last executing test programs: 39m2.106196852s ago: executing program 2 (id=629): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 39m0.701518743s ago: executing program 2 (id=635): r0 = openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) writev(r0, &(0x7f0000000140)=[{}], 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) syz_open_dev$mouse(0x0, 0x80000001, 0x2000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x36c4, 0x10100}, &(0x7f0000000000), 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e"], 0xf8) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582", @ANYRES16], 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 38m57.546266797s ago: executing program 2 (id=645): socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x2be, &(0x7f0000000140)={0x0, 0x978, 0x0, 0x6, 0x1000111}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x3, r1, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r2, 0x3516, 0x3e44, 0x8, 0x0, 0x0) 38m56.8417463s ago: executing program 2 (id=650): pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file1\x00') r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r1, r1) r2 = getpgid(r1) setpgid(0x0, r2) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xf6ff, 0x0) removexattr(&(0x7f0000000480)='./file1\x00', &(0x7f0000000500)=@random={'security.', '/dev/video#\x00'}) 38m56.646061241s ago: executing program 2 (id=652): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = dup(r2) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000009c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\xb79V\xd9\xfeO\x17\xa8\xd2\xe5\xd5V\x9f\xceF\x85\x1a\a\x9e\x0fz\xb6k\xa9\xad?\xe7O\xb1\xc67T\xca\xec\x15\xc6t\xd3\xa1\x1e\xa4s\a\x19\xac\v\bN;\x02\x9ab\x9ae\x1a/\xae\xc6\xe1\x86\xd34\xb1\xfc;\xdd\x85\x93\xd3\xb6\x99]\xb5\xc4\x1d\xe5\"\xc7\x9cwKl\xa2\x9a\x9cx\f\xa6f*d\xa0z\x9c\xc1\xb1\x18\x01\xf8\xc1)F\xbd`\xac[\x860\xff\xc7\x8c\x18^\x84\x18`\xab\x0e\xb0\xe7/\x8f\x95\x87\xd6\xdb\xa5]\x01y\x15p\x8e\\\x93\xc7v\x96:\xf0v\x91\xb1{\xc3\xa09\xc8OGPI\x8e\xae\xf2_Ge\x9c\xa7\xf4\x9c\x91\xda}\x00\xa2\'$\xc4\xf4\xb0\v=d\xa9z\'Qv\x01\x13\xa6\xe9\xeb\xf9\xcf\xdc\xe3\xc0\n=\x80Y\x119\xbf'}}]}}) r4 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r4, r0, 0x0, 0x80000000) 38m56.177299267s ago: executing program 2 (id=653): syz_usb_connect(0x5, 0x3d, &(0x7f0000000e80)={{0x12, 0x1, 0x110, 0xb1, 0xfb, 0x66, 0x10, 0x91e, 0x3, 0x35bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x8, 0x5, 0x40, 0x4, [{{0x9, 0x4, 0xce, 0x1, 0x2, 0x6f, 0xda, 0xd, 0x0, [@generic={0x7, 0x5, "f71f22810b"}], [{{0x9, 0x5, 0xc, 0x2, 0x200, 0x1, 0x3, 0x40}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x3, 0x5, 0x9}}]}}]}}]}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) bind$unix(r0, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x34048000) r1 = syz_io_uring_setup(0x49a, 0x0, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) 38m55.77372965s ago: executing program 32 (id=653): syz_usb_connect(0x5, 0x3d, &(0x7f0000000e80)={{0x12, 0x1, 0x110, 0xb1, 0xfb, 0x66, 0x10, 0x91e, 0x3, 0x35bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x8, 0x5, 0x40, 0x4, [{{0x9, 0x4, 0xce, 0x1, 0x2, 0x6f, 0xda, 0xd, 0x0, [@generic={0x7, 0x5, "f71f22810b"}], [{{0x9, 0x5, 0xc, 0x2, 0x200, 0x1, 0x3, 0x40}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x3, 0x5, 0x9}}]}}]}}]}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) bind$unix(r0, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x34048000) r1 = syz_io_uring_setup(0x49a, 0x0, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) 6m9.129467507s ago: executing program 1 (id=8002): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x4e3, &(0x7f0000000480)={0x0, 0x938c, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) r5 = syz_open_dev$video4linux(0x0, 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r5, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x1000000, 0xfffffffc}}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x48) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, 0x0) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$vhost_msg_v2(r7, &(0x7f0000000c80)={0x2, 0x0, {&(0x7f0000001f80)=""/152, 0x98, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r6, &(0x7f00000003c0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) ptrace(0x10, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8000a, 0x3793}, 0x28) ptrace$getregset(0x4205, 0x0, 0x200, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) 6m8.17143907s ago: executing program 1 (id=8007): r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6m7.444858023s ago: executing program 1 (id=8009): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000c5008005000100000000f8e5543d", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) keyctl$clear(0x5, 0xffffffffffffffff) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) syz_usb_connect(0x6, 0x75, &(0x7f0000000780)=ANY=[@ANYBLOB="1201010240d85bc7b1131100340902630002040800070904880400f7f98a0607240600110e6876363fd63400d2cf0524001c620d240fe2b8000003080353ee97050a2401f90a0002010209240389025aad618964179074fab88705097a850809050810200009090c02010905"], &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x9, 0x2, 0xf4, 0x20, 0x93}, 0x27, 0x0, 0x1, [{0x0, 0x0}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x8400, 0x0) prlimit64(r2, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x1f) setns(r1, 0x24020000) syz_clone(0x120e1100, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', 0xffffffffffffffff, 0x0, 0x10000004}, 0x18) 6m2.484676948s ago: executing program 1 (id=8016): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x1010400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x12b001) ioctl$CEC_TRANSMIT(r1, 0xc0386105, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r3, 0x10000000005, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x98000, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000280)=0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x2004c0a0) syz_emit_ethernet(0x26, 0x0, 0x0) 6m2.177368328s ago: executing program 1 (id=8018): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmmsg$inet(r3, 0x0, 0x0, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) open(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x11, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x2000000000}}, [@tmpl={0x84, 0x5, [{{@in6=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x40}, {{@in=@remote, 0x0, 0x32}, 0x0, @in6=@private1, 0x0, 0x5}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) close(0x3) 6m1.974933683s ago: executing program 1 (id=8019): rseq(0x0, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) clock_settime(0x2, 0x0) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000200)) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) 6m1.207346667s ago: executing program 33 (id=8019): rseq(0x0, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) clock_settime(0x2, 0x0) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000200)) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) 2m51.225858658s ago: executing program 6 (id=8526): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) fcntl$setpipe(r4, 0x407, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) ioctl$int_in(r5, 0x5421, &(0x7f0000000240)=0x1) sendto$inet(r5, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0xfea8, 0xa) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x7bd}}, './file0\x00'}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregs(0xc, r6, 0xffffffffffffdcaf, &(0x7f0000000040)=""/45) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x24040808) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) 2m50.251394733s ago: executing program 6 (id=8531): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES8=r0], 0x28}}, 0x40000) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="20000000030305000000000000000000000000000c0002"], 0x20}}, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b00010000000009040800010300000009", @ANYBLOB], 0x0) syz_usb_connect$cdc_ecm(0x3, 0x56, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x8, 0xa0, 0x6b, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x5, {{0x7, 0x24, 0x6, 0x0, 0x0, "648c"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xb76, 0x0, 0xc35, 0xeb}, [@network_terminal={0x7, 0x24, 0xa, 0xf0, 0x4, 0xf9, 0x94}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x2, 0xff, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x5, 0x5, 0x4c}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x8, 0x5, 0x3, 0x8, 0x7}, 0x3d, &(0x7f0000000100)=ANY=[@ANYBLOB="050f3d000224100afa864601008f07010000c0ff00003f00003000ff000f00ff00afea719d4679a1c3ae938e76b389"], 0x2, [{0x90, &(0x7f0000000180)=@string={0x90, 0x3, "ee287bfd16c3dab14f665f21fb8f19e82e729adf1a58a9b74b5313d5fd0aa556e68441f9c18511061458b2b1850a2a15ddd806dc4b07f67f0bdd1ff5092f96e275e55be9ba808d84f52aad69cd0fa8310967a6dd480cd434fd8fd1f2e75a34fa5942525fb0329f1326e65a86126f3f4130a87f3d4155d364b385ba82772194a5a7915875928b586cb518497bcc6e"}}, {0x0, 0x0}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r9, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c9, &(0x7f0000000100)) syz_usb_control_io(r2, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$snddsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x10, 0xffffffffffffffff, 0xc000) 2m46.749495387s ago: executing program 6 (id=8541): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x43) socket(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000001b40)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dc58c", 0x1c, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0xfffd, 0x0, 0x0, {[@nop, @exp_fastopen={0xfe, 0x7, 0xf989, "adb18d"}]}}}}}}}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, 0x0, &(0x7f0000000200)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) syz_open_dev$loop(0x0, 0x2, 0x0) r2 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5dfc7f", 0x4, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) dup(0xffffffffffffffff) 2m43.847902137s ago: executing program 0 (id=8547): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002c23b740c71b4010b1b501020301090224000100000000090400000212c71c000905a42e7fbb00000009058202"], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x4080040) setreuid(0xffffffffffffffff, 0xee00) setfsuid(0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000340), 0xffffffffffffffa9) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000540)={0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r5, 0x7b1, &(0x7f0000000300)={0x0, 0x6, 0x0, 0x6}) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f00000000c0)=@get={0x1, &(0x7f0000000600)=""/126, 0x4}) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sed\x00', 0x2d, 0x40085, 0x13}, 0x2c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000400)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000003c0)={r3}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 2m41.929839681s ago: executing program 6 (id=8549): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000000)={0x7, 0x1, 0x8, 0xff, 0x881}) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x1400) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=@newchain={0x24, 0x64, 0x20, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xf, 0x7}, {0x7, 0x10}, {0xfff2, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20}, 0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', r3, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd79}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x81082, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000300)={0x2}) setgroups(0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[], 0x24}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xc, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff0000000071105200000000009500000000100000"], &(0x7f0000000480)='GPL\x00', 0x4}, 0x94) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r8, r8, &(0x7f0000000000)=0x7, 0x4) 2m40.419140054s ago: executing program 6 (id=8552): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x80040) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000002140)='tasks\x00', 0x2, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', &(0x7f00000021c0)={0x2c0800, 0xd, 0x1a}, 0x18) r1 = socket$pppoe(0x18, 0x1, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000002200), 0x10401, 0x0) r2 = getgid() fstat(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000580)={{0x2, 0x0, r2, r3, r4, 0x8, 0xb8}, 0x0, 0x0, 0x0, 0x100, 0x8, 0x8, 0x0, 0x10, 0xa1, 0x200}) stat(&(0x7f0000002500)='./file0\x00', &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000025c0)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee01}}, './file0\x00'}) stat(&(0x7f0000002640)='./file0\x00', &(0x7f0000002680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002740)=[{{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000600)=[{&(0x7f00000001c0)="5293bd41", 0x4}, {&(0x7f0000000200)="ba4ec06d226f5989ffe4430e6fa00c4f48e3e6d7e8798abf6e55b91aa31be500613888177940bf308713df9def8a8042481f041c88735857c2e4afc23176c5d841898b2718d1a43be92c1f174654582a462e56c6686bc9a138", 0x59}, {&(0x7f0000000340)="d3308f88be7888c4356a5039741793d88f77ec0a01cfcd8050873738fd861125df9be41c877543c0d812a50b0688661e595bc4a83307184d33940be521eaf18a7ca49bee98beafab50373881158d57a0275d73da03b3fc3c3a88c6", 0x5b}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f00000003c0)="09a143bbe047c340b74039d45d717dab08c8e607172e2b21a3872315cab4dc3c01767e9ab4e3865de437336ad237a94b42c621823b111fe1139abd000b222048831be1cca4a6b4960595fb83e9e633cae4ca1afa0709fa0eef5bd8552af66edc8c5d9e4bab5dcbd3cff36dbbfe66ab1a3eede241e8e377cfa59bc58090f1f770f682c2c65986cfaa316635b45953b07af5231ddfcc604764f22395cefe7dab66d6919a49bb9aed53db52f76e03cc04418909a059c09afc6520f4e9037c1369a432f332f6eb", 0xc5}, {&(0x7f0000000500)="1df2572a614eaa6b21657e7fdde06ca093a4631fadc0dd2feada8def387cc0bbf2fa3a40889562616719e1e18afb90bafe5685b0f00d5234c656dffc51ca4b1d7c6bc8d81b57bc15ed737ba17a7fc9bc5b0bfd1b2882dab12494826f071853936fd589a4f8e44429e6b71b311e504011acefa9f6b0413727feb97d91bca4e828cb85975f7acad24afd0e2cbade2572098b55e28a4af13c3a121a9a7df04953a3645234297ba03e7c77b831a2a712452702a9b461a1d4cd298d64873f1e6af72f8e844798e8fdc73897411a38", 0xcc}], 0x6, 0x0, 0x0, 0x20000000}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000700)="3edfbfee99cd3c709e88ec2563bc9843016e490c45adbe1da2583946142d8862edc12d7f5cdd63266bb148d2151f786a0b2c337765b23ca69bb178f8200295694b62a2d1d8687367ef6cafdc8e363bf4bbd387e57bf037526135c532fb78f039afc9", 0x62}], 0x1, &(0x7f0000002240)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x110, 0x20000000}}, {{&(0x7f00000023c0)=@file={0x1, '.\x00'}, 0x6e, &(0x7f00000024c0)=[{&(0x7f0000002440)="860d8f75c1352188770f13e07fa4e165e3e036c96bf528745052fd624e2fb6dbbe57ba61d8527578e2d41c811b888763de68563df2bade02a04af3036c254c7142dc75880de7218f0ea3e718555885c00eb86aefee697dda4fde2d4e4dfca96a524e1f123d7dc976baeb", 0x6a}], 0x1, &(0x7f0000002700)=[@cred={{0x1c, 0x1, 0x2, {0x0, r3, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}], 0x40, 0x6000004}}], 0x3, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r10 = userfaultfd(0x801) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r10, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) 2m40.257955208s ago: executing program 0 (id=8554): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x802, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0xba01, 0x0, 0x4044000}, 0x48004) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x28801, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x4}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x380000, @rand_addr=' \x01\x00'}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x28}, 0x0, 0x0, 0x3, 0x0, 0x0, 0xa4}, &(0x7f0000000040)=0x20) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r6) ioctl$KVM_CHECK_EXTENSION(r7, 0xae01, 0x1) syz_kvm_setup_syzos_vm$x86(r6, &(0x7f00003ad000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, &(0x7f0000000140)={0x0, 0x28d000, 0x8}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001500)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) lseek(r8, 0x800, 0x3) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000380)=[@increfs], 0x0, 0x0, 0x0}) 2m39.233275763s ago: executing program 6 (id=8555): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x12) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x400c844) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000e481aa494974d432b322f836ac77f592eb43dc36c1a69168483857c186ad4b4d41e59d8da5d28bc76d368dcb6bcfb4200e87fae65d3e9ec0032001fb959e5c2f58b6348e9c542348abef45fe9b907156ee462e55e78e68199f2355df22abc18826e8f42b37044129344a66e59d52f2134018e18e903ca6299bb37e774068d6bda7ff1c77db731377aa0c5af71576a23434cc8bf30428668af76dd5819b966bf214092af6fbabe32bca7c85f7b0dd"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b76164}, 0x0) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000140)={@private1, 0x0}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0xe8, 0x24, 0x4, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xffff, 0xe}, {0xfff1, 0xfff1}, {0x6, 0x7}}, [@TCA_STAB={0xc4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf9, 0x0, 0xde, 0x7, 0x1, 0xa, 0x7, 0x2}}, {0x8, 0x2, [0xc6, 0xe]}}, {{0x1c, 0x1, {0x5, 0xc, 0xfffb, 0x0, 0x0, 0x6, 0x9, 0x5}}, {0xe, 0x2, [0x8, 0x9, 0x3e, 0x800, 0x4]}}, {{0x1c, 0x1, {0x40, 0x9, 0x6, 0x6913, 0x2, 0xfffffffa, 0x2, 0x1}}, {0x6, 0x2, [0x3ff]}}, {{0x1c, 0x1, {0x2, 0x5, 0x4, 0x120, 0x2, 0x7, 0x7fff}}, {0x4}}, {{0x1c, 0x1, {0x4, 0xda, 0x3, 0xffffff82, 0x0, 0x1, 0x1ff, 0x5}}, {0xe, 0x2, [0x56, 0x2, 0xc2, 0xe, 0x5]}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x44000}, 0x8040) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x0, 0x0, 0x180000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x111, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x31ce, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x9, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7, 0xc3, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x7, {[@global=@item_4={0x3, 0x1, 0x0, "77f68c74"}, @main=@item_012={0x1, 0x0, 0xb, "d2"}]}}, 0x0}, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x8, 0x0, r9, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0, 0x4000, 0x1}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x1c, r10, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x24, r0, 0x2, 0x70bd2c, 0xa5dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0xffffffffffffff2d}, 0x1, 0x0, 0x0, 0x800}, 0x40010) socket$inet6_sctp(0xa, 0x5, 0x84) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r12, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40044}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x4895) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 2m38.967516204s ago: executing program 0 (id=8556): ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000240)=0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x10010, 0xffffffffffffffff, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0xe}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000fc0)={'bridge_slave_0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="8000c6000a000200aaaaaaaaaabb0000060005"], 0x30}}, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='jffs2\x00', 0x0, 0x0) r6 = memfd_create(0x0, 0x2) fcntl$addseals(r6, 0x409, 0x7) r7 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000180)={0xfffffffa, 0x5, 0x1}) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0x8000, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000280)={0x7, @raw_data="aba47109bc8591377f6d859b26e1e9beae5cdef51af0e56244b510d8020851e096c52293aa14f0c3b453d93452fd211c5de98ace86dd92331e8de2a8bca15f7264c4e68083e95940071555f792101c5131dfd212b10a7cf3d6c4ade89910536176932f7168ff5a2fa576e0ea3949e2dec73188081744476bc478e76e3491ca65718ce009cf8affd2e0c08fb1cce81c8786c609f912e34918e0f83b8a81d305bc06a6917992c9ffbf2639ab6f82dfacc93ab17429b298df6ead1d0b75549a052fb3e8783aa9eff741"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000000000000000, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) 2m37.225469395s ago: executing program 0 (id=8560): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a30000000090a01010000000000000000050000040800044000000002080005400000000a0c00104000000000000000051c000000120a01010000000000000000070000f908000340000000065c000000080a010300000000000000000000000a08000a400020000208000940020000000c00064000000000000000042c0005800800014000000062080001400000005e080001400000002908000240000000000800014000000073140000001100010000000000000000000a00000a"], 