last executing test programs: 3m48.51221326s ago: executing program 4 (id=86): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000e95000/0x4000)=nil, 0x4000, 0x66) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='::::\x00', 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) (async) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) ptrace(0x10, r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) ptrace$getregset(0x4204, r1, 0x204, &(0x7f0000000040)={0x0}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @private=0xa010101}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x8001}, 0x8) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) (async) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r5, 0x114, 0x5, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$RDS_RECVERR(r5, 0x114, 0x5, &(0x7f0000000040)=0x1, 0x4) 3m48.350295573s ago: executing program 4 (id=88): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffa8) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x5f, 0x2a, 0xb4, 0x20, 0xc72, 0xd, 0x279b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0xa2, 0x92}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_kvm_add_vcpu$x86(0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000100)={0x400, 0xa, 0x0, 0x0, 0x0, 0x180, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}) 3m47.220693895s ago: executing program 2 (id=90): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0a000000050000000200000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000003000000850000002a00000095000000000000003677716b27d6bfa388c8f9edeb1e6f871bc2cc8b43b0c2e3414a7b841588518a5e64bb7f43f51a94"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x18) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40080) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x100000000000008, 0x0, 0x3}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000740)={{{@in=@multicast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f00000002c0)=0xe8) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000580)={0x7a, 0x200, 0x8, 0xfffffff7, 0x81}) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in=@rand_addr=0x64010100, @in=@remote, 0x4e22, 0x1, 0x4e20, 0x5, 0x2, 0x80, 0x20, 0x3a, r6, r8}, {0xfffffffffffffff9, 0x3, 0x100000000, 0x7, 0x7fff, 0xffffffffffffffff, 0x1, 0x4}, {0x7, 0x8001, 0x8, 0x5}, 0x3, 0x6e6bb2, 0x1, 0x0, 0x2}, {{@in=@loopback, 0x4d3, 0x33}, 0xa, @in=@empty, 0x3503, 0x2, 0x3, 0x1, 0x5, 0x1, 0xc0}}, 0xe8) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') preadv(r9, &(0x7f0000000600)=[{&(0x7f0000000380)=""/116, 0x74}], 0x1, 0x82000001, 0xff) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[], 0x5b) sendfile(r10, 0xffffffffffffffff, &(0x7f0000000000), 0x9) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r11, 0x8946, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000001100)={0x18, 0x0, 0x0, 0x0, 0x0}) r12 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r12, &(0x7f0000000000)={0xa, 0x0, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffef}, 0x20) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYRES32=r7], &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x6, [{0xe3, &(0x7f0000000940)=@string={0xe3, 0x3, "4372d575b7c5eb5a63f94b3d7c8563126aadc0ed4f706f1588553bacaa003cea575578e4dfd3ddb05047f2e493284a01d005d823b1c5ac3baa5355bd92b9d6d0ee97eb664f9dd3a20db4ffbd858d3f258757e831c370e9ef198c081954bf70f98151c26752039e57b363b8b4150f1545a74e334bc7c04ef1324e6999ec83a75505e5375090e832def78db8d1d3b483dce185e05c852bbc71aa71496e2a446343ad016b5ad1c6027d11a4a7e59514ccccb874d1fba6cb2e4071171d4cb5072637f66cc5ff9f70ae6310cec555e7a612484abf8c9171f8e505ae07f5c25bf085d0e1"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x2009}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x44c}}, {0x4b, &(0x7f0000000640)=@string={0x4b, 0x3, "71350b5da9b1b605df6437874398f61cd5ebd7321c13dfd61bc4245fdd81da98d24596bc07aebb52d46baf984dc4e03edc687de35a87f0ef0417ffffffffffffffffe09a9c801d5c4a"}}, {0x1b, &(0x7f0000000200)=@string={0x1b, 0x3, "6db3d8b1cbd74ecf45b5fc408680ce9aaf385a6e48b81b7916"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x3c74}}]}) 3m44.706158201s ago: executing program 3 (id=95): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdir(0x0, 0x324) msgsnd(0x0, 0x0, 0x0, 0x800) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000240)={0x40, 0x14, 0x4, "0fa5f5de"}, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x304}, "8763c1e5966c6af2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a0400b9", "12772541f8eb02bb"}, 0x28) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r3) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) socketpair(0x26, 0x4, 0x7, &(0x7f00000001c0)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r6, 0x0, 0x20000000002) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x1c, r8, 0x303, 0x70bd2a, 0x25dfdbfb, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0xf0}, 0x8010) 3m44.553540421s ago: executing program 1 (id=96): ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000200)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x1}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 3m42.56196492s ago: executing program 2 (id=97): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x100, 0x70bd2a, 0x1, {0x0, 0x0, 0x0, 0x0, {0xb, 0xe}, {0xffff, 0xffff}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES8=r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYBLOB="20081875b13d845a71060000000000000001015e24036a56eafe2fbfc66a6225e3aa34b72d2ed7e704307d25cd321773f0e59f5c03671a823fa81cf4ff4571e1513934cd0a8096e431c9bc7199552760421b350bf4d1a7ca10328b8934dd3cd70d331c2d4994833effdedd60e6afd7a1f78c94511d15dfcb91b710fe6d09aa63c0ee306038b1633dfde38646b7fa687e0a6d0d7b8e9388023ddc483ebc2a42509b77ca87a462a5d7dcbf40f4c6f76adf139fc52b"], 0x48}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newsa={0x138, 0x10, 0x613, 0x70bd28, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x7ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x39}, {@in=@rand_addr=0x64010102, 0x4d2, 0x32}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0xfffffffffffffffc, 0x0, 0xb, 0x5, 0xfffffffffffffffc, 0x13a0000, 0x1, 0xc}, {0x0, 0x7fff, 0x0, 0xadb8}, {0x5, 0x0, 0x1}, 0x0, 0x0, 0x2, 0x4, 0x0, 0xb0}, [@algo_crypt={0x48, 0x2, {{'chacha20\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x90}, 0x0) capget(&(0x7f0000000180), 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) copy_file_range(r2, 0x0, r2, 0x0, 0xb, 0x0) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460e05030b0700000000000000030003000600000019010000000000080000000000000000bd010000000000002f9000000800380003000100040044fe05000070da6500000600000000000000090000000000000008000000000000000002000000000000687c000000000000001000000000000005000000ff0100000000000000000080060000000000000002000000000000000600000000000000ff7f000000000000080000000000000056e574642c0000000500000000000000ffffffffffffff7fdb00000000000000ffffff7f000000000a0000000000000008000000000000009e73e7b0d0c5b7322ccb8c4d7d633147a7505f0f7fc217430b622ff66ca6e0a75843396563286e9e7bf08792721c4d10faf61efb8cc3db1fbd8976128084288802df5149a0220ce2a7f4a205c560f84f1c4759ebdc732e73ab8b5fd4cf33f6d9dcd1751d08b7703d4122886120ec849efb08fc5de80aa4433f6af022ada4dba7f073188d98691303830d24dff86bcd75afa0668f23cd4f62c5e7e64a36ff8397be44ce9414940d7d39dde4f92eb66ba2b787021999a857013522ef658ab5a05a640cfc9fd9fd29de685fa62f357ab8ed46fc9d5473c87900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800"/1721], 0x6bf) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r3, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r4, &(0x7f00000000c0)={0x27, 0x0, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) r5 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffff8d, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe2(&(0x7f0000000000), 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000080), 0x32, 0x40) ioctl$I2C_RDWR(r7, 0x707, &(0x7f00000004c0)={&(0x7f0000000480)=[{0x4, 0x11, 0x0, &(0x7f0000000180)}, {0x15, 0x2401, 0x57, &(0x7f0000000240)="1e5b38f3bf8ad20d2b8fe60300fb63f289d3eb24ed15e4aa10a08c5c1a8609258b3344ac922dac6bc808e3df63bf77000a771fa00b2bd38800bcd19280c3ce5a0406026eebddc4cc1533329dbdd66a62de6e135feb8513"}, {0x3, 0x8401, 0x0, 0x0}, {0x7, 0xa210, 0x0, 0x0}], 0x4}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) socket(0x2b, 0x1, 0x1) bind$inet6(r8, &(0x7f0000000a00)={0xa, 0x4e22, 0x0, @local}, 0x1c) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r9, 0x104, 0x2, &(0x7f0000006680)=0x80000000, 0x4) listen(r8, 0x5) syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a9646", 0x1c, 0x6, 0x0, @local, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0xfffe, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x3, 0x0, {0x0, 0x0, 0x0, r6, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x200, 0xa}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m42.415907677s ago: executing program 4 (id=98): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$kcm(0x10, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x13, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1494c0, 0x189) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xc0900, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x303a40, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) (fail_nth: 2) 3m42.330407307s ago: executing program 2 (id=99): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) read$alg(r0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) eventfd(0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) listen(r5, 0x4000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'}) r6 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r6, 0x2284, &(0x7f0000000080)) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, 0x0, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x81) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1ea) rmdir(&(0x7f0000000100)='./control\x00') socket$inet6(0xa, 0x6, 0xf9) 3m41.350937508s ago: executing program 3 (id=100): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001b80)=""/112, 0x70}], 0x1}}], 0x1, 0x700, 0x0) sendfile(r4, r0, 0x0, 0x578410eb) 3m41.23905992s ago: executing program 2 (id=101): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000400)={@broadcast, @dev, @void, {@ipv4={0x8808, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x3f00, 0x88be, 0x8}}}}}, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005240000000d240f0100000000000000000009055c03200000000009058202080000000009050302"], 0x0) 3m40.960141437s ago: executing program 4 (id=103): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x6, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000880}, 0x40000) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r7) sendmsg$NLBL_CALIPSO_C_REMOVE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r9, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r9, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x4014) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r6}, 0x18) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x38, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xd}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x20044010) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume_offset', 0x202040, 0x89) 3m40.858859462s ago: executing program 0 (id=104): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0xffff, r1, 0x0}]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r6, 0x29, 0x24, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000003c0)) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r7 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r7, 0xc0445624, &(0x7f00000000c0)={0x140980001, 0x0, "bf5dff0f251ed700f61765c214525a2572ce1ced49e8981e103268fadc1433ae", 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x3e, [0x0, 0x1, 0x0, 0x2]}) 3m39.557953711s ago: executing program 3 (id=105): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x5a, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e010000084101", @ANYBLOB="faffffbf132eb643f326e12f496d87e364ba88"], 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000000)={0x8, 'caif0\x00', {'veth1_macvtap\x00'}, 0x9}) r1 = gettid() rt_sigqueueinfo(r1, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xfffffffe}) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) iopl(0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_usb_connect$cdc_ncm(0x4, 0x78, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x2, 0x1, 0x9, 0x20, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x28d, 0x6, 0x18, 0x9}, {0x6, 0x24, 0x1a, 0x8, 0x1}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x7e}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x96}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x6, 0x8, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x3, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x9, 0xd0, 0xb}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x201, 0x1, 0x6, 0x9, 0x18}, 0x19, &(0x7f0000000340)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "7dd509d44fa381106adf21d3e8bc5a97"}]}, 0x1, [{0x4, &(0x7f0000000380)=@lang_id={0x4}}]}) ioprio_get$pid(0x2, r2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x15}, 0x8040) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket(0xb, 0x2, 0x10) write(r6, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5b", 0x7e) r7 = socket(0x840000000002, 0x3, 0x100) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x8040) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) 3m35.552613889s ago: executing program 0 (id=106): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = syz_open_dev$dri(0x0, 0x1ff, 0x0) syz_usb_connect(0x6, 0xd6c, &(0x7f0000000b80)={{0x12, 0x1, 0x310, 0x4, 0x63, 0xb1, 0x40, 0x403, 0x6015, 0x3da4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd5a, 0x4, 0x7, 0x4, 0x50, 0x80, [{{0x9, 0x4, 0x6c, 0x5, 0xa, 0x5e, 0xbf, 0x3a, 0x70, [], [{{0x9, 0x5, 0xe, 0x3, 0x20, 0x3, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x2}]}}, {{0x9, 0x5, 0x107, 0x3, 0x8, 0x7f, 0x80, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xd, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xa, 0x9}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x1, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x6}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x72, 0x9c, 0xd, [@generic={0xdd, 0x10, "801c3a7218bff94b1ae1c478b5be7b280d19fbfb883f0dea9fa1ec8261a78ff05f0bf69fbb3997836bee2e517720657739e7f85a947656e390cd1349dd050e24171b5bc68c6677f046020eca2ab3bacf669885ad0be29259844ffcf148610a7e5e1bc47cdd6ec0e26e2d70a37df2d714663266dd4bb7f15c4a804c4be973fa9566328be9659c40c8fb0fb896e1c788941add046e4ac5c9c28d380782dd8355fff03fc7d824feda43945616b4f00c92bb4038e330a429965e8db7379719cafa01eea695b99222283db7b5d9069bafa232f8cbcd93973632099e4270"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0xe0, 0x3, 0x6, [@generic={0x9f, 0x22, "1f079cfede864ce219084efd7a3d2527981ca347841cc84aacc5cc884131e1cc1602f840812525a45296f78a12c759da7d8578b9c1fbce77dfeccdb2344e76f97e529e814573f2fd446d8f8b8c00410e11dd3ab0da3d48a63f2b1a1283deb18b37e2e6a07adacff33e49261993d9e2fee00d7b69c1ce1930f7f488ff388d570e5ab28f7c3c7d0df4966db80a3c9374ffd7106e28c97a4a4a5dc12ff620"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x81, 0x3, 0xd, [@generic={0xae, 0xa, "125df5f4c7b0a756920705ac4e146894db52a2401b4ca857dd2010c27935632be6082cd1a46e6a72c54891323a4ff6f9155fce5412cd55db45552bce2afe941a58c9e80b8b7fe6502f0545f45e66679a27f9bc304c71eae540696357d390f31a50237db16d3f55e051b7e2081672b1f296c3dc7e99532b2122bfe1fb4020d01699425145517469fd4951dae9dfff6ed8f35d32ec485f4e540342bfbd371ff636ab637d5590decc0795e58641"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x20, 0x5, 0xf6, 0x7}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x6, 0x92, 0x40, [@generic={0xe1, 0x5, "addf4ed9372f5e02fe035c1c39c333e7523b3c6e7bf45a18a12bf0d9d51ca13a936e7a78fa36bdc2c05fec74cf8e4169f16c0226186b03a985b0dabba366c16a752b030b06071538c48027b65524ed7b88da29ba8965b39f858c725e2025cf18a52ad4ebeb10494234c056cab4e8275732342dbe2fee39ebb35b47dca33a69d25ae20b6629515e91a9987243a2630757e05db6afd928d8dfab608d7a1f3162cc7721784a700cd6b50fd13366f9f9f07bfd4d5e403f4cf4975cc991286958d9da677a5274ad2a1b5c670e3876b19c4374d76f0265da65fd6e35491cc4e577cc"}, @generic={0x1d, 0x0, "245ce139f6e9bf0f12b7d1f3135f36c628f27467fcc81676580b09"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x440, 0x4c, 0x6, 0xc, [@generic={0xc4, 0x11, "2fce31b7d0ec886c90a475cdfcf26073a69eaf91bae74d70752d339fa54a1372fdf8dc3c70f472879ad7a7f164c713d5d543c2daab9e2cb85786914475ed946bf486b3a9b788cadfb2c1f098c7c75c7602fc8fec0e87d0ff4a3ae243917b589e1d70cdfe41eb3738cebfc8046ee00475ddb3fe50f6bc8404ebf62ebbf0b6b848492ff7e6cfea6056fb8bbc053fd6795b575f581524461a708cbddf7c9d32f5803ce8ccf5b79ed0261a6a703cb8c61b7fc70ef4676e32dee473b829905709fdbf2597"}]}}, {{0x9, 0x5, 0xa, 0x4, 0x400, 0x2, 0xc6, 0x8, [@generic={0x87, 0x6, "7bd5c5897990da70cb13f9985dcd864420b1d9879cd5859134c52215694ec5b3f9aa7d60f04cae1ba19c1dfa99d00e516c143da264398e42e447a3668e442a14583e5f870e4757a7b6a5bb8b4a2ba2e59dd5aa4d8000d608bc96fe171a1921137028bd354fc2b10c2e1a22243082009c758150853b97eab86bedfcee34a03b03f3c0921d4d"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0xd6}]}}]}}, {{0x9, 0x4, 0xa6, 0x0, 0xd, 0x6f, 0xa7, 0xa0, 0x64, [@uac_control={{0xa, 0x24, 0x1, 0x8, 0x7c}, [@feature_unit={0x11, 0x24, 0x6, 0x6, 0x1, 0x5, [0x2, 0x6, 0x7, 0x4, 0x5], 0x7}, @feature_unit={0xb, 0x24, 0x6, 0x2, 0x4, 0x2, [0x6, 0x9], 0x3}, @extension_unit={0x7, 0x24, 0x8, 0x3, 0x6987, 0xa8}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x205, 0x1, 0x6, 0x1, 0xa0, 0xbc}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0xf, "6a2002"}]}], [{{0x9, 0x5, 0x5, 0x0, 0x400, 0x10, 0x5, 0x10, [@generic={0x55, 0x23, "1669369365dd30bf1db63cc556ec74d48c15f5f8e8103ffa0b6c2533e676a76a9d7049cff1a8c2bacb64cc0b8daa859a893290d78845b8808e5d119ba01413e3bf448bbc02b61c18f3a1b70d849a375795e14d"}, @generic={0x7e, 0x23, "6fe60fa222f7feeb0e5540d51b725e19d8dea9de0e64596cd9e86e8c45981df08034ba23973d9bf622823d5013e5c8797e961b6235af44ffa49aaa197ff23c134b11b6dae2abebad43ad04f40ba6e3ef8476745382540ce874b6e82bc8ef718c977b200e536d80428e3e508d8c880a9c8c6db285f7145c0997d64cfb"}]}}, {{0x9, 0x5, 0x3, 0x1, 0x3ff, 0xa3, 0x48, 0x1, [@generic={0x7f, 0x8, "83dfbbed7fb94fe5e27c74f222d10b63362866b96ea7961a74248866d35cf750a01817b929eba04569101503c802244a0190c87d0d980704406b74c7f97fee2fbd2d8537ffb3e05cc4dca338fa4b0d8ad5b44fe6b3041dd94fd6da787b87af0fd18c76a59c6597dca71fddd49f6d5dea97558cda8179a63ca417b334d3"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x20, 0xed, 0x1, 0x6, [@generic={0x6, 0x11, "84ba5b58"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xd2, 0x8001}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x80, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x6}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x3c, 0xf, 0x19, [@generic={0x89, 0x0, "11e3d8bcb352ca559ebc0e0e3ef59ce1e83f099a8cba7a003b77a0052ae2296cfbb8ba3324e35227d0052abcbbd5ac2db8ba1bd372959b7d82775ef505df69fcdc593f2a4942312342731a2da0f7f3f1c67acbb81d466afb0a0ef391b440dd9c84a5188b9a944ea81ba22b49fad354d49101f2fc23516b4fff5ee21800dfc1e518340a813e79a2"}, @generic={0xd2, 0x23, "92d7fbef71cc720ee702140621b40390c3b60c7965070bdaf108075bcb8a8112740b51b9e08b0da478369b9e824671d157e03c41799e019eee13e5c10651dbb4bac33a0f876035e78b38e6de34b28f803581b0f6a38520d998af5569652da3fcca94880c606252c5cc2e982b8c5232cc5ebf4d9dd83e766e3f06d0e2931ed8a3eee6645158ff41911ae22a4518abca624f67e05366a42391c6fb37eae797e78953ae2c137d0068245683e133782a95f8bf84eb28a188e57e8e41adcaf11261bfeddb9847bfe39927139fb6653dfeac5b"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x0, 0x40, 0x2, 0x9, [@generic={0xd0, 0x8, "26dc97ee0e7e139e6b09351ed6660b92aa8295e66c254726e1a375ea4c5ebddd8c82a86413624f2cb115cb9fe78211e5dcfb39e86caac9972c3b5a314a4990e9cf72b682046ad82feae49387378fe800ad09b5ce9fcceaf07bc594911ce49fb9e4d340da0e3518056b51fb8d756fac485b7b91920d2c8d76270bb09ab245f851c5c37f0034fa3be07fc58ebefe0f68ef313c141e7846bfd3cf64be4d2964134e635702c4e9de96c666d0a591b9683d245142d2aba12fb422e12295c8a2b0da2c44e1ce1401c30850412b59dfc086"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x4f, 0x1}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x90, 0x2, 0x1}}, {{0x9, 0x5, 0x9, 0x2, 0x8, 0x28, 0x2, 0xff}}, {{0x9, 0x5, 0x8, 0xc, 0x400, 0x8, 0x80, 0xc, [@generic={0x4a, 0x0, "4aa87301cf5277681d9fe2b1285d35b62601714b86ec056176c7da614837a2781ef9a5da99d6d19ec442916b725cd67e7e770814e6fda407187e4656b2185513e8e097d40c355058"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x7}]}}, {{0x9, 0x5, 0x9, 0x8, 0x400, 0x8, 0x1, 0xfb, [@generic={0x66, 0x24, "139b72c111a5287fa2c81ec75763f75de3bdcd1f35210c543ca3c9d0f015c76f6e96eaf524bd8b6be485a2afd340a82f88326ac5b84aedceeb4920e68cf05b17f7c1b8d0c23921b7d714bee985ed0b7b8d7beec7832012ac4e737ae1ce4063bef8d5b2f3"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x80, 0xea, 0x8}}, {{0x9, 0x5, 0x9, 0x4, 0x200, 0x3, 0x2, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xf3, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xe, 0xe}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x81, 0x81, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xa, 0xab}, @generic={0xd2, 0x24, "cb33de27a08d230ec939964895ada1916bb63ea0d787b688a00c7c5c038df20486caa16608dd1f536cc934577481bc8b8d30fd9eeddfd424837adb29621ee8996c82978efafa12d0d12a2bf884c12103647a96989b404dc5f9245bc64cbf7bd81b245a3c394a9093e5975986191c182796401b67e716c58382207404e03c2602eacff9ea2f8ee4202cf87541c3f4a0871c535a24ba935527fa0b9aa94ccfce85c0374e884c77e777f76d6a468ccbbb7da868b718db6de76bc6ea0afe813a56a840525059477dcc932ad2db8b67fa8d44"}]}}]}}, {{0x9, 0x4, 0x26, 0x16, 0x0, 0x1e, 0xb7, 0xdc, 0xd, [@hid_hid={0x9, 0x21, 0x3, 0x3, 0x1, {0x22, 0xf1b}}]}}, {{0x9, 0x4, 0xcc, 0x8, 0x6, 0x77, 0x38, 0x9d, 0x22, [@generic={0x2d, 0x2, "d9a3927ac6bd17bb576eb30a53dec9988613d1d51919d0bb7f403823ba2e12862dc13ef368190e3f8160a3"}, @uac_as={[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x1, 0x1, 0x3, 0x24, "", 'P'}, @as_header={0x7, 0x24, 0x1, 0xf5, 0x39, 0x1001}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x7, 0x5, 0x7, "65fedd"}]}], [{{0x9, 0x5, 0x0, 0x1, 0x400, 0x81, 0xb, 0xa, [@generic={0x2c, 0xc, "e313cf890ee9bc24ccb477482796e2312f82ab38451fa2ec8cea54329f81c36fe5575b6f6b1ac381f13c"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x7f, 0x0, 0xa0, [@generic={0x3c, 0x31, "27d300c1a61a3d167b44519f39e6b6d9866752cebfcf012c7ecd2037aba2c638c967d39019b49debdfdae88f34b6fcb232f29668641414e28c51"}, @generic={0x7d, 