [ 494.148396][T13666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.148412][T13666] RIP: 0033:0x7f277c79aeb9 [ 494.148426][T13666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.148442][T13666] RSP: 002b:00007f277d6ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 494.148458][T13666] RAX: ffffffffffffffda RBX: 00007f277ca16090 RCX: 00007f277c79aeb9 [ 494.148469][T13666] RDX: 00002000000002c0 RSI: 0000000000004b48 RDI: 0000000000000003 [ 494.148479][T13666] RBP: 00007f277d6ac090 R08: 0000000000000000 R09: 0000000000000000 [ 494.148489][T13666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.148499][T13666] R13: 00007f277ca16128 R14: 00007f277ca16090 R15: 00007ffc245cb018 [ 494.148524][T13666] [ 494.148531][T13666] ERROR: Out of memory at tomoyo_realpath_from_path. [ 494.358430][T13671] gre0: entered promiscuous mode [ 494.358451][T13671] gre0: entered allmulticast mode [ 494.423134][T13670] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2136'. [ 495.784775][T13700] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2145'. [ 496.963522][ T30] audit: type=1400 audit(1770464950.561:798): avc: denied { mount } for pid=13726 comm="syz.2.2155" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 497.213930][ T5887] libceph: connect (1)[c::]:6789 error -101 [ 497.221705][ T5887] libceph: mon0 (1)[c::]:6789 connect error [ 497.275359][T13740] ceph: No mds server is up or the cluster is laggy [ 497.492721][T13750] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2158'. [ 499.277977][T13765] 9p: Bad value for 'rfdno' [ 499.352156][T13767] netlink: 'syz.3.2162': attribute type 1 has an invalid length. [ 499.360236][T13767] netlink: 'syz.3.2162': attribute type 2 has an invalid length. [ 500.258073][T13788] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2170'. [ 501.098352][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.105111][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.347608][ T30] audit: type=1400 audit(1770464954.691:799): avc: denied { getopt } for pid=13793 comm="syz.6.2172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 505.355766][T13872] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2193'. [ 505.819738][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e04f400: rx timeout, send abort [ 506.231832][ T30] audit: type=1400 audit(1770464959.831:800): avc: denied { read } for pid=5161 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 506.329266][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e04f400: abort rx timeout. Force session deactivation [ 506.356677][ T30] audit: type=1400 audit(1770464959.831:801): avc: denied { search } for pid=5161 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 506.744431][ T30] audit: type=1400 audit(1770464959.831:802): avc: denied { search } for pid=5161 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 506.794162][ T30] audit: type=1400 audit(1770464959.831:803): avc: denied { add_name } for pid=5161 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 506.945751][ T30] audit: type=1400 audit(1770464959.841:804): avc: denied { create } for pid=5161 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 507.442953][ T5818] Bluetooth: Wrong link type (-71) [ 507.466364][ T30] audit: type=1400 audit(1770464959.871:805): avc: denied { append open } for pid=5161 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 507.657995][ T30] audit: type=1400 audit(1770464959.871:806): avc: denied { getattr } for pid=5161 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 508.144853][T13909] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 510.547088][T13924] IPVS: dh: FWM 3 0x00000003 - no destination available [ 510.950436][T13941] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2214'. [ 511.115230][ T9] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 512.428560][T13953] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2218'. [ 512.440257][T13954] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2216'. [ 512.577560][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 512.590107][ T9] usb 7-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 512.603706][ T9] usb 7-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 512.705202][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.730157][ T9] usb 7-1: Product: syz [ 512.738588][ T9] usb 7-1: Manufacturer: syz [ 512.751348][ T9] usb 7-1: SerialNumber: syz [ 512.932643][T13966] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2222'. [ 514.012598][ T9] usb 7-1: reset high-speed USB device number 23 using dummy_hcd [ 514.069168][T13978] loop4: detected capacity change from 0 to 7 [ 514.102947][T13978] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 514.119261][T13978] loop4: partition table partially beyond EOD, truncated [ 514.139095][T13978] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 514.150700][T13984] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2228'. [ 514.433903][T13979] udevd[13979]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 514.705626][T13994] netlink: 'syz.6.2231': attribute type 1 has an invalid length. [ 514.713437][T13994] netlink: 'syz.6.2231': attribute type 4 has an invalid length. [ 514.721398][T13994] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.2231'. [ 515.030488][ T9] usb 7-1: USB disconnect, device number 23 [ 516.644169][ T30] audit: type=1800 audit(1770464970.251:807): pid=14011 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2236" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 517.149056][ T30] audit: type=1400 audit(1770464970.751:808): avc: denied { connect } for pid=14024 comm="syz.6.2241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 521.999740][T14071] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2253'. [ 522.010941][T14071] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.018133][T14071] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.025451][T14071] bridge0: entered allmulticast mode [ 522.354939][T14087] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2247'. [ 524.354652][T14089] Process accounting resumed [ 525.340024][ T30] audit: type=1400 audit(1770464978.951:809): avc: denied { getopt } for pid=14135 comm="syz.1.2267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 525.372371][ T5859] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 525.614538][ T5859] usb 7-1: Using ep0 maxpacket: 32 [ 525.621691][ T5859] usb 7-1: unable to get BOS descriptor or descriptor too short [ 525.631656][ T5859] usb 7-1: config 244 has an invalid interface number: 68 but max is 0 [ 526.057931][ T5859] usb 7-1: config 244 has no interface number 0 [ 526.072134][ T5859] usb 7-1: config 244 interface 68 has no altsetting 0 [ 526.080938][ T5859] usb 7-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.0f [ 526.090175][ T5859] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.098607][ T5859] usb 7-1: Product: syz [ 526.103092][ T5859] usb 7-1: Manufacturer: syz [ 526.107708][ T5859] usb 7-1: SerialNumber: syz [ 526.495668][T14127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.537905][T14127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.723670][ T5859] comedi comedi5: Wrong number of endpoints [ 527.171487][ T5859] dt9812 7-1:244.68: driver 'dt9812' failed to auto-configure device. [ 527.204738][ T5859] usb 7-1: USB disconnect, device number 24 [ 527.494894][T14176] Cannot find add_set index 65532 as target [ 527.621621][T14178] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2278'. [ 527.782211][T14187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2280'. [ 528.155024][T14187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2280'. [ 528.421658][ T30] audit: type=1400 audit(1770464982.031:810): avc: denied { write } for pid=14194 comm="syz.6.2282" path="socket:[40246]" dev="sockfs" ino=40246 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 528.491045][T14199] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2283'. [ 529.847277][T14212] netlink: 'syz.1.2290': attribute type 1 has an invalid length. [ 529.918611][T14212] 8021q: adding VLAN 0 to HW filter on device bond2 [ 529.989516][T14218] bond2: (slave geneve4): making interface the new active one [ 530.031854][T14218] bond2: (slave geneve4): Enslaving as an active interface with an up link [ 531.049786][ T30] audit: type=1400 audit(1770464984.651:811): avc: denied { set_context_mgr } for pid=14246 comm="syz.6.2300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 531.075945][T14248] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2296'. [ 531.218627][T14253] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2300'. [ 531.229605][T14252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2296'. [ 531.285967][ T30] audit: type=1400 audit(1770464984.661:812): avc: denied { map } for pid=14246 comm="syz.6.2300" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 531.294295][T14248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2296'. [ 531.380814][T14252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2296'. [ 531.496720][T14249] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=260 sclass=netlink_route_socket pid=14249 comm=syz.2.2296 [ 534.724657][T14317] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2319'. [ 534.779032][T14317] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2319'. [ 534.967981][T14329] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2321'. [ 535.437983][T14339] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2323'. [ 537.531173][T14354] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2327'. [ 537.821955][T14364] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14364 comm=syz.5.2329 [ 538.845604][ T30] audit: type=1400 audit(1770464992.331:813): avc: denied { map } for pid=14373 comm="syz.2.2333" path="socket:[40604]" dev="sockfs" ino=40604 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 538.904260][ T48] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 539.253422][ T30] audit: type=1400 audit(1770464992.331:814): avc: denied { accept } for pid=14373 comm="syz.2.2333" path="socket:[40604]" dev="sockfs" ino=40604 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 539.262220][T14391] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2337'. [ 539.378782][ T30] audit: type=1400 audit(1770464992.951:815): avc: denied { bind } for pid=14392 comm="syz.1.2338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 539.409473][ T48] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.501289][ T48] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.594976][ T48] usb 7-1: config 0 interface 0 has no altsetting 0 [ 539.623569][ T48] usb 7-1: New USB device found, idVendor=056c, idProduct=03d5, bcdDevice= 0.00 [ 539.663435][ T48] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.674843][T14399] overlayfs: failed to clone upperpath [ 539.717705][T14399] overlayfs: failed to clone upperpath [ 539.743043][ T48] usb 7-1: config 0 descriptor?? [ 539.782375][T14399] overlayfs: failed to clone upperpath [ 539.838161][T14399] overlayfs: failed to clone upperpath [ 539.877123][T14399] overlayfs: failed to clone upperpath [ 539.885514][T14399] overlayfs: failed to clone upperpath [ 539.891624][T14399] overlayfs: failed to clone upperpath [ 539.898119][T14399] overlayfs: failed to clone upperpath [ 539.936587][T14399] overlayfs: failed to clone upperpath [ 539.961440][T14399] overlayfs: failed to clone upperpath [ 539.996532][T14399] overlayfs: failed to clone upperpath [ 540.004605][T14399] overlayfs: failed to clone upperpath [ 540.029856][T14399] overlayfs: failed to clone upperpath [ 540.051693][T14399] overlayfs: failed to clone upperpath [ 540.060242][T14399] overlayfs: failed to clone upperpath [ 540.072054][T14399] overlayfs: failed to clone upperpath [ 540.095260][T14399] overlayfs: failed to clone upperpath [ 540.119259][T14399] overlayfs: failed to clone upperpath [ 540.150628][T14399] overlayfs: failed to clone upperpath [ 540.277025][T14399] overlayfs: failed to clone upperpath [ 540.288746][T14399] overlayfs: failed to clone upperpath [ 540.301185][T14399] overlayfs: failed to clone upperpath [ 540.310123][T14399] overlayfs: failed to clone upperpath [ 541.794700][T14415] ptrace attach of "./syz-executor exec"[5814] was attempted by "./syz-executor exec"[14415] [ 541.826803][T14416] netlink: 'syz.3.2345': attribute type 10 has an invalid length. [ 541.837200][T14416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.844954][T14416] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 542.090090][ T48] usbhid 7-1:0.0: can't add hid device: -71 [ 542.142994][ T48] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 542.161735][T14428] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2347'. [ 542.230062][ T48] usb 7-1: USB disconnect, device number 25 [ 542.815794][T14434] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2350'. [ 543.104147][ T48] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 543.306156][ T48] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 543.329293][ T48] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.350499][ T48] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.392406][ T48] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 543.449666][ T48] usb 7-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 543.468481][ T48] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.553488][ T48] usb 7-1: config 0 descriptor?? [ 544.092256][ T48] pantherlord 0003:0810:0001.0004: hidraw0: USB HID v0.00 Device [HID 0810:0001] on usb-dummy_hcd.6-1/input0 [ 544.124576][ T48] pantherlord 0003:0810:0001.0004: no output reports found [ 544.446254][ T5859] usb 7-1: USB disconnect, device number 26 [ 544.769049][T14480] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2361'. [ 544.923078][T14469] fido_id[14469]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 544.994410][T14483] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2361'. [ 546.120365][ T30] audit: type=1400 audit(1770464999.731:816): avc: denied { getopt } for pid=14484 comm="syz.6.2362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 546.633646][T14492] FAULT_INJECTION: forcing a failure. [ 546.633646][T14492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 546.684260][T14492] CPU: 1 UID: 0 PID: 14492 Comm: syz.6.2364 Not