0xd0}}, 0x20000800) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r5}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@gettaction={0xd8, 0x32, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc40b}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf8000000}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x514}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x9}]}, 0xd8}, 0x1, 0x0, 0x0, 0x404}, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f0000000000)=[{r6, 0x4230}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0xa) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYRESDEC=r8, @ANYRES32=r8, @ANYRES32=r6, @ANYRESOCT, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0xf4}}, 0x20040040) 2m35.749222408s ago: executing program 0 (id=8562): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x64, 0x10, 0x40d, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5019}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @remote}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, &(0x7f0000000380)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x18, 0x0, 0x0) syz_emit_ethernet(0x160, &(0x7f0000000700)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x1e0, 0x2e8, 0x2e8, 0x1e0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0x0, 0x0, 0x0, 0xfd], 'gretap0\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xd8, 0x0, {0x0, 0x2000000000000}}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@local, @empty, [0xffffffff, 0x1ff000100, 0x0, 0xffffffff], [0xff, 0xffffff, 0x0, 0xffffff00], 'pimreg0\x00', 'wlan1\x00', {}, {}, 0xff, 0xb, 0x1, 0x16}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2, [0xffffff00, 0xff000000, 0x0, 0xffffff], 0x4e23, 0x4e22, 0x4e23, 0x4e20, 0xf81, 0x9, 0x500, 0x7ff, 0x200}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) iopl(0x3) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x4001100, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x6, 0x0, 0x9, 0xa, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5, 0x4}, 0x50) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, 0x0) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x1, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}]}}]}}]}}, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000ec0)={0x44, &(0x7f0000001180)={0x0, 0x11, 0x3, "281720"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) 2m34.249820561s ago: executing program 0 (id=8567): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @broadcast}]}, &(0x7f00000002c0)=0x10) shutdown(r0, 0x1) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x40010, r0, 0xffffe000) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3ac3209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b135ab6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385beef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) syz_open_dev$radio(0x0, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd74) r3 = syz_io_uring_setup(0x714e, &(0x7f0000000300)={0x0, 0x400600, 0x0, 0x1000001, 0xf7fffffc, 0x0, r2}, 0x0, &(0x7f0000000200)) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r4, 0x40046210, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x10c, 0x0, 0x0, 0x4) io_uring_enter(r3, 0x396e, 0x0, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r5 = fsopen(&(0x7f0000000700)='affs\x00', 0x1) r6 = fcntl$dupfd(r5, 0x0, r5) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, 0x0, &(0x7f0000000140)='7', 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x15}, 0x2) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x400448cb, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r9, 0x400448ca, 0x0) ioctl$sock_bt_hci(r9, 0x400448c9, 0x0) write(r8, &(0x7f0000000040)="05000000010000", 0x7) 2m22.549288841s ago: executing program 34 (id=8555): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x12) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x400c844) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000e481aa494974d432b322f836ac77f592eb43dc36c1a69168483857c186ad4b4d41e59d8da5d28bc76d368dcb6bcfb4200e87fae65d3e9ec0032001fb959e5c2f58b6348e9c542348abef45fe9b907156ee462e55e78e68199f2355df22abc18826e8f42b37044129344a66e59d52f2134018e18e903ca6299bb37e774068d6bda7ff1c77db731377aa0c5af71576a23434cc8bf30428668af76dd5819b966bf214092af6fbabe32bca7c85f7b0dd"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b76164}, 0x0) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000140)={@private1, 0x0}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0xe8, 0x24, 0x4, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xffff, 0xe}, {0xfff1, 0xfff1}, {0x6, 0x7}}, [@TCA_STAB={0xc4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf9, 0x0, 0xde, 0x7, 0x1, 0xa, 0x7, 0x2}}, {0x8, 0x2, [0xc6, 0xe]}}, {{0x1c, 0x1, {0x5, 0xc, 0xfffb, 0x0, 0x0, 0x6, 0x9, 0x5}}, {0xe, 0x2, [0x8, 0x9, 0x3e, 0x800, 0x4]}}, {{0x1c, 0x1, {0x40, 0x9, 0x6, 0x6913, 0x2, 0xfffffffa, 0x2, 0x1}}, {0x6, 0x2, [0x3ff]}}, {{0x1c, 0x1, {0x2, 0x5, 0x4, 0x120, 0x2, 0x7, 0x7fff}}, {0x4}}, {{0x1c, 0x1, {0x4, 0xda, 0x3, 0xffffff82, 0x0, 0x1, 0x1ff, 0x5}}, {0xe, 0x2, [0x56, 0x2, 0xc2, 0xe, 0x5]}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x44000}, 0x8040) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x0, 0x0, 0x180000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x111, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x31ce, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x9, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7, 0xc3, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x7, {[@global=@item_4={0x3, 0x1, 0x0, "77f68c74"}, @main=@item_012={0x1, 0x0, 0xb, "d2"}]}}, 0x0}, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x8, 0x0, r9, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0, 0x4000, 0x1}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x1c, r10, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x24, r0, 0x2, 0x70bd2c, 0xa5dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0xffffffffffffff2d}, 0x1, 0x0, 0x0, 0x800}, 0x40010) socket$inet6_sctp(0xa, 0x5, 0x84) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r12, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40044}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x4895) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 2m18.130331786s ago: executing program 35 (id=8567): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @broadcast}]}, &(0x7f00000002c0)=0x10) shutdown(r0, 0x1) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x40010, r0, 0xffffe000) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3ac3209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b135ab6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385beef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) syz_open_dev$radio(0x0, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd74) r3 = syz_io_uring_setup(0x714e, &(0x7f0000000300)={0x0, 0x400600, 0x0, 0x1000001, 0xf7fffffc, 0x0, r2}, 0x0, &(0x7f0000000200)) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r4, 0x40046210, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x10c, 0x0, 0x0, 0x4) io_uring_enter(r3, 0x396e, 0x0, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r5 = fsopen(&(0x7f0000000700)='affs\x00', 0x1) r6 = fcntl$dupfd(r5, 0x0, r5) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, 0x0, &(0x7f0000000140)='7', 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x15}, 0x2) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x400448cb, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r9, 0x400448ca, 0x0) ioctl$sock_bt_hci(r9, 0x400448c9, 0x0) write(r8, &(0x7f0000000040)="05000000010000", 0x7) 12.157371783s ago: executing program 3 (id=9543): socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) 12.01224527s ago: executing program 4 (id=9544): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000300)={0x60, 0x1, &(0x7f0000995000/0x2000)=nil, &(0x7f0000994000/0x2000)=nil, 0xb, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x9}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11.143685643s ago: executing program 4 (id=9548): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0xb80c, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000380)={0x2, 'dvmrp1\x00', {0x3}, 0x2}) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) connect$packet(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r1, 0x0) 11.013987541s ago: executing program 8 (id=9549): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) fcntl$setpipe(r4, 0x407, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregs(0xc, r5, 0xffffffffffffdcaf, &(0x7f0000000040)=""/45) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x24040808) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r6, 0x0, 0x201f00) 11.010435754s ago: executing program 3 (id=9550): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, r1, 0xc11, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x7}, {0x10, 0x1}, {0x34, 0x7}, {}], "3829b70b8285f0c2"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x14, 0x24, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x20e}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x101}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x2a}, @generic={0x65, 0x1, 0x0, 0x4, 0x6d6b}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xb9}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) syz_usb_connect$cdc_ecm(0x3, 0x5c, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024a00010100000009040000160202000005241b00050b"], 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)={@fallback=r3, r3, 0x2f}, 0x20) 10.940430326s ago: executing program 4 (id=9551): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000080)=0x2, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000180)={@multicast1, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x0, 0x1acc02, 0x148, 0x0, 0x10, 0x3b8, 0x2a8, 0x2a8, 0x3b8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x40000, 0x2a0, 0x2c8, 0x0, {0x0, 0x5803}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x10, './file0\x00'}}]}, @common=@inet=@SET1={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r9, 0x11, 0x64, &(0x7f0000000200)=0x2, 0x4) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x14, 0x0, @gue={{0x1, 0x0, 0x2, 0x7a, 0x0, @void}, "722e8582afc83de8"}}}}}}, 0x0) ioctl$PIO_UNIMAP(r8, 0x4b67, &(0x7f0000001ec0)={0x1, &(0x7f0000001e80)=[{0x0, 0x1000}]}) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 10.142452533s ago: executing program 3 (id=9552): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000540)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1159b}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x200}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x20100}]}}}]}, 0x4c}}, 0x0) 9.900790987s ago: executing program 4 (id=9555): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) accept(r2, 0x0, 0x0) 9.419061028s ago: executing program 5 (id=9556): socket$packet(0x11, 0x2, 0x300) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f00000001c0)=[{}], 0x1, 0x7, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0xaf02, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_submit(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f00000000c0)) request_key(&(0x7f0000000040)='logon\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0xc) r3 = socket$nl_crypto(0x10, 0x3, 0x15) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 9.141285104s ago: executing program 3 (id=9557): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getrlimit(0x6, &(0x7f0000000040)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) r3 = memfd_create(&(0x7f0000000580)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2=\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec=\x9e\xc3\xfd\x85d\x0fl5\xf3\xbe\" 6\r<\xea\x8dz\xcf6\x99\x91\xear8p\xaaR\xd5\xa6\xab#N>\x9a\xdf\xea\x009\xfbB\xc1\xd0_\xc0\'Z\xeb\xd8\xaf\xf0\'J\xe2\xff\xe5x*;(p\xf7p\xce\xbb\xa7\xfe\x04\xd0t\x81\x1a\x1b?m\x11\x8b\x8d\a\xa6\"\xd9\x13\xeb\xe2\rh\x8dsx\xaa!\xd5Q\xf8\xce*\x95\x0es\xfaZ\x94t\x19\xdc\xdc\xcf\x0f\x9a\xa2O>\xb9\xfc\x01\fW\xee\xffh\xbd\xb2\xb4z\xeb\x84\x13\x13u\x8f\x00\x00', 0x3) write$bt_hci(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="01"], 0x2b) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 8.93139174s ago: executing program 8 (id=9558): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000c5008005000100000000f8e5543d", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) keyctl$clear(0x5, 0xffffffffffffffff) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) syz_usb_connect(0x6, 0x75, &(0x7f0000000780)=ANY=[@ANYBLOB="1201010240d85bc7b1131100340902630002040800070904880400f7f98a0607240600110e6876363fd63400d2cf0524001c620d240fe2b8000003080353ee97050a2401f90a0002010209240389025aad618964179074fab88705097a850809050810200009090c02"], &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x9, 0x2, 0xf4, 0x20, 0x93}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x8400, 0x0) prlimit64(r2, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x1f) setns(r1, 0x24020000) syz_clone(0x120e1100, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', 0xffffffffffffffff, 0x0, 0x10000004}, 0x18) 7.137765777s ago: executing program 3 (id=9560): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) flistxattr(0xffffffffffffffff, &(0x7f0000000d40)=""/184, 0xb8) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) sched_setscheduler(0x0, 0x2, 0x0) setresuid(0x0, 0xee00, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) syz_usb_connect(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000145f405e04bd84b689010203010902240001000000000904ed0002ff5d010009050303000000050009058a03"], 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000c62000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f00005b6000/0x3000)=nil) close_range(r3, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x5018c0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, 0x0, 0x0) 7.024273758s ago: executing program 5 (id=9561): r0 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) fcntl$addseals(r0, 0x409, 0xb) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) socket(0x11, 0x800000003, 0x0) socket$netlink(0x10, 0x3, 0x10) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}}}, 0x9) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)) pselect6(0x517, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) 6.46126363s ago: executing program 5 (id=9563): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0xa00, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r3, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x2000000}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000180)={0x8000000, 0x6000}) 6.099691136s ago: executing program 4 (id=9564): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x32}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffc}, {0xb6, 0x0, 0x0, 0xb}, 0x4, 0x6e6baf, 0xc819129d1ef8b85c}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x4d5, 0x3c}, 0x0, @in6=@mcast2, 0x3502}}, 0xe8) openat$vsock(0xffffffffffffff9c, 0x0, 0x1b5040, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x66, &(0x7f0000000040)={@local, @random="4489a2bc242d", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0xf, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x2, 0x0, @broadcast=0xac14140a, @broadcast=0xac1414bb, {[@timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@loopback}, {@dev}, {@dev}]}, @cipso={0x86, 0xa, 0x0, [{0x0, 0x2}, {0x0, 0x2}]}]}}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0xf0, 0x5}}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) close(r3) 6.03745263s ago: executing program 7 (id=9565): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x11, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) chown(&(0x7f00000079c0)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.857267841s ago: executing program 4 (id=9566): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000010010000010000008c0fbd205e6d"], 0x10}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x5, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40046f41, &(0x7f0000000440)=0x1f) 5.619817088s ago: executing program 8 (id=9567): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200), 0x0) unshare(0x20020680) r2 = syz_io_uring_setup(0x10b, &(0x7f00000000c0)={0x0, 0x0, 0x80, 0x1, 0x2000008}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x50, 0x0, 0xffffffffffffffff, &(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000380)='./file0/../file0\x00', 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r2, 0x47f9, 0x0, 0x0, 0x0, 0x0) 4.549344176s ago: executing program 7 (id=9568): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) fcntl$setpipe(r4, 0x407, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregs(0xc, r5, 0xffffffffffffdcaf, &(0x7f0000000040)=""/45) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x24040808) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r6, 0x0, 0x201f00) 4.548725556s ago: executing program 5 (id=9569): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) mlock2(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r5, r4, 0x0, 0x7ffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 3.958921472s ago: executing program 8 (id=9570): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x21, 0x2, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video4linux(0x0, 0x6000000, 0x10401) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x1c9243, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r1, 0x7fff) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0xedda, 0x0, 0x0, 0x47}, 0x0, &(0x7f00000002c0)={0x3ff, 0xf, 0x0, 0x9, 0x6, 0x0, 0x1}, 0x0, 0x0) 3.296156621s ago: executing program 7 (id=9571): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$tipc(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4400000000000e0fe1709850000000e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x15, &(0x7f0000000300)={@random="6ea88d319b8c", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@x25={0x805, {0x0, 0x1, 0x5e25ed804c4cd5b4}}}}, 0x0) 2.730709542s ago: executing program 5 (id=9572): socket$packet(0x11, 0x2, 0x300) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f00000001c0)=[{}], 0x1, 0x7, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0xaf02, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_submit(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f00000000c0)) request_key(&(0x7f0000000040)='logon\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0xc) r3 = socket$nl_crypto(0x10, 0x3, 0x15) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 2.729708845s ago: executing program 3 (id=9573): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r2, 0x4b48, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f00000000c0)='syz1\x00', 0x1ff) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) 2.599705352s ago: executing program 8 (id=9574): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) unlinkat(0xffffffffffffffff, 0x0, 0x200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r4, 0x6, 0x1f, 0x0, &(0x7f0000000100)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}, @IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.273353008s ago: executing program 7 (id=9575): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) read$FUSE(r0, &(0x7f000000ae80)={0x2020}, 0x2020) 1.224228904s ago: executing program 8 (id=9576): openat$nullb(0xffffffffffffff9c, 0x0, 0x147c40, 0x0) keyctl$clear(0x5, 0xffffffffffffffff) syz_usb_connect(0x6, 0x75, &(0x7f0000000780)=ANY=[@ANYBLOB="1201010240d85bc7b11311003409"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x8400, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x255f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000001c0)={0x36, 0x1, 0x1, "c8010000000a0001000012e25c2299230500", 0x4745504d}) 1.112709557s ago: executing program 7 (id=9577): mlockall(0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x26}, 0x28) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x60000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0x64, 0x23b) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6000) shmctl$SHM_LOCK(0x0, 0xb) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f14258323460608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) 