last executing test programs: 13m12.753199945s ago: executing program 32 (id=451): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) chdir(&(0x7f0000000480)='./cgroup\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x58) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0x6, 0x8}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x18) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@newsa={0x138, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x2, 0x0, 0x4e20, 0x0, 0x0, 0x20, 0x0, 0x16}, {@in=@broadcast, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, {0x4}, {0x10, 0x9}, 0x0, 0x0, 0xa, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x24000058) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r5) 12m50.263994373s ago: executing program 33 (id=568): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, 0x0, 0x4000004) 12m47.059575198s ago: executing program 34 (id=580): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4c, 0x9e, 0x58, 0x10, 0x545, 0x8080, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2, 0x0, 0x0, 0x5c, 0xf, 0x46}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 12m27.939382106s ago: executing program 35 (id=629): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000}, 0x40010) 10m37.73293312s ago: executing program 36 (id=939): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="c481abccf61b80bc8ffa10a4a800"/32], 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_RATE64={0xc, 0x8, 0x4526dd370cbcddac}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r6, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r6, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) 10m31.923346059s ago: executing program 0 (id=991): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd7000000", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, 0x0, 0x0) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c8, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0x200000000c], 0x80a0000, 0x2010d3}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[]) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) 10m29.8980527s ago: executing program 0 (id=993): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, 0x0) 10m27.562418393s ago: executing program 0 (id=999): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x20000b, 0x1, 0x2, "f819ebf45608e255b61c5deb3eb574d486d27e0600000000040000000006f100"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_open(0x0, 0x40, 0x22, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = timerfd_create(0x7, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/52, 0x34}], 0x1) close(r0) mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000300)={'wlan1\x00', @random="010000000700"}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1e, &(0x7f0000000000), 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000051) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d00000002000001090224000100000000090400000103000000092100000001220500090581"], 0x0) 10m22.847314934s ago: executing program 0 (id=1010): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x20000b, 0x1, 0x2, "f819ebf45608e255b61c5deb3eb574d486d27e0600000000040000000006f100"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_open(0x0, 0x40, 0x22, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = timerfd_create(0x7, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/52, 0x34}], 0x1) close(r0) mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000300)={'wlan1\x00', @random="010000000700"}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, &(0x7f0000002b80), 0x41000004, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000051) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d00000002000001090224000100000000090400000103000000092100000001220500090581"], 0x0) 10m19.150437695s ago: executing program 0 (id=1018): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) 10m17.956293453s ago: executing program 0 (id=1020): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x1, 0x8010000000000084) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000d, 0x13, 0xffffffffffffffff, 0x0) readlink(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter, 0x48) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r1, 0x101, 0xc, 0x0, 0x0) connect$ax25(r1, &(0x7f0000000100)={{0x3, @bcast, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs_stats\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x20) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='net/rt_cache\x00') 10m2.339527291s ago: executing program 37 (id=1020): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x1, 0x8010000000000084) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000d, 0x13, 0xffffffffffffffff, 0x0) readlink(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter, 0x48) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r1, 0x101, 0xc, 0x0, 0x0) connect$ax25(r1, &(0x7f0000000100)={{0x3, @bcast, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs_stats\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x20) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='net/rt_cache\x00') 8m40.613321832s ago: executing program 7 (id=1238): r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x80000, 0x82) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRESHEX=r0], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setfsgid(0xee00) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x300, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e77, 0x20000000, 0x94a, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x4000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f00000003c0)=""/250, 0x0, 0xfa, 0x0, 0x4}, 0x28) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x5411, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1, 0x0, 0x4}, 0x18) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x17) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000001100)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000001140)='macsec0\x00', 0x10) connect$inet(r6, &(0x7f0000001200)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) 8m39.332690454s ago: executing program 7 (id=1240): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080014"], 0x3c}}, 0x0) r0 = socket(0x8000000010, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x3, 0x2, 0xde5}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="000000000000000000000000000000001860000000000000000000a97600000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) socket$nl_generic(0x10, 0x3, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) mq_open(0x0, 0x1, 0x136, 0x0) write(r0, &(0x7f00000002c0)="fc0000001c000704ab5b2509b86803000aab087a0400000001481193210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000010}, 0x48000) socket$nl_sock_diag(0x10, 0x3, 0x4) 8m38.87645578s ago: executing program 7 (id=1241): socket$inet_udp(0x2, 0x2, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r5, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r4, 0x0) 8m37.958476594s ago: executing program 7 (id=1245): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x80047437, &(0x7f0000000140)=0xffff) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) r3 = syz_io_uring_complete(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000140)=0xffff, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x6, 0x23, 0x0, 0x1, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 8m34.470821013s ago: executing program 7 (id=1255): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 8m32.877792116s ago: executing program 7 (id=1258): sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x402282, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c011}, 0x400d0) r3 = openat$urandom(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x78, 0x30, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x6a00}, [{0x64, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) ioctl$RNDADDTOENTCNT(r3, 0x40045201, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r6, 0x545c, 0x7cb7562f2d67) ioctl$TIOCMSET(r6, 0x5418, &(0x7f00000000c0)=0xffffbdfe) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) fstatfs(r7, &(0x7f0000000000)=""/78) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$binfmt_script(r8, &(0x7f0000001b00), 0xfffffd9d) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 8m17.766511603s ago: executing program 38 (id=1258): sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x402282, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c011}, 0x400d0) r3 = openat$urandom(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x78, 0x30, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x6a00}, [{0x64, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) ioctl$RNDADDTOENTCNT(r3, 0x40045201, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r6, 0x545c, 0x7cb7562f2d67) ioctl$TIOCMSET(r6, 0x5418, &(0x7f00000000c0)=0xffffbdfe) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) fstatfs(r7, &(0x7f0000000000)=""/78) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$binfmt_script(r8, &(0x7f0000001b00), 0xfffffd9d) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6m48.70860393s ago: executing program 6 (id=1559): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_usb_connect(0x5, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, r5, 0xd1bd17c4b9ef5e5b, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x90) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) 6m45.102698304s ago: executing program 6 (id=1567): r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12015002d2cfa00863110001badc010203010902240001050590010904d7"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) utimensat(r7, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}, {0x77359400}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x68, 0x10, 0x1, 0x70bd2c, 0x20, {0x0, 0x0, 0x0, 0x0, 0xdf15003157970113, 0x8084}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x34, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x7fffffff, 0xf3f, 0x1, 0x8100}}, {0x28, 0x1, {0x9, 0x61b, 0x10000, 0x8100}}]}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000084}, 0x20000010) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r10, &(0x7f0000000480)={0x2020}, 0x2020) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'ip_vti0\x00', {0x2, 0x4e23, @loopback}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x1ff) r11 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x400) ioctl$NBD_SET_FLAGS(r11, 0xab0a, 0x5) 6m40.254776436s ago: executing program 6 (id=1578): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x38, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x27, 0x4, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x3c}}, 0x0) r0 = socket(0x8000000010, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x3, 0x2, 0xde5}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="000000000000000000000000000000001860000000000000000000a97600000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) setrlimit(0x3, &(0x7f0000000040)={0x2, 0x6}) r4 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0xb, 0x0) fcntl$setlease(r4, 0x400, 0x0) mq_open(0x0, 0x1, 0x136, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) keyctl$restrict_keyring(0xa, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000010}, 0x48000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900004001000000000000000000000000ffff"], 0x4c}}, 0x0) 6m39.487007844s ago: executing program 6 (id=1580): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}}, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x400, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x28, r4, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0) 6m37.949417421s ago: executing program 6 (id=1584): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 6m37.820948909s ago: executing program 6 (id=1586): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc7, 0x3d, 0x8a, 0x8, 0x2770, 0x9120, 0x6c77, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x91, 0xb0, 0xe2}}]}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xd}, {0xd, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0xffffff37, 0xc934, 0x0, 0x4, 0x40003, 0x0, 0x42f, 0x8001}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4004010) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 6m22.633332907s ago: executing program 39 (id=1586): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc7, 0x3d, 0x8a, 0x8, 0x2770, 0x9120, 0x6c77, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x91, 0xb0, 0xe2}}]}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xd}, {0xd, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0xffffff37, 0xc934, 0x0, 0x4, 0x40003, 0x0, 0x42f, 0x8001}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4004010) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 3m17.489763524s ago: executing program 3 (id=2173): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r1, &(0x7f00000002c0)={'#! ', '', [{0x20, '\xd9m\xf4\f00\xf4\xfa\t\tx\x8a\fx\x92\xac?!h\xef\xda/\xb1\xddArd\f\xccyJn\x04i\xbai\xe9\xb0\x91\x84,\x1dkfL\xe0\x05\x10\xc5O\xd4$\xc6\xa5\x16\xc9a\x8d\xedq\xe4\xca\xa5\x00\xa8\xf3J\x9a\xaa\xd2\xf9\x12\x1buw\xa9\xd0\xe2\xe7\x0f\xd4YN\xe4\xf3\xe0\xe7\xb3\xa3\xf2\xd1O\x15N\xdau\\\xc5\xad\x87b\x9f\xb3\xb8\xbb8\x95rfp\xb4\xd4\xae\x97|\x1b\xa3\xcb\xce\xa6~3>\x97\x1e\xdd\x05\x88\xcbNe\xb2H\xf3I\x1d\x1a\x11u\xc0\xdcA,\x16<\xa6\xb5\xea\x13tUA0h\xf9/S \xb4\xb5\xe98T\xac/\xac\xe4\xcb\n\x18\xf6\xaa\xcd\x8e\xc8>E\xb8\x11\x14\x87\xaa\xe5v\x95\x81\xe4\t\xd9\xc5\x9cQ\xe1\x02\"\xeeC\xd8\x95<\x05l\x8c\xb0\x8e_\x1b\xf2\xe1\x17\xe7o\r6DM/w\xe9I\xce\xb9\xf7\xdc\xc4\x11\xbaG\xcb\xa7\xbcj[~\x06\x87|8r|f\xcdIY\xa5]\xcc\x80AV\xe6\x9b\xa8\x90I\xc4\xc7'}]}, 0x106) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) socket$inet_udp(0x2, 0x2, 0x0) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000100)={0xffff, 0x2}) socket$caif_seqpacket(0x25, 0x5, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x7ff, 0x33d4, 0x180, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0x6}, 0x48) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000001aa40)=""/102400, 0x19000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f00000054c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000002901c8362add19f2e636b545f3bda41423e7376444805c0000000000090000470e99cd4d335e2dee9cc0bf814faff67bbf9b66de0ebfa439d3dbd0d6b73666d0ce5d9878253d4abdf80c3f4021659e8a68fd83865bae50372e76e374276ada2bb4b40e39a615346e7e5ee68deae8d82333f11d"], 0x18}}], 0x1, 0x40000000) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}}) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000140)={0x6, @pix={0x8, 0x3, 0x47425247, 0x2, 0x1, 0x9, 0x9, 0x2006a0, 0x0, 0x4, 0x2, 0x6}}) sendto$inet6(r7, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r7, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0x44}}, 0x20000000) 3m14.052960334s ago: executing program 3 (id=2183): socket$inet_udp(0x2, 0x2, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r6, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r5, 0x0) 3m12.779063418s ago: executing program 3 (id=2187): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$radio(&(0x7f0000006440), 0x2, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x800, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x1f2f, 0xe, 0x0, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0}, 0x50) waitid(0x0, 0x0, &(0x7f0000002ff9), 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x801, 0x10) setsockopt$inet_int(r4, 0x0, 0x12, &(0x7f0000000300)=0x1, 0x4) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000080)=0x13) r8 = syz_open_dev$loop(&(0x7f0000000040), 0x1, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000080)={r8, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0x5, "ddf98317e5a1149989fc8dbe43ea6acc96e3aa503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985888a073500", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc40a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x40000000000007]}}) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r10, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 3m6.412380001s ago: executing program 3 (id=2203): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x110) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x40) ioctl$SNDCTL_SEQ_GETTIME(r0, 0x80045113, &(0x7f0000000040)) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) 3m5.620439206s ago: executing program 3 (id=2205): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="200000006a000105fefdffffffdbdf250000ffffff810000080005"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x40, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRES64, @ANYRESDEC=0x0, @ANYRESDEC=r1, @ANYRESDEC=r0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r4, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x7b52e4aff0f1e2e7, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0xffffffff80000000, 0xfffc, 0x2, 0x6b, 0x2, 0x0, 0x0, 0x0, 0x933}}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0xe}, {0xa, 0xffff}, {0xfff1, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$inet(0x2, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) ioctl$TCXONC(r7, 0x540a, 0x2) 3m5.279731388s ago: executing program 3 (id=2207): syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000000040)="eac903f46bf279bebc92f1e94391ee1047afee629a4952a8", 0x0, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0xfffffffffffffffe}}, 0x18) socket(0x9, 0x7, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x5, 0x8b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'pim6reg1\x00', @link_local}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000180)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x40) 3m4.933577867s ago: executing program 40 (id=2207): syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000000040)="eac903f46bf279bebc92f1e94391ee1047afee629a4952a8", 0x0, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0xfffffffffffffffe}}, 0x18) socket(0x9, 0x7, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x5, 0x8b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'pim6reg1\x00', @link_local}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000180)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x40) 2m24.588148007s ago: executing program 4 (id=2330): read$msr(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000900000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r6, 0x1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f00000022c0)={{0x0, 0x0, 0x80, {0x0, 0x80af000}}, "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", "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"}) ioctl$KVM_SET_NESTED_STATE(r9, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0xfffffea8, {0xf000, 0x20200000000000}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd92ac431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fae33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b3775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f599b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd317069083a5632b5cfc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55da91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a6da5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601060000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f"], 0x44}, 0x1, 0x0, 0x0, 0x10000007}, 0x240008c4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, 0x0, 0x0) 2m23.549404411s ago: executing program 4 (id=2333): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="b4050000fd27a5be65e3055476f2a83b517b827f006110580000000000c60000000000000095000000000000009f33ef4ad81018979dacb160916e6e713f1eeb0bba3687bf44260e89b815ea858973f7afc5bc34e9c285d8e0cdbd274bd6f2939a97f42c771fa09aab5f629906bd2bb3352456a3701fadd089547a7ccf8592119d0c39be3b9142638604cbd8cca21418acd900d627c7e5fd28af9b86a78aeecd59b06657ae85ee24e28be2d9b85aeb1ae364862b7514d7e4354d7ba4e2eb201f92cad16a0db6bdf84c689bb76b5e9183dcdecc6737884a816a58f642a081f7aa58bb19bac3a9956e68059f3aff40775fb60bd48014d8072ee2b4cf393b77ed8f7df7aa7f5869949101108fa28473492267b55dea260224fe9922965da19c2dfa31d6dc54d5210d5e017fa5b82c3e11afd1d718031e3679fbd8de13ff90d155213e"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x57}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010101, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@loopback=0xa010101, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m23.289238579s ago: executing program 4 (id=2334): socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) mkdir(&(0x7f00000003c0)='./bus\x00', 0x88) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='nilfs2\x00', 0x8080, &(0x7f0000000100)='discard') 2m23.050172389s ago: executing program 4 (id=2335): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002"], 0xfc}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001"], 0x30}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000013000500000000000000000007000000", @ANYRES32, @ANYBLOB="200000000000000014001a80100004800c000980"], 0x34}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x1084804, 0x0) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008"], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x9}, 0x8) ptrace$ARCH_GET_GS(0x1e, r5, &(0x7f00000001c0), 0x1004) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000fe23b042b0f1bef26f432595555516dcd5bda0a9c320b57f2b34a3a8c51cc62d97f3316a739375d1b306eea555874929d4164a9035e5994b797a1ebf1b8694c942c37de0b66e6db16cb407b0a02dba461207311fd3ab4d69e951b1912ed67c4ca011e3b48b3f5e5f4f4ca53f1c256cd39b34ff4bda19bc9f17ae1c79b9d38e14b4c0fbbed9f791f3476779", @ANYRES32=r4], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0xf34, 0x5e002) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x7, 0x10, 0x3, 0x4}, &(0x7f00000002c0)=0x18) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000300)={r6, 0x5, 0x6, 0x3ff}, 0x10) 2m21.971772569s ago: executing program 4 (id=2341): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="c481abccf61b80bc8ffa10a4a800"/32], 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_RATE64={0xc, 0x8, 0x4526dd370cbcddac}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r5, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) 2m21.543197287s ago: executing program 4 (id=2343): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)={{0x12, 0x1, 0x190bbb1d754f7ebf, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x1a, 0x20, 0x10, [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x4, 0x1, 0xb}}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x7, 0x6, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x8, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x40, 0xff, 0x40}}}}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCRMFF(r0, 0x4004550e, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000001, 0x12, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(r2, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000002480)="ee", 0x1}], 0x1}}], 0x2, 0x8800) listen(r1, 0xeb) 2m21.341146173s ago: executing program 41 (id=2343): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)={{0x12, 0x1, 0x190bbb1d754f7ebf, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x1a, 0x20, 0x10, [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x4, 0x1, 0xb}}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x7, 0x6, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x8, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x40, 0xff, 0x40}}}}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCRMFF(r0, 0x4004550e, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000001, 0x12, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(r2, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000002480)="ee", 0x1}], 0x1}}], 0x2, 0x8800) listen(r1, 0xeb) 1m36.741582629s ago: executing program 5 (id=2209): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000953cdbed26233250"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$unix(0x1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4204, r4, 0x1, &(0x7f0000000240)={&(0x7f0000000640)=""/204, 0xcc}) sched_setattr(r4, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x800) 1m19.743647368s ago: executing program 5 (id=2209): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000953cdbed26233250"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$unix(0x1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4204, r4, 0x1, &(0x7f0000000240)={&(0x7f0000000640)=""/204, 0xcc}) sched_setattr(r4, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x800) 1m11.516549016s ago: executing program 1 (id=2344): syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) close_range(r3, r3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000280)=0x5) r4 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r6) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000480)='cpuset.effective_cpus\x00', 0x16) r10 = syz_genetlink_get_family_id$nfc(0x0, r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000240)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r11], 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000001000000060000000100000080000400", @ANYRES64, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00230000000000000000000000000b00000000000000000f000000002d7369286458f81dad1e88278d90c6c85af350858929e248f221280de985a6a63bfcf332bbf850feebaab7c95b6a96b9b9eb018e389966f2ad0e22c9e88b6e3e6a2b1c02b4196c76bb8d03048c85027c0dcb2b87a3b63c2fe2278a357c8ebf20c5e2b65216c4e976e50b322cf390df348a418e364e56e4a1d68d2bdbad2e0bd38827fa32cef851e8a8bb"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) socket(0x2a, 0x5, 0x0) 1m1.220592259s ago: executing program 5 (id=2209): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000953cdbed26233250"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$unix(0x1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4204, r4, 0x1, &(0x7f0000000240)={&(0x7f0000000640)=""/204, 0xcc}) sched_setattr(r4, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x800) 56.594602727s ago: executing program 1 (id=2344): syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) close_range(r3, r3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000280)=0x5) r4 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r6) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000480)='cpuset.effective_cpus\x00', 0x16) r10 = syz_genetlink_get_family_id$nfc(0x0, r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000240)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r11], 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000001000000060000000100000080000400", @ANYRES64, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00230000000000000000000000000b00000000000000000f000000002d7369286458f81dad1e88278d90c6c85af350858929e248f221280de985a6a63bfcf332bbf850feebaab7c95b6a96b9b9eb018e389966f2ad0e22c9e88b6e3e6a2b1c02b4196c76bb8d03048c85027c0dcb2b87a3b63c2fe2278a357c8ebf20c5e2b65216c4e976e50b322cf390df348a418e364e56e4a1d68d2bdbad2e0bd38827fa32cef851e8a8bb"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) socket(0x2a, 0x5, 0x0) 44.170538527s ago: executing program 5 (id=2209): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000953cdbed26233250"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$unix(0x1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4204, r4, 0x1, &(0x7f0000000240)={&(0x7f0000000640)=""/204, 0xcc}) sched_setattr(r4, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x800) 40.525120252s ago: executing program 1 (id=2344): syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) close_range(r3, r3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000280)=0x5) r4 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r6) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000480)='cpuset.effective_cpus\x00', 0x16) r10 = syz_genetlink_get_family_id$nfc(0x0, r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000240)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r11], 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000001000000060000000100000080000400", @ANYRES64, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00230000000000000000000000000b00000000000000000f000000002d7369286458f81dad1e88278d90c6c85af350858929e248f221280de985a6a63bfcf332bbf850feebaab7c95b6a96b9b9eb018e389966f2ad0e22c9e88b6e3e6a2b1c02b4196c76bb8d03048c85027c0dcb2b87a3b63c2fe2278a357c8ebf20c5e2b65216c4e976e50b322cf390df348a418e364e56e4a1d68d2bdbad2e0bd38827fa32cef851e8a8bb"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) socket(0x2a, 0x5, 0x0) 37.21963297s ago: executing program 1 (id=2344): syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) close_range(r3, r3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000280)=0x5) r4 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r6) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000480)='cpuset.effective_cpus\x00', 0x16) r10 = syz_genetlink_get_family_id$nfc(0x0, r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000240)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r11], 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000001000000060000000100000080000400", @ANYRES64, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00230000000000000000000000000b00000000000000000f000000002d7369286458f81dad1e88278d90c6c85af350858929e248f221280de985a6a63bfcf332bbf850feebaab7c95b6a96b9b9eb018e389966f2ad0e22c9e88b6e3e6a2b1c02b4196c76bb8d03048c85027c0dcb2b87a3b63c2fe2278a357c8ebf20c5e2b65216c4e976e50b322cf390df348a418e364e56e4a1d68d2bdbad2e0bd38827fa32cef851e8a8bb"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) socket(0x2a, 0x5, 0x0) 29.62856644s ago: executing program 5 (id=2209): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000953cdbed26233250"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$unix(0x1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4204, r4, 0x1, &(0x7f0000000240)={&(0x7f0000000640)=""/204, 0xcc}) sched_setattr(r4, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x800) 23.029271427s ago: executing program 1 (id=2344): syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) close_range(r3, r3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000280)=0x5) r4 