tainted syzkaller #0 PREEMPT(full) [ 546.684288][T14492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 546.684298][T14492] Call Trace: [ 546.684304][T14492] [ 546.684312][T14492] dump_stack_lvl+0x100/0x190 [ 546.684341][T14492] should_fail_ex.cold+0x5/0xa [ 546.684360][T14492] _copy_from_user+0x2e/0xd0 [ 546.684386][T14492] copy_msghdr_from_user+0x9f/0x4f0 [ 546.684406][T14492] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 546.684437][T14492] ___sys_sendmsg+0x106/0x1e0 [ 546.684456][T14492] ? __pfx____sys_sendmsg+0x10/0x10 [ 546.684486][T14492] ? find_held_lock+0x2b/0x80 [ 546.684532][T14492] __sys_sendmsg+0x170/0x220 [ 546.684560][T14492] ? __pfx___sys_sendmsg+0x10/0x10 [ 546.684598][T14492] do_syscall_64+0xc9/0xf80 [ 546.684620][T14492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.684637][T14492] RIP: 0033:0x7f277c79aeb9 [ 546.684652][T14492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.684668][T14492] RSP: 002b:00007f277d6cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 546.684686][T14492] RAX: ffffffffffffffda RBX: 00007f277ca15fa0 RCX: 00007f277c79aeb9 [ 546.684697][T14492] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 546.684708][T14492] RBP: 00007f277d6cd090 R08: 0000000000000000 R09: 0000000000000000 [ 546.684718][T14492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.684728][T14492] R13: 00007f277ca16038 R14: 00007f277ca15fa0 R15: 00007ffc245cb018 [ 546.684752][T14492] [ 549.161905][T14543] netlink: 'syz.3.2378': attribute type 10 has an invalid length. [ 549.170109][T14543] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2378'. [ 549.181167][T14543] ipvlan1: entered promiscuous mode [ 549.187077][T14543] ipvlan1: entered allmulticast mode [ 549.197302][T14543] veth0_vlan: entered allmulticast mode [ 549.208086][T14543] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 550.992548][ T30] audit: type=1400 audit(1770465004.601:817): avc: denied { ioctl } for pid=14577 comm="syz.3.2387" path="socket:[40893]" dev="sockfs" ino=40893 ioctlcmd=0x89a1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 551.019717][ T5818] Bluetooth: Wrong link type (-71) [ 551.421835][T14583] VFS: Mount too revealing [ 552.116108][T14604] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2391'. [ 552.671050][T14609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2394'. [ 552.865215][ T5887] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 552.953952][T14617] openvswitch: netlink: IP tunnel TTL not specified. [ 553.075459][ T5887] usb 7-1: config 8 has an invalid interface number: 177 but max is 0 [ 553.091570][T14620] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2398'. [ 553.103355][ T5887] usb 7-1: config 8 has no interface number 0 [ 553.116589][ T5887] usb 7-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 553.148185][ T5887] usb 7-1: config 8 interface 177 altsetting 9 endpoint 0x88 has invalid maxpacket 1023, setting to 64 [ 553.165061][ T5887] usb 7-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid maxpacket 65535, setting to 64 [ 553.177408][ T5887] usb 7-1: config 8 interface 177 has no altsetting 0 [ 553.184813][ T5887] usb 7-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 553.194748][ T5887] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.314375][T14607] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 553.427348][T14607] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 554.011708][T14627] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 554.256500][ T30] audit: type=1400 audit(1770465007.871:818): avc: denied { map } for pid=14628 comm="syz.3.2401" path="socket:[42102]" dev="sockfs" ino=42102 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 554.296557][T14633] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14633 comm=syz.5.2396 [ 554.531640][T14606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 554.655577][ T30] audit: type=1400 audit(1770465007.871:819): avc: denied { read } for pid=14628 comm="syz.3.2401" path="socket:[42102]" dev="sockfs" ino=42102 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 554.679924][ T5887] usb 7-1: string descriptor 0 read error: -71 [ 554.740401][ T5887] ir_toy 7-1:8.177: required endpoints not found [ 554.773569][ T5818] Bluetooth: Unexpected start frame (len 18) [ 554.773939][ T5887] usb 7-1: USB disconnect, device number 27 [ 554.785896][ T5818] Bluetooth: Wrong link type (-71) [ 555.036780][T14633] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2396'. [ 556.094413][ T48] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 556.289725][ T48] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 556.307914][T14665] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 556.384772][ T48] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 556.396786][ T30] audit: type=1400 audit(1770465010.001:820): avc: denied { relabelto } for pid=14664 comm="syz.1.2411" name="508" dev="tmpfs" ino=2717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 556.422138][ T48] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 556.431385][ T48] usb 7-1: Product: syz [ 556.442571][ T48] usb 7-1: Manufacturer: syz [ 556.443367][T14665] netlink: 'syz.1.2411': attribute type 1 has an invalid length. [ 556.454067][ T48] usb 7-1: SerialNumber: syz [ 556.459874][ T30] audit: type=1400 audit(1770465010.001:821): avc: denied { associate } for pid=14664 comm="syz.1.2411" name="508" dev="tmpfs" ino=2717 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:" [ 556.502721][T14665] 8021q: adding VLAN 0 to HW filter on device bond3 [ 556.634224][ T30] audit: type=1400 audit(1770465010.011:822): avc: denied { write } for pid=14664 comm="syz.1.2411" name="508" dev="tmpfs" ino=2717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 556.672034][ T30] audit: type=1400 audit(1770465010.011:823): avc: denied { add_name } for pid=14664 comm="syz.1.2411" name="blkio.bfq.io_service_bytes_recursive" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 556.718062][ T48] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 557.244885][ T30] audit: type=1400 audit(1770465010.011:824): avc: denied { create } for pid=14664 comm="syz.1.2411" name="blkio.bfq.io_service_bytes_recursive" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 557.426517][ T30] audit: type=1400 audit(1770465010.011:825): avc: denied { associate } for pid=14664 comm="syz.1.2411" name="blkio.bfq.io_service_bytes_recursive" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 557.545983][T14683] SELinux: security_context_str_to_sid () failed with errno=-22 [ 557.574294][ T30] audit: type=1400 audit(1770465010.011:826): avc: denied { read append open } for pid=14664 comm="syz.1.2411" path="/508/blkio.bfq.io_service_bytes_recursive" dev="tmpfs" ino=2722 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 557.601885][ T30] audit: type=1400 audit(1770465010.051:827): avc: denied { ioctl } for pid=14664 comm="syz.1.2411" path="/508/blkio.bfq.io_service_bytes_recursive" dev="tmpfs" ino=2722 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 557.637528][ C0] usblp0: nonzero write bulk status received: -71 [ 557.638883][ T48] usb 7-1: USB disconnect, device number 28 [ 557.997366][ T48] usblp0: removed [ 558.247622][ T5818] Bluetooth: Wrong link type (-71) [ 559.248470][T14715] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2425'. [ 560.415561][ T48] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 560.584017][T14745] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2436'. [ 560.586846][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 560.586860][ T30] audit: type=1400 audit(1770465014.191:833): avc: denied { getopt } for pid=14744 comm="syz.1.2436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 560.754644][ T48] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 560.763706][ T48] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.769440][T14747] sock: sock_timestamping_bind_phc: sock not bind to device [ 560.801869][ T48] usb 7-1: config 0 descriptor?? [ 560.816528][ T48] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 561.144553][T14760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2442'. [ 561.422524][ T30] audit: type=1400 audit(1770465015.031:834): avc: denied { write } for pid=14737 comm="syz.6.2435" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 561.456177][T14769] netlink: 'syz.1.2444': attribute type 1 has an invalid length. [ 561.464266][T14768] netlink: 'syz.1.2444': attribute type 1 has an invalid length. [ 561.474778][T14769] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.2444'. [ 561.497824][ T30] audit: type=1400 audit(1770465015.071:835): avc: denied { open } for pid=14737 comm="syz.6.2435" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 561.506440][ T48] gp8psk: usb out operation failed. [ 561.523037][T14768] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.2444'. [ 561.527988][ T48] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 561.550685][ T48] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 561.560154][ T48] usb 7-1: media controller created [ 561.581635][ T48] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 561.705253][T14781] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2447'. [ 561.753456][T14781] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 562.020272][ T48] gp8psk_fe: Frontend attached [ 562.034466][ T48] usb 7-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 562.043077][ T48] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 562.274587][ T48] gp8psk: usb in 138 operation failed. [ 562.280082][ T48] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 562.724546][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.731071][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.740407][ T48] gp8psk: found Genpix USB device pID = 203 (hex) [ 562.752839][ T48] usb 7-1: USB disconnect, device number 29 [ 562.850679][ T48] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 563.100071][ T30] audit: type=1400 audit(1770465016.691:836): avc: denied { create } for pid=14794 comm="syz.2.2451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 563.327109][ T30] audit: type=1400 audit(1770465016.931:837): avc: denied { read } for pid=14794 comm="syz.2.2451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 563.959274][T14828] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2456'. [ 564.298347][ T30] audit: type=1400 audit(1770465017.561:838): avc: denied { append } for pid=14820 comm="syz.6.2456" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 565.324011][T14851] ceph: No mds server is up or the cluster is laggy [ 565.534461][T14860] nfs: Unknown parameter 'lock³Í½ †€0rŸ X' [ 565.667946][T14861] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 565.676169][T14861] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 565.684758][T14861] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 565.692488][T14861] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 567.423910][T14870] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2464'. [ 567.495722][ T5929] IPVS: starting estimator thread 0... [ 567.810412][ T30] audit: type=1400 audit(1770465021.271:839): avc: denied { connect } for pid=14871 comm="syz.1.2465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 567.934979][T14875] IPVS: using max 46 ests per chain, 110400 per kthread [ 569.222661][T14898] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2471'. [ 570.350078][T14905] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 570.449384][ T30] audit: type=1400 audit(1770465024.001:840): avc: denied { ioctl } for pid=14910 comm="syz.2.2476" path="socket:[41398]" dev="sockfs" ino=41398 ioctlcmd=0x8934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 570.534486][ T5818] Bluetooth: Wrong link type (-71) [ 570.704466][T14917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 570.939309][T14923] netlink: 'syz.3.2481': attribute type 1 has an invalid length. [ 570.955012][T14915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 571.793577][T14940] netlink: 'syz.5.2482': attribute type 2 has an invalid length. [ 573.470340][T14953] kAFS: No cell specified [ 574.840757][T14644] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 575.931818][T14987] netlink: 'syz.1.2496': attribute type 1 has an invalid length. [ 575.957017][T14987] bridge0: port 3(erspan0) entered blocking state [ 575.967496][T14987] bridge0: port 3(erspan0) entered disabled state [ 576.584255][T14987] erspan0: entered allmulticast mode [ 576.601893][T14993] usb usb7: usbfs: process 14993 (syz.6.2497) did not claim interface 0 before use [ 576.730280][T14987] erspan0: entered promiscuous mode [ 576.745607][T14991] erspan0: left allmulticast mode [ 576.750666][T14991] erspan0: left promiscuous mode [ 576.819723][T14997] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2497'. [ 577.189315][T14991] bridge0: port 3(erspan0) entered disabled state [ 577.234022][T14644] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 577.289385][T14644] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 577.309854][T14644] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 577.316121][T14644] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 577.750289][T14644] Bluetooth: Wrong link type (-71) [ 578.528431][ T30] audit: type=1400 audit(1770465032.141:841): avc: denied { ioctl } for pid=15018 comm="syz.6.2505" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 578.942322][T15029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 579.105731][T15025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 579.424618][ T48] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 579.491338][ T30] audit: type=1800 audit(1770465033.071:842): pid=15035 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.5.2511" name="/newroot/491/pids.events" dev="tmpfs" ino=2614 res=0 errno=0 [ 579.618534][ T48] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 579.627386][ T48] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 579.637593][ T48] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 579.646890][ T48] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 579.661845][ T48] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 579.671223][ T48] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 579.679551][ T48] usb 7-1: Product: syz [ 