1.104322ms ago: executing program 7 (id=9578): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) fcntl$setpipe(r3, 0x407, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) ioctl$int_in(r4, 0x5421, &(0x7f0000000240)=0x1) sendto$inet(r4, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0xfea8, 0xa) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x7bd}}, './file0\x00'}) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregs(0xc, r5, 0xffffffffffffdcaf, &(0x7f0000000040)=""/45) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x24040808) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r6, 0x0, 0x201f00) 0s ago: executing program 5 (id=9579): open(0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000400)={0x40, 0x12, 0x4, "6ac142dc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x28801, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) epoll_create1(0x80000) pipe2(0x0, 0x4000) kernel console output (not intermixed with test programs): ev="overlay" ino=198 res=0 errno=0 [ 2278.288345][ T30] audit: type=1326 audit(3011.946:3044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2749 comm="syz.5.8239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793df8e929 code=0x7ffc0000 [ 2278.538597][ T2777] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8244'. [ 2278.923960][ T30] audit: type=1326 audit(3011.946:3045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2749 comm="syz.5.8239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f793df8e929 code=0x7ffc0000 [ 2278.986153][ T30] audit: type=1326 audit(3011.946:3046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2749 comm="syz.5.8239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793df8e929 code=0x7ffc0000 [ 2279.060470][ T30] audit: type=1326 audit(3011.946:3047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2749 comm="syz.5.8239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f793df8e929 code=0x7ffc0000 [ 2279.743100][ T30] audit: type=1326 audit(3011.946:3048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2749 comm="syz.5.8239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793df8e929 code=0x7ffc0000 [ 2279.847304][ T30] audit: type=1326 audit(3011.946:3049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2749 comm="syz.5.8239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f793df8d290 code=0x7ffc0000 [ 2279.889083][ T30] audit: type=1326 audit(3011.946:3050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2749 comm="syz.5.8239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793df8e929 code=0x7ffc0000 [ 2279.915183][ T30] audit: type=1326 audit(3011.946:3051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2749 comm="syz.5.8239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f793df8e929 code=0x7ffc0000 [ 2279.939524][ T30] audit: type=1326 audit(3011.946:3052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2749 comm="syz.5.8239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793df8e929 code=0x7ffc0000 [ 2279.978087][ T30] audit: type=1326 audit(3011.946:3053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2749 comm="syz.5.8239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f793df8e929 code=0x7ffc0000 [ 2280.049496][ T2783] netlink: 'syz.3.8247': attribute type 1 has an invalid length. [ 2280.136781][ T2783] 8021q: adding VLAN 0 to HW filter on device bond32 [ 2281.860422][ T2816] futex_wake_op: syz.0.8253 tries to shift op by 535; fix this program [ 2283.287726][ T2859] netlink: 'syz.3.8261': attribute type 1 has an invalid length. [ 2283.427197][ T2859] 8021q: adding VLAN 0 to HW filter on device bond33 [ 2283.628366][ T2859] veth45: entered promiscuous mode [ 2286.283730][ T2020] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 2286.383359][ T2901] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8269'. [ 2286.442198][ T2020] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 2286.473439][ T2903] Device name cannot be null; rc = [-22] [ 2287.304967][ T2020] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 2287.385729][T22725] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 2288.643028][ T2020] usb 7-1: Using ep0 maxpacket: 8 [ 2289.902411][ T2020] usb 7-1: device descriptor read/all, error -71 [ 2290.177197][ T2922] netlink: 'syz.6.8276': attribute type 1 has an invalid length. [ 2290.208189][ T2922] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 2290.503763][T14862] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2290.519625][ T2922] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2290.570470][ T2922] veth5: entered promiscuous mode [ 2290.648421][ T2936] misc userio: Invalid payload size [ 2290.676266][T14862] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2291.781486][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 2292.155041][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 2292.155057][ T30] audit: type=1400 audit(3024.916:3075): avc: denied { accept } for pid=2961 comm="syz.5.8286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2293.050619][ T30] audit: type=1400 audit(3025.758:3076): avc: denied { setopt } for pid=2963 comm="syz.6.8287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 2294.655098][ T2981] lo speed is unknown, defaulting to 1000 [ 2294.661056][ T2981] lo speed is unknown, defaulting to 1000 [ 2294.667584][ T2981] lo speed is unknown, defaulting to 1000 [ 2294.719115][ T2981] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 2294.740961][ T2981] lo speed is unknown, defaulting to 1000 [ 2294.747440][ T2981] lo speed is unknown, defaulting to 1000 [ 2294.753918][ T2981] lo speed is unknown, defaulting to 1000 [ 2294.760411][ T2981] lo speed is unknown, defaulting to 1000 [ 2294.767201][ T2981] lo speed is unknown, defaulting to 1000 [ 2295.781730][ T2992] fuse: Unknown parameter 'fd0x0000000000000006' [ 2295.789738][ T2992] netlink: 'syz.0.8293': attribute type 4 has an invalid length. [ 2295.806854][ T2993] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8292'. [ 2295.816090][ T2993] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8292'. [ 2298.129336][ T3013] netlink: 'syz.6.8298': attribute type 6 has an invalid length. [ 2299.733717][ T3020] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 2300.335578][ T3034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8302'. [ 2301.205713][ T3033] netlink: 'syz.3.8304': attribute type 1 has an invalid length. [ 2301.224370][ T3043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8307'. [ 2301.346741][ T3040] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17936 sclass=netlink_route_socket pid=3040 comm=syz.3.8304 [ 2301.355722][ T3033] 8021q: adding VLAN 0 to HW filter on device bond34 [ 2302.018654][T22033] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 2302.804630][T22033] usb 7-1: config 0 has no interfaces? [ 2302.813021][T22033] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2302.841847][T22033] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2302.849944][T22033] usb 7-1: Product: syz [ 2303.257805][T22033] usb 7-1: Manufacturer: syz [ 2303.262821][T22033] usb 7-1: SerialNumber: syz [ 2303.268787][T22033] usb 7-1: config 0 descriptor?? [ 2304.895979][ T3047] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 2304.985397][ T3047] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2305.434222][ T3078] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 2305.472584][ T30] audit: type=1400 audit(3037.319:3077): avc: denied { mount } for pid=3073 comm="syz.4.8313" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 2306.906873][ T3090] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8317'. [ 2306.916078][ T3090] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8317'. [ 2306.930810][ T3090] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8317'. [ 2306.940026][ T3090] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8317'. [ 2307.523273][ T3094] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 2307.532364][ T3094] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 2308.002064][ T30] audit: type=1326 audit(3039.733:3078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3096 comm="syz.5.8319" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f793df8e929 code=0x0 [ 2308.042144][ T2020] usb 7-1: USB disconnect, device number 6 [ 2308.522400][ T3110] input: syz1 as /devices/virtual/input/input28 [ 2308.773278][ T3103] pim6reg: entered allmulticast mode [ 2309.017180][ T3103] pim6reg: left allmulticast mode [ 2311.240125][ T3124] netlink: 76 bytes leftover after parsing attributes in process `syz.6.8324'. [ 2312.883195][ T3147] lo speed is unknown, defaulting to 1000 [ 2312.889256][ T3147] lo speed is unknown, defaulting to 1000 [ 2312.897875][ T3147] lo speed is unknown, defaulting to 1000 [ 2312.945254][ T3147] infiniband syþ: RDMA CMA: cma_listen_on_dev, error -98 [ 2313.015700][ T3147] lo speed is unknown, defaulting to 1000 [ 2313.028593][ T3147] lo speed is unknown, defaulting to 1000 [ 2313.039310][ T3147] lo speed is unknown, defaulting to 1000 [ 2313.051562][ T3147] lo speed is unknown, defaulting to 1000 [ 2313.063792][ T3147] lo speed is unknown, defaulting to 1000 [ 2313.364514][ T3151] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8330'. [ 2314.324592][ T3158] ceph: No mds server is up or the cluster is laggy [ 2314.333266][T22033] libceph: connect (1)[c::]:6789 error -101 [ 2314.342290][T22033] libceph: mon0 (1)[c::]:6789 connect error [ 2314.856402][ T3170] xt_HMARK: proto mask must be zero with L3 mode [ 2315.292707][T14851] Bluetooth: (null): Invalid header checksum [ 2315.328716][T14851] Bluetooth: (null): Invalid header checksum [ 2315.358540][T14851] Bluetooth: (null): Invalid header checksum [ 2315.542888][T14851] Bluetooth: (null): Invalid header checksum [ 2316.857730][ T3181] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8336'. [ 2317.006092][ T3190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8339'. [ 2317.919220][ T3197] overlay: Unknown parameter '/dev/cpu/#/msr' [ 2318.210672][ T3201] netlink: 'syz.0.8344': attribute type 1 has an invalid length. [ 2318.237595][ T3193] Process accounting resumed [ 2318.429139][ T3210] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8344'. [ 2318.980999][ T30] audit: type=1400 audit(3049.564:3079): avc: denied { bind } for pid=3208 comm="syz.5.8345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 2319.559685][ T3208] delete_channel: no stack [ 2319.823959][ T3207] 8021q: adding VLAN 0 to HW filter on device bond24 [ 2319.912633][ T3201] xt_CT: No such helper "snmp_trap" [ 2320.657513][ T3207] veth41: entered promiscuous mode [ 2320.729660][ T3207] bond24: (slave veth41): Enslaving as a backup interface with a down link [ 2320.788199][ T3223] geneve2: entered promiscuous mode [ 2320.867239][ T30] audit: type=1326 audit(3051.771:3080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3202 comm="syz.3.8343" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f131098e929 code=0x0 [ 2320.893657][ T3223] geneve2: entered allmulticast mode [ 2321.057893][ T3234] trusted_key: encrypted_key: insufficient parameters specified [ 2321.145951][ T3235] overlayfs: failed to clone upperpath [ 2321.200151][ T3235] overlayfs: failed to clone upperpath [ 2321.533212][ T3239] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2322.604351][ T3262] lo: entered promiscuous mode [ 2322.626814][ T3262] tunl0: entered promiscuous mode [ 2322.644975][ T3262] gre0: entered promiscuous mode [ 2322.667856][ T3262] gretap0: entered promiscuous mode [ 2322.697362][ T3262] erspan0: entered promiscuous mode [ 2322.760499][ T3262] ip_vti0: entered promiscuous mode [ 2322.777355][ T3262] ip6_vti0: entered promiscuous mode [ 2322.790582][ T3262] sit0: entered promiscuous mode [ 2322.823524][ T3262] ip6tnl0: entered promiscuous mode [ 2322.996865][ T3262] ip6gre0: entered promiscuous mode [ 2323.021315][ T3262] syz_tun: entered promiscuous mode [ 2323.030942][ T3262] ip6gretap0: entered promiscuous mode [ 2323.042016][ T3262] .: entered promiscuous mode [ 2323.047189][ T3262] nlmon0: entered promiscuous mode [ 2323.555113][ T3262] caif0: entered promiscuous mode [ 2323.560537][ T3262] batadv0: entered promiscuous mode [ 2323.566024][ T3262] veth0: entered promiscuous mode [ 2323.571359][ T3262] veth1: entered promiscuous mode [ 2323.576672][ T3262] wg0: entered promiscuous mode [ 2323.581848][ T3262] wg1: entered promiscuous mode [ 2323.586955][ T3262] wg2: entered promiscuous mode [ 2323.592060][ T3262] veth0_to_bridge: entered promiscuous mode [ 2323.598279][ T3262] bridge_slave_0: entered promiscuous mode [ 2323.604387][ T3262] veth1_to_bridge: entered promiscuous mode [ 2323.610776][ T3262] bridge_slave_1: entered promiscuous mode [ 2323.620699][T24138] Bluetooth: hci0: command 0x0c1a tx timeout [ 2323.733948][ T3262] veth0_to_bond: entered promiscuous mode [ 2323.904298][ T3262] bond_slave_0: entered promiscuous mode [ 2323.910374][ T3262] veth1_to_bond: entered promiscuous mode [ 2323.919176][ T3262] veth0_to_team: entered promiscuous mode [ 2324.490478][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 2324.501309][ T3262] team_slave_0: entered promiscuous mode [ 2325.211285][ T3262] veth1_to_team: entered promiscuous mode [ 2325.266500][ T3291] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8360'. [ 2325.316748][ T3262] team_slave_1: entered promiscuous mode [ 2325.643366][ T3262] veth0_to_batadv: entered promiscuous mode [ 2325.657009][ T3262] batadv_slave_0: entered promiscuous mode [ 2325.663719][ T3262] veth1_to_batadv: entered promiscuous mode [ 2325.670484][ T3262] batadv_slave_1: entered promiscuous mode [ 2325.676628][ T3262] xfrm0: entered promiscuous mode [ 2325.910680][ T3299] netlink: 'syz.0.8365': attribute type 4 has an invalid length. [ 2325.988445][ T3300] netlink: 'syz.0.8365': attribute type 4 has an invalid length. [ 2326.146052][ T3262] veth0_to_hsr: entered promiscuous mode [ 2326.153825][ T3262] veth1_to_hsr: entered promiscuous mode [ 2326.160999][ T3262] hsr0: entered promiscuous mode [ 2326.166556][ T3262] veth1_virt_wifi: entered promiscuous mode [ 2326.174903][ T3262] veth0_virt_wifi: entered promiscuous mode [ 2326.181545][ T3262] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 2326.189168][ T3262] vlan1: entered promiscuous mode [ 2326.196564][ T3262] macvlan0: entered promiscuous mode [ 2326.202671][ T3262] macvlan1: entered promiscuous mode [ 2326.208224][ T3262] ipvlan0: entered promiscuous mode [ 2326.215718][ T3262] ipvlan1: entered promiscuous mode [ 2326.221111][ T3262] geneve1: entered promiscuous mode [ 2326.304259][ T3262] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 2326.386718][ T3262] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 2326.471174][ T3262] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 2326.480094][ T3262] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 2326.487780][ T3262] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 2326.495241][ T3262] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 2326.592049][ T3262] sit1: entered promiscuous mode [ 2326.597964][ T3262] syztnl2: entered promiscuous mode [ 2326.604522][ T3262] bridge1: entered promiscuous mode [ 2326.612693][ T3262] bond1: entered promiscuous mode [ 2326.618201][ T3262] bond2: entered promiscuous mode [ 2326.623308][ T3262] geneve2: entered promiscuous mode [ 2326.630244][ T3262] veth2: entered promiscuous mode [ 2326.635353][ T3262] veth3: entered promiscuous mode [ 2326.640757][ T3262] bond3: entered promiscuous mode [ 2326.645856][ T3262] ip6gretap1: entered promiscuous mode [ 2326.652066][ T3262] bridge2: entered promiscuous mode [ 2326.657356][ T3262] bond4: entered promiscuous mode [ 2326.662826][ T3262] vlan2: entered promiscuous mode [ 2326.668336][ T3262] bond5: entered promiscuous mode [ 2326.673889][ T3262] geneve3: entered promiscuous mode [ 2326.682169][ T3262] bond0: entered promiscuous mode [ 2326.688553][ T3262] erspan0.1: entered promiscuous mode [ 2326.696870][ T3262] bond6: entered promiscuous mode [ 2326.705067][ T3262] veth4: entered promiscuous mode [ 2326.712894][ T3262] veth5: entered promiscuous mode [ 2326.722543][ T3262] bond7: entered promiscuous mode [ 2326.733911][ T3262] bond8: entered promiscuous mode [ 2326.742144][ T3262] bridge3: entered promiscuous mode [ 2326.748740][ T3262] bond9: entered promiscuous mode [ 2326.756408][ T3262] vxlan0: entered promiscuous mode [ 2326.764363][ T3262] gre1: entered promiscuous mode [ 2326.769731][ T3262] mac80211_hwsim hwsim24 wlan2: entered promiscuous mode [ 2326.780983][ T3262] veth6: entered promiscuous mode [ 2326.790263][ T3262] veth7: entered promiscuous mode [ 2326.795595][ T3262] mac80211_hwsim hwsim25 wlan3: entered promiscuous mode [ 2326.806310][ T3262] bond10: entered promiscuous mode [ 2326.812936][ T3262] veth8: entered promiscuous mode [ 2326.820442][ T3262] veth9: entered promiscuous mode [ 2326.828962][ T3262] 1: entered promiscuous mode [ 2326.834497][ T3262] bond11: entered promiscuous mode [ 2326.840942][ T3262] veth10: entered promiscuous mode [ 2326.850621][ T3262] veth11: entered promiscuous mode [ 2326.856110][ T3262] bond12: entered promiscuous mode [ 2326.869321][ T3262] veth12: entered promiscuous mode [ 2326.874924][ T3262] veth13: entered promiscuous mode [ 2326.883714][ T3262] macvlan2: entered promiscuous mode [ 2326.889493][ T3262] gretap1: entered promiscuous mode [ 2326.897318][ T3262] bond13: entered promiscuous mode [ 2326.902598][ T3262] veth14: entered promiscuous mode [ 2326.908121][ T3262] veth15: entered promiscuous mode [ 2326.915771][ T3262] ': entered promiscuous mode [ 2326.920837][ T3262] sit2: entered promiscuous mode [ 2326.925981][ T3262] bond14: entered promiscuous mode [ 2326.931861][ T3262] bond15: entered promiscuous mode [ 2326.937027][ T3262] veth17: entered promiscuous mode [ 2326.944802][ T3262] veth16: entered promiscuous mode [ 2326.950412][ T3262] geneve0: entered promiscuous mode [ 2326.956337][ T3262] bridge0: entered promiscuous mode [ 2326.961835][ T3262] bond16: entered promiscuous mode [ 2326.966981][ T3262] veth19: entered promiscuous mode [ 2326.972537][ T3262] veth18: entered promiscuous mode [ 2326.977807][ T3262] bond17: entered promiscuous mode [ 2326.983133][ T3262] veth21: entered promiscuous mode [ 2326.988499][ T3262] veth20: entered promiscuous mode [ 2326.993998][ T3262] bond18: entered promiscuous mode [ 2326.999139][ T3262] veth23: entered promiscuous mode [ 2327.004714][ T3262] veth22: entered promiscuous mode [ 2327.009972][ T3262] bond19: entered promiscuous mode [ 2327.015411][ T3262] veth25: entered promiscuous mode [ 2327.020737][ T3262] veth24: entered promiscuous mode [ 2327.026109][ T3262] bond20: entered promiscuous mode [ 2327.031298][ T3262] veth27: entered promiscuous mode [ 2327.036682][ T3262] veth26: entered promiscuous mode [ 2327.041970][ T3262] ip6tnl1: entered promiscuous mode [ 2327.048003][ T3262] bond21: entered promiscuous mode [ 2327.053134][ T3262] veth29: entered promiscuous mode [ 2327.060399][ T3262] veth28: entered promiscuous mode [ 2327.071189][ T3262] bond22: entered promiscuous mode [ 2327.077166][ T3262] veth30: entered promiscuous mode [ 2327.084181][ T3262] bond23: entered promiscuous mode [ 2327.089652][ T3262] veth32: entered promiscuous mode [ 2327.095809][ T3262] bond24: entered promiscuous mode [ 2327.101281][ T3262] veth34: entered promiscuous mode [ 2327.107403][ T3262] bond25: entered promiscuous mode [ 2327.112967][ T3262] veth36: entered promiscuous mode [ 2327.119158][ T3262] bond26: entered promiscuous mode [ 2327.124450][ T3262] bond27: entered promiscuous mode [ 2327.129888][ T3262] veth38: entered promiscuous mode [ 2327.136217][ T3262] bond28: entered promiscuous mode [ 2327.142118][ T3262] veth40: entered promiscuous mode [ 2327.148754][ T3262] bond29: entered promiscuous mode [ 2327.154293][ T3262] bond30: entered promiscuous mode [ 2327.160073][ T3262] veth42: entered promiscuous mode [ 2327.166691][ T3262] bond31: entered promiscuous mode [ 2327.177090][ T3262] bond32: entered promiscuous mode [ 2327.187852][ T3262] bond33: entered promiscuous mode [ 2327.193766][ T3262] veth44: entered promiscuous mode [ 2327.200682][ T3262] bond34: entered promiscuous mode [ 2327.207648][ T3286] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2327.287486][T22725] lo speed is unknown, defaulting to 1000 [ 2327.371253][T22033] lo speed is