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r6) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000480)='cpuset.effective_cpus\x00', 0x16) r10 = syz_genetlink_get_family_id$nfc(0x0, r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000240)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r11], 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000001000000060000000100000080000400", @ANYRES64, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00230000000000000000000000000b00000000000000000f000000002d7369286458f81dad1e88278d90c6c85af350858929e248f221280de985a6a63bfcf332bbf850feebaab7c95b6a96b9b9eb018e389966f2ad0e22c9e88b6e3e6a2b1c02b4196c76bb8d03048c85027c0dcb2b87a3b63c2fe2278a357c8ebf20c5e2b65216c4e976e50b322cf390df348a418e364e56e4a1d68d2bdbad2e0bd38827fa32cef851e8a8bb"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) socket(0x2a, 0x5, 0x0) 12.153413456s ago: executing program 5 (id=2209): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000953cdbed26233250"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$unix(0x1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4204, r4, 0x1, &(0x7f0000000240)={&(0x7f0000000640)=""/204, 0xcc}) sched_setattr(r4, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x800) 10.638751627s ago: executing program 9 (id=2673): bind$rxrpc(0xffffffffffffffff, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4624, @broadcast}}, 0x24) r0 = socket$rxrpc(0x21, 0x2, 0xa) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x10001, 0x20000000007ff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000200)={0x100, r2}, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000280)={0x100, r3}, 0x0) close(r2) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000340)={0x100, r4}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r1, 0x0) close(r1) mknodat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x81c0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYRES64=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x2d}, 0x94) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) 10.502837991s ago: executing program 1 (id=2344): syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) close_range(r3, r3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000280)=0x5) r4 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r6) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000480)='cpuset.effective_cpus\x00', 0x16) r10 = syz_genetlink_get_family_id$nfc(0x0, r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000240)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r11], 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000001000000060000000100000080000400", @ANYRES64, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00230000000000000000000000000b00000000000000000f000000002d7369286458f81dad1e88278d90c6c85af350858929e248f221280de985a6a63bfcf332bbf850feebaab7c95b6a96b9b9eb018e389966f2ad0e22c9e88b6e3e6a2b1c02b4196c76bb8d03048c85027c0dcb2b87a3b63c2fe2278a357c8ebf20c5e2b65216c4e976e50b322cf390df348a418e364e56e4a1d68d2bdbad2e0bd38827fa32cef851e8a8bb"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) socket(0x2a, 0x5, 0x0) 8.863793017s ago: executing program 9 (id=2675): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0xee31b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000180)) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r7, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r5}, 0x20) recvmmsg(r5, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) 7.774925895s ago: executing program 9 (id=2678): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400011000000009040000010300000009210000000122050009058103", @ANYRESDEC=0x0], 0x0) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x40400, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = socket(0x25, 0x1, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x18001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a30000000007c000000060a0104000000000000000001000000540004802000018007000100727400001400028008000240000000030800014000000003240c01800b00010072656a656374000014000280080101400000000105000200000000000c000180080001006669620008000b40000000000900010073797a300000000014000000110001"], 0x104}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x2070bd27, 0x25dfdbff, {0xa, 0x40, 0xc0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, @IFA_FLAGS={0x8, 0x8, 0x313}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c041}, 0x400c0c0) 6.765444066s ago: executing program 8 (id=2682): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140), 0x106, 0x9}}, 0x20) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe) r2 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r2) shmdt(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[], 0xfce1) fchmod(r1, 0x1) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000080)=0xfff, 0x4) setsockopt$inet_int(r4, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r5, 0x84, 0x14, &(0x7f00000001c0)="020000000980ffff", 0x8) syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x80, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x80000000, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x0, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0x20fff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) syz_usb_connect(0x0, 0x64, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002ffa9400819151300000102030109025200010000000009040000042513bf000a2401000000020102052404"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 5.544759245s ago: executing program 2 (id=2687): r0 = socket$inet6(0xa, 0x2, 0x0) setreuid(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = fsopen(&(0x7f0000000000)='fuse\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x5e}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001c001a8018000a801400090020010000000000000000000000000000140035007767310000"], 0x50}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000006180)=@newtaction={0x5340, 0x30, 0x200, 0x70bd27, 0x25dfdbfc, {}, [{0x4f0, 0x1, [@m_ct={0x124, 0x1e, 0x0, 0x0, {{0x7}, {0x78, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @empty}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_ZONE={0x6, 0x4, 0x6}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @private=0xa010102}, @TCA_CT_PARMS={0x18, 0x1, {0x0, 0x5, 0x1, 0x8, 0x4}}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @local}, @TCA_CT_PARMS={0x18, 0x1, {0x7fff, 0x8, 0x10000000, 0x972, 0x8001}}, @TCA_CT_MARK={0x8, 0x5, 0x3}, @TCA_CT_ACTION={0x6, 0x3, 0x8}]}, {0x88, 0x6, "3b0359015e10489e7921e1857839d003485e3736b15b18e3d27ed2bf46fcd47edc0a9a62937fea67e6e9eec1a284c6f61e424c0d31c1cc397fe1711d6014b774c475e6b31e2520b94c8dd9c1a520e92ad00cd294eb2db4a77369e82ccffe1d68ade1d08b369f1076a699f71cd973ec7b086887d4bf399d6b2a58aee29d9e515d29b2e59e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_csum={0x150, 0xe, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x2, 0x20000000, 0xa1}, 0x4}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffff7, 0x5, 0x5, 0x0, 0x8}, 0x2e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x98d3, 0xbaf9, 0x0, 0x4, 0x2}, 0x80}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x1, 0x7, 0x7, 0x6}, 0x67}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x40000000, 0x1200, 0x20000000, 0x3, 0xd92}, 0x68}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1ff, 0x7, 0x1, 0x9, 0x6a3de454}, 0x15}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x29, 0xfffffff7, 0x10000000, 0x4, 0x2}, 0x1f}}]}, {0x5d, 0x6, "7203200f860760dd0cd78cee2b8f8458761d7a9b6821d02c6c74a05ad90075be332c091e561fcbc41152172883818cb818dbbd270cb382091e5239802e90a7565f92a2d94d623e7ac818fb53660a8f327f64c3d4069bdd2e2e"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_gact={0xf0, 0x15, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1000, 0x2, 0xffffffffffffffff, 0x0, 0xb986}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x168b, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x80000001, 0xffffffffffffffff, 0x80000000, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x12000, 0x3, 0x5, 0x1}}]}, {0x70, 0x6, "9168e355d71ba3daba72d90606c2a98458b38317c8491823cf10d5f528df6d76dab101df123d00ee827e26e54868f845f126e3223ce10acad79ff908bb9e140f9055bb04f4c9f3fd53ee9ceb122f65860368689b71a50ea9973ccd74d092916839f8cdbe9e7735890020847a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbedit={0x88, 0xd, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff1, 0xa2f55089f44d541f}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1, 0xfffffffa, 0x0, 0x6, 0xe923}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x7}}]}, {0x2b, 0x6, "e722a9d438a3499ad88452e0f5212ce5cfc79b3382b3ab62c0bf479f7202175fe1897f43f89544"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_sample={0x100, 0x18, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x8000, 0x8, 0x0, 0x6}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20000000}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x7fffffff, 0x10000000, 0x6, 0xd}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x4e67, 0x0, 0x7, 0x4, 0x6}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x98}]}, {0x62, 0x6, "a720f99484be9b2f10a1f66c9f724e6c398862ec9883bc0ac9163b450093ddbcd5e8a8c9d50172cf65aaf89645276257bb2bb287bff91c0a4b4fcea58abc1e9002c00f7f03725d4f28ef0b61877613ca83e623210362b2d32ef5f1641ff9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}, {0x1644, 0x1, [@m_nat={0x190, 0x7, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x1, 0xffffffffffffffff, 0x1, 0x4}, @remote, @private=0xa010100, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80000001, 0x5, 0x4, 0x8001, 0x3}, @local, @multicast2, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x8, 0xffffffffffffffff, 0x2, 0x9}, @multicast1, @empty, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x401, 0x200, 0x4, 0x5107fbac, 0x80000001}, @multicast1, @local}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9e8a83e5, 0x7, 0x8, 0x8, 0x9}, @loopback, @loopback, 0xffffffff}}]}, {0x9d, 0x6, "b754c29e5813e0cd125a21b45b5077bee25ecd3a6699d37a82f2a7880f5826b7815242f1825b44ed70596dec84365353aeaeeff92649b00829481064ad477e20a46857b120c194d53e9ee20206d031d288e2afe06293316ffaf6b2d0c7e2e44a8949a78dca8acbfb4950ac0f215f248194f9d91037a7c6ca1f2f29b4af29253ac228ab57cc5a9fd892526fb2b28034f1d624b943deee5e7136"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_tunnel_key={0x1044, 0x1, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_gact={0x168, 0x1f, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x2, 0x6, 0x1, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x792, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x3, 0x1eac, 0x9}}, @TCA_GACT_PARMS={0x18, 0x2, {0xe3b, 0x1, 0x0, 0x1, 0x401}}, @TCA_GACT_PARMS={0x18, 0x2, {0xffffffcf, 0xffff, 0x30000000, 0x4f1, 0x3}}]}, {0xdc, 0x6, "27bdb9e37e4f5e1276e1e1b0d9e61aafdf49987bcce681a6708efb423a4370bba0554414132142c7bd6824493e3b64e8a4bd8719e122b64ce3ba8f0739c25514c547e5cada408c57b09cc956f8053cb4eaa55964f95b1210c422879cd51ae855b25fe3c8be756723e10a2498434b67a7917e0ff2eade2dfa92b0c1f2fc92e6c4bff414cc8fb3a90371973fd2cfbc016c97e3f25d4bcd2390022d60d9f0e27c49131e61d8eed64c8af7e41974fbe5a99ee1f5bb74d29ce9263177ba78031ca2ea35ede499686b71664fd07294811e1e5ee364eb285871b802"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0x184, 0xe, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x6, 0x6, 0x2, 0x6}, 0xf8a}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x3a7, 0x7}, 0xbff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x0, 0xfffffffffffffff8, 0xffffffff}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffd49b, 0x9, 0x8, 0x5, 0x3}, 0xff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x7, 0x1, 0x3, 0x1}, 0x9}}]}, {0xc5, 0x6, "41baedfff35e848f9230106a0f55654c433e76ab6a3790f8758475979a341476ff5e667e4ebbf402c6b4cd3402afcdf986120e76b51418792d0a7d1fde345e1f6bc614266222b460931be9b76d20fa7683eb738d5624aceba7b4e69b56aac4e3cccc45fbd08bf6b736e32bfef7b3d6ce2df01d795e3c5ec35a6b957f77f17387e8ddb1a5c120a1c8cdfb3ce5e2e901e93d923e7b6063017492bcf84f6b9825686848a391e3219e10db5a679043d04133a3dc6b3a4fb6d4b6085dee7a6fade2d975"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_simple={0x180, 0xd, 0x0, 0x0, {{0xb}, {0x98, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, 'fuse\x00'}, @TCA_DEF_DATA={0x6, 0x3, '\\\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0xd, 0x3, '^^/+:.#\\\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x2000000, 0x20b1, 0x2, 0x8, 0xa1}}, @TCA_DEF_DATA={0x6, 0x3, '$\x00'}, @TCA_DEF_DATA={0x7, 0x3, 'u]\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x8, 0xffffffffffffffff, 0x800, 0xc}}, @TCA_DEF_PARMS={0x18, 0x2, {0xb81, 0x8, 0x20000000, 0x7fff, 0x3}}, @TCA_DEF_DATA={0xf, 0x3, '/dev/iommu\x00'}]}, {0xc0, 0x6, "04b37cab7a5deeb9b2d7cf7855be0c0a2463a526027ee47d4b30c8abf0cfedea794147923eafb764960140388558e0b053291e1ab3395726844c3b35c70f32f65180151f2835f05623e245e57c0adc305e125b14a5eaa49bb470a8a1844e89d75d3f330643dc52d2a5b62ac3a4cc456ca55c8e664042a44e1fa8408a593501921b1e5d0d0f8fb52d58deb5fcd9d7709864140222696185905d72651ac86a51a430ede2f2cfb23f68c9233b5f403ee275ebaf0f57d0a6ec0fd88425d5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, {0x37f8, 0x1, [@m_simple={0x458, 0x13, 0x0, 0x0, {{0xb}, {0x374, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x5dc0, 0x2, 0xffffffffffffffff, 0x83, 0xfffffffe}}, @TCA_DEF_DATA={0x189, 0x3, '//\xf2/\x06\b///o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r6, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f00000002c0)={0x28, 0x0, r9, r6, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.67961236s ago: executing program 2 (id=2688): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x18) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x3) (async, rerun: 64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) (async, rerun: 64) utime(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)={0xf, 0x10001}) 4.604914137s ago: executing program 9 (id=2689): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x10400, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x1c9, 0x12) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') lseek(r3, 0x36, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800180, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r6, 0x4048aecb, &(0x7f0000001440)={{0x0, 0x0, 0x80, {0xdddd0000, 0x1}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf9758b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bfe98e94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b91fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029e7a9e8b86a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf7b155ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f8edd941bff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b7fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22670812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa31819caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae399aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c04799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db63dec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880bffffffffffffff7fb5cb6967fb0ea8e14efce120947092c3b601002f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6af1d8183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c75f4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b769e44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd580800000000000000d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYBLOB="90dc57", @ANYBLOB="335f2b31d43813e79329d911f9ebc2394b0953266ffd2a18a1420100eba6833be31ebe0769dc0b7fb5c7e61bdc85e1942da2dba77a3caa6efe9a9de7adb1a73d151598613ac20284792536cc7b2dc0b610a2ce5f27db2e06c8dbf8f99a8f814073ff008261466f5928820f2ccb22c45829cd"], 