579.683903][ T48] usb 7-1: Manufacturer: syz [ 580.783934][T14644] Bluetooth: Wrong link type (-71) [ 581.621421][ T30] audit: type=1400 audit(1770465035.231:843): avc: denied { accept } for pid=15082 comm="syz.5.2523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 582.287823][T15089] overlayfs: failed to clone upperpath [ 582.470527][ T30] audit: type=1400 audit(1770465036.081:844): avc: denied { unmount } for pid=10520 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 582.488582][ T48] usb 7-1: USB disconnect, device number 30 [ 582.719185][T15103] overlayfs: failed to clone upperpath [ 583.365791][ T48] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 583.473288][T14644] Bluetooth: Wrong link type (-71) [ 583.545740][ T48] usb 7-1: Using ep0 maxpacket: 8 [ 583.558918][ T48] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 583.572833][ T48] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 583.596292][ T48] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 583.643570][ T48] usb 7-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 583.678755][ T48] usb 7-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 583.713560][ T48] usb 7-1: Product: syz [ 583.799887][ T48] usb 7-1: Manufacturer: syz [ 583.815695][ T48] usb 7-1: SerialNumber: syz [ 583.830337][ T48] usb 7-1: config 0 descriptor?? [ 583.839359][ T48] smsusb:smsusb_probe: board id=2, interface number 0 [ 583.849302][ T48] smsusb:smsusb_probe: Device initialized with return code -19 [ 584.091357][T15132] netlink: 'syz.5.2533': attribute type 2 has an invalid length. [ 584.354778][T15138] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2526'. [ 586.176014][T15155] veth0_to_team: entered promiscuous mode [ 587.163987][ T48] usb 7-1: USB disconnect, device number 31 [ 587.794461][T15168] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2541'. [ 588.331765][T15175] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 588.375389][T14644] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 589.214558][ T30] audit: type=1400 audit(1770465042.831:845): avc: denied { getopt } for pid=15166 comm="syz.1.2543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 590.991279][T15212] trusted_key: encrypted_key: master key parameter 'us' is invalid [ 592.490491][T15223] siw: device registration error -23 [ 593.634264][T15240] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2559'. [ 594.843397][T15261] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2568'. [ 596.624864][T15285] pim6reg: entered allmulticast mode [ 597.386661][ T24] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 597.648248][T15296] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2575'. [ 597.677157][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 598.006137][ T24] usb 7-1: config 14 has an invalid interface number: 217 but max is 0 [ 598.015839][ T24] usb 7-1: config 14 has no interface number 0 [ 598.026931][ T24] usb 7-1: config 14 interface 217 has no altsetting 0 [ 598.040131][ T24] usb 7-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 598.049817][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.064123][ T24] usb 7-1: Product: syz [ 598.075693][ T24] usb 7-1: Manufacturer: syz [ 598.081948][ T24] usb 7-1: SerialNumber: syz [ 599.037938][ T48] libceph: connect (1)[c::]:6789 error -13 [ 599.044679][ T48] libceph: mon0 (1)[c::]:6789 connect error [ 599.245941][T15308] ceph: No mds server is up or the cluster is laggy [ 599.780039][ T24] usb 7-1: USB disconnect, device number 32 [ 599.797845][T15323] trusted_key: encrypted_key: insufficient parameters specified [ 600.118872][T15338] SET target dimension over the limit! [ 600.367390][ T30] audit: type=1400 audit(1770465053.681:846): avc: denied { setopt } for pid=15333 comm="syz.2.2586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 600.474697][ T30] audit: type=1400 audit(1770465053.681:847): avc: denied { write } for pid=15333 comm="syz.2.2586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 600.547944][T15337] xt_cgroup: invalid path, errno=-2 [ 600.810881][ T30] audit: type=1400 audit(1770465054.421:848): avc: denied { ioctl } for pid=15348 comm="syz.5.2591" path="socket:[44109]" dev="sockfs" ino=44109 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 601.253744][ T5941] libceph: connect (1)[c::]:6789 error -101 [ 601.406715][ T5941] libceph: mon0 (1)[c::]:6789 connect error [ 601.691713][T15361] ceph: No mds server is up or the cluster is laggy [ 601.699300][ T24] libceph: connect (1)[c::]:6789 error -101 [ 601.706285][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 602.282631][T15383] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 602.290201][ T30] audit: type=1400 audit(1770465055.881:849): avc: denied { bind } for pid=15374 comm="syz.1.2598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 602.684641][ T30] audit: type=1400 audit(1770465056.271:850): avc: denied { write } for pid=15384 comm="syz.6.2601" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 604.252684][T15434] 9p: Bad value for 'rfdno' [ 604.290287][T15436] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2615'. [ 604.915281][T15439] netlink: 'syz.2.2616': attribute type 2 has an invalid length. [ 604.922999][T15439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2616'. [ 605.151161][T15447] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2619'. [ 605.249102][T15449] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2619'. [ 605.634324][ T5929] usb 7-1: new full-speed USB device number 33 using dummy_hcd [ 606.173198][T14644] Bluetooth: Wrong link type (-71) [ 606.178623][T14644] Bluetooth: hci4: link tx timeout [ 606.185662][T14644] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 606.246504][ T5929] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 606.283684][ T5929] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 606.392141][ T5929] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 606.416874][ T5929] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.512079][ T5929] usb 7-1: config 0 descriptor?? [ 606.546734][ T5929] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 606.571246][ T5929] dvb-usb: bulk message failed: -22 (3/0) [ 606.599699][ T5929] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 606.619458][ T5929] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 606.713274][ T5929] usb 7-1: media controller created [ 606.827565][T15455] dvb-usb: bulk message failed: -22 (2/0) [ 606.856217][T15455] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=15455 comm=syz.6.2622 [ 606.940307][T15480] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2628'. [ 607.306564][ T5929] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 607.319069][ T5929] dvb-usb: bulk message failed: -22 (6/0) [ 607.325248][ T5929] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 607.349733][T15482] rdma_rxe: rxe_newlink: failed to add veth1_to_hsr [ 607.370410][ T5929] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input9 [ 607.435459][ T5929] dvb-usb: schedule remote query interval to 150 msecs. [ 607.447444][ T5929] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 607.608942][ T5929] dvb-usb: bulk message failed: -22 (1/0) [ 607.628480][ T5929] dvb-usb: error while querying for an remote control event. [ 607.739640][T15491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2635'. [ 607.904179][ T5929] dvb-usb: bulk message failed: -22 (1/0) [ 607.909941][ T5929] dvb-usb: error while querying for an remote control event. [ 608.082678][T15501] tmpfs: Bad value for 'mpol' [ 608.087974][ T5929] dvb-usb: bulk message failed: -22 (1/0) [ 608.124330][ T5929] dvb-usb: error while querying for an remote control event. [ 608.231461][T15509] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 608.250838][ T5818] Bluetooth: hci4: command 0x0406 tx timeout [ 608.263633][T15509] batadv1: entered promiscuous mode [ 608.274171][T15509] team0: Port device batadv1 added [ 608.335900][ T5929] dvb-usb: bulk message failed: -22 (1/0) [ 608.347295][ T5929] dvb-usb: error while querying for an remote control event. [ 608.393654][ T5859] usb 7-1: USB disconnect, device number 33 [ 608.993943][ T5859] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 609.694477][ T5859] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 609.924707][ T5859] usb 7-1: Using ep0 maxpacket: 8 [ 610.247046][ T5859] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 610.286355][ T5859] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 610.309608][ T5859] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 610.349085][ T5859] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 610.359275][ T5859] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.384719][ T5859] usb 7-1: Product: à – [ 610.398234][ T5859] usb 7-1: Manufacturer: 秡祂च犜蕻᥾ꃾ਎뫅拳⠔䓣å‡é±ˆï³¶ï†‹â¸¨ìŸœá«†ä•®ã¼°Ó³è‰ç·¯â¡»í‹á¬ê¤†ê·‰î“ŒæŠ“淚㥱á–頹莻䫞äï¾´è«á ºî˜²Ý¶å‰£å‘“沰ᚑ䥔â¢å¡¯î¨ºåº’ꑺᔧฑíˆä…¼á®Ÿé‹ê®ˆë§ªéŽ¢ì£è‚繇夵淋먥樕å¬ïš¾äŒŸé¹†ìžƒí†¨îš„æ”ë™è‘šä¤Šà¿Ÿã®¦äª»Ô¾ [ 610.481466][ T5859] usb 7-1: SerialNumber: syz [ 611.384974][T15539] SET target dimension over the limit! [ 611.462704][T15548] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2648'. [ 611.616879][ T5859] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 611.724155][ T5859] cdc_ncm 7-1:1.0: bind() failure [ 611.752242][ T5859] usb 7-1: USB disconnect, device number 34 [ 612.076059][T15566] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2652'. [ 613.096705][T15584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2659'. [ 613.112062][T15584] netlink: 'syz.3.2659': attribute type 10 has an invalid length. [ 613.160093][T15584] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2659'. [ 613.268568][T15580] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2659'. [ 614.005066][ T30] audit: type=1400 audit(1770465067.621:851): avc: denied { read write } for pid=15602 comm="syz.6.2663" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 614.086662][ T30] audit: type=1400 audit(1770465067.661:852): avc: denied { open } for pid=15602 comm="syz.6.2663" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 614.215578][T15607] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2663'. [ 614.271224][ T30] audit: type=1400 audit(1770465067.881:853): avc: denied { create } for pid=15604 comm="syz.1.2664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 619.234971][T15668] netlink: 'syz.1.2683': attribute type 1 has an invalid length. [ 619.553701][ T30] audit: type=1400 audit(1770465073.161:854): avc: denied { append } for pid=15679 comm="syz.6.2685" name="dvr0" dev="devtmpfs" ino=928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 619.784987][T15684] 9pnet_virtio: no channels available for device syz [ 621.034927][ T30] audit: type=1400 audit(1770465074.651:855): avc: denied { unmount } for pid=10520 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 621.420094][ T30] audit: type=1400 audit(1770465075.021:856): avc: denied { getopt } for pid=15691 comm="syz.6.2687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 623.889392][T15711] IPVS: dh: FWM 3 0x00000003 - no destination available [ 623.909074][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.915556][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.412310][T15736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2697'. [ 625.421377][T15736] netlink: 'syz.1.2697': attribute type 5 has an invalid length. [ 625.429480][T15736] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2697'. [ 627.238726][ T30] audit: type=1326 audit(1770465080.851:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15759 comm="syz.3.2704" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f219119aeb9 code=0x0 [ 628.030917][T15781] netlink: 'syz.1.2709': attribute type 4 has an invalid length. [ 628.059009][T15784] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2710'. [ 628.113997][T15784] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2710'. [ 628.747776][T15796] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2713'. [ 628.949019][T15800] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 629.013383][ T30] audit: type=1400 audit(1770465082.621:858): avc: denied { accept } for pid=15804 comm="syz.1.2716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 629.124101][ T5859] usb 7-1: new full-speed USB device number 35 using dummy_hcd [ 629.285522][ T5859] usb 7-1: config 4 has an invalid interface number: 3 but max is 0 [ 629.306829][ T5859] usb 7-1: config 4 has an invalid interface number: 3 but max is 0 [ 629.345257][ T5859] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 629.363886][ T5859] usb 7-1: config 4 has no interface number 0 [ 629.378044][ T5859] usb 7-1: config 4 interface 3 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 629.397071][ T5859] usb 7-1: config 4 interface 3 has no altsetting 0 [ 629.425407][ T5859] usb 7-1: config 4 interface 3 has no altsetting 1 [ 629.437045][ T5859] usb 7-1: New USB device found, idVendor=05ac, idProduct=1204, bcdDevice= 7.6c [ 629.453600][ T5859] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.668826][T15823] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2721'. [ 631.203813][T15836] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 631.321965][ T5859] apple-mfi-fastcharge 7-1: string descriptor 0 read error: -71 [ 631.405782][ T5859] usb-storage 7-1:4.3: USB Mass Storage device detected [ 631.457898][ T5859] usb-storage 7-1:4.3: Quirks match for vid 05ac pid 1204: 90 [ 631.669579][ T5859] apple-mfi-fastcharge 7-1: USB disconnect, device number 35 [ 632.452710][ T5859] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 632.664148][ T5859] usb 7-1: device descriptor read/64, error -71 [ 632.804103][ T30] audit: type=1400 audit(1770465086.391:859): avc: denied { map } for pid=15856 comm="syz.2.2734" path="socket:[45584]" dev="sockfs" ino=45584 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 632.984878][ T5859] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 633.023883][T15861] trusted_key: encrypted_key: master key parameter 'us' is invalid [ 633.134392][ T5859] usb 7-1: device descriptor read/64, error -71 [ 633.255012][ T5859] usb usb7-port1: attempt power cycle [ 634.004633][ T5859] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 634.085233][ T5859] usb 7-1: device descriptor read/8, error -71 [ 634.208817][T15886] IPVS: sh: FWM 3 0x00000003 - no destination available [ 634.904294][ T5859] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 634.933688][T15889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2742'. [ 635.544768][T15893] overlayfs: failed to resolve './file0': -2 [ 635.550908][ T5859] usb 7-1: device not accepting address 39, error -71 [ 635.558749][ T5859] usb usb7-port1: unable to enumerate USB device [ 637.078760][T15918] netlink: 'syz.6.2754': attribute type 6 has an invalid length. [ 637.123896][ T30] audit: type=1400 audit(1770465090.731:860): avc: denied { bind } for pid=15917 comm="syz.2.2752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 637.264384][ T30] audit: type=1400 audit(1770465090.881:861): avc: denied { nlmsg_write } for pid=15924 comm="syz.3.2755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 638.081434][T15940] xt_hashlimit: size too large, truncated to 1048576 [ 639.388776][T15958] xt_bpf: check failed: parse error [ 640.877087][ T30] audit: type=1326 audit(1770465094.491:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15949 comm="syz.3.2762" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f219119aeb9 code=0x0 [ 641.351062][T15985] overlayfs: failed to clone upperpath [ 641.562785][T15992] openvswitch: netlink: Message has 4 unknown bytes. [ 641.625876][T15992] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 642.319569][ T30] audit: type=1326 audit(1770465095.931:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15999 comm="syz.6.