unknown, defaulting to 1000 [ 2327.377166][T22033] syz0: Port: 1 Link ACTIVE [ 2327.573269][ T3315] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8368'. [ 2327.705499][ T3318] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8369'. [ 2329.099222][ T3344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8375'. [ 2330.670570][ T3360] xt_nfacct: accounting object `syz0' does not exists [ 2331.621061][T22033] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 2331.831737][ T3367] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8381'. [ 2331.947419][ T3366] batadv_slave_0: entered promiscuous mode [ 2333.053925][T22033] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2333.127546][T22033] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2333.137560][T22033] usb 7-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2333.172067][T22033] usb 7-1: config 1 interface 0 has no altsetting 1 [ 2334.032227][T22033] usb 7-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 2334.062887][T22033] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2334.088944][T22033] usb 7-1: Product: syz [ 2334.105489][T22033] usb 7-1: Manufacturer: syz [ 2334.755841][T22033] usb 7-1: can't set config #1, error -71 [ 2334.872421][T22033] usb 7-1: USB disconnect, device number 7 [ 2335.176302][ T3406] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3406 comm=syz.6.8391 [ 2336.105062][ T30] audit: type=1400 audit(2000000007.735:3081): avc: denied { mount } for pid=3418 comm="syz.4.8393" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 2338.117242][ T3438] netlink: 'syz.3.8398': attribute type 10 has an invalid length. [ 2338.125245][ T3438] batadv0: left promiscuous mode [ 2338.138584][ T3438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2338.157620][ T3438] batadv0: entered promiscuous mode [ 2338.165173][ T3438] .: (slave batadv0): Enslaving as an active interface with an up link [ 2338.627087][ T3449] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8400'. [ 2338.699017][ T3451] xt_TCPMSS: Only works on TCP SYN packets [ 2339.172951][T22033] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 2339.339683][T22033] usb 7-1: Using ep0 maxpacket: 16 [ 2339.351634][T22033] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2339.361963][T22033] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2339.375203][T22033] usb 7-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 2339.393037][T22033] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2339.495888][T22033] usb 7-1: config 0 descriptor?? [ 2339.513567][T22033] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 2341.417730][ T3479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2341.435918][ T3479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2342.605723][ T3488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2342.755050][T22033] usb 7-1: USB disconnect, device number 8 [ 2343.380744][ T8611] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 2343.545914][ T30] audit: type=1326 audit(2000000014.377:3082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3494 comm="syz.6.8409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac13f8e929 code=0x7ffc0000 [ 2343.583948][ T30] audit: type=1326 audit(2000000014.377:3083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3494 comm="syz.6.8409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7fac13f8e929 code=0x7ffc0000 [ 2343.637184][ T30] audit: type=1326 audit(2000000014.377:3084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3494 comm="syz.6.8409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac13f8e929 code=0x7ffc0000 [ 2343.679964][ T30] audit: type=1326 audit(2000000014.377:3085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3494 comm="syz.6.8409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fac13f8e929 code=0x7ffc0000 [ 2343.722865][ T30] audit: type=1326 audit(2000000014.377:3086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3494 comm="syz.6.8409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac13f8e929 code=0x7ffc0000 [ 2343.746925][ T8611] usb 7-1: Using ep0 maxpacket: 32 [ 2343.765510][ T30] audit: type=1326 audit(2000000014.377:3087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3494 comm="syz.6.8409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fac13f8e929 code=0x7ffc0000 [ 2343.803469][ T8611] usb 7-1: config 0 has an invalid interface number: 155 but max is 0 [ 2343.827627][ T30] audit: type=1326 audit(2000000014.377:3088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3494 comm="syz.6.8409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac13f8e929 code=0x7ffc0000 [ 2343.852417][ T8611] usb 7-1: config 0 has no interface number 0 [ 2343.859319][ T30] audit: type=1326 audit(2000000014.377:3089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3494 comm="syz.6.8409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fac13f8e929 code=0x7ffc0000 [ 2343.890544][ T30] audit: type=1326 audit(2000000014.395:3090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3494 comm="syz.6.8409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac13f8e929 code=0x7ffc0000 [ 2343.984513][ T8611] usb 7-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=a7.4c [ 2344.017502][ T8611] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2344.032238][ T8611] usb 7-1: Product: syz [ 2344.036455][ T8611] usb 7-1: Manufacturer: syz [ 2344.041041][ T8611] usb 7-1: SerialNumber: syz [ 2344.058541][ T8611] usb 7-1: config 0 descriptor?? [ 2344.567444][ T3512] netlink: 76 bytes leftover after parsing attributes in process `syz.5.8412'. [ 2344.999878][ T30] audit: type=1326 audit(2000000014.395:3091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3494 comm="syz.6.8409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fac13f8d290 code=0x7ffc0000 [ 2345.180298][ T3503] TCP: TCP_TX_DELAY enabled [ 2345.370537][ T3522] IPVS: set_ctl: invalid protocol: 44 100.1.1.1:20001 [ 2345.452876][ T3523] "syz.5.8414" (3523) uses obsolete ecb(arc4) skcipher [ 2345.467897][ T3523] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8414'. [ 2346.220159][ T3528] lo speed is unknown, defaulting to 1000 [ 2346.327979][ T3528] lo speed is unknown, defaulting to 1000 [ 2346.335051][ T3528] lo speed is unknown, defaulting to 1000 [ 2346.444724][ T8611] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.155/input/input29 [ 2346.546138][ T5169] bcm5974 7-1:0.155: could not read from device [ 2346.558340][ T5169] bcm5974 7-1:0.155: could not read from device [ 2346.660103][ T8611] usb 7-1: USB disconnect, device number 9 [ 2349.011806][ T3558] 9pnet_fd: Insufficient options for proto=fd [ 2349.963591][ T3561] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2350.647914][ T3569] netlink: 76 bytes leftover after parsing attributes in process `syz.5.8425'. [ 2351.291694][ T8611] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 2351.446873][ T2020] libceph: connect (1)[c::]:6789 error -101 [ 2351.454263][ T2020] libceph: mon0 (1)[c::]:6789 connect error [ 2351.522114][ T8611] usb 7-1: config 0 has no interfaces? [ 2351.532408][ T8611] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2351.542445][ T8611] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2351.550635][ T8611] usb 7-1: Product: syz [ 2351.554863][ T8611] usb 7-1: Manufacturer: syz [ 2351.560045][ T8611] usb 7-1: SerialNumber: syz [ 2351.570444][ T8611] usb 7-1: config 0 descriptor?? [ 2351.677477][ T3579] ceph: No mds server is up or the cluster is laggy [ 2351.741003][ T8611] libceph: connect (1)[c::]:6789 error -101 [ 2351.748506][ T8611] libceph: mon0 (1)[c::]:6789 connect error [ 2352.994900][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 2352.994915][ T30] audit: type=1400 audit(2000000023.656:3123): avc: denied { read } for pid=3588 comm="syz.4.8430" path="socket:[97112]" dev="sockfs" ino=97112 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2353.274348][ T3600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2354.764908][ T3618] fuse: Unknown parameter 'fd0x0000000000000006' [ 2354.789531][ T3618] netlink: 'syz.0.8436': attribute type 4 has an invalid length. [ 2354.868010][ T3619] netlink: 'syz.0.8436': attribute type 4 has an invalid length. [ 2355.184163][T22033] lo speed is unknown, defaulting to 1000 [ 2355.190259][ T2020] lo speed is unknown, defaulting to 1000 [ 2356.619970][ T8611] usb 7-1: USB disconnect, device number 10 [ 2357.341984][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 2359.144799][ T3658] overlayfs: failed to clone upperpath [ 2359.846870][ T3669] netlink: 'syz.0.8450': attribute type 9 has an invalid length. [ 2359.868516][ T3669] netlink: 'syz.0.8450': attribute type 9 has an invalid length. [ 2359.918700][ T3672] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8451'. [ 2360.153788][ T3674] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 2360.521231][ T3670] (syz.5.8449,3670,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 2360.533017][ T30] audit: type=1400 audit(2000000030.690:3124): avc: denied { add_name } for pid=3667 comm="syz.5.8449" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2360.579759][ T30] audit: type=1400 audit(2000000030.690:3125): avc: denied { create } for pid=3667 comm="syz.5.8449" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 2360.632161][ T30] audit: type=1400 audit(2000000030.690:3126): avc: denied { associate } for pid=3667 comm="syz.5.8449" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2360.679662][ T30] audit: type=1400 audit(2000000030.793:3127): avc: denied { create } for pid=3667 comm="syz.5.8449" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 2361.878006][ T3683] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8454'. [ 2362.379018][ T3689] netlink: 76 bytes leftover after parsing attributes in process `syz.5.8455'. [ 2365.717356][ T3691] xt_CT: No such helper "pptp" [ 2366.597478][ T3730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8462'. [ 2367.859780][ T30] audit: type=1400 audit(2000000002.086:3128): avc: denied { mounton } for pid=3739 comm="syz.6.8467" path="/syzcgroup/cpu/syz6/cgroup.procs" dev="cgroup" ino=584 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 2368.062876][ T3741] 9pnet: Could not find request transport: tct¨ûrt=0x0000000000004e22 [ 2370.158896][ T8611] libceph: connect (1)[c::]:6789 error -101 [ 2370.165553][ T8611] libceph: mon0 (1)[c::]:6789 connect error [ 2370.334071][ T3781] xt_CT: No such helper "pptp" [ 2370.449529][ T8611] libceph: connect (1)[c::]:6789 error -101 [ 2370.455736][ T8611] libceph: mon0 (1)[c::]:6789 connect error [ 2371.017066][T22725] libceph: connect (1)[c::]:6789 error -101 [ 2371.026064][T22725] libceph: mon0 (1)[c::]:6789 connect error [ 2371.984826][T22725] libceph: connect (1)[c::]:6789 error -101 [ 2371.991139][T22725] libceph: mon0 (1)[c::]:6789 connect error [ 2372.671505][ T3771] ceph: No mds server is up or the cluster is laggy [ 2373.383832][ T30] audit: type=1400 audit(2000000002.824:3129): avc: denied { unmount } for pid=1798 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 2373.489737][ T3810] bridge0: entered allmulticast mode [ 2373.511297][ T3810] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 2373.539088][ T3810] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 2373.567371][ T3810] bridge0: port 1(netdevsim0) entered disabled state [ 2374.280138][ T3826] rdma_rxe: rxe_newlink: failed to add lo [ 2375.104052][ T30] audit: type=1326 audit(2000000004.443:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.5.8486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793df8e929 code=0x7ffc0000 [ 2375.130962][ T30] audit: type=1326 audit(2000000004.443:3131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.5.8486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793df8e929 code=0x7ffc0000 [ 2375.160405][ T30] audit: type=1326 audit(2000000004.443:3132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.5.8486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f793df8e929 code=0x7ffc0000 [ 2375.188093][ T30] audit: type=1326 audit(2000000004.443:3133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.5.8486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793df8e929 code=0x7ffc0000 [ 2375.217555][ T30] audit: type=1326 audit(2000000004.443:3134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.5.8486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793df8e929 code=0x7ffc0000 [ 2375.365283][ T30] audit: type=1326 audit(2000000004.443:3135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.5.8486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f793df8e929 code=0x7ffc0000 [ 2375.391287][ T3830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8483'. [ 2375.874110][ T3830] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8483'. [ 2376.633016][ T3855] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8489'. [ 2376.871968][ T3849] overlayfs: failed to clone upperpath [ 2380.390634][ T3894] overlayfs: failed to clone lowerpath [ 2380.474696][ T3895] overlayfs: failed to clone upperpath [ 2381.081067][ T3906] netlink: 'syz.0.8501': attribute type 11 has an invalid length. [ 2381.616687][ T3916] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 2381.625653][ T3916] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 2381.735896][ T3917] netlink: 'syz.4.8504': attribute type 2 has an invalid length. [ 2381.784797][ T3917] netlink: 1184 bytes leftover after parsing attributes in process `syz.4.8504'. [ 2381.965137][ T3918] fuse: Bad value for 'fd' [ 2382.972408][T19220] Bluetooth: (null): Non-link packet received in non-active state [ 2382.980522][T19220] Bluetooth: (null): Invalid header checksum [ 2382.986633][T19220] Bluetooth: (null): Invalid header checksum [ 2382.995205][T19220] Bluetooth: (null): Invalid header checksum [ 2383.001515][T19220] Bluetooth: (null): Invalid header checksum [ 2383.032048][T21197] Bluetooth: (null): Invalid header checksum [ 2383.152418][T32269] Bluetooth: (null): Invalid header checksum [ 2385.812374][ T30] audit: type=1400 audit(2000000014.461:3136): avc: denied { ioctl } for pid=3945 comm="syz.6.8510" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2388.436574][ T3951] mac80211_hwsim hwsim27 wlan0: entered promiscuous mode [ 2391.037895][ T3990] ceph: No mds server is up or the cluster is laggy [ 2391.046498][T31408] libceph: connect (1)[c::]:6789 error -101 [ 2391.234806][T31408] libceph: mon0 (1)[c::]:6789 connect error [ 2391.465094][ T30] audit: type=1400 audit(2000000019.746:3137): avc: denied { bind } for pid=4000 comm="syz.6.8523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 2391.555197][ T4004] rdma_rxe: rxe_newlink: failed to add lo [ 2393.318746][ T8611] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 2393.863118][ T8611] usb 7-1: Using ep0 maxpacket: 16 [ 2393.869926][ T8611] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 2393.878597][ T8611] usb 7-1: config 0 has no interface number 0 [ 2393.885051][ T8611] usb 7-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2393.900386][ T8611] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2393.910002][ T8611] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2393.918608][ T8611] usb 7-1: Product: syz [ 2393.922948][ T8611] usb 7-1: SerialNumber: syz [ 2393.930159][ T8611] usb 7-1: config 0 descriptor?? [ 2393.951201][ T8611] usbhid 7-1:0.8: couldn't find an input interrupt endpoint [ 2394.108469][ T4036] netlink: 'syz.0.8534': attribute type 10 has an invalid length. [ 2394.126725][ T4036] team0: Device hsr_slave_0 failed to register rx_handler [ 2394.222795][ T4037] netlink: 'syz.3.8533': attribute type 10 has an invalid length. [ 2394.384606][ T4022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2394.635726][ T4022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2395.402055][ T30] audit: type=1326 audit(2000000023.441:3138): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4034 comm="syz.0.8534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135c18e929 code=0x7fc00000 [ 2396.438001][T19899] usb 7-1: USB disconnect, device number 11 [ 2397.069145][ T4070] lo speed is unknown, defaulting to 1000 [ 2397.447875][ T4070] lo speed is unknown, defaulting to 1000 [ 2397.455023][ T4070] lo speed is unknown, defaulting to 1000 [ 2397.988655][ T4077] netlink: 'syz.3.8543': attribute type 2 has an invalid length. [ 2397.996414][ T4077] netlink: 'syz.3.8543': attribute type 8 has an invalid length. [ 2398.004190][ T4077] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8543'. [ 2399.341070][ T30] audit: type=1400 audit(2000000026.546:3139): avc: denied { execute } for pid=4080 comm="syz.0.8546" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=98839 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2400.551061][ T30] audit: type=1326 audit(2000000028.249:3140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4089 comm="syz.0.8547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135c18e929 code=0x7fc00000 [ 2401.999247][ T4107] ptrace attach of "./syz-executor exec"[8248] was attempted by "./syz-executor exec"[4107] [ 2402.102269][ T30] audit: type=1326 audit(2000000029.624:3141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4109 comm="syz.3.8551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131098e929 code=0x7ffc0000 [ 2402.131871][ T30] audit: type=1326 audit(2000000029.624:3142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4109 comm="syz.3.8551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131098e929 code=0x7ffc0000 [ 2402.157553][ T30] audit: type=1326 audit(2000000029.624:3143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4109 comm="syz.3.8551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f131098e929 code=0x7ffc0000 [ 2402.182517][ T30] audit: type=1326 audit(2000000029.624:3144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4109 comm="syz.3.8551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131098e929 code=0x7ffc0000 [ 2402.207496][ T30] audit: type=1326 audit(2000000029.624:3145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4109 comm="syz.3.8551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f131098e929 code=0x7ffc0000 [ 2402.822449][ T30] audit: type=1326 audit(2000000029.624:3146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4109 comm="syz.3.8551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131098e929 code=0x7ffc0000 [ 2402.862656][ T30] audit: type=1326 audit(2000000029.624:3147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4109 comm="syz.3.8551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131098e929 code=0x7ffc0000 [ 2402.950194][ T30] audit: type=1326 audit(2000000029.624:3148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4109 comm="syz.3.8551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f131098e929 code=0x7ffc0000 [ 2405.164676][ T4134] No source specified [ 2406.134352][T22033] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 2406.477508][T22033] usb 7-1: Using ep0 maxpacket: 32 [ 2406.579186][T22033] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2406.586379][T22033] usb 7-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 2406.599267][T22033] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2406.619934][T22033] usb 7-1: config 0 descriptor?? [ 2407.262143][ T4151] bond9: (slave veth7): Releasing backup interface [ 2407.303824][ T4151] bond11: (slave veth11): Releasing backup interface [ 2407.348921][ T4151] bond12: (slave veth13): Releasing backup interface [ 2407.368882][ T4151] bond14: (slave veth15): Releasing backup interface [ 2407.393487][ T4151] bond15: (slave veth17): Releasing backup interface [ 2407.425075][T22033] ryos 0003:1E7D:31CE.0009: hidraw0: USB HID v0.07 Device [HID 1e7d:31ce] on usb-dummy_hcd.6-1/input0 [ 2407.540441][ T4151] bond17: (slave veth19): Releasing backup interface [ 2407.565721][ T4151] bond18: (slave veth21): Releasing backup interface [ 2407.589965][ T4151] bond19: (slave veth23): Releasing backup interface [ 2407.611996][ T4151] bond20: (slave veth25): Releasing backup interface [ 2407.635568][ T4151] bond21: (slave veth27): Releasing backup interface [ 2407.885332][ T4151] bond22: (slave veth29): Releasing backup interface [ 2407.957729][ T4162] netlink: 'syz.3.8563': attribute type 1 has an invalid length. [ 2410.073182][ T4179] lo speed is unknown, defaulting to 1000 [ 2410.089214][ T4179] lo speed is unknown, defaulting to 1000 [ 