last executing test programs: 3m32.748175976s ago: executing program 32 (id=1808): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0xd0, 0x2b, 0x107, 0xfffffffe, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xb0, 0x1, 0x0, 0x1, [@typed={0xa9, 0x137, 0x0, 0x0, @binary="13cd670cb6a81e00d1953a3622680366ae907ae8d4202587f2ec81cc1857f8c3ce626d57122b400a22a779eb6e175d865b170ddd0cba3d4bb695429d9772c05ea937e05dafbeb8f96930cfbab0d0e53e4740f70b346254e98dc5fd3845e1b8297ccd78ef0f10b4a8f333e000d384b11a10623d14ccf32f3741b89f2d4d5d1659c7a97fe10910aaa77b8996b08e3b00547f04d6696c9328348acb05a5605181928f92bdd64f"}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0xbd, 0x0, 0x0, @ipv4=@multicast2}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001940)=ANY=[@ANYBLOB="14000000100001000000000000000000e900000a20000000000a01020000000000000000050000000900010073797a10000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000000e0a01030000000000000000070000000900020073797a31000000000900010073797a30"], 0xc0}}, 0x400) r2 = socket(0x10, 0x80003, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x1f, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x22000000}, 0x0) writev(r0, &(0x7f0000000040), 0x2) 3m27.960527201s ago: executing program 2 (id=1880): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) fcntl$getownex(r4, 0x10, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x24004815, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f460b20f21b9add9e84d2dba9e6df8034c4", 0x30}], 0x2}], 0x1, 0x0) 3m26.63222856s ago: executing program 2 (id=1884): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f9471633078", 0x8) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) (async) close(r0) (async) r2 = accept4(r0, 0x0, 0x0, 0x80000) r3 = dup(r2) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000080)=[{{0x0, 0x8d, &(0x7f00000009c0)=[{&(0x7f0000000480)='Y', 0xff8d}, {&(0x7f0000000100)="d5", 0xf4240}], 0x2}}], 0x1, 0x0) (async) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x30, r2, 0x5d5c0000) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000980)={{0x1, 0x1, 0x18, r5, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) (async) lstat(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000e40)={0x0, 0x0}, &(0x7f0000000e80)=0xc) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r12}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) read$FUSE(r12, &(0x7f00000077c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r12, &(0x7f0000004200)={0x50, 0x0, r13, {0x7, 0x1f, 0x0, 0xfe05a, 0x5000, 0x0, 0x0, 0xc}}, 0x50) syz_fuse_handle_req(r12, &(0x7f0000009800)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r12, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x150, 0x0, 0x0, [{{0x1000000000000003, 0x0, 0x0, 0x0, 0x10000, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x5, 0x0, r14, 0x0, 0xfffffffc}}, {0x0, 0x0, 0x8, 0x2, 'group_id'}}, {{0x3, 0x0, 0x0, 0x73, 0x200746, 0x0, {0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xf4}}, {0x0, 0xfffffffffffffffd, 0x8, 0x29, 'group_id'}}]}, 0x0, 0x0, 0x0}) (async) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000fc0)={{{@in=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@dev}}, &(0x7f00000010c0)=0xe8) (async) getresgid(&(0x7f0000001100), &(0x7f0000001140), &(0x7f0000001180)=0x0) syz_fuse_handle_req(r3, &(0x7f0000001340)="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", 0x2000, &(0x7f0000003340)={&(0x7f0000000140)={0x50, 0xffffffffffffffda, 0xfffffffffffff0d7, {0x7, 0x2b, 0x1, 0x400004, 0xfffe, 0x5, 0x4f3, 0x100, 0x0, 0x0, 0x40, 0xe93}}, &(0x7f00000000c0)={0x18, 0x0, 0x3cea}, &(0x7f00000001c0)={0x18, 0x0, 0x85a, {0x6}}, &(0x7f0000000200)={0x18, 0xfffffffffffffff5, 0x9, {0xcb6e}}, &(0x7f00000002c0)={0x18, 0xfffffffffffffff5, 0x3, {0x3}}, &(0x7f0000000340)={0x28, 0x0, 0x3, {{0x7, 0x7ff}}}, &(0x7f0000000380)={0x60, 0x0, 0x7, {{0x80000001, 0xe0, 0x2, 0x4, 0x9, 0x3, 0x1, 0x3}}}, &(0x7f0000000400)={0x18, 0x0, 0x8, {0x6}}, &(0x7f0000000440)={0x19, 0x0, 0x9, {'/dev/kvm\x00'}}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x0, 0x4}}, &(0x7f0000000500)={0x78, 0x0, 0x4, {0x9, 0x10001, 0x0, {0x0, 0x7, 0x4, 0x2, 0x1, 0x5, 0x8c, 0xffff, 0x5, 0x2000, 0x8000, 0x0, 0xee00, 0xfffffff8, 0x1}}}, &(0x7f00000005c0)={0x90, 0x0, 0x5, {0x1, 0x2, 0x5, 0xfffffffffffffe35, 0xdd5, 0x2, {0x5, 0x9, 0x401, 0x0, 0x5, 0x2, 0x5, 0xf9, 0x8, 0x8000, 0x7fe000, r15, 0x0, 0x35, 0x706c}}}, &(0x7f0000000680)=ANY=[@ANYBLOB="a80000000000000001000000010000000400000000000000050000000000000000000000f9ffffff0300000000000000c3000000000000000000d32cda6d29905bff000000000000010000000000000003000000080000002e215b00000000000400000000000000000016eae5dbaf4b9c82000000000000060000007c0000002b55f72c24270000040000000000000000feffffffffffff09000000000000002f6465762f6b766d"], &(0x7f0000000ac0)={0x350, 0x0, 0x9, [{{0x3, 0x3, 0x4, 0x0, 0x6, 0x946, {0x6, 0x4, 0xb8b8, 0x1, 0x72, 0x1, 0x3, 0x1, 0xfe6, 0xc000, 0x59b, 0x0, 0x0, 0xb64, 0x7}}, {0x3, 0x1, 0x9, 0x29e, '/dev/kvm\x00'}}, {{0x5, 0x0, 0x320afd6d, 0x40, 0x80, 0x9, {0x4, 0x9, 0x100000000, 0x1, 0x0, 0xd, 0x480, 0x2, 0x8, 0xc000, 0xfff, 0x0, 0x0, 0x3, 0x53d}}, {0x0, 0x1, 0x5, 0x8, 'hash\x00'}}, {{0x5, 0x1, 0x7ff, 0x5, 0x8, 0x40, {0x2, 0x4, 0x3, 0x4, 0xf, 0x6, 0x10000, 0xfffffff7, 0x9, 0x4000, 0x8, 0x0, 0x0, 0xfffffffa, 0x8}}, {0x5, 0x5, 0x9, 0x4, '/dev/kvm\x00'}}, {{0x3, 0x2, 0x1, 0x7fffffffffffffff, 0x27, 0x9, {0x6, 0x6, 0x3, 0xffffffffffffffd4, 0x6, 0x5, 0xe5b, 0x3, 0x6e7ff299, 0x1000, 0x1, r9, 0x0, 0x7, 0x4}}, {0x3, 0x1, 0x14, 0xf, 'michael_mic-generic\x00'}}, {{0x5, 0x1, 0x2, 0xffffffff80000000, 0x4, 0x4f02, {0x1, 0x2, 0x1, 0x84, 0x10, 0x0, 0xf, 0x600000, 0x10, 0x8000, 0x101, r8, r10, 0x20000, 0x7}}, {0x4, 0x9, 0x2, 0x3, '[-'}}]}, &(0x7f0000000ec0)={0xa0, 0xfffffffffffffffe, 0x4, {{0x4, 0x1, 0x8001, 0x5b, 0x40, 0xc46b0043, {0x0, 0x0, 0x9, 0x2, 0x6, 0x4000000, 0x6, 0x700, 0x8000, 0xa000, 0x4, r11, r14, 0x2, 0x9}}}}, &(0x7f0000000f80)={0x20, 0x0, 0x4, {0x0, 0x4, 0xfffffff8, 0x1}}, &(0x7f00000011c0)={0x130, 0xfffffffffffffffe, 0xfffffffffffffff9, {0x7, 0x9, 0x0, '\x00', {0x400, 0x9, 0xffffffffffffffff, 0x5, r15, r16, 0xa000, '\x00', 0x1, 0xd22, 0x40, 0x3, {0x6, 0xe}, {0x10000, 0x2}, {0x5, 0x7}, {0x1, 0x1}, 0x3, 0x0, 0x2, 0xd17}}}}) r17 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r17, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x4b564d06}]}) (async) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r18, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0x1, "b52cbb", 0xff, 0x5}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x6, 0xc00}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) 3m25.540833229s ago: executing program 2 (id=1886): syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) capset(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000002200), 0x1, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x1f0268bc, @empty, 0x6}}, 0x0, 0x0, 0x3fc, 0x1, 0x32, 0xb}, 0x9c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{}, 0x0, &(0x7f00000006c0), 0x2000000}, 0x20) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x4, 0x0, 0x2, {0xa, 0x4e24, 0x1, @mcast1, 0x8}}}, 0x32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206030000000000000000000000000014000780080012400000000005001500010000800500010006000000050005000200000005000400000000000900020073"], 0x60}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000f14010025bd7000fcdbdf250900450069"], 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x4004804) setsockopt$sock_int(r8, 0x1, 0x7, &(0x7f0000000180)=0x7, 0x4) 3m21.278958079s ago: executing program 2 (id=1902): socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd7000070000000200000008"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 3m20.942187041s ago: executing program 2 (id=1905): socket$unix(0x1, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file1/file0/file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) 3m19.368522572s ago: executing program 2 (id=1906): gettid() timer_create(0x0, 0x0, &(0x7f0000000040)) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r1, &(0x7f0000000640)={0x14, &(0x7f0000000100)={0x40, 0x24, 0x2a, {0x2a, 0xa, "e4ddd6532558a0d3fc182ef7307c894a25485e45a828e12d87fd3aff3012902852b020cba7730df5"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1401}}}, &(0x7f0000000300)={0x2c, &(0x7f00000001c0)={0x20, 0x13, 0x2a, "08df743e7f0df54dca471df91fab98c5b217b1f229b7073c89f98c256b0bd9bc56105262985e116324c0"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000280), &(0x7f00000002c0)={0x40, 0x5, 0x3, "fe270e"}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) unlink(0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYRESHEX=r0], 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3m13.37573541s ago: executing program 5 (id=1925): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) timer_create(0x5, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=r0}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r1 = memfd_secret(0x80000) syz_clone(0x242ec00, &(0x7f0000000340)="3e7a141eec36bab6b1c60b5b83ab92b81f48aae822fe1b03a1cc9687dfe9ddb36f6b8d98f34c9b342f2b109071f89ae4df99c422b348a294955c3c737e8a308561971ffd7ed3fdac822f5897168130c60eda8e25fe8bf8307665b0316db03b3fa8d3039ab27e71d0953ed51b732a5cd3b966e3b047ff9f1649c0be872694861d2c99c0d738363da0028b507a648e", 0x8e, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f0000000780)="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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="7cbb0001020603000000000000050000060000000000001a000900020073797a31000600000400078012e92d32fa01df82020000000500050007000000777238b329452f866a1142ffdaa471c8656b31a16083e5ea60cf5f7fab26bc9ccfb4f3ba301180d65a00fe9b64baebbe99086a7283bc3adc7f3bab19ee4646577db24fff8e846f19095bdb"], 0x44}}, 0x20004000) read$msr(r2, &(0x7f0000004c00)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYRES16=r3], 0x18) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r5, 0xa, 0x13) fcntl$setlease(r5, 0x400, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = getpid() fcntl$setownex(r6, 0xf, &(0x7f0000000100)={0x2, r7}) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r5, 0x8, r8) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r4, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) 3m10.214479435s ago: executing program 5 (id=1936): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0x2, 0x6a, 0xa, 0x3, 0x0, 0x85, 0x6, 0x21, 0x85, 0x0, 0x81, 0x4c, 0x2}, 0xe) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0xa8400, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x6, 0x1000000}) syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000400)={0x1f, 0x3, 0x2}, 0x6) write$binfmt_misc(r2, &(0x7f0000000540)="6012e2df8bc4076397811a6563f2e05960f8ce40b0ee67d207a9b80e00c148c2cc203324b5ca9cd376f78c90d18eabf6887a3973eccde9d664977c5b338f7e2471c8172630522782bc2ba9e507971fe9d6e903ca4ff5e7bd37200284cd1ecd8c2105cd5c37c0e5617276fa12317ef462787c8319b24a6f3a60d663023bfda0c0d4e5c3c9b8a0054386813afb3bd2c54b8db7325841c48cf04379ebbb7c52d630e433811b8d88a8b25f4d51a14a8c9d4e84c007e530bb754fa1996d5293d8348e4e48832fcd8e0919c6f0f50e50bcc6191a8ab3ca42", 0xd5) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/connector\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="00000300000011", @ANYRES8=r6, @ANYRES32=r0, @ANYRES16=r3, @ANYBLOB="ab49b01cf15000f66e77c70e19b3e48b213ef1796fb54876cae5b42b35e3fc7952bab83906d46e6c550bc6da164e35d8aa54649fed979969900343680347ea112c5d5047d518b1c06bcc81f1155e8fd61099f1cbdab09fc9fa12bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="7000000014007b00000000610baf80102d"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3m6.804366831s ago: executing program 5 (id=1945): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x20800, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000000c0)={0x3, 0x24, 0x0, 0x14, 0x4, 0x8000c0, 0x9, 0x10f, 0x1}) 3m6.6970489s ago: executing program 5 (id=1946): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) add_key(0x0, &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioprio_set$pid(0x3, 0x0, 0x4007) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40800, 0x0) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {r1}}, '\x00'}) add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0xfffff, 0xfffffffffffffffe) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x64c546c48307211d) socket$qrtr(0x2a, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 3m4.779924696s ago: executing program 5 (id=1950): socket$unix(0x1, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file1/file0/file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[], [], 0x2f}) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) 3m3.84475885s ago: executing program 33 (id=1906): gettid() timer_create(0x0, 0x0, &(0x7f0000000040)) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r1, &(0x7f0000000640)={0x14, &(0x7f0000000100)={0x40, 0x24, 0x2a, {0x2a, 0xa, "e4ddd6532558a0d3fc182ef7307c894a25485e45a828e12d87fd3aff3012902852b020cba7730df5"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1401}}}, &(0x7f0000000300)={0x2c, &(0x7f00000001c0)={0x20, 0x13, 0x2a, "08df743e7f0df54dca471df91fab98c5b217b1f229b7073c89f98c256b0bd9bc56105262985e116324c0"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000280), &(0x7f00000002c0)={0x40, 0x5, 0x3, "fe270e"}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) unlink(0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYRESHEX=r0], 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3m2.568342754s ago: executing program 5 (id=1961): openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x24}}, 0x42094) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m56.8703489s ago: executing program 0 (id=1974): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0x2, 0x6a, 0xa, 0x3, 0x0, 0x85, 0x6, 0x21, 0x85, 0x0, 0x81, 0x4c, 0x2}, 0xe) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0xa8400, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x6, 0x1000000}) syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000400)={0x1f, 0x3, 0x2}, 0x6) write$binfmt_misc(r2, &(0x7f0000000540)="6012e2df8bc4076397811a6563f2e05960f8ce40b0ee67d207a9b80e00c148c2cc203324b5ca9cd376f78c90d18eabf6887a3973eccde9d664977c5b338f7e2471c8172630522782bc2ba9e507971fe9d6e903ca4ff5e7bd37200284cd1ecd8c2105cd5c37c0e5617276fa12317ef462787c8319b24a6f3a60d663023bfda0c0d4e5c3c9b8a0054386813afb3bd2c54b8db7325841c48cf04379ebbb7c52d630e433811b8d88a8b25f4d51a14a8c9d4e84c007e530bb754fa1996d5293d8348e4e48832fcd8e0919c6f0f50e50bcc6191a8ab3ca42", 0xd5) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/connector\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="00000300000011", @ANYRES8=r6, @ANYRES32=r0, @ANYRES16=r3, @ANYBLOB="ab49b01cf15000f66e77c70e19b3e48b213ef1796fb54876cae5b42b35e3fc7952bab83906d46e6c550bc6da164e35d8aa54649fed979969900343680347ea112c5d5047d518b1c06bcc81f1155e8fd61099f1cbdab09fc9fa12bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="7000000014007b00000000610baf80102d"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2m52.852930507s ago: executing program 0 (id=1989): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCXONC(r1, 0x540a, 0x2) r2 = syz_io_uring_setup(0x233, &(0x7f00000002c0)={0x0, 0x0, 0x10100, 0x0, 0x30}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000340)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030346532302c006f4e79a977e1a92aaed4ae9f916f1930e31edd6a4e25fc8f964ee1f91e929db673356d1339d74bd5949753e5fc1f59d23fd6a5612c14aeaf5e6ca44610d46ef336d67930fb3e18627b2de3048e8c71f3b16dfbd13c6cd36639100ed508cf57c1d84ddcceeb1222bf3a294baa5b23b8ec199f0f0c742a23e5ba8999417300d57f06b920bdaf606716d36d8eb042f87cb60c90a5e7ff61343db82c7adfb41a33dd7ca82e6a6c2c69151b0af004d1427ae0fe8093e273daae957f6e3b952836649c4eac3d1f"]) ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f0000000040)) io_uring_enter(r2, 0x207a98, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000200)=""/128, 0x80) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x8040850) 2m51.544857312s ago: executing program 0 (id=1994): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) lsm_set_self_attr(0x68, 0x0, 0x20, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r7, r4, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x37, &(0x7f00000007c0)=ANY=[], 0x0) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x24, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) r10 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000001780)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001740)={0x0}, 0x1, 0x0, 0x0, 0x4051}, 0x20000800) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) memfd_secret(0x80000) ioctl$vim2m_VIDIOC_STREAMOFF(r9, 0x40045612, &(0x7f0000000080)=0x2) ioctl$USBDEVFS_CLEAR_HALT(r8, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) 2m48.458002586s ago: executing program 0 (id=2000): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0x2, 0x6a, 0xa, 0x3, 0x0, 0x85, 0x6, 0x21, 0x85, 0x0, 0x81, 0x4c, 0x2}, 0xe) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0xa8400, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x6, 0x1000000}) syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000400)={0x1f, 0x3, 0x2}, 0x6) write$binfmt_misc(r2, &(0x7f0000000540)="6012e2df8bc4076397811a6563f2e05960f8ce40b0ee67d207a9b80e00c148c2cc203324b5ca9cd376f78c90d18eabf6887a3973eccde9d664977c5b338f7e2471c8172630522782bc2ba9e507971fe9d6e903ca4ff5e7bd37200284cd1ecd8c2105cd5c37c0e5617276fa12317ef462787c8319b24a6f3a60d663023bfda0c0d4e5c3c9b8a0054386813afb3bd2c54b8db7325841c48cf04379ebbb7c52d630e433811b8d88a8b25f4d51a14a8c9d4e84c007e530bb754fa1996d5293d8348e4e48832fcd8e0919c6f0f50e50bcc6191a8ab3ca42", 0xd5) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/connector\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="00000300000011", @ANYRES8=r6, @ANYRES32=r0, @ANYRES16=r3, @ANYBLOB="ab49b01cf15000f66e77c70e19b3e48b213ef1796fb54876cae5b42b35e3fc7952bab83906d46e6c550bc6da164e35d8aa54649fed979969900343680347ea112c5d5047d518b1c06bcc81f1155e8fd61099f1cbdab09fc9fa12bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="7000000014007b00000000610baf80102d"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2m47.119517802s ago: executing program 34 (id=1961): openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x24}}, 0x42094) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m45.209458567s ago: executing program 0 (id=2009): socket$unix(0x1, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file1/file0/file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) 2m42.949687435s ago: executing program 0 (id=2016): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) timer_create(0x5, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=r0}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r1 = memfd_secret(0x80000) syz_clone(0x242ec00, &(0x7f0000000340)="3e7a141eec36bab6b1c60b5b83ab92b81f48aae822fe1b03a1cc9687dfe9ddb36f6b8d98f34c9b342f2b109071f89ae4df99c422b348a294955c3c737e8a308561971ffd7ed3fdac822f5897168130c60eda8e25fe8bf8307665b0316db03b3fa8d3039ab27e71d0953ed51b732a5cd3b966e3b047ff9f1649c0be872694861d2c99c0d738363da0028b507a648e", 0x8e, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f0000000780)="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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="7cbb0001020603000000000000050000060000000000001a000900020073797a31000600000400078012e92d32fa01df82020000000500050007000000777238b329452f866a1142ffdaa471c8656b31a16083e5ea60cf5f7fab26bc9ccfb4f3ba301180d65a00fe9b64baebbe99086a7283bc3adc7f3bab19ee4646577db24fff8e846f19095bdb"], 0x44}}, 0x20004000) read$msr(r2, &(0x7f0000004c00)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYRES16=r3], 0x18) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r5, 0xa, 0x13) fcntl$setlease(r5, 0x400, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = getpid() fcntl$setownex(r6, 0xf, &(0x7f0000000100)={0x2, r7}) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r5, 0x8, r8) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r4, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) 2m27.351527613s ago: executing program 35 (id=2016): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) timer_create(0x5, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=r0}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r1 = memfd_secret(0x80000) syz_clone(0x242ec00, &(0x7f0000000340)="3e7a141eec36bab6b1c60b5b83ab92b81f48aae822fe1b03a1cc9687dfe9ddb36f6b8d98f34c9b342f2b109071f89ae4df99c422b348a294955c3c737e8a308561971ffd7ed3fdac822f5897168130c60eda8e25fe8bf8307665b0316db03b3fa8d3039ab27e71d0953ed51b732a5cd3b966e3b047ff9f1649c0be872694861d2c99c0d738363da0028b507a648e", 