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277c79aeb9 code=0x7ffc0000 [ 642.351004][ T30] audit: type=1326 audit(1770465095.951:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15999 comm="syz.6.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277c79aeb9 code=0x7ffc0000 [ 642.594190][ T30] audit: type=1326 audit(1770465095.951:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15999 comm="syz.6.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277c79aeb9 code=0x7ffc0000 [ 642.627631][ T30] audit: type=1326 audit(1770465095.951:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15999 comm="syz.6.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f277c79aeb9 code=0x7ffc0000 [ 642.689378][ T30] audit: type=1326 audit(1770465095.951:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15999 comm="syz.6.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277c79aeb9 code=0x7ffc0000 [ 642.745857][ T30] audit: type=1326 audit(1770465096.241:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15999 comm="syz.6.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277c79aeb9 code=0x7ffc0000 [ 642.805975][ T30] audit: type=1326 audit(1770465096.241:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15999 comm="syz.6.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277c79aeb9 code=0x7ffc0000 [ 642.863361][ T30] audit: type=1326 audit(1770465096.241:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15999 comm="syz.6.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277c79aeb9 code=0x7ffc0000 [ 642.887976][ T30] audit: type=1326 audit(1770465096.241:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15999 comm="syz.6.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f277c79ac22 code=0x7ffc0000 [ 643.563895][T16032] bond6: option xmit_hash_policy: invalid value (6) [ 643.576897][T16032] bond6 (unregistering): Released all slaves [ 644.210138][T16045] overlayfs: missing 'lowerdir' [ 644.377858][T16048] overlayfs: failed to resolve 'hash': -2 [ 646.384733][ T30] kauditd_printk_skb: 172 callbacks suppressed [ 646.384745][ T30] audit: type=1400 audit(1770465100.001:1044): avc: denied { setopt } for pid=16078 comm="syz.2.2800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 647.138916][T16095] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2803'. [ 647.940250][T16116] netlink: 'syz.1.2810': attribute type 6 has an invalid length. [ 647.958943][ T30] audit: type=1400 audit(1770465101.571:1045): avc: denied { ioctl } for pid=16117 comm="syz.2.2811" path="socket:[45946]" dev="sockfs" ino=45946 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 648.340641][ T30] audit: type=1400 audit(1770465101.601:1046): avc: denied { write } for pid=16117 comm="syz.2.2811" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 649.160864][T16139] overlayfs: failed to clone upperpath [ 649.475967][ T5818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 649.485851][T16144] binder: 16142:16144 ioctl 4018620d 0 returned -22 [ 649.496502][ T5818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 649.506125][ T5818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 649.517987][ T5818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 649.526290][ T5818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 650.050221][T16157] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2821'. [ 651.805807][ T5818] Bluetooth: hci2: command tx timeout [ 652.351663][T16179] Cannot find add_set index 65532 as target [ 652.388648][T16179] netlink: 'syz.3.2828': attribute type 10 has an invalid length. [ 652.694768][T16179] macvlan0: entered promiscuous mode [ 652.704001][T16179] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 652.799851][T16181] netlink: 'syz.3.2829': attribute type 1 has an invalid length. [ 652.880703][ T30] audit: type=1400 audit(1770465106.491:1047): avc: denied { create } for pid=16180 comm="syz.3.2829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 652.913926][T16181] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 652.968158][ T30] audit: type=1400 audit(1770465106.521:1048): avc: denied { write } for pid=16180 comm="syz.3.2829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 653.400748][T16145] chnl_net:caif_netlink_parms(): no params data found [ 653.897563][T14644] Bluetooth: hci2: command tx timeout [ 654.047104][T16145] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.487267][T16145] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.494716][T16145] bridge_slave_0: entered allmulticast mode [ 654.503492][T16145] bridge_slave_0: entered promiscuous mode [ 654.586683][T16145] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.593736][T16145] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.601188][T16145] bridge_slave_1: entered allmulticast mode [ 654.617770][T16145] bridge_slave_1: entered promiscuous mode [ 654.664626][T16145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 654.677197][T16145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 654.723492][T16145] team0: Port device team_slave_0 added [ 654.746311][T16145] team0: Port device team_slave_1 added [ 654.773353][T16145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 654.874060][T16145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.972565][T16145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 654.999103][T16145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 655.014732][T16145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 655.103725][T16145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 655.289447][T16145] hsr_slave_0: entered promiscuous mode [ 655.307546][T16145] hsr_slave_1: entered promiscuous mode [ 655.326615][T16145] debugfs: 'hsr0' already exists in 'hsr' [ 655.332485][T16145] Cannot create hsr debugfs directory [ 656.422799][T14644] Bluetooth: hci2: command tx timeout [ 656.505922][T16247] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2847'. [ 656.521365][ T30] audit: type=1326 audit(1770465110.131:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16246 comm="syz.5.2847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc908f9aeb9 code=0x7ffc0000 [ 656.553417][ T30] audit: type=1326 audit(1770465110.131:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16246 comm="syz.5.2847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc908f9aeb9 code=0x7ffc0000 [ 656.577275][ T30] audit: type=1326 audit(1770465110.131:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16246 comm="syz.5.2847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc908f9aeb9 code=0x7ffc0000 [ 656.656146][T16145] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 656.687435][ T30] audit: type=1326 audit(1770465110.131:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16246 comm="syz.5.2847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc908f9aeb9 code=0x7ffc0000 [ 656.696106][T16145] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.194676][T16267] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2856'. [ 658.005490][T16145] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 658.085926][T16145] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.206458][T16145] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 658.659587][ T5818] Bluetooth: hci2: command tx timeout [ 658.746234][T16145] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.836608][T16145] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 658.860929][T16145] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.226217][T16145] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 659.281956][T16145] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 659.295756][T16145] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 659.315341][T16145] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 660.032130][T16145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 660.113553][T16145] 8021q: adding VLAN 0 to HW filter on device team0 [ 660.193024][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.200166][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 660.255345][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.262487][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 660.298615][T16145] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 660.309638][T16145] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 660.353901][T16303] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2863'. [ 660.365582][T16298] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2863'. [ 661.533163][ T5818] Bluetooth: Wrong link type (-71) [ 661.879216][T16145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 661.922592][T16145] veth0_vlan: entered promiscuous mode [ 661.953950][T16145] veth1_vlan: entered promiscuous mode [ 661.960888][T16326] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=537 sclass=netlink_route_socket pid=16326 comm=syz.3.2873 [ 662.642208][T16145] veth0_macvtap: entered promiscuous mode [ 662.660351][T16145] veth1_macvtap: entered promiscuous mode [ 662.679079][T16145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 662.698233][T16145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 662.726859][ T3521] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.748678][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.781565][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.855033][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.921549][ T30] audit: type=1400 audit(1770465116.521:1053): avc: denied { read } for pid=16335 comm="syz.6.2876" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 663.012272][ T30] audit: type=1400 audit(1770465116.521:1054): avc: denied { open } for pid=16335 comm="syz.6.2876" path="/247/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 663.084578][ T7071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.092403][ T7071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.329711][ T30] audit: type=1400 audit(1770465116.521:1055): avc: denied { ioctl } for pid=16335 comm="syz.6.2876" path="/247/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 663.908733][T16354] SQUASHFS error: Failed to read block 0x0: -5 [ 664.185279][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.203333][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.714190][ T5818] Bluetooth: Wrong link type (-71) [ 667.186861][T14644] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 667.200285][T14644] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 667.212603][T16400] xt_socket: unknown flags 0x4 [ 667.221694][T14644] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 667.232228][T14644] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 667.670834][T14644] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 668.341771][T13897] syz_tun (unregistering): left allmulticast mode [ 669.000276][ T5818] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 669.142526][ T30] audit: type=1400 audit(1770465122.751:1056): avc: denied { mounton } for pid=16420 comm="syz.2.2897" path="/proc/15/cgroup" dev="proc" ino=49169 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 669.643143][ T30] audit: type=1400 audit(1770465122.761:1057): avc: denied { remount } for pid=16420 comm="syz.2.2897" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 669.777563][ T5818] Bluetooth: hci5: command tx timeout [ 670.980010][T10583] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.994291][T10583] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 671.634461][ T5929] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 671.815820][ T5818] Bluetooth: hci5: command tx timeout [ 672.055049][ T5929] usb 7-1: Using ep0 maxpacket: 8 [ 672.081507][T10583] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.123893][ T5929] usb 7-1: unable to get BOS descriptor or descriptor too short [ 672.176931][ T5929] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 672.194541][T10583] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 672.619907][ T5929] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 672.644387][ T5929] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 672.752422][ T5929] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 672.762393][ T5929] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 672.772696][ T5929] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 672.798967][ T5929] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 672.831101][T10583] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.336069][T10583] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 673.377016][ T5929] usb 7-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 673.414144][ T5929] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.422152][ T5929] usb 7-1: Product: syz [ 673.461580][ T5929] usb 7-1: Manufacturer: syz [ 