2410.156094][ T4186] netlink: 'syz.3.8569': attribute type 1 has an invalid length. [ 2410.212891][ T4186] 8021q: adding VLAN 0 to HW filter on device bond35 [ 2410.254803][ T4186] veth47: entered promiscuous mode [ 2410.274620][ T4186] bond35: (slave veth47): Enslaving as a backup interface with a down link [ 2412.585951][ T4206] rdma_rxe: rxe_newlink: failed to add lo [ 2412.871831][ T4214] ptrace attach of "./syz-executor exec"[5819] was attempted by ""[4214] [ 2413.959262][ T4225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8579'. [ 2414.561420][ T4234] veth0_vlan: entered allmulticast mode [ 2415.382008][ T4234] lo speed is unknown, defaulting to 1000 [ 2415.389182][ T4234] lo speed is unknown, defaulting to 1000 [ 2416.116277][ T4242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8584'. [ 2416.340042][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 2416.340058][ T30] audit: type=1326 audit(2000000043.019:3197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4247 comm="syz.5.8588" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f793df8e929 code=0x0 [ 2416.420036][ T4254] veth0_vlan: left allmulticast mode [ 2418.179115][ T4272] netlink: 'syz.3.8593': attribute type 10 has an invalid length. [ 2418.187065][ T4272] hsr0: left promiscuous mode [ 2418.815380][ T4284] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8594'. [ 2419.087163][ T4292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8596'. [ 2419.140856][ T4292] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8596'. [ 2419.926138][ T4303] syz.5.8599: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 2419.942048][ T4303] CPU: 0 UID: 0 PID: 4303 Comm: syz.5.8599 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 2419.942077][ T4303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2419.942090][ T4303] Call Trace: [ 2419.942097][ T4303] [ 2419.942110][ T4303] dump_stack_lvl+0x16c/0x1f0 [ 2419.942143][ T4303] warn_alloc+0x248/0x3a0 [ 2419.942171][ T4303] ? __pfx_warn_alloc+0x10/0x10 [ 2419.942196][ T4303] ? __pfx_stack_trace_save+0x10/0x10 [ 2419.942222][ T4303] ? stack_depot_save_flags+0x28/0xa40 [ 2419.942249][ T4303] ? __pfx___schedule+0x10/0x10 [ 2419.942278][ T4303] ? kasan_save_stack+0x42/0x60 [ 2419.942300][ T4303] ? kasan_save_stack+0x33/0x60 [ 2419.942321][ T4303] ? kasan_save_track+0x14/0x30 [ 2419.942342][ T4303] ? xskq_create+0x52/0x1d0 [ 2419.942364][ T4303] ? xsk_setsockopt+0x640/0x840 [ 2419.942384][ T4303] ? do_sock_setsockopt+0x221/0x470 [ 2419.942416][ T4303] ? xskq_create+0xfb/0x1d0 [ 2419.942440][ T4303] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 2419.942470][ T4303] ? xskq_create+0xfb/0x1d0 [ 2419.942500][ T4303] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2419.942529][ T4303] ? xskq_create+0xfb/0x1d0 [ 2419.942552][ T4303] vmalloc_user_noprof+0x9e/0xe0 [ 2419.942572][ T4303] ? xskq_create+0xfb/0x1d0 [ 2419.942602][ T4303] xskq_create+0xfb/0x1d0 [ 2419.942627][ T4303] xsk_setsockopt+0x640/0x840 [ 2419.942650][ T4303] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2419.942670][ T4303] ? __lock_acquire+0x622/0x1c90 [ 2419.942706][ T4303] ? selinux_socket_setsockopt+0x6a/0x80 [ 2419.942731][ T4303] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2419.942756][ T4303] do_sock_setsockopt+0x221/0x470 [ 2419.942787][ T4303] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 2419.942833][ T4303] __sys_setsockopt+0x1a0/0x230 [ 2419.942863][ T4303] __x64_sys_setsockopt+0xbd/0x160 [ 2419.942887][ T4303] ? __x64_sys_setsockopt+0x4/0x160 [ 2419.942913][ T4303] do_syscall_64+0xcd/0x4c0 [ 2419.942942][ T4303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2419.942961][ T4303] RIP: 0033:0x7f793df8e929 [ 2419.942978][ T4303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2419.942996][ T4303] RSP: 002b:00007f793edb3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2419.943013][ T4303] RAX: ffffffffffffffda RBX: 00007f793e1b6160 RCX: 00007f793df8e929 [ 2419.943026][ T4303] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 2419.943037][ T4303] RBP: 00007f793e010b39 R08: 0000000000000052 R09: 0000000000000000 [ 2419.943048][ T4303] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2419.943059][ T4303] R13: 0000000000000000 R14: 00007f793e1b6160 R15: 00007fff6ea3e448 [ 2419.943085][ T4303] [ 2419.943136][ T4303] Mem-Info: [ 2420.210212][ T4303] active_anon:35639 inactive_anon:8 isolated_anon:0 [ 2420.210212][ T4303] active_file:10258 inactive_file:52316 isolated_file:0 [ 2420.210212][ T4303] unevictable:9989 dirty:560 writeback:0 [ 2420.210212][ T4303] slab_reclaimable:8352 slab_unreclaimable:134312 [ 2420.210212][ T4303] mapped:34006 shmem:28882 pagetables:1377 [ 2420.210212][ T4303] sec_pagetables:0 bounce:0 [ 2420.210212][ T4303] kernel_misc_reclaimable:0 [ 2420.210212][ T4303] free:1221722 free_pcp:12352 free_cma:0 [ 2420.256050][ T4303] Node 0 active_anon:142556kB inactive_anon:32kB active_file:40988kB inactive_file:209056kB unevictable:38420kB isolated(anon):0kB isolated(file):0kB mapped:135972kB dirty:2240kB writeback:0kB shmem:113992kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:15756kB pagetables:5320kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2420.290353][ T4303] Node 1 active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2420.322047][ T4303] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2420.350885][ T4303] lowmem_reserve[]: 0 2481 2482 2482 2482 [ 2420.356636][ T4303] Node 0 DMA32 free:961884kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:142528kB inactive_anon:32kB active_file:40988kB inactive_file:207740kB unevictable:38420kB writepending:2240kB present:3129332kB managed:2540584kB mlocked:0kB bounce:0kB free_pcp:39260kB local_pcp:24660kB free_cma:0kB [ 2420.389227][ T4303] lowmem_reserve[]: 0 0 1 1 1 [ 2420.393932][ T4303] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:8kB free_cma:0kB [ 2420.422969][ T4303] lowmem_reserve[]: 0 0 0 0 0 [ 2420.427680][ T4303] Node 1 Normal free:3909636kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:10112kB local_pcp:10112kB free_cma:0kB [ 2420.459118][ T4303] lowmem_reserve[]: 0 0 0 0 0 [ 2420.463837][ T4303] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2420.476533][ T4303] Node 0 DMA32: 633*4kB (UE) 99*8kB (UE) 596*16kB (UME) 485*32kB (UME) 390*64kB (UME) 204*128kB (UME) 105*256kB (UME) 57*512kB (UME) 23*1024kB (UME) 10*2048kB (UME) 191*4096kB (M) = 961884kB [ 2420.495390][ T4303] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2420.507196][ T4303] Node 1 Normal: 201*4kB (UME) 66*8kB (UME) 61*16kB (UME) 248*32kB (UME) 102*64kB (UME) 35*128kB (UME) 19*256kB (UM) 11*512kB (UM) 7*1024kB (UM) 6*2048kB (UM) 942*4096kB (UM) = 3909636kB [ 2420.525695][ T4303] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2420.535363][ T4303] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2420.544653][ T4303] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2420.554225][ T4303] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2420.563591][ T4303] 100680 total pagecache pages [ 2420.568422][ T4303] 8 pages in swap cache [ 2420.572623][ T4303] Free swap = 124964kB [ 2420.576813][ T4303] Total swap = 124996kB [ 2420.581039][ T4303] 2097051 pages RAM [ 2420.584890][ T4303] 0 pages HighMem/MovableOnly [ 2420.589641][ T4303] 429927 pages reserved [ 2420.593838][ T4303] 0 pages cma reserved [ 2420.986867][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2420.997476][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2421.006120][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2421.015803][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2421.023372][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2421.930742][ T4320] bridge0: left promiscuous mode [ 2421.936381][ T4320] bridge0: entered allmulticast mode [ 2422.026738][ T4323] 9pnet_virtio: no channels available for device 127.0.0.1 [ 2422.042726][ T4309] lo speed is unknown, defaulting to 1000 [ 2422.052692][ T4309] lo speed is unknown, defaulting to 1000 [ 2422.174782][ T4309] chnl_net:caif_netlink_parms(): no params data found [ 2422.276596][ T4309] bridge0: port 1(bridge_slave_0) entered blocking state [ 2422.283780][ T4309] bridge0: port 1(bridge_slave_0) entered disabled state [ 2422.291097][ T4309] bridge_slave_0: entered allmulticast mode [ 2422.297817][ T4309] bridge_slave_0: entered promiscuous mode [ 2422.305521][ T4309] bridge0: port 2(bridge_slave_1) entered blocking state [ 2422.312783][ T4309] bridge0: port 2(bridge_slave_1) entered disabled state [ 2422.320499][ T4309] bridge_slave_1: entered allmulticast mode [ 2422.327354][ T4309] bridge_slave_1: entered promiscuous mode [ 2422.352976][ T4309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2422.368172][ T4309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2422.396918][ T4309] team0: Port device team_slave_0 added [ 2422.404442][ T4309] team0: Port device team_slave_1 added [ 2422.426068][ T4309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2422.433506][ T4309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2422.459669][ T4309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2422.472024][ T4309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2422.479010][ T4309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2422.505518][ T4309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2422.540275][ T4309] hsr_slave_0: entered promiscuous mode [ 2422.546546][ T4309] hsr_slave_1: entered promiscuous mode [ 2422.552478][ T4309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2422.560127][ T4309] Cannot create hsr debugfs directory [ 2422.671039][ T4309] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2422.688095][ T4309] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2422.707577][ T4309] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2422.718038][ T4309] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2422.749026][ T4309] bridge0: port 2(bridge_slave_1) entered blocking state [ 2422.756298][ T4309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2422.763792][ T4309] bridge0: port 1(bridge_slave_0) entered blocking state [ 2422.770956][ T4309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2422.786851][ T4341] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8607'. [ 2422.797476][ T4341] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2422.876956][ T4309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2422.896847][T14862] bridge0: port 1(bridge_slave_0) entered disabled state [ 2422.915534][T14862] bridge0: port 2(bridge_slave_1) entered disabled state [ 2422.964462][ T4309] 8021q: adding VLAN 0 to HW filter on device team0 [ 2423.000058][T14862] bridge0: port 1(bridge_slave_0) entered blocking state [ 2423.007231][T14862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2423.018891][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 2423.027788][ T4345] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8609'. [ 2423.039019][T25671] bridge0: port 2(bridge_slave_1) entered blocking state [ 2423.046118][T25671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2423.271725][ T51] Bluetooth: hci5: command tx timeout [ 2423.318094][ T4309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2423.606974][ T4309] veth0_vlan: entered promiscuous mode [ 2423.622208][ T4309] veth1_vlan: entered promiscuous mode [ 2423.630532][ T30] audit: type=1326 audit(2000000049.838:3198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4353 comm="syz.3.8610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131098e929 code=0x7ffc0000 [ 2423.657447][ T30] audit: type=1326 audit(2000000049.838:3199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4353 comm="syz.3.8610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131098e929 code=0x7ffc0000 [ 2423.661701][ T4359] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8610'. [ 2423.702486][ T4309] veth0_macvtap: entered promiscuous mode [ 2423.712561][ T4309] veth1_macvtap: entered promiscuous mode [ 2423.727301][ T4309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2423.743357][ T4309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2423.756042][ T4359] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8610'. [ 2423.769247][ T4309] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2423.769588][ T30] audit: type=1326 audit(2000000049.866:3200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4353 comm="syz.3.8610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f131098e929 code=0x7ffc0000 [ 2423.779010][ T4309] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2423.814821][ T4309] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2423.824048][ T4309] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2423.840249][ T30] audit: type=1326 audit(2000000049.866:3201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4353 comm="syz.3.8610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131098e929 code=0x7ffc0000 [ 2423.864228][ T30] audit: type=1326 audit(2000000049.866:3202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4353 comm="syz.3.8610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131098e929 code=0x7ffc0000 [ 2423.893001][ T30] audit: type=1326 audit(2000000049.866:3203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4353 comm="syz.3.8610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f131098e929 code=0x7ffc0000 [ 2423.972383][ T30] audit: type=1326 audit(2000000049.866:3204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4353 comm="syz.3.8610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131098e929 code=0x7ffc0000 [ 2424.027477][T25671] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2424.051405][ T30] audit: type=1326 audit(2000000049.866:3205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4353 comm="syz.3.8610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131098e929 code=0x7ffc0000 [ 2424.076479][ T30] audit: type=1326 audit(2000000049.866:3206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4353 comm="syz.3.8610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f131098e929 code=0x7ffc0000 [ 2424.099852][ T30] audit: type=1326 audit(2000000049.894:3207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4353 comm="syz.3.8610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131098e929 code=0x7ffc0000 [ 2424.124214][T25671] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2424.323773][T19220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2424.334105][T19220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2425.445964][T24138] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2425.457998][T24138] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2425.467443][T24138] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2425.477471][T24138] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2425.485110][T24138] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2425.494939][T24138] Bluetooth: hci5: command tx timeout [ 2425.640580][ T4378] lo speed is unknown, defaulting to 1000 [ 2425.647722][ T4378] lo speed is unknown, defaulting to 1000 [ 2426.007257][ T4378] chnl_net:caif_netlink_parms(): no params data found [ 2426.657548][ T4378] bridge0: port 1(bridge_slave_0) entered blocking state [ 2426.665355][ T4378] bridge0: port 1(bridge_slave_0) entered disabled state [ 2426.673293][ T4378] bridge_slave_0: entered allmulticast mode [ 2426.738684][ T4378] bridge_slave_0: entered promiscuous mode [ 2426.749226][ T4378] bridge0: port 2(bridge_slave_1) entered blocking state [ 2426.756448][ T4378] bridge0: port 2(bridge_slave_1) entered disabled state [ 2426.763652][ T4378] bridge_slave_1: entered allmulticast mode [ 2426.770979][ T4378] bridge_slave_1: entered promiscuous mode [ 2426.891747][ T4378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2426.912989][ T4378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2426.983403][ T4378] team0: Port device team_slave_0 added [ 2427.043935][ T4378] team0: Port device team_slave_1 added [ 2427.073786][ T4378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2427.081010][ T4378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2427.247969][ T4406] netlink: 'syz.3.8623': attribute type 4 has an invalid length. [ 2427.602465][ T4378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2427.615973][ T4378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2427.623085][ T4378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2427.649362][ T4378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2427.695972][ T4378] hsr_slave_0: entered promiscuous mode [ 2427.702221][ T4378] hsr_slave_1: entered promiscuous mode [ 2427.708517][ T4378] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2427.716066][ T4378] Cannot create hsr debugfs directory [ 2427.721734][T24138] Bluetooth: hci5: command tx timeout [ 2427.721741][ T51] Bluetooth: hci6: command tx timeout [ 2427.970288][ T4378] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2427.984276][ T4378] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2427.997450][ T4378] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2428.019674][ T4378] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2428.101242][ T4422] overlayfs: cannot append lower layer [ 2428.142104][ T4378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2428.166156][ T4378] 8021q: adding VLAN 0 to HW filter on device team0 [ 2428.180419][T14862] bridge0: port 1(bridge_slave_0) entered blocking state [ 2428.187572][T14862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2428.299271][T19220] bridge0: port 2(bridge_slave_1) entered blocking state [ 2428.306377][T19220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2428.880540][ T4429] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8626'. [ 2429.336986][ T4378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2429.575417][ T4453] netlink: 'syz.5.8635': attribute type 4 has an invalid length. [ 2429.974462][ T51] Bluetooth: hci6: command tx timeout [ 2429.981732][ T51] Bluetooth: hci5: command tx timeout [ 2430.090237][ T4378] veth0_vlan: entered promiscuous mode [ 2430.099089][ T4378] veth1_vlan: entered promiscuous mode [ 2430.115531][ T4378] veth0_macvtap: entered promiscuous mode [ 2430.123184][ T4378] veth1_macvtap: entered promiscuous mode [ 2430.137766][ T4378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2430.148097][ T4378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2430.157264][ T4378] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2430.173743][ T4378] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2430.185881][ T4378] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2430.198999][ T4378] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2430.333457][ T9644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2430.354116][ T9644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2430.403560][T14866] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2430.411905][T14866] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2430.873762][ T4474] overlayfs: missing 'workdir' [ 2431.235190][ T4478] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2432.657135][T24138] Bluetooth: hci6: command tx timeout [ 2433.089008][ T4507] netlink: 'syz.7.8648': attribute type 4 has an invalid length. [ 2434.312290][ T4529] xt_connbytes: Forcing CT accounting to be enabled [ 2434.332316][ T4529] xt_bpf: check failed: parse error [ 2435.480443][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 2435.480475][ T30] audit: type=1326 audit(2000000001.880:3215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4532 comm="syz.7.8659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9449b8e929 code=0x7ffc0000 [ 2435.550256][T24138] Bluetooth: hci6: command tx timeout [ 2435.736558][ T30] audit: type=1326 audit(2000000001.880:3216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4532 comm="syz.7.8659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9449b8e929 code=0x7ffc0000 [ 2435.764807][ T30] audit: type=1326 audit(2000000001.880:3217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4532 comm="syz.7.8659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f9449b8e929 code=0x7ffc0000 [ 2435.792404][ T30] audit: type=1326 audit(2000000001.880:3218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4532 comm="syz.7.8659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9449b8e929 code=0x7ffc0000 [ 2435.816783][ T30] audit: type=1326 