0x8e, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f0000000780)="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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="7cbb0001020603000000000000050000060000000000001a000900020073797a31000600000400078012e92d32fa01df82020000000500050007000000777238b329452f866a1142ffdaa471c8656b31a16083e5ea60cf5f7fab26bc9ccfb4f3ba301180d65a00fe9b64baebbe99086a7283bc3adc7f3bab19ee4646577db24fff8e846f19095bdb"], 0x44}}, 0x20004000) read$msr(r2, &(0x7f0000004c00)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYRES16=r3], 0x18) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r5, 0xa, 0x13) fcntl$setlease(r5, 0x400, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = getpid() fcntl$setownex(r6, 0xf, &(0x7f0000000100)={0x2, r7}) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r5, 0x8, r8) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r4, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) 2m16.901476561s ago: executing program 7 (id=2085): ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0xffffffffffffffff, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0e81, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r1, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0x9, 0x3f, 0x4, "3eccd25569e20900"}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016000f003f1b48013d030100000000009500000000000000bc26000000000000bf67000000000000070600000fff07006702000003000000360600000ee600f0bf052000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x1, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000019480)={0x2, 0x4e27, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x4) splice(r3, 0x0, r2, 0x0, 0x7ffff000, 0xa) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000480)=""/102390, 0xfffffffffffffd6a) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) socket$inet(0x2, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x169142, 0x0) fcntl$setlease(r6, 0x400, 0x1) fchown(r6, 0x0, 0x0) getsockopt$inet_buf(r5, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) 2m15.051914179s ago: executing program 7 (id=2091): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r3) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002000101000008000a000100000008001800ac1414aa080019"], 0x44}}, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448ca, 0x0) sched_getscheduler(r0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000080)=@req3={0x0, 0x200, 0x80, 0x20000, 0xddb, 0x0, 0x8}, 0x1c) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_j1939(r6, &(0x7f0000000380)={&(0x7f0000000280)={0x1d, r7, 0x0, {0x0, 0xf0, 0x7}, 0xff}, 0x18, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0xc0000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d0001000000000004086aa42d"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYRES64=r1, @ANYRES16=r0], 0x6c}, 0x1, 0x0, 0x0, 0x4042841}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r8, &(0x7f0000000140), 0x4924b68, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 2m13.429056495s ago: executing program 7 (id=2095): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x2) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) prctl$PR_SCHED_CORE(0x4d, 0x2, 0x0, 0x0, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1f, 0x12, r2, 0x80000000) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x4048aec9, &(0x7f0000000980)={0x0, 0x0, @ioapic={0x4, 0x296a, 0x4, 0x5, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0xf5}, {0xe9, 0x1, 0x9, '\x00', 0x11}, {0x7, 0x9, 0x3, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xaa}, {0x6, 0x8, 0x7, '\x00', 0x8}, {0x1, 0x3, 0x2, '\x00', 0x67}, {0x2, 0x7, 0xa, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x40, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x2a, 0x5e, 0x3, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x2, 0x2, '\x00', 0xa7}, {0x5, 0x0, 0xf, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x0, 0x9, 0x7, '\x00', 0x4}, {0x93, 0x47, 0x9, '\x00', 0x10}, {0x2, 0x8, 0xc, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) keyctl$set_timeout(0xf, r3, 0xd6) 2m13.063906455s ago: executing program 7 (id=2096): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0x2, 0x6a, 0xa, 0x3, 0x0, 0x85, 0x6, 0x21, 0x85, 0x0, 0x81, 0x4c, 0x2}, 0xe) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0xa8400, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x6, 0x1000000}) syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000400)={0x1f, 0x3, 0x2}, 0x6) write$binfmt_misc(r2, &(0x7f0000000540)="6012e2df8bc4076397811a6563f2e05960f8ce40b0ee67d207a9b80e00c148c2cc203324b5ca9cd376f78c90d18eabf6887a3973eccde9d664977c5b338f7e2471c8172630522782bc2ba9e507971fe9d6e903ca4ff5e7bd37200284cd1ecd8c2105cd5c37c0e5617276fa12317ef462787c8319b24a6f3a60d663023bfda0c0d4e5c3c9b8a0054386813afb3bd2c54b8db7325841c48cf04379ebbb7c52d630e433811b8d88a8b25f4d51a14a8c9d4e84c007e530bb754fa1996d5293d8348e4e48832fcd8e0919c6f0f50e50bcc6191a8ab3ca42", 0xd5) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/connector\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="00000300000011", @ANYRES8=r6, @ANYRES32=r0, @ANYRES16=r3, @ANYBLOB="ab49b01cf15000f66e77c70e19b3e48b213ef1796fb54876cae5b42b35e3fc7952bab83906d46e6c550bc6da164e35d8aa54649fed979969900343680347ea112c5d5047d518b1c06bcc81f1155e8fd61099f1cbdab09fc9fa12bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="7000000014007b00000000610baf80102d"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2m8.82823286s ago: executing program 7 (id=2107): socket$unix(0x1, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file1/file0/file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) 2m4.267311619s ago: executing program 7 (id=2115): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {&(0x7f0000000280)}], 0x2}], 0x1, 0x0) 1m49.033788875s ago: executing program 36 (id=2115): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {&(0x7f0000000280)}], 0x2}], 0x1, 0x0) 1m38.838994434s ago: executing program 6 (id=2189): openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x24}}, 0x42094) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) inotify_init1(0x0) r5 = memfd_secret(0x0) ioctl$SG_GET_VERSION_NUM(r5, 0x2282, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r6, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902240001000000000904000001030000000921000000"], 0x0) write$sysctl(r6, &(0x7f00000000c0)='2\x00', 0x2) 1m34.716784674s ago: executing program 6 (id=2196): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, 0x0, 0x10) 1m34.539920037s ago: executing program 6 (id=2198): syz_clone3(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x21, &(0x7f0000000000)=ANY=[@ANYBLOB='=3,nr_inode']) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000001b40)={'bond0\x00', {0x2, 0x4e20, @empty}}) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYRESDEC], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x20800, 0x0) ioctl$RTC_UIE_ON(r5, 0x7003) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f00000000c0)={0x3, 0x24, 0x0, 0x14, 0x4, 0x8000c0, 0x9, 0x10f, 0x1}) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) writev(r2, &(0x7f0000000080), 0x0) 1m31.175827958s ago: executing program 6 (id=2207): syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000045c0)=[{{&(0x7f0000000340)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000800), 0x7}, 0x2}, {{&(0x7f0000000880)=@qipcrtr, 0x80, &(0x7f0000001a80)=[{&(0x7f0000000900)=""/4096, 0xdfd}, {&(0x7f0000001900)=""/17, 0x11}, {&(0x7f0000001940)=""/184, 0xb8}, {&(0x7f0000001a00)=""/69, 0x45}], 0x4, &(0x7f0000001ac0)=""/194, 0xc2}, 0x947e}, {{&(0x7f0000001bc0)=@phonet, 0x80, &(0x7f0000003e80)=[{&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/183, 0xb7}, {&(0x7f0000004700)=""/108, 0x6c}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/247, 0xfb}], 0x5, &(0x7f0000003f00)=""/228, 0xf0}, 0xff}, {{&(0x7f0000004000)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000004180)=[{&(0x7f0000004080)=""/251, 0xfb}], 0x1, &(0x7f0000004440)=""/99, 0x71}, 0x5}, {{&(0x7f0000004240)=@un=@abs, 0x80, &(0x7f0000004540)=[{&(0x7f00000042c0)=""/166, 0xa6}, {&(0x7f00000003c0)=""/78, 0x4e}, {&(0x7f0000004400)=""/22, 0x16}, {&(0x7f0000002d00)=""/108, 0x6c}, {&(0x7f00000044c0)=""/107, 0x6b}], 0x5}, 0x44dd}], 0x5, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xc}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xf, &(0x7f00000001c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000900)=r4, 0x4) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e0200", 0x4}], 0x1}, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000200)={'pim6reg0\x00'}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x1000, 0x4, 0x10000000, 0xc}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2cee200016000000", @ANYRES32=0x0, @ANYBLOB="14000100200100"/18], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket(0x10, 0x2, 0x0) ioctl$TCFLSH(r2, 0x400455c8, 0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xb2) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r8, 0x12, 0x3, &(0x7f00000002c0)=0x70, 0x4) socket$pppl2tp(0x18, 0x1, 0x1) 1m28.639771939s ago: executing program 6 (id=2219): socket$unix(0x1, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file1/file0/file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_open_dev$vim2m(0x0, 0x0, 0x2) 1m26.845945161s ago: executing program 6 (id=2226): r0 = socket$pppoe(0x18, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000002c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) connect$pppoe(r0, &(0x7f0000000300)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) sendmmsg(r0, &(0x7f0000009140)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000005280)="b8", 0x1}], 0x1}}], 0x34000, 0x0) 1m11.166477644s ago: executing program 37 (id=2226): r0 = socket$pppoe(0x18, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000002c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) connect$pppoe(r0, &(0x7f0000000300)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) sendmmsg(r0, &(0x7f0000009140)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000005280)="b8", 0x1}], 0x1}}], 0x34000, 0x0) 11.144054838s ago: executing program 1 (id=2461): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0xf5, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRES16=r6], 0x28}, 0x1, 0x2000000, 0x0, 0x4040000}, 0x20000010) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000feffffff850000007100000095"], &(0x7f0000001080)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet(0x10, 0x3, 0x0) r8 = socket$inet6(0xa, 0xa, 0x8) setsockopt$inet_int(r8, 0x0, 0x13, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000007f0000000000004dea3d000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080009000000000007000000850000000600230085000000110000009500"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000000)='tlb_flush\x00', r11}, 0x18) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r9, {}, {0xffff, 0xffff}, {0x2}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x3f}}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) 9.903656463s ago: executing program 1 (id=2463): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) timer_create(0x5, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=r0}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) syz_clone(0x242ec00, &(0x7f0000000340)="3e7a141eec36bab6b1c60b5b83ab92b81f48aae822fe1b03a1cc9687dfe9ddb36f6b8d98f34c9b342f2b109071f89ae4df99c422b348a294955c3c737e8a308561971ffd7ed3fdac822f5897168130c60eda8e25fe8bf8307665b0316db03b3fa8d3039ab27e71d0953ed51b732a5cd3b966e3b047ff9f1649c0be872694861d2c99c0d738363da0028b507a648e", 0x8e, 0x0, &(0x7f0000000280), &(0x7f0000000780)="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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="7cbb0001020603000000000000050000060000000000001a000900020073797a31000600000400078012e92d32fa01df82020000000500050007000000777238b329452f866a1142ffdaa471c8656b31a16083e5ea60cf5f7fab26bc9ccfb4f3ba301180d65a00fe9b64baebbe99086a7283bc3adc7f3bab19ee4646577db24fff8e846f19095bdb"], 0x44}}, 0x20004000) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYRES16=r2], 0x18) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r4, 0xa, 0x13) fcntl$setlease(r4, 0x400, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = getpid() fcntl$setownex(r5, 0xf, &(0x7f0000000100)={0x2, r6}) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r4, 0x8, r7) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r3, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) 9.812585625s ago: executing program 9 (id=2464): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x4080) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) socket(0x8, 0x80000, 0x0) write$sndseq(r6, 0x0, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000000040)=0x0) r9 = getpid() ioctl$SG_BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000300)={'\x00', 0xde4, 0x2, 0x8001, 0xfb, 0x6af, r9}) timer_settime(r8, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = dup(r2) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$inet6(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)="781b1b8db5ef30ce7ed14d1d3af4721f4b6ed78570b97412d1e58e195e200603d557df1c3495920833c17b12cc9f391bb01f8f57e79035fbdb9f7fb2", 0x3c}], 0x1, &(0x7f0000000440)=ANY=[], 0x78}, 0x10) 9.063912249s ago: executing program 9 (id=2466): socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x1, 0xfffffff9) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='cachefiles_read\x00', r0, 0x0, 0x10000000000000}, 0xfffffffffffffe73) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0x5000000}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) brk(0x200000ffa000) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x2000, 0x2}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, @dev, @dev, 0x80, 0x0, 0x1, 0x1}}) syslog(0x4, &(0x7f0000000140)=""/179, 0xb3) 8.129495046s ago: executing program 9 (id=2468): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000030000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e22, 0x20000c, @mcast1, 0xbd0}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)='c', 0x1}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYRESHEX=r2], 0x10b8}, 0x146) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) fanotify_init(0x10, 0x101000) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x151101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0xe19, &(0x7f0000000500)={0x0, 0xf801, 0x10100, 0x0, 0x229, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r7, 0x8982, 0x0) socket$alg(0x26, 0x5, 0x0) socket(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r9, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x8, 0x5, 0x10, 0x20000, 0x1, 0xb46, 0x8, 0x8, 0x4, 0x3}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x15) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) 7.071623917s ago: executing program 4 (id=2472): socket$inet6(0xa, 0x805, 0x0) (async) r0 = socket$inet6(0xa, 0x805, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x181000) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0xa000, 0x0) inotify_add_watch(r2, 0x0, 0x20000020) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x2, 0x6}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) keyctl$restrict_keyring(0x1d, 0xfffffffffffffffd, &(0x7f0000000000)='logon\x00', &(0x7f0000000040)='{-(!\\+\x1a\x00') write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x9, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r4, 0x7}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x9, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r4, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000500)=0x4, r4, 0x0, 0x2, 0x4}}, 0x20) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000240)) 6.700056263s ago: executing program 4 (id=2474): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r1, r2, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(0xffffffffffffffff, 0x3b8b, &(0x7f0000000080)={0x10, 0x1, r3}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(0xffffffffffffffff, 0x3b8b, &(0x7f0000000040)={0x10, 0x0, r3}) 6.688477446s ago: executing program 1 (id=2475): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x10, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0xa) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r3, 0x118, 0x4, 0x0, &(0x7f0000000000)=0xffffffffffffff5b) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x6) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB="0801000039abc700000000000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x30}, 0x880) socket$inet6_udplite(0xa, 0x2, 0x88) pipe(&(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, &(0x7f0000000100)={0x3}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000fef000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\t\x00\x00\x00\a'], 0x50) r5 = io_uring_setup(0x7597, &(0x7f0000000040)={0x0, 0x20c8a1, 0x800, 0x800008, 0x200d1, 0x0, r1}) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000400)='yeah\x00', 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac76189f17aab3d61b4fedb18004c3747c8f069fb4d7d23129a7ce69ee6f7d47721e11a96e56d47ea7632c39ed127affe54ca4864e6dc299d1f0598e310fe429a178f3cef5ea", @ANYRES16=r4, @ANYBLOB="040026bd7000fedbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) 6.635832644s ago: executing program 9 (id=2476): syz_clone3(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000001b40)={'bond0\x00', {0x2, 0x4e20, @empty}}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYRESDEC], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x20800, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) 6.025598557s ago: executing program 4 (id=2478): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010700000000000000006700000008003d"], 0x1c}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a202, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000040)={'team_slave_0\x00', @multicast}) 5.817052256s ago: executing program 8 (id=2479): bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) getsockname$packet(0xffffffffffffffff, &(0x7f0000001f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0xfffffffffffffd98) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000500)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x110) r6 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180), &(0x7f0000000040), 0x1d4, r6) 5.816677023s ago: executing program 1 (id=2480): bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) getsockname$packet(0xffffffffffffffff, &(0x7f0000001f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0xfffffffffffffd98) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000500)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x110) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76"]) r6 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180), &(0x7f0000000040), 0x1d4, r6) 4.202704325s ago: executing program 3 (id=2481): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000480), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') lseek(r1, 0x2000, 0x0) 4.18056207s ago: executing program 4 (id=2482): arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000000)) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000040)) (async) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000080)) (async) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f00000000c0)) syz_open_dev$dmmidi(&(0x7f0000000100), 0x2, 0x20800) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000140)) (async) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000180)) (async) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f00000001c0)) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000200)) (async) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000240)) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000280)) socket$nl_generic(0x10, 0x3, 0x10) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f00000002c0)) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000300)) (async) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x8800, 0x0) mkdirat$cgroup(r0, &(0x7f0000000380)='syz1\x00', 0x1ff) socket$rxrpc(0x21, 0x2, 0xa) (async) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f00000003c0)) (async) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000400)) (async) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000440)) (async) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000480)) (async) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f00000004c0)) (async) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000500)) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x100) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000580)=""/200) (async) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000680)) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f00000006c0)=""/4096) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f00000016c0)) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000001700)) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000001740)) 