673.616462][T10583] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.764150][ T5929] usb 7-1: SerialNumber: syz [ 673.784750][ T5929] usb 7-1: config 0 descriptor?? [ 673.789810][T10583] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 673.801122][T16441] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 673.822177][T16441] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 673.839435][ T5929] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 673.898831][ T5818] Bluetooth: hci5: command tx timeout [ 673.943061][T16396] chnl_net:caif_netlink_parms(): no params data found [ 674.224832][T16464] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 674.359979][T16468] xt_hashlimit: size too large, truncated to 1048576 [ 674.404786][T16466] netlink: 'syz.2.2907': attribute type 13 has an invalid length. [ 674.468854][ T30] audit: type=1800 audit(1770465128.071:1058): pid=16474 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2907" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 674.592627][ T30] audit: type=1400 audit(1770465128.111:1059): avc: denied { map } for pid=16463 comm="syz.2.2907" path="/proc/21/task/23/attr/fscreate" dev="proc" ino=48393 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 674.779811][T16483] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16483 comm=syz.3.2908 [ 674.876824][T16396] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.887507][T16396] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.897349][T16396] bridge_slave_0: entered allmulticast mode [ 674.905304][T16396] bridge_slave_0: entered promiscuous mode [ 674.960769][T16396] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.061685][T16396] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.614690][T16396] bridge_slave_1: entered allmulticast mode [ 675.739285][T16396] bridge_slave_1: entered promiscuous mode [ 676.536609][ T5818] Bluetooth: hci5: command tx timeout [ 676.625708][ T5859] usb 7-1: USB disconnect, device number 40 [ 676.656752][T10583] bridge_slave_1: left allmulticast mode [ 676.690569][T10583] bridge_slave_1: left promiscuous mode [ 676.723883][T10583] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.757294][T10583] bridge_slave_0: left allmulticast mode [ 676.825129][T10583] bridge_slave_0: left promiscuous mode [ 676.839460][T10583] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.864121][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 677.046593][ T10] usb 3-1: config 0 has no interfaces? [ 677.052094][ T10] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 677.094384][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.114742][ T10] usb 3-1: config 0 descriptor?? [ 677.414339][ T5818] Bluetooth: Wrong link type (-71) [ 677.710394][ T48] usb 3-1: USB disconnect, device number 4 [ 677.908173][T10583] dvmrp6 (unregistering): left allmulticast mode [ 677.935061][T10583] bond2 (unregistering): (slave geneve4): Releasing active interface [ 678.100714][T10583] bond0 (unregistering): left promiscuous mode [ 678.107437][T10583] bond_slave_0: left promiscuous mode [ 678.112921][T10583] bond_slave_1: left promiscuous mode [ 678.188455][T10583] team0: left promiscuous mode [ 678.193503][T10583] team_slave_0: left promiscuous mode [ 678.199413][T10583] team_slave_1: left promiscuous mode [ 678.205773][T10583] batadv1: left promiscuous mode [ 678.213012][T10583] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 678.213166][ T3557] smc: removing ib device syz0 [ 678.229983][T10583] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 678.240156][T10583] bond0 (unregistering): (slave team0): Releasing backup interface [ 678.248569][T16534] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2921'. [ 678.261535][T10583] bond0 (unregistering): Released all slaves [ 678.270567][T10583] bond1 (unregistering): Released all slaves [ 678.345016][T10583] bond2 (unregistering): Released all slaves [ 678.440578][T10583] bond3 (unregistering): Released all slaves [ 678.542180][T16396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 679.110069][T16526] –: renamed from vxcan1 (while UP) [ 679.174993][T16396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 679.245642][T16396] team0: Port device team_slave_0 added [ 679.267844][T16396] team0: Port device team_slave_1 added [ 679.530128][T16396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 679.546508][T16396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 679.581729][T16396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 679.634832][T16396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 679.658168][ T30] audit: type=1326 audit(1770465133.271:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16552 comm="syz.5.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc908f9aeb9 code=0x7fc00000 [ 679.682620][T16396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 679.733626][T16396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 679.796045][ T30] audit: type=1326 audit(1770465133.271:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16552 comm="syz.5.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc908f9aeb9 code=0x7fc00000 [ 679.824667][ T30] audit: type=1326 audit(1770465133.291:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16552 comm="syz.5.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc908f9aeb9 code=0x7fc00000 [ 679.844106][ T9] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 679.921510][ T30] audit: type=1326 audit(1770465133.291:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16552 comm="syz.5.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc908f9aeb9 code=0x7fc00000 [ 680.020074][T16396] hsr_slave_0: entered promiscuous mode [ 680.029074][ T30] audit: type=1326 audit(1770465133.291:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16552 comm="syz.5.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc908f9aeb9 code=0x7fc00000 [ 680.031007][T16396] hsr_slave_1: entered promiscuous mode [ 680.082332][ T9] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 680.092965][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.150580][ T9] usb 7-1: Product: syz [ 680.175237][ T9] usb 7-1: Manufacturer: syz [ 680.334082][ T9] usb 7-1: SerialNumber: syz [ 680.380032][T16396] debugfs: 'hsr0' already exists in 'hsr' [ 680.386247][ T9] usb 7-1: config 0 descriptor?? [ 680.394731][T16396] Cannot create hsr debugfs directory [ 680.651550][ T30] audit: type=1326 audit(1770465134.261:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16552 comm="syz.5.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc908f94cd7 code=0x7fc00000 [ 680.938430][ T5818] Bluetooth: Wrong link type (-71) [ 681.542644][T16594] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2933'. [ 681.917868][T16558] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=16558 comm=syz.6.2926 [ 681.979246][T16558] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=16558 comm=syz.6.2926 [ 683.333622][T16615] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2937'. [ 683.394242][T16615] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2937'. [ 683.715592][ T30] audit: type=1400 audit(1770465137.301:1066): avc: denied { name_bind } for pid=16610 comm="syz.3.2937" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 683.848627][T16615] erspan0: entered promiscuous mode [ 683.865272][T16615] gretap0: entered promiscuous mode [ 683.879914][T16615] debugfs: 'hsr1' already exists in 'hsr' [ 683.891659][T16615] Cannot create hsr debugfs directory [ 683.962723][ T24] usb 7-1: USB disconnect, device number 41 [ 684.044113][ T5887] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 684.273507][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 684.297328][ T5887] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 684.442103][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.519214][ T30] audit: type=1400 audit(1770465138.081:1067): avc: denied { read append } for pid=16636 comm="syz.6.2941" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 684.900903][ T30] audit: type=1400 audit(1770465138.081:1068): avc: denied { open } for pid=16636 comm="syz.6.2941" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 684.949240][ T5887] usb 3-1: config 0 descriptor?? [ 684.980127][T16622] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 685.012534][T16396] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 685.070445][T16396] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 685.363366][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.370530][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.411019][T16396] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 685.475985][T16655] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2944'. [ 685.795991][T16396] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 686.437320][ T5887] usbhid 3-1:0.0: can't add hid device: -71 [ 686.454135][ T5887] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 686.474587][ T5887] usb 3-1: USB disconnect, device number 5 [ 688.253929][T16396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.400325][T16396] 8021q: adding VLAN 0 to HW filter on device team0 [ 688.475200][T16709] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2955'. [ 688.845278][T16396] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 688.868877][T16396] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 688.917951][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.925055][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 688.957409][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.964503][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 689.699951][T10583] batadv0: left promiscuous mode [ 689.722346][T10583] hsr_slave_0: left promiscuous mode [ 689.942713][T10583] hsr_slave_1: left promiscuous mode [ 689.982048][T10583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 690.425267][T10583] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 690.463496][T10583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 690.509738][T10583] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 690.616883][T10583] veth0_macvtap: left allmulticast mode [ 690.632228][T10583] veth0_macvtap: left promiscuous mode [ 690.642799][T10583] veth1_vlan: left promiscuous mode [ 690.659404][T10583] veth0_vlan: left promiscuous mode [ 691.061689][T10583] team0 (unregistering): Port device batadv1 removed [ 691.124096][T16745] vcan0: tx drop: invalid da for name 0x00000000000000fe [ 691.252837][ T30] audit: type=1326 audit(1770465144.851:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16742 comm="syz.6.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277c79aeb9 code=0x7ffc0000 [ 691.328454][ T30] audit: type=1326 audit(1770465144.851:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16742 comm="syz.6.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f277c79aeb9 code=0x7ffc0000 [ 691.377834][ T5887] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 691.514659][ T30] audit: type=1326 audit(1770465144.851:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16742 comm="syz.6.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277c79aeb9 code=0x7ffc0000 [ 691.549506][ T5887] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 691.601175][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 691.631784][ T30] audit: type=1326 audit(1770465144.851:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16742 comm="syz.6.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f277c79aeb9 code=0x7ffc0000 [ 691.636891][ T5887] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 691.728453][ T5887] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 691.742404][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.795211][ T30] audit: type=1326 audit(1770465144.851:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16742 comm="syz.6.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277c79aeb9 code=0x7ffc0000 [ 691.815231][ T5887] usb 3-1: config 0 descriptor?? [ 691.915800][ T30] audit: type=1326 audit(1770465144.851:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16742 comm="syz.6.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f277c79aeb9 code=0x7ffc0000 [ 691.991703][ T30] audit: type=1326 audit(1770465144.851:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16742 comm="syz.6.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277c79aeb9 code=0x7ffc0000 [ 692.048168][ T30] audit: type=1326 audit(1770465144.851:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16742 comm="syz.6.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f277c79aeb9 code=0x7ffc0000 [ 692.093809][ T30] audit: type=1326 audit(1770465144.851:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16742 comm="syz.6.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277c79aeb9 code=0x7ffc0000 [ 692.097776][ T5887] usb 3-1: USB disconnect, device number 6 [ 692.191311][ T30] audit: type=1326 audit(1770465144.851:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16742 comm="syz.6.