0x23, "3cd58c03595b047b85fe4ed348eca90b048c4be513faad9de28f765c3952133647d8c39c8ee349d37f3cb61d4bdbb78cd0d1b206b13e9b74f5856283b24c48429fc899ab7bf693107207e70ac8419825352c183f3804566169a9dc05a71549b0861c8e2c00583bcf2f84c40803d2522e9e63d9c71255dbe3b5ee5a"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x200, 0x80, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8c, 0x8}]}}, {{0x9, 0x5, 0x8, 0x8, 0x8, 0x7, 0x1, 0x8b}}, {{0x9, 0x5, 0x9, 0xc, 0x20, 0x8, 0x0, 0x5, [@generic={0x74, 0x21, "e6216c666ea7d45e40e582b82160244b824332e192d1db1e10d37393c35815aff3363002d6d5577d0d977f8aebf6fda12758672734552974d663ccb0580f7452b0f10fd4f29a12f5a6b10d96da57e551fcded21a80b6d2ee8862eaeb82c1307ed497afb47509e00e863607e2a7ebfd573697"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x3ff, 0x7f, 0x8, 0x0, [@generic={0x16, 0x24, "51eb0474ad06b12fc26e94cc127d61831424ef4a"}, @generic={0x4d, 0x21, "cecd37c684602f7ee46769d1d7b63c0e61a17c8854540fb9c463aaeb3220eca75e7111b9c29496534ab423e26dc105d84e44fa310dfc1901d40b2d1303422b39832f1c57d51ae16c930f94"}]}}]}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0xea, 0x3, 0x5, 0x20, 0x7}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x7, [{0x9d, &(0x7f00000002c0)=@string={0x9d, 0x3, "b2848d4272e89db29a2a6379c936cbc133c636c03a8b12891633e9c484f0c6fe00644d81e938b3eea5a993714b5bc20b3b03f078dc35e6ced94484c326577fc6087d078e321cc708ff68047f63e0cfd723903b243540398bdf557431a3fba87c3672ddcf477167f76052fa7261372d788e74f593872cd65546563b2a65a2de7d06d28e28ed090b838c7db3815ed3cb3a62f9b85884d8d4c2c735fc"}}, {0x61, &(0x7f0000000200)=@string={0x61, 0x3, "71c6ed9d7783f044542c240048ece1cdbcf2b0e29981bc90743dc5494e50db92e0b83defdb22ee0a5dc9e6b1c232e1093f4a46ed9932276b6d8eae13e9b41a941f965dec9901010735d9aa5a16e47bf3f129bf19a743deefb2c58bd431617b"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x80e}}, {0x2f, &(0x7f00000003c0)=@string={0x2f, 0x3, "be82547463df4f0b596f89a45f4befed215811b9046d6da55af251f998f8848956151440b71a3b8ac4fd26a009"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x44f}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x415}}]}) dup3(0xffffffffffffffff, r2, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0) tkill(r1, 0xb) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x40001) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000000)={&(0x7f0000000080)=""/153, 0x99, 0x63, 0x9e}) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000140)={0x4, 0x6}) r3 = socket(0x1, 0x1, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fbdbdf25010000000c000200d5400000000000001c0007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c000180080001"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4040) 3m29.868069907s ago: executing program 3 (id=107): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c00000013000500000000000000000007000000", @ANYRES32=r5, @ANYBLOB="50080000000000000c001a800800058004000580"], 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x20, 0xc, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r6 = socket$inet_icmp(0x2, 0x2, 0x1) writev(r6, &(0x7f00000001c0)=[{0x0}], 0x1) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r8 = socket$inet6(0xa, 0x5, 0x0) r9 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x951a, 0x3010, 0x1}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="f259"], 0x10}, 0x0, 0x24040092}) io_uring_enter(r9, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r7, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x400}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x8004) 3m29.867340295s ago: executing program 1 (id=108): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000"], 0x44}}, 0x0) 3m29.839316802s ago: executing program 4 (id=109): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaab4d1136088a84a0081"], 0x16) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x141, 0xbd, 0xc3, 0x90, 0x20, 0x7c4, 0xa10b, 0xeed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x58, 0xfc, 0x0, 0xbc, 0xe7, 0xee, 0xe}}]}}]}}, 0x0) 3m29.702327492s ago: executing program 2 (id=110): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r4, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) r6 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)={0x3}) ioctl$VHOST_NET_SET_BACKEND(r5, 0xaf02, 0x0) sendmsg$rds(r4, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fanotify_init(0x79, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) write(r7, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3m29.690992155s ago: executing program 0 (id=111): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip6_mr_cache\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = msgget(0x1, 0x4) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@private0}}, &(0x7f0000000040)=0xe8) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000540)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8) getresgid(&(0x7f0000000240), &(0x7f00000003c0), &(0x7f0000000640)=0x0) msgctl$IPC_SET(r4, 0x1, &(0x7f00000007c0)={{0x0, r5, r6, r7, r8, 0x3c, 0x9}, 0x0, 0x0, 0x7, 0x46a, 0x2, 0x6, 0x7, 0x9, 0x0, 0x3, r1, r1}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x82100, 0x0) ioctl$TCSETSF2(r9, 0x402c542d, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r10}, 0x18) pread64(r0, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) 3m29.59527044s ago: executing program 1 (id=112): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20000) ioctl$SNDRV_TIMER_IOCTL_CREATE(r1, 0xc02054a5, &(0x7f00000000c0)={0xffffffffffffff5b, r0, 'id1\x00'}) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='westwood', 0x8) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 3m28.355863031s ago: executing program 2 (id=113): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x8, 0x1, 0x1}) gettid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x40, 0x800000000004, @thr={&(0x7f0000000100)="a6b9fd3c22d74d6be161b4ecaa8dd71e9ac9a7d744c463b69e72502036da05a2121ec9915c552e5581266e", &(0x7f0000000140)="d80a2a9427c3f368826c9a9e12c8f69143fdcbe7c1766852b9cf51fe442774cf6306355cb868699ebcdac542d31ce55a66023d8401bcb641eb46ef2c39e8f1462bcfffcf20817b2b423f536d5e64a1877229dfe840518ba8af6c38248a8849c189da5ae0b6ac7d5dc22523ad60018276ff337f96c4d152682bf5d4761bec046565d21cb44fd9b1eb9403cb73873b84a3dbd643ee21ce939ff87e50c6"}}, &(0x7f0000bbdffc)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e53735"], 0x1c}}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r5) write$cgroup_int(r4, &(0x7f0000000040)=0x800000000001c8, 0x12) recvmmsg$unix(r2, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/40, 0x28}, {0x0}, {&(0x7f0000000380)=""/10, 0xa}, {0x0}, {&(0x7f0000000500)=""/201, 0xc9}, {&(0x7f0000002480)=""/4096, 0x1000}, {0x0}], 0x7, &(0x7f0000000800)=[@rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000000600)=@abs, 0x6e, &(0x7f0000000bc0), 0x0, &(0x7f0000000240)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}, {{0x0, 0x0, &(0x7f0000004e40)=[{&(0x7f0000001200)=""/189, 0xbd}, {&(0x7f0000000dc0)=""/203, 0xcb}, {0x0}, {&(0x7f0000000f00)=""/186, 0xba}, {0x0}, {0x0}, {&(0x7f0000001100)=""/49, 0x31}, {&(0x7f0000004f00)=""/4099, 0x1003}, {&(0x7f0000001140)=""/158, 0x9e}], 0x9, &(0x7f0000000900)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000004680), 0x6e, &(0x7f0000004c40)=[{&(0x7f0000004700)=""/210, 0xd2}, {&(0x7f0000004800)=""/241, 0xf1}, {&(0x7f0000004900)=""/152, 0x98}, {0x0}, {&(0x7f0000004ac0)=""/242, 0xf2}, {&(0x7f0000004bc0)=""/113, 0x71}], 0x6}}], 0x5, 0x34000, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000680), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) setsockopt$inet6_tcp_int(r6, 0x11a, 0x4, &(0x7f00000001c0), 0x0) ioprio_set$pid(0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_CLOCK(r4, 0x1d, &(0x7f00000000c0)={0x6}, 0x0) 3m28.266066912s ago: executing program 0 (id=114): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') pread64(r2, &(0x7f0000002280)=""/4096, 0x1000, 0xff) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x128, 0x15, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0xfc, 0x8, "dbbb79cc8deeefba332097e5134c2789f0c302ed922dd621d29fd879aeeb1eed4efe82ccb88c38edff5de73651a3e7b77143c472b2bc0159c7753834ca38386c453ea160b4613a9776e282c812e88ba8111b44d1e03c6a93fbd0ae5eb3f9e328842e303bef931921f56bcb3922d864749953dc1c3638e2b0d0def53477d0ac87ad9600bc936a2ac2940bab9074532016145165e5f63fcde262c8bfc61396340e7ce308c2ca79da636aa863b3a60531cdd46e422e60e56feb6073648ebd8dc3c0c21f3eb5c3da2ac34015a887f289de7e30cfcff3830cd2cc31e16c7a01224fac4ba4ee16f00c8ef77d4a829490507ec991cfae34f221a4e7"}]}, 0x128}, 0x1, 0x0, 0x0, 0x20040040}, 0x44000) 3m27.67262834s ago: executing program 1 (id=115): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001b80)=""/112, 0x70}], 0x1}}], 0x1, 0x700, 0x0) sendfile(r4, r0, 0x0, 0x578410eb) 3m27.610718616s ago: executing program 0 (id=116): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x1, 0x0, 0x2}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, &(0x7f0000000400)=""/4096, 0x1000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_SET_IRQCHIP(r2, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x296a, 0x4, 0x6, 0x0, [{0x98, 0x37, 0x7f, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0xf5}, {0xf, 0x5, 0x9, '\x00', 0x13}, {0x3, 0x3e, 0x3, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x80, '\x00', 0xac}, {0x3, 0x8, 0x6, '\x00', 0x8}, {0x1, 0xfa, 0x2, '\x00', 0x67}, {0x2, 0x7, 0x2, '\x00', 0x8}, {0x8, 0x4, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) 3m25.872194258s ago: executing program 1 (id=117): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e440b021005643ab9777f4bc9cedf5af17bf099ba7ecc1b11bc2944b19f289d5dd65be97522d3d80afb5dfdf6e6622ca3e3f60bd4af439407b1d2f912abec0b7e6cc16b4af3"], 0x47) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r3) sendmsg$NET_DM_CMD_START(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x14, r4, 0x1, 0xfffffffc}, 0x5a}}, 0x0) r5 = socket(0x2, 0x80805, 0x9) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000080)={0x0, 0xfffffff8}, &(0x7f0000000100)=0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b26, &(0x7f0000000000)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001180), 0x101, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r8, 0x40096102, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc}, 0x40004) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30"], 0xcdc}}, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0x13, 0x0, 0x0) 3m24.805014171s ago: executing program 4 (id=118): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x4c, r3, 0x1, 0x70bd2b, 0x4000, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0xfffffffffffffe26, 0xb, 0xfffffffa}, {0x6}}]}, 0x4c}}, 0x4040000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800008080b634280100"/20, @ANYRES32], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6f0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x103400, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000200)={0x48}) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0xd2a727af3cb3995f, &(0x7f0000000900)}, 0x10) ioctl$FBIO_WAITFORVSYNC(r7, 0x40044620, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) lstat(0x0, 0x0) getpid() ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) getresuid(&(0x7f0000000540), 0x0, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000680)=[@in6={0xa, 0x4e21, 0x80000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffff7}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e24, 0x0, @local}, @in6={0xa, 0x4e21, 0x7, @mcast2, 0x1}], 0x64) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x4) 3m19.965710102s ago: executing program 0 (id=119): ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000200)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x1}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 3m19.960984971s ago: executing program 1 (id=120): dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) r2 = memfd_secret(0x0) ftruncate(r2, 0x581) ftruncate(r2, 0x0) mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40, 0x0, 0x38, 0x4}, {0x6, 0xfc}]}) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r3, 0x4002f516, &(0x7f0000000140)={0x7, 0x6}) write(r3, &(0x7f0000000280)="4591c28e8b83", 0x6) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r4 = userfaultfd(0x80001) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r7, 0xc008aeba, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) 3m19.727788937s ago: executing program 3 (id=121): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000002c0)={0x0, 0x2, 0x2, "47e2"}, 0xa) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x1f4, @loopback, 0xffffffff}, 0x1c) 3m8.912791431s ago: executing program 32 (id=113): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x8, 0x1, 0x1}) gettid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x40, 0x800000000004, @thr={&(0x7f0000000100)="a6b9fd3c22d74d6be161b4ecaa8dd71e9ac9a7d744c463b69e72502036da05a2121ec9915c552e5581266e", &(0x7f0000000140)="d80a2a9427c3f368826c9a9e12c8f69143fdcbe7c1766852b9cf51fe442774cf6306355cb868699ebcdac542d31ce55a66023d8401bcb641eb46ef2c39e8f1462bcfffcf20817b2b423f536d5e64a1877229dfe840518ba8af6c38248a8849c189da5ae0b6ac7d5dc22523ad60018276ff337f96c4d152682bf5d4761bec046565d21cb44fd9b1eb9403cb73873b84a3dbd643ee21ce939ff87e50c6"}}, &(0x7f0000bbdffc)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e53735"], 0x1c}}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r5) write$cgroup_int(r4, &(0x7f0000000040)=0x800000000001c8, 0x12) recvmmsg$unix(r2, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/40, 0x28}, {0x0}, {&(0x7f0000000380)=""/10, 0xa}, {0x0}, {&(0x7f0000000500)=""/201, 0xc9}, {&(0x7f0000002480)=""/4096, 0x1000}, {0x0}], 0x7, &(0x7f0000000800)=[@rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000000600)=@abs, 0x6e, &(0x7f0000000bc0), 0x0, &(0x7f0000000240)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}, {{0x0, 0x0, &(0x7f0000004e40)=[{&(0x7f0000001200)=""/189, 0xbd}, {&(0x7f0000000dc0)=""/203, 0xcb}, {0x0}, {&(0x7f0000000f00)=""/186, 0xba}, {0x0}, {0x0}, {&(0x7f0000001100)=""/49, 0x31}, {&(0x7f0000004f00)=""/4099, 0x1003}, {&(0x7f0000001140)=""/158, 0x9e}], 0x9, &(0x7f0000000900)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000004680), 0x6e, &(0x7f0000004c40)=[{&(0x7f0000004700)=""/210, 0xd2}, {&(0x7f0000004800)=""/241, 0xf1}, {&(0x7f0000004900)=""/152, 0x98}, {0x0}, {&(0x7f0000004ac0)=""/242, 0xf2}, {&(0x7f0000004bc0)=""/113, 0x71}], 0x6}}], 0x5, 0x34000, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000680), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) setsockopt$inet6_tcp_int(r6, 0x11a, 0x4, &(0x7f00000001c0), 0x0) ioprio_set$pid(0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_CLOCK(r4, 0x1d, &(0x7f00000000c0)={0x6}, 0x0) 3m8.248168073s ago: executing program 33 (id=118): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x4c, r3, 0x1, 0x70bd2b, 0x4000, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0xfffffffffffffe26, 0xb, 0xfffffffa}, {0x6}}]}, 0x4c}}, 0x4040000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800008080b634280100"/20, @ANYRES32], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6f0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x103400, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000200)={0x48}) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0xd2a727af3cb3995f, &(0x7f0000000900)}, 0x10) ioctl$FBIO_WAITFORVSYNC(r7, 0x40044620, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) lstat(0x0, 0x0) getpid() ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) getresuid(&(0x7f0000000540), 0x0, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000680)=[@in6={0xa, 0x4e21, 0x80000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffff7}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e24, 0x0, @local}, @in6={0xa, 0x4e21, 0x7, @mcast2, 0x1}], 0x64) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x4) 3m8.182056924s ago: executing program 3 (id=124): syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000000abc0)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x400001, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r5, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r3, 0x3b8c, &(0x7f0000000100)={0x30, r7, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0}) ioctl$IOMMU_DESTROY$hwpt(r2, 0x3b80, &(0x7f0000000080)={0x8, r7}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x71, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0xf, 0x491, 0x3, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000300)={0x1, 0x8}) 1m54.543632302s ago: executing program 34 (id=119): ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000200)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x1}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 1m50.869449297s ago: executing program 35 (id=120): dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) r2 = memfd_secret(0x0) ftruncate(r2, 0x581) ftruncate(r2, 0x0) mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40, 0x0, 0x38, 0x4}, {0x6, 0xfc}]}) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r3, 0x4002f516, &(0x7f0000000140)={0x7, 0x6}) write(r3, &(0x7f0000000280)="4591c28e8b83", 0x6) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r4 = userfaultfd(0x80001) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r7, 0xc008aeba, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) 1m50.175832523s ago: executing program 36 (id=124): syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000000abc0)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x400001, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r5, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r3, 0x3b8c, &(0x7f0000000100)={0x30, r7, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0}) ioctl$IOMMU_DESTROY$hwpt(r2, 0x3b80, &(0x7f0000000080)={0x8, r7}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x71, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0xf, 0x491, 0x3, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000300)={0x1, 0x8}) 18.181195449s ago: executing program 7 (id=241): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b7500090583"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x2, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone3(&(0x7f0000000500)={0x800, &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0)=0x0, {0x15}, &(0x7f00000002c0)=""/239, 0xef, &(0x7f00000003c0)=""/142, &(0x7f00000004c0)=[0x0, 0x0], 0x2}, 0x58) getpgrp(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0xc8, 0x3}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x6, 0xf3bb, 0x0, 0x1000, 0x400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x3, 0x4], 0xeeee8000, 0x400}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket(0x2, 0x3, 0xff) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c40)=ANY=[], 0x18}}, 0x4020) ioctl$KVM_RUN(r1, 0xae80, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) 15.500793101s ago: executing program 7 (id=250): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='inet_sk_error_report\x00', r3}, 0x18) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48250000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 14.69272505s ago: executing program 6 (id=253): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\f\x00\x00\x00\a'], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write(r2, &(0x7f0000000380)="ccfa24e99f45f07bc19e265dc3c15c04c219c13988d1bf05346d676fb6977ad80f7b1e36104d0c153bcfd2281b0636b8690ff7594e9789c7fe865c9a98a06d08d1f35c74f2cb6da6e7e9a02b45498e85024ccffc65ea55cd02cb5ce1b7b97a4ca09b976eb622584c3f43c4e511058616aa69614b650478a8c063a358014e75727d718ebcb29a57d39599c1f0d96edcdb8e887ee584034855eb9df17a181a42de8f9a434ddeaf3c44e54f72f4e314730388c58b28ddf9ea34f43896cd12b92e44cd0c6cbbb5eb17420035995633dd424fb19cebe4c8beda65c15559152cef4b34efcde8ebd9", 0xe5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7, 0x0, r1}) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000100000022bf000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000e79e405d6c66d7babeebcc002861b50d90c96e010600000000000000e228344c03dc66c34d8c001ba69a9ce2e7eca6ae734862576274ce491a8976156a0200000000080000f17d2bd561830100000000000000368649facf2f3528de2786c119"], 0x48) r4 = socket$inet(0x2, 0x80001, 0x84) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000cc0)={'ip6gre0\x00', &(0x7f0000000c40)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x4d, 0x8, 0x60, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x700, 0x4, 0x102}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x1a, &(0x7f0000000340)={0x20, 0x0, 0x4, "99898a32"}, 0x0, 0x0, 0x0, 0x0}) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x10, 0x3f2, 0x100, 0x70bd26, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x4040041) r6 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x22802) ioctl$SNDRV_PCM_IOCTL_START(r6, 0x4142, 0x0) 11.044103133s ago: executing program 6 (id=262): socket$inet6(0xa, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r0}, 0x18) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x3, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @private}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000b00)={0x2020}, 0x2020) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000040cf7ccb827b11bcb4c3b6c964a1cd56fb2cb719aab62624"], &(0x7f0000000100)='GPL\x00'}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r3 = syz_open_procfs$userns(0x0, &(0x7f0000000080)) mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x9000, &(0x7f00000000c0)={0x100008, 0xf8, 0x160000, {r3}}, 0x20) socket$inet6(0xa, 0x3, 0x100) socket(0xa, 0x3, 0x101) syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) 10.684530488s ago: executing program 7 (id=264): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000100), 0x4) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x80000000, 0x9}, 0x10}, 0x94) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c26, 0x10100, 0x0, 0xfffffffd, 0x0, r2}, &(0x7f0000000580)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) getsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f00000000c0), &(0x7f0000000140)=0x4) io_uring_enter(r3, 0x2ded, 0xef92, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, 0xffffffffffffffff, 0xfc2a5000) fadvise64(0xffffffffffffffff, 0x81, 0x1, 0x4) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x40000, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, 0x0) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0x2}, 0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, 0x0, 