3.987480736s ago: executing program 1 (id=2483): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0x114, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xd8, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xc0, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x5c, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x29, 0x6, "0ef6a460a5bbda16e826eafe044d3376872c48b74ae60f057b238fb15e2207986c5639bfbc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x114}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xffc3}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 3.980513665s ago: executing program 8 (id=2484): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x1f000000, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(r3, 0x1, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3200) socket$inet_smc(0x2b, 0x1, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) timer_settime(r3, 0x1, 0x0, 0x0) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000080)=0x7) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x2, 0x3}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/4, 0x4}, {0x0}], 0x2}) 3.528596446s ago: executing program 4 (id=2485): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) timer_create(0x5, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=r0}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) syz_clone(0x242ec00, &(0x7f0000000340)="3e7a141eec36bab6b1c60b5b83ab92b81f48aae822fe1b03a1cc9687dfe9ddb36f6b8d98f34c9b342f2b109071f89ae4df99c422b348a294955c3c737e8a308561971ffd7ed3fdac822f5897168130c60eda8e25fe8bf8307665b0316db03b3fa8d3039ab27e71d0953ed51b732a5cd3b966e3b047ff9f1649c0be872694861d2c99c0d738363da0028b507a648e", 0x8e, &(0x7f00000001c0), 0x0, &(0x7f0000000780)="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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="7cbb0001020603000000000000050000060000000000001a000900020073797a31000600000400078012e92d32fa01df82020000000500050007000000777238b329452f866a1142ffdaa471c8656b31a16083e5ea60cf5f7fab26bc9ccfb4f3ba301180d65a00fe9b64baebbe99086a7283bc3adc7f3bab19ee4646577db24fff8e846f19095bdb"], 0x44}}, 0x20004000) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYRES16=r2], 0x18) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r4, 0xa, 0x13) fcntl$setlease(r4, 0x400, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = getpid() fcntl$setownex(r5, 0xf, &(0x7f0000000100)={0x2, r6}) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r4, 0x8, r7) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r3, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) 3.526414269s ago: executing program 3 (id=2486): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB='trans=', @ANYRESHEX, @ANYBLOB=',wfd']) 3.480676088s ago: executing program 1 (id=2487): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "17321748"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3445}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000140)={0x20, 0x23, 0x79, {0x79, 0x3, "6e8e0806983d9a7b535c604d4d576b8ee72fb1621146c5205d490b0e1c6eb642bfbf5fa2e11ee6cfb1f5dbffe3a945cf8aceb277c50cfa2a5dfd12426afa27292d0c320f89bd4716a295e54e2c2390ade904accc0d90921888ebacd9d68a8cd4ea7be9b1230bd31193a15c04ae3903b99e13f0b3d6f57e"}}, &(0x7f0000000040)={0x0, 0x3, 0x11, @string={0x11, 0x3, "34f47ee3d03ac75dde4d3745edc681"}}, &(0x7f00000001c0)={0x0, 0xf, 0x74, {0x5, 0xf, 0x74, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "ca39ec738f6f37c6877fe910de8f39a0"}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "dc903a0639e4112180b649eb329ade96"}, @ss_container_id={0x14, 0x10, 0x4, 0xd, "1b333d8da0a63dddf2a7181eeb63542d"}, @ss_container_id={0x14, 0x10, 0x4, 0xa, "e6cf58335740f8ddc8b5829298de2ea0"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x12, 0x7, 0x0, 0x400, 0x8}, @ssp_cap={0x14, 0x10, 0xa, 0x10, 0x2, 0xff, 0xff00, 0xfff, [0x18030, 0x0]}]}}, &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x2, 0x1, 0x3, "cc9a1d69", "ca5b7f25"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x18, 0x19, 0x4, 0x4, 0x0, 0x5}}}, &(0x7f0000000840)={0x84, &(0x7f00000003c0)={0x20, 0x11, 0x3d, "9078d24b221d768233b72da2749303ccd986505452ca7df261e085d309cb7ed4c4a3b64487bbcfd15e683832e95f7ba98297ccc92bdf9c7b0ea7679d3a"}, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000500)={0x20, 0x0, 0x8, {0x1000, 0x20, [0xf00]}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x101}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000600)={0x40, 0xb, 0x2, "9c04"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x400}, &(0x7f0000000680)={0x40, 0x13, 0x6, @random="7f9167b70ae2"}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000700)={0x40, 0x19, 0x2, "3b8c"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x1000}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0xfd}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x40}}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000280)={0x5, 0xfe, 0x8006}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000a80)={0x0, 0x6, 0x0, 'queue1\x00', 0x1000}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) 2.415790614s ago: executing program 8 (id=2488): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x2, &(0x7f0000000000)) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x5) 2.37685243s ago: executing program 3 (id=2489): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getrlimit(0x8, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000002c0)={0x0, 0x4, 0x6, 0x7fff, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x20}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0xff, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x20040768, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) mount$overlay(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x400, &(0x7f0000000600)={[{@metacopy_off}, {@uuid_off}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@default_permissions}, {@metacopy_on}], [{@flag='sync'}, {@smackfsroot={'smackfsroot', 0x3d, '.@'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@flag='nomand'}, {@hash}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) sendto(r2, &(0x7f0000000780)="7057da", 0x3, 0x24000011, 0x0, 0x0) 2.347602392s ago: executing program 9 (id=2490): syz_emit_ethernet(0x0, 0x0, 0x0) 2.075818194s ago: executing program 9 (id=2491): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x5761, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000340)={0x385d, 0x1, "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"}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = memfd_secret(0x0) r4 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x28, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0xeb, 0x0, 0x1, [@typed={0x6, 0x20, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'veth0_virt_wifi\x00', 0x1000}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) poll(&(0x7f0000000800)=[{0xffffffffffffffff, 0x200}], 0x1, 0x1ad) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800024000000019140000001100"], 0xd8}}, 0x80) socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) 1.941355328s ago: executing program 8 (id=2492): socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x1, 0xfffffff9) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='cachefiles_read\x00', r0, 0x0, 0x10000000000000}, 0xfffffffffffffe73) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0x5000000}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) brk(0x200000ffa000) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x2000, 0x2}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, @dev, @dev, 0x80, 0x0, 0x1, 0x1}}) syslog(0x4, &(0x7f0000000140)=""/179, 0xb3) 1.470004095s ago: executing program 3 (id=2493): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0xf0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x4000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 1.175727271s ago: executing program 3 (id=2494): bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) getsockname$packet(0xffffffffffffffff, &(0x7f0000001f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0xfffffffffffffd98) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000500)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x110) r6 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180), &(0x7f0000000040), 0x1d4, r6) 214.796591ms ago: executing program 3 (id=2495): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002380)={0x10, 0x1406, 0x1, 0x70bd26, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x8040) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x110}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x2f, 0x6, 0x5, 0x401, 0x22, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x700, 0x8, 0x800}}) 205.668164ms ago: executing program 8 (id=2496): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b34, 0x800000000) 72.944824ms ago: executing program 4 (id=2497): syz_clone3(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x21, &(0x7f0000000000)=ANY=[@ANYBLOB='=3,nr_inode']) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000001b40)={'bond0\x00', {0x2, 0x4e20, @empty}}) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYRESDEC], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x20800, 0x0) ioctl$RTC_UIE_ON(r5, 0x7003) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f00000000c0)={0x3, 0x24, 0x0, 0x14, 0x4, 0x8000c0, 0x9, 0x10f, 0x1}) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) writev(r2, &(0x7f0000000080), 0x0) 0s ago: executing program 8 (id=2498): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x28, 0x0, 0x400, 0x2, 0x8, 0xa, 0x2, 0x0, 0xc82b}}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x8003, 0x4, 0x80000001, 0x6, 0x67, 0x6357, 0x8, 0x7, 0x50b, 0xfffffffc, 0xfffffffe, 0x1, 0x3, 0x1, 0x6, 0xfffffeff, 0x979d, 0x1a44d, 0xf7ffffe3, 0x40000003, 0x89, 0x2, 0xf27, 0x20001e58, 0xfffffbff, 0x8, 0x3c, 0xf767, 0xf, 0x10000, 0xfffffff8]}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x10800) write$sndseq(r2, &(0x7f0000000080)=[{0x2d, 0x9, 0x9, 0x8, @tick=0xe7, {0xff}, {0x9a, 0x4}, @connect={{0x4}, {0xfa, 0xef}}}], 0x1c) kernel console output (not intermixed with test programs): mm="syz.1.1803" path="/349/file1/file0" dev="autofs" ino=36708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 547.728295][ T30] audit: type=1400 audit(1758470506.306:742): avc: denied { listen } for pid=12531 comm="syz.4.1812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 547.930190][T12539] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1814'. [ 548.029053][T12542] IPVS: sync thread started: state = BACKUP, mcast_ifn = geneve0, syncid = 2, id = 0 [ 549.264152][T12555] netlink: 'syz.2.1819': attribute type 61 has an invalid length. [ 551.041967][ T30] audit: type=1326 audit(1758470509.606:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12578 comm="syz.4.1827" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f48fc98ec29 code=0x0 [ 551.211331][ T5903] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 551.421534][ T5903] usb 1-1: device descriptor read/64, error -71 [ 551.562018][T12594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.580115][T12594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.734300][ T5903] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 551.891633][ T5903] usb 1-1: device descriptor read/64, error -71 [ 552.001462][ T5903] usb usb1-port1: attempt power cycle [ 552.385687][T12603] netlink: 'syz.2.1832': attribute type 61 has an invalid length. [ 552.791777][ T5903] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 552.823832][ T5903] usb 1-1: device descriptor read/8, error -71 [ 553.499418][ T5903] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 553.515569][ T30] audit: type=1400 audit(1758470511.706:744): avc: denied { mounton } for pid=12604 comm="syz.4.1833" path="/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 553.546467][ T5903] usb 1-1: device descriptor read/8, error -71 [ 553.760388][ T5903] usb usb1-port1: unable to enumerate USB device [ 553.802488][T12615] batman_adv: batadv0: Removing interface: dummy0 [ 555.381571][T12639] bridge: RTM_NEWNEIGH with invalid ether address [ 555.393611][T12639] tipc: Enabling of bearer rejected, failed to enable media [ 555.531531][T12647] 9pnet_fd: Insufficient options for proto=fd [ 555.561012][ T30] audit: type=1400 audit(1758470514.126:745): avc: denied { ioctl } for pid=12643 comm="syz.2.1844" path="socket:[37580]" dev="sockfs" ino=37580 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 555.661882][T12653] netlink: 'syz.3.1843': attribute type 13 has an invalid length. [ 556.268242][T12664] openvswitch: netlink: Flow key attr not present in new flow. [ 556.367350][T12653] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.381483][ T5903] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 556.433246][T12653] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 556.565711][ T5903] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.576192][ T5903] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 556.592924][ T5903] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 556.703586][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.043066][ T5903] usb 1-1: config 0 descriptor?? [ 557.096950][ T5903] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 559.161744][ T5910] usb 1-1: USB disconnect, device number 48 [ 559.420690][T12679] gfs2: path_lookup on & f returned error -2 [ 559.702254][T12684] overlayfs: failed to clone upperpath [ 561.098458][T12699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1856'. [ 562.195191][T12709] 9pnet_fd: Insufficient options for proto=fd [ 562.557642][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.564217][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.161994][ T841] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 564.209066][T12737] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 564.228135][T12737] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 564.237474][T12737] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 564.255735][T12737] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 564.265092][T12737] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 564.445522][ T30] audit: type=1400 audit(1758470522.856:746): avc: denied { mounton } for pid=12736 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 564.511850][ T841] usb 1-1: Using ep0 maxpacket: 32 [ 564.556571][ T841] usb 1-1: config 0 interface 0 has no altsetting 0 [ 564.750552][ T841] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 564.906001][ T841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.924490][ T841] usb 1-1: Product: syz [ 564.928948][ T841] usb 1-1: Manufacturer: syz [ 564.935148][ T841] usb 1-1: SerialNumber: syz [ 564.958911][ T841] usb 1-1: config 0 descriptor?? [ 564.971930][ T841] gs_usb 1-1:0.0: Required endpoints not found [ 565.010269][T12736] vxcan1 speed is unknown, defaulting to 1000 [ 565.296217][T12754] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1871'. [ 565.410166][T12736] lo speed is unknown, defaulting to 1000 [ 565.798323][ T2997] bridge_slave_1: left allmulticast mode [ 565.808287][ T2997] bridge_slave_1: left promiscuous mode [ 565.842213][ T2997] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.273198][ T2997] bridge_slave_0: left allmulticast mode [ 566.280674][ T2997] bridge_slave_0: left promiscuous mode [ 566.330541][ T2997] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.359056][ T841] usb 1-1: USB disconnect, device number 49 [ 566.391436][ T5852] Bluetooth: hci5: command tx timeout [ 566.506755][T12766] 9pnet_fd: Insufficient options for proto=fd [ 566.706938][ T841] kernel write not supported for file bpf-prog (pid: 841 comm: kworker/0:2) [ 568.562273][ T5852] Bluetooth: hci5: command tx timeout [ 568.734598][T12736] chnl_net:caif_netlink_parms(): no params data found [ 568.972256][ T2997] : left promiscuous mode [ 569.208203][T12805] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1882'. [ 569.977242][T12805] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1882'. [ 570.003328][ T2997] tipc: Left network mode [ 570.334527][T12736] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.372218][T12819] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1886'. [ 570.664610][ T5852] Bluetooth: hci5: command tx timeout [ 570.674843][T12736] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.804090][T12736] bridge_slave_0: entered allmulticast mode [ 570.885411][T12736] bridge_slave_0: entered promiscuous mode [ 571.046394][T12736] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.061439][T12736] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.069715][T12736] bridge_slave_1: entered allmulticast mode [ 571.079110][T12736] bridge_slave_1: entered promiscuous mode [ 571.210327][T12736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.229213][T12736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.356416][T12736] team0: Port device team_slave_0 added [ 571.374632][T12736] team0: Port device team_slave_1 added [ 571.576422][ T2997] hsr_slave_0: left promiscuous mode [ 571.584220][ T2997] hsr_slave_1: left promiscuous mode [ 571.590260][ T2997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 572.026294][ T2997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 572.044113][ T2997] batman_adv: batadv0: Removing interface: dummy0 [ 572.712120][ T5852] Bluetooth: hci5: command tx timeout [ 573.458262][T12858] CIFS mount error: No usable UNC path provided in device string! [ 573.458262][T12858] [ 573.468436][T12858] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 575.490145][ T2997] team0 (unregistering): Port device team_slave_1 removed [ 575.622210][T12885] overlayfs: missing 'lowerdir' [ 575.630247][ T2997] team0 (unregistering): Port device team_slave_0 removed [ 576.294685][T12736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 576.301956][T12736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.328408][T12736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 576.461994][T12736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 576.485150][T12736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.513695][T12736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 576.746934][T12736] hsr_slave_0: entered promiscuous mode [ 576.776446][T12736] hsr_slave_1: entered promiscuous mode [ 576.794605][T12736] debugfs: 'hsr0' already exists in 'hsr' [ 576.805743][T12736] Cannot create hsr debugfs directory [ 577.608624][T12736] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 577.677347][ T2997] IPVS: stop unused estimator thread 0... [ 577.691851][T12736] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 577.723808][T12736] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 577.746904][T12736] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 578.139223][T12914] delete_channel: no stack [ 578.168262][T12736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.227763][T12736] 8021q: adding VLAN 0 to HW filter on device team0 [ 578.286784][ T6721] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.293981][ T6721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.311745][ T2997] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.318923][ T2997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.599624][T12736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 578.716576][T12934] 9pnet_fd: Insufficient options for proto=fd [ 578.759386][T12936] 9pnet_fd: Insufficient options for proto=fd [ 580.173390][T12943] netlink: 316 bytes leftover after parsing attributes in process `syz.3.1918'. [ 580.374390][T12949] Mount JFS Failure: -22 [ 580.379198][T12949] jfs_mount failed w/return code = -22 [ 580.385274][T12736] veth0_vlan: entered promiscuous mode [ 580.422292][T12736] veth1_vlan: entered promiscuous mode [ 580.731631][T12736] veth0_macvtap: entered promiscuous mode [ 580.749406][T12736] veth1_macvtap: entered promiscuous mode [ 580.779328][T12736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 580.786462][ T30] audit: type=1400 audit(1758470539.366:747): avc: denied { connect } for pid=12954 comm="syz.0.1922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 580.791501][T12736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 580.807063][T12955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1922'. [ 580.842920][ T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.852085][ T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.864293][ T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.874727][ T49] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.969128][ T6715] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.984001][ T6715] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.040419][T12959] netlink: 316 bytes leftover after parsing attributes in process `syz.0.1923'. [ 581.070274][ T6715] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 581.082241][ T6715] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.105304][ T30] audit: type=1400 audit(1758470539.686:748): avc: denied { mounton } for pid=12736 comm="syz-executor" path="/root/syzkaller.ECKIHW/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 581.151299][ T30] audit: type=1400 audit(1758470539.726:749): avc: denied { mounton } for pid=12736 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 582.067624][ T30] audit: type=1400 audit(1758470540.646:750): avc: denied { setopt } for pid=12960 comm="syz.0.1924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 582.570713][T12976] sctp: [Deprecated]: syz.4.1926 (pid 12976) Use of int in maxseg socket option. [ 582.570713][T12976] Use struct sctp_assoc_value instead [ 585.606572][T13012] netlink: 'syz.3.1937': attribute type 61 has an invalid length. [ 586.011198][ T5910] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 586.171286][ T5910] usb 6-1: Using ep0 maxpacket: 16 [ 586.177795][ T5910] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 586.188779][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.366160][ T5910] usb 6-1: config 0 descriptor?? [ 586.383958][ T5910] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 586.581606][T13005] 9pnet_fd: Insufficient options for proto=fd [ 588.154456][ T5910] gspca_sonixj: i2c_w8 err -71 [ 588.201508][ T5910] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 588.244201][T13035] can: request_module (can-proto-3) failed. [ 588.295383][ T5910] usb 6-1: USB disconnect, device number 2 [ 588.361288][ T5903] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 588.566253][ T5903] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 588.576602][ T5903] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 588.601166][ T5903] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 588.686450][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.702469][ T5903] usb 1-1: config 0 descriptor?? [ 588.716349][ T5903] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 589.628593][ T30] audit: type=1400 audit(1758470548.176:751): avc: denied { read } for pid=13044 comm="syz.5.1946" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 589.827768][ T30] audit: type=1400 audit(1758470548.176:752): avc: denied { open } for pid=13044 comm="syz.5.1946" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 589.853932][ T30] audit: type=1400 audit(1758470548.186:753): avc: denied { ioctl } for pid=13044 comm="syz.5.1946" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 590.184305][T13058] netlink: 'syz.3.1949': attribute type 61 has an invalid length. [ 591.540443][T13068] overlay: Unknown parameter '/' [ 591.574459][ T841] usb 1-1: USB disconnect, device number 50 [ 592.231422][ T841] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 592.492377][ T841] usb 1-1: Using ep0 maxpacket: 16 [ 592.562791][T13082] Illegal XDP return value 506045504 on prog (id 275) dev N/A, expect packet loss! [ 592.613578][ T841] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 592.623499][ T841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.651575][ T841] usb 1-1: config 0 descriptor?? [ 592.665820][ T841] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 592.813195][T12737] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 592.832316][T12737] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 592.842363][T12737] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 592.854025][T12737] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 592.870615][T12737] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 592.961635][T13086] vxcan1 speed is unknown, defaulting to 1000 [ 592.964291][T13092] 9pnet_fd: Insufficient options for proto=fd [ 593.125777][T13086] lo speed is unknown, defaulting to 1000 [ 593.306727][T13086] chnl_net:caif_netlink_parms(): no params data found [ 593.478889][T13086] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.486402][T13086] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.494232][T13086] bridge_slave_0: entered allmulticast mode [ 593.501483][T13086] bridge_slave_0: entered promiscuous mode [ 593.510807][T13086] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.518381][T13086] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.527181][T13086] bridge_slave_1: entered allmulticast mode [ 593.535267][T13086] bridge_slave_1: entered promiscuous mode [ 593.566274][T13086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.578495][T13086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 593.626926][T13086] team0: Port device team_slave_0 added [ 593.635383][T13086] team0: Port device team_slave_1 added [ 593.647028][ T5903] usb 3-1: USB disconnect, device number 41 [ 593.747194][T13086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.755296][T13086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.783913][T13086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.798544][T13086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.806403][T13086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.836018][T13086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.915096][T13086] hsr_slave_0: entered promiscuous mode [ 593.923375][T13086] hsr_slave_1: entered promiscuous mode [ 593.933002][T13086] debugfs: 'hsr0' already exists in 'hsr' [ 593.938936][T13086] Cannot create hsr debugfs directory [ 594.194157][T13086] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 594.212792][T13086] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 594.234738][T13086] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 594.253415][T13086] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 594.425853][T13086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 594.452623][T13086] 8021q: adding VLAN 0 to HW filter on device team0 [ 594.468414][ T6715] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.475550][ T6715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 594.521582][ T841] gspca_sonixj: i2c_w8 err -110 [ 594.530117][ T6715] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.537213][ T6715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 594.548646][ T841] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 594.784012][T13086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 594.951406][ T5852] Bluetooth: hci3: command tx timeout [ 594.967445][T13086] veth0_vlan: entered promiscuous mode [ 594.977796][T13086] veth1_vlan: entered promiscuous mode [ 595.000479][T13086] veth0_macvtap: entered promiscuous mode [ 595.010256][T13086] veth1_macvtap: entered promiscuous mode [ 595.026346][T13086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 595.040937][T13086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 595.053665][ T3492] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.066441][ T3492] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.076696][ T3492] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.086254][ T3492] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.157041][ T2976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.170243][ T2976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.203920][ T6708] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.212301][ T6708] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.260022][ T841] usb 1-1: USB disconnect, device number 51 [ 595.350267][T13127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1964'. [ 595.416893][T13127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1964'. [ 595.852135][ T5903] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 596.636140][ T5903] usb 1-1: unable to get BOS descriptor or descriptor too short [ 596.650658][ T5903] usb 1-1: not running at top speed; connect to a high speed hub [ 596.668755][ T5903] usb 1-1: config 1 has an invalid interface number: 138 but max is 0 [ 596.684110][ T5903] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 596.810200][ T5903] usb 1-1: config 1 has no interface number 0 [ 596.819333][ T5903] usb 1-1: config 1 interface 138 altsetting 252 endpoint 0xC has invalid wMaxPacketSize 0 [ 596.838643][ T5903] usb 1-1: config 1 interface 138 has no altsetting 0 [ 596.852028][ T5903] usb 1-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 597.353132][ T5852] Bluetooth: hci3: command tx timeout [ 597.389170][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.397751][ T5903] usb 1-1: Product: syz [ 597.419684][ T5903] usb 1-1: Manufacturer: syz [ 597.427239][ T5903] usb 1-1: SerialNumber: syz [ 597.768022][ T5903] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 598.245794][ T5903] usb 1-1: USB disconnect, device number 52 [ 599.431428][ T5852] Bluetooth: hci3: command tx timeout [ 599.511523][ T5903] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 599.541187][ T30] audit: type=1400 audit(1758470558.116:754): avc: denied { map } for pid=13180 comm="syz.4.1979" path="socket:[40835]" dev="sockfs" ino=40835 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 599.691606][ T5903] usb 1-1: Using ep0 maxpacket: 16 [ 599.710520][T13187] overlayfs: missing 'lowerdir' [ 599.717357][ T5903] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 599.731174][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.800427][ T5903] usb 1-1: config 0 descriptor?? [ 599.819695][ T5903] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 600.102840][T13194] netlink: 'syz.3.1982': attribute type 61 has an invalid length. [ 600.342479][ T5903] gspca_sonixj: reg_w1 err -110 [ 600.432006][ T5903] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 600.432822][T13195] 9pnet_fd: Insufficient options for proto=fd [ 600.968305][T13205] vxcan1 speed is unknown, defaulting to 1000 [ 601.315512][T13205] lo speed is unknown, defaulting to 1000 [ 601.513469][ T5852] Bluetooth: hci3: command tx timeout [ 601.822788][T13220] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1987'. [ 601.840627][T13220] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1987'. [ 601.849655][T13220] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1987'. [ 602.135567][ T30] audit: type=1400 audit(1758470560.396:755): avc: denied { nlmsg_write } for pid=13215 comm="syz.6.1987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 602.156279][ C1] vkms_vblank_simulate: vblank timer overrun [ 602.177747][T13220] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.186904][T13220] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.195000][T13220] bridge0: entered allmulticast mode [ 602.338121][ T5917] usb 1-1: USB disconnect, device number 53 [ 604.573040][T13239] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.579987][T13239] batman_adv: batadv0: Interface activated: team0 [ 604.971681][T13239] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 605.495509][ T5903] lo speed is unknown, defaulting to 1000 [ 605.506883][ T5903] syz0: Port: 1 Link ACTIVE [ 605.559434][T13249] usb usb8: usbfs: process 13249 (syz.0.1994) did not claim interface 0 before use [ 606.203714][T13268] FAULT_INJECTION: forcing a failure. [ 606.203714][T13268] name failslab, interval 1, probability 0, space 0, times 0 [ 606.218900][T13268] CPU: 0 UID: 0 PID: 13268 Comm: syz.6.1997 Not tainted syzkaller #0 PREEMPT(full) [ 606.218928][T13268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 606.218937][T13268] Call Trace: [ 606.218942][T13268] [ 606.218947][T13268] dump_stack_lvl+0x16c/0x1f0 [ 606.218975][T13268] should_fail_ex+0x512/0x640 [ 606.218990][T13268] ? __kmalloc_noprof+0xbf/0x510 [ 606.219003][T13268] ? sock_kmalloc+0x111/0x170 [ 606.219019][T13268] should_failslab+0xc2/0x120 [ 606.219032][T13268] __kmalloc_noprof+0xd2/0x510 [ 606.219044][T13268] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 606.219059][T13268] sock_kmalloc+0x111/0x170 [ 606.219075][T13268] hash_alloc_result+0xd7/0x150 [ 606.219091][T13268] hash_recvmsg+0x198/0x960 [ 606.219105][T13268] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 606.219121][T13268] sock_recvmsg+0x1f9/0x250 [ 606.219138][T13268] ____sys_recvmsg+0x218/0x6b0 [ 606.219157][T13268] ? __pfx_____sys_recvmsg+0x10/0x10 [ 606.219173][T13268] ? rcu_is_watching+0x12/0xc0 [ 606.219197][T13268] ___sys_recvmsg+0x114/0x1a0 [ 606.219212][T13268] ? __pfx____sys_recvmsg+0x10/0x10 [ 606.219227][T13268] ? find_held_lock+0x2b/0x80 [ 606.219250][T13268] do_recvmmsg+0x2fe/0x750 [ 606.219266][T13268] ? __pfx_do_recvmmsg+0x10/0x10 [ 606.219278][T13268] ? trace_sched_exit_tp+0xd1/0x120 [ 606.219301][T13268] ? __pfx___schedule+0x10/0x10 [ 606.219317][T13268] __x64_sys_recvmmsg+0x22a/0x280 [ 606.219333][T13268] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 606.219351][T13268] do_syscall_64+0xcd/0x4e0 [ 606.219368][T13268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.219379][T13268] RIP: 0033:0x7f1b1b18ec29 [ 606.219389][T13268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 606.219400][T13268] RSP: 002b:00007f1b1c056038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 606.219411][T13268] RAX: ffffffffffffffda RBX: 00007f1b1b3d6090 RCX: 00007f1b1b18ec29 [ 606.219418][T13268] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000007 [ 606.219425][T13268] RBP: 00007f1b1c056090 R08: 0000000000000000 R09: 0000000000000000 [ 606.219431][T13268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.219437][T13268] R13: 00007f1b1b3d6128 R14: 00007f1b1b3d6090 R15: 00007ffd5fab4288 [ 606.219451][T13268] [ 607.341370][ T5903] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 607.491234][ T5903] usb 1-1: Using ep0 maxpacket: 16 [ 607.499520][ T5903] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 607.511893][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.524561][ T5903] usb 1-1: config 0 descriptor?? [ 607.533875][ T5903] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 607.803398][T13290] 9pnet_fd: Insufficient options for proto=fd [ 608.975008][T13299] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2008'. [ 609.006459][T13299] netem: invalid attributes len -4 [ 609.031601][T13299] netem: change failed [ 609.050786][T12737] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 609.064446][T12737] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 609.074177][T12737] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 609.095464][T12737] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 609.106624][T12737] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 609.189594][T13302] vxcan1 speed is unknown, defaulting to 1000 [ 609.372875][ T5903] gspca_sonixj: i2c_w8 err -110 [ 609.393438][ T5903] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 609.501864][T13306] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2008'. [ 609.552340][T13292] warn_alloc: 1 callbacks suppressed [ 609.552363][T13292] syz.4.2005: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 609.711203][T13292] CPU: 1 UID: 0 PID: 13292 Comm: syz.4.2005 Not tainted syzkaller #0 PREEMPT(full) [ 609.711231][T13292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 609.711242][T13292] Call Trace: [ 609.711249][T13292] [ 609.711258][T13292] dump_stack_lvl+0x16c/0x1f0 [ 609.711291][T13292] warn_alloc+0x248/0x3a0 [ 609.711313][T13292] ? __pfx_warn_alloc+0x10/0x10 [ 609.711342][T13292] ? hash_ipport4_resize+0x1b4/0x1b10 [ 609.711368][T13292] ? __vmalloc_node_noprof+0xad/0xf0 [ 609.711399][T13292] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 609.711434][T13292] ? hash_ipport4_resize+0x1b4/0x1b10 [ 609.711465][T13292] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 609.711495][T13292] ? ___kmalloc_large_node+0xed/0x160 [ 609.711524][T13292] __kvmalloc_node_noprof+0x30a/0x620 [ 609.711542][T13292] ? hash_ipport4_resize+0x1b4/0x1b10 [ 609.711567][T13292] ? hash_ipport4_resize+0x1b4/0x1b10 [ 609.711597][T13292] ? hash_ipport4_resize+0x1b4/0x1b10 [ 609.711620][T13292] hash_ipport4_resize+0x1b4/0x1b10 [ 609.711648][T13292] ? __pfx_hash_ipport4_add+0x10/0x10 [ 609.711673][T13292] ? __pfx_hash_ipport4_uadt+0x10/0x10 [ 609.711705][T13292] ? __pfx_hash_ipport4_resize+0x10/0x10 [ 609.711735][T13292] call_ad.constprop.0+0x36d/0x940 [ 609.711765][T13292] ? __pfx_hash_ipport4_resize+0x10/0x10 [ 609.711793][T13292] ? __pfx_call_ad.constprop.0+0x10/0x10 [ 609.711821][T13292] ? __pfx___nla_validate_parse+0x10/0x10 [ 609.711859][T13292] ? __nla_parse+0x40/0x60 [ 609.711889][T13292] ip_set_ad.constprop.0.isra.0+0x3ce/0x870 [ 609.711913][T13292] ? __pfx_ip_set_ad.constprop.0.isra.0+0x10/0x10 [ 609.711933][T13292] ? call_rcu_tasks_generic+0x401/0x920 [ 609.711983][T13292] ? find_held_lock+0x2b/0x80 [ 609.712013][T13292] nfnetlink_rcv_msg+0x9fc/0x1200 [ 609.712040][T13292] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 609.712061][T13292] ? __lock_acquire+0x62e/0x1ce0 [ 609.712112][T13292] ? avc_has_perm_noaudit+0x149/0x3b0 [ 609.712139][T13292] netlink_rcv_skb+0x158/0x420 [ 609.712163][T13292] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 609.712183][T13292] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 609.712219][T13292] ? ns_capable+0xd7/0x110 [ 609.712243][T13292] nfnetlink_rcv+0x1b3/0x430 [ 609.712260][T13292] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 609.712290][T13292] netlink_unicast+0x5a7/0x870 [ 609.712318][T13292] ? __pfx_netlink_unicast+0x10/0x10 [ 609.712346][T13292] ? netlink_sendmsg+0x871/0xdd0 [ 609.712373][T13292] netlink_sendmsg+0x8d1/0xdd0 [ 609.712401][T13292] ? __pfx_netlink_sendmsg+0x10/0x10 [ 609.712436][T13292] ____sys_sendmsg+0xa95/0xc70 [ 609.712462][T13292] ? copy_msghdr_from_user+0x10a/0x160 [ 609.712481][T13292] ? __pfx_____sys_sendmsg+0x10/0x10 [ 609.712509][T13292] ? __pfx_futex_wake_mark+0x10/0x10 [ 609.712533][T13292] ___sys_sendmsg+0x134/0x1d0 [ 609.712556][T13292] ? __pfx____sys_sendmsg+0x10/0x10 [ 609.712608][T13292] __sys_sendmsg+0x16d/0x220 [ 609.712629][T13292] ? __pfx___sys_sendmsg+0x10/0x10 [ 609.712650][T13292] ? __x64_sys_futex+0x1e0/0x4c0 [ 609.712680][T13292] do_syscall_64+0xcd/0x4e0 [ 609.712706][T13292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.712724][T13292] RIP: 0033:0x7f48fc98ec29 [ 609.712739][T13292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 609.712757][T13292] RSP: 002b:00007f48fd897038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 609.712775][T13292] RAX: ffffffffffffffda RBX: 00007f48fcbd5fa0 RCX: 00007f48fc98ec29 [ 609.712788][T13292] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 609.712798][T13292] RBP: 00007f48fca11e41 R08: 0000000000000000 R09: 0000000000000000 [ 609.712809][T13292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 609.712818][T13292] R13: 00007f48fcbd6038 R14: 00007f48fcbd5fa0 R15: 00007ffd4652b8d8 [ 609.712843][T13292] [ 609.712921][T13292] Mem-Info: [ 610.122833][T13302] lo speed is unknown, defaulting to 1000 [ 610.231860][T13292] active_anon:47176 inactive_anon:0 isolated_anon:0 [ 610.231860][T13292] active_file:11608 inactive_file:49227 isolated_file:0 [ 610.231860][T13292] unevictable:17657 dirty:242 writeback:0 [ 610.231860][T13292] slab_reclaimable:13179 slab_unreclaimable:128305 [ 610.231860][T13292] mapped:34735 shmem:40904 pagetables:1160 [ 610.231860][T13292] sec_pagetables:0 bounce:0 [ 610.231860][T13292] kernel_misc_reclaimable:0 [ 610.231860][T13292] free:1202895 free_pcp:19597 free_cma:0 [ 610.285532][ T5903] usb 1-1: USB disconnect, device number 54 [ 610.361327][T13292] Node 0 active_anon:189404kB inactive_anon:0kB active_file:46396kB inactive_file:196616kB unevictable:69092kB isolated(anon):0kB isolated(file):0kB mapped:138864kB dirty:968kB writeback:0kB shmem:162080kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11928kB pagetables:4516kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 610.552697][T13292] Node 1 active_anon:0kB inactive_anon:0kB active_file:36kB inactive_file:292kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:72kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 610.641269][T13292] Node 0 DMA free:15296kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 610.700242][T13302] chnl_net:caif_netlink_parms(): no params data found [ 610.821391][T13292] lowmem_reserve[]: 0 2479 2481 2481 2481 [ 610.827240][T13292] Node 0 DMA32 free:894272kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:202256kB inactive_anon:0kB active_file:46380kB inactive_file:195312kB unevictable:69092kB writepending:956kB present:3129332kB managed:2539316kB mlocked:0kB bounce:0kB free_pcp:50392kB local_pcp:19424kB free_cma:0kB [ 611.327231][ T5852] Bluetooth: hci1: command tx timeout [ 611.374182][T13292] lowmem_reserve[]: 0 0 1 1 1 [ 611.379365][T13292] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16kB inactive_anon:0kB active_file:16kB inactive_file:1312kB