0x48) socket$nl_route(0x10, 0x3, 0x0) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f00000000c0)={0x1, 0x1, 0xb, 0x1f, 0x24, &(0x7f0000000500)}) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) mremap(&(0x7f00001a6000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000208000/0x2000)=nil) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) capset(&(0x7f0000000000)={0x19980330}, 0x0) r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x8a02, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0x3) close_range(r8, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="30002abd7000000200000f00000008000304", @ANYRES32=0x0, @ANYBLOB="0c00990000000000250000001c002a0010012a0301b0010524030205053c0400039dfe250301b601"], 0x44}, 0x1, 0x0, 0x0, 0x20000050}, 0x48000) 4.519326887s ago: executing program 8 (id=2690): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000065a000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000339000/0x3000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) syz_open_dev$vim2m(&(0x7f0000000300), 0x0, 0x2) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000040)={@host}) r3 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000000)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000140)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x4, 0xabc, 0x2449, 0x0, 0x0, 0x4}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000080)={{@hyper, 0x10400000}, @hyper, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r2, 0x7a5, &(0x7f0000000140)={{@host, 0x9}, 0x1}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000028c0)=""/4097, 0x1001) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x300) (fail_nth: 1) pipe2(0x0, 0x4000) 3.737672167s ago: executing program 2 (id=2691): r0 = socket$inet6(0xa, 0x80002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = msgget$private(0x0, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x2000002, 0xe, 0x0, &(0x7f00000003c0)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) msgrcv(r5, &(0x7f0000000300)={0x0, ""/182}, 0xbe, 0x1, 0x5800) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000100), 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={&(0x7f0000002b40)={0x28, 0x3, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000001}, 0x50) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x6, 0x0, 0xc0) 3.692975456s ago: executing program 8 (id=2692): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func_proto]}, {0x0, [0x0]}}, 0x0, 0x27}, 0x28) openat$sysfs(0xffffffffffffff9c, 0x0, 0x109900, 0x100) openat$ptmx(0xffffffffffffff9c, 0x0, 0x303a00, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x1d, 0x2, 0x6) bind$inet(r2, 0x0, 0x0) set_mempolicy(0x2, 0x0, 0x3) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @loopback, 0x3}}}, 0x108) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x7, 0x0, 0x60}, 0x0, 0xa8, 0xd0, 0x60030000, {0x0, 0xff000000}}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}, {{@ipv6={@remote, @mcast1, [0xffffff00, 0xff000000, 0x0, 0xffffff00], [0xff, 0xffffff00, 0xffffffff, 0xff000000], 'ip6gre0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x1d, 0x2, 0x5, 0x5}, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8fb, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0f, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) 2.79278179s ago: executing program 2 (id=2693): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x3, 0x1, 0xffffffc0, 0xffff, 0x2, "83843c556dec3a9a90800124b904cfc27929a3", 0xf57, 0x1c680}) fcntl$getownex(r2, 0x10, &(0x7f00000002c0)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2.513653029s ago: executing program 9 (id=2694): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x50d0, &(0x7f0000000000)={0x0, 0xfffffffd, 0x2, 0x6, 0x332}, &(0x7f0000000100), &(0x7f0000ff4000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) socketpair$nbd(0x1, 0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) 2.258597505s ago: executing program 8 (id=2695): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x17e7c) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000004680)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd31800180a00fc000000000000eaff000000000000000000000000000000000000aa00024001000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009078000002020000"], 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x101140) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r7, 0xc034564b, &(0x7f0000000040)={0x3, 0x31424752, 0x140, 0xb2, 0x1, @stepwise={{0x44, 0x3}, {0x10000, 0x4}, {0x1, 0x9}}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x8, 0x7, 0x4000000000000e52, 0x1, 0x400063, 0x1043, 0x200000000006, 0x0, 0x1, 0xfffffbfffffffff7, 0x2, 0x9ca6, 0x10000, 0x8000000000006, 0x900], 0x8080000, 0x42590}) ioctl$KVM_RUN(r6, 0xae80, 0x0) socket$unix(0x1, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="530200000005010400000000000079000a0010095402010002008000070000000701"], 0x268}, 0x1, 0x0, 0x0, 0x854}, 0x4004040) socket(0x40000000015, 0x5, 0x0) 1.805496395s ago: executing program 8 (id=2696): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x4c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac=@broadcast, @device_b}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x12}, 0x800) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x103400, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'team_slave_1\x00', 0x100}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'geneve1\x00', {0x2, 0x4e21, @empty}}) 1.782355687s ago: executing program 8 (id=2697): syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getpid() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0), 0x88040, 0x0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, 0xfffffffffffffffe) 1.704467477s ago: executing program 2 (id=2698): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000340)={'ip6_vti0\x00', 0x1000}) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x7ffd, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x20040080}, 0x40400d4) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x6f) r4 = syz_open_dev$usbfs(0x0, 0x76, 0x103901) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, 0x0) fsopen(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) close_range(r5, r5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 1.598355405s ago: executing program 9 (id=2699): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400011000000009040000010300000009210000000122050009058103", @ANYRESDEC=0x0], 0x0) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x40400, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = socket(0x25, 0x1, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x18001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a30000000007c000000060a0104000000000000000001000000540004802000018007000100727400001400028008000240000000030800014000000003240c01800b00010072656a656374000014000280080101400000000105000200000000000c000180080001006669620008000b40000000000900010073797a300000000014000000110001"], 0x104}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x2070bd27, 0x25dfdbff, {0xa, 0x40, 0xc0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, @IFA_FLAGS={0x8, 0x8, 0x313}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c041}, 0x400c0c0) 0s ago: executing program 2 (id=2700): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x80140, 0x0) ioctl$TIOCGISO7816(r0, 0x80285442, 0x0) write$ppp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_init(0x2, 0x8000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r4 = add_key(&(0x7f0000003300)='cifs.spnego\x00', &(0x7f0000003340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$revoke(0x3, r4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) kernel console output (not intermixed with test programs): 0 maxpacket: 8 [ 808.288757][ T43] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 238, using maximum allowed: 30 [ 808.330267][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 808.374945][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 50761, setting to 1024 [ 808.425074][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.431700][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.438599][ T43] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 238 [ 808.468493][ T30] audit: type=1400 audit(1762992970.854:721): avc: denied { sendto } for pid=15 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 808.492094][ T43] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 808.502471][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.538904][ T43] usb 5-1: config 0 descriptor?? [ 808.547350][T15196] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 808.661139][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 808.905307][ T30] audit: type=1400 audit(1762992971.334:722): avc: denied { mount } for pid=15194 comm="syz.4.2194" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 808.950344][T15196] vivid-000: disconnect [ 808.987647][T15194] vivid-000: reconnect [ 809.104126][ T43] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 809.234959][ T43] usb 5-1: USB disconnect, device number 37 [ 809.277331][ T10] usbhid 9-1:0.0: can't add hid device: -71 [ 809.366588][ T10] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 809.445653][T15207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2197'. [ 809.701938][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 810.502029][ T30] audit: type=1804 audit(1762992972.424:723): pid=15210 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.8.2198" name="/newroot/304/file0" dev="tmpfs" ino=1661 res=1 errno=0 [ 810.509603][ T10] usb 9-1: USB disconnect, device number 45 [ 810.741086][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 811.322739][T15224] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2200'. [ 811.781833][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 812.032219][ T30] audit: type=1400 audit(1762992974.464:724): avc: denied { ioctl } for pid=15233 comm="syz.4.2204" path="/dev/usbmon6" dev="devtmpfs" ino=734 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 812.764555][T15237] could not allocate digest TFM handle cryptd(blake2b-160) [ 812.821069][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 812.855657][ T1123] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.589424][ T1123] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.861843][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 814.125154][ T1123] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.308257][ T1123] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.331068][ T5812] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 814.366389][T13477] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 814.376403][T13477] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 814.390719][T15263] netlink: 'syz.9.2213': attribute type 12 has an invalid length. [ 814.399159][T13477] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 814.478237][T13477] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 814.497626][T13477] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 814.652320][ T43] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 814.848382][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 814.871328][ T43] usb 9-1: Using ep0 maxpacket: 32 [ 814.877641][ T1123] bridge_slave_1: left allmulticast mode [ 814.883704][ T5812] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 814.898874][ T43] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 814.910044][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 814.922949][ T1123] bridge_slave_1: left promiscuous mode [ 814.925951][ T5812] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 814.928695][ T1123] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.938764][ T43] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 814.964108][ T5812] usb 3-1: Manufacturer: syz [ 814.978863][ T1123] bridge_slave_0: left allmulticast mode [ 814.979626][ T5812] usb 3-1: config 0 descriptor?? [ 814.989722][ T43] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 815.001029][ T1123] bridge_slave_0: left promiscuous mode [ 815.005163][ T43] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.006760][ T1123] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.022823][ T5812] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 815.036371][ T43] usb 9-1: config 0 descriptor?? [ 815.229188][ T5812] usb 3-1: USB disconnect, device number 34 [ 815.456428][T15260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 815.476688][T15260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 815.941796][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 816.116429][ T1123] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 816.131536][ T1123] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 816.142159][ T1123] bond0 (unregistering): Released all slaves [ 816.159344][T15301] bpq0: entered promiscuous mode [ 816.582222][ T5819] Bluetooth: hci2: command tx timeout [ 816.940485][T15264] chnl_net:caif_netlink_parms(): no params data found [ 816.991117][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 817.227096][T15260] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 817.259439][ T43] usbhid 9-1:0.0: can't add hid device: -71 [ 817.296931][ T43] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 817.374134][ T43] usb 9-1: USB disconnect, device number 46 [ 817.461960][ T1123] hsr_slave_0: left promiscuous mode [ 817.494595][ T1123] hsr_slave_1: left promiscuous mode [ 817.517404][ T1123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 817.600331][ T1123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 817.626808][ T1123] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 817.652892][ T1123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 817.702006][ T1123] veth1_macvtap: left promiscuous mode [ 817.715352][ T1123] veth0_macvtap: left promiscuous mode [ 817.883685][ T43] usb 9-1: new full-speed USB device number 47 using dummy_hcd [ 817.975031][ T1123] veth1_vlan: left promiscuous mode [ 817.980378][ T1123] veth0_vlan: left promiscuous mode [ 817.988424][ T10] libceph: connect (1)[c::]:6789 error -101 [ 817.998907][T15341] ceph: No mds server is up or the cluster is laggy [ 818.018991][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 818.021989][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 818.086118][ T43] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 