0x7, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc801}, 0x40004) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000180)=0xd) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3400000044000701feffffff00000000037c0000040042800c00018006000600800a0000100002"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) readv(r6, &(0x7f0000000100)=[{&(0x7f0000000200)=""/255, 0xff}], 0x1) 9.41826225s ago: executing program 7 (id=266): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x4048000}, 0x14) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="760100001b"], 0x188}, 0x1, 0x0, 0x0, 0x40004}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x894a, &(0x7f0000000040)={'vlan1\x00', 0x0}) 9.234785832s ago: executing program 7 (id=269): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwrite64(r0, &(0x7f0000000800)="5b8529ae2468f4df", 0x8, 0x7) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_getparam(0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) eventfd(0xfffffff9) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180), 0x6cc0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000001200010003950000000100000a0900004001000000000000000000000000ffff0000000000000000000000000000ffff6fafa519135202fc04ccad26f23ff49afea8968bd041e045c22b8316007a500fa824b98a3348e837e11136ca9369ef49eca74c2da14013fd16103b4188b888d62539331d000ba36280a084d491"], 0x4c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r8, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r8], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r10 = socket(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}, {0x1, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) 7.602769741s ago: executing program 6 (id=273): openat$vcs(0xffffffffffffff9c, 0x0, 0x101402, 0x0) setresgid(0xee00, 0xee01, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x200000) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x22, &(0x7f00000000c0)="0500268dd6ff930800008000000000000000210d0000aaa9fa017242ba9380d4a40000000000000029", 0x29) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000003060101000000000000000002000002080006400000009105000100070000000900020073797a31"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094) mknod$loop(&(0x7f0000000400)='./file0\x00', 0xfef, 0x0) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x900}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa6820000}, 0xafe6) 6.899991833s ago: executing program 8 (id=276): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) 6.403192514s ago: executing program 8 (id=277): timer_create(0x5, &(0x7f00000000c0)={0x0, 0x1f, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {r1, r2+10000000}}, 0x0) unlink(0x0) 6.232767782s ago: executing program 8 (id=278): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0xca, 0x9, 0x35315258, 0x5, 0x7, 0x10001, 0x5, 0x8, 0x1, 0x8, 0x2, 0x4}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000004100)={0x2020}, 0x2020) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b4050000000000006110a400000000001f01000000000000950000000000000023b5529af540d638c848bcc68f10d49a05fa771db5bb17287ca166db461d0b66dabfa09abdacb45c2b89eb45221f744d5ac26389ba6aaea96db4c330fc2d9d5c0005895af5f58ebbfe713efe96f24e98f7e3bef28dc95727b7c186f02497f723d25681162b3328a2a07e8a4d3fa1301898c0f32adf4dd0765a2372524858709df7446a7053bec01b0e0f19a0dd25348164d5e7c53dc915afc22c2c0c6739f6c9da94c55ee5ce1e14de444de1852c4c2dc109ce47c8851f52f7b1023e09357178a95f7b04306a190d8714bf0a"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r8, &(0x7f0000002640)={0x2020}, 0x2020) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r7, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e00030000000300000005000700"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') unlinkat(r10, &(0x7f00000001c0)='./bus\x00', 0x200) socket$inet(0x2, 0x4000000000000001, 0x0) 4.774879166s ago: executing program 6 (id=279): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_newnexthop={0x28, 0x68, 0x309, 0x70bd29, 0x0, {}, [@NHA_ID={0x8}, @NHA_FDB={0x4}, @NHA_BLACKHOLE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040801}, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x83}]}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000f08f0d40b4043068cf860000000109021200010100000009040007008863c100"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r10 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r10, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) r11 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r2, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r11, 0x2}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) readlink(&(0x7f00000000c0)='./file1\x00', &(0x7f00000003c0)=""/13, 0xd) socket(0x10, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000c00)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, "0e6cf1f1eff0d45a"}}}, 0x11) 4.632973587s ago: executing program 9 (id=280): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) setresuid(0x0, 0xee00, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x2220c0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) write$FUSE_BMAP(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) 4.536688334s ago: executing program 8 (id=281): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$TIOCL_SETVESABLANK(r3, 0x560e, &(0x7f0000000140)) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000080)={0xd, 0x18, 0x3, 0x0, 0x0, 0x1000}) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) (async) prlimit64(0x0, 0x1c, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) (async) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) (async) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) (async) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6}]}) 4.502910962s ago: executing program 9 (id=282): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80015b11, 0x0) 4.43692504s ago: executing program 5 (id=283): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000140)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @alu={0x7, 0x1, 0x9, 0x4, 0x6, 0x2, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @generic={0x5, 0x8, 0x6, 0x80f, 0x8000}], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) openat$ptmx(0xffffffffffffff9c, 0x0, 0x80, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56551, 0x4, 0xfffffffb, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xa, 0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x9, 0x1002, 0x0, 0x2, 0x0, 0x5}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x77845c77c3d152f3}]}}}]}, 0x64}}, 0x0) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000100)=0x100000, 0x4) userfaultfd(0x80801) r5 = syz_io_uring_setup(0xa1, &(0x7f0000000640)={0x0, 0xe8ce, 0x0, 0x20, 0x40000333}, &(0x7f00000006c0), &(0x7f00000020c0)) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) 4.304730477s ago: executing program 8 (id=284): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="38010000180001001b000000010100007f000001000000000000000000000000ffffffff000000000000000000000000000107144e230005000080003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14143e0000000000000000000000000000000000000000920100000000000000000000ffffffff01000100000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000fffffffffffffffffcffffffffffffff1f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 3.51625811s ago: executing program 5 (id=285): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x17, 0x3c}, [@ldst={0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8300}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) gettid() r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20008040) lseek(r0, 0xbd3d, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f00000033c0)={0x0, 0x0, &(0x7f0000003380)={&(0x7f00000032c0)={0x28, 0x0, 0x7, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x44) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_TYPENAME={0x0, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x0, 0xa, 0x1, 0x0, 0x5}, @IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_SIZE={0x0, 0x17, 0x1, 0x0, 0x3}, @IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x7}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0xc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xfffffffffffffe25, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) r2 = syz_open_dev$sg(0x0, 0x0, 0x8002) fcntl$dupfd(r2, 0x0, r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6, 0x0, 0x7}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) r7 = socket$inet_udp(0x2, 0x2, 0x0) setrlimit(0xf, &(0x7f00000003c0)={0x4001, 0xffffffffffffffff}) timer_create(0x3, 0x0, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x190, 0x0, 0xffffffff, 0x238, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xffb2) 2.71100516s ago: executing program 9 (id=286): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') pread64(r2, &(0x7f0000002280)=""/4096, 0x1000, 0xff) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x100, 0x15, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0xde, 0x8, "dbbb79cc8deeefba332097e5134c2789f0c302ed922dd621d29fd879aeeb1eed4efe82ccb88c38edff5de73651a3e7b77143c472b2bc0159c7753834ca38386c453ea160b4613a9776e282c812e88ba8111b44d1e03c6a93fbd0ae5eb3f9e328842e303bef931921f56bcb3922d864749953dc1c3638e2b0d0def53477d0ac87ad9600bc936a2ac2940bab9074532016145165e5f63fcde262c8bfc61396340e7ce308c2ca79da636aa863b3a60531cdd46e422e60e56feb6073648ebd8dc3c0c21f3eb5c3da2ac34015a887f289de7e30cfcff3830cd2cc31e1"}]}, 0x100}, 0x1, 0x0, 0x0, 0x20040040}, 0x44000) 2.293671701s ago: executing program 7 (id=287): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0xffff, r1, 0x0}]) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r6 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r6, 0xc0445624, &(0x7f00000000c0)={0x140980001, 0x0, "bf5dff0f251ed700f61765c214525a2572ce1ced49e8981e103268fadc1433ae", 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x3e, [0x0, 0x1, 0x0, 0x2]}) 2.289288783s ago: executing program 5 (id=288): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c0016"], 0x38}}, 0x10) r1 = socket$inet(0x2, 0x3, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000000)={0xa, 0x0, 0x6, @private1, 0x3}, 0x1c) r3 = socket(0x2, 0x80805, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005a40)={&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRES32=0x0, @ANYRESDEC=r2], 0x44}, 0x1, 0x0, 0x0, 0x8140}, 0x40054) r4 = socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet6(r2, &(0x7f0000001cc0)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8, @private0, 0x1}, 0x1c, &(0x7f00000016c0)=[{&(0x7f0000000180)="af", 0x1}], 0x1}, 0x80) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000040)={r5, 0x10001}, 0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000000)={r5, 0x81, 0x540}, 0x8) r6 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000540)={0x6, 0x2, {0x3, @struct={0x6, 0x5}, 0x0, 0x7, 0x3d1, 0x2, 0x40, 0x9, 0x460, @struct={0x4, 0x7}, 0xe79, 0x1, [0x7, 0x8b6, 0x6, 0xfffffffffffffffa, 0x200, 0x847]}, {0xfffffffffffffffe, @usage=0x1, 0x0, 0x1e, 0x5, 0x7fff, 0x7, 0x4, 0x21, @struct={0xd4b8, 0x2}, 0xfff, 0xffffffff, [0x3, 0x40, 0x2, 0x4c, 0x7, 0x2]}, {0x2, @usage=0xd, 0x0, 0x5, 0xf, 0x8, 0x9, 0x10, 0x41, @usage=0x2, 0x9, 0x1, [0x29bb, 0x9, 0x3, 0x174, 0x4, 0xfffffffffffffe01]}, {0x7, 0x380000000, 0x7}}) ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f0000001d00)={r7, "c786bba2d6a5ea1dad0afa9e61422cdf"}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) 2.199614317s ago: executing program 9 (id=289): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0xffff, r1, 0x0}]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r6, 0x29, 0x24, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000003c0)) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) syz_open_dev$video4linux(&(0x7f00000001c0), 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0xc) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x52140, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r8, 0xc0104811, &(0x7f0000000440)={0x1, 0x8, 0x8, 0x4}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c080400fcac4f6094275bca57981e83ade0049e3da304159cff3b12834858ec0e09c62e5ea460fc415eebe7e5634df0e9c46ef8ac46f8365010153104d8c8df859e0effe14c0cafbdea7dc66c789a8bac5a4aa163a589c8d9b473d3ec21278fbb", @ANYRES16=r9, @ANYBLOB="01012cbd7000fedbdf250b000000180001801400020076657468315f746f5f7465616d000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x20008020) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r10, 0xffffffffffffffff, 0x200000000000000) 2.053588717s ago: executing program 8 (id=290): ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000200)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x1}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/12], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 1.344643548s ago: executing program 9 (id=291): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0xffffd000) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, &(0x7f0000000080)) mbind(&(0x7f00002fc000/0x4000)=nil, 0x4000, 0x8000, 0x0, 0x0, 0x2) mbind(&(0x7f00004c9000/0x3000)=nil, 0x3000, 0x8000, 0x0, 0x20, 0x2) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ec0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 1.281402295s ago: executing program 6 (id=292): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = syz_open_dev$dri(0x0, 0x1ff, 0x0) syz_usb_connect(0x6, 0xd7a, &(0x7f0000000b80)={{0x12, 0x1, 0x310, 0x4, 0x63, 0xb1, 0x40, 0x403, 0x6015, 0x3da4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd68, 0x4, 0x7, 0x4, 0x50, 0x80, [{{0x9, 0x4, 0x6c, 0x5, 0xa, 0x5e, 0xbf, 0x3a, 0x70, [], [{{0x9, 0x5, 0xe, 0x3, 0x20, 0x3, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x2}]}}, {{0x9, 0x5, 0x107, 0x3, 0x8, 0x7f, 0x80, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xd, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xa, 0x9}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x1, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x6}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x72, 0x9c, 0xd, [@generic={0xdd, 0x10, "801c3a7218bff94b1ae1c478b5be7b280d19fbfb883f0dea9fa1ec8261a78ff05f0bf69fbb3997836bee2e517720657739e7f85a947656e390cd1349dd050e24171b5bc68c6677f046020eca2ab3bacf669885ad0be29259844ffcf148610a7e5e1bc47cdd6ec0e26e2d70a37df2d714663266dd4bb7f15c4a804c4be973fa9566328be9659c40c8fb0fb896e1c788941add046e4ac5c9c28d380782dd8355fff03fc7d824feda43945616b4f00c92bb4038e330a429965e8db7379719cafa01eea695b99222283db7b5d9069bafa232f8cbcd93973632099e4270"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0xe0, 0x3, 0x6, [@generic={0x9f, 0x22, "1f079cfede864ce219084efd7a3d2527981ca347841cc84aacc5cc884131e1cc1602f840812525a45296f78a12c759da7d8578b9c1fbce77dfeccdb2344e76f97e529e814573f2fd446d8f8b8c00410e11dd3ab0da3d48a63f2b1a1283deb18b37e2e6a07adacff33e49261993d9e2fee00d7b69c1ce1930f7f488ff388d570e5ab28f7c3c7d0df4966db80a3c9374ffd7106e28c97a4a4a5dc12ff620"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x81, 0x3, 0xd, [@generic={0xae, 0xa, "125df5f4c7b0a756920705ac4e146894db52a2401b4ca857dd2010c27935632be6082cd1a46e6a72c54891323a4ff6f9155fce5412cd55db45552bce2afe941a58c9e80b8b7fe6502f0545f45e66679a27f9bc304c71eae540696357d390f31a50237db16d3f55e051b7e2081672b1f296c3dc7e99532b2122bfe1fb4020d01699425145517469fd4951dae9dfff6ed8f35d32ec485f4e540342bfbd371ff636ab637d5590decc0795e58641"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x20, 0x5, 0xf6, 0x7}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x6, 0x92, 0x40, [@generic={0xe1, 0x5, "addf4ed9372f5e02fe035c1c39c333e7523b3c6e7bf45a18a12bf0d9d51ca13a936e7a78fa36bdc2c05fec74cf8e4169f16c0226186b03a985b0dabba366c16a752b030b06071538c48027b65524ed7b88da29ba8965b39f858c725e2025cf18a52ad4ebeb10494234c056cab4e8275732342dbe2fee39ebb35b47dca33a69d25ae20b6629515e91a9987243a2630757e05db6afd928d8dfab608d7a1f3162cc7721784a700cd6b50fd13366f9f9f07bfd4d5e403f4cf4975cc991286958d9da677a5274ad2a1b5c670e3876b19c4374d76f0265da65fd6e35491cc4e577cc"}, @generic={0x1d, 0x0, "245ce139f6e9bf0f12b7d1f3135f36c628f27467fcc81676580b09"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x440, 0x4c, 0x6, 0xc, [@generic={0xc4, 0x11, "2fce31b7d0ec886c90a475cdfcf26073a69eaf91bae74d70752d339fa54a1372fdf8dc3c70f472879ad7a7f164c713d5d543c2daab9e2cb85786914475ed946bf486b3a9b788cadfb2c1f098c7c75c7602fc8fec0e87d0ff4a3ae243917b589e1d70cdfe41eb3738cebfc8046ee00475ddb3fe50f6bc8404ebf62ebbf0b6b848492ff7e6cfea6056fb8bbc053fd6795b575f581524461a708cbddf7c9d32f5803ce8ccf5b79ed0261a6a703cb8c61b7fc70ef4676e32dee473b829905709fdbf2597"}]}}, {{0x9, 0x5, 0xa, 0x4, 0x400, 0x2, 0xc6, 0x8, [@generic={0x87, 0x6, "7bd5c5897990da70cb13f9985dcd864420b1d9879cd5859134c52215694ec5b3f9aa7d60f04cae1ba19c1dfa99d00e516c143da264398e42e447a3668e442a14583e5f870e4757a7b6a5bb8b4a2ba2e59dd5aa4d8000d608bc96fe171a1921137028bd354fc2b10c2e1a22243082009c758150853b97eab86bedfcee34a03b03f3c0921d4d"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0xd6}]}}]}}, {{0x9, 0x4, 0xa6, 0x0, 0xd, 0x6f, 0xa7, 0xa0, 0x64, [@uac_control={{0xa, 0x24, 0x1, 0x8, 0x7c}, [@feature_unit={0x11, 0x24, 0x6, 0x6, 0x1, 0x5, [0x2, 0x6, 0x7, 0x4, 0x5], 0x7}, @feature_unit={0xb, 0x24, 0x6, 0x2, 0x4, 0x2, [0x6, 0x9], 0x3}, @extension_unit={0x7, 0x24, 0x8, 0x3, 0x6987, 0xa8}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x205, 0x1, 0x6, 0x1, 0xa0, 0xbc}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0xf, "6a2002"}]}], [{{0x9, 0x5, 0x5, 0x0, 0x400, 0x10, 0x5, 0x10, [@generic={0x55, 0x23, "1669369365dd30bf1db63cc556ec74d48c15f5f8e8103ffa0b6c2533e676a76a9d7049cff1a8c2bacb64cc0b8daa859a893290d78845b8808e5d119ba01413e3bf448bbc02b61c18f3a1b70d849a375795e14d"}, @generic={0x7e, 0x23, "6fe60fa222f7feeb0e5540d51b725e19d8dea9de0e64596cd9e86e8c45981df08034ba23973d9bf622823d5013e5c8797e961b6235af44ffa49aaa197ff23c134b11b6dae2abebad43ad04f40ba6e3ef8476745382540ce874b6e82bc8ef718c977b200e536d80428e3e508d8c880a9c8c6db285f7145c0997d64cfb"}]}}, {{0x9, 0x5, 0x3, 0x1, 0x3ff, 0xa3, 0x48, 0x1, [@generic={0x7f, 0x8, "83dfbbed7fb94fe5e27c74f222d10b63362866b96ea7961a74248866d35cf750a01817b929eba04569101503c802244a0190c87d0d980704406b74c7f97fee2fbd2d8537ffb3e05cc4dca338fa4b0d8ad5b44fe6b3041dd94fd6da787b87af0fd18c76a59c6597dca71fddd49f6d5dea97558cda8179a63ca417b334d3"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x20, 0xed, 0x1, 0x6, [@generic={0x6, 0x11, "84ba5b58"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xd2, 0x8001}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x80, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x6}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x3c, 0xf, 0x19, [@generic={0x89, 0x0, "11e3d8bcb352ca559ebc0e0e3ef59ce1e83f099a8cba7a003b77a0052ae2296cfbb8ba3324e35227d0052abcbbd5ac2db8ba1bd372959b7d82775ef505df69fcdc593f2a4942312342731a2da0f7f3f1c67acbb81d466afb0a0ef391b440dd9c84a5188b9a944ea81ba22b49fad354d49101f2fc23516b4fff5ee21800dfc1e518340a813e79a2"}, @generic={0xd2, 0x23, "92d7fbef71cc720ee702140621b40390c3b60c7965070bdaf108075bcb8a8112740b51b9e08b0da478369b9e824671d157e03c41799e019eee13e5c10651dbb4bac33a0f876035e78b38e6de34b28f803581b0f6a38520d998af5569652da3fcca94880c606252c5cc2e982b8c5232cc5ebf4d9dd83e766e3f06d0e2931ed8a3eee6645158ff41911ae22a4518abca624f67e05366a42391c6fb37eae797e78953ae2c137d0068245683e133782a95f8bf84eb28a188e57e8e41adcaf11261bfeddb9847bfe39927139fb6653dfeac5b"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x0, 0x40, 0x2, 0x9, [@generic={0xd0, 0x8, "26dc97ee0e7e139e6b09351ed6660b92aa8295e66c254726e1a375ea4c5ebddd8c82a86413624f2cb115cb9fe78211e5dcfb39e86caac9972c3b5a314a4990e9cf72b682046ad82feae49387378fe800ad09b5ce9fcceaf07bc594911ce49fb9e4d340da0e3518056b51fb8d756fac485b7b91920d2c8d76270bb09ab245f851c5c37f0034fa3be07fc58ebefe0f68ef313c141e7846bfd3cf64be4d2964134e635702c4e9de96c666d0a591b9683d245142d2aba12fb422e12295c8a2b0da2c44e1ce1401c30850412b59dfc086"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x4f, 0x1}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x90, 0x2, 0x1}}, {{0x9, 0x5, 0x9, 0x2, 0x8, 0x28, 0x2, 0xff}}, {{0x9, 0x5, 0x8, 0xc, 0x400, 0x8, 0x80, 0xc, [@generic={0x4a, 0x0, "4aa87301cf5277681d9fe2b1285d35b62601714b86ec056176c7da614837a2781ef9a5da99d6d19ec442916b725cd67e7e770814e6fda407187e4656b2185513e8e097d40c355058"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x7}]}}, {{0x9, 0x5, 0x9, 0x8, 0x400, 0x8, 0x1, 0xfb, [@generic={0x57, 0x24, "139b72c111a5287fa2c81ec75763f75de3bdcd1f35210c543ca3c9d0f015c76f6e96eaf524bd8b6be485a2afd340a82f88326ac5b84aedceeb4920e68cf05b17f7c1b8d0c23921b7d714bee985ed0b7b8d7beec783"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x80, 0xea, 0x8}}, {{0x9, 0x5, 0x9, 0x4, 0x200, 0x3, 0x2, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xf3, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xe, 0xe}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x81, 0x81, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xa, 0xab}, @generic={0xef, 0x24, "cb33de27a08d230ec939964895ada1916bb63ea0d787b688a00c7c5c038df20486caa16608dd1f536cc934577481bc8b8d30fd9eeddfd424837adb29621ee8996c82978efafa12d0d12a2bf884c12103647a96989b404dc5f9245bc64cbf7bd81b245a3c394a9093e5975986191c182796401b67e716c58382207404e03c2602eacff9ea2f8ee4202cf87541c3f4a0871c535a24ba935527fa0b9aa94ccfce85c0374e884c77e777f76d6a468ccbbb7da868b718db6de76bc6ea0afe813a56a840525059477dcc932ad2db8b67fa8d44fa0e7665ad4617d47f5c02f7575a12f648bf235b26bd075d291fb0b12e"}]}}]}}, {{0x9, 0x4, 0x26, 0x16, 0x0, 0x1e, 0xb7, 0xdc, 0xd, [@hid_hid={0x9, 0x21, 0x3, 0x3, 0x1, {0x22, 0xf1b}}]}}, {{0x9, 0x4, 0xcc, 0x8, 0x6, 0x77, 0x38, 0x9d, 0x22, [@generic={0x2d, 0x2, "d9a3927ac6bd17bb576eb30a53dec9988613d1d51919d0bb7f403823ba2e12862dc13ef368190e3f8160a3"}, @uac_as={[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x1, 0x1, 0x3, 0x24, "", 'P'}, @as_header={0x7, 0x24, 0x1, 0xf5, 0x39, 0x1001}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x7, 0x5, 0x7, "65fedd"}]}], [{{0x9, 0x5, 0x0, 0x1, 0x400, 0x81, 0xb, 0xa, [@generic={0x2c, 0xc, "e313cf890ee9bc24ccb477482796e2312f82ab38451fa2ec8cea54329f81c36fe5575b6f6b1ac381f13c"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x7f, 0x0, 0xa0, [@generic={0x3c, 0x31, "27d300c1a61a3d167b44519f39e6b6d9866752cebfcf012c7ecd2037aba2c638c967d39019b49debdfdae88f34b6fcb232f29668641414e28c51"}, @generic={0x7d, 0x23, "3cd58c03595b047b85fe4ed348eca90b048c4be513faad9de28f765c3952133647d8c39c8ee349d37f3cb61d4bdbb78cd0d1b206b13e9b74f5856283b24c48429fc899ab7bf693107207e70ac8419825352c183f3804566169a9dc05a71549b0861c8e2c00583bcf2f84c40803d2522e9e63d9c71255dbe3b5ee5a"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x200, 