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f277c75b78e code=0x7ffc0000 [ 692.525906][T10583] team0 (unregistering): Port device team_slave_1 removed [ 692.605215][T10583] team0 (unregistering): Port device team_slave_0 removed [ 693.077148][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 693.282868][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 693.329129][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 693.347198][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 693.377397][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 693.387107][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.435315][ T10] usb 3-1: config 0 descriptor?? [ 693.521226][T16718] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 693.530891][T16718] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 693.541013][T16718] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 693.651147][T16751] pim6reg: entered allmulticast mode [ 693.796818][T16758] pim6reg: left allmulticast mode [ 693.892730][T16801] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2965'. [ 694.262604][ T10] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 694.589307][T16396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 694.785857][T10583] IPVS: stop unused estimator thread 0... [ 694.827060][T16396] veth0_vlan: entered promiscuous mode [ 694.872878][T16396] veth1_vlan: entered promiscuous mode [ 695.057387][T16396] veth0_macvtap: entered promiscuous mode [ 695.602717][T16396] veth1_macvtap: entered promiscuous mode [ 695.763273][T16396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 695.785859][T16396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 695.820274][T10583] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.829153][T10583] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.942926][T10583] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.955563][T10583] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.272577][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.290257][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.555757][ T9] usb 3-1: USB disconnect, device number 7 [ 696.762748][ T3557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.850434][ T3557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 697.326048][T16842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2888'. [ 697.706066][T16850] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2976'. [ 698.391780][T16861] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 698.401482][T16863] netlink: 'syz.3.2981': attribute type 2 has an invalid length. [ 698.444775][T16864] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2982'. [ 698.723076][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 698.723092][ T30] audit: type=1400 audit(1770465152.331:1088): avc: denied { write } for pid=16871 comm="syz.6.2986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 698.787119][T16876] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2984'. [ 699.222189][T16878] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2986'. [ 699.338221][ T30] audit: type=1326 audit(1770465152.861:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16881 comm="syz.2.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dab39aeb9 code=0x7ff00000 [ 699.380139][ T30] audit: type=1326 audit(1770465152.981:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16881 comm="syz.2.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2dab39ab4b code=0x7ff00000 [ 699.517101][ T30] audit: type=1326 audit(1770465152.981:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16881 comm="syz.2.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2dab39ab4b code=0x7ff00000 [ 699.638180][ T30] audit: type=1326 audit(1770465152.981:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16881 comm="syz.2.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2dab39ab4b code=0x7ff00000 [ 699.662193][ T30] audit: type=1326 audit(1770465152.981:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16881 comm="syz.2.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2dab39ab4b code=0x7ff00000 [ 699.686140][ T30] audit: type=1326 audit(1770465152.981:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16881 comm="syz.2.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2dab39ab4b code=0x7ff00000 [ 700.106337][ T30] audit: type=1326 audit(1770465152.981:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16881 comm="syz.2.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2dab39ab4b code=0x7ff00000 [ 700.133246][ T30] audit: type=1326 audit(1770465152.981:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16881 comm="syz.2.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2dab39ab4b code=0x7ff00000 [ 700.304713][ T30] audit: type=1326 audit(1770465152.981:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16881 comm="syz.2.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2dab39ab4b code=0x7ff00000 [ 700.364834][T16894] FAULT_INJECTION: forcing a failure. [ 700.364834][T16894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 700.377953][T16894] CPU: 0 UID: 0 PID: 16894 Comm: syz.6.2990 Tainted: G L syzkaller #0 PREEMPT(full) [ 700.377979][T16894] Tainted: [L]=SOFTLOCKUP [ 700.377985][T16894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 700.377996][T16894] Call Trace: [ 700.378002][T16894] [ 700.378008][T16894] dump_stack_lvl+0x100/0x190 [ 700.378037][T16894] should_fail_ex.cold+0x5/0xa [ 700.378057][T16894] _copy_from_user+0x2e/0xd0 [ 700.378081][T16894] __sys_bpf+0x243/0x5050 [ 700.378105][T16894] ? __pfx___sys_bpf+0x10/0x10 [ 700.378124][T16894] ? preempt_schedule_common+0x42/0xc0 [ 700.378144][T16894] ? preempt_schedule_thunk+0x16/0x30 [ 700.378164][T16894] ? vfs_write+0x464/0x1070 [ 700.378183][T16894] ? find_held_lock+0x2b/0x80 [ 700.378205][T16894] ? ksys_write+0x190/0x250 [ 700.378234][T16894] ? __mutex_unlock_slowpath+0x15c/0x790 [ 700.378269][T16894] ? fput+0x79/0x100 [ 700.378291][T16894] ? ksys_write+0x1ac/0x250 [ 700.378310][T16894] ? __pfx_ksys_write+0x10/0x10 [ 700.378334][T16894] __x64_sys_bpf+0x7b/0xc0 [ 700.378353][T16894] ? lockdep_hardirqs_on+0x78/0x100 [ 700.378372][T16894] do_syscall_64+0xc9/0xf80 [ 700.378393][T16894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.378410][T16894] RIP: 0033:0x7f277c79aeb9 [ 700.378425][T16894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 700.378441][T16894] RSP: 002b:00007f277d68b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 700.378458][T16894] RAX: ffffffffffffffda RBX: 00007f277ca16180 RCX: 00007f277c79aeb9 [ 700.378470][T16894] RDX: 0000000000000050 RSI: 0000200000000580 RDI: 0000000000000000 [ 700.378480][T16894] RBP: 00007f277d68b090 R08: 0000000000000000 R09: 0000000000000000 [ 700.378490][T16894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 700.378500][T16894] R13: 00007f277ca16218 R14: 00007f277ca16180 R15: 00007ffc245cb018 [ 700.378525][T16894] [ 700.581455][T16894] geneve2: entered promiscuous mode [ 700.586778][T16894] geneve2: entered allmulticast mode [ 700.991888][T16904] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2995'. [ 701.704271][T16911] netlink: 'syz.6.2997': attribute type 21 has an invalid length. [ 701.712666][T16911] netlink: 'syz.6.2997': attribute type 1 has an invalid length. [ 701.720524][T16911] netlink: 144 bytes leftover after parsing attributes in process `syz.6.2997'. [ 702.103265][T14644] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 702.155286][T14644] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 702.224569][T14644] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 702.233583][T14644] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 702.241221][T14644] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 702.635623][T16922] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2999'. [ 703.468881][ T50] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 703.489767][ T50] netdevsim netdevsim5 eth3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 703.524782][ T50] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.576289][T16928] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3000'. [ 703.662417][ T50] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 703.713422][ T50] netdevsim netdevsim5 eth2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 703.811136][ T50] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.934227][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 703.943098][ T50] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 703.968386][ T50] netdevsim netdevsim5 eth1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 703.996306][ T50] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.089173][ T50] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 704.119131][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 704.161193][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 704.176143][ T50] netdevsim netdevsim5 eth0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 704.189321][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 704.201753][ T50] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.215089][ T10] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 704.250656][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.259307][T16914] chnl_net:caif_netlink_parms(): no params data found [ 704.260793][ T10] usb 2-1: config 0 descriptor?? [ 704.294495][T14644] Bluetooth: hci4: command tx timeout [ 704.888434][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 704.888464][ T30] audit: type=1400 audit(1770465158.481:1160): avc: denied { mounton } for pid=16955 comm="syz.6.3009" path="/275/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 705.186098][T16914] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.234866][T16914] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.247770][ T30] audit: type=1400 audit(1770465158.491:1161): avc: denied { remount } for pid=16955 comm="syz.6.3009" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 705.379434][T16914] bridge_slave_0: entered allmulticast mode [ 705.387350][T16914] bridge_slave_0: entered promiscuous mode [ 705.419188][T16914] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.420456][ T89] usb 2-1: USB disconnect, device number 8 [ 705.434994][T16914] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.443541][T16914] bridge_slave_1: entered allmulticast mode [ 705.500447][T16969] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3010'. [ 705.872774][T16914] bridge_slave_1: entered promiscuous mode [ 706.375754][T14644] Bluetooth: hci4: command tx timeout [ 706.515789][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 706.532922][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 706.550254][ T50] bond0 (unregistering): Released all slaves [ 706.617887][ T30] audit: type=1400 audit(1770465160.231:1162): avc: denied { unmount } for pid=10520 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 706.661782][T16991] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3014'. [ 706.748534][T16914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 706.836745][T16914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 706.973613][T16914] team0: Port device team_slave_0 added [ 706.982556][T16914] team0: Port device team_slave_1 added [ 707.019790][T16914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 707.028550][T16914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 707.058125][T16914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 707.064071][ T48] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 707.089006][T16914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 707.102007][T16914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 707.129166][T16914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 707.189017][T16914] hsr_slave_0: entered promiscuous mode [ 707.199303][T16914] hsr_slave_1: entered promiscuous mode [ 707.224079][ T48] usb 2-1: Using ep0 maxpacket: 8 [ 707.230489][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 707.260051][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 707.288493][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 707.326221][ T48] usb 2-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82 [ 707.347126][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.371939][ T48] usb 2-1: Product: syz [ 707.380500][ T48] usb 2-1: Manufacturer: syz [ 707.406813][ T48] usb 2-1: SerialNumber: syz [ 707.417895][ T48] usb 2-1: config 0 descriptor?? [ 707.542661][ T30] audit: type=1400 audit(1770465161.151:1163): avc: denied { write } for pid=17004 comm="syz.2.3017" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 707.570684][T17007] fuse: Bad value for 'user_id' [ 707.577633][T17007] fuse: Bad value for 'user_id' [ 707.953235][ T10] usb 2-1: USB disconnect, device number 9 [ 708.454502][T14644] Bluetooth: hci4: command tx timeout [ 708.650551][T17025] overlayfs: failed to clone lowerpath [ 709.941799][T17035] ip6gre1: entered promiscuous mode [ 710.004389][T17035] ip6gre1: entered allmulticast mode [ 710.436172][ T48] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 710.534372][T14644] Bluetooth: hci4: command tx timeout [ 710.597644][ T48] usb 7-1: Using ep0 maxpacket: 32 [ 710.621090][ T48] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 710.652106][ T48] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 710.879678][ T48] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 710.915870][ T48] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.991787][T16914] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 710.994719][ T48] usb 7-1: config 0 descriptor?? [ 711.082224][T16914] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 711.095730][ T50] hsr_slave_0: left promiscuous mode [ 711.217465][ T50] hsr_slave_1: left promiscuous mode [ 711.223663][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 711.231386][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 711.243195][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 711.252722][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 711.510488][ T48] ft260 0003:0403:6030.0006: unknown main item tag 0x0 [ 711.658960][ T50] veth1_macvtap: left promiscuous mode [ 711.666117][ T50] veth0_macvtap: left promiscuous mode [ 711.775655][ T48] ft260 0003:0403:6030.0006: chip code: 6424 81a6 [ 711.903747][ T50] pim6reg (unregistering): left allmulticast mode [ 711.978532][ T48] ft260 0003:0403:6030.0006: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.6-1/input0 [ 712.030026][ T50] team0 (unregistering): Port device batadv1 removed [ 712.177686][ T48] ft260 0003:0403:6030.0006: failed to retrieve status: -71, no wakeup [ 712.210522][ T48] ft260 0003:0403:6030.0006: failed to retrieve status: -71 [ 713.191139][ T48] ft260 0003:0403:6030.0006: failed to reset I2C controller: -71 [ 713.271999][ T48] usb 7-1: USB disconnect, device number 42 [ 713.377860][T17108] input: syz1 as /devices/virtual/input/input11 [ 713.746149][T17120] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3036'. [ 713.883107][T17124] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17124 comm=syz.6.3037 [ 713.936291][ T50] team0 (unregistering): Port device team_slave_1 removed [ 713.976280][ T50] team0 (unregistering): Port device team_slave_0 removed [ 714.166495][ T89] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 714.326373][ T89] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 714.338889][ T89] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 714.340437][T16914] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 714.382529][ T89] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 