unevictable:0kB writepending:4kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 611.425981][T13292] lowmem_reserve[]: 0 0 0 0 0 [ 611.440557][T13292] Node 1 Normal free:3892544kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:36kB inactive_file:292kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:24360kB local_pcp:12264kB free_cma:0kB [ 611.478081][T13292] lowmem_reserve[]: 0 0 0 0 0 [ 611.483435][T13292] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15296kB [ 611.500796][T13292] Node 0 DMA32: 14*4kB (UE) 27*8kB (ME) 7*16kB (E) 116*32kB (ME) 274*64kB (UME) 119*128kB (ME) 69*256kB (UME) 25*512kB (UME) 5*1024kB (M) 9*2048kB (UME) 196*4096kB (UM) = 893696kB [ 611.524139][T13292] Node 0 Normal: 1*4kB (M) 2*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 611.540480][T13292] Node 1 Normal: 212*4kB (UME) 56*8kB (UME) 45*16kB (UME) 141*32kB (UME) 37*64kB (UME) 11*128kB (UME) 5*256kB (UM) 4*512kB (M) 4*1024kB (ME) 4*2048kB (UME) 944*4096kB (M) = 3892544kB [ 611.562857][T13292] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 611.572565][T13292] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 611.582090][T13292] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 611.591778][T13292] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 611.601929][T13292] 121495 total pagecache pages [ 611.606876][T13292] 0 pages in swap cache [ 611.611335][T13292] Free swap = 124996kB [ 611.615588][T13292] Total swap = 124996kB [ 611.619939][T13292] 2097051 pages RAM [ 611.623989][T13292] 0 pages HighMem/MovableOnly [ 611.628742][T13292] 430260 pages reserved [ 611.633153][T13292] 0 pages cma reserved [ 611.909195][T13302] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.928583][T13302] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.951717][T13302] bridge_slave_0: entered allmulticast mode [ 611.987977][T13302] bridge_slave_0: entered promiscuous mode [ 612.068444][T13302] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.138533][T13302] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.148247][T13302] bridge_slave_1: entered allmulticast mode [ 612.155321][T13302] bridge_slave_1: entered promiscuous mode [ 612.190178][T13302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.217968][T13302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.326114][T13302] team0: Port device team_slave_0 added [ 612.339154][T13302] team0: Port device team_slave_1 added [ 612.441642][T13302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.528084][T13302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 612.559640][T13302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.574480][T13302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.581810][T13302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 612.607986][T13302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.710140][ T30] audit: type=1400 audit(1758470571.286:756): avc: denied { append } for pid=13335 comm="syz.6.2017" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 612.735441][T13302] hsr_slave_0: entered promiscuous mode [ 612.744653][T13302] hsr_slave_1: entered promiscuous mode [ 612.750811][T13302] debugfs: 'hsr0' already exists in 'hsr' [ 612.757034][T13302] Cannot create hsr debugfs directory [ 612.836845][T13340] 9pnet_fd: Insufficient options for proto=fd [ 613.040803][T13302] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 613.054652][T13302] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 613.066859][T13302] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 613.082221][T13302] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 613.254181][T13302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.290567][T13302] 8021q: adding VLAN 0 to HW filter on device team0 [ 613.310951][ T6721] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.318131][ T6721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 613.351640][ T5852] Bluetooth: hci1: command tx timeout [ 613.355359][ T6708] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.365549][ T6708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 615.431631][ T5852] Bluetooth: hci1: command tx timeout [ 615.705050][T13302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 617.056909][T13302] veth0_vlan: entered promiscuous mode [ 617.511540][ T5852] Bluetooth: hci1: command tx timeout [ 617.572254][T13302] veth1_vlan: entered promiscuous mode [ 617.884879][T13302] veth0_macvtap: entered promiscuous mode [ 617.940718][T13302] veth1_macvtap: entered promiscuous mode [ 617.991304][T13396] 9pnet_fd: Insufficient options for proto=fd [ 618.018462][T13302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 618.127100][T13302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 618.181565][ T2997] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.194679][ T2997] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.272493][ T2997] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.326520][T13401] openvswitch: netlink: Flow key attr not present in new flow. [ 618.404347][ T2997] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.676054][ T6715] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.726146][ T6715] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.737172][ T6708] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.752676][ T6708] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.537266][T13418] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 620.092471][T13422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2037'. [ 620.163692][T13422] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2037'. [ 620.185225][T13422] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2037'. [ 620.433367][T13436] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2039'. [ 621.001193][ T43] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 621.211206][ T43] usb 8-1: Using ep0 maxpacket: 16 [ 621.267346][ T43] usb 8-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 621.278497][ T43] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.302289][ T43] usb 8-1: config 0 descriptor?? [ 621.424988][ T43] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 621.571301][ T5852] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 621.828727][T13441] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2042'. [ 621.843869][T13432] 9pnet_fd: Insufficient options for proto=fd [ 622.471810][ T841] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 622.601206][ T841] usb 7-1: device descriptor read/64, error -71 [ 622.841301][ T841] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 622.971226][ T841] usb 7-1: device descriptor read/64, error -71 [ 623.160725][ T841] usb usb7-port1: attempt power cycle [ 623.217988][ T43] gspca_sonixj: i2c_w8 err -71 [ 623.272043][ T43] sonixj 8-1:0.0: probe with driver sonixj failed with error -71 [ 623.323569][ T43] usb 8-1: USB disconnect, device number 2 [ 623.677128][T13460] overlayfs: failed to clone upperpath [ 623.722234][T13460] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2047'. [ 623.898750][ T841] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 623.922539][ T841] usb 7-1: device descriptor read/8, error -71 [ 624.091298][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.098190][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.661298][ T841] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 624.713807][ T841] usb 7-1: device descriptor read/8, error -71 [ 624.877603][ T841] usb usb7-port1: unable to enumerate USB device [ 626.563143][ T30] audit: type=1400 audit(1758470585.146:757): avc: denied { watch } for pid=13479 comm="syz.4.2053" path="pipe:[5043]" dev="pipefs" ino=5043 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 628.056103][T13490] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 628.359851][ T30] audit: type=1326 audit(1758470586.936:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13496 comm="syz.3.2060" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f414938ec29 code=0x20000000 [ 628.589347][T13505] openvswitch: netlink: Flow key attr not present in new flow. [ 628.679164][T12737] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 628.714602][T13510] netlink: 244 bytes leftover after parsing attributes in process `syz.7.2062'. [ 628.734089][T12737] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 628.745085][T12737] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 628.756443][T12737] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 628.764561][T12737] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 629.191652][ T43] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 629.322359][T13508] vxcan1 speed is unknown, defaulting to 1000 [ 629.441518][ T43] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 629.489149][ T43] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.521413][ T43] usb 8-1: Product: syz [ 629.525631][ T43] usb 8-1: Manufacturer: syz [ 629.581305][ T43] usb 8-1: SerialNumber: syz [ 629.592698][ T43] usb 8-1: config 0 descriptor?? [ 629.977545][ T6712] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.998879][ T5958] usb 8-1: USB disconnect, device number 3 [ 630.370304][ T6712] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.419133][T13508] lo speed is unknown, defaulting to 1000 [ 630.538048][ T6712] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.052989][ T5852] Bluetooth: hci5: command tx timeout [ 631.310175][ T6712] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.740122][T13508] chnl_net:caif_netlink_parms(): no params data found [ 631.902900][ T6712] bridge_slave_1: left allmulticast mode [ 631.908635][ T6712] bridge_slave_1: left promiscuous mode [ 631.988429][ T6712] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.999116][ T6712] bridge_slave_0: left allmulticast mode [ 632.009610][ T6712] bridge_slave_0: left promiscuous mode [ 632.017337][ T6712] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.298620][T13533] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2067'. [ 632.368689][ T30] audit: type=1400 audit(1758470590.916:759): avc: denied { ioctl } for pid=13525 comm="syz.6.2067" path="socket:[41882]" dev="sockfs" ino=41882 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 633.123654][ T5852] Bluetooth: hci5: command tx timeout [ 633.677795][ T6712] bond0 (unregistering): (slave gretap1): Releasing active interface [ 634.059389][ T6712] bond1 (unregistering): Released all slaves [ 634.076196][ T6712] bond0 (unregistering): Released all slaves [ 634.178372][ T30] audit: type=1400 audit(1758470592.736:760): avc: denied { firmware_load } for pid=13525 comm="syz.6.2067" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 634.182810][T13530] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 634.219514][T13530] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 634.274787][T13530] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 634.326147][ T6712] tipc: Disabling bearer [ 634.351301][ T6712] tipc: Left network mode [ 634.457019][T13508] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.469552][T13508] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.479909][T13508] bridge_slave_0: entered allmulticast mode [ 634.490890][T13508] bridge_slave_0: entered promiscuous mode [ 634.504104][T13508] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.599916][T13508] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.607855][T13508] bridge_slave_1: entered allmulticast mode [ 634.619741][T13508] bridge_slave_1: entered promiscuous mode [ 634.736527][T13561] 9pnet_fd: Insufficient options for proto=fd [ 634.776275][T13562] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2074'. [ 634.810955][T13562] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 634.853153][T13508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 634.899404][T13508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 635.048158][T13508] team0: Port device team_slave_0 added [ 635.065666][T13508] team0: Port device team_slave_1 added [ 635.551842][ T5852] Bluetooth: hci5: command tx timeout [ 635.628816][T13508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 635.643500][T13508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 635.733814][T13508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 635.812972][T13508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 635.819961][T13508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 635.894934][T13508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 636.101444][ T10] libceph: connect (1)[c::]:6789 error -101 [ 636.111828][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 636.395310][ T10] libceph: connect (1)[c::]:6789 error -101 [ 636.408439][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 636.686656][T13508] hsr_slave_0: entered promiscuous mode [ 636.705443][T13570] ceph: No mds server is up or the cluster is laggy [ 636.727042][T13508] hsr_slave_1: entered promiscuous mode [ 636.766023][T13508] debugfs: 'hsr0' already exists in 'hsr' [ 636.793709][T13508] Cannot create hsr debugfs directory [ 636.927890][T13588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2081'. [ 636.948605][ T5917] libceph: connect (1)[c::]:6789 error -101 [ 636.977960][ T5917] libceph: mon0 (1)[c::]:6789 connect error [ 637.244474][ T6712] hsr_slave_0: left promiscuous mode [ 637.257060][ T6712] hsr_slave_1: left promiscuous mode [ 637.288567][ T6712] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 637.325193][ T6712] batadv0: mtu less than device minimum [ 637.339951][ T6712] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 637.351219][ T6712] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 637.362073][ T6712] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 637.372923][ T6712] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 637.383781][ T6712] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 637.394622][ T6712] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 637.405470][ T6712] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 637.416318][ T6712] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 637.469395][ T6712] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 637.482022][ T6712] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 637.534689][ T6712] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 637.553788][ T6712] batman_adv: batadv0: Interface deactivated: dummy0 [ 637.570738][ T6712] batman_adv: batadv0: Removing interface: dummy0 [ 637.593470][ T5852] Bluetooth: hci5: command tx timeout [ 637.637929][ T6712] veth1_macvtap: left promiscuous mode [ 637.744155][ T6712] veth0_macvtap: left promiscuous mode [ 637.760246][ T6712] veth1_vlan: left promiscuous mode [ 637.778518][ T6712] veth0_vlan: left promiscuous mode [ 637.951033][T13594] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2083'. [ 638.802161][ T6712] pim6reg (unregistering): left allmulticast mode [ 639.077018][T13604] 9pnet_fd: Insufficient options for proto=fd [ 639.298043][ T6712] team0 (unregistering): Port device team_slave_1 removed [ 639.340312][ T6712] team0 (unregistering): Port device team_slave_0 removed [ 639.664897][ T2976] smc: removing ib device syz2 [ 640.210901][T13594] vxlan0: entered promiscuous mode [ 640.249820][T13598] netlink: 'syz.3.2084': attribute type 61 has an invalid length. [ 640.341377][ T5917] infiniband syz1: ib_query_port failed (-19) [ 640.350628][ T10] vxcan1 speed is unknown, defaulting to 1000 [ 640.398028][ T10] syz2: Port: 1 Link DOWN [ 641.604889][T13620] overlayfs: failed to clone lowerpath [ 641.890784][ T6721] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 641.934593][T13632] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 641.948064][ T6721] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 641.992339][ T6721] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 642.030040][ T6721] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 642.227016][ T30] audit: type=1804 audit(1758470600.806:761): pid=13634 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.2095" name="/newroot/11/file0" dev="tmpfs" ino=75 res=1 errno=0 [ 642.727797][T13508] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 642.741344][ T5958] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 642.804804][T13508] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 642.860389][T13508] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 642.911174][ T5958] usb 8-1: Using ep0 maxpacket: 16 [ 642.976271][T13508] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 642.999383][ T6712] IPVS: stop unused estimator thread 0... [ 643.026488][ T5958] usb 8-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 643.048063][ T5958] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.075573][ T5958] usb 8-1: config 0 descriptor?? [ 643.107430][ T5958] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 643.157141][T13508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.188737][T13508] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.210373][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.217631][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.248420][ T6712] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.255685][ T6712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.318016][T13637] 9pnet_fd: Insufficient options for proto=fd [ 643.472191][T13654] netlink: 'syz.3.2099': attribute type 61 has an invalid length. [ 643.899671][T13508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 643.989677][ T5958] gspca_sonixj: reg_r err -32 [ 643.996982][ T5958] sonixj 8-1:0.0: probe with driver sonixj failed with error -32 [ 644.131451][T13661] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 644.895600][T13508] veth0_vlan: entered promiscuous mode [ 644.909501][T13508] veth1_vlan: entered promiscuous mode [ 645.057016][T13508] veth0_macvtap: entered promiscuous mode [ 645.068386][T13508] veth1_macvtap: entered promiscuous mode [ 645.112995][T13508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 645.746949][T13508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 645.784731][ T6712] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.597620][T13686] CIFS mount error: No usable UNC path provided in device string! [ 646.597620][T13686] [ 646.607847][T13686] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 646.681759][ T9] usb 8-1: USB disconnect, device number 4 [ 646.863873][ T2976] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.292585][ T2976] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.334018][ T30] audit: type=1804 audit(1758470605.916:762): pid=13693 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.2106" name="file0" dev="tmpfs" ino=2745 res=1 errno=0 [ 647.340054][ T2976] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.690925][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.833991][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.953366][ T5852] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 648.389436][ T6721] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.413824][ T6721] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.847101][T13710] netlink: 'syz.4.2111': attribute type 61 has an invalid length. [ 649.200136][ T5917] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 649.388302][ T5917] usb 7-1: Using ep0 maxpacket: 8 [ 649.400911][ T5917] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 649.416597][ T5917] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 650.161226][ T5917] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 650.171031][ T5917] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 650.193495][T13715] lo speed is unknown, defaulting to 1000 [ 650.270288][ T5917] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 650.305645][ T5917] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 650.319230][ T5917] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.631534][ T5917] usb 7-1: usb_control_msg returned -32 [ 650.637182][ T5917] usbtmc 7-1:16.0: can't read capabilities [ 651.168520][T13724] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 651.197057][ T5917] usb 7-1: USB disconnect, device number 6 [ 652.168243][T13737] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2117'. [ 652.222923][T13737] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 652.231669][T13737] macvlan2: entered allmulticast mode [ 652.239792][T13737] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 652.796345][ T30] audit: type=1400 audit(1758470611.376:763): avc: denied { connect } for pid=13740 comm="syz.8.2119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 652.811209][T13741] dns_resolver: Unsupported content type (152) [ 652.818042][ T30] audit: type=1400 audit(1758470611.376:764): avc: denied { setopt } for pid=13740 comm="syz.8.2119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 