0x80, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8c, 0x8}]}}, {{0x9, 0x5, 0x8, 0x8, 0x8, 0x7, 0x1, 0x8b}}, {{0x9, 0x5, 0x9, 0xc, 0x20, 0x8, 0x0, 0x5, [@generic={0x74, 0x21, "e6216c666ea7d45e40e582b82160244b824332e192d1db1e10d37393c35815aff3363002d6d5577d0d977f8aebf6fda12758672734552974d663ccb0580f7452b0f10fd4f29a12f5a6b10d96da57e551fcded21a80b6d2ee8862eaeb82c1307ed497afb47509e00e863607e2a7ebfd573697"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x3ff, 0x7f, 0x8, 0x0, [@generic={0x16, 0x24, "51eb0474ad06b12fc26e94cc127d61831424ef4a"}, @generic={0x4d, 0x21, "cecd37c684602f7ee46769d1d7b63c0e61a17c8854540fb9c463aaeb3220eca75e7111b9c29496534ab423e26dc105d84e44fa310dfc1901d40b2d1303422b39832f1c57d51ae16c930f94"}]}}]}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0xea, 0x3, 0x5, 0x20, 0x7}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x7, [{0x9d, &(0x7f00000002c0)=@string={0x9d, 0x3, "b2848d4272e89db29a2a6379c936cbc133c636c03a8b12891633e9c484f0c6fe00644d81e938b3eea5a993714b5bc20b3b03f078dc35e6ced94484c326577fc6087d078e321cc708ff68047f63e0cfd723903b243540398bdf557431a3fba87c3672ddcf477167f76052fa7261372d788e74f593872cd65546563b2a65a2de7d06d28e28ed090b838c7db3815ed3cb3a62f9b85884d8d4c2c735fc"}}, {0x61, &(0x7f0000000200)=@string={0x61, 0x3, "71c6ed9d7783f044542c240048ece1cdbcf2b0e29981bc90743dc5494e50db92e0b83defdb22ee0a5dc9e6b1c232e1093f4a46ed9932276b6d8eae13e9b41a941f965dec9901010735d9aa5a16e47bf3f129bf19a743deefb2c58bd431617b"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x80e}}, {0x2f, &(0x7f00000003c0)=@string={0x2f, 0x3, "be82547463df4f0b596f89a45f4befed215811b9046d6da55af251f998f8848956151440b71a3b8ac4fd26a009"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x44f}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x415}}]}) dup3(0xffffffffffffffff, r2, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0) tkill(r1, 0xb) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x40001) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000000)={&(0x7f0000000080)=""/153, 0x99, 0x63, 0x9e}) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000140)={0x4, 0x6}) r3 = socket(0x1, 0x1, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fbdbdf25010000000c000200d5400000000000001c0007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c000180080001"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4040) 1.279097839s ago: executing program 5 (id=293): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000200)='cgroup.clone_children\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x9) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405668, &(0x7f0000000100)={0x0, 0x1, 0x2}) 1.052729657s ago: executing program 5 (id=294): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f00000000c0)=0x6, 0x4) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) syz_open_dev$vim2m(0x0, 0x7, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000180)) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x0, 0x5, 0xfff, 0x0, 0x0, 0x7fffffff, 0x7, 0xfffffffffffffffd, 0xfeff}) fallocate(r5, 0x1, 0xa, 0x20000) 297.661117ms ago: executing program 9 (id=295): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) (async) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x0, 0x181, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3fd, 0x4000009, 0x200, 0xe2df, 0x9, 0x1, 0x4, 0x40000, 0x7, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x1, 0x80000000}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x2, 0x1, 0x0, &(0x7f0000000180)=""/77, 0x0, 0x2000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff2, 0xffe0}, {0xb, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r7 = open(&(0x7f0000000080)='./file0\x00', 0x4c27e, 0x2) fallocate(r7, 0x0, 0x550d, 0x1000f4) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x3f) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x200000000) 183.842003ms ago: executing program 5 (id=296): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000000)=0x90000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, &(0x7f0000000580)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000080)={@host}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, &(0x7f00000010c0)={&(0x7f00000000c0)=[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], 0x1, 0x400}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x10000) 0s ago: executing program 6 (id=297): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000001600010a00020000000000000a0000000400000006a5e73f17c2032a5b55778b0dfa2de86436de2557820c8d175436765ef56d70938be2010000394767097bbb29329f615dd12b9ae199c36a60d0c8c993b454be3f3ba5629146df6573085f98b3298afb33803d9ea2c20522ac0473b6d943a15a8822ee0ae0fed1112de4250d60dbb8ab8894508ddc01ad3de7336654debbae8900d0be1d8e29ca58f27e3254fc66af8286039ba996880f6c4aaf3d38c0f0abce2e2517c748"], 0x18}}, 0x0) kernel console output (not intermixed with test programs): s (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 193.023691][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.036078][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:34:2f:ad:4f:92, vlan:0) [ 193.048465][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.882839][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.889156][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.942619][ C1] net_ratelimit: 20238 callbacks suppressed [ 197.942639][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:34:2f:ad:4f:92, vlan:0) [ 197.961291][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.973838][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 197.986479][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.998824][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:34:2f:ad:4f:92, vlan:0) [ 198.011155][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.023489][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.036592][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.049451][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:34:2f:ad:4f:92, vlan:0) [ 198.061847][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 200.181790][ T5819] Bluetooth: hci1: command 0x0406 tx timeout [ 200.187892][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 200.282464][ T5834] Bluetooth: hci0: command 0x0406 tx timeout [ 200.410339][ T5819] Bluetooth: hci3: command 0x0406 tx timeout [ 200.416563][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 202.953055][ C1] net_ratelimit: 18308 callbacks suppressed [ 202.953068][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.971139][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:34:2f:ad:4f:92, vlan:0) [ 202.983255][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.995337][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.007816][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.019938][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:34:2f:ad:4f:92, vlan:0) [ 203.032044][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.044117][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.056443][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:34:2f:ad:4f:92, vlan:0) [ 203.068713][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.962747][ C1] net_ratelimit: 13922 callbacks suppressed [ 207.962765][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.981070][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:34:2f:ad:4f:92, vlan:0) [ 207.993402][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.005757][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.018510][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:34:2f:ad:4f:92, vlan:0) [ 208.031188][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.043885][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.056712][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.069114][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:34:2f:ad:4f:92, vlan:0) [ 208.081482][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.952894][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 208.972765][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 208.981036][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 208.988859][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 208.997589][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 209.008455][ T30] audit: type=1400 audit(1764711418.445:264): avc: denied { mounton } for pid=6451 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 209.488662][ T5144] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 209.499419][ T5144] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 209.508387][ T5144] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 209.517357][ T5144] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 209.533205][ T5144] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 209.643167][ T5833] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 209.652969][ T5833] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 209.661001][ T5833] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 209.669120][ T5833] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 209.677354][ T5833] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 210.027830][ T6463] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 210.036845][ T6463] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 210.044883][ T6463] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 210.056259][ T6463] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 210.064066][ T6463] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 210.168496][ T6459] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 210.182831][ T6459] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 210.190658][ T6459] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 210.198839][ T6459] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 210.206671][ T6459] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 210.293155][ T6465] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 210.302073][ T6465] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 210.310300][ T6465] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 210.318441][ T6465] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 210.327149][ T6465] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 212.972894][ C1] net_ratelimit: 15050 callbacks suppressed [ 212.972913][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.991111][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:34:2f:ad:4f:92, vlan:0) [ 213.003435][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.015770][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.028197][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:34:2f:ad:4f:92, vlan:0) [ 213.040626][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.053226][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.065856][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.078071][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:34:2f:ad:4f:92, vlan:0) [ 213.090404][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.982588][ C1] net_ratelimit: 20300 callbacks suppressed [ 217.982602][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.000946][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.013225][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:34:2f:ad:4f:92, vlan:0) [ 218.025516][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.037819][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.050619][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.063273][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.075627][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:34:2f:ad:4f:92, vlan:0) [ 218.087948][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.100089][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.992556][ C1] net_ratelimit: 19326 callbacks suppressed [ 222.992570][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.011079][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.023419][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.035675][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:34:2f:ad:4f:92, vlan:0) [ 223.047786][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.060057][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.072759][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:34:2f:ad:4f:92, vlan:0) [ 223.085311][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.098307][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.110640][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.002400][ C1] net_ratelimit: 20071 callbacks suppressed [ 228.002413][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.020682][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:34:2f:ad:4f:92, vlan:0) [ 228.033013][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.045261][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.057501][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.069553][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:34:2f:ad:4f:92, vlan:0) [ 228.081717][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.093817][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.106118][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.118403][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 231.452610][ T5819] Bluetooth: hci7: command tx timeout [ 231.462103][ T6459] Bluetooth: hci8: command tx timeout [ 231.468818][ T5835] Bluetooth: hci9: command tx timeout [ 233.012545][ C1] net_ratelimit: 20326 callbacks suppressed [ 233.012559][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.030920][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.043106][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:34:2f:ad:4f:92, vlan:0) [ 233.055306][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.067420][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.079776][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:34:2f:ad:4f:92, vlan:0) [ 233.092733][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.104972][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.117189][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.129247][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:34:2f:ad:4f:92, vlan:0) [ 233.532521][ T5144] Bluetooth: hci7: command tx timeout [ 233.541450][ T5834] Bluetooth: hci8: command tx timeout [ 233.547606][ T52] Bluetooth: hci9: command tx timeout [ 234.412604][ T5144] Bluetooth: hci10: command tx timeout [ 234.420274][ T5834] Bluetooth: hci6: command tx timeout [ 234.426423][ T52] Bluetooth: hci5: command tx timeout [ 235.612644][ T5144] Bluetooth: hci7: command tx timeout [ 235.618693][ T5834] Bluetooth: hci8: command tx timeout [ 235.626389][ T52] Bluetooth: hci9: command tx timeout [ 236.492605][ T5144] Bluetooth: hci10: command tx timeout [ 236.501901][ T52] Bluetooth: hci5: command tx timeout [ 236.508005][ T5834] Bluetooth: hci6: command tx timeout [ 237.692487][ T52] Bluetooth: hci7: command tx timeout [ 237.698835][ T5834] Bluetooth: hci8: command tx timeout [ 237.704307][ T5144] Bluetooth: hci9: command tx timeout [ 238.023937][ C1] net_ratelimit: 17259 callbacks suppressed [ 238.023950][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.042161][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:34:2f:ad:4f:92, vlan:0) [ 238.054360][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 238.066638][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.079048][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:34:2f:ad:4f:92, vlan:0) [ 238.091713][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.104031][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 238.116634][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.128813][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:34:2f:ad:4f:92, vlan:0) [ 238.141117][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.582523][ T5144] Bluetooth: hci10: command tx timeout [ 238.588700][ T5834] Bluetooth: hci5: command tx timeout [ 238.596341][ T52] Bluetooth: hci6: command tx timeout [ 240.652567][ T5144] Bluetooth: hci10: command tx timeout [ 240.658101][ T52] Bluetooth: hci6: command tx timeout [ 240.663514][ T5834] Bluetooth: hci5: command tx timeout [ 242.822555][ T6437] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.830723][ T6437] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.032506][ C1] net_ratelimit: 17677 callbacks suppressed [ 243.032520][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.050850][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.063024][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:34:2f:ad:4f:92, vlan:0) [ 243.075287][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.087579][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.091709][ T6437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.100266][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:34:2f:ad:4f:92, vlan:0) [ 243.119724][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.132782][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.145457][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.148908][ T6437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.157762][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:34:2f:ad:4f:92, vlan:0) [ 248.042427][ C1] net_ratelimit: 17337 callbacks suppressed [ 248.042446][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.061056][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.073423][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:34:2f:ad:4f:92, vlan:0) [ 248.085783][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.097960][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.110396][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.123123][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.135362][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:34:2f:ad:4f:92, vlan:0) [ 248.147650][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.159790][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.209199][ T3767] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.673028][ T3767] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.682032][ T3767] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.735848][ T3985] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.768817][ T3767] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.012189][ T3985] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.317398][ T3985] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.415741][ T3985] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.785719][ T30] audit: type=1400 audit(1764711461.225:265): avc: denied { search } for pid=5488 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.842886][ T6461] chnl_net:caif_netlink_parms(): no params data found [ 251.852168][ T30] audit: type=1400 audit(1764711461.245:266): avc: denied { search } for pid=5488 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.933195][ T30] audit: type=1400 audit(1764711461.245:267): avc: denied { search } for pid=5488 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.035210][ T30] audit: type=1400 audit(1764711461.245:268): avc: denied { read } for pid=5488 comm="dhcpcd" name="n101" dev="tmpfs" ino=2368 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 252.082476][ T30] audit: type=1400 audit(1764711461.255:269): avc: denied { open } for pid=5488 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=2368 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 252.129117][ T6467] chnl_net:caif_netlink_parms(): no params data found [ 252.171893][ T30] audit: type=1400 audit(1764711461.255:270): avc: denied { getattr } for pid=5488 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=2368 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 252.241421][ T6464] chnl_net:caif_netlink_parms(): no params data found [ 252.255527][ T6458] chnl_net:caif_netlink_parms(): no params data found [ 252.343476][ T30] audit: type=1400 audit(1764711461.785:271): avc: denied { read open } for pid=6498 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.405322][ T30] audit: type=1400 audit(1764711461.805:272): avc: denied { getattr } for pid=6498 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.699484][ T30] audit: type=1400 audit(1764711462.135:273): avc: denied { add_name } for pid=6497 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.751052][ T30] audit: type=1400 audit(1764711462.165:274): avc: denied { create } for pid=6497 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 252.852239][ T6456] chnl_net:caif_netlink_parms(): no params data found [ 252.876911][ T3985] veth0_to_bridge: left allmulticast mode [ 252.883025][ T3985] veth0_to_bridge: left promiscuous mode [ 252.890061][ T3985] bridge0: port 3(veth0_to_bridge) entered disabled state [ 252.907065][ T3985] bridge_slave_1: left allmulticast mode [ 252.912785][ T3985] bridge_slave_1: left promiscuous mode [ 252.918738][ T3985] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.929298][ T3985] bridge_slave_0: left allmulticast mode [ 252.936720][ T3985] bridge_slave_0: left promiscuous mode [ 252.945899][ T3985] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.165468][ T3985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.175614][ T3985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.185391][ T3985] bond0 (unregistering): Released all slaves [ 253.264022][ T6461] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.271202][ T6461] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.278477][ T6461] bridge_slave_0: entered allmulticast mode [ 253.285676][ T6461] bridge_slave_0: entered promiscuous mode [ 253.293908][ T6461] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.301021][ T6461] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.308293][ T6461] bridge_slave_1: entered allmulticast mode [ 253.315311][ T6461] bridge_slave_1: entered promiscuous mode [ 253.425076][ T6467] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.432242][ T6467] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.439792][ T6467] bridge_slave_0: entered allmulticast mode [ 253.447306][ T6467] bridge_slave_0: entered promiscuous mode [ 253.462825][ T6458] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.470451][ T6458] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.477787][ T6458] bridge_slave_0: entered allmulticast mode [ 253.484673][ T6458] bridge_slave_0: entered promiscuous mode [ 253.493504][ T6461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.516028][ T6464] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.523148][ T6464] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.530251][ T6464] bridge_slave_0: entered allmulticast mode [ 253.537316][ T6464] bridge_slave_0: entered promiscuous mode [ 253.545373][ T6467] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.553246][ T6467] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.560416][ T6467] bridge_slave_1: entered allmulticast mode [ 253.567231][ T6467] bridge_slave_1: entered promiscuous mode [ 253.589632][ T6458] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.597068][ T6458] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.605023][ T6458] bridge_slave_1: entered allmulticast mode [ 253.611720][ T6458] bridge_slave_1: entered promiscuous mode [ 253.619425][ T6461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.628769][ T6464] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.636439][ T6464] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.643700][ T6464] bridge_slave_1: entered allmulticast mode [ 253.650346][ T6464] bridge_slave_1: entered promiscuous mode [ 253.678188][ T6456] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.685410][ T6456] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.692932][ T6456] bridge_slave_0: entered allmulticast mode [ 253.699570][ T6456] bridge_slave_0: entered promiscuous mode [ 253.733138][ T6467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.742436][ T6456] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.749546][ T6456] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.756984][ T6456] bridge_slave_1: entered allmulticast mode [ 253.763911][ T6456] bridge_slave_1: entered promiscuous mode [ 253.798320][ T3985] hsr_slave_0: left promiscuous mode [ 253.804065][ T3985] hsr_slave_1: left promiscuous mode [ 253.809688][ T3985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.817564][ T3985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.825626][ T3985] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.833058][ T3985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.848082][ T3985] veth1_macvtap: left promiscuous mode [ 253.853755][ T3985] veth0_macvtap: left promiscuous mode [ 253.859353][ T3985] veth1_vlan: left promiscuous mode [ 253.864926][ T3985] veth0_vlan: left promiscuous mode [ 254.094174][ T3985] team0 (unregistering): Port device team_slave_1 removed [ 254.117643][ T3985] team0 (unregistering): Port device team_slave_0 removed [ 254.313697][ T6467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.331180][ T6458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.341665][ T6461] team0: Port device team_slave_0 added [ 254.374328][ T6464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.417856][ T6458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.429227][ T6461] team0: Port device team_slave_1 added [ 254.461942][ T6464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.499192][ T6456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.551672][ T6467] team0: Port device team_slave_0 added [ 254.564957][ T6467] team0: Port device team_slave_1 added [ 254.594670][ T6456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.617136][ T6461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.624939][ T6461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.651308][ T6461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.712949][ T6458] team0: Port device team_slave_0 added [ 254.719377][ T6461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.735035][ T6461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.761785][ T6461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.774306][ T6464] team0: Port device team_slave_0 added [ 254.780532][ T6467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.792399][ T6467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.821331][ T6467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.843300][ T6458] team0: Port device team_slave_1 added [ 254.858999][ T6464] team0: Port device team_slave_1 added [ 254.865427][ T6467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.872629][ T6467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.899625][ T6467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.911570][ T6456] team0: Port device team_slave_0 added [ 254.936358][ T6458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.943424][ T6458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.969354][ T6458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.992939][ T6456] team0: Port device team_slave_1 added [ 255.009373][ T6458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.016402][ T6458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.042434][ T6458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.062692][ T6464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.069655][ T6464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.095985][ T6464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.130863][ T6464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.137973][ T6464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.163885][ T6464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.175186][ T6456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.182113][ T6456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.209096][ T6456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.230749][ T3985] IPVS: stop unused estimator thread 0... [ 255.231803][ T6461] hsr_slave_0: entered promiscuous mode [ 255.243277][ T6461] hsr_slave_1: entered promiscuous mode [ 255.249379][ T6461] debugfs: 'hsr0' already exists in 'hsr' [ 255.256106][ T6461] Cannot create hsr debugfs directory [ 255.281231][ T6456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.288542][ T6456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.295557][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.315407][ T6456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.322925][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.369262][ T6467] hsr_slave_0: entered promiscuous mode [ 255.375678][ T6467] hsr_slave_1: entered promiscuous mode [ 255.381538][ T6467] debugfs: 'hsr0' already exists in 'hsr' [ 255.387490][ T6467] Cannot create hsr debugfs directory [ 255.396575][ T6458] hsr_slave_0: entered promiscuous mode [ 255.402825][ T6458] hsr_slave_1: entered promiscuous mode [ 255.408730][ T6458] debugfs: 'hsr0' already exists in 'hsr' [ 255.415534][ T6458] Cannot create hsr debugfs directory [ 255.492216][ T6464] hsr_slave_0: entered promiscuous mode [ 255.498822][ T6464] hsr_slave_1: entered promiscuous mode [ 255.504878][ T6464] debugfs: 'hsr0' already exists in 'hsr' [ 255.510585][ T6464] Cannot create hsr debugfs directory [ 255.556489][ T6456] hsr_slave_0: entered promiscuous mode [ 255.563075][ T6456] hsr_slave_1: entered promiscuous mode [ 255.569018][ T6456] debugfs: 'hsr0' already exists in 'hsr' [ 255.575300][ T6456] Cannot create hsr debugfs directory [ 256.132160][ T6461] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 256.166040][ T3985] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.190371][ T6461] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 256.223108][ T6461] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 256.254263][ T3985] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.266186][ T6461] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 256.315586][ T6456] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 256.339562][ T6456] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 256.350919][ T6456] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 256.375642][ T3985] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.391582][ T6456] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 256.431685][ T3985] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.518115][ T6467] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 256.546518][ T6467] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 256.594628][ T6467] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 256.653190][ T6467] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 256.743298][ T6464] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 256.761936][ T6461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.788663][ T6464] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 256.833225][ T6464] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 256.870240][ T6461] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.887224][ T6464] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 256.911285][ T3985] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.926439][ T6458] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 256.940103][ T6458] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 256.950623][ T6458] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 256.965973][ T6458] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 256.979050][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.986130][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.014343][ T3985] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.030567][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.037652][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.076339][ T3985] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.147904][ T6456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.194094][ T3985] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.325358][ T6456] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.396870][ T6432] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.404007][ T6432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.507349][ T3985] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.530903][ T6467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.544597][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.551723][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.575206][ T6467] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.635163][ T3985] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.701290][ T6464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.735261][ T3985] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.754706][ T6458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.765386][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.772481][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.798091][ T3985] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.819963][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.827049][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.852097][ T6464] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.885126][ T6458] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.893521][ T6456] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 257.930079][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.937289][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.950991][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.958146][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.991341][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.998472][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.028537][ T6461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.040856][ T6432] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.048007][ T6432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.107631][ T3985] bridge_slave_1: left allmulticast mode [ 258.124888][ T3985] bridge_slave_1: left promiscuous mode [ 258.130980][ T3985] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.144317][ T3985] bridge_slave_0: left allmulticast mode [ 258.149951][ T3985] bridge_slave_0: left promiscuous mode [ 258.156909][ T3985] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.168183][ T3985] bridge_slave_1: left allmulticast mode [ 258.174484][ T3985] bridge_slave_1: left promiscuous mode [ 258.180621][ T3985] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.190064][ T3985] bridge_slave_0: left allmulticast mode [ 258.195965][ T3985] bridge_slave_0: left promiscuous mode [ 258.201584][ T3985] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.211038][ T3985] bridge_slave_1: left allmulticast mode [ 258.217507][ T3985] bridge_slave_1: left promiscuous mode [ 258.223667][ T3985] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.233075][ T3985] bridge_slave_0: left allmulticast mode [ 258.238691][ T3985] bridge_slave_0: left promiscuous mode [ 258.245450][ T3985] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.255565][ T3985] bridge_slave_1: left allmulticast mode [ 258.261187][ T3985] bridge_slave_1: left promiscuous mode [ 258.267529][ T3985] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.276753][ T3985] bridge_slave_0: left allmulticast mode [ 258.283427][ T3985] bridge_slave_0: left promiscuous mode [ 258.289057][ T3985] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.510547][ T3985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.520089][ T3985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.529363][ T3985] bond0 (unregistering): Released all slaves [ 258.614056][ T3985] bridge0 (unregistering): left allmulticast mode [ 258.685465][ T3985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.697236][ T3985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.706824][ T3985] bond0 (unregistering): Released all slaves [ 258.875413][ T3985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.885448][ T3985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.896462][ T3985] bond0 (unregistering): Released all slaves [ 259.047868][ T3985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.060185][ T3985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.069985][ T3985] bond0 (unregistering): Released all slaves [ 259.219744][ T3985] tipc: Left network mode [ 259.317807][ T6456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.788697][ T6467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.815639][ T6461] veth0_vlan: entered promiscuous mode [ 259.889097][ T6464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.912230][ T6461] veth1_vlan: entered promiscuous mode [ 260.177808][ T6458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.321262][ T6461] veth0_macvtap: entered promiscuous mode [ 260.383892][ T6461] veth1_macvtap: entered promiscuous mode [ 260.405642][ T3985] hsr_slave_0: left promiscuous mode [ 260.422718][ T3985] hsr_slave_1: left promiscuous mode [ 260.428656][ T3985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.441112][ T3985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.456292][ T3985] hsr_slave_0: left promiscuous mode [ 260.462570][ T3985] hsr_slave_1: left promiscuous mode [ 260.469904][ T3985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.479776][ T3985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.492322][ T3985] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.501247][ T3985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.514560][ T3985] hsr_slave_0: left promiscuous mode [ 260.520527][ T3985] hsr_slave_1: left promiscuous mode [ 260.526721][ T3985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.535460][ T3985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.543461][ T3985] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.550831][ T3985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.562295][ T3985] hsr_slave_0: left promiscuous mode [ 260.568521][ T3985] hsr_slave_1: left promiscuous mode [ 260.575061][ T3985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.582803][ T3985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.590539][ T3985] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.598763][ T3985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.640110][ T3985] veth1_macvtap: left promiscuous mode [ 260.646899][ T3985] veth0_macvtap: left promiscuous mode [ 260.652768][ T3985] veth1_vlan: left promiscuous mode [ 260.658100][ T3985] veth0_vlan: left promiscuous mode [ 260.664271][ T3985] veth1_macvtap: left promiscuous mode [ 260.669738][ T3985] veth0_macvtap: left promiscuous mode [ 260.675764][ T3985] veth1_vlan: left promiscuous mode [ 260.681066][ T3985] veth0_vlan: left promiscuous mode [ 260.687162][ T3985] veth1_macvtap: left promiscuous mode [ 260.692731][ T3985] veth0_macvtap: left promiscuous mode [ 260.698393][ T3985] veth1_vlan: left promiscuous mode [ 260.703770][ T3985] veth0_vlan: left promiscuous mode [ 261.005601][ T3985] team0 (unregistering): Port device team_slave_1 removed [ 261.030296][ T3985] team0 (unregistering): Port device team_slave_0 removed [ 261.233799][ T3985] pim6reg (unregistering): left allmulticast mode [ 261.402418][ T3985] team0 (unregistering): Port device team_slave_1 removed [ 261.426836][ T3985] team0 (unregistering): Port device team_slave_0 removed [ 261.870451][ T3985] team0 (unregistering): Port device team_slave_1 removed [ 261.896969][ T3985] team0 (unregistering): Port device team_slave_0 removed [ 262.254239][ T3985] team0 (unregistering): Port device team_slave_1 removed [ 262.278587][ T3985] team0 (unregistering): Port device team_slave_0 removed [ 262.473290][ T6456] veth0_vlan: entered promiscuous mode [ 262.543142][ T6456] veth1_vlan: entered promiscuous mode [ 262.588440][ T6461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.601696][ T6467] veth0_vlan: entered promiscuous mode [ 262.627753][ T6461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.668066][ T6467] veth1_vlan: entered promiscuous mode [ 262.679791][ T6432] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.691203][ T6432] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.708778][ T6432] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.717778][ T6432] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.758299][ T6464] veth0_vlan: entered promiscuous mode [ 262.771456][ T6456] veth0_macvtap: entered promiscuous mode [ 262.818779][ T6456] veth1_macvtap: entered promiscuous mode [ 262.854333][ T6458] veth0_vlan: entered promiscuous mode [ 262.870598][ T6464] veth1_vlan: entered promiscuous mode [ 262.884299][ T6456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.898380][ T6467] veth0_macvtap: entered promiscuous mode [ 262.914404][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.934098][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.946615][ T6456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.966393][ T6467] veth1_macvtap: entered promiscuous mode [ 262.991388][ T6458] veth1_vlan: entered promiscuous mode [ 263.016264][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.040716][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.056729][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.072727][ T6464] veth0_macvtap: entered promiscuous mode [ 263.096733][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.107234][ T6432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.116612][ T6432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.121091][ T6464] veth1_macvtap: entered promiscuous mode [ 263.191216][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 263.191231][ T30] audit: type=1400 audit(1764711472.625:279): avc: denied { mount } for pid=6461 comm="syz-executor" name="/" dev="gadgetfs" ino=14653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 263.264538][ T6467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.304122][ T6464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.328485][ T6467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.366478][ T6440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.383232][ T6440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.385860][ T6464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.405501][ T6458] veth0_macvtap: entered promiscuous mode [ 263.428544][ T6690] netlink: 8 bytes leftover after parsing attributes in process `syz.5.122'. [ 263.458043][ T6440] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.486260][ T6458] veth1_macvtap: entered promiscuous mode [ 263.532025][ T6440] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.554668][ T6432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.564220][ T30] audit: type=1400 audit(1764711473.005:280): avc: denied { read write } for pid=6693 comm="syz.5.128" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 263.565464][ T6432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.598930][ T6440] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.614927][ T30] audit: type=1400 audit(1764711473.025:281): avc: denied { open } for pid=6693 comm="syz.5.128" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 263.640833][ T30] audit: type=1400 audit(1764711473.025:282): avc: denied { ioctl } for pid=6693 comm="syz.5.128" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 263.682661][ T6440] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.698696][ T6440] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.711854][ T6440] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.735960][ T6440] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.775717][ T6440] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.794140][ T6458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.823845][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 263.866500][ T6458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.887774][ T3576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.898642][ T3576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.929437][ T6440] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.949222][ T6440] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.968089][ T6440] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.977439][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.986917][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.002902][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 264.010056][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.021865][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 264.034935][ T6440] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.050600][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 264.061736][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.080983][ T9] usb 6-1: config 0 descriptor?? [ 264.081212][ T6440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.101583][ T9] hub 6-1:0.0: bad descriptor, ignoring hub [ 264.107795][ T6017] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 264.117952][ T6440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.135032][ T9] hub 6-1:0.0: probe with driver hub failed with error -5 [ 264.144271][ T9] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 264.146629][ T6440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.207464][ T6440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.228567][ T3985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.245622][ T3985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.272411][ T6017] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 264.304626][ T6017] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 264.342676][ T6017] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.362474][ T6017] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 264.379408][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.402173][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.419668][ T6017] usb 8-1: New USB device found, idVendor=05ac, idProduct=8102, bcdDevice= 0.00 [ 264.433898][ T6017] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.452770][ T6017] usb 8-1: config 0 descriptor?? [ 265.076070][ T6699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.103224][ T6699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.317573][ T6017] usbhid 8-1:0.0: can't add hid device: -71 [ 265.366959][ T6017] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 265.692463][ T6725] netlink: 12 bytes leftover after parsing attributes in process `syz.9.129'. [ 265.717729][ T6017] usb 8-1: USB disconnect, device number 2 [ 266.091413][ T6735] nbd: couldn't find device at index 247 [ 267.061338][ T30] audit: type=1400 audit(1764711476.495:283): avc: denied { mount } for pid=6747 comm="syz.7.135" name="/" dev="autofs" ino=15199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 267.096310][ T30] audit: type=1400 audit(1764711476.495:284): avc: denied { read } for pid=6747 comm="syz.7.135" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 267.233136][ T30] audit: type=1400 audit(1764711476.495:285): avc: denied { open } for pid=6747 comm="syz.7.135" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 267.261273][ T6723] syz.6.123: vmalloc error: size 268439552, failed to allocated page array size 524296, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 267.279579][ T30] audit: type=1400 audit(1764711476.495:286): avc: denied { ioctl } for pid=6747 comm="syz.7.135" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 267.351953][ T30] audit: type=1400 audit(1764711476.565:287): avc: denied { unmount } for pid=6456 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 267.387301][ T30] audit: type=1400 audit(1764711476.825:288): avc: denied { sqpoll } for pid=6745 comm="syz.9.