714.386477][T16914] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 714.398954][ T89] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 714.407627][ T89] usb 7-1: SerialNumber: syz [ 714.525606][T17105] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 714.535091][T17105] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 714.544885][T17105] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 714.625778][T17148] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 715.593340][T16914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 715.665306][T16914] 8021q: adding VLAN 0 to HW filter on device team0 [ 715.798314][T17168] netlink: 'syz.2.3040': attribute type 10 has an invalid length. [ 715.807555][T17168] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3040'. [ 715.838469][T17168] batman_adv: batadv0: Adding interface: vlan1 [ 715.845031][T17168] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 715.871515][T17168] batman_adv: batadv0: Interface activated: vlan1 [ 716.056594][ T3557] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.063723][ T3557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 716.130135][ T3557] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.137221][ T3557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 716.586842][ T89] usb 7-1: 0:2 : does not exist [ 716.768764][ T89] usb 7-1: unit 5: unexpected type 0x0b [ 716.967097][T17179] ceph: No mds server is up or the cluster is laggy [ 716.973945][ T5859] libceph: connect (1)[c::]:6789 error -101 [ 716.992274][ T5859] libceph: mon0 (1)[c::]:6789 connect error [ 717.013909][T17176] all (unregistering): Released all slaves [ 717.073836][ T89] usb 7-1: USB disconnect, device number 43 [ 717.147195][T16461] udevd[16461]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 717.354517][T16914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 717.670319][ T30] audit: type=1400 audit(1770465171.271:1164): avc: denied { ioctl } for pid=17191 comm="syz.2.3046" path="socket:[54297]" dev="sockfs" ino=54297 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 718.344032][ T10] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 718.497451][T16914] veth0_vlan: entered promiscuous mode [ 718.506739][T16914] veth1_vlan: entered promiscuous mode [ 718.535810][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 718.556075][ T10] usb 3-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00 [ 718.571596][T16914] veth0_macvtap: entered promiscuous mode [ 718.586908][T16914] veth1_macvtap: entered promiscuous mode [ 718.609822][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.618858][T16914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 718.698090][T16914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 718.727992][ T10] usb 3-1: config 0 descriptor?? [ 718.735135][T17197] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 718.742382][ T7071] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.754307][ T7071] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.773557][ T7071] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.817027][ T7071] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.565539][ T6057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.626831][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 719.632802][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 719.647522][ T10] usb 3-1: USB disconnect, device number 8 [ 719.670545][ T6057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.808773][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.836719][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.055767][T17229] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3053'. [ 720.733817][ T10] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 720.896072][ T10] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 720.923398][ T10] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 720.951942][ T10] usb 3-1: config 0 has no interface number 0 [ 720.958855][ T5818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 721.294740][ T10] usb 3-1: config 0 interface 4 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 721.318252][ T5818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 721.333575][ T5818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 721.344012][ T10] usb 3-1: config 0 interface 4 has no altsetting 0 [ 721.357256][ T5818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 721.366108][ T5818] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 721.373699][ T10] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 721.383739][ T10] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 721.419974][ T10] usb 3-1: Manufacturer: syz [ 721.434847][ T10] usb 3-1: config 0 descriptor?? [ 721.488031][ T10] hub 3-1:0.4: bad descriptor, ignoring hub [ 721.510039][ T10] hub 3-1:0.4: probe with driver hub failed with error -5 [ 721.562807][ T10] usb 3-1: selecting invalid altsetting 1 [ 721.580651][ T10] usb 3-1: Can not set alternate setting to 1, error: -22 [ 721.594038][ T10] synaptics_usb 3-1:0.4: probe with driver synaptics_usb failed with error -22 [ 722.044384][ T48] usb 3-1: USB disconnect, device number 9 [ 722.373216][T17238] chnl_net:caif_netlink_parms(): no params data found [ 722.699202][T10583] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.913316][T10583] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.081394][T10583] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.104298][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 723.265383][T10583] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.421331][T14644] Bluetooth: hci1: command tx timeout [ 723.442073][T17238] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.452572][T17262] tmpfs: Bad value for 'size' [ 723.460995][ T30] audit: type=1400 audit(1770465177.061:1165): avc: denied { mounton } for pid=17259 comm="syz.6.3059" path="/syzcgroup/unified/syz6" dev="cgroup2" ino=278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 723.498507][T17238] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.529931][T17238] bridge_slave_0: entered allmulticast mode [ 723.551151][T17238] bridge_slave_0: entered promiscuous mode [ 723.595067][T17238] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.617965][T17238] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.625538][T17238] bridge_slave_1: entered allmulticast mode [ 723.643068][T17238] bridge_slave_1: entered promiscuous mode [ 723.787542][T17238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 723.828678][T17238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 723.998167][T17238] team0: Port device team_slave_0 added [ 724.012552][T17238] team0: Port device team_slave_1 added [ 724.811382][T17238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 724.818400][T17238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 725.022649][T17238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 725.282503][T17287] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3064'. [ 725.638237][T14644] Bluetooth: hci1: command tx timeout [ 726.241269][T10583] erspan0 (unregistering): left promiscuous mode [ 726.291891][T10583] gretap0 (unregistering): left promiscuous mode [ 726.411551][T10583] bond4 (unregistering): (slave gretap1): Releasing backup interface [ 726.628608][T17306] No source specified [ 726.931447][T10583] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 726.942769][T10583] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 726.957741][T10583] bond0 (unregistering): (slave team0): Releasing backup interface [ 726.984387][T10583] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 727.007930][T10583] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 727.024829][T10583] bond0 (unregistering): Released all slaves [ 727.216024][T10583] bond1 (unregistering): Released all slaves [ 727.303141][T10583] bond2 (unregistering): Released all slaves [ 727.380802][T10583] bond3 (unregistering): Released all slaves [ 727.453784][T10583] bond4 (unregistering): Released all slaves [ 727.525917][T17238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 727.533238][T17238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 727.602270][T17238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 727.637875][T17307] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 727.654309][T17307] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 727.671238][T14644] Bluetooth: hci1: command tx timeout [ 727.752492][T17307] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 728.573847][T17238] hsr_slave_0: entered promiscuous mode [ 728.581544][T17238] hsr_slave_1: entered promiscuous mode [ 728.590236][T17238] debugfs: 'hsr0' already exists in 'hsr' [ 728.596879][T17238] Cannot create hsr debugfs directory [ 729.759320][T14644] Bluetooth: hci1: command tx timeout [ 729.820844][T10583] hsr_slave_0: left promiscuous mode [ 729.963627][T10583] hsr_slave_1: left promiscuous mode [ 729.978009][T10583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 729.986019][ T5859] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 730.002601][T10583] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 730.133762][T10583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 730.475450][T10583] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 730.554105][ T5859] usb 3-1: device descriptor read/64, error -71 [ 730.573688][T10583] veth1_macvtap: left promiscuous mode [ 730.586576][T10583] veth0_macvtap: left promiscuous mode [ 730.593618][T10583] veth1_vlan: left promiscuous mode [ 730.599648][T10583] veth0_vlan: left promiscuous mode [ 730.949318][ T5859] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 731.184482][ T5859] usb 3-1: device descriptor read/64, error -71 [ 731.334689][ T5859] usb usb3-port1: attempt power cycle [ 731.458987][T17389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3078'. [ 731.593034][T10583] team0 (unregistering): Port device team_slave_1 removed [ 731.621625][T10583] team0 (unregistering): Port device team_slave_0 removed [ 731.704084][ T5859] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 731.724559][ T5859] usb 3-1: device descriptor read/8, error -71 [ 731.774523][ T9] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 731.927879][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 731.948990][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 731.967678][ T5859] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 731.978606][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 731.997608][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.010725][ T9] usb 2-1: Product: syz [ 732.024122][ T9] usb 2-1: Manufacturer: syz [ 732.029144][ T5859] usb 3-1: device descriptor read/8, error -71 [ 732.044051][ T9] usb 2-1: SerialNumber: syz [ 732.165291][ T5859] usb usb3-port1: unable to enumerate USB device [ 732.192928][T17238] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 732.210527][T17238] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 732.225419][T17238] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 732.248740][T17238] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 732.278729][T10583] IPVS: stop unused estimator thread 0... [ 732.488192][T17238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 732.531402][T17238] 8021q: adding VLAN 0 to HW filter on device team0 [ 732.553141][ T3521] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.560349][ T3521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 732.590686][ T3521] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.597850][ T3521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 733.264262][T17427] input: syz0 as /devices/virtual/input/input12 [ 733.276774][ T9] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input13 [ 733.368377][ T9] usb 2-1: USB disconnect, device number 10 [ 733.381482][ T5164] bcm5974 2-1:1.0: could not read from device [ 733.413867][ T5164] bcm5974 2-1:1.0: could not read from device [ 733.425162][ T5164] bcm5974 2-1:1.0: could not read from device [ 734.072856][T17238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 734.265851][T17446] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 734.526752][T17238] veth0_vlan: entered promiscuous mode [ 734.547728][T17238] veth1_vlan: entered promiscuous mode [ 735.150539][T17238] veth0_macvtap: entered promiscuous mode [ 735.170757][T17238] veth1_macvtap: entered promiscuous mode [ 735.220857][T17238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 735.246730][T17238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 735.330030][ T3521] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.505126][ T3521] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.517623][ T3521] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.527466][T17468] bridge0: port 3(team0) entered disabled state [ 735.534036][T17468] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.541272][T17468] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.552513][T17468] bridge0: entered allmulticast mode [ 735.614551][T17469] team0: left allmulticast mode [ 735.625910][T17469] team_slave_0: left allmulticast mode [ 735.632636][T17469] team_slave_1: left allmulticast mode [ 735.642392][T17469] team0: left promiscuous mode [ 735.649660][T17469] team_slave_0: left promiscuous mode [ 735.656557][T17469] team_slave_1: left promiscuous mode [ 735.669477][T17469] bridge0: port 3(team0) entered disabled state [ 735.690956][T17469] bridge_slave_1: left allmulticast mode [ 735.698327][T17469] bridge_slave_1: left promiscuous mode [ 735.707530][T17469] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.725933][T17469] bridge_slave_0: left allmulticast mode [ 735.731716][T17469] bridge_slave_0: left promiscuous mode [ 735.740457][T17469] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.874896][ T3521] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.052592][ T3521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.152882][ T3521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.892532][ T3521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.901242][ T3521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 737.435170][T17502] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 737.894347][T17515] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3104'. [ 