818.150341][ T43] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 818.234504][ T43] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 818.287522][ T43] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 818.353092][ T43] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 818.373339][ T43] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 818.411749][ T43] usb 9-1: Manufacturer: syz [ 818.453585][ T43] usb 9-1: config 0 descriptor?? [ 818.661131][ T5819] Bluetooth: hci2: command tx timeout [ 818.686456][ T30] audit: type=1400 audit(1762992981.114:725): avc: denied { checkpoint_restore } for pid=15327 comm="syz.8.2223" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 818.893365][ T43] rc_core: IR keymap rc-hauppauge not found [ 818.904271][ T43] Registered IR keymap rc-empty [ 818.922872][ T43] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 818.942880][ T43] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 818.960985][ T5812] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 818.970546][ T43] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 818.990190][ T43] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input30 [ 819.021336][ T43] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 819.046333][ T43] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 819.063995][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 819.073119][ T43] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 819.103816][ T43] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 819.128630][ T43] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 819.143489][ T5812] usb 3-1: Using ep0 maxpacket: 8 [ 819.161362][ T5812] usb 3-1: config 0 has an invalid interface number: 151 but max is 1 [ 819.169747][ T5812] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 819.188166][ T43] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 819.194907][ T5812] usb 3-1: config 0 has no interface number 1 [ 819.201239][ T5812] usb 3-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 819.213341][ T5812] usb 3-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 819.226814][ T43] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 819.233632][ T5812] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 819.246279][ T5812] usb 3-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 819.256610][ T43] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 819.263534][ T5812] usb 3-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 819.276796][ T5812] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 819.291118][ T43] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 819.299376][ T5812] usb 3-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 819.314378][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.322707][ T5812] usb 3-1: Product: syz [ 819.327014][ T43] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 819.333737][ T5812] usb 3-1: Manufacturer: syz [ 819.338510][ T5812] usb 3-1: SerialNumber: syz [ 819.346681][ T5812] usb 3-1: config 0 descriptor?? [ 819.359452][ T43] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 819.368898][ T43] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 819.369173][T15348] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 819.398696][ T5812] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 819.433444][ T5812] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 819.482922][ T5870] usb 9-1: USB disconnect, device number 47 [ 819.523677][ T5812] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 819.539821][ T1123] team0 (unregistering): Port device team_slave_1 removed [ 819.657089][ T1123] team0 (unregistering): Port device team_slave_0 removed [ 819.688775][ T10] usb 3-1: USB disconnect, device number 35 [ 820.111422][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 820.741129][ T5819] Bluetooth: hci2: command tx timeout [ 820.948821][T15264] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.960999][T15264] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.971923][T15264] bridge_slave_0: entered allmulticast mode [ 820.979443][T15264] bridge_slave_0: entered promiscuous mode [ 820.993122][T15264] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.001230][T15264] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.008430][T15264] bridge_slave_1: entered allmulticast mode [ 821.017613][T15264] bridge_slave_1: entered promiscuous mode [ 821.141063][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 821.199806][T15264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 821.225234][T15264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 821.320743][T15264] team0: Port device team_slave_0 added [ 821.337806][T15264] team0: Port device team_slave_1 added [ 821.337964][ T30] audit: type=1400 audit(1762992983.764:726): avc: denied { read } for pid=15379 comm="syz.4.2234" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 821.399589][T15383] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 821.411180][T15383] block device autoloading is deprecated and will be removed. [ 821.451004][ T30] audit: type=1400 audit(1762992983.804:727): avc: denied { open } for pid=15379 comm="syz.4.2234" path="/261/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 821.484055][T15264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 821.502890][T15264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 821.596689][T15264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 821.648540][T15264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 821.667669][T15264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 821.697300][T15264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 821.770971][ T10] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 821.865715][T15264] hsr_slave_0: entered promiscuous mode [ 821.889033][T15264] hsr_slave_1: entered promiscuous mode [ 821.932871][ T10] usb 9-1: config 0 has an invalid interface number: 106 but max is 0 [ 822.077062][ T10] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 822.107283][ T10] usb 9-1: config 0 has no interface number 0 [ 822.118424][ T10] usb 9-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 822.133496][ T10] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 822.147399][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.191784][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 822.206844][ T10] usb 9-1: config 0 descriptor?? [ 822.342859][ T10] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 822.822451][ T5819] Bluetooth: hci2: command tx timeout [ 822.987917][T15417] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2240'. [ 823.072286][T15418] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2240'. [ 823.231023][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 823.341805][T15404] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2238'. [ 823.381169][ T1119] usb 9-1: Failed to submit usb control message: -110 [ 823.392981][ T1119] usb 9-1: unable to send the bmi data to the device: -110 [ 823.444018][ T1119] usb 9-1: unable to get target info from device [ 823.450390][ T1119] usb 9-1: could not get target info (-110) [ 823.492008][ T10] usb 9-1: USB disconnect, device number 48 [ 823.503824][ T1119] usb 9-1: could not probe fw (-110) [ 824.271630][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 825.301075][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 825.991058][ T10] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 826.126982][T15457] lo speed is unknown, defaulting to 1000 [ 826.147797][T15457] lo speed is unknown, defaulting to 1000 [ 826.190075][T15457] lo speed is unknown, defaulting to 1000 [ 826.209599][T15457] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 826.223997][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 826.242413][T15264] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 826.252855][ T10] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 826.257632][T15457] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 826.274985][ T10] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 826.287214][T15264] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 826.303526][ T10] usb 5-1: Manufacturer: syz [ 826.341526][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 826.382227][T15264] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 826.388931][T15457] lo speed is unknown, defaulting to 1000 [ 826.390567][ T10] usb 5-1: config 0 descriptor?? [ 826.418400][ T10] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 826.431959][T15264] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 826.467057][T15457] lo speed is unknown, defaulting to 1000 [ 826.483692][T15457] lo speed is unknown, defaulting to 1000 [ 826.494322][T15457] lo speed is unknown, defaulting to 1000 [ 826.514596][T15457] lo speed is unknown, defaulting to 1000 [ 826.624667][T15264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 826.699308][ T5812] usb 5-1: USB disconnect, device number 38 [ 826.704324][T15264] 8021q: adding VLAN 0 to HW filter on device team0 [ 826.727690][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.734915][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 826.793303][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.800485][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 827.287938][T15482] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 827.329353][ T10] lo speed is unknown, defaulting to 1000 [ 827.985182][T15264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 828.141369][ T10] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 828.235525][T15506] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2253'. [ 828.303581][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 828.330199][ T10] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 828.341061][ T10] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 828.351601][ T10] usb 3-1: Manufacturer: syz [ 828.368693][ T10] usb 3-1: config 0 descriptor?? [ 828.387213][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 828.454541][T15511] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2254'. [ 828.587924][ T10] usb 3-1: USB disconnect, device number 36 [ 829.253791][T15264] veth0_vlan: entered promiscuous mode [ 829.301453][T15264] veth1_vlan: entered promiscuous mode [ 829.368805][T15264] veth0_macvtap: entered promiscuous mode [ 829.390637][T15264] veth1_macvtap: entered promiscuous mode [ 829.414766][T15536] netlink: 'syz.9.2256': attribute type 12 has an invalid length. [ 829.460720][T15264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 829.510349][T15264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 829.541870][T15264] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 830.289833][ T30] audit: type=1804 audit(1762992992.664:728): pid=15543 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.9.2258" name="file0" dev="tmpfs" ino=1384 res=1 errno=0 [ 830.371640][ T5870] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 830.431305][T15264] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 830.495925][T15264] wireguard: wg0: Could not create IPv4 socket [ 830.518433][T15264] wireguard: wg1: Could not create IPv4 socket [ 830.529489][T15264] wireguard: wg2: Could not create IPv4 socket [ 830.561551][ T5870] usb 3-1: Using ep0 maxpacket: 32 [ 830.580406][ T5870] usb 3-1: unable to get BOS descriptor or descriptor too short [ 830.599035][ T5870] usb 3-1: config 1 interface 0 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 32 [ 830.642608][ T5870] usb 3-1: config 1 interface 0 has no altsetting 0 [ 830.662941][ T5870] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 830.680635][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.711356][ T5870] usb 3-1: Product: syz [ 830.913573][ T5870] usb 3-1: Manufacturer: syz [ 831.024932][ T5870] usb 3-1: SerialNumber: syz [ 831.145991][T15530] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 831.200987][T13022] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 831.407394][T13022] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 831.452565][T13022] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 831.491859][T13022] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 831.499909][T13022] usb 9-1: Manufacturer: syz [ 831.553624][T13022] usb 9-1: config 0 descriptor?? [ 831.583075][T13022] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 831.774459][T13022] usb 9-1: USB disconnect, device number 49 [ 832.327819][T15586] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 832.436274][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 832.445928][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 832.456145][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 832.466409][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 832.475088][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 832.559176][ T5870] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 832.623435][T15597] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2265'. [ 832.659459][T15589] Failed to initialize the IGMP autojoin socket (err -2) [ 832.690370][ T5870] usb 3-1: USB disconnect, device number 37 [ 832.894782][ T65] bridge_slave_1: left allmulticast mode [ 832.909373][ T65] bridge_slave_1: left promiscuous mode [ 832.921265][ T43] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 832.946317][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.970560][T15610] kvm: apic: phys broadcast and lowest prio [ 833.083170][T15610] netlink: 'syz.2.2267': attribute type 1 has an invalid length. [ 833.090998][T15610] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2267'. [ 833.116380][ T65] bridge_slave_0: left allmulticast mode [ 833.123690][ T65] bridge_slave_0: left promiscuous mode [ 833.131422][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.188528][ T43] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 833.253783][ T13] Bluetooth: (null): Invalid header checksum [ 833.259827][ T13] Bluetooth: (null): Invalid header checksum [ 833.361095][ T36] Bluetooth: (null): Invalid header checksum [ 833.421316][ T43] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 833.473963][ T36] Bluetooth: (null): Invalid header checksum [ 833.481890][ T43] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 833.499382][ T43] usb 9-1: Manufacturer: syz [ 833.519111][ T43] usb 9-1: config 0 descriptor?? [ 833.550042][ T43] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 833.581188][ T36] Bluetooth: (null): Invalid header checksum [ 833.691357][ T13] Bluetooth: (null): Invalid header checksum [ 833.777472][ T10] usb 9-1: USB disconnect, device number 50 [ 834.076658][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 834.101472][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 834.112676][ T65] bond0 (unregistering): Released all slaves [ 834.367463][T15646] IPVS: Error during creation of socket; terminating [ 834.457159][T15646] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2269'. [ 834.601134][ T5819] Bluetooth: hci2: command tx timeout [ 835.234352][ T65] hsr_slave_0: left promiscuous mode [ 835.252467][ T65] hsr_slave_1: left promiscuous mode [ 835.361717][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 835.369123][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 835.425409][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 835.448357][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 835.613429][T15670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2273'. [ 835.639083][ T65] veth1_macvtap: left promiscuous mode [ 836.140401][ T65] veth0_macvtap: left promiscuous mode [ 836.146281][ T65] veth1_vlan: left promiscuous mode [ 836.153240][ T65] veth0_vlan: left promiscuous mode [ 836.381408][ T5871] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 836.588758][ T5871] usb 9-1: Using ep0 maxpacket: 32 [ 836.618916][ T5871] usb 9-1: unable to get BOS descriptor or descriptor too short [ 836.647700][ T5871] usb 9-1: config 1 interface 0 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 32 [ 836.662681][ T5819] Bluetooth: hci2: command tx timeout [ 836.712120][ T5871] usb 9-1: config 1 interface 0 has no altsetting 0 [ 836.755417][ T5871] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 836.802112][ T5871] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.840620][ T5871] usb 9-1: Product: syz [ 836.858788][ T5871] usb 9-1: Manufacturer: syz [ 836.876247][ T5871] usb 9-1: SerialNumber: syz [ 836.919716][T15673] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 837.210311][ T5871] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -71 [ 837.308999][ T5871] usb 9-1: USB disconnect, device number 51 [ 837.360090][ T65] team0 (unregistering): Port device team_slave_1 removed [ 837.423158][ T65] team0 (unregistering): Port device team_slave_0 removed [ 838.755667][ T5819] Bluetooth: hci2: command tx timeout [ 839.046475][ T30] audit: type=1400 audit(1762993001.474:729): avc: denied { create } for pid=15710 comm="syz.4.2280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 839.105341][T15714] delete_channel: no stack [ 840.054234][T15709] netlink: 'syz.8.2279': attribute type 12 has an invalid length. [ 841.175827][ T5819] Bluetooth: hci2: command tx timeout [ 841.182525][ T30] audit: type=1804 audit(1762993003.074:730): pid=15748 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.8.2286" name="/newroot/323/file0" dev="tmpfs" ino=1763 res=1 errno=0 [ 841.210844][T15733] Failed to initialize the IGMP autojoin socket (err -2) [ 841.243090][T15750] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2284'. [ 841.344981][T15589] chnl_net:caif_netlink_parms(): no params data found [ 842.587925][T15589] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.596873][T15589] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.605660][T15589] bridge_slave_0: entered allmulticast mode [ 842.620096][T15589] bridge_slave_0: entered promiscuous mode [ 842.644349][T15589] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.663038][T15589] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.681812][ T5878] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 842.695257][T15589] bridge_slave_1: entered allmulticast mode [ 842.726062][T15589] bridge_slave_1: entered promiscuous mode [ 842.859004][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 842.886643][ T5878] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 842.915468][ T5878] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 842.923791][ T5878] usb 5-1: Manufacturer: syz [ 842.936291][ T5878] usb 5-1: config 0 descriptor?? [ 842.945026][ T5878] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 843.230710][T15589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 843.364393][T15589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 843.648578][T15589] team0: Port device team_slave_0 added [ 843.696202][T15589] team0: Port device team_slave_1 added [ 843.850095][T15589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 843.864627][T15589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 843.996378][T15589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 844.022069][T15589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 844.039175][ T5878] usb 5-1: USB disconnect, device number 39 [ 844.068907][T15589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 844.133649][T15589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 844.341805][T15589] hsr_slave_0: entered promiscuous mode [ 844.375392][T15589] hsr_slave_1: entered promiscuous mode [ 844.805345][T15816] netlink: 'syz.4.2297': attribute type 12 has an invalid length. [ 845.053568][ T30] audit: type=1400 audit(1762993007.484:731): avc: denied { create } for pid=15822 comm="syz.4.2300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 845.108303][ T30] audit: type=1400 audit(1762993007.504:732): avc: denied { ioctl } for pid=15822 comm="syz.4.2300" path="socket:[50700]" dev="sockfs" ino=50700 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 845.542596][ T7528] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 845.875799][ T7528] usb 5-1: Using ep0 maxpacket: 16 [ 845.883909][ T7528] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 845.893941][ T7528] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 845.904608][ T7528] usb 5-1: config 0 has no interface number 0 [ 845.984267][ T7528] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 846.019859][ T7528] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.059842][ T7528] usb 5-1: Product: syz [ 846.080380][ T7528] usb 5-1: Manufacturer: syz [ 846.086533][ T7528] usb 5-1: SerialNumber: syz [ 846.101779][ T7528] usb 5-1: config 0 descriptor?? [ 846.588103][ T7528] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 846.704405][ T7528] uvcvideo 5-1:0.105: No valid video chain found. [ 846.876315][ T5878] usb 5-1: USB disconnect, device number 40 [ 846.909522][T15864] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2306'. [ 847.324417][T15879] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.331922][T15879] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.367339][T15879] bridge_slave_1: left allmulticast mode [ 847.374044][T15879] bridge_slave_1: left promiscuous mode [ 847.423233][T15879] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.477519][T15879] bridge_slave_0: left allmulticast mode [ 847.488484][T15879] bridge_slave_0: left promiscuous mode [ 847.513815][T15879] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.610750][T15589] netdevsim netdevsim5 netdevsim0: renamed from eth13 [ 847.621161][ T5885] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 847.637313][T15589] netdevsim netdevsim5 netdevsim1: renamed from eth14 [ 847.679853][T15589] netdevsim netdevsim5 netdevsim2: renamed from eth15 [ 847.694785][T15589] netdevsim netdevsim5 netdevsim3: renamed from eth16 [ 847.783765][ T5885] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 847.796366][ T5885] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 847.819223][ T5885] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 847.846935][ T5885] usb 9-1: Manufacturer: syz [ 847.888103][ T5885] usb 9-1: config 0 descriptor?? [ 847.906773][ T5885] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 847.936913][T15887] tmpfs: Bad value for 'huge' [ 848.289937][ T5885] usb 9-1: USB disconnect, device number 52 [ 848.370029][T15589] 8021q: adding VLAN 0 to HW filter on device team0 [ 848.663957][T15911] NILFS (nullb0): couldn't find nilfs on the device [ 848.667696][ T30] audit: type=1400 audit(1762993011.084:733): avc: denied { ioctl } for pid=15904 comm="syz.2.2314" path="socket:[51377]" dev="sockfs" ino=51377 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 849.296570][T10120] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.301054][ T30] audit: type=1804 audit(1762993011.654:734): pid=15908 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.9.2315" name="file0" dev="tmpfs" ino=1484 res=1 errno=0 [ 849.303720][T10120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 849.336241][T10120] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.343665][T10120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 849.635973][ T5871] hid (null): unknown global tag 0xd [ 849.733264][ T5871] hid-generic 8001:0000:0007.0007: unknown global tag 0xd [ 849.771408][ T5871] hid-generic 8001:0000:0007.0007: item 0 1 1 13 parsing failed [ 849.797409][ T5871] hid-generic 8001:0000:0007.0007: probe with driver hid-generic failed with error -22 [ 850.499653][ T30] audit: type=1400 audit(1762993012.834:735): avc: denied { append } for pid=15925 comm="syz.8.2320" name="video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 850.549867][T15929] NILFS (nbd4): device size too small [ 851.347180][T15589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 851.426971][T15945] netlink: 'syz.8.2324': attribute type 2 has an invalid length. [ 851.561733][ T976] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 851.751011][ T976] usb 5-1: Using ep0 maxpacket: 32 [ 851.758954][ T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 851.801887][ T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 851.833526][ T976] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 851.847766][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.864568][ T5871] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 852.572463][ T976] usb 5-1: config 0 descriptor?? [ 852.572955][ T30] audit: type=1804 audit(1762993014.944:736): pid=15961 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.9.2327" name="file0" dev="tmpfs" ino=1501 res=1 errno=0 [ 852.691390][ T5871] usb 3-1: device descriptor read/64, error -71 [ 852.729747][ T30] audit: type=1400 audit(1762993015.154:737): avc: denied { map } for pid=15964 comm="syz.8.2329" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 853.121871][ T5871] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 853.134048][ T976] usbhid 5-1:0.0: can't add hid device: -71 [ 853.160195][ T976] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 853.180730][ T976] usb 5-1: USB disconnect, device number 41 [ 853.260966][ T5871] usb 3-1: device descriptor read/64, error -71 [ 853.333127][T15589] veth0_vlan: entered promiscuous mode [ 853.371816][ T5871] usb usb3-port1: attempt power cycle [ 853.374045][T15589] veth1_vlan: entered promiscuous mode [ 853.599861][T15589] veth0_macvtap: entered promiscuous mode [ 853.646611][T15589] veth1_macvtap: entered promiscuous mode [ 853.711295][ T5871] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 853.731975][ T5871] usb 3-1: device descriptor read/8, error -71 [ 853.825167][T15980] netlink: 'syz.9.2328': attribute type 12 has an invalid length. [ 853.874066][T15589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 853.901049][ T9] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 853.992057][T15589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 854.016450][T15589] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 854.041750][ T5871] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 854.059061][T15589] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 854.078889][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 854.094835][T15589] wireguard: wg0: Could not create IPv4 socket [ 854.102481][ T5871] usb 3-1: device descriptor read/8, error -71 [ 854.109560][ T9] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 854.119473][ T9] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 854.136143][T15589] wireguard: wg1: Could not create IPv4 socket [ 854.142747][ T9] usb 9-1: Manufacturer: syz [ 854.161329][T15589] wireguard: wg2: Could not create IPv4 socket [ 854.168126][ T9] usb 9-1: config 0 descriptor?? [ 854.208005][ T9] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 854.215783][ T5871] usb usb3-port1: unable to enumerate USB device [ 854.600802][T15988] NILFS (nbd4): device size too small [ 854.748367][T15993] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2335'. [ 855.653540][ T30] audit: type=1804 audit(1762993018.034:738): pid=16002 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.9.2339" name="file0" dev="tmpfs" ino=1523 res=1 errno=0 [ 855.733071][ T24] usb 9-1: USB disconnect, device number 53 [ 856.182878][ T2942] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.334987][ T2942] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.468663][ T2942] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.674388][ T2942] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.225934][ T2942] bridge_slave_1: left allmulticast mode [ 857.256765][ T2942] bridge_slave_1: left promiscuous mode [ 857.267748][ T2942] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.275680][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 857.285803][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 857.300799][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 857.310170][ T2942] bridge_slave_0: left allmulticast mode [ 857.315937][ T2942] bridge_slave_0: left promiscuous mode [ 857.322073][ T2942] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.336360][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 857.354073][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 857.576675][ T30] audit: type=1400 audit(1762993019.994:739): avc: denied { create } for pid=16028 comm="syz.8.2347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 857.664075][ T30] audit: type=1400 audit(1762993020.024:740): avc: denied { bind } for pid=16028 comm="syz.8.2347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 857.769513][ T30] audit: type=1400 audit(1762993020.044:741): avc: denied { ioctl } for pid=16028 comm="syz.8.2347" path="socket:[51910]" dev="sockfs" ino=51910 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 857.995817][ T30] audit: type=1400 audit(1762993020.114:742): avc: denied { setopt } for pid=16028 comm="syz.8.2347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 858.188170][ T5819] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 858.199634][ T5819] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 858.207754][ T5819] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 858.218029][ T5819] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 858.226368][ T5819] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 858.236078][ T2942] bond1 (unregistering): (slave gretap1): Releasing active interface [ 858.309355][T16035] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2349'. [ 859.381852][ T5819] Bluetooth: hci2: command tx timeout [ 859.398608][ T2942] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 859.411749][ T2942] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 859.421633][ T2942] bond0 (unregistering): Released all slaves [ 859.433083][ T2942] bond1 (unregistering): Released all slaves [ 859.452913][T16032] Failed to initialize the IGMP autojoin socket (err -2) [ 859.461092][T16048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2352'. [ 859.480553][T16023] Failed to initialize the IGMP autojoin socket (err -2) [ 859.548967][ T2942] tipc: Disabling bearer [ 859.566238][ T2942] tipc: Disabling bearer [ 859.582909][ T2942] tipc: Left network