audit(2000000001.880:3219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4532 comm="syz.7.8659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9449b8e929 code=0x7ffc0000 [ 2435.851561][ T30] audit: type=1326 audit(2000000001.880:3220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4532 comm="syz.7.8659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9449b8e929 code=0x7ffc0000 [ 2435.898010][ T30] audit: type=1326 audit(2000000001.880:3221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4532 comm="syz.7.8659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9449b8e929 code=0x7ffc0000 [ 2435.941886][ T30] audit: type=1326 audit(2000000001.880:3222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4532 comm="syz.7.8659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9449b8e929 code=0x7ffc0000 [ 2435.966889][ T30] audit: type=1326 audit(2000000001.880:3223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4532 comm="syz.7.8659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f9449b8e929 code=0x7ffc0000 [ 2435.990792][ T30] audit: type=1326 audit(2000000001.880:3224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4532 comm="syz.7.8659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9449b8e929 code=0x7ffc0000 [ 2439.221637][ T4640] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8702'. [ 2439.231077][T22725] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 2439.602218][T22725] usb 9-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 2439.616386][T22725] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2439.624616][T22725] usb 9-1: Product: syz [ 2439.629521][T22725] usb 9-1: Manufacturer: syz [ 2439.634178][T22725] usb 9-1: SerialNumber: syz [ 2439.642154][T22725] usb 9-1: config 0 descriptor?? [ 2439.653385][T22725] ch341 9-1:0.0: ch341-uart converter detected [ 2440.526566][ T4650] lo speed is unknown, defaulting to 1000 [ 2440.533556][ T4650] lo speed is unknown, defaulting to 1000 [ 2441.222885][ T4668] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 2442.957081][ T4688] /dev/nullb0: Can't open blockdev [ 2443.797652][T22725] ch341-uart ttyUSB0: failed to read break control: -110 [ 2444.235176][T22725] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 2444.408476][T22725] usb 9-1: USB disconnect, device number 2 [ 2444.423909][T22725] ch341 9-1:0.0: device disconnected [ 2444.566290][ T4705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8721'. [ 2445.139701][ T4714] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8727'. [ 2445.220487][ T4715] netlink: 'syz.3.8724': attribute type 4 has an invalid length. [ 2446.575597][ T4735] dvmrp0: entered allmulticast mode [ 2447.007733][ T30] kauditd_printk_skb: 242 callbacks suppressed [ 2447.007751][ T30] audit: type=1326 audit(2000000013.245:3467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4750 comm="syz.5.8741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793df8e929 code=0x7ffc0000 [ 2447.039682][ T30] audit: type=1326 audit(2000000013.245:3468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4750 comm="syz.5.8741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793df8e929 code=0x7ffc0000 [ 2447.063885][ T30] audit: type=1326 audit(2000000013.301:3469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4750 comm="syz.5.8741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f793df8e929 code=0x7ffc0000 [ 2447.087833][ T30] audit: type=1326 audit(2000000013.301:3470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4750 comm="syz.5.8741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793df8e929 code=0x7ffc0000 [ 2447.120192][ T30] audit: type=1326 audit(2000000013.301:3471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4750 comm="syz.5.8741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793df8e929 code=0x7ffc0000 [ 2447.163351][ T30] audit: type=1326 audit(2000000013.301:3472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4750 comm="syz.5.8741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f793df8e929 code=0x7ffc0000 [ 2447.187913][ T30] audit: type=1326 audit(2000000013.301:3473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4750 comm="syz.5.8741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793df8e929 code=0x7ffc0000 [ 2447.212213][ T30] audit: type=1326 audit(2000000013.301:3474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4750 comm="syz.5.8741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793df8e929 code=0x7ffc0000 [ 2447.236222][ T30] audit: type=1326 audit(2000000013.320:3475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4750 comm="syz.5.8741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f793df8e929 code=0x7ffc0000 [ 2447.270301][ T30] audit: type=1326 audit(2000000013.320:3476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4750 comm="syz.5.8741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793df8e929 code=0x7ffc0000 [ 2447.567608][ T4763] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8744'. [ 2447.842876][ T4775] netlink: 'syz.8.8751': attribute type 1 has an invalid length. [ 2447.856810][ T4775] netlink: 224 bytes leftover after parsing attributes in process `syz.8.8751'. [ 2449.072734][ T4797] netlink: 'syz.5.8756': attribute type 10 has an invalid length. [ 2451.225561][T22725] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 2451.848994][T22725] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2451.862222][T22725] usb 9-1: config 1 has an invalid interface number: 83 but max is 0 [ 2451.874180][T22725] usb 9-1: config 1 has no interface number 0 [ 2451.882735][T22725] usb 9-1: config 1 interface 83 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 2451.896470][ T4839] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2451.903152][T22725] usb 9-1: config 1 interface 83 has no altsetting 0 [ 2451.922582][ T4839] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2451.928485][T22725] usb 9-1: string descriptor 0 read error: -22 [ 2451.928582][T22725] usb 9-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=a2.c5 [ 2451.943907][ T4839] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2451.948256][T22725] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2451.968519][T22725] usb 9-1: probing VID:PID(2201:012C) [ 2451.976042][T22725] usb 9-1: vub300 testing UNKNOWN EndPoint(0) 08 [ 2451.982463][T22725] usb 9-1: vub300 ignoring EndPoint(0) 08 [ 2451.988918][T22725] usb 9-1: Could not find two sets of bulk-in/out endpoint pairs [ 2452.007297][T22725] vub300 9-1:1.83: probe with driver vub300 failed with error -22 [ 2452.030602][ T4839] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2452.043946][ T4839] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 2452.049901][ T4839] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 2452.059549][ T4839] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 2452.267340][T22033] usb 9-1: USB disconnect, device number 3 [ 2452.812954][ T30] kauditd_printk_skb: 367 callbacks suppressed [ 2452.812970][ T30] audit: type=1400 audit(2000000018.679:3844): avc: denied { setopt } for pid=4915 comm="syz.7.8804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 2453.034099][T24138] Bluetooth: hci0: command 0x0c1a tx timeout [ 2453.229953][ T30] audit: type=1400 audit(2000000019.072:3845): avc: denied { getopt } for pid=4935 comm="syz.7.8814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2453.348835][ T4943] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8818'. [ 2453.359442][ T4943] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8818'. [ 2453.514991][ T2020] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 2453.629045][ T30] audit: type=1400 audit(2000000019.437:3846): avc: denied { read append } for pid=4959 comm="syz.7.8826" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 2453.653669][ T30] audit: type=1400 audit(2000000019.437:3847): avc: denied { open } for pid=4959 comm="syz.7.8826" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 2453.712463][ T2020] usb 9-1: config 1 has an invalid interface number: 105 but max is 0 [ 2453.720777][ T2020] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 2453.733375][ T2020] usb 9-1: config 1 has no interface number 1 [ 2453.740342][ T2020] usb 9-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2453.764267][ T2020] usb 9-1: config 1 interface 105 has no altsetting 0 [ 2453.777604][ T2020] usb 9-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 2453.786761][ T2020] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2453.802850][ T2020] usb 9-1: Product: syz [ 2453.810333][ T2020] usb 9-1: Manufacturer: syz [ 2453.818231][ T2020] usb 9-1: SerialNumber: syz [ 2453.995859][ T4973] tmpfs: Bad value for 'nr_blocks' [ 2454.055762][ T2020] aqc111 9-1:1.105: probe with driver aqc111 failed with error -22 [ 2454.145745][T24138] Bluetooth: hci5: command 0x0c1a tx timeout [ 2454.264261][T24138] Bluetooth: hci6: command 0x0c1a tx timeout [ 2454.284200][T22033] usb 9-1: USB disconnect, device number 4 [ 2455.268469][ T5020] ubi: mtd0 is already attached to ubi31 [ 2455.856360][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 2455.887695][ T5029] random: crng reseeded on system resumption [ 2456.369639][T24138] Bluetooth: hci5: command 0x0c1a tx timeout [ 2456.454977][T24138] Bluetooth: hci6: command 0x0c1a tx timeout [ 2457.069477][ T5050] netlink: 'syz.3.8862': attribute type 4 has an invalid length. [ 2457.948589][ T5061] netlink: 'syz.3.8864': attribute type 4 has an invalid length. [ 2458.594988][T24138] Bluetooth: hci5: command 0x0c1a tx timeout [ 2458.699984][T24138] Bluetooth: hci6: command 0x0c1a tx timeout [ 2458.995793][ T5087] netlink: 'syz.3.8874': attribute type 4 has an invalid length. [ 2460.775041][ T30] audit: type=1400 audit(2000000026.116:3848): avc: denied { append } for pid=5107 comm="syz.8.8884" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2461.927813][ T5150] netlink: 'syz.5.8890': attribute type 4 has an invalid length. [ 2463.147778][T22033] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 2463.318325][T22033] usb 9-1: Using ep0 maxpacket: 8 [ 2463.332772][T22033] usb 9-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2463.344130][T22033] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2463.355048][T22033] usb 9-1: Product: syz [ 2463.359342][T22033] usb 9-1: Manufacturer: syz [ 2463.367414][T22033] usb 9-1: SerialNumber: syz [ 2463.377289][T22033] usb 9-1: config 0 descriptor?? [ 2463.393503][T22033] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2463.401961][T22033] usb 9-1: setting power ON [ 2463.413291][T22033] dvb-usb: bulk message failed: -22 (2/0) [ 2463.426055][T22033] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2463.439874][T22033] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2463.448693][T22033] usb 9-1: media controller created [ 2463.463832][T22033] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2463.486494][T22033] usb 9-1: selecting invalid altsetting 6 [ 2463.493579][T22033] usb 9-1: digital interface selection failed (-22) [ 2463.502845][T22033] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2463.513262][T22033] usb 9-1: setting power OFF [ 2463.519700][T22033] dvb-usb: bulk message failed: -22 (2/0) [ 2463.534042][T22033] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2463.544113][T22033] (NULL device *): no alternate interface [ 2463.558963][T22033] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2463.640474][T22033] usb 9-1: USB disconnect, device number 5 [ 2463.815161][ T5205] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 2464.302754][ T30] audit: type=1326 audit(2000000029.427:3849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5228 comm="syz.8.8930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3605b8e929 code=0x7ffc0000 [ 2464.328341][ T30] audit: type=1326 audit(2000000029.446:3850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5228 comm="syz.8.8930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3605b8e929 code=0x7ffc0000 [ 2464.352703][ T30] audit: type=1326 audit(2000000029.446:3851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5228 comm="syz.8.8930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f3605b8e929 code=0x7ffc0000 [ 2464.376091][ C0] vkms_vblank_simulate: vblank timer overrun [ 2464.453437][ T30] audit: type=1326 audit(2000000029.446:3852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5228 comm="syz.8.8930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3605b8e929 code=0x7ffc0000 [ 2464.484116][ T30] audit: type=1326 audit(2000000029.446:3853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5228 comm="syz.8.8930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3605b8e929 code=0x7ffc0000 [ 2464.724537][ T30] audit: type=1326 audit(2000000029.446:3854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5228 comm="syz.8.8930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f3605b8e929 code=0x7ffc0000 [ 2464.751194][ T30] audit: type=1326 audit(2000000029.446:3855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5228 comm="syz.8.8930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3605b8e929 code=0x7ffc0000 [ 2464.776671][ T30] audit: type=1326 audit(2000000029.446:3856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5228 comm="syz.8.8930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3605b8e929 code=0x7ffc0000 [ 2464.804507][ T30] audit: type=1326 audit(2000000029.446:3857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5228 comm="syz.8.8930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f3605b8e929 code=0x7ffc0000 [ 2465.949935][ T5277] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8950'. [ 2466.087232][T22725] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 2466.259812][T22725] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 2466.274441][T22725] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2466.286522][T22725] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 2466.306105][T22725] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1c0c, bcdDevice= 0.00 [ 2466.317140][T22725] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2466.331709][T22725] usb 9-1: config 0 descriptor?? [ 2466.615962][ T5294] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8956'. [ 2466.996727][T22725] corsair-psu 0003:1B1C:1C0C.000A: item fetching failed at offset 0/3 [ 2467.137840][T22725] corsair-psu 0003:1B1C:1C0C.000A: probe with driver corsair-psu failed with error -22 [ 2467.225177][T22725] IPVS: starting estimator thread 0... [ 2467.285626][T22033] usb 9-1: USB disconnect, device number 6 [ 2467.338064][ T5305] IPVS: using max 41 ests per chain, 98400 per kthread [ 2467.504491][ T5320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8967'. [ 2468.481288][ T30] kauditd_printk_skb: 102 callbacks suppressed [ 2468.481305][ T30] audit: type=1400 audit(2000000033.328:3960): avc: denied { execheap } for pid=5347 comm="syz.4.8979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 2469.333958][T22725] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 2469.499800][ T5399] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9002'. [ 2469.538730][T22725] usb 9-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 2469.549426][T22725] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2469.559198][T22725] usb 9-1: Product: syz [ 2469.565804][T22725] usb 9-1: Manufacturer: syz [ 2469.570843][T22725] usb 9-1: SerialNumber: syz [ 2469.579471][T22725] usb 9-1: config 0 descriptor?? [ 2469.586783][ T5401] netlink: 'syz.7.9003': attribute type 3 has an invalid length. [ 2469.595898][T22725] ch341 9-1:0.0: ch341-uart converter detected [ 2469.814671][ T5411] macsec1: entered allmulticast mode [ 2469.838168][ T5411] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 2469.854114][ T5411] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 2470.442777][ T30] audit: type=1326 audit(2000000035.171:3961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5432 comm="syz.7.9018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9449b8e929 code=0x7ffc0000 [ 2470.471546][ T30] audit: type=1326 audit(2000000035.171:3962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5432 comm="syz.7.9018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9449b8e929 code=0x7ffc0000 [ 2470.496925][ T30] audit: type=1326 audit(2000000035.189:3963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5432 comm="syz.7.9018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9449b8e929 code=0x7ffc0000 [ 2470.521938][ T30] audit: type=1326 audit(2000000035.189:3964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5432 comm="syz.7.9018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9449b8e929 code=0x7ffc0000 [ 2470.546744][ T30] audit: type=1326 audit(2000000035.189:3965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5432 comm="syz.7.9018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9449b8e929 code=0x7ffc0000 [ 2470.633164][ T30] audit: type=1326 audit(2000000035.199:3966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5432 comm="syz.7.9018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f9449b8e929 code=0x7ffc0000 [ 2470.802673][ T30] audit: type=1326 audit(2000000035.199:3967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5432 comm="syz.7.9018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9449b8e929 code=0x7ffc0000 [ 2470.836023][ T30] audit: type=1326 audit(2000000035.199:3968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5432 comm="syz.7.9018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9449b8e929 code=0x7ffc0000 [ 2470.877323][ T30] audit: type=1326 audit(2000000035.217:3969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5432 comm="syz.7.9018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f9449b8e929 code=0x7ffc0000 [ 2471.849539][T22725] ch341-uart ttyUSB0: failed to read break control: -110 [ 2472.171755][T22725] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 2472.575399][ T5461] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 2472.752463][T22725] usb 9-1: USB disconnect, device number 7 [ 2472.760540][T22725] ch341 9-1:0.0: device disconnected [ 2473.996363][ T5522] netlink: 'syz.5.9053': attribute type 4 has an invalid length. [ 2474.401242][ T5512] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2474.415876][ T5512] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2474.423543][ T5512] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 2474.548585][ T5529] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9054'. [ 2474.585529][ T5529] netem: unknown loss type 13 [ 2474.885130][ T5535] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9058'. [ 2474.939321][ T5538] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9059'. [ 2475.074620][ T5539] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9059'. [ 2475.994957][ T5572] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9072'. [ 2476.040185][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 2476.639559][T24138] Bluetooth: hci5: command 0x0c1a tx timeout [ 2476.646198][T24138] Bluetooth: hci6: command 0x0c1a tx timeout [ 2477.287467][ T5610] 9pnet_fd: Insufficient options for proto=fd [ 2477.497364][T22033] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 2477.715927][T22033] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2478.008856][T22033] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 2478.030778][T22033] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 2478.043761][T22033] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 2478.055315][T22033] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2478.073156][T22033] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 2478.085319][T22033] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 2478.093478][T22033] usb 9-1: Product: syz [ 2478.097698][T22033] usb 9-1: Manufacturer: syz [ 2478.102294][T22033] usb 9-1: SerialNumber: syz [ 2478.110059][T22033] usb 9-1: config 0 descriptor?? [ 2478.233665][ T5621] syzkaller1: entered promiscuous mode [ 2478.240181][ T5621] syzkaller1: entered allmulticast mode [ 2478.336317][T22033] radio-si470x 9-1:0.0: DeviceID=0x3f6e ChipID=0x7100 [ 2478.862852][ T1801] Bluetooth: hci6: command 0x0c1a tx timeout [ 2478.940515][ T5631] netlink: 'syz.4.9092': attribute type 4 has an invalid length. [ 2478.964674][T22033] radio-si470x 9-1:0.0: software version 63, hardware version 110 [ 2479.148196][T22033] radio-si470x 9-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 