739.127153][T17531] FAULT_INJECTION: forcing a failure. [ 739.127153][T17531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 739.163345][T17531] CPU: 0 UID: 0 PID: 17531 Comm: syz.3.3110 Tainted: G L syzkaller #0 PREEMPT(full) [ 739.163376][T17531] Tainted: [L]=SOFTLOCKUP [ 739.163382][T17531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 739.163393][T17531] Call Trace: [ 739.163399][T17531] [ 739.163405][T17531] dump_stack_lvl+0x100/0x190 [ 739.163435][T17531] should_fail_ex.cold+0x5/0xa [ 739.163457][T17531] _copy_to_user+0x32/0xd0 [ 739.163483][T17531] simple_read_from_buffer+0xcb/0x170 [ 739.163507][T17531] proc_fail_nth_read+0x1af/0x230 [ 739.163531][T17531] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 739.163556][T17531] ? rw_verify_area+0xce/0x6d0 [ 739.163573][T17531] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 739.163596][T17531] vfs_read+0x1e4/0xb30 [ 739.163619][T17531] ? __pfx_vfs_read+0x10/0x10 [ 739.163636][T17531] ? find_held_lock+0x2b/0x80 [ 739.163660][T17531] ? __fget_files+0x215/0x3d0 [ 739.163686][T17531] ? __fget_files+0x21f/0x3d0 [ 739.163715][T17531] ksys_read+0x12a/0x250 [ 739.163733][T17531] ? __pfx_ksys_read+0x10/0x10 [ 739.163759][T17531] do_syscall_64+0xc9/0xf80 [ 739.163787][T17531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.163806][T17531] RIP: 0033:0x7f562cb5b78e [ 739.163820][T17531] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 739.163836][T17531] RSP: 002b:00007f562da0cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 739.163855][T17531] RAX: ffffffffffffffda RBX: 00007f562da0d6c0 RCX: 00007f562cb5b78e [ 739.163866][T17531] RDX: 000000000000000f RSI: 00007f562da0d0a0 RDI: 0000000000000004 [ 739.163876][T17531] RBP: 00007f562da0d090 R08: 0000000000000000 R09: 0000000000000000 [ 739.163887][T17531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 739.163897][T17531] R13: 00007f562ce16038 R14: 00007f562ce15fa0 R15: 00007ffd6519d018 [ 739.163923][T17531] [ 739.512257][T17542] ================================================================== [ 739.520324][T17542] BUG: KASAN: slab-out-of-bounds in fib6_add_rt2node+0x369c/0x3bc0 [ 739.528208][T17542] Read of size 1 at addr ffff8880336f70de by task syz.2.3115/17542 [ 739.536073][T17542] [ 739.538377][T17542] CPU: 1 UID: 0 PID: 17542 Comm: syz.2.3115 Tainted: G L syzkaller #0 PREEMPT(full) [ 739.538395][T17542] Tainted: [L]=SOFTLOCKUP [ 739.538400][T17542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 739.538407][T17542] Call Trace: [ 739.538412][T17542] [ 739.538417][T17542] dump_stack_lvl+0x100/0x190 [ 739.538435][T17542] print_report+0x156/0x4c9 [ 739.538459][T17542] ? __virt_addr_valid+0x81/0x620 [ 739.538478][T17542] ? __phys_addr+0xe8/0x180 [ 739.538492][T17542] ? fib6_add_rt2node+0x369c/0x3bc0 [ 739.538512][T17542] kasan_report+0xdf/0x1a0 [ 739.538527][T17542] ? fib6_add_rt2node+0x369c/0x3bc0 [ 739.538544][T17542] fib6_add_rt2node+0x369c/0x3bc0 [ 739.538562][T17542] ? __pfx_fib6_add_rt2node+0x10/0x10 [ 739.538577][T17542] ? do_raw_spin_lock+0x128/0x260 [ 739.538591][T17542] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 739.538605][T17542] ? fib6_add+0x3fe/0x1d20 [ 739.538619][T17542] fib6_add+0x3fe/0x1d20 [ 739.538635][T17542] ? do_raw_spin_lock+0x128/0x260 [ 739.538647][T17542] ? __pfx_fib6_add+0x10/0x10 [ 739.538661][T17542] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 739.538674][T17542] ? __asan_memcpy+0x3c/0x60 [ 739.538685][T17542] ip6_route_add+0xf9/0x1d0 [ 739.538697][T17542] inet6_rtm_newroute+0x157/0x160 [ 739.538710][T17542] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 739.538723][T17542] ? __lock_acquire+0x4a5/0x2630 [ 739.538737][T17542] ? find_held_lock+0x2b/0x80 [ 739.538751][T17542] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 739.538768][T17542] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 739.538783][T17542] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 739.538796][T17542] rtnetlink_rcv_msg+0x95e/0xe90 [ 739.538812][T17542] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 739.538828][T17542] ? ref_tracker_free+0x37e/0x6c0 [ 739.538846][T17542] netlink_rcv_skb+0x159/0x420 [ 739.538862][T17542] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 739.538878][T17542] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 739.538896][T17542] ? netlink_deliver_tap+0x1ae/0xcc0 [ 739.538912][T17542] netlink_unicast+0x5aa/0x870 [ 739.538929][T17542] ? __pfx_netlink_unicast+0x10/0x10 [ 739.538948][T17542] netlink_sendmsg+0x8b0/0xda0 [ 739.538965][T17542] ? __pfx_netlink_sendmsg+0x10/0x10 [ 739.538981][T17542] ? __might_fault+0xb0/0x140 [ 739.538995][T17542] ____sys_sendmsg+0xa54/0xc30 [ 739.539006][T17542] ? __pfx_____sys_sendmsg+0x10/0x10 [ 739.539015][T17542] ? __pfx___futex_wait+0x10/0x10 [ 739.539031][T17542] ? __pfx_futex_wake_mark+0x10/0x10 [ 739.539046][T17542] ___sys_sendmsg+0x190/0x1e0 [ 739.539057][T17542] ? __pfx____sys_sendmsg+0x10/0x10 [ 739.539071][T17542] ? find_held_lock+0x2b/0x80 [ 739.539089][T17542] __sys_sendmsg+0x170/0x220 [ 739.539104][T17542] ? __pfx___sys_sendmsg+0x10/0x10 [ 739.539118][T17542] ? __x64_sys_futex+0x34f/0x4d0 [ 739.539133][T17542] do_syscall_64+0xc9/0xf80 [ 739.539147][T17542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.539159][T17542] RIP: 0033:0x7f2dab39aeb9 [ 739.539169][T17542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 739.539179][T17542] RSP: 002b:00007f2dac25b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 739.539195][T17542] RAX: ffffffffffffffda RBX: 00007f2dab615fa0 RCX: 00007f2dab39aeb9 [ 739.539205][T17542] RDX: 0000000000000000 RSI: 0000200000004380 RDI: 0000000000000005 [ 739.539215][T17542] RBP: 00007f2dab408c1f R08: 0000000000000000 R09: 0000000000000000 [ 739.539224][T17542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 739.539233][T17542] R13: 00007f2dab616038 R14: 00007f2dab615fa0 R15: 00007fff2bf99c28 [ 739.539249][T17542] [ 739.539256][T17542] [ 739.889775][T17542] Allocated by task 17192: [ 739.894159][T17542] kasan_save_stack+0x30/0x50 [ 739.898845][T17542] kasan_save_track+0x14/0x30 [ 739.903497][T17542] __kasan_kmalloc+0xaa/0xb0 [ 739.908057][T17542] __kmalloc_noprof+0x347/0x9c0 [ 739.912881][T17542] fib6_info_alloc+0x40/0x160 [ 739.917528][T17542] ip6_route_info_create+0x14c/0xad0 [ 739.922785][T17542] ip6_route_add+0x4b/0x1d0 [ 739.927254][T17542] inet6_rtm_newroute+0x157/0x160 [ 739.932245][T17542] rtnetlink_rcv_msg+0x95e/0xe90 [ 739.937153][T17542] netlink_rcv_skb+0x159/0x420 [ 739.941889][T17542] netlink_unicast+0x5aa/0x870 [ 739.946623][T17542] netlink_sendmsg+0x8b0/0xda0 [ 739.951360][T17542] ____sys_sendmsg+0xa54/0xc30 [ 739.956091][T17542] ___sys_sendmsg+0x190/0x1e0 [ 739.960734][T17542] __sys_sendmsg+0x170/0x220 [ 739.965304][T17542] do_syscall_64+0xc9/0xf80 [ 739.969775][T17542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.975633][T17542] [ 739.977926][T17542] The buggy address belongs to the object at ffff8880336f7000 [ 739.977926][T17542] which belongs to the cache kmalloc-256 of size 256 [ 739.991942][T17542] The buggy address is located 22 bytes to the right of [ 739.991942][T17542] allocated 200-byte region [ffff8880336f7000, ffff8880336f70c8) [ 740.006482][T17542] [ 740.008782][T17542] The buggy address belongs to the physical page: [ 740.015166][T17542] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x336f6 [ 740.023890][T17542] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 740.032361][T17542] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 740.040314][T17542] page_type: f5(slab) [ 740.044268][T17542] raw: 00fff00000000040 ffff88813fe26b40 ffffea0001f27200 dead000000000005 [ 740.052821][T17542] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 740.061374][T17542] head: 00fff00000000040 ffff88813fe26b40 ffffea0001f27200 dead000000000005 [ 740.070010][T17542] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 740.078648][T17542] head: 00fff00000000001 ffffea0000cdbd81 00000000ffffffff 00000000ffffffff [ 740.087283][T17542] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 740.095915][T17542] page dumped because: kasan: bad access detected [ 740.102289][T17542] page_owner tracks the page as allocated [ 740.107969][T17542] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5808, tgid 5808 (syz-executor), ts 65550778059, free_ts 65517711334 [ 740.128517][T17542] post_alloc_hook+0x1e1/0x250 [ 740.133249][T17542] get_page_from_freelist+0xe3d/0x2e10 [ 740.138673][T17542] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 740.144553][T17542] alloc_pages_mpol+0x1fb/0x550 [ 740.149379][T17542] new_slab+0x2c4/0x440 [ 740.153505][T17542] ___slab_alloc+0xda3/0x1ca0 [ 740.158148][T17542] __slab_alloc.isra.0+0x63/0x110 [ 740.163146][T17542] __kmalloc_cache_noprof+0x531/0x810 [ 740.168483][T17542] inode_doinit_use_xattr+0x54/0x330 [ 740.173750][T17542] inode_doinit_with_dentry+0x10ef/0x1330 [ 740.179443][T17542] selinux_d_instantiate+0x26/0x40 [ 740.184537][T17542] security_d_instantiate+0x14c/0x1b0 [ 740.189888][T17542] d_splice_alias_ops+0xd7/0x1320 [ 740.194879][T17542] kernfs_iop_lookup+0x23f/0x2d0 [ 740.199781][T17542] lookup_open.isra.0+0x486/0x1890 [ 740.204857][T17542] path_openat+0xa9b/0x3120 [ 740.209329][T17542] page last free pid 5808 tgid 5808 stack trace: [ 740.215619][T17542] __free_frozen_pages+0x822/0x1130 [ 740.220790][T17542] qlist_free_all+0x47/0xe0 [ 740.225259][T17542] kasan_quarantine_reduce+0x1a0/0x1f0 [ 740.230692][T17542] __kasan_slab_alloc+0x69/0x90 [ 740.235510][T17542] __kmalloc_cache_noprof+0x2e1/0x810 [ 740.240848][T17542] alloc_fs_context+0x57/0xf50 [ 740.245583][T17542] path_mount+0xdbd/0x23c0 [ 740.249971][T17542] __x64_sys_mount+0x293/0x310 [ 740.254703][T17542] do_syscall_64+0xc9/0xf80 [ 740.259188][T17542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.265050][T17542] [ 740.267342][T17542] Memory state around the buggy address: [ 740.272935][T17542] ffff8880336f6f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 740.280963][T17542] ffff8880336f7000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 740.288990][T17542] >ffff8880336f7080: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 740.297014][T17542] ^ [ 740.303912][T17542] ffff8880336f7100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 740.311937][T17542] ffff8880336f7180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 740.319962][T17542] ================================================================== [ 740.328048][T17542] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 740.335211][T17542] CPU: 1 UID: 0 PID: 17542 Comm: syz.2.3115 Tainted: G L syzkaller #0 PREEMPT(full) [ 740.346109][T17542] Tainted: [L]=SOFTLOCKUP [ 740.350398][T17542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 740.360420][T17542] Call Trace: [ 740.363670][T17542] [ 740.366580][T17542] dump_stack_lvl+0x100/0x190 [ 740.371233][T17542] vpanic+0x20d/0x630 [ 740.375184][T17542] panic+0xd1/0xd1 [ 740.378871][T17542] ? __pfx_panic+0x10/0x10 [ 740.383257][T17542] check_panic_on_warn.cold+0x19/0x34 [ 740.388616][T17542] end_report.part.0+0x3a/0x90 [ 740.393351][T17542] kasan_report.cold+0xe/0x18 [ 740.397999][T17542] ? fib6_add_rt2node+0x369c/0x3bc0 [ 740.403171][T17542] fib6_add_rt2node+0x369c/0x3bc0 [ 740.408170][T17542] ? __pfx_fib6_add_rt2node+0x10/0x10 [ 740.413515][T17542] ? do_raw_spin_lock+0x128/0x260 [ 740.418511][T17542] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 740.423854][T17542] ? fib6_add+0x3fe/0x1d20 [ 740.428241][T17542] fib6_add+0x3fe/0x1d20 [ 740.432465][T17542] ? do_raw_spin_lock+0x128/0x260 [ 740.437459][T17542] ? __pfx_fib6_add+0x10/0x10 [ 740.442114][T17542] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 740.447461][T17542] ? __asan_memcpy+0x3c/0x60 [ 740.452020][T17542] ip6_route_add+0xf9/0x1d0 [ 740.456492][T17542] inet6_rtm_newroute+0x157/0x160 [ 740.461493][T17542] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 740.467025][T17542] ? __lock_acquire+0x4a5/0x2630 [ 740.471935][T17542] ? find_held_lock+0x2b/0x80 [ 740.476583][T17542] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 740.481677][T17542] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 740.486769][T17542] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 740.492301][T17542] rtnetlink_rcv_msg+0x95e/0xe90 [ 740.497224][T17542] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 740.502665][T17542] ? ref_tracker_free+0x37e/0x6c0 [ 740.507673][T17542] netlink_rcv_skb+0x159/0x420 [ 740.512413][T17542] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 740.517843][T17542] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 740.523104][T17542] ? netlink_deliver_tap+0x1ae/0xcc0 [ 740.528361][T17542] netlink_unicast+0x5aa/0x870 [ 740.533100][T17542] ? __pfx_netlink_unicast+0x10/0x10 [ 740.538360][T17542] netlink_sendmsg+0x8b0/0xda0 [ 740.543097][T17542] ? __pfx_netlink_sendmsg+0x10/0x10 [ 740.548355][T17542] ? __might_fault+0xb0/0x140 [ 740.553004][T17542] ____sys_sendmsg+0xa54/0xc30 [ 740.557736][T17542] ? __pfx_____sys_sendmsg+0x10/0x10 [ 740.562986][T17542] ? __pfx___futex_wait+0x10/0x10 [ 740.567985][T17542] ? __pfx_futex_wake_mark+0x10/0x10 [ 740.573245][T17542] ___sys_sendmsg+0x190/0x1e0 [ 740.577892][T17542] ? __pfx____sys_sendmsg+0x10/0x10 [ 740.583063][T17542] ? find_held_lock+0x2b/0x80 [ 740.587717][T17542] __sys_sendmsg+0x170/0x220 [ 740.592279][T17542] ? __pfx___sys_sendmsg+0x10/0x10 [ 740.597360][T17542] ? __x64_sys_futex+0x34f/0x4d0 [ 740.602269][T17542] do_syscall_64+0xc9/0xf80 [ 740.606742][T17542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.612604][T17542] RIP: 0033:0x7f2dab39aeb9 [ 740.616989][T17542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 740.636567][T17542] RSP: 002b:00007f2dac25b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 740.644946][T17542] RAX: ffffffffffffffda RBX: 00007f2dab615fa0 RCX: 00007f2dab39aeb9 [ 740.652885][T17542] RDX: 0000000000000000 RSI: 0000200000004380 RDI: 0000000000000005 [ 740.660825][T17542] RBP: 00007f2dab408c1f R08: 0000000000000000 R09: 0000000000000000 [ 740.668763][T17542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 740.676702][T17542] R13: 00007f2dab616038 R14: 00007f2dab615fa0 R15: 00007fff2bf99c28 [ 740.684646][T17542] [ 740.687923][T17542] Kernel Offset: disabled [ 740.692217][T17542] Rebooting in 86400 seconds..