mode [ 859.741127][ T10] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 859.926560][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 859.948077][ T10] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 859.963509][ T10] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 859.982544][ T10] usb 9-1: Manufacturer: syz [ 859.998180][ T10] usb 9-1: config 0 descriptor?? [ 860.017683][ T10] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 860.077836][ T2942] hsr_slave_0: left promiscuous mode [ 860.086606][ T2942] hsr_slave_1: left promiscuous mode [ 860.096016][ T2942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 860.104157][ T2942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 860.117130][ T2942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 860.141131][ T2942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 860.168171][ T2942] veth1_macvtap: left promiscuous mode [ 860.174658][ T2942] veth0_macvtap: left promiscuous mode [ 860.181635][ T2942] veth1_vlan: left promiscuous mode [ 860.188679][ T2942] veth0_vlan: left promiscuous mode [ 860.232146][ T5927] usb 9-1: USB disconnect, device number 54 [ 860.268487][ T5819] Bluetooth: hci3: command tx timeout [ 860.491031][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 860.523910][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 860.542622][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 860.564342][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 860.572306][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 860.694460][ T5870] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 860.868164][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 860.906481][ T5870] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 860.915722][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880573e4400: rx timeout, send abort [ 860.917996][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880573e4400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 860.958511][ T30] audit: type=1400 audit(1762993023.384:743): avc: denied { read } for pid=5165 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 861.000726][ T5870] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 861.010703][ T30] audit: type=1400 audit(1762993023.384:744): avc: denied { search } for pid=5165 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 861.018766][ T5870] usb 3-1: Manufacturer: syz [ 861.064167][ T30] audit: type=1400 audit(1762993023.384:745): avc: denied { search } for pid=5165 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 861.068269][ T5870] usb 3-1: config 0 descriptor?? [ 861.113179][ T30] audit: type=1400 audit(1762993023.384:746): avc: denied { add_name } for pid=5165 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 861.135068][ T30] audit: type=1400 audit(1762993023.384:747): avc: denied { create } for pid=5165 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 861.139620][ T5870] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 861.157363][ T30] audit: type=1400 audit(1762993023.384:748): avc: denied { append open } for pid=5165 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 861.189990][ T30] audit: type=1400 audit(1762993023.384:749): avc: denied { getattr } for pid=5165 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 861.281608][ T2942] team0 (unregistering): Port device team_slave_1 removed [ 861.447023][ T2942] team0 (unregistering): Port device team_slave_0 removed [ 862.331044][ T24] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 862.341468][ T5819] Bluetooth: hci3: command tx timeout [ 862.503124][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 862.511951][ T24] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 862.521212][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.529209][ T24] usb 9-1: Product: syz [ 862.533656][ T24] usb 9-1: Manufacturer: syz [ 862.538630][ T24] usb 9-1: SerialNumber: syz [ 862.548159][ T24] usb 9-1: config 0 descriptor?? [ 862.577548][ T5927] usb 3-1: USB disconnect, device number 42 [ 862.587855][T16066] Failed to initialize the IGMP autojoin socket (err -2) [ 862.673712][ T5819] Bluetooth: hci2: command tx timeout [ 862.800640][ T24] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 863.191457][T16085] fuse: Bad value for 'fd' [ 863.343876][T16091] netlink: 'syz.2.2361': attribute type 12 has an invalid length. [ 863.680614][ T10] hid-generic 0003:0003:0000.0008: unknown main item tag 0x0 [ 863.701106][ T10] hid-generic 0003:0003:0000.0008: unknown main item tag 0x0 [ 863.825309][ T10] hid-generic 0003:0003:0000.0008: unknown main item tag 0x0 [ 863.869675][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 863.879858][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 863.888155][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 863.895816][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 863.903622][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 863.922511][ T10] hid-generic 0003:0003:0000.0008: unknown main item tag 0x0 [ 863.950203][ T10] hid-generic 0003:0003:0000.0008: unknown main item tag 0x0 [ 864.001167][ T10] hid-generic 0003:0003:0000.0008: unknown main item tag 0x0 [ 864.005026][T16094] Failed to initialize the IGMP autojoin socket (err -2) [ 864.026533][ T10] hid-generic 0003:0003:0000.0008: unknown main item tag 0x0 [ 864.070953][ T10] hid-generic 0003:0003:0000.0008: unknown main item tag 0x0 [ 864.090965][ T10] hid-generic 0003:0003:0000.0008: unknown main item tag 0x0 [ 864.204824][ T10] hid-generic 0003:0003:0000.0008: unknown main item tag 0x0 [ 864.265855][ T24] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 864.442684][T16106] netlink: 168 bytes leftover after parsing attributes in process `syz.9.2362'. [ 864.490935][ T5816] Bluetooth: hci3: command tx timeout [ 864.761420][ T10] hid-generic 0003:0003:0000.0008: hidraw0: USB HID v0.00 Device [syz1] on syz1 [ 864.822383][T16107] fido_id[16107]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 864.862020][ T24] usb 9-1: USB disconnect, device number 55 [ 865.841024][ T5870] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 866.040978][ T5870] usb 9-1: Using ep0 maxpacket: 8 [ 866.077358][ T5870] usb 9-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 866.098923][ T5870] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.129162][ T5870] usb 9-1: Product: syz [ 866.147505][ T5870] usb 9-1: Manufacturer: syz [ 866.158534][ T5819] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 866.173263][ T5819] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 866.175047][ T5870] usb 9-1: SerialNumber: syz [ 866.187908][ T5819] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 866.201241][ T5819] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 866.209775][ T5819] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 866.227666][ T5870] usb 9-1: config 0 descriptor?? [ 866.521939][T16139] Failed to initialize the IGMP autojoin socket (err -2) [ 866.531370][ T5870] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 866.581793][ T5819] Bluetooth: hci3: command tx timeout [ 866.768354][T16032] netdevsim netdevsim5 netdevsim0: renamed from eth25 [ 866.820518][T16032] netdevsim netdevsim5 netdevsim1: renamed from eth26 [ 866.865087][T16032] netdevsim netdevsim5 netdevsim2: renamed from eth27 [ 866.889272][T16032] netdevsim netdevsim5 netdevsim3: renamed from eth28 [ 867.737731][ T5870] gspca_sunplus: reg_w_riv err -71 [ 867.750993][ T5870] sunplus 9-1:0.0: probe with driver sunplus failed with error -71 [ 867.816114][T16181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2371'. [ 868.590352][ T5870] usb 9-1: USB disconnect, device number 56 [ 868.880449][T16032] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 868.908880][T16032] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 869.046921][T16032] wireguard: wg0: Could not create IPv4 socket [ 869.106101][T16032] wireguard: wg1: Could not create IPv4 socket [ 869.189021][T16032] wireguard: wg2: Could not create IPv4 socket [ 869.218008][ T5819] Bluetooth: hci4: Ignoring connect complete event for invalid link type [ 869.227136][T16196] overlayfs: failed to resolve './file1': -2 [ 869.262907][ T30] audit: type=1400 audit(1762993031.664:750): avc: denied { create } for pid=16194 comm="syz.8.2374" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 869.366072][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 869.408696][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 869.417322][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 869.425955][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 869.459552][ T30] audit: type=1400 audit(1762993031.674:751): avc: denied { link } for pid=16194 comm="syz.8.2374" name="file1" dev="tmpfs" ino=1851 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 869.531350][ T30] audit: type=1400 audit(1762993031.684:752): avc: denied { unlink } for pid=8221 comm="syz-executor" name="file0" dev="tmpfs" ino=1851 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 869.588691][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 869.757611][T16198] Failed to initialize the IGMP autojoin socket (err -2) [ 869.868940][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.875786][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.311243][ T30] audit: type=1400 audit(1762993032.724:753): avc: denied { lock } for pid=16215 comm="syz.2.2379" path="socket:[54459]" dev="sockfs" ino=54459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 870.686832][ T30] audit: type=1400 audit(1762993033.114:754): avc: denied { ioctl } for pid=16215 comm="syz.2.2379" path="socket:[53452]" dev="sockfs" ino=53452 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 870.717790][T16225] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2378'. [ 871.351149][T16239] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2382'. [ 871.737152][ T5816] Bluetooth: hci2: command tx timeout [ 871.754058][T16241] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 871.754058][T16241] Ue[%#s' [ 872.982741][T16262] binder: 16254:16262 ioctl c0046209 0 returned -22 [ 873.024963][T16262] Failed to initialize the IGMP autojoin socket (err -2) [ 873.781016][ T5816] Bluetooth: hci2: command tx timeout [ 873.925905][T16277] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2387'. [ 874.229966][ T30] audit: type=1400 audit(1762993036.654:755): avc: denied { append } for pid=16285 comm="syz.8.2392" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 875.487831][ T30] audit: type=1326 audit(1762993037.904:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16310 comm="syz.2.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11cf8f6c9 code=0x7ffc0000 [ 875.647072][ T30] audit: type=1326 audit(1762993037.904:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16310 comm="syz.2.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11cf8f6c9 code=0x7ffc0000 [ 875.730218][ T30] audit: type=1326 audit(1762993037.904:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16310 comm="syz.2.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11cf8f6c9 code=0x7ffc0000 [ 875.802001][ T30] audit: type=1326 audit(1762993037.904:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16310 comm="syz.2.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11cf8f6c9 code=0x7ffc0000 [ 875.826346][ T30] audit: type=1326 audit(1762993037.914:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16310 comm="syz.2.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd11cf8f6c9 code=0x7ffc0000 [ 875.850278][ T30] audit: type=1326 audit(1762993037.914:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16310 comm="syz.2.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11cf8f6c9 code=0x7ffc0000 [ 875.881984][ T5816] Bluetooth: hci2: command tx timeout [ 875.898379][ T30] audit: type=1326 audit(1762993037.914:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16310 comm="syz.2.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11cf8f6c9 code=0x7ffc0000 [ 875.931167][ T30] audit: type=1326 audit(1762993037.914:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16310 comm="syz.2.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11cf8f6c9 code=0x7ffc0000 [ 875.959302][ T30] audit: type=1326 audit(1762993037.914:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16310 comm="syz.2.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11cf8f6c9 code=0x7ffc0000 [ 876.049983][ T30] audit: type=1326 audit(1762993037.914:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16310 comm="syz.2.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11cf8f6c9 code=0x7ffc0000 [ 877.001351][T13022] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 877.062839][ T1208] libceph: mon0 (1)[c::]:6789 connect error [ 877.114110][ T1208] libceph: mon0 (1)[b::]:6789 connect error [ 877.156474][T16333] ceph: No mds server is up or the cluster is laggy [ 877.187111][T16334] ceph: No mds server is up or the cluster is laggy [ 877.243692][T13022] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 877.282845][T13022] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.334477][T13022] usb 9-1: Product: syz [ 877.347780][T13022] usb 9-1: Manufacturer: syz [ 877.405155][T13022] usb 9-1: SerialNumber: syz [ 877.421448][T13022] usb 9-1: config 0 descriptor?? [ 877.975664][ T5816] Bluetooth: hci2: command tx timeout [ 878.206883][ T5870] libceph: mon0 (1)[c::]:6789 connect error [ 878.410615][T13022] usb 9-1: USB disconnect, device number 57 [ 878.471845][ T9925] libceph: mon0 (1)[c::]:6789 connect error [ 878.531778][T16365] netlink: 'syz.9.2401': attribute type 12 has an invalid length. [ 878.571652][T16349] udevd[16349]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 878.627927][T16354] ceph: No mds server is up or the cluster is laggy [ 878.992612][T16375] Failed to initialize the IGMP autojoin socket (err -2) [ 880.007580][ T5819] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 880.148355][ T5819] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 880.162372][ T5819] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 880.170278][ T5819] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 880.179228][ T5819] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 880.222890][T16381] Failed to initialize the IGMP autojoin socket (err -2) [ 880.293414][T16390] Failed to initialize the IGMP autojoin socket (err -2) [ 881.031794][ T5819] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 881.551452][T16198] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 881.609019][T16198] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 881.637108][T16198] wireguard: wg0: Could not create IPv4 socket [ 881.786423][T16198] wireguard: wg1: Could not create IPv4 socket [ 881.823984][T16198] wireguard: wg2: Could not create IPv4 socket [ 884.623713][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 884.634990][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 884.643358][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 884.652435][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 