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 267.462963][ T6304] usb 6-1: USB disconnect, device number 2 [ 267.511124][ T6723] CPU: 1 UID: 0 PID: 6723 Comm: syz.6.123 Not tainted syzkaller #0 PREEMPT(full) [ 267.511148][ T6723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 267.511156][ T6723] Call Trace: [ 267.511160][ T6723] [ 267.511164][ T6723] dump_stack_lvl+0x16c/0x1f0 [ 267.511179][ T6723] warn_alloc+0x248/0x3a0 [ 267.511196][ T6723] ? __pfx_warn_alloc+0x10/0x10 [ 267.511217][ T6723] ? xskq_create+0xfb/0x1d0 [ 267.511236][ T6723] ? __vmalloc_node_noprof+0xad/0xf0 [ 267.511252][ T6723] __vmalloc_node_range_noprof+0xfe2/0x1480 [ 267.511269][ T6723] ? xskq_create+0xfb/0x1d0 [ 267.511287][ T6723] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 267.511305][ T6723] ? xskq_create+0xfb/0x1d0 [ 267.511319][ T6723] vmalloc_user_noprof+0x9e/0xe0 [ 267.511332][ T6723] ? xskq_create+0xfb/0x1d0 [ 267.511347][ T6723] xskq_create+0xfb/0x1d0 [ 267.511363][ T6723] xsk_setsockopt+0x8d2/0xc00 [ 267.511379][ T6723] ? __pfx_xsk_setsockopt+0x10/0x10 [ 267.511397][ T6723] ? selinux_socket_setsockopt+0x6a/0x80 [ 267.511413][ T6723] ? __pfx_xsk_setsockopt+0x10/0x10 [ 267.511427][ T6723] do_sock_setsockopt+0xf3/0x1d0 [ 267.511441][ T6723] __sys_setsockopt+0x1a0/0x230 [ 267.511459][ T6723] __x64_sys_setsockopt+0xbd/0x160 [ 267.511473][ T6723] ? do_syscall_64+0x91/0xf80 [ 267.511484][ T6723] ? lockdep_hardirqs_on+0x7c/0x110 [ 267.511494][ T6723] do_syscall_64+0xcd/0xf80 [ 267.511505][ T6723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.511517][ T6723] RIP: 0033:0x7fb4aed8f749 [ 267.511526][ T6723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.511536][ T6723] RSP: 002b:00007fb4afc46038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 267.511547][ T6723] RAX: ffffffffffffffda RBX: 00007fb4aefe6180 RCX: 00007fb4aed8f749 [ 267.511554][ T6723] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008 [ 267.511560][ T6723] RBP: 00007fb4aee13f91 R08: 0000000000000004 R09: 0000000000000000 [ 267.511566][ T6723] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000 [ 267.511572][ T6723] R13: 00007fb4aefe6218 R14: 00007fb4aefe6180 R15: 00007ffd919674e8 [ 267.511586][ T6723] [ 267.511610][ T6723] Mem-Info: [ 267.735365][ T6723] active_anon:7192 inactive_anon:0 isolated_anon:0 [ 267.735365][ T6723] active_file:15443 inactive_file:40660 isolated_file:0 [ 267.735365][ T6723] unevictable:768 dirty:376 writeback:0 [ 267.735365][ T6723] slab_reclaimable:12528 slab_unreclaimable:99361 [ 267.735365][ T6723] mapped:31166 shmem:1400 pagetables:1320 [ 267.735365][ T6723] sec_pagetables:0 bounce:0 [ 267.735365][ T6723] kernel_misc_reclaimable:0 [ 267.735365][ T6723] free:1290161 free_pcp:15712 free_cma:0 [ 267.783377][ T6751] process 'syz.7.136' launched '/dev/fd/7' with NULL argv: empty string added [ 267.797063][ T6723] Node 0 active_anon:28968kB inactive_anon:0kB active_file:61772kB inactive_file:162436kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124664kB dirty:1504kB writeback:0kB shmem:4064kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13476kB pagetables:5140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 267.798359][ T6304] libceph: connect (1)[c::]:6789 error -101 [ 267.837390][ T6723] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 267.840001][ T6304] libceph: mon0 (1)[c::]:6789 connect error [ 267.875984][ T6723] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 267.880018][ T6759] ceph: No mds server is up or the cluster is laggy [ 267.917772][ T6723] lowmem_reserve[]: 0 2482 2484 2484 2484 [ 267.923888][ T5887] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 267.942139][ T6723] Node 0 DMA32 free:1252764kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28968kB inactive_anon:0kB active_file:61772kB inactive_file:162436kB unevictable:4136kB writepending:1504kB zspages:0kB present:3129332kB managed:2542328kB mlocked:2600kB bounce:0kB free_pcp:39516kB local_pcp:8344kB free_cma:0kB [ 267.981083][ T6764] block nbd0: shutting down sockets [ 267.988114][ T6723] lowmem_reserve[]: 0 0 1 1 1 [ 268.019286][ T6723] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 268.072943][ T6723] lowmem_reserve[]: 0 0 0 0 0 [ 268.083551][ T6723] Node 1 Normal free:3892520kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20420kB local_pcp:10592kB free_cma:0kB [ 268.121634][ T6723] lowmem_reserve[]: 0 0 0 0 0 [ 268.127924][ T6723] Node 0 DMA: 0*4kB [ 268.152751][ T5887] usb 10-1: Using ep0 maxpacket: 8 [ 268.164009][ T5887] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 268.179086][ T5887] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 268.193016][ T6723] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 268.208168][ T6723] Node 0 DMA32: 6083*4kB (UME) [ 268.212436][ T5887] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 268.231056][ T5887] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 268.245071][ T6723] 2526*8kB (UME) 2361*16kB (UM) 643*32kB (UME) 1358*64kB (UM) 1698*128kB (UME) 886*256kB (UME) 327*512kB (UME) 58*1024kB (UME) 11*2048kB (UM) 91*4096kB (M) [ 268.246224][ T5887] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 268.271621][ T6723] = 1256044kB [ 268.275684][ T6723] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 268.287791][ T6723] Node 1 [ 268.287834][ T5887] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.300451][ T6723] Normal: 182*4kB (UE) 42*8kB (UME) 38*16kB (UME) 59*32kB (UME) 17*64kB (UME) 10*128kB (UME) 4*256kB (UM) 5*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 947*4096kB (M) = 3892520kB [ 268.325872][ T6723] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 268.343225][ T6723] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 268.353295][ T6723] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 268.363289][ T6723] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 268.372966][ T6723] 57474 total pagecache pages [ 268.377981][ T6723] 0 pages in swap cache [ 268.384476][ T6723] Free swap = 124996kB [ 268.388639][ T6723] Total swap = 124996kB [ 268.395199][ T6723] 2097051 pages RAM [ 268.399037][ T6723] 0 pages HighMem/MovableOnly [ 268.405020][ T6723] 429443 pages reserved [ 268.409182][ T6723] 0 pages cma reserved [ 268.504081][ T5887] usb 10-1: GET_CAPABILITIES returned 0 [ 268.509712][ T5887] usbtmc 10-1:16.0: can't read capabilities [ 268.624992][ T6715] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.801410][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 268.801425][ T30] audit: type=1400 audit(1764711478.235:292): avc: denied { write } for pid=6760 comm="syz.9.138" name="usbtmc0" dev="devtmpfs" ino=2855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 268.804824][ T6304] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 268.811757][ T5887] usb 10-1: USB disconnect, device number 2 [ 268.830425][ C1] vkms_vblank_simulate: vblank timer overrun [ 268.885231][ T6775] FAULT_INJECTION: forcing a failure. [ 268.885231][ T6775] name failslab, interval 1, probability 0, space 0, times 0 [ 268.904272][ T6775] CPU: 0 UID: 0 PID: 6775 Comm: syz.8.142 Not tainted syzkaller #0 PREEMPT(full) [ 268.904295][ T6775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 268.904305][ T6775] Call Trace: [ 268.904311][ T6775] [ 268.904317][ T6775] dump_stack_lvl+0x16c/0x1f0 [ 268.904340][ T6775] should_fail_ex+0x512/0x640 [ 268.904364][ T6775] ? fs_reclaim_acquire+0xae/0x150 [ 268.904384][ T6775] should_failslab+0xc2/0x120 [ 268.904403][ T6775] __kmalloc_noprof+0xdd/0x870 [ 268.904425][ T6775] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 268.904454][ T6775] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 268.904477][ T6775] tomoyo_realpath_from_path+0xc2/0x6e0 [ 268.904503][ T6775] ? tomoyo_profile+0x47/0x60 [ 268.904520][ T6775] tomoyo_path_number_perm+0x245/0x580 [ 268.904538][ T6775] ? tomoyo_path_number_perm+0x237/0x580 [ 268.904558][ T6775] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 268.904577][ T6775] ? find_held_lock+0x2b/0x80 [ 268.904612][ T6775] ? find_held_lock+0x2b/0x80 [ 268.904627][ T6775] ? hook_file_ioctl_common+0x145/0x410 [ 268.904648][ T6775] ? __fget_files+0x20e/0x3c0 [ 268.904672][ T6775] security_file_ioctl+0x9b/0x240 [ 268.904695][ T6775] __x64_sys_ioctl+0xb7/0x210 [ 268.904711][ T6775] do_syscall_64+0xcd/0xf80 [ 268.904729][ T6775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.904744][ T6775] RIP: 0033:0x7f032a98f749 [ 268.904757][ T6775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.904772][ T6775] RSP: 002b:00007f032b904038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 268.904787][ T6775] RAX: ffffffffffffffda RBX: 00007f032abe5fa0 RCX: 00007f032a98f749 [ 268.904797][ T6775] RDX: 0000200000000280 RSI: 00000000c018643a RDI: 0000000000000003 [ 268.904806][ T6775] RBP: 00007f032b904090 R08: 0000000000000000 R09: 0000000000000000 [ 268.904815][ T6775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.904824][ T6775] R13: 00007f032abe6038 R14: 00007f032abe5fa0 R15: 00007ffcea7451c8 [ 268.904845][ T6775] [ 268.904851][ T6775] ERROR: Out of memory at tomoyo_realpath_from_path. [ 269.184037][ T6304] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 269.196867][ T6304] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 269.255110][ T6715] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.270293][ T6304] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.278545][ T6304] usb 8-1: Product: syz [ 269.285415][ T6304] usb 8-1: Manufacturer: syz [ 269.290264][ T6304] usb 8-1: SerialNumber: syz [ 269.301182][ T6304] usb 8-1: config 0 descriptor?? [ 269.371322][ T30] audit: type=1400 audit(1764711478.805:293): avc: denied { read } for pid=6776 comm="syz.5.143" path="socket:[15247]" dev="sockfs" ino=15247 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 269.754042][ T6304] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 269.798786][ T6715] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.809007][ T6554] udevd[6554]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 269.816927][ T30] audit: type=1400 audit(1764711478.885:294): avc: denied { write } for pid=6776 comm="syz.5.143" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 269.910731][ T6715] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.046003][ T6787] sch_tbf: burst 480 is lower than device lo mtu (65550) ! [ 270.455943][ T6796] netlink: 40 bytes leftover after parsing attributes in process `syz.7.140'. [ 270.607860][ T6801] ALSA: mixer_oss: invalid OSS volume '' [ 271.460522][ T6794] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.802675][ T6806] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.858183][ T6794] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.916031][ T6001] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.941762][ T6806] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.969878][ T6794] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.982441][ T6017] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 272.008516][ T6806] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.021379][ T6001] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.038142][ T6001] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.058771][ T6794] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.110272][ T6806] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.145009][ T6017] usb 9-1: config 5 has an invalid interface number: 123 but max is 0 [ 272.161042][ T6017] usb 9-1: config 5 has no interface number 0 [ 272.167548][ T6017] usb 9-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 272.182186][ T6017] usb 9-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 272.192193][ T4290] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.196235][ T6017] usb 9-1: config 5 interface 123 altsetting 7 endpoint 0x86 has invalid wMaxPacketSize 0 [ 272.236081][ T6017] usb 9-1: config 5 interface 123 has no altsetting 0 [ 272.264217][ T6017] usb 9-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 272.295484][ T4290] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.312751][ T6017] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.344019][ T6017] usb 9-1: Product: syz [ 272.369599][ T6017] usb 9-1: Manufacturer: syz [ 272.377482][ T4290] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.394535][ T6017] usb 9-1: SerialNumber: syz [ 272.411309][ T4290] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.431295][ T4290] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.448255][ T6826] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 6826 comm: syz.6.148) [ 272.500434][ T30] audit: type=1800 audit(1764711481.935:295): pid=6826 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.148" name=2173656C696E7578776B311FD06DC37F39C99E2A0D5493FDE291EFAA16236A978FBCDE590FCCC56D56CB15766D2870C92D515A23D27B84BF06 dev="mqueue" ino=16553 res=0 errno=0 [ 272.588405][ T4290] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.603688][ T6833] autofs: Unknown parameter './file0' [ 272.678308][ T4290] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.707023][ T6304] usb 8-1: USB disconnect, device number 3 [ 272.715453][ T6830] 9pnet: Could not find request transport: fd0x0000000000000004 [ 272.872395][ T4290] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.898564][ T30] audit: type=1400 audit(1764711482.335:296): avc: denied { append } for pid=6810 comm="syz.8.147" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 272.940040][ T6841] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.150'. [ 272.943043][ T4290] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.296958][ T30] audit: type=1400 audit(1764711482.405:297): avc: denied { map } for pid=6810 comm="syz.8.147" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 273.583506][ T6017] ni6501 9-1:5.123: driver 'ni6501' failed to auto-configure device. [ 273.623868][ T6017] usb 9-1: USB disconnect, device number 2 [ 274.028108][ T6433] IPVS: starting estimator thread 0... [ 274.055626][ T6853] net_ratelimit: 15117 callbacks suppressed [ 274.055636][ T6853] IPVS: sh: FWM 3 0x00000003 - no destination available [ 274.091142][ T30] audit: type=1400 audit(1764711483.525:298): avc: denied { create } for pid=6858 comm="syz.7.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 274.142408][ T30] audit: type=1400 audit(1764711483.555:299): avc: denied { ioctl } for pid=6858 comm="syz.7.155" path="socket:[16616]" dev="sockfs" ino=16616 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 274.173299][ T6857] IPVS: using max 45 ests per chain, 108000 per kthread [ 274.206490][ T30] audit: type=1400 audit(1764711483.575:300): avc: denied { ioctl } for pid=6860 comm="syz.6.154" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 274.239984][ T6866] syz.6.154 uses obsolete (PF_INET,SOCK_PACKET) [ 274.249782][ T6854] netlink: 52 bytes leftover after parsing attributes in process `syz.5.149'. [ 274.265730][ T6853] netlink: 'syz.9.153': attribute type 27 has an invalid length. [ 274.338853][ T30] audit: type=1400 audit(1764711483.575:301): avc: denied { set_context_mgr } for pid=6860 comm="syz.6.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 274.361812][ T6867] netlink: 20 bytes leftover after parsing attributes in process `syz.5.149'. [ 274.414890][ T30] audit: type=1400 audit(1764711483.585:302): avc: denied { accept } for pid=6858 comm="syz.7.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 274.448713][ T30] audit: type=1400 audit(1764711483.735:303): avc: denied { bind } for pid=6851 comm="syz.9.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 274.474289][ T30] audit: type=1400 audit(1764711483.845:304): avc: denied { append } for pid=6869 comm="syz.7.157" name="sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 274.522425][ T6017] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 274.673086][ T6017] usb 7-1: Using ep0 maxpacket: 8 [ 274.679545][ T6017] usb 7-1: config 6 has an invalid interface number: 2 but max is 0 [ 274.688494][ T6017] usb 7-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 274.701486][ T6017] usb 7-1: config 6 has no interface number 0 [ 274.882473][ T6017] usb 7-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 274.929998][ T6017] usb 7-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 274.987598][ T6017] usb 7-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 275.017653][ T6017] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.031831][ T6017] usb 7-1: Product: syz [ 275.040571][ T6017] usb 7-1: Manufacturer: syz [ 275.050354][ T6017] usb 7-1: SerialNumber: syz [ 275.078462][ T6017] hso 7-1:6.2: Failed to find INT IN ep [ 275.414678][ T6893] netlink: 165 bytes leftover after parsing attributes in process `syz.7.158'. [ 275.435423][ T6866] binder: BINDER_SET_CONTEXT_MGR already set [ 275.441527][ T6866] binder: 6860:6866 ioctl 4018620d 2000000002c0 returned -16 [ 275.662844][ T6304] usb 7-1: USB disconnect, device number 2 [ 275.992576][ T6017] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 276.172898][ T6017] usb 6-1: Using ep0 maxpacket: 8 [ 276.472993][ T6017] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 276.501246][ T6017] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 276.612517][ T6017] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 276.654104][ T6017] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 276.667579][ T6017] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 276.678916][ T6017] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.941366][ T6916] netlink: 4 bytes leftover after parsing attributes in process `syz.9.161'. [ 276.976126][ T6921] dns_resolver: Unsupported content type (152) [ 277.023140][ T6017] usb 6-1: GET_CAPABILITIES returned 0 [ 277.028654][ T6017] usbtmc 6-1:16.0: can't read capabilities [ 277.084602][ T6925] veth1_virt_wifi: entered allmulticast mode [ 277.238214][ T30] audit: type=1400 audit(1764711486.675:305): avc: denied { append } for pid=6923 comm="syz.8.163" name="userfaultfd" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 277.315701][ T9] usb 6-1: USB disconnect, device number 3 [ 277.410695][ T30] audit: type=1400 audit(1764711486.845:306): avc: denied { module_load } for pid=6936 comm="syz.9.165" path="/sys/power/wakeup_count" dev="sysfs" ino=1413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 277.701105][ T30] audit: type=1400 audit(1764711487.135:307): avc: denied { append } for pid=6951 comm="syz.9.169" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 277.789661][ T5887] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 277.862580][ T6368] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 277.945703][ T5887] usb 8-1: config 5 has an invalid interface number: 123 but max is 0 [ 277.956166][ T5887] usb 8-1: config 5 has no interface number 0 [ 277.962290][ T5887] usb 8-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 277.978218][ T5887] usb 8-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 278.007100][ T5887] usb 8-1: config 5 interface 123 altsetting 7 endpoint 0x86 has invalid wMaxPacketSize 0 [ 278.200642][ T6368] usb 7-1: Using ep0 maxpacket: 16 [ 278.205970][ T5887] usb 8-1: config 5 interface 123 has no altsetting 0 [ 278.285800][ T5887] usb 8-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 278.295178][ T5887] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.312779][ T5887] usb 8-1: Product: syz [ 278.317043][ T5887] usb 8-1: Manufacturer: syz [ 278.321656][ T5887] usb 8-1: SerialNumber: syz [ 278.324633][ T6368] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 278.380551][ T6368] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 278.397450][ T6368] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 278.417765][ T6368] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.444969][ T6368] usb 7-1: Product: syz [ 278.453051][ T6368] usb 7-1: Manufacturer: syz [ 278.463240][ T6368] usb 7-1: SerialNumber: syz [ 278.480020][ T6368] usb 7-1: config 0 descriptor?? [ 278.507164][ T6368] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 