653.072253][ T5903] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 653.273132][ T5903] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 653.287800][ T5903] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.311643][ T5903] usb 9-1: config 0 descriptor?? [ 653.331313][ T5903] cp210x 9-1:0.0: cp210x converter detected [ 653.370789][T13748] hugetlbfs: syz.4.2122 (13748): Using mlock ulimits for SHM_HUGETLB is obsolete [ 653.932291][ T30] audit: type=1400 audit(1758470612.516:765): avc: denied { write } for pid=13740 comm="syz.8.2119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 654.160004][ T5903] cp210x 9-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 654.216871][ T5903] cp210x 9-1:0.0: GPIO initialisation failed: -71 [ 654.232592][ T5903] usb 9-1: cp210x converter now attached to ttyUSB0 [ 654.252256][T13757] net_ratelimit: 31 callbacks suppressed [ 654.252278][T13757] openvswitch: netlink: Flow key attr not present in new flow. [ 654.731818][ T5903] usb 9-1: USB disconnect, device number 2 [ 654.748442][ T5903] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 654.757151][ T5903] cp210x 9-1:0.0: device disconnected [ 656.884432][T13782] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2128'. [ 656.911879][T13778] lo speed is unknown, defaulting to 1000 [ 656.974851][T13781] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2128'. [ 657.109555][T13781] bridge_slave_1: left allmulticast mode [ 657.124317][T13781] bridge_slave_1: left promiscuous mode [ 657.145763][T13781] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.167287][T13781] bridge_slave_0: left allmulticast mode [ 657.178474][T13781] bridge_slave_0: left promiscuous mode [ 657.185689][T13781] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.319021][T13787] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2133'. [ 657.412282][T13787] netem: invalid attributes len -4 [ 657.439015][T13787] netem: change failed [ 657.598008][T13795] block nbd8: Attempted send on invalid socket [ 657.605955][T13795] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 657.621659][T13795] SQUASHFS error: Failed to read block 0x0: -5 [ 657.630450][T13795] unable to read squashfs_super_block [ 657.794237][T13792] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2133'. [ 658.099227][ T30] audit: type=1400 audit(1758470616.676:766): avc: denied { setopt } for pid=13797 comm="syz.8.2135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 658.245955][ T30] audit: type=1400 audit(1758470616.816:767): avc: denied { audit_read } for pid=13797 comm="syz.8.2135" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 658.880981][T13802] lo speed is unknown, defaulting to 1000 [ 659.067797][T13814] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 659.151725][T13814] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 659.260416][ T30] audit: type=1400 audit(1758470617.816:768): avc: denied { map } for pid=13809 comm="syz.6.2138" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 661.424029][ T5903] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 661.611337][ T5903] usb 9-1: Using ep0 maxpacket: 16 [ 661.667179][ T5903] usb 9-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 661.679970][ T5903] usb 9-1: config 1 interface 0 has no altsetting 0 [ 661.780615][ T5903] usb 9-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.40 [ 661.790992][ T5903] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.800764][ T5903] usb 9-1: Product: য路㲢㙇揇ຩ퐟際ᮖ柵ᅁ축ോ盬킬ﭕ⑾㶢鱬窮┻휶ꋜ喕✔✏╹儀舾籍쯻痏鎔ḉ향쯨댲⼂鮌付衠鰲퇢ᘬ鴚閇鑦쉅誼㱇á [ 661.911511][ T5903] usb 9-1: Manufacturer: చ [ 661.920527][ T5903] usb 9-1: SerialNumber: 䐺럘者ݓ蓥⬱岸㠚ꪠ卓㒝侚㧷揄힇膹┣摣݉戯裊䆅軒ꋠ콶綡⨂뙪䢑⡚ﴡ韠儮껜ḯ❛胅苟쯋퓏䞥ﬤ었橾㓵砾욷䁌◲朑霴 [ 662.255587][ T5903] usbhid 9-1:1.0: can't add hid device: -71 [ 662.324609][ T5903] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 662.337083][ T5903] usb 9-1: USB disconnect, device number 3 [ 666.246500][T13875] overlayfs: failed to clone lowerpath [ 666.420744][T13877] openvswitch: netlink: Flow key attr not present in new flow. [ 667.988607][T12737] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 668.003142][T12737] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 668.101258][T12737] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 668.112016][T12737] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 668.121542][T12737] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 669.396097][T13892] lo speed is unknown, defaulting to 1000 [ 670.115698][T13892] chnl_net:caif_netlink_parms(): no params data found [ 670.241212][T12737] Bluetooth: hci2: command tx timeout [ 670.315951][T13892] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.412842][T13892] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.515787][T13892] bridge_slave_0: entered allmulticast mode [ 670.523465][T13892] bridge_slave_0: entered promiscuous mode [ 670.545147][T13892] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.557776][T13892] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.565543][T13892] bridge_slave_1: entered allmulticast mode [ 670.578447][T13892] bridge_slave_1: entered promiscuous mode [ 671.159813][T13892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 671.203591][T13892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 671.478175][T13892] team0: Port device team_slave_0 added [ 671.527991][T13892] team0: Port device team_slave_1 added [ 671.766603][T13892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 671.813749][T13892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 671.885004][T13892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 671.916270][T13892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 672.321163][T12737] Bluetooth: hci2: command tx timeout [ 672.460571][T13892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 672.548360][T13892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 672.855858][T13892] hsr_slave_0: entered promiscuous mode [ 672.895752][T13892] hsr_slave_1: entered promiscuous mode [ 672.906205][T13892] debugfs: 'hsr0' already exists in 'hsr' [ 672.919007][T13892] Cannot create hsr debugfs directory [ 672.984236][T13948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 672.992427][T13948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 673.006310][T13948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 673.016647][T13948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 673.038682][T13948] batman_adv: batadv0: Interface deactivated: team0 [ 673.047418][T13948] batman_adv: batadv0: Removing interface: team0 [ 673.225897][T13952] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 674.125725][T13892] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 674.207282][T13892] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 674.246511][T13892] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 674.280220][T13892] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 674.392547][T12737] Bluetooth: hci2: command tx timeout [ 674.477665][T13892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 674.495533][T13892] 8021q: adding VLAN 0 to HW filter on device team0 [ 674.532175][T13892] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 674.542722][T13892] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 674.593317][ T2976] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.600430][ T2976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 675.057731][ T2976] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.064858][ T2976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 675.910525][ T30] audit: type=1400 audit(1758470634.486:769): avc: denied { accept } for pid=13982 comm="syz.3.2181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 675.938866][T13983] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2181'. [ 675.968169][T13892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 676.180198][T13994] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2183'. [ 676.473382][T12737] Bluetooth: hci2: command tx timeout [ 676.579959][T13892] veth0_vlan: entered promiscuous mode [ 676.603004][T13892] veth1_vlan: entered promiscuous mode [ 676.683118][T13892] veth0_macvtap: entered promiscuous mode [ 676.737695][T13892] veth1_macvtap: entered promiscuous mode [ 676.808295][T13892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 676.832933][T13892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 676.856041][ T6721] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.952825][ T61] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.974858][ T61] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.494804][ T61] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.829470][ T3492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 677.993935][ T3492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.235820][ T6708] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.282891][ T6708] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.121180][ T5958] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 679.311112][ T5958] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 679.328600][ T5958] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 679.345245][ T5958] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.370919][ T5958] usb 10-1: config 0 descriptor?? [ 679.456871][ T5958] pwc: Askey VC010 type 2 USB webcam detected. [ 680.059123][ T5958] pwc: recv_control_msg error -32 req 02 val 2b00 [ 680.072692][ T5958] pwc: recv_control_msg error -32 req 02 val 2700 [ 680.098496][ T5958] pwc: recv_control_msg error -32 req 02 val 2c00 [ 680.111022][ T5958] pwc: recv_control_msg error -32 req 04 val 1000 [ 680.125782][ T5958] pwc: recv_control_msg error -32 req 04 val 1300 [ 680.134733][ T5958] pwc: recv_control_msg error -32 req 04 val 1400 [ 680.142078][ T5958] pwc: recv_control_msg error -32 req 02 val 2000 [ 680.149508][ T5958] pwc: recv_control_msg error -32 req 02 val 2100 [ 680.156875][ T5958] pwc: recv_control_msg error -32 req 04 val 1500 [ 680.166602][ T5958] pwc: recv_control_msg error -32 req 02 val 2500 [ 680.173903][ T5958] pwc: recv_control_msg error -32 req 02 val 2400 [ 680.232622][ T5958] pwc: recv_control_msg error -32 req 02 val 2600 [ 680.244848][ T5958] pwc: recv_control_msg error -32 req 02 val 2900 [ 680.616390][ T5958] pwc: recv_control_msg error -71 req 04 val 1100 [ 680.626997][ T5958] pwc: recv_control_msg error -71 req 04 val 1200 [ 680.644423][ T5958] pwc: Registered as video103. [ 680.651009][ T5958] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input18 [ 680.695733][ T5958] usb 10-1: USB disconnect, device number 2 [ 680.807759][ T30] audit: type=1400 audit(1758470639.356:770): avc: denied { listen } for pid=14044 comm="syz.4.2195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 681.431351][ T5903] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 681.620551][ T5903] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 681.815554][ T5903] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 681.836936][ T5903] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 681.896383][ T5903] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.914666][T14053] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 681.925415][ T5903] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 682.658129][T14063] netlink: 'syz.9.2202': attribute type 61 has an invalid length. [ 682.822003][ T5903] usb 9-1: USB disconnect, device number 4 [ 684.670591][T14091] Bluetooth: hci1: Frame reassembly failed (-84) [ 684.704803][ T61] Bluetooth: hci1: Frame reassembly failed (-84) [ 684.764968][T14084] : Can't lookup blockdev [ 684.769995][T14090] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 684.983694][T14084] bridge0: entered promiscuous mode [ 685.005750][T14084] macsec1: entered promiscuous mode [ 685.013531][T14084] bridge0: port 3(macsec1) entered blocking state [ 685.025598][T14084] bridge0: port 3(macsec1) entered disabled state [ 685.038277][T14084] macsec1: entered allmulticast mode [ 685.043799][T14084] bridge0: entered allmulticast mode [ 685.183553][T14084] macsec1: left allmulticast mode [ 685.229009][T14084] bridge0: left allmulticast mode [ 685.238585][T14084] bridge0: left promiscuous mode [ 685.252334][T14097] FAULT_INJECTION: forcing a failure. [ 685.252334][T14097] name failslab, interval 1, probability 0, space 0, times 0 [ 685.273717][T14097] CPU: 1 UID: 0 PID: 14097 Comm: syz.9.2210 Not tainted syzkaller #0 PREEMPT(full) [ 685.273746][T14097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 685.273758][T14097] Call Trace: [ 685.273764][T14097] [ 685.273770][T14097] dump_stack_lvl+0x16c/0x1f0 [ 685.273799][T14097] should_fail_ex+0x512/0x640 [ 685.273821][T14097] ? fs_reclaim_acquire+0xae/0x150 [ 685.273846][T14097] ? tomoyo_encode2+0x100/0x3e0 [ 685.273871][T14097] should_failslab+0xc2/0x120 [ 685.273892][T14097] __kmalloc_noprof+0xd2/0x510 [ 685.273909][T14097] ? d_absolute_path+0x136/0x1a0 [ 685.273940][T14097] tomoyo_encode2+0x100/0x3e0 [ 685.273968][T14097] tomoyo_encode+0x29/0x50 [ 685.273991][T14097] tomoyo_realpath_from_path+0x18f/0x6e0 [ 685.274024][T14097] tomoyo_path_number_perm+0x245/0x580 [ 685.274045][T14097] ? tomoyo_path_number_perm+0x237/0x580 [ 685.274069][T14097] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 685.274091][T14097] ? find_held_lock+0x2b/0x80 [ 685.274134][T14097] ? find_held_lock+0x2b/0x80 [ 685.274152][T14097] ? hook_file_ioctl_common+0x145/0x410 [ 685.274176][T14097] ? __fget_files+0x20e/0x3c0 [ 685.274200][T14097] security_file_ioctl+0x9b/0x240 [ 685.274226][T14097] __x64_sys_ioctl+0xb7/0x210 [ 685.274254][T14097] do_syscall_64+0xcd/0x4e0 [ 685.274279][T14097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.274296][T14097] RIP: 0033:0x7f0d8c38ec29 [ 685.274311][T14097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 685.274352][T14097] RSP: 002b:00007f0d8a5ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 685.274368][T14097] RAX: ffffffffffffffda RBX: 00007f0d8c5d5fa0 RCX: 00007f0d8c38ec29 [ 685.274380][T14097] RDX: 0000200000000000 RSI: 0000000040085112 RDI: 0000000000000003 [ 685.274390][T14097] RBP: 00007f0d8a5ee090 R08: 0000000000000000 R09: 0000000000000000 [ 685.274400][T14097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 685.274410][T14097] R13: 00007f0d8c5d6038 R14: 00007f0d8c5d5fa0 R15: 00007fffc999c268 [ 685.274435][T14097] [ 685.274585][T14097] ERROR: Out of memory at tomoyo_realpath_from_path. [ 685.441504][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.499118][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.712288][T12737] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 686.771684][ T10] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 687.087273][ T10] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 687.097781][ T10] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 687.117212][ T10] usb 10-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 687.141151][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.210509][ T10] usb 10-1: config 0 descriptor?? [ 687.229048][ T10] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 689.070291][ T30] audit: type=1804 audit(1758470647.646:771): pid=14153 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.2229" name="kvm" dev="tmpfs" ino=1704 res=1 errno=0 [ 689.105809][ T9] usb 10-1: USB disconnect, device number 3 [ 689.152713][ T841] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 689.433498][ T841] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 689.451162][ T841] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 689.460935][ T841] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 689.471516][ T841] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.486322][ T841] usb 9-1: config 0 descriptor?? [ 692.286375][ T841] input: HID 256c:006d as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.0011/input/input19 [ 692.460791][ T841] input: HID 256c:006d as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.0011/input/input20 [ 692.515054][ T841] uclogic 0003:256C:006D.0011: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.8-1/input0 [ 692.548828][ T841] usb 9-1: USB disconnect, device number 5 [ 692.936991][T14185] fido_id[14185]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 693.370551][T14196] netlink: 'syz.8.2241': attribute type 61 has an invalid length. [ 698.838798][ T30] audit: type=1326 audit(1758470657.416:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14250 comm="syz.8.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ecd78ec29 code=0x7ffc0000 [ 698.864267][ T30] audit: type=1326 audit(1758470657.416:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14250 comm="syz.8.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ecd78ec29 code=0x7ffc0000 [ 699.035906][T14256] netlink: 156 bytes leftover after parsing attributes in process `syz.8.2258'. [ 699.538145][T14253] comedi comedi1: c6xdigio: I/O port conflict (0x10003c4,3) [ 699.592221][ T5958] IPVS: starting estimator thread 0... [ 699.594340][ T30] audit: type=1326 audit(1758470657.446:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14250 comm="syz.8.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f9ecd78ec29 code=0x7ffc0000 [ 699.701404][ T30] audit: type=1326 audit(1758470658.116:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14250 comm="syz.8.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ecd78ec29 code=0x7ffc0000 [ 699.759069][T14261] syz_tun: entered allmulticast mode [ 699.801303][ T30] audit: type=1326 audit(1758470658.116:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14250 comm="syz.8.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ecd78ec29 code=0x7ffc0000 [ 699.842853][T14261] syz_tun: left allmulticast mode [ 699.883006][T14257] IPVS: using max 45 ests per chain, 108000 per kthread [ 699.950096][ T30] audit: type=1400 audit(1758470658.516:777): avc: denied { read } for pid=14267 comm="syz.9.2263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 700.240653][T14273] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 700.931169][ T5910] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 701.565293][ T5910] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 701.576587][ T5910] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 701.596993][ T5910] usb 9-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 701.606314][ T5958] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 701.615503][ T5910] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.693847][ T5910] usb 9-1: config 0 descriptor?? [ 701.739241][ T5910] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 701.840489][ T5958] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 701.844436][ T30] audit: type=1326 audit(1758470660.426:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14291 comm="syz.4.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48fc98ec29 code=0x7ffc0000 [ 701.914474][ T5958] usb 10-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 701.928089][ T30] audit: type=1326 audit(1758470660.456:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14291 comm="syz.4.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f48fc98ec29 code=0x7ffc0000 [ 701.940398][ T5958] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.978790][ T5958] usb 10-1: Product: syz [ 702.003495][ T5958] usb 10-1: Manufacturer: syz [ 702.021695][ T30] audit: type=1326 audit(1758470660.456:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14291 comm="syz.4.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48fc98ec29 code=0x7ffc0000 [ 702.045160][ T5958] usb 10-1: SerialNumber: syz [ 702.052567][ T5958] usb 10-1: config 0 descriptor?? [ 702.063169][ T5958] pn533_usb 10-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 702.430012][ T30] audit: type=1326 audit(1758470660.456:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14291 comm="syz.4.