2479.174885][T22033] radio-si470x 9-1:0.0: submitting int urb failed (-90) [ 2479.588969][T22033] radio-si470x 9-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 2479.662956][T22033] radio-si470x 9-1:0.0: probe with driver radio-si470x failed with error -22 [ 2479.715323][T22033] usb 9-1: USB disconnect, device number 8 [ 2479.828274][ T5641] netlink: 112 bytes leftover after parsing attributes in process `syz.7.9096'. [ 2479.968187][ T5647] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2480.096952][ T30] kauditd_printk_skb: 74 callbacks suppressed [ 2480.096967][ T30] audit: type=1400 audit(2000000044.197:4044): avc: denied { write } for pid=5650 comm="syz.7.9101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2480.192497][ T5653] Bluetooth: MGMT ver 1.23 [ 2480.809637][ T30] audit: type=1400 audit(2000000044.871:4045): avc: denied { relabelfrom } for pid=5677 comm="syz.8.9114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 2480.872837][ T30] audit: type=1400 audit(2000000044.871:4046): avc: denied { relabelto } for pid=5677 comm="syz.8.9114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 2481.136677][ T5683] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2481.245072][ T5694] syzkaller1: left promiscuous mode [ 2481.265010][ T5694] syzkaller1: left allmulticast mode [ 2481.350733][ T5698] 9pnet_fd: Insufficient options for proto=fd [ 2481.457426][ T5704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9122'. [ 2481.492361][T22033] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 2481.799244][T22033] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 2481.827840][T22033] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2481.979023][T22033] usb 9-1: config 0 descriptor?? [ 2482.456174][T22033] elan 0003:04F3:0755.000B: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.8-1/input0 [ 2483.454377][T22033] usb 9-1: USB disconnect, device number 9 [ 2483.819510][ T5768] loop2: detected capacity change from 0 to 7 [ 2483.836067][ T4282] Dev loop2: unable to read RDB block 7 [ 2483.841685][ T4282] loop2: unable to read partition table [ 2483.849091][ T4282] loop2: partition table beyond EOD, truncated [ 2483.868154][ T5768] Dev loop2: unable to read RDB block 7 [ 2483.876773][ T5768] loop2: unable to read partition table [ 2483.884972][ T5768] loop2: partition table beyond EOD, truncated [ 2483.895868][ T5768] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2485.460183][ T5816] overlayfs: failed to clone upperpath [ 2486.107207][ T5838] syzkaller1: entered promiscuous mode [ 2486.113094][ T5838] syzkaller1: entered allmulticast mode [ 2487.168004][ T5864] syz.8.9175 (5864): drop_caches: 2 [ 2487.344754][ T30] audit: type=1804 audit(2000000050.979:4047): pid=5885 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.9170" name="nullb0" dev="tmpfs" ino=4114 res=1 errno=0 [ 2487.629650][ T5633] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 2487.642559][ T5890] lo speed is unknown, defaulting to 1000 [ 2487.649895][ T5890] lo speed is unknown, defaulting to 1000 [ 2487.824112][ T5633] usb 9-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 2487.833493][ T5633] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2487.841531][ T5633] usb 9-1: Product: syz [ 2487.846026][ T5633] usb 9-1: Manufacturer: syz [ 2487.850735][ T5633] usb 9-1: SerialNumber: syz [ 2487.857084][ T5633] usb 9-1: config 0 descriptor?? [ 2487.863904][ T5633] ch341 9-1:0.0: ch341-uart converter detected [ 2488.922031][ T5918] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9191'. [ 2490.067377][ T5633] ch341-uart ttyUSB0: failed to read break control: -110 [ 2490.098601][ T5633] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 2490.129854][ T5633] usb 9-1: USB disconnect, device number 10 [ 2490.168364][ T5633] ch341 9-1:0.0: device disconnected [ 2490.394782][ T5944] SELinux: ebitmap: empty map [ 2490.402765][ T5944] SELinux: failed to load policy [ 2490.856667][ T5965] overlayfs: failed to clone lowerpath [ 2491.060555][ T30] audit: type=1400 audit(2000000054.449:4048): avc: denied { mounton } for pid=5970 comm="syz.8.9217" path="/proc/255/task" dev="proc" ino=104951 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 2493.301919][ T6033] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9241'. [ 2493.679992][T21197] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2493.694617][ T6052] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2494.827912][ T1801] Bluetooth: hci6: unexpected event for opcode 0x1408 [ 2496.294831][ T30] audit: type=1400 audit(2000000059.351:4049): avc: denied { read } for pid=6105 comm="syz.8.9266" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 2496.344144][ T6110] block device autoloading is deprecated and will be removed. [ 2496.351931][ T30] audit: type=1400 audit(2000000059.379:4050): avc: denied { open } for pid=6105 comm="syz.8.9266" path="/118/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 2496.468119][ T6115] geneve2: entered promiscuous mode [ 2497.718036][ T6149] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9280'. [ 2498.362531][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2498.395883][ T5633] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 2498.588889][ T5633] usb 9-1: Using ep0 maxpacket: 32 [ 2498.857003][ T5633] usb 9-1: config 0 has no interfaces? [ 2498.863272][ T5633] usb 9-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 2498.880077][ T5633] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2498.907743][ T5633] usb 9-1: config 0 descriptor?? [ 2498.944707][ T30] audit: type=1326 audit(2000000574.824:4051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6166 comm="syz.7.9287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9449b8e929 code=0x7ffc0000 [ 2498.976574][ T30] audit: type=1326 audit(2000000574.824:4052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6166 comm="syz.7.9287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9449b8e929 code=0x7ffc0000 [ 2499.014868][ T30] audit: type=1326 audit(2000000574.852:4053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6166 comm="syz.7.9287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9449b8e929 code=0x7ffc0000 [ 2499.049666][ T30] audit: type=1326 audit(2000000574.852:4054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6166 comm="syz.7.9287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9449b8e929 code=0x7ffc0000 [ 2499.077760][ T30] audit: type=1326 audit(2000000574.852:4055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6166 comm="syz.7.9287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9449b8e929 code=0x7ffc0000 [ 2499.105811][ T30] audit: type=1326 audit(2000000574.889:4056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6166 comm="syz.7.9287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f9449b8e929 code=0x7ffc0000 [ 2499.164413][ T30] audit: type=1326 audit(2000000574.889:4057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6166 comm="syz.7.9287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9449b8e929 code=0x7ffc0000 [ 2499.267349][ T30] audit: type=1326 audit(2000000574.889:4058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6166 comm="syz.7.9287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9449b8e929 code=0x7ffc0000 [ 2499.441177][ T5633] usb 9-1: USB disconnect, device number 11 [ 2499.653338][ T6185] fuse: Bad value for 'group_id' [ 2499.659728][ T6185] fuse: Bad value for 'group_id' [ 2499.666424][ T6185] overlayfs: failed to clone upperpath [ 2501.376916][T22725] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 2501.537186][T22725] usb 9-1: Using ep0 maxpacket: 8 [ 2501.544509][T22725] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2501.559135][T22725] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2501.568035][T22725] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 2501.585253][T22725] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 2501.596715][T22725] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2501.610151][T22725] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2501.638183][T22725] hub 9-1:1.0: bad descriptor, ignoring hub [ 2501.659409][T22725] hub 9-1:1.0: probe with driver hub failed with error -5 [ 2501.677913][T22725] cdc_wdm 9-1:1.0: skipping garbage [ 2501.683200][T22725] cdc_wdm 9-1:1.0: skipping garbage [ 2501.730851][T22725] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 2501.773284][T22725] cdc_wdm 9-1:1.0: Unknown control protocol [ 2502.090675][ T1801] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 2502.093818][ T51] Bluetooth: hci7: command 0x1003 tx timeout [ 2502.253914][ T8611] usb 9-1: USB disconnect, device number 12 [ 2502.897676][ T30] kauditd_printk_skb: 411 callbacks suppressed [ 2502.897687][ T30] audit: type=1326 audit(2000000578.528:4470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6240 comm="syz.8.9315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3605b8e929 code=0x7ffc0000 [ 2502.951981][ T30] audit: type=1326 audit(2000000578.556:4471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6240 comm="syz.8.9315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3605b8e929 code=0x7ffc0000 [ 2502.977001][ T30] audit: type=1326 audit(2000000578.556:4472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6240 comm="syz.8.9315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f3605b8e929 code=0x7ffc0000 [ 2503.434908][ T30] audit: type=1326 audit(2000000578.556:4473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6240 comm="syz.8.9315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3605b8e929 code=0x7ffc0000 [ 2503.465485][ T30] audit: type=1326 audit(2000000578.556:4474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6240 comm="syz.8.9315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3605b8e929 code=0x7ffc0000 [ 2503.494001][ T30] audit: type=1326 audit(2000000578.556:4475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6240 comm="syz.8.9315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f3605b8e929 code=0x7ffc0000 [ 2503.517929][ T30] audit: type=1326 audit(2000000578.556:4476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6240 comm="syz.8.9315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3605b8e929 code=0x7ffc0000 [ 2503.541826][ T30] audit: type=1326 audit(2000000578.556:4477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6240 comm="syz.8.9315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3605b8e929 code=0x7ffc0000 [ 2503.566494][ T30] audit: type=1326 audit(2000000578.565:4478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6240 comm="syz.8.9315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f3605b8e929 code=0x7ffc0000 [ 2503.592526][ T30] audit: type=1326 audit(2000000578.565:4479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6240 comm="syz.8.9315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3605b8e929 code=0x7ffc0000 [ 2504.712866][ T6269] netlink: 'syz.8.9322': attribute type 4 has an invalid length. [ 2505.174154][ T6274] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2506.448841][ T6305] overlayfs: failed to clone upperpath [ 2507.181926][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2509.019788][ T6365] netlink: 'syz.7.9362': attribute type 12 has an invalid length. [ 2510.779687][T22033] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 2510.945063][T22033] usb 9-1: Using ep0 maxpacket: 16 [ 2510.962628][T22033] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2510.994388][T22033] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2511.047301][T22033] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2511.114610][T22033] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2511.154445][T22033] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2511.211361][T22033] usb 9-1: Product: syz [ 2511.228317][T22033] usb 9-1: Manufacturer: syz [ 2511.233378][T22033] usb 9-1: SerialNumber: syz [ 2512.016713][T22033] usb 9-1: 0:2 : does not exist [ 2512.736429][ T30] kauditd_printk_skb: 88 callbacks suppressed [ 2512.736447][ T30] audit: type=1400 audit(2000000009.092:4568): avc: denied { read } for pid=6425 comm="syz.7.9382" path="socket:[106435]" dev="sockfs" ino=106435 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 2513.368564][ T6447] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9388'. [ 2513.397662][ T6447] ipvlan2: entered promiscuous mode [ 2513.421108][ T6447] bridge0: port 3(ipvlan2) entered blocking state [ 2513.428159][ T6447] bridge0: port 3(ipvlan2) entered disabled state [ 2513.434777][ T6447] ipvlan2: entered allmulticast mode [ 2513.440185][ T6447] bridge0: entered allmulticast mode [ 2513.457279][ T6447] ipvlan2: left allmulticast mode [ 2513.462367][ T6447] bridge0: left allmulticast mode [ 2513.611140][T22033] usb 9-1: USB disconnect, device number 13 [ 2513.648625][ T6106] udevd[6106]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2516.824003][ T6503] netlink: 'syz.3.9409': attribute type 10 has an invalid length. [ 2520.398988][ T6541] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9422'. [ 2520.453934][ T6541] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2520.464958][ T6541] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 2520.479311][ T6541] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 2520.492195][ T6541] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 2520.588853][ T6541] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 2520.597090][ T6541] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 2520.605451][ T6541] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 2520.626753][ T6541] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 2520.640151][ T6541] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 2520.648495][ T6541] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 2521.614198][T31408] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 2521.774660][T31408] usb 9-1: Using ep0 maxpacket: 16 [ 2521.791230][T31408] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2521.808640][T31408] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2521.819976][T31408] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2521.836700][T31408] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 2521.847365][T31408] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2521.868384][T31408] usb 9-1: config 0 descriptor?? [ 2522.009077][ T30] audit: type=1326 audit(2000000017.763:4569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.3.9431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131098e929 code=0x7ffc0000 [ 2522.036516][ T30] audit: type=1326 audit(2000000017.763:4570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.3.9431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f131098e929 code=0x7ffc0000 [ 2522.061795][ T30] audit: type=1326 audit(2000000017.763:4571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.3.9431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131098e929 code=0x7ffc0000 [ 2522.089903][ T30] audit: type=1326 audit(2000000017.763:4572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.3.9431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f131098e929 code=0x7ffc0000 [ 2522.144124][ T30] audit: type=1326 audit(2000000017.763:4573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.3.9431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131098e929 code=0x7ffc0000 [ 2522.171375][ T30] audit: type=1326 audit(2000000017.763:4574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.3.9431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131098e929 code=0x7ffc0000 [ 2522.198600][ T30] audit: type=1326 audit(2000000017.763:4575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.3.9431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f131098e929 code=0x7ffc0000 [ 2522.237146][ T30] audit: type=1326 audit(2000000017.763:4576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.3.9431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131098e929 code=0x7ffc0000 [ 2522.264162][ T30] audit: type=1326 audit(2000000017.763:4577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.3.9431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f131098e929 code=0x7ffc0000 [ 2522.291584][ T30] audit: type=1326 audit(2000000017.763:4578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.3.9431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f13109858e7 code=0x7ffc0000 [ 2522.364597][T31408] shield 0003:0955:7214.000C: unknown main item tag 0x0 [ 2522.377168][T31408] shield 0003:0955:7214.000C: unknown main item tag 0x0 [ 2522.385525][T31408] shield 0003:0955:7214.000C: unknown main item tag 0x0 [ 2522.392553][T31408] shield 0003:0955:7214.000C: unknown main item tag 0x0 [ 2522.407955][T31408] shield 0003:0955:7214.000C: unknown main item tag 0x0 [ 2522.424980][T31408] input: HID 0955:7214 Haptics as /devices/virtual/input/input31 [ 2522.483588][T31408] shield 0003:0955:7214.000C: Registered Thunderstrike controller [ 2522.496703][T31408] shield 0003:0955:7214.000C: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.8-1/input0 [ 2522.577353][T22033] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 2522.599709][T31408] usb 9-1: USB disconnect, device number 14 [ 2522.605898][T22033] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2522.637386][T22033] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2522.663854][T22033] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2524.276291][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2524.846812][ T6601] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2527.908132][ T6618] overlayfs: failed to clone upperpath [ 2531.056702][T22725] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 2531.225055][T22725] usb 9-1: Using ep0 maxpacket: 8 [ 2531.236122][T22725] usb 9-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 2531.245377][T22725] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2531.257272][T22725] usb 9-1: Product: syz [ 2531.263072][T22725] usb 9-1: Manufacturer: syz [ 2531.268212][T22725] usb 9-1: SerialNumber: syz [ 2531.274529][T22725] usb 9-1: config 0 descriptor?? [ 2531.283586][T22725] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 2531.480055][ T6687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9469'. [ 2532.410073][ T6706] PKCS7: Unknown OID: [5] (bad) [ 2532.415040][ T6706] PKCS7: Only support pkcs7_signedData type [ 2534.036900][T22725] gspca_sonixj: reg_w1 err -110 [ 2534.259252][T22725] sonixj 9-1:0.0: probe with driver sonixj failed with error -110 [ 2534.425007][ T6722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2534.446527][ T30] kauditd_printk_skb: 266 callbacks suppressed [ 2534.446542][ T30] audit: type=1326 audit(2000000029.399:4845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6728 comm="syz.3.9485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131098e929 code=0x7ffc0000 [ 2534.480901][ T30] audit: type=1326 audit(2000000029.399:4846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6728 comm="syz.3.9485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131098e929 code=0x7ffc0000 [ 2534.534949][ T30] audit: type=1326 audit(2000000029.399:4847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6728 comm="syz.3.9485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f131098e929 code=0x7ffc0000 [ 2534.560772][ T30] audit: type=1326 audit(2000000029.399:4848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6728 comm="syz.3.9485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131098e929 code=0x7ffc0000 [ 2534.686619][ T30] audit: type=1326 audit(2000000029.399:4849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6728 comm="syz.3.9485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131098e929 code=0x7ffc0000 [ 2534.711003][ T30] audit: type=1326 audit(2000000029.399:4850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6728 comm="syz.3.9485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f131098e929 code=0x7ffc0000 [ 2534.735559][ T30] audit: type=1326 audit(2000000029.399:4851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6728 comm="syz.3.9485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131098e929 code=0x7ffc0000 [ 2534.762490][ T30] audit: type=1326 audit(2000000029.399:4852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6728 comm="syz.3.9485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131098e929 code=0x7ffc0000 [ 2534.785898][ C1] vkms_vblank_simulate: vblank timer overrun [ 2535.309221][ T30] audit: type=1326 audit(2000000029.399:4853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6728 comm="syz.3.9485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f131098e929 code=0x7ffc0000 [ 2535.415756][ T30] audit: type=1326 audit(2000000029.399:4854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6728 comm="syz.3.9485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131098e929 code=0x7ffc0000 [ 2535.518015][T22725] usb 9-1: USB disconnect, device number 15 [ 2540.019635][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 2540.019651][ T30] audit: type=1326 audit(2000000034.609:4926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6778 comm="syz.7.9500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9449b858e7 code=0x7ffc0000 [ 2540.063287][ T30] audit: type=1326 audit(2000000034.647:4927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6778 comm="syz.7.9500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9449b2ab19 code=0x7ffc0000 [ 2540.087586][T22725] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 2540.091180][ T30] audit: type=1326 audit(2000000034.647:4928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6778 comm="syz.7.9500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9449b858e7 code=0x7ffc0000 [ 2540.317420][T22725] usb 9-1: Using ep0 maxpacket: 8 [ 2540.333795][T22725] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2540.344402][T22725] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2540.360793][T22725] usb 9-1: Product: syz [ 2540.364951][T22725] usb 9-1: Manufacturer: syz [ 2540.371550][T22725] usb 9-1: SerialNumber: syz [ 2540.383379][T22725] usb 9-1: config 0 descriptor?? [ 2540.423565][ T30] audit: type=1326 audit(2000000034.647:4929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6778 comm="syz.7.9500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9449b2ab19 code=0x7ffc0000 [ 2540.449202][ T30] audit: type=1326 audit(2000000034.647:4930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6778 comm="syz.7.9500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f9449b8e929 code=0x7ffc0000 [ 2540.477370][ T30] audit: type=1326 audit(2000000034.712:4931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6778 comm="syz.7.9500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9449b858e7 code=0x7ffc0000 [ 2540.502778][ T30] audit: type=1326 audit(2000000034.712:4932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6778 comm="syz.7.9500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9449b2ab19 code=0x7ffc0000 [ 2540.530934][ T30] audit: type=1326 audit(2000000034.712:4933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6778 comm="syz.7.9500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f9449b8e929 code=0x7ffc0000 [ 2540.556748][ T30] audit: type=1326 audit(2000000034.712:4934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6778 comm="syz.7.9500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9449b858e7 code=0x7ffc0000 [ 2540.582859][ T30] audit: type=1326 audit(2000000034.712:4935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6778 comm="syz.7.9500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9449b2ab19 code=0x7ffc0000 [ 2540.619935][T22725] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2540.874180][ T6742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2542.688040][T22725] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2542.708588][T22725] usb 9-1: USB disconnect, device number 16 [ 2543.289880][ T6829] netlink: 'syz.5.9513': attribute type 11 has an invalid length. [ 2545.144761][T22033] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 2545.421820][ T6852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2545.521260][T22033] usb 9-1: Using ep0 maxpacket: 8 [ 2545.541974][T22033] usb 9-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2545.551727][T22033] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2545.564548][T22033] usb 9-1: Product: syz [ 2545.583292][T22033] usb 9-1: Manufacturer: syz [ 2545.588108][T22033] usb 9-1: SerialNumber: syz [ 2545.610600][T22033] usb 9-1: config 0 descriptor?? [ 2545.756961][T22033] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2545.776852][T22033] usb 9-1: setting power ON [ 2545.781364][T22033] dvb-usb: bulk message failed: -22 (2/0) [ 2546.232776][T22033] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2546.243494][T22033] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2546.254606][T22033] usb 9-1: media controller created [ 2546.276968][T22033] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2546.296628][T22033] usb 9-1: selecting invalid altsetting 6 [ 2546.306875][T22033] usb 9-1: digital interface selection failed (-22) [ 2546.314241][T22033] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2546.327443][T22033] usb 9-1: setting power OFF [ 2546.332229][T22033] dvb-usb: bulk message failed: -22 (2/0) [ 2546.338448][T22033] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2546.378113][T22033] (NULL device *): no alternate interface [ 2546.394351][T22033] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2546.415495][T22033] usb 9-1: USB disconnect, device number 17 [ 2548.380669][ T6886] fuse: Bad value for 'fd' [ 2548.381277][ T6884] overlayfs: failed to clone upperpath [ 2548.608099][ T1801] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 2548.987490][ T6904] netlink: 'syz.8.9536': attribute type 4 has an invalid length. [ 2552.582146][ T6948] netlink: 'syz.4.9551': attribute type 4 has an invalid length. [ 2553.453555][ T6958] ip6erspan0: entered promiscuous mode [ 2554.182589][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 2554.182600][ T30] audit: type=1326 audit(2000000047.864:4940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6960 comm="syz.5.9556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793df8e929 code=0x7ffc0000 [ 2554.252626][ T30] audit: type=1326 audit(2000000047.864:4941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6960 comm="syz.5.9556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793df8e929 code=0x7ffc0000 [ 2554.289989][ T30] audit: type=1326 audit(2000000047.911:4942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6960 comm="syz.5.9556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f793df8e929 code=0x7ffc0000 [ 2554.319637][ T30] audit: type=1326 audit(2000000047.911:4943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6960 comm="syz.5.9556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793df8e929 code=0x7ffc0000 [ 2554.455776][ T30] audit: type=1326 audit(2000000047.911:4944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6960 comm="syz.5.9556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793df8e929 code=0x7ffc0000 [ 2554.591469][ T30] audit: type=1326 audit(2000000047.911:4945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6960 comm="syz.5.9556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f793df8e929 code=0x7ffc0000 [ 2554.622674][ T30] audit: type=1326 audit(2000000047.911:4946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6960 comm="syz.5.9556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793df8e929 code=0x7ffc0000 [ 2554.789010][ T6972] ubi: mtd0 is already attached to ubi31 [ 2556.102173][ T30] audit: type=1326 audit(2000000047.911:4947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6960 comm="syz.5.9556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793df8e929 code=0x7ffc0000 [ 2556.132647][ T30] audit: type=1326 audit(2000000047.911:4948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6960 comm="syz.5.9556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f793df8e929 code=0x7ffc0000 [ 2556.163786][ T30] audit: type=1326 audit(2000000047.911:4949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6960 comm="syz.5.9556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793df8e929 code=0x7ffc0000 [ 2556.187199][ C0] vkms_vblank_simulate: vblank timer overrun [ 2559.170440][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2560.511582][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 2560.511600][ T30] audit: type=1326 audit(2000000053.776:4988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7018 comm="syz.5.9572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793df8e929 code=0x7ffc0000 [ 2560.543774][ T30] audit: type=1326 audit(2000000053.794:4989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7018 comm="syz.5.9572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793df8e929 code=0x7ffc0000 [ 2560.567216][ T30] audit: type=1326 audit(2000000053.794:4990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7018 comm="syz.5.9572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f793df8e929 code=0x7ffc0000 [ 2560.599372][ T30] audit: type=1326 audit(2000000053.794:4991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7018 comm="syz.5.9572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793df8e929 code=0x7ffc0000 [ 2560.633704][ T30] audit: type=1326 audit(2000000053.794:4992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7018 comm="syz.5.9572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793df8e929 code=0x7ffc0000 [ 2560.661169][ T30] audit: type=1326 audit(2000000053.794:4993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7018 comm="syz.5.9572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f793df8e929 code=0x7ffc0000 [ 2560.687366][ T30] audit: type=1326 audit(2000000053.794:4994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7018 comm="syz.5.9572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793df8e929 code=0x7ffc0000 [ 2560.713964][ T30] audit: type=1326 audit(2000000053.794:4995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7018 comm="syz.5.9572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793df8e929 code=0x7ffc0000 [ 2560.746639][ T30] audit: type=1326 audit(2000000053.794:4996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7018 comm="syz.5.9572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f793df8e929 code=0x7ffc0000 [ 2560.772398][ T30] audit: type=1326 audit(2000000053.794:4997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7018 comm="syz.5.9572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793df8e929 code=0x7ffc0000 [ 2562.331023][ T7037] syz.7.9577 (7037): drop_caches: 2 [ 2562.341743][ T7037] syz.7.9577 (7037): drop_caches: 2 [ 2563.277125][ T31] INFO: task syz.6.8555:4128 blocked for more than 143 seconds. [ 2563.720112][ T31] Not tainted 6.16.0-rc4-syzkaller #0 [ 2563.732899][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2563.749477][ T31] task:syz.6.8555 state:D stack:25896 pid:4128 tgid:4126 ppid:1798 task_flags:0x400140 flags:0x00004006 [ 2563.762674][ T31] Call Trace: [ 2563.766060][ T31] [ 2563.772607][ T31] __schedule+0x116a/0x5de0 [ 2563.777786][ T31] ? rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 2563.784911][ T31] ? netlink_unicast+0x53d/0x7f0 [ 2563.790698][ T31] ? __lock_acquire+0x622/0x1c90 [ 2563.795749][ T31] ? __pfx___schedule+0x10/0x10 [ 2563.801038][ T31] ? find_held_lock+0x2b/0x80 [ 2563.805935][ T31] ? schedule+0x2d7/0x3a0 [ 2563.810765][ T31] schedule+0xe7/0x3a0 [ 2563.814932][ T31] schedule_timeout+0x257/0x290 [ 2563.819986][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 2563.825922][ T31] ? mark_held_locks+0x49/0x80 [ 2563.830896][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2563.836509][ T31] __wait_for_common+0x2ff/0x4e0 [ 2563.841692][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 2563.847745][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 2563.853716][ T31] ? ib_cq_pool_cleanup+0x220/0x360 [ 2563.859014][ T31] disable_device+0x16f/0x280 [ 2563.864148][ T31] ? __pfx_disable_device+0x10/0x10 [ 2563.869590][ T31] __ib_unregister_device+0x2b4/0x480 [ 2563.875460][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 2563.881586][ T31] ib_unregister_device_and_put+0x5a/0x80 [ 2563.887998][ T31] nldev_dellink+0x21f/0x320 [ 2563.895015][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 2563.914401][ T31] ? cap_capable+0xb3/0x250 [ 2563.921209][ T31] ? bpf_lsm_capable+0x9/0x10 [ 2563.927766][ T31] ? security_capable+0x7e/0x260 [ 2563.934977][ T31] ? ns_capable+0xd7/0x110 [ 2563.941691][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 2563.949193][ T31] rdma_nl_rcv_msg+0x387/0x6e0 [ 2563.959879][ T31] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 2563.965398][ T31] ? __lock_acquire+0x622/0x1c90 [ 2563.971082][ T31] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 2563.978888][ T31] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 2563.986250][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 2563.998229][ T31] ? is_vmalloc_addr+0x86/0xa0 [ 2564.006248][ T31] netlink_unicast+0x53d/0x7f0 [ 2564.017259][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 2564.025830][ T31] netlink_sendmsg+0x8d1/0xdd0 [ 2564.032811][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2564.043697][ T31] ____sys_sendmsg+0xa95/0xc70 [ 2564.051939][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 2564.061888][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2564.071070][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 2564.081832][ T31] ___sys_sendmsg+0x134/0x1d0 [ 2564.088709][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 2564.097346][ T31] ? __lock_acquire+0x622/0x1c90 [ 2564.108850][ T31] __sys_sendmsg+0x16d/0x220 [ 2564.115979][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 2564.128058][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 2564.140932][ T31] do_syscall_64+0xcd/0x4c0 [ 2564.151292][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2564.159678][ T31] RIP: 0033:0x7fac13f8e929 [ 2564.165525][ T31] RSP: 002b:00007fac14d6d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2564.174363][ T31] RAX: ffffffffffffffda RBX: 00007fac141b5fa0 RCX: 00007fac13f8e929 [ 2564.182440][ T31] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 2564.191523][ T31] RBP: 00007fac14010b39 R08: 0000000000000000 R09: 0000000000000000 [ 2564.199946][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2564.209169][ T31] R13: 0000000000000000 R14: 00007fac141b5fa0 R15: 00007fff7de74448 [ 2564.217709][ T31] [ 2564.220911][ T31] [ 2564.220911][ T31] Showing all locks held in the system: [ 2564.229333][ T31] 1 lock held by khungtaskd/31: [ 2564.234342][ T31] #0: ffffffff8e5c4940 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 2564.244705][ T31] 2 locks held by getty/8172: [ 2564.250909][ T31] #0: ffff88814c6c10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 2564.261711][ T31] #1: ffffc900034db2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 2564.273423][ T31] 4 locks held by kworker/u8:3/14851: [ 2564.278861][ T31] #0: ffff88801c6f3948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 2564.289685][ T31] #1: ffffc90004a0fd10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 2564.299867][ T31] #2: ffffffff903365d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890 [ 2564.309816][ T31] #3: ffff8880655806d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x30/0x320 [ 2564.321462][ T31] 2 locks held by syz.6.8555/4128: [ 2564.327327][ T31] #0: ffffffff9b114a78 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv_msg+0x169/0x6e0 [ 2564.338652][ T31] #1: ffff8880655806d0 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x23b/0x480 [ 2564.350379][ T31] 2 locks held by syz.0.8567/4179: [ 2564.355828][ T31] #0: ffffffff903365d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 2564.365415][ T31] #1: ffff8880655806d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x30/0x320 [ 2564.378038][ T31] 1 lock held by syz.3.9573/7032: [ 2564.384155][ T31] 1 lock held by syz.7.9578/7044: [ 2564.389753][ T31] #0: ffff8880b843a2d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 2564.400077][ T31] [ 2564.402574][ T31] ============================================= [ 2564.402574][ T31] [ 2564.411551][ T31] NMI backtrace for cpu 1 [ 2564.411565][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 2564.411586][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2564.411597][ T31] Call Trace: [ 2564.411603][ T31] [ 2564.411610][ T31] dump_stack_lvl+0x116/0x1f0 [ 2564.411640][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 2564.411661][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2564.411687][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 2564.411710][ T31] watchdog+0xf70/0x12c0 [ 2564.411735][ T31] ? __pfx_watchdog+0x10/0x10 [ 2564.411752][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 2564.411778][ T31] ? __kthread_parkme+0x19e/0x250 [ 2564.411802][ T31] ? __pfx_watchdog+0x10/0x10 [ 2564.411822][ T31] kthread+0x3c2/0x780 [ 2564.411838][ T31] ? __pfx_kthread+0x10/0x10 [ 2564.411856][ T31] ? rcu_is_watching+0x12/0xc0 [ 2564.411877][ T31] ? __pfx_kthread+0x10/0x10 [ 2564.411895][ T31] ret_from_fork+0x5d4/0x6f0 [ 2564.411919][ T31] ? __pfx_kthread+0x10/0x10 [ 2564.411936][ T31] ret_from_fork_asm+0x1a/0x30 [ 2564.411965][ T31] [ 2564.411972][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2564.528704][ C0] NMI backtrace for cpu 0 [ 2564.528718][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 2564.528735][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2564.528744][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2564.528767][ C0] Code: ab 71 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 30 29 00 fb f4 0c fb 02 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 2564.528781][ C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 000002c6 [ 2564.528793][ C0] RAX: 0000000007504f89 RBX: 0000000000000000 RCX: ffffffff8b80dc69 [ 2564.528803][ C0] RDX: 0000000000000000 RSI: ffffffff8de1a0be RDI: ffffffff8c157c20 [ 2564.528812][ C0] RBP: fffffbfff1c52ef0 R08: 0000000000000001 R09: ffffed1017086645 [ 2564.528821][ C0] R10: ffff8880b843322b R11: 0000000000000001 R12: 0000000000000000 [ 2564.528829][ C0] R13: ffffffff8e297780 R14: ffffffff90a80d50 R15: 0000000000000000 [ 2564.528838][ C0] FS: 0000000000000000(0000) GS:ffff888124752000(0000) knlGS:0000000000000000 [ 2564.528853][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2564.528862][ C0] CR2: 00007f1310b7e2d8 CR3: 0000000088869000 CR4: 00000000003526f0 [ 2564.528872][ C0] Call Trace: [ 2564.528876][ C0] [ 2564.528881][ C0] default_idle+0x13/0x20 [ 2564.528894][ C0] default_idle_call+0x6d/0xb0 [ 2564.528906][ C0] do_idle+0x391/0x510 [ 2564.528924][ C0] ? __pfx_do_idle+0x10/0x10 [ 2564.528940][ C0] ? trace_sched_exit_tp+0x31/0x130 [ 2564.528960][ C0] cpu_startup_entry+0x4f/0x60 [ 2564.528976][ C0] rest_init+0x16b/0x2b0 [ 2564.528989][ C0] ? acpi_subsystem_init+0x133/0x180 [ 2564.529005][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 2564.529024][ C0] start_kernel+0x3ee/0x4d0 [ 2564.529040][ C0] x86_64_start_reservations+0x18/0x30 [ 2564.529057][ C0] x86_64_start_kernel+0x130/0x190 [ 2564.529074][ C0] common_startup_64+0x13e/0x148 [ 2564.529092][ C0] [ 2564.749860][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2564.756748][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 2564.766825][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2564.776878][ T31] Call Trace: [ 2564.780137][ T31] [ 2564.783045][ T31] dump_stack_lvl+0x3d/0x1f0 [ 2564.787620][ T31] panic+0x71c/0x800 [ 2564.791493][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 2564.797375][ T31] ? __pfx_panic+0x10/0x10 [ 2564.801772][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2564.807133][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2564.813118][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2564.818484][ T31] ? watchdog+0xdda/0x12c0 [ 2564.822875][ T31] ? watchdog+0xdcd/0x12c0 [ 2564.827268][ T31] watchdog+0xdeb/0x12c0 [ 2564.831487][ T31] ? __pfx_watchdog+0x10/0x10 [ 2564.836137][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 2564.841316][ T31] ? __kthread_parkme+0x19e/0x250 [ 2564.846321][ T31] ? __pfx_watchdog+0x10/0x10 [ 2564.850973][ T31] kthread+0x3c2/0x780 [ 2564.855014][ T31] ? __pfx_kthread+0x10/0x10 [ 2564.859589][ T31] ? rcu_is_watching+0x12/0xc0 [ 2564.864358][ T31] ? __pfx_kthread+0x10/0x10 [ 2564.868939][ T31] ret_from_fork+0x5d4/0x6f0 [ 2564.873511][ T31] ? __pfx_kthread+0x10/0x10 [ 2564.878074][ T31] ret_from_fork_asm+0x1a/0x30 [ 2564.882819][ T31] [ 2564.886010][ T31] Kernel Offset: disabled [ 2564.890313][ T31] Rebooting in 86400 seconds..