278.537171][ T6368] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 278.652151][ T6975] netlink: 44 bytes leftover after parsing attributes in process `syz.8.171'. [ 278.661791][ T6975] netlink: 43 bytes leftover after parsing attributes in process `syz.8.171'. [ 278.670730][ T6975] netlink: 'syz.8.171': attribute type 6 has an invalid length. [ 278.678601][ T6975] netlink: 'syz.8.171': attribute type 5 has an invalid length. [ 278.686353][ T6975] netlink: 43 bytes leftover after parsing attributes in process `syz.8.171'. [ 278.716064][ T5887] ni6501 8-1:5.123: driver 'ni6501' failed to auto-configure device. [ 278.746288][ T5887] usb 8-1: USB disconnect, device number 4 [ 279.209746][ T6368] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 279.225954][ T6368] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 279.970598][ T6368] em28xx 7-1:0.0: Unknown AC97 audio processor detected! [ 280.213283][ T5930] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 280.491283][ T6368] em28xx 7-1:0.0: couldn't setup AC97 register 2 [ 280.518493][ T6368] em28xx 7-1:0.0: couldn't setup AC97 register 4 [ 280.534216][ T6368] em28xx 7-1:0.0: couldn't setup AC97 register 6 [ 280.556632][ T6368] em28xx 7-1:0.0: couldn't setup AC97 register 54 [ 280.577126][ T6368] em28xx 7-1:0.0: couldn't setup AC97 register 56 [ 280.588233][ T7010] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.614626][ T6368] usb 7-1: USB disconnect, device number 3 [ 280.626470][ T7014] fuse: Bad value for 'fd' [ 280.662737][ T5930] usb 6-1: Using ep0 maxpacket: 16 [ 280.678462][ T5930] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.716179][ T5930] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 280.727319][ T5930] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.745488][ T5930] usb 6-1: config 0 descriptor?? [ 280.914394][ T7010] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.959915][ T7000] netlink: 12 bytes leftover after parsing attributes in process `syz.5.177'. [ 280.984685][ T7000] netlink: 12 bytes leftover after parsing attributes in process `syz.5.177'. [ 281.019015][ T7010] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.082217][ T7010] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.198211][ T3767] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.256224][ T5930] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 281.280175][ T3767] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.835220][ T7032] tipc: Started in network mode [ 281.840103][ T7032] tipc: Node identity 2e1d3e6aa5e9, cluster identity 4711 [ 281.848069][ T7032] tipc: Enabled bearer , priority 0 [ 281.871916][ T4423] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.979866][ T3576] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.047399][ T7038] usb usb8: usbfs: interface 0 claimed by hub while 'syz.5.177' resets device [ 282.148934][ T7033] syzkaller0: entered promiscuous mode [ 282.154499][ T7033] syzkaller0: entered allmulticast mode [ 282.160538][ T7033] tipc: Resetting bearer [ 282.275617][ T7024] tipc: Resetting bearer [ 283.808050][ T7024] tipc: Disabling bearer [ 283.815908][ T5930] tipc: Node number set to 2348039786 [ 284.006524][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 284.006540][ T30] audit: type=1400 audit(1764711493.445:309): avc: denied { execute } for pid=7056 comm="syz.6.188" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 284.356127][ T7068] QAT: failed to copy from user cfg_data. [ 284.373822][ T7068] netlink: 12 bytes leftover after parsing attributes in process `syz.8.192'. [ 284.490333][ T7036] syz.5.177 (7036): drop_caches: 2 [ 284.506573][ T30] audit: type=1400 audit(1764711493.885:310): avc: denied { setopt } for pid=7063 comm="syz.8.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 285.786264][ T7083] netlink: 'syz.9.193': attribute type 12 has an invalid length. [ 285.812533][ T7083] netlink: 'syz.9.193': attribute type 29 has an invalid length. [ 285.840466][ T7083] netlink: 148 bytes leftover after parsing attributes in process `syz.9.193'. [ 285.868396][ T30] audit: type=1400 audit(1764711495.305:311): avc: denied { listen } for pid=7056 comm="syz.6.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 286.037149][ T30] audit: type=1400 audit(1764711495.335:312): avc: denied { create } for pid=7056 comm="syz.6.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 286.172285][ T7092] overlayfs: missing 'lowerdir' [ 287.471942][ T6345] usb 6-1: USB disconnect, device number 4 [ 287.577753][ T9] libceph: connect (1)[c::]:6789 error -101 [ 287.586139][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 287.623321][ T6441] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 287.631579][ T7107] ceph: No mds server is up or the cluster is laggy [ 287.701225][ T7112] block nbd0: shutting down sockets [ 287.794116][ T6441] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.804607][ T6441] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 224, using maximum allowed: 30 [ 287.819555][ T6441] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 224 [ 287.840886][ T6441] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 287.842904][ T6368] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 287.850492][ T6441] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 287.875515][ T6441] usb 10-1: Product: syz [ 287.879778][ T6441] usb 10-1: Manufacturer: syz [ 287.892388][ T6441] usb 10-1: SerialNumber: syz [ 287.911511][ T6441] usb 10-1: config 0 descriptor?? [ 287.933386][ T9] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 288.035500][ T6368] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 288.043693][ T6368] usb 8-1: config 0 has no interface number 0 [ 288.057062][ T6368] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 288.066390][ T6368] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.107034][ T6368] usb 8-1: config 0 descriptor?? [ 288.119203][ T6368] usb 8-1: selecting invalid altsetting 1 [ 288.128403][ T7100] gfs2: not a GFS2 filesystem [ 288.129635][ T6368] dvb_ttusb_budget: ttusb_init_controller: error [ 288.137165][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 288.142565][ T6368] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 288.179287][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.199456][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 288.238687][ T9] usb 7-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 288.259709][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.303940][ T9] usb 7-1: config 0 descriptor?? [ 288.351122][ T30] audit: type=1400 audit(1764711497.755:313): avc: denied { setopt } for pid=7102 comm="syz.7.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 288.413208][ T30] audit: type=1400 audit(1764711497.825:314): avc: denied { write } for pid=7099 comm="syz.9.198" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 288.474072][ T6368] DVB: Unable to find symbol cx22700_attach() [ 288.575194][ T6368] DVB: Unable to find symbol tda10046_attach() [ 288.581425][ T6368] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 288.593092][ T30] audit: type=1400 audit(1764711498.035:315): avc: denied { append } for pid=7113 comm="syz.6.201" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 288.643461][ T6368] usb 8-1: USB disconnect, device number 5 [ 288.749227][ T30] audit: type=1400 audit(1764711498.035:316): avc: denied { open } for pid=7113 comm="syz.6.201" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 288.826734][ T30] audit: type=1400 audit(1764711498.115:317): avc: denied { firmware_load } for pid=7099 comm="syz.9.198" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 288.854178][ T9] uclogic 0003:28BD:0094.0002: interface is invalid, ignoring [ 288.927142][ T5887] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 289.108692][ T9] usb 7-1: USB disconnect, device number 4 [ 289.137202][ T5887] usb 6-1: unable to get BOS descriptor or descriptor too short [ 289.183039][ T7151] QAT: failed to copy from user cfg_data. [ 289.196892][ T7151] netlink: 12 bytes leftover after parsing attributes in process `syz.7.204'. [ 289.301635][ T5887] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 289.773208][ T5887] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 289.935195][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.989735][ T5887] usb 6-1: Product: syz [ 290.009014][ T5887] usb 6-1: Manufacturer: syz [ 290.019022][ T5887] usb 6-1: SerialNumber: syz [ 290.038632][ T7136] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 290.051986][ T6441] snd-usb-audio 10-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 290.074049][ T6554] udevd[6554]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 290.098845][ T6441] usb 10-1: USB disconnect, device number 3 [ 290.994940][ T7127] syz.9.198 (7127) used greatest stack depth: 19632 bytes left [ 291.452772][ T6441] IPVS: starting estimator thread 0... [ 291.538393][ T7182] netlink: 165 bytes leftover after parsing attributes in process `syz.8.209'. [ 291.725098][ T7181] IPVS: using max 42 ests per chain, 100800 per kthread [ 291.859572][ T5887] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 291.889426][ T5887] usb 6-1: USB disconnect, device number 5 [ 292.009674][ T6554] udevd[6554]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 293.012432][ T6441] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 293.033486][ T5887] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 293.172539][ T6441] usb 9-1: Using ep0 maxpacket: 32 [ 293.189227][ T6441] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.212952][ T5887] usb 10-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 293.251055][ T6441] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.276097][ T5887] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.346787][ T5887] usb 10-1: Product: syz [ 293.355199][ T6441] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 293.367202][ T5887] usb 10-1: Manufacturer: syz [ 293.371882][ T5887] usb 10-1: SerialNumber: syz [ 293.417829][ T6441] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.433792][ T5887] usb 10-1: config 0 descriptor?? [ 293.450624][ T6441] usb 9-1: config 0 descriptor?? [ 293.464013][ T5887] hub 10-1:0.0: bad descriptor, ignoring hub [ 293.481319][ T5887] hub 10-1:0.0: probe with driver hub failed with error -5 [ 293.489891][ T6441] hub 9-1:0.0: USB hub found [ 293.577355][ T7213] can0: slcan on ttyS3. [ 293.670463][ T5887] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 293.684276][ T7213] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 293.702206][ T6441] hub 9-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 293.709457][ T6345] IPVS: starting estimator thread 0... [ 293.721488][ T5887] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 293.835851][ T7224] IPVS: using max 74 ests per chain, 177600 per kthread [ 294.554870][ T7227] i2c i2c-1: Invalid block size returned: 167 [ 294.567204][ T5887] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 294.744838][ T5887] usb 10-1: media controller created [ 294.755290][ T7202] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 294.780067][ T6441] usbhid 9-1:0.0: can't add hid device: -71 [ 294.796339][ T6441] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 294.837544][ T5887] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 294.863111][ T6441] usb 9-1: USB disconnect, device number 3 [ 294.980802][ T5887] DVB: Unable to find symbol dib7000p_attach() [ 294.999933][ T5887] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 295.162835][ T7206] can0 (unregistered): slcan off ttyS3. [ 295.232623][ T5887] rc_core: IR keymap rc-dib0700-rc5 not found [ 295.238961][ T5887] Registered IR keymap rc-empty [ 295.285114][ T7239] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 295.656299][ T5887] dvb-usb: could not initialize remote control. [ 295.697311][ T5887] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 295.730181][ T5887] usb 10-1: USB disconnect, device number 4 [ 295.973117][ T24] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 295.974551][ T5887] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 296.156185][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 296.169038][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.217938][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.235554][ T24] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 296.245987][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.256300][ T6345] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 296.370149][ T24] usb 9-1: config 0 descriptor?? [ 296.520973][ T6345] usb 6-1: config 0 has no interfaces? [ 296.559508][ T6345] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 296.618162][ T6345] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.633278][ T6345] usb 6-1: config 0 descriptor?? [ 297.047057][ T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 297.255023][ T5887] usb 6-1: USB disconnect, device number 6 [ 297.293051][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 297.325143][ T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 297.343678][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 297.366478][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 297.390815][ T9] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 297.436970][ T9] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 297.456880][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.498290][ T6345] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 297.601992][ T30] audit: type=1400 audit(1764711507.035:318): avc: denied { create } for pid=7240 comm="syz.8.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 297.652519][ T30] audit: type=1400 audit(1764711507.065:319): avc: denied { ioctl } for pid=7240 comm="syz.8.219" path="socket:[17683]" dev="sockfs" ino=17683 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 297.703333][ T6345] usb 7-1: Using ep0 maxpacket: 16 [ 297.714584][ T9] usb 8-1: GET_CAPABILITIES returned 0 [ 297.717614][ T6345] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 297.722442][ T30] audit: type=1400 audit(1764711507.075:320): avc: denied { write } for pid=7240 comm="syz.8.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 297.761013][ T9] usbtmc 8-1:16.0: can't read capabilities [ 297.902699][ T6345] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 297.923075][ T40] usb 8-1: USB disconnect, device number 6 [ 297.954549][ T6345] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 297.978923][ T6345] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.992847][ T6345] usb 7-1: Product: syz [ 297.997045][ T6345] usb 7-1: Manufacturer: syz [ 298.001672][ T6345] usb 7-1: SerialNumber: syz [ 298.026124][ T6345] usb 7-1: config 0 descriptor?? [ 298.041996][ T6345] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 298.053263][ T24] usbhid 9-1:0.0: can't add hid device: -71 [ 298.059246][ T24] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 298.071765][ T6345] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 298.084029][ T24] usb 9-1: USB disconnect, device number 4 [ 298.375917][ T7297] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 298.409288][ T7297] netlink: 'syz.9.227': attribute type 27 has an invalid length. [ 298.452650][ T40] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 298.676342][ T6345] em28xx 7-1:0.0: chip ID is em2874 [ 298.757123][ T40] usb 6-1: config 0 has an invalid interface number: 82 but max is 0 [ 298.787707][ T40] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.863703][ T40] usb 6-1: config 0 has no interface number 0 [ 298.913086][ T40] usb 6-1: config 0 interface 82 altsetting 0 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 298.980790][ T40] usb 6-1: config 0 interface 82 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 299.060449][ T30] audit: type=1400 audit(1764711508.495:321): avc: denied { name_bind } for pid=7269 comm="syz.6.224" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 299.120672][ T40] usb 6-1: config 0 interface 82 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 299.192914][ T40] usb 6-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=11.9e [ 299.231136][ T40] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.251690][ T7316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32794 sclass=netlink_route_socket pid=7316 comm=syz.8.229 [ 299.324849][ T40] usb 6-1: Product: syz [ 299.340043][ T40] usb 6-1: Manufacturer: syz [ 299.385714][ T40] usb 6-1: SerialNumber: syz [ 299.421139][ T40] usb 6-1: config 0 descriptor?? [ 299.437070][ T7291] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 299.458718][ T40] cdc_ether 6-1:0.82: skipping garbage [ 299.466005][ T40] usb 6-1: bad CDC descriptors [ 299.480694][ T40] usb 6-1: unsupported MDLM descriptors [ 299.509541][ T40] cdc_acm 6-1:0.82: skipping garbage [ 299.679650][ T7291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.702674][ T7291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.727525][ T6345] usb 6-1: USB disconnect, device number 7 [ 299.892406][ T40] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 300.031557][ T7329] netlink: 24 bytes leftover after parsing attributes in process `syz.7.232'. [ 300.041020][ T7330] netlink: 24 bytes leftover after parsing attributes in process `syz.7.232'. [ 300.056489][ T40] usb 9-1: Using ep0 maxpacket: 32 [ 300.079936][ T40] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.091633][ T40] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.105194][ T7329] netlink: 24 bytes leftover after parsing attributes in process `syz.7.232'. [ 300.106834][ T40] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 300.123914][ T40] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.171607][ T40] usb 9-1: config 0 descriptor?? [ 300.197333][ T30] audit: type=1400 audit(1764711509.625:322): avc: denied { write } for pid=7326 comm="syz.9.231" name="sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 300.225055][ T40] hub 9-1:0.0: USB hub found [ 300.279756][ T30] audit: type=1400 audit(1764711509.625:323): avc: denied { read } for pid=7326 comm="syz.9.231" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 300.374782][ T5561] usb 7-1: USB disconnect, device number 5 [ 300.388093][ T5561] em28xx 7-1:0.0: Disconnecting em28xx [ 300.400765][ T40] hub 9-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 300.488993][ T5561] em28xx 7-1:0.0: Freeing device [ 300.622535][ T30] audit: type=1400 audit(1764711510.065:324): avc: denied { connect } for pid=7340 comm="syz.7.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 300.789690][ T7347] comedi comedi3: comedi_parport: I/O port conflict (0x10,3) [ 300.808678][ T40] usbhid 9-1:0.0: can't add hid device: -71 [ 300.822424][ T40] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 300.876075][ T40] usb 9-1: USB disconnect, device number 5 [ 300.896672][ T7350] netlink: 4 bytes leftover after parsing attributes in process `syz.7.239'. [ 301.044239][ T6304] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 301.232409][ T6304] usb 6-1: Using ep0 maxpacket: 8 [ 301.248710][ T6304] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 301.271001][ T6304] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 301.272605][ T6091] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 301.289472][ T6304] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 301.318978][ T6304] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 301.370691][ T7367] netlink: 4 bytes leftover after parsing attributes in process `syz.9.242'. [ 301.375676][ T6304] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 301.392720][ T40] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 301.420680][ T6304] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.477272][ T6091] usb 7-1: config 5 has an invalid interface number: 123 but max is 0 [ 301.496064][ T6091] usb 7-1: config 5 has no interface number 0 [ 301.502195][ T6091] usb 7-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 301.534484][ T6091] usb 7-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 301.562064][ T6091] usb 7-1: config 5 interface 123 altsetting 7 endpoint 0x86 has invalid wMaxPacketSize 0 [ 301.592465][ T6091] usb 7-1: config 5 interface 123 has no altsetting 0 [ 301.613804][ T6091] usb 7-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 301.623345][ T6091] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.643063][ T6091] usb 7-1: Product: syz [ 301.648058][ T6304] usb 6-1: usb_control_msg returned -71 [ 301.653718][ T6304] usbtmc 6-1:16.0: can't read capabilities [ 301.661749][ T6091] usb 7-1: Manufacturer: syz [ 301.665230][ T6304] usb 6-1: USB disconnect, device number 8 [ 301.682268][ T6091] usb 7-1: SerialNumber: syz [ 301.997936][ T40] usb 8-1: Using ep0 maxpacket: 16 [ 302.013279][ T40] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 302.025022][ T40] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 302.042403][ T40] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.050417][ T40] usb 8-1: Product: syz [ 302.054645][ T40] usb 8-1: Manufacturer: syz [ 302.059245][ T40] usb 8-1: SerialNumber: syz [ 302.063912][ T6345] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 302.083485][ T40] usb 8-1: config 0 descriptor?? [ 302.095301][ T30] audit: type=1400 audit(1764711511.535:325): avc: denied { getopt } for pid=7364 comm="syz.9.