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48fc98ec29 code=0x7ffc0000 [ 703.495404][ T5917] usb 9-1: USB disconnect, device number 6 [ 703.899850][T14314] netlink: 'syz.4.2274': attribute type 61 has an invalid length. [ 704.321306][ T5917] usb 10-1: USB disconnect, device number 4 [ 705.014349][T14319] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 705.642733][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 705.653477][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 705.663994][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 705.721270][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 705.730748][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 705.823869][T14332] lo speed is unknown, defaulting to 1000 [ 705.987965][ T2997] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 706.010263][ T2997] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.317415][ T2997] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 706.355171][ T2997] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.522943][ T2997] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 706.534700][ T2997] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.795609][ T2997] netdevsim netdevsim6 netdevsim0 (unregistering): left allmulticast mode [ 707.576728][ T2997] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 707.612508][ T2997] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.814729][T14332] chnl_net:caif_netlink_parms(): no params data found [ 707.921372][T12737] Bluetooth: hci1: command tx timeout [ 708.726214][T14369] openvswitch: netlink: Flow key attr not present in new flow. [ 708.765097][T14368] netlink: 296 bytes leftover after parsing attributes in process `syz.4.2287'. [ 708.774342][T14368] openvswitch: netlink: Flow key attr not present in new flow. [ 709.072150][T14332] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.120817][T14332] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.209043][T14332] bridge_slave_0: entered allmulticast mode [ 709.523596][T14332] bridge_slave_0: entered promiscuous mode [ 709.601778][T14332] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.622841][T14332] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.644114][T14332] bridge_slave_1: entered allmulticast mode [ 709.665822][T14332] bridge_slave_1: entered promiscuous mode [ 710.031309][ T5852] Bluetooth: hci1: command tx timeout [ 711.558385][ T2997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 711.585570][ T2997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 711.596591][ T2997] bond0 (unregistering): Released all slaves [ 711.713476][T14332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 711.757603][T14332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 712.036180][T14332] team0: Port device team_slave_0 added [ 712.071335][ T5852] Bluetooth: hci1: command tx timeout [ 712.126523][T14332] team0: Port device team_slave_1 added [ 712.161166][ T5958] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 712.285138][T14332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 712.297275][T14332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 712.325127][T14332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 712.344001][ T2997] hsr_slave_0: left promiscuous mode [ 712.349408][ T5958] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 712.362346][ T5958] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 712.372529][ T2997] hsr_slave_1: left promiscuous mode [ 712.378282][ T2997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 712.386426][ T2997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 712.393682][ T5958] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 712.403680][ T2997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 712.421399][ T5958] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.444294][ T2997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 712.473860][T14417] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 712.483390][ T5958] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 712.563108][ T2997] veth1_macvtap: left promiscuous mode [ 712.602431][ T2997] veth0_macvtap: left promiscuous mode [ 712.703519][ T2997] veth1_vlan: left promiscuous mode [ 712.708845][ T2997] veth0_vlan: left promiscuous mode [ 712.732013][T14430] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2305'. [ 712.756830][ T841] usb 10-1: USB disconnect, device number 5 [ 714.151448][ T5852] Bluetooth: hci1: command tx timeout [ 715.052941][T14451] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 715.064271][T14451] SELinux: failed to load policy [ 715.631467][ T2997] team0 (unregistering): Port device team_slave_1 removed [ 715.677043][ T2997] team0 (unregistering): Port device team_slave_0 removed [ 716.101587][T14332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 716.108672][T14332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 716.136561][T14332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 716.159980][T14427] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2305'. [ 716.169824][T14427] netem: invalid attributes len -4 [ 716.175611][T14427] netem: change failed [ 716.522724][T14469] 9pnet_fd: Insufficient options for proto=fd [ 716.543609][T14332] hsr_slave_0: entered promiscuous mode [ 716.550163][T14332] hsr_slave_1: entered promiscuous mode [ 716.580329][T14332] debugfs: 'hsr0' already exists in 'hsr' [ 716.648444][T14332] Cannot create hsr debugfs directory [ 716.746274][T14477] openvswitch: netlink: Flow key attr not present in new flow. [ 716.783469][ T43] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 716.820345][T14478] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2318'. [ 716.838671][T14478] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2318'. [ 716.848127][T14478] netlink: 'syz.4.2318': attribute type 5 has an invalid length. [ 716.866243][T14478] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2318'. [ 717.011334][ T43] usb 9-1: Using ep0 maxpacket: 32 [ 717.078329][ T43] usb 9-1: config 0 has an invalid interface number: 196 but max is 0 [ 717.114600][ T43] usb 9-1: config 0 has no interface number 0 [ 717.145210][ T43] usb 9-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 717.194893][ T43] usb 9-1: config 0 interface 196 has no altsetting 0 [ 717.269989][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 717.270009][ T30] audit: type=1400 audit(1758470675.846:834): avc: denied { view } for pid=14480 comm="syz.3.2319" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 717.357504][ T43] usb 9-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 717.377689][ T43] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.408105][ T43] usb 9-1: Product: syz [ 717.453352][ T43] usb 9-1: Manufacturer: syz [ 717.458003][ T43] usb 9-1: SerialNumber: syz [ 717.479761][ T43] usb 9-1: config 0 descriptor?? [ 717.489638][T14466] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 717.953428][T14485] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2321'. [ 717.981488][T14485] netem: invalid attributes len -4 [ 717.986709][T14485] netem: change failed [ 718.134149][T14466] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2315'. [ 718.171711][T14488] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2321'. [ 718.630377][T14332] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 718.657368][T14332] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 718.689226][T14332] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 718.704520][ T43] ipheth 9-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 718.715942][T14332] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 718.745027][ T43] ipheth 9-1:0.196: probe with driver ipheth failed with error -71 [ 718.930959][ T43] usb 9-1: USB disconnect, device number 7 [ 718.996781][T14500] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2323'. [ 719.093609][ T30] audit: type=1400 audit(1758470677.676:835): avc: denied { ioctl } for pid=14501 comm="syz.9.2324" path="socket:[48679]" dev="sockfs" ino=48679 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 719.120926][T14332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 719.176553][T14332] 8021q: adding VLAN 0 to HW filter on device team0 [ 719.197795][ T6708] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.204959][ T6708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 719.245660][ T6708] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.252860][ T6708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.720737][T14332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 719.908702][T14524] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2330'. [ 719.964834][T14332] veth0_vlan: entered promiscuous mode [ 720.390971][T14332] veth1_vlan: entered promiscuous mode [ 720.511465][T14332] veth0_macvtap: entered promiscuous mode [ 720.525094][T14332] veth1_macvtap: entered promiscuous mode [ 720.580423][T14332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 720.629835][T14332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 720.666318][ T6712] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.694982][ T6712] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.772567][ T6712] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.851452][ T6712] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.962316][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 720.990556][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.136074][ T6712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.608979][ T6712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.657872][ T30] audit: type=1400 audit(1758470680.236:836): avc: denied { shutdown } for pid=14530 comm="syz.3.2332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 721.677648][ C1] vkms_vblank_simulate: vblank timer overrun [ 722.115789][T14546] FAULT_INJECTION: forcing a failure. [ 722.115789][T14546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 722.128987][T14546] CPU: 1 UID: 0 PID: 14546 Comm: syz.1.2275 Not tainted syzkaller #0 PREEMPT(full) [ 722.129013][T14546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 722.129024][T14546] Call Trace: [ 722.129031][T14546] [ 722.129038][T14546] dump_stack_lvl+0x16c/0x1f0 [ 722.129070][T14546] should_fail_ex+0x512/0x640 [ 722.129099][T14546] _copy_from_user+0x2e/0xd0 [ 722.129127][T14546] memdup_user+0x6b/0xe0 [ 722.129148][T14546] strndup_user+0x78/0xe0 [ 722.129169][T14546] __x64_sys_mount+0x137/0x310 [ 722.129194][T14546] ? __pfx___x64_sys_mount+0x10/0x10 [ 722.129226][T14546] do_syscall_64+0xcd/0x4e0 [ 722.129251][T14546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.129270][T14546] RIP: 0033:0x7fcf3b78ec29 [ 722.129286][T14546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 722.129304][T14546] RSP: 002b:00007fcf3c56e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 722.129322][T14546] RAX: ffffffffffffffda RBX: 00007fcf3b9d6090 RCX: 00007fcf3b78ec29 [ 722.129334][T14546] RDX: 0000200000000080 RSI: 00002000000001c0 RDI: 00002000000000c0 [ 722.129346][T14546] RBP: 00007fcf3c56e090 R08: 0000000000000000 R09: 0000000000000000 [ 722.129357][T14546] R10: 0000000000218800 R11: 0000000000000246 R12: 0000000000000001 [ 722.129367][T14546] R13: 00007fcf3b9d6128 R14: 00007fcf3b9d6090 R15: 00007ffc564be1b8 [ 722.129392][T14546] [ 722.274393][ C1] vkms_vblank_simulate: vblank timer overrun [ 722.387452][T14551] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2336'. [ 722.437281][T14551] netem: invalid attributes len -4 [ 722.449724][ T30] audit: type=1400 audit(1758470681.026:837): avc: denied { connect } for pid=14548 comm="syz.9.2335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 722.481258][T14551] netem: change failed [ 722.586822][ T30] audit: type=1400 audit(1758470681.056:838): avc: denied { accept } for pid=14548 comm="syz.9.2335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 722.669596][T14553] netlink: 14 bytes leftover after parsing attributes in process `syz.8.2336'. [ 722.966534][ T30] audit: type=1326 audit(1758470681.546:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14560 comm="syz.4.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48fc98ec29 code=0x7ffc0000 [ 722.996530][T14563] fuse: Bad value for 'user_id' [ 723.026774][T14563] fuse: Bad value for 'user_id' [ 723.035211][ T30] audit: type=1326 audit(1758470681.546:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14560 comm="syz.4.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48fc98ec29 code=0x7ffc0000 [ 723.065440][ T30] audit: type=1326 audit(1758470681.546:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14560 comm="syz.4.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f48fc98ec29 code=0x7ffc0000 [ 723.131346][ T30] audit: type=1326 audit(1758470681.546:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14560 comm="syz.4.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48fc98ec29 code=0x7ffc0000 [ 723.231142][ T30] audit: type=1326 audit(1758470681.546:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14560 comm="syz.4.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48fc98ec29 code=0x7ffc0000 [ 723.266125][ T30] audit: type=1326 audit(1758470681.546:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14560 comm="syz.4.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f48fc98ec29 code=0x7ffc0000 [ 723.357399][ T30] audit: type=1326 audit(1758470681.546:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14560 comm="syz.4.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48fc98ec29 code=0x7ffc0000 [ 723.419938][ T30] audit: type=1326 audit(1758470681.546:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14560 comm="syz.4.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48fc98ec29 code=0x7ffc0000 [ 723.543542][T14553] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 723.556013][T14553] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 723.567019][T14553] bond0 (unregistering): Released all slaves [ 723.606706][T14567] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 723.828243][T14573] netlink: 116 bytes leftover after parsing attributes in process `syz.9.2340'. [ 726.175805][T14615] syz_tun: entered allmulticast mode [ 726.181303][ T5903] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 730.260459][ T5903] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.340521][ T5903] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.386992][ T5903] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 730.408224][ T5903] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.451823][ T5903] usb 10-1: config 0 descriptor?? [ 730.729823][ T5903] usbhid 10-1:0.0: can't add hid device: -71 [ 730.756393][ T5903] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 730.839482][ T5903] usb 10-1: USB disconnect, device number 6 [ 731.086018][T14636] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2359'. [ 734.434767][T14657] binder: 14656:14657 ioctl 4018620d 0 returned -22 [ 734.502225][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 734.502244][ T30] audit: type=1400 audit(1758470693.086:862): avc: denied { map } for pid=14659 comm="syz.8.2366" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 734.547573][ T5903] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 734.789294][ T5903] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 734.809929][ T5903] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 734.916409][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.318001][ T5903] usb 2-1: config 0 descriptor?? [ 735.339521][ T5903] pwc: Askey VC010 type 2 USB webcam detected. [ 735.529306][T14680] netlink: 244 bytes leftover after parsing attributes in process `syz.9.2372'. [ 735.691947][ T5917] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 735.740360][ T5903] pwc: recv_control_msg error -32 req 02 val 2b00 [ 735.768547][ T5903] pwc: recv_control_msg error -32 req 02 val 2700 [ 735.784987][ T5903] pwc: recv_control_msg error -32 req 02 val 2c00 [ 735.794544][ T5903] pwc: recv_control_msg error -32 req 04 val 1000 [ 735.807539][ T5903] pwc: recv_control_msg error -32 req 04 val 1300 [ 735.819707][ T5903] pwc: recv_control_msg error -32 req 04 val 1400 [ 735.838429][ T5903] pwc: recv_control_msg error -32 req 02 val 2000 [ 735.848357][ T5903] pwc: recv_control_msg error -32 req 02 val 2100 [ 735.857868][ T5903] pwc: recv_control_msg error -32 req 04 val 1500 [ 735.862682][ T5917] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 735.865267][ T5903] pwc: recv_control_msg error -32 req 02 val 2500 [ 735.894947][ T5917] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 735.991083][ T5903] pwc: recv_control_msg error -32 req 02 val 2400 [ 736.001988][ T5903] pwc: recv_control_msg error -32 req 02 val 2600 [ 736.027530][ T5917] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 736.037252][ T5917] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.059242][T14677] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 736.127925][ T5917] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 736.479368][ T5903] pwc: recv_control_msg error -71 req 02 val 2800 [ 736.491284][ T5903] pwc: recv_control_msg error -71 req 04 val 1100 [ 736.557403][ T5903] pwc: recv_control_msg error -71 req 04 val 1200 [ 736.573559][T12737] Bluetooth: hci2: command 0x0406 tx timeout [ 736.963600][ T5903] pwc: Registered as video103. [ 736.982583][ T5903] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input21 [ 737.035789][ T43] usb 9-1: USB disconnect, device number 8 [ 737.063309][ T5903] usb 2-1: USB disconnect, device number 67 [ 737.170587][T14690] udevd[14690]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 737.325485][ T30] audit: type=1326 audit(1758470695.903:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14693 comm="syz.4.2375" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f48fc98ec29 code=0x0 [ 737.446407][ T30] audit: type=1326 audit(1758470695.983:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14693 comm="syz.4.2375" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f48fc98ec29 code=0x0 [ 737.981163][ T841] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 738.431153][ T841] usb 10-1: device descriptor read/64, error -71 [ 738.671319][ T841] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 738.811396][ T841] usb 10-1: device descriptor read/64, error -71 [ 738.922280][ T841] usb usb10-port1: attempt power cycle [ 739.183403][T14720] overlayfs: missing 'lowerdir' [ 739.263661][ T841] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 739.298465][ T841] usb 10-1: device descriptor read/8, error -71 [ 739.561570][ T841] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 739.602489][ T841] usb 10-1: device descriptor read/8, error -71 [ 739.721838][ T841] usb usb10-port1: unable to enumerate USB device [ 739.811217][ T5958] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 739.984947][ T5958] usb 9-1: config index 0 descriptor too short (expected 60433, got 21) [ 739.994043][ T5958] usb 9-1: config 0 has an invalid descriptor of length 98, skipping remainder of the config [ 740.012504][ T5958] usb 9-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 740.025390][ T5958] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.033816][ T5958] usb 9-1: Product: syz [ 740.038058][ T5958] usb 9-1: Manufacturer: syz [ 740.053270][ T5958] usb 9-1: SerialNumber: syz [ 740.073595][ T5958] usb 9-1: config 0 descriptor?? [ 740.099949][ T5958] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 740.146246][ T5958] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 740.157578][ T5958] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 740.176872][ T5958] usb 9-1: media controller created [ 740.210244][ T5958] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 740.292993][ T5958] DVB: Unable to find symbol mt352_attach() [ 740.400999][ T5958] DVB: Unable to find symbol nxt6000_attach() [ 740.412039][ T5958] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 740.438772][ T5958] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input22 [ 740.458434][ T5958] dvb-usb: schedule remote query interval to 1000 msecs. [ 740.466879][ T5958] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 740.493413][ T5958] dvb-usb: bulk message failed: -22 (7/0) [ 740.499515][ T5958] dvb-usb: bulk message failed: -22 (7/0) [ 740.514434][ T5958] usb 9-1: USB disconnect, device number 9 [ 740.604862][ T5958] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 741.047786][T14749] netlink: 'syz.4.2390': attribute type 61 has an invalid length. [ 742.743140][T14761] F2FS-fs (loop19): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 742.751659][T14761] F2FS-fs (loop19): Can't find valid F2FS filesystem in 1th superblock [ 742.761758][T14761] F2FS-fs (loop19): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 742.769736][T14761] F2FS-fs (loop19): Can't find valid F2FS filesystem in 2th superblock [ 742.984677][T14766] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14766 comm=syz.3.2395 [ 746.306666][T14800] openvswitch: netlink: Flow key attr not present in new flow. [ 746.432360][T14804] openvswitch: netlink: Flow key attr not present in new flow. [ 746.888058][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.896288][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.257043][T14815] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2405'. [ 748.335811][T14817] syzkaller1: entered promiscuous mode [ 748.341824][T14817] syzkaller1: entered allmulticast mode [ 749.136280][ T30] audit: type=1400 audit(1758470707.713:865): avc: denied { execute } for pid=14826 comm="syz.9.2410" path="/sys/kernel/debug/sync/info" dev="debugfs" ino=4337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=file permissive=1 [ 749.741427][ T10] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 749.901307][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 749.916177][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 749.927406][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 749.945820][ T10] usb 2-1: New USB device found, idVendor=0404, idProduct=c20e, bcdDevice= 0.00 [ 749.955499][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.987002][ T10] usb 2-1: config 0 descriptor?? [ 750.648083][T14844] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2416'. [ 750.681653][T14844] netem: invalid attributes len -4 [ 750.701364][T14844] netem: change failed [ 751.045051][T14852] netlink: 14 bytes leftover after parsing attributes in process `syz.9.2416'. [ 751.507404][T14852] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 751.543504][T14852] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 751.574622][T14852] bond0 (unregistering): Released all slaves [ 752.689469][T14871] overlayfs: missing 'lowerdir' [ 752.729649][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 752.774554][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 752.804246][ T10] usb 2-1: USB disconnect, device number 68 [ 752.828612][ T30] audit: type=1400 audit(1758470711.403:866): avc: denied { unmount } for pid=13508 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 754.086524][ T5852] Bluetooth: hci5: command 0x0406 tx timeout [ 754.173817][T14895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2428'. [ 754.511967][T14897] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 754.553168][T14897] syz_tun: entered promiscuous mode [ 754.559122][T14897] batadv_slave_0: entered promiscuous mode [ 754.579112][T14897] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2429'. [ 754.771598][ T5890] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 755.041365][ T5890] usb 2-1: Using ep0 maxpacket: 32 [ 755.049316][ T5890] usb 2-1: config 0 interface 0 has no altsetting 0 [ 755.058605][ T5890] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 755.070291][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.408757][T14912] netlink: 'syz.8.2434': attribute type 61 has an invalid length. [ 756.018174][ T5890] usb 2-1: Product: syz [ 756.051260][ T5890] usb 2-1: Manufacturer: syz [ 756.055922][ T5890] usb 2-1: SerialNumber: syz [ 756.146369][T14923] FAULT_INJECTION: forcing a failure. [ 756.146369][T14923] name failslab, interval 1, probability 0, space 0, times 0 [ 756.191396][T14923] CPU: 1 UID: 0 PID: 14923 Comm: syz.8.2436 Not tainted syzkaller #0 PREEMPT(full) [ 756.191424][T14923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 756.191435][T14923] Call Trace: [ 756.191441][T14923] [ 756.191448][T14923] dump_stack_lvl+0x16c/0x1f0 [ 756.191476][T14923] should_fail_ex+0x512/0x640 [ 756.191509][T14923] should_failslab+0xc2/0x120 [ 756.191529][T14923] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 756.191548][T14923] ? skb_clone+0x190/0x3f0 [ 756.191574][T14923] skb_clone+0x190/0x3f0 [ 756.191596][T14923] netlink_deliver_tap+0xabd/0xd30 [ 756.191623][T14923] netlink_unicast+0x64c/0x870 [ 756.191649][T14923] ? __pfx_netlink_unicast+0x10/0x10 [ 756.191671][T14923] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 756.191702][T14923] netlink_sendmsg+0x8d1/0xdd0 [ 756.191730][T14923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 756.191764][T14923] ____sys_sendmsg+0xa95/0xc70 [ 756.191792][T14923] ? copy_msghdr_from_user+0x10a/0x160 [ 756.191813][T14923] ? __pfx_____sys_sendmsg+0x10/0x10 [ 756.191852][T14923] ___sys_sendmsg+0x134/0x1d0 [ 756.191875][T14923] ? __pfx____sys_sendmsg+0x10/0x10 [ 756.191928][T14923] __sys_sendmsg+0x16d/0x220 [ 756.191950][T14923] ? __pfx___sys_sendmsg+0x10/0x10 [ 756.191988][T14923] do_syscall_64+0xcd/0x4e0 [ 756.192013][T14923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.192030][T14923] RIP: 0033:0x7f9ecd78ec29 [ 756.192044][T14923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 756.192060][T14923] RSP: 002b:00007f9ece5cc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 756.192077][T14923] RAX: ffffffffffffffda RBX: 00007f9ecd9d5fa0 RCX: 00007f9ecd78ec29 [ 756.192088][T14923] RDX: 0000000000044084 RSI: 0000200000000080 RDI: 0000000000000003 [ 756.192098][T14923] RBP: 00007f9ece5cc090 R08: 0000000000000000 R09: 0000000000000000 [ 756.192108][T14923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 756.192118][T14923] R13: 00007f9ecd9d6038 R14: 00007f9ecd9d5fa0 R15: 00007fff9be27d58 [ 756.192142][T14923] [ 756.407469][ T5890] usb 2-1: config 0 descriptor?? [ 756.571801][ T5890] gs_usb 2-1:0.0: Required endpoints not found [ 756.585191][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 756.619849][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 756.651353][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 756.669153][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 756.681630][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 756.876976][ T5958] usb 2-1: USB disconnect, device number 69 [ 756.909901][T14927] lo speed is unknown, defaulting to 1000 [ 757.138974][ T30] audit: type=1400 audit(1758470715.713:867): avc: denied { nlmsg_tty_audit } for pid=14943 comm="syz.9.2440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 757.578325][ T9503] syz_tun (unregistering): left promiscuous mode [ 758.505287][T14927] chnl_net:caif_netlink_parms(): no params data found [ 758.831171][ T5852] Bluetooth: hci3: command tx timeout [ 758.921777][T14971] binder: 14970:14971 unknown command 0 [ 758.927347][T14971] binder: 14970:14971 ioctl c0306201 200000000440 returned -22 [ 759.018195][T14927] bridge0: port 1(bridge_slave_0) entered blocking state [ 759.044832][T14927] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.054082][T14927] bridge_slave_0: entered allmulticast mode [ 759.068901][T14927] bridge_slave_0: entered promiscuous mode [ 759.078667][T14927] bridge0: port 2(bridge_slave_1) entered blocking state [ 759.089605][T14927] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.098723][T14927] bridge_slave_1: entered allmulticast mode [ 759.111394][T14927] bridge_slave_1: entered promiscuous mode [ 759.329506][T14927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 759.400855][T14927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 759.519676][T14927] team0: Port device team_slave_0 added [ 759.533721][T14927] team0: Port device team_slave_1 added [ 759.768360][T14927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 759.820224][T14927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 760.776077][T14927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 761.155658][ T5852] Bluetooth: hci3: command tx timeout [ 761.168286][T14927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 761.189103][T14927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 761.216421][T14927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 761.541415][ T10] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 761.631633][ T30] audit: type=1400 audit(1758470720.203:868): avc: denied { getopt } for pid=14993 comm="syz.9.2453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 761.701145][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 761.779967][T14927] hsr_slave_0: entered promiscuous mode [ 761.787877][ T10] usb 2-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 761.807038][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 761.809628][T14927] hsr_slave_1: entered promiscuous mode [ 761.824023][T14927] debugfs: 'hsr0' already exists in 'hsr' [ 761.830787][T14927] Cannot create hsr debugfs directory [ 761.836608][ T10] usb 2-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.40 [ 761.852993][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.864253][T15001] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 761.879149][ T10] usb 2-1: Product: য路㲢㙇揇ຩ퐟際ᮖ柵ᅁ축ോ盬킬ﭕ⑾㶢鱬窮┻휶ꋜ喕✔✏╹儀舾籍쯻痏鎔ḉ향쯨댲⼂鮌付衠鰲퇢ᘬ鴚閇鑦쉅誼㱇á [ 761.922056][ T10] usb 2-1: Manufacturer: చ [ 761.941669][ T10] usb 2-1: SerialNumber: 䐺럘者ݓ蓥⬱岸㠚ꪠ卓㒝侚㧷揄힇膹┣摣݉戯裊䆅軒ꋠ콶綡⨂뙪䢑⡚ﴡ韠儮껜ḯ❛胅苟쯋퓏䞥ﬤ었橾㓵砾욷䁌◲朑霴 [ 762.121009][ T5958] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 762.310703][ T5958] usb 10-1: config 220 has an invalid interface number: 76 but max is 2 [ 762.350154][ T5958] usb 10-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 762.373389][ T5958] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 762.401918][ T5958] usb 10-1: config 220 has no interface number 2 [ 762.465094][ T5958] usb 10-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 762.494984][ T5958] usb 10-1: config 220 interface 0 has no altsetting 0 [ 762.506576][ T5958] usb 10-1: config 220 interface 76 has no altsetting 0 [ 762.514969][ T5958] usb 10-1: config 220 interface 1 has no altsetting 0 [ 762.530000][ T5958] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 762.606518][ T5958] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.615517][ T5958] usb 10-1: Product: syz [ 762.620173][ T5958] usb 10-1: Manufacturer: syz [ 762.625630][ T5958] usb 10-1: SerialNumber: syz [ 763.190843][ T5852] Bluetooth: hci3: command tx timeout [ 763.661078][ T10] usbhid 2-1:1.0: can't add hid device: -71 [ 763.678221][ T10] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 763.701539][ T10] usb 2-1: USB disconnect, device number 70 [ 764.152566][T14927] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 764.207780][T14927] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 764.228935][T14927] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 764.256652][T14927] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 764.725624][ T5958] usb 10-1: Found UVC 7.01 device syz (8086:0b07) [ 764.736498][ T5958] usb 10-1: No valid video chain found. [ 764.753471][ T5958] usb 10-1: selecting invalid altsetting 0 [ 764.823731][ T5958] usb 10-1: selecting invalid altsetting 0 [ 764.872525][T14927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 765.003206][ T5958] usbtest 10-1:220.1: probe with driver usbtest failed with error -22 [ 765.044212][ T5958] usb 10-1: USB disconnect, device number 11 [ 765.048880][T14927] 8021q: adding VLAN 0 to HW filter on device team0 [ 765.521019][ T5852] Bluetooth: hci3: command tx timeout [ 765.622487][ T6708] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.629706][ T6708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 765.774311][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.781426][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 765.897771][T15048] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 765.919801][ T30] audit: type=1400 audit(1758470980.494:869): avc: denied { ioctl } for pid=15047 comm="syz.9.2464" path="socket:[51615]" dev="sockfs" ino=51615 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 766.023764][T15048] netdevsim netdevsim9 netdevsim0: left promiscuous mode [ 766.450685][T15053] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2465'. [ 766.481963][T15053] netem: invalid attributes len -4 [ 766.487214][T15053] netem: change failed [ 766.737716][T14927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 766.806170][T15065] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2465'. [ 766.912089][T14927] veth0_vlan: entered promiscuous mode [ 766.926167][T14927] veth1_vlan: entered promiscuous mode [ 766.998133][T14927] veth0_macvtap: entered promiscuous mode [ 767.022178][T14927] veth1_macvtap: entered promiscuous mode [ 767.075156][T14927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 767.098967][T14927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 767.123935][ T3492] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.152898][ T3492] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.183644][ T3492] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.235254][ T2997] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.315811][ T2997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 767.325308][ T2997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 767.452381][ T2997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 767.629458][ T2997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 767.775369][ T30] audit: type=1400 audit(1758470982.355:870): avc: denied { mounton } for pid=14927 comm="syz-executor" path="/root/syzkaller.XLqIbk/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=51919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 767.838397][ T30] audit: type=1400 audit(1758470982.395:871): avc: denied { mount } for pid=14927 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 767.884472][T15072] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2469'. [ 768.776564][ T30] audit: type=1400 audit(1758470983.355:872): avc: denied { setattr } for pid=15085 comm="syz.4.2472" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 769.268215][ T5917] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 769.446120][ T30] audit: type=1400 audit(1758470984.025:873): avc: denied { getopt } for pid=15097 comm="syz.1.2475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 769.447656][T15099] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43833 sclass=netlink_route_socket pid=15099 comm=syz.1.2475 [ 769.514845][ T30] audit: type=1400 audit(1758470984.095:874): avc: denied { write } for pid=15097 comm="syz.1.2475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 769.712384][ T5917] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 769.727851][ T5917] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 769.741839][ T5917] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 769.755106][ T5917] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.776457][T15095] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 770.009550][T15110] netlink: 'syz.4.2478': attribute type 61 has an invalid length. [ 770.747736][ T5917] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 771.960165][ T5910] usb 10-1: USB disconnect, device number 12 [ 772.896876][ T5917] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 772.910728][T15139] 9pnet: Could not find request transport: 0xffffffffffffffff [ 773.058155][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 773.148529][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 773.161463][ T5917] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 773.171064][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.188658][ T5917] usb 2-1: config 0 descriptor?? [ 774.185429][T15159] openvswitch: netlink: Flow key attr not present in new flow. [ 775.373271][ T5917] uclogic 0003:256C:006D.0012: v1 frame probing failed: -71 [ 775.386622][ T5917] uclogic 0003:256C:006D.0012: failed probing parameters: -71 [ 775.440629][ T5917] uclogic 0003:256C:006D.0012: probe with driver uclogic failed with error -71 [ 775.463853][ T5917] usb 2-1: USB disconnect, device number 71 [ 775.567486][T15174] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000031: 0000 [#1] SMP KASAN NOPTI [ 775.579601][T15174] KASAN: null-ptr-deref in range [0x0000000000000188-0x000000000000018f] [ 775.588029][T15174] CPU: 1 UID: 0 PID: 15174 Comm: syz.8.2498 Not tainted syzkaller #0 PREEMPT(full) [ 775.597442][T15174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 775.607501][T15174] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 775.613388][T15174] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 e9 8e c0 75 09 66 66 2e 0f 1f 84 00 00 00 [ 775.632989][T15174] RSP: 0018:ffffc900031178a0 EFLAGS: 00010282 [ 775.639065][T15174] RAX: dffffc0000000000 RBX: 0000000000000188 RCX: 0000000000000000 [ 775.647019][T15174] RDX: 0000000000000000 RSI: ffffffff8b968c22 RDI: dffffc0000000031 [ 775.654986][T15174] RBP: 0000000000000188 R08: 0000000000000001 R09: 0000000000000000 [ 775.662944][T15174] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8b968c22 [ 775.670901][T15174] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 775.678864][T15174] FS: 00007f9ece5cc6c0(0000) GS:ffff8881247b2000(0000) knlGS:0000000000000000 [ 775.687775][T15174] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 775.694336][T15174] CR2: 000000110c38156a CR3: 0000000068235000 CR4: 00000000003526f0 [ 775.702280][T15174] Call Trace: [ 775.705532][T15174] [ 775.708448][T15174] __kasan_check_byte+0x13/0x50 [ 775.713277][T15174] lock_acquire+0xfc/0x350 [ 775.717673][T15174] ? __pfx___might_resched+0x10/0x10 [ 775.722951][T15174] down_write+0x92/0x200 [ 775.727193][T15174] ? kernfs_remove_by_name_ns+0x3d/0x110 [ 775.732826][T15174] ? __pfx_down_write+0x10/0x10 [ 775.737663][T15174] kernfs_remove_by_name_ns+0x3d/0x110 [ 775.743100][T15174] driver_remove_file+0x4a/0x60 [ 775.747935][T15174] bus_remove_driver+0x224/0x2c0 [ 775.752848][T15174] driver_unregister+0x76/0xb0 [ 775.757589][T15174] comedi_device_detach_locked+0x12f/0xa50 [ 775.763374][T15174] do_devconfig_ioctl+0x555/0x710 [ 775.768379][T15174] ? __mutex_lock+0x1c5/0x1060 [ 775.773156][T15174] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 775.778699][T15174] ? find_held_lock+0x2b/0x80 [ 775.783372][T15174] comedi_unlocked_ioctl+0x165d/0x2f00 [ 775.788833][T15174] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 775.794617][T15174] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 775.800489][T15174] ? do_vfs_ioctl+0x128/0x14f0 [ 775.805234][T15174] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 775.810236][T15174] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 775.817065][T15174] ? hook_file_ioctl_common+0x145/0x410 [ 775.822584][T15174] ? selinux_file_ioctl+0x180/0x270 [ 775.827764][T15174] ? selinux_file_ioctl+0xb4/0x270 [ 775.832872][T15174] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 775.838651][T15174] __x64_sys_ioctl+0x18e/0x210 [ 775.843397][T15174] do_syscall_64+0xcd/0x4e0 [ 775.847891][T15174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.853767][T15174] RIP: 0033:0x7f9ecd78ec29 [ 775.858156][T15174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 775.877738][T15174] RSP: 002b:00007f9ece5cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 775.886122][T15174] RAX: ffffffffffffffda RBX: 00007f9ecd9d5fa0 RCX: 00007f9ecd78ec29 [ 775.894064][T15174] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000004 [ 775.902023][T15174] RBP: 00007f9ecd811e41 R08: 0000000000000000 R09: 0000000000000000 [ 775.909981][T15174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 775.917926][T15174] R13: 00007f9ecd9d6038 R14: 00007f9ecd9d5fa0 R15: 00007fff9be27d58 [ 775.925876][T15174] [ 775.928867][T15174] Modules linked in: [ 775.933412][T15174] ---[ end trace 0000000000000000 ]--- [ 775.964301][ T30] audit: type=1400 audit(1758470990.549:875): avc: denied { read } for pid=5203 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 775.994411][T15174] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 776.003804][T15174] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 e9 8e c0 75 09 66 66 2e 0f 1f 84 00 00 00 [ 776.025110][ T30] audit: type=1400 audit(1758470990.549:876): avc: denied { search } for pid=5203 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 776.056637][ T30] audit: type=1400 audit(1758470990.549:877): avc: denied { search } for pid=5203 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 776.072336][T15174] RSP: 0018:ffffc900031178a0 EFLAGS: 00010282 [ 776.083011][ T30] audit: type=1400 audit(1758470990.549:878): avc: denied { add_name } for pid=5203 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 776.112906][ T30] audit: type=1400 audit(1758470990.549:879): avc: denied { create } for pid=5203 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 776.136895][ T30] audit: type=1400 audit(1758470990.549:880): avc: denied { append open } for pid=5203 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 776.138124][T15174] [ 776.166224][ T30] audit: type=1400 audit(1758470990.549:881): avc: denied { getattr } for pid=5203 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 776.177412][T15174] RAX: dffffc0000000000 RBX: 0000000000000188 RCX: 0000000000000000 [ 776.202371][T15174] RDX: 0000000000000000 RSI: ffffffff8b968c22 RDI: dffffc0000000031 [ 776.210619][T15174] RBP: 0000000000000188 R08: 0000000000000001 R09: 0000000000000000 [ 776.219802][T15174] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8b968c22 [ 776.228487][T15174] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 776.237579][T15174] FS: 00007f9ece5cc6c0(0000) GS:ffff8881247b2000(0000) knlGS:0000000000000000 [ 776.246719][T15174] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 776.253698][T15174] CR2: 00007fffc999ad48 CR3: 0000000068235000 CR4: 00000000003526f0 [ 776.262492][T15174] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 776.271324][T15174] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 776.280828][T15174] Kernel panic - not syncing: Fatal exception [ 776.287124][T15174] Kernel Offset: disabled [ 776.291433][T15174] Rebooting in 86400 seconds..