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 302.096977][ T40] hub 8-1:0.0: bad descriptor, ignoring hub [ 302.127264][ T40] hub 8-1:0.0: probe with driver hub failed with error -5 [ 302.137258][ T40] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input7 [ 302.237839][ T6345] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 302.265159][ T7355] netlink: 4 bytes leftover after parsing attributes in process `syz.6.240'. [ 302.307232][ T6345] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 302.368711][ T6345] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.384765][ T7358] netlink: 68 bytes leftover after parsing attributes in process `syz.7.241'. [ 302.396820][ T6345] usb 9-1: Product: syz [ 302.402731][ T6345] usb 9-1: Manufacturer: syz [ 302.514232][ T6345] usb 9-1: SerialNumber: syz [ 302.527389][ T6345] usb 9-1: config 0 descriptor?? [ 302.548333][ T6091] ni6501 7-1:5.123: driver 'ni6501' failed to auto-configure device. [ 302.573668][ T6345] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 302.606219][ T6091] usb 7-1: USB disconnect, device number 6 [ 302.631805][ T7246] udevd[7246]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 302.843565][ T30] audit: type=1400 audit(1764711512.285:326): avc: denied { write } for pid=7394 comm="syz.9.246" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 302.922076][ T7397] FAULT_INJECTION: forcing a failure. [ 302.922076][ T7397] name failslab, interval 1, probability 0, space 0, times 0 [ 302.935669][ T7397] CPU: 1 UID: 0 PID: 7397 Comm: syz.5.245 Not tainted syzkaller #0 PREEMPT(full) [ 302.935693][ T7397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 302.935704][ T7397] Call Trace: [ 302.935710][ T7397] [ 302.935716][ T7397] dump_stack_lvl+0x16c/0x1f0 [ 302.935737][ T7397] should_fail_ex+0x512/0x640 [ 302.935757][ T7397] ? fs_reclaim_acquire+0xae/0x150 [ 302.935774][ T7397] should_failslab+0xc2/0x120 [ 302.935790][ T7397] __kmalloc_noprof+0xdd/0x870 [ 302.935807][ T7397] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 302.935829][ T7397] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 302.935852][ T7397] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 302.935871][ T7397] tomoyo_realpath_from_path+0xc2/0x6e0 [ 302.935892][ T7397] ? tomoyo_profile+0x47/0x60 [ 302.935906][ T7397] tomoyo_path_number_perm+0x245/0x580 [ 302.935922][ T7397] ? tomoyo_path_number_perm+0x237/0x580 [ 302.935940][ T7397] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 302.935955][ T7397] ? __schedule+0x1149/0x5de0 [ 302.935976][ T7397] ? find_held_lock+0x2b/0x80 [ 302.936006][ T7397] ? find_held_lock+0x2b/0x80 [ 302.936018][ T7397] ? hook_file_ioctl_common+0x145/0x410 [ 302.936036][ T7397] ? __fget_files+0x20e/0x3c0 [ 302.936055][ T7397] security_file_ioctl+0x9b/0x240 [ 302.936075][ T7397] __x64_sys_ioctl+0xb7/0x210 [ 302.936090][ T7397] do_syscall_64+0xcd/0xf80 [ 302.936105][ T7397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.936118][ T7397] RIP: 0033:0x7f80f258f749 [ 302.936129][ T7397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.936142][ T7397] RSP: 002b:00007f80f348b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 302.936156][ T7397] RAX: ffffffffffffffda RBX: 00007f80f27e6180 RCX: 00007f80f258f749 [ 302.936165][ T7397] RDX: 0000200000000140 RSI: 00000000c0105500 RDI: 0000000000000005 [ 302.936174][ T7397] RBP: 00007f80f348b090 R08: 0000000000000000 R09: 0000000000000000 [ 302.936182][ T7397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.936189][ T7397] R13: 00007f80f27e6218 R14: 00007f80f27e6180 R15: 00007ffff1f342a8 [ 302.936208][ T7397] [ 302.936924][ T7397] ERROR: Out of memory at tomoyo_realpath_from_path. [ 303.241580][ T7399] netlink: 40 bytes leftover after parsing attributes in process `syz.8.243'. [ 303.549812][ T30] audit: type=1400 audit(1764711512.985:327): avc: denied { read write } for pid=7394 comm="syz.9.246" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 303.578789][ T30] audit: type=1400 audit(1764711512.985:328): avc: denied { open } for pid=7394 comm="syz.9.246" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 303.789596][ T7408] ALSA: mixer_oss: invalid OSS volume '' [ 303.842687][ T7409] SET target dimension over the limit! [ 304.097595][ T7420] mkiss: ax0: crc mode is auto. [ 304.109190][ T7420] mmap: syz.6.251 (7420) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 304.409030][ T30] audit: type=1400 audit(1764711513.525:329): avc: denied { write } for pid=7417 comm="syz.6.251" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 304.530482][ T30] audit: type=1400 audit(1764711513.525:330): avc: denied { open } for pid=7417 comm="syz.6.251" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 304.644458][ T7424] QAT: failed to copy from user cfg_data. [ 304.655681][ T7424] netlink: 12 bytes leftover after parsing attributes in process `syz.9.252'. [ 305.442706][ T24] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 305.542777][ T7430] FAULT_INJECTION: forcing a failure. [ 305.542777][ T7430] name failslab, interval 1, probability 0, space 0, times 0 [ 305.572431][ T7430] CPU: 0 UID: 0 PID: 7430 Comm: syz.9.254 Not tainted syzkaller #0 PREEMPT(full) [ 305.572456][ T7430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 305.572466][ T7430] Call Trace: [ 305.572471][ T7430] [ 305.572477][ T7430] dump_stack_lvl+0x16c/0x1f0 [ 305.572499][ T7430] should_fail_ex+0x512/0x640 [ 305.572521][ T7430] ? kmem_cache_alloc_noprof+0x62/0x720 [ 305.572561][ T7430] should_failslab+0xc2/0x120 [ 305.572580][ T7430] kmem_cache_alloc_noprof+0x75/0x720 [ 305.572603][ T7430] ? prepare_creds+0x2c/0x740 [ 305.572629][ T7430] ? prepare_creds+0x2c/0x740 [ 305.572650][ T7430] prepare_creds+0x2c/0x740 [ 305.572675][ T7430] lookup_user_key+0x978/0x1300 [ 305.572701][ T7430] ? __pfx_lookup_user_key+0x10/0x10 [ 305.572730][ T7430] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 305.572756][ T7430] ? _copy_from_user+0x59/0xd0 [ 305.572781][ T7430] ? __do_sys_add_key+0x3a2/0x470 [ 305.572800][ T7430] ? memdup_user+0x82/0xe0 [ 305.572828][ T7430] __do_sys_add_key+0x25b/0x470 [ 305.572847][ T7430] ? __pfx___do_sys_add_key+0x10/0x10 [ 305.572865][ T7430] ? ksys_write+0x1ac/0x250 [ 305.572894][ T7430] do_syscall_64+0xcd/0xf80 [ 305.572913][ T7430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.572930][ T7430] RIP: 0033:0x7fbc5698f749 [ 305.572946][ T7430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.572964][ T7430] RSP: 002b:00007fbc578d4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 305.572982][ T7430] RAX: ffffffffffffffda RBX: 00007fbc56be5fa0 RCX: 00007fbc5698f749 [ 305.572993][ T7430] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000000 [ 305.573004][ T7430] RBP: 00007fbc578d4090 R08: fffffffffffffffe R09: 0000000000000000 [ 305.573015][ T7430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.573025][ T7430] R13: 00007fbc56be6038 R14: 00007fbc56be5fa0 R15: 00007ffdc41d9578 [ 305.573050][ T7430] [ 305.776818][ C0] vkms_vblank_simulate: vblank timer overrun [ 305.839303][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 305.847691][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.864716][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.874779][ T24] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 305.885413][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.079730][ T24] usb 7-1: config 0 descriptor?? [ 306.087585][ T24] hub 7-1:0.0: USB hub found [ 306.299429][ T30] audit: type=1400 audit(1764711515.735:331): avc: denied { bind } for pid=7433 comm="syz.9.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 306.450513][ T24] hub 7-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 307.303920][ T24] usbhid 7-1:0.0: can't add hid device: -71 [ 307.309928][ T24] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 307.364053][ T24] usb 7-1: USB disconnect, device number 7 [ 307.388610][ T6304] usb 9-1: USB disconnect, device number 6 [ 307.612631][ T6473] IPVS: starting estimator thread 0... [ 307.689741][ T6345] usb 8-1: USB disconnect, device number 7 [ 307.732417][ T7458] IPVS: using max 74 ests per chain, 177600 per kthread [ 307.763485][ T30] audit: type=1400 audit(1764711517.205:332): avc: denied { create } for pid=7459 comm="syz.5.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 308.082431][ T6304] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 308.252161][ T6304] usb 9-1: config 5 has an invalid interface number: 123 but max is 0 [ 308.318486][ T6304] usb 9-1: config 5 has no interface number 0 [ 308.379539][ T6304] usb 9-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 308.464052][ T6304] usb 9-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 308.523860][ T6304] usb 9-1: config 5 interface 123 altsetting 7 endpoint 0x86 has invalid wMaxPacketSize 0 [ 308.541392][ T30] audit: type=1400 audit(1764711517.975:333): avc: denied { read } for pid=7472 comm="syz.6.262" path="socket:[18957]" dev="sockfs" ino=18957 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 308.542138][ T6304] usb 9-1: config 5 interface 123 has no altsetting 0 [ 308.581757][ T6304] usb 9-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 308.593577][ T6304] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.603738][ T6304] usb 9-1: Product: syz [ 308.607982][ T6304] usb 9-1: Manufacturer: syz [ 308.617531][ T6304] usb 9-1: SerialNumber: syz [ 308.860598][ T30] audit: type=1400 audit(1764711518.235:334): avc: denied { read write } for pid=7479 comm="syz.9.263" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 309.010432][ T7464] netlink: 4 bytes leftover after parsing attributes in process `syz.8.260'. [ 309.200631][ T30] audit: type=1400 audit(1764711518.235:335): avc: denied { open } for pid=7479 comm="syz.9.263" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 309.228211][ T7494] Device name cannot be null; rc = [-22] [ 309.261659][ T7488] netlink: 'syz.7.264': attribute type 2 has an invalid length. [ 309.269806][ T30] audit: type=1400 audit(1764711518.245:336): avc: denied { mounton } for pid=7479 comm="syz.9.263" path="/35/file0" dev="tmpfs" ino=197 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 309.302049][ T30] audit: type=1400 audit(1764711518.695:337): avc: denied { create } for pid=7481 comm="syz.7.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 309.342741][ T30] audit: type=1400 audit(1764711518.695:338): avc: denied { write } for pid=7481 comm="syz.7.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 309.383498][ T6304] ni6501 9-1:5.123: driver 'ni6501' failed to auto-configure device. [ 309.482187][ T6304] usb 9-1: USB disconnect, device number 7 [ 309.564581][ T30] audit: type=1400 audit(1764711518.955:339): avc: denied { create } for pid=7495 comm="syz.5.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 309.569403][ T7500] netlink: 12 bytes leftover after parsing attributes in process `syz.5.265'. [ 309.917141][ T7505] netlink: 182 bytes leftover after parsing attributes in process `syz.7.266'. [ 309.944988][ T7508] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 309.972011][ T30] audit: type=1400 audit(1764711519.405:340): avc: denied { relabelto } for pid=7507 comm="syz.5.267" name="25" dev="tmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 310.059161][ T30] audit: type=1400 audit(1764711519.405:341): avc: denied { associate } for pid=7507 comm="syz.5.267" name="25" dev="tmpfs" ino=142 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="u:r:untrusted_app:s0:c512,c768" [ 310.104313][ T30] audit: type=1400 audit(1764711519.425:342): avc: denied { remove_name } for pid=6461 comm="syz-executor" name="binderfs" dev="tmpfs" ino=146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 310.379017][ T6441] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 310.507826][ T7526] tipc: Started in network mode [ 310.523108][ T7526] tipc: Node identity 527ca2501544, cluster identity 4711 [ 310.531259][ T7526] tipc: Enabled bearer , priority 0 [ 310.540438][ T6441] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 310.561742][ T6441] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 310.582464][ T6441] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 310.594598][ T6441] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 310.606502][ T6441] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 310.629217][ T6441] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 310.639697][ T7526] syzkaller0: entered promiscuous mode [ 310.645491][ T6441] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 310.659272][ T6441] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 310.676399][ T7526] syzkaller0: entered allmulticast mode [ 310.682665][ T6441] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 310.694727][ T7526] tipc: Resetting bearer [ 310.700755][ T6441] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 310.716196][ T6441] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 310.724050][ T6441] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 310.735415][ T6441] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 310.748303][ T6441] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 310.760218][ T6441] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 310.778622][ T6441] usb 8-1: string descriptor 0 read error: -22 [ 310.786145][ T6441] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 310.795921][ T6441] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.856479][ T6441] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 310.881465][ T7509] tipc: Resetting bearer [ 310.915318][ T7530] netlink: 72 bytes leftover after parsing attributes in process `syz.8.272'. [ 311.196131][ T7532] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 311.639159][ T7533] netlink: 8 bytes leftover after parsing attributes in process `syz.7.269'. [ 312.454844][ T7546] netlink: 8 bytes leftover after parsing attributes in process `syz.6.273'. [ 312.598601][ T7550] netlink: 165 bytes leftover after parsing attributes in process `syz.8.276'. [ 312.796286][ T7544] netlink: 28 bytes leftover after parsing attributes in process `syz.9.275'. [ 313.145403][ T7557] fuse: Bad value for 'fd' [ 314.548596][ T7509] tipc: Disabling bearer [ 314.556571][ T24] tipc: Node number set to 1194893904 [ 314.792467][ T6441] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 314.963679][ T6441] usb 7-1: config 1 interface 0 has no altsetting 0 [ 314.970318][ T6441] usb 7-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf [ 315.143617][ T6441] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.164003][ T6441] ums-cypress 7-1:1.0: USB Mass Storage device detected [ 315.261306][ T7597] netlink: 64 bytes leftover after parsing attributes in process `syz.8.284'. [ 315.429744][ T7600] xt_hashlimit: size too large, truncated to 1048576 [ 315.849118][ T7610] netlink: 72 bytes leftover after parsing attributes in process `syz.5.285'. [ 316.121419][ T7617] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 316.823407][ T24] usb 8-1: USB disconnect, device number 8 [ 316.882977][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.942454][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.087182][ T7630] netlink: 8 bytes leftover after parsing attributes in process `syz.5.288'. [ 317.137484][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 317.137501][ T30] audit: type=1400 audit(1764711526.575:346): avc: denied { name_connect } for pid=7628 comm="syz.5.288" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 317.564311][ T7641] tipc: Started in network mode [ 317.570282][ T7641] tipc: Node identity 9eac4eda3f4a, cluster identity 4711 [ 317.578800][ T7641] tipc: Enabled bearer , priority 0 [ 317.718168][ T7641] syzkaller0: entered promiscuous mode [ 317.723784][ T7641] syzkaller0: entered allmulticast mode [ 317.731524][ T7641] tipc: Resetting bearer [ 317.908138][ T9] usb 7-1: USB disconnect, device number 8 [ 317.983718][ T3467] tipc: Resetting bearer [ 318.076343][ T6304] libceph: connect (1)[c::]:6789 error -101 [ 318.092876][ T6304] libceph: mon0 (1)[c::]:6789 connect error [ 318.135396][ T7647] ceph: No mds server is up or the cluster is laggy [ 318.154364][ T7637] tipc: Resetting bearer [ 318.182891][ T7652] block nbd0: shutting down sockets [ 319.293821][ T7663] comedi comedi3: c6xdigio: a I/O base address must be specified [ 319.301601][ T7663] ------------[ cut here ]------------ [ 319.307632][ T7663] Unexpected driver unregister! [ 319.313016][ T7663] WARNING: drivers/base/driver.c:273 at 0x0, CPU#1: syz.9.295/7663 [ 319.321679][ T7663] Modules linked in: [ 319.325849][ T7663] CPU: 1 UID: 0 PID: 7663 Comm: syz.9.295 Not tainted syzkaller #0 PREEMPT(full) [ 319.335080][ T7663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 319.345159][ T7663] RIP: 0010:driver_unregister+0x89/0xb0 [ 319.350861][ T7663] Code: 00 75 3a 48 8b 73 68 48 89 ef e8 e2 bc 8b fc 48 89 df e8 1a 94 ff ff 5b 5d e9 83 3c e1 fb e8 7e 3c e1 fb 48 8d 3d 57 a9 b3 0a <67> 48 0f b9 3a 5b 5d e9 6b 3c e1 fb e8 66 bf 49 fc eb 9a e8 5f bf [ 319.370475][ C1] vkms_vblank_simulate: vblank timer overrun [ 319.377612][ T7663] RSP: 0018:ffffc900046bf9a0 EFLAGS: 00010293 [ 319.383712][ T7663] RAX: 0000000000000000 RBX: ffffffff8ff3a960 RCX: ffffffff88c0aa9b [ 319.391704][ T7663] RDX: ffff888026d08000 RSI: ffffffff85dc7292 RDI: ffffffff90901bf0 [ 319.399986][ T7663] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 319.408029][ T7663] R10: 0000000000000000 R11: 00000000ad7cde33 R12: ffffffff8ff3a8a0 [ 319.417027][ T7663] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88814c9b2000 [ 319.426036][ T7663] FS: 00007fbc578d46c0(0000) GS:ffff888124aa3000(0000) knlGS:0000000000000000 [ 319.435034][ T7663] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 319.441623][ T7663] CR2: 0000200000000040 CR3: 000000002aa0b000 CR4: 00000000003526f0 [ 319.449624][ T7663] Call Trace: [ 319.452968][ T7663] [ 319.455897][ T7663] comedi_device_detach_locked+0x12f/0xa50 [ 319.461725][ T7663] comedi_device_detach+0x67/0xb0 [ 319.466774][ T7663] comedi_device_attach+0x43d/0x900 [ 319.471969][ T7663] do_devconfig_ioctl+0x1b1/0x710 [ 319.476994][ T7663] ? comedi_unlocked_ioctl+0x167/0x2ee0 [ 319.482564][ T7663] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 319.488105][ T7663] ? find_held_lock+0x2b/0x80 [ 319.492788][ T7663] comedi_unlocked_ioctl+0x165d/0x2ee0 [ 319.498242][ T7663] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 319.504070][ T7663] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 319.509951][ T7663] ? do_vfs_ioctl+0x128/0x14f0 [ 319.515282][ T7663] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 319.521103][ T7663] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 319.528021][ T7663] ? hook_file_ioctl_common+0x145/0x410 [ 319.533626][ T7663] ? selinux_file_ioctl+0x180/0x270 [ 319.538843][ T7663] ? selinux_file_ioctl+0xb4/0x270 [ 319.543979][ T7663] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 319.549783][ T7663] __x64_sys_ioctl+0x18e/0x210 [ 319.554581][ T7663] do_syscall_64+0xcd/0xf80 [ 319.559076][ T7663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.564966][ T7663] RIP: 0033:0x7fbc5698f749 [ 319.569380][ T7663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.589011][ T7663] RSP: 002b:00007fbc578d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 319.597431][ T7663] RAX: ffffffffffffffda RBX: 00007fbc56be5fa0 RCX: 00007fbc5698f749 [ 319.605418][ T7663] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000006 [ 319.613385][ T7663] RBP: 00007fbc56a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 319.621847][ T7663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.630688][ T7663] R13: 00007fbc56be6038 R14: 00007fbc56be5fa0 R15: 00007ffdc41d9578 [ 319.638686][ T7663] [ 319.641684][ T7663] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 319.648936][ T7663] CPU: 1 UID: 0 PID: 7663 Comm: syz.9.295 Not tainted syzkaller #0 PREEMPT(full) [ 319.658100][ T7663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 319.668128][ T7663] Call Trace: [ 319.671389][ T7663] [ 319.674303][ T7663] dump_stack_lvl+0x3d/0x1f0 [ 319.678878][ T7663] vpanic+0x640/0x6f0 [ 319.682850][ T7663] panic+0xca/0xd0 [ 319.686564][ T7663] ? __pfx_panic+0x10/0x10 [ 319.691072][ T7663] ? check_panic_on_warn+0x1f/0xb0 [ 319.696183][ T7663] check_panic_on_warn+0xab/0xb0 [ 319.701117][ T7663] __warn+0x108/0x3c0 [ 319.705105][ T7663] __report_bug+0x2a0/0x520 [ 319.709598][ T7663] ? __pfx___report_bug+0x10/0x10 [ 319.714608][ T7663] ? driver_unregister+0x82/0xb0 [ 319.719534][ T7663] ? comedi_legacy_detach+0x8b/0x1d0 [ 319.724811][ T7663] report_bug_entry+0xb2/0x220 [ 319.729564][ T7663] ? driver_unregister+0x89/0xb0 [ 319.734501][ T7663] handle_bug+0x18a/0x260 [ 319.738816][ T7663] exc_invalid_op+0x17/0x50 [ 319.743327][ T7663] asm_exc_invalid_op+0x1a/0x20 [ 319.748158][ T7663] RIP: 0010:driver_unregister+0x89/0xb0 [ 319.753688][ T7663] Code: 00 75 3a 48 8b 73 68 48 89 ef e8 e2 bc 8b fc 48 89 df e8 1a 94 ff ff 5b 5d e9 83 3c e1 fb e8 7e 3c e1 fb 48 8d 3d 57 a9 b3 0a <67> 48 0f b9 3a 5b 5d e9 6b 3c e1 fb e8 66 bf 49 fc eb 9a e8 5f bf [ 319.773274][ T7663] RSP: 0018:ffffc900046bf9a0 EFLAGS: 00010293 [ 319.779321][ T7663] RAX: 0000000000000000 RBX: ffffffff8ff3a960 RCX: ffffffff88c0aa9b [ 319.787277][ T7663] RDX: ffff888026d08000 RSI: ffffffff85dc7292 RDI: ffffffff90901bf0 [ 319.795229][ T7663] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 319.803181][ T7663] R10: 0000000000000000 R11: 00000000ad7cde33 R12: ffffffff8ff3a8a0 [ 319.811132][ T7663] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88814c9b2000 [ 319.819090][ T7663] ? comedi_legacy_detach+0x8b/0x1d0 [ 319.824367][ T7663] ? driver_unregister+0x82/0xb0 [ 319.829380][ T7663] comedi_device_detach_locked+0x12f/0xa50 [ 319.835176][ T7663] comedi_device_detach+0x67/0xb0 [ 319.840184][ T7663] comedi_device_attach+0x43d/0x900 [ 319.845372][ T7663] do_devconfig_ioctl+0x1b1/0x710 [ 319.850373][ T7663] ? comedi_unlocked_ioctl+0x167/0x2ee0 [ 319.855898][ T7663] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 319.861436][ T7663] ? find_held_lock+0x2b/0x80 [ 319.866095][ T7663] comedi_unlocked_ioctl+0x165d/0x2ee0 [ 319.871540][ T7663] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 319.877417][ T7663] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 319.883289][ T7663] ? do_vfs_ioctl+0x128/0x14f0 [ 319.888034][ T7663] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 319.893042][ T7663] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 319.899889][ T7663] ? hook_file_ioctl_common+0x145/0x410 [ 319.905419][ T7663] ? selinux_file_ioctl+0x180/0x270 [ 319.910597][ T7663] ? selinux_file_ioctl+0xb4/0x270 [ 319.915691][ T7663] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 319.921481][ T7663] __x64_sys_ioctl+0x18e/0x210 [ 319.926228][ T7663] do_syscall_64+0xcd/0xf80 [ 319.930713][ T7663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.936589][ T7663] RIP: 0033:0x7fbc5698f749 [ 319.940987][ T7663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.960572][ T7663] RSP: 002b:00007fbc578d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 319.968966][ T7663] RAX: ffffffffffffffda RBX: 00007fbc56be5fa0 RCX: 00007fbc5698f749 [ 319.976915][ T7663] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000006 [ 319.984863][ T7663] RBP: 00007fbc56a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 319.992811][ T7663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.000762][ T7663] R13: 00007fbc56be6038 R14: 00007fbc56be5fa0 R15: 00007ffdc41d9578 [ 320.008724][ T7663] [ 320.012003][ T7663] Kernel Offset: disabled [ 320.016313][ T7663] Rebooting in 86400 seconds..