884.659974][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 884.748816][T16446] Failed to initialize the IGMP autojoin socket (err -2) [ 884.789877][T16447] Process accounting resumed [ 884.894403][T16457] QAT: failed to copy from user cfg_data. [ 886.188418][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 886.188437][ T30] audit: type=1804 audit(1762993048.594:833): pid=16467 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.9.2416" name="file0" dev="tmpfs" ino=1667 res=1 errno=0 [ 886.723208][T16480] binder: 16471:16480 ioctl c0046209 0 returned -22 [ 886.753929][T16480] Failed to initialize the IGMP autojoin socket (err -2) [ 886.834684][ T5816] Bluetooth: hci2: command tx timeout [ 887.673375][ T5871] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 887.687386][ T30] audit: type=1400 audit(1762993050.114:834): avc: denied { unmount } for pid=11207 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 888.078171][ T5871] usb 9-1: Using ep0 maxpacket: 16 [ 888.132511][ T5871] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 888.246606][ T5871] usb 9-1: config 0 interface 0 has no altsetting 0 [ 888.261078][ T5871] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 888.270142][ T5871] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.347306][T16504] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2419'. [ 888.744500][ T5871] usb 9-1: config 0 descriptor?? [ 888.901051][ T5816] Bluetooth: hci2: command tx timeout [ 889.367919][T16522] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2426'. [ 889.901849][ T5871] nzxt-smart2 0003:1E71:2009.0009: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.8-1/input0 [ 890.981131][ T5816] Bluetooth: hci2: command tx timeout [ 891.463756][ T5871] usb 9-1: USB disconnect, device number 58 [ 891.785514][T16446] netdevsim netdevsim5 netdevsim0: renamed from eth25 [ 891.809384][T16446] netdevsim netdevsim5 netdevsim1: renamed from eth26 [ 891.837548][T16446] netdevsim netdevsim5 netdevsim2: renamed from eth27 [ 891.856590][T16446] netdevsim netdevsim5 netdevsim3: renamed from eth28 [ 892.626430][T16589] FAULT_INJECTION: forcing a failure. [ 892.626430][T16589] name failslab, interval 1, probability 0, space 0, times 0 [ 892.639230][T16589] CPU: 1 UID: 0 PID: 16589 Comm: syz.8.2432 Not tainted syzkaller #0 PREEMPT(full) [ 892.639257][T16589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 892.639270][T16589] Call Trace: [ 892.639278][T16589] [ 892.639286][T16589] dump_stack_lvl+0x16c/0x1f0 [ 892.639323][T16589] should_fail_ex+0x512/0x640 [ 892.639347][T16589] ? __kmalloc_cache_noprof+0x5f/0x780 [ 892.639380][T16589] should_failslab+0xc2/0x120 [ 892.639405][T16589] __kmalloc_cache_noprof+0x72/0x780 [ 892.639434][T16589] ? alloc_pipe_info+0x10e/0x590 [ 892.639458][T16589] ? avc_has_perm+0x144/0x1f0 [ 892.639488][T16589] ? alloc_pipe_info+0x10e/0x590 [ 892.639510][T16589] alloc_pipe_info+0x10e/0x590 [ 892.639537][T16589] splice_direct_to_actor+0x77d/0xa30 [ 892.639561][T16589] ? __pfx_direct_splice_actor+0x10/0x10 [ 892.639582][T16589] ? inode_has_perm+0x16f/0x1d0 [ 892.639612][T16589] ? file_has_perm+0x27d/0x350 [ 892.639645][T16589] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 892.639669][T16589] ? __pfx_file_has_perm+0x10/0x10 [ 892.639704][T16589] do_splice_direct+0x174/0x240 [ 892.639727][T16589] ? __pfx_do_splice_direct+0x10/0x10 [ 892.639749][T16589] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 892.639783][T16589] ? bpf_lsm_file_permission+0x9/0x10 [ 892.639804][T16589] ? security_file_permission+0x71/0x210 [ 892.639831][T16589] ? rw_verify_area+0xcf/0x6c0 [ 892.639862][T16589] do_sendfile+0xb06/0xe50 [ 892.639898][T16589] ? __pfx_do_sendfile+0x10/0x10 [ 892.639934][T16589] ? __fget_files+0x20e/0x3c0 [ 892.639963][T16589] __x64_sys_sendfile64+0x1d8/0x220 [ 892.639986][T16589] ? ksys_write+0x1ac/0x250 [ 892.640006][T16589] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 892.640040][T16589] do_syscall_64+0xcd/0xfa0 [ 892.640063][T16589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.640085][T16589] RIP: 0033:0x7ff0d198f6c9 [ 892.640102][T16589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 892.640122][T16589] RSP: 002b:00007ff0d2841038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 892.640142][T16589] RAX: ffffffffffffffda RBX: 00007ff0d1be6180 RCX: 00007ff0d198f6c9 [ 892.640156][T16589] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000009 [ 892.640168][T16589] RBP: 00007ff0d2841090 R08: 0000000000000000 R09: 0000000000000000 [ 892.640181][T16589] R10: 000080001d00c0d1 R11: 0000000000000246 R12: 0000000000000001 [ 892.640194][T16589] R13: 00007ff0d1be6218 R14: 00007ff0d1be6180 R15: 00007ffd5f97bd28 [ 892.640225][T16589] [ 893.061031][ T5819] Bluetooth: hci2: command tx timeout [ 893.411424][T16446] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 893.872916][T16446] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 894.052870][T16446] wireguard: wg0: Could not create IPv4 socket [ 894.068615][T16446] wireguard: wg1: Could not create IPv4 socket [ 894.080705][T16446] wireguard: wg2: Could not create IPv4 socket [ 894.236092][T16606] netlink: 'syz.9.2437': attribute type 15 has an invalid length. [ 894.277801][ T5816] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 894.288440][ T5816] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 894.297698][ T5816] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 894.305703][ T5816] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 894.313230][ T5816] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 894.336879][T16608] Failed to initialize the IGMP autojoin socket (err -2) [ 895.021680][ T5816] Bluetooth: hci1: unexpected event for opcode 0x2019 [ 896.024887][T16645] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2444'. [ 896.522091][ T5816] Bluetooth: hci3: command tx timeout [ 897.221195][ T30] audit: type=1400 audit(1762993059.564:835): avc: denied { write } for pid=16657 comm="syz.2.2447" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 898.259701][T16685] binder: 16673:16685 ioctl c0046209 0 returned -22 [ 898.301354][T16685] Failed to initialize the IGMP autojoin socket (err -2) [ 898.615249][ T5816] Bluetooth: hci3: command tx timeout [ 898.706573][T16663] IPv6: NLM_F_CREATE should be specified when creating new route [ 898.871412][T15990] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 898.970955][T16608] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 899.071010][ T5816] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 899.071043][T16608] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 899.073088][T16608] wireguard: wg0: Could not create IPv4 socket [ 899.079551][ T5816] Bluetooth: hci1: Injecting HCI hardware error event [ 899.113488][ T5816] Bluetooth: hci1: hardware error 0x00 [ 899.142279][T15990] usb 3-1: Using ep0 maxpacket: 8 [ 899.149742][T16608] wireguard: wg1: Could not create IPv4 socket [ 899.158845][T16608] wireguard: wg2: Could not create IPv4 socket [ 899.161240][T15990] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 899.194167][T15990] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 899.223952][T15990] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 899.242114][T15990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.260461][T15990] usb 3-1: Product: syz [ 899.268171][T16694] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2453'. [ 899.277230][T15990] usb 3-1: Manufacturer: syz [ 899.277250][T15990] usb 3-1: SerialNumber: syz [ 899.550347][T16683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 899.559380][T16683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 899.576987][T16683] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2451'. [ 899.618063][T16683] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2451'. [ 899.650563][T15990] usb 3-1: USB disconnect, device number 43 [ 900.636682][T16717] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2459'. [ 901.221220][ T5816] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 902.833333][ T5819] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 902.850625][ T5819] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 902.859087][ T5819] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 902.867491][ T5819] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 902.875402][ T5819] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 902.887823][T16736] netlink: 'syz.9.2464': attribute type 12 has an invalid length. [ 902.938581][T16739] Failed to initialize the IGMP autojoin socket (err -2) [ 904.115864][ T30] audit: type=1400 audit(1762993066.544:836): avc: denied { read } for pid=16752 comm="syz.8.2469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 905.022150][ T5816] Bluetooth: hci2: command tx timeout [ 905.372638][ T30] audit: type=1400 audit(1762993323.793:837): avc: denied { accept } for pid=16768 comm="syz.8.2473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 905.955124][T16739] netdevsim netdevsim5 netdevsim0: renamed from eth25 [ 905.972358][T16739] netdevsim netdevsim5 netdevsim1: renamed from eth26 [ 905.989241][T16739] netdevsim netdevsim5 netdevsim2: renamed from eth27 [ 906.012621][T16739] netdevsim netdevsim5 netdevsim3: renamed from eth28 [ 906.397332][T16739] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 906.417906][T16739] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 906.437912][T16739] wireguard: wg0: Could not create IPv4 socket [ 906.446804][T16739] wireguard: wg1: Could not create IPv4 socket [ 906.467904][T16739] wireguard: wg2: Could not create IPv4 socket [ 907.610987][ T5816] Bluetooth: hci2: command tx timeout [ 907.616474][ T30] audit: type=1804 audit(1762993325.503:838): pid=16786 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.8.2475" name="/newroot/377/file0" dev="tmpfs" ino=2060 res=1 errno=0 [ 907.822577][T16790] overlayfs: failed to clone upperpath [ 907.852522][T16790] overlayfs: failed to resolve './file1': -40 [ 907.978296][T16792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2478'. [ 907.999016][T16792] binder: 16791:16792 unknown command 0 [ 908.010316][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 908.020386][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 908.030329][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 908.031205][T16792] binder: 16791:16792 ioctl c0306201 2000000004c0 returned -22 [ 908.047559][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 908.154011][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 908.204549][T16794] Failed to initialize the IGMP autojoin socket (err -2) [ 909.361437][ T5816] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 909.371423][ T5816] CPU: 1 UID: 0 PID: 5816 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 909.371453][ T5816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 909.371468][ T5816] Workqueue: hci4 hci_rx_work [ 909.371491][ T5816] Call Trace: [ 909.371499][ T5816] [ 909.371508][ T5816] dump_stack_lvl+0x16c/0x1f0 [ 909.371546][ T5816] sysfs_warn_dup+0x7f/0xa0 [ 909.371575][ T5816] sysfs_create_dir_ns+0x24b/0x2b0 [ 909.371604][ T5816] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 909.371631][ T5816] ? find_held_lock+0x2b/0x80 [ 909.371662][ T5816] ? do_raw_spin_unlock+0x172/0x230 [ 909.371690][ T5816] kobject_add_internal+0x2c4/0x9b0 [ 909.371719][ T5816] kobject_add+0x16e/0x240 [ 909.371742][ T5816] ? __pfx_kobject_add+0x10/0x10 [ 909.371768][ T5816] ? do_raw_spin_unlock+0x172/0x230 [ 909.371793][ T5816] ? kobject_put+0xab/0x5a0 [ 909.371824][ T5816] device_add+0x288/0x1aa0 [ 909.371851][ T5816] ? __pfx_dev_set_name+0x10/0x10 [ 909.371879][ T5816] ? __pfx_device_add+0x10/0x10 [ 909.371906][ T5816] ? mgmt_send_event_skb+0x2fb/0x460 [ 909.371945][ T5816] hci_conn_add_sysfs+0x17e/0x230 [ 909.371968][ T5816] le_conn_complete_evt+0x1260/0x2150 [ 909.372007][ T5816] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 909.372036][ T5816] ? hci_event_packet+0x459/0x11c0 [ 909.372075][ T5816] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 909.372108][ T5816] ? skb_pull_data+0x166/0x210 [ 909.372138][ T5816] hci_le_meta_evt+0x357/0x5e0 [ 909.372169][ T5816] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 909.372205][ T5816] hci_event_packet+0x685/0x11c0 [ 909.372235][ T5816] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 909.372270][ T5816] ? __pfx_hci_event_packet+0x10/0x10 [ 909.372304][ T5816] ? kcov_remote_start+0x3c9/0x6d0 [ 909.372331][ T5816] ? lockdep_hardirqs_on+0x7c/0x110 [ 909.372359][ T5816] hci_rx_work+0x2c5/0x16b0 [ 909.372381][ T5816] ? rcu_is_watching+0x12/0xc0 [ 909.372421][ T5816] process_one_work+0x9cf/0x1b70 [ 909.372459][ T5816] ? __pfx_process_one_work+0x10/0x10 [ 909.372494][ T5816] ? assign_work+0x1a0/0x250 [ 909.372519][ T5816] worker_thread+0x6c8/0xf10 [ 909.372556][ T5816] ? __pfx_worker_thread+0x10/0x10 [ 909.372580][ T5816] kthread+0x3c5/0x780 [ 909.372603][ T5816] ? __pfx_kthread+0x10/0x10 [ 909.372627][ T5816] ? rcu_is_watching+0x12/0xc0 [ 909.372652][ T5816] ? __pfx_kthread+0x10/0x10 [ 909.372675][ T5816] ret_from_fork+0x675/0x7d0 [ 909.372695][ T5816] ? __pfx_kthread+0x10/0x10 [ 909.372717][ T5816] ret_from_fork_asm+0x1a/0x30 [ 909.372762][ T5816] [ 909.372790][ T5816] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 909.633817][ T5816] Bluetooth: hci4: failed to register connection device [ 910.251288][T16815] vim2m vim2m.0: vidioc_s_fmt queue busy [ 910.270949][ T5816] Bluetooth: hci2: command tx timeout [ 912.298964][T16794] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 912.325344][T16794] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 912.341080][ T5816] Bluetooth: hci2: command tx timeout [ 912.351797][T16794] wireguard: wg0: Could not create IPv4 socket [ 912.360584][T16794] wireguard: wg1: Could not create IPv4 socket [ 912.369275][T16794] wireguard: wg2: Could not create IPv4 socket [ 913.208678][T16858] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2491'. [ 913.940048][T16873] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16873 comm=syz.2.2494 [ 913.954548][T16874] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2495'. [ 916.129628][T16895] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 916.480513][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 916.528387][T16902] ceph: No mds server is up or the cluster is laggy [ 916.632715][T16911] delete_channel: no stack [ 916.800919][ T1208] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 917.032918][ T1208] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 917.044215][ T1208] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 917.054309][ T1208] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 917.063957][ T1208] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.083137][ T1208] usb 3-1: config 0 descriptor?? [ 917.505916][ T30] audit: type=1400 audit(1762993335.933:839): avc: denied { listen } for pid=16915 comm="syz.8.2505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 917.972560][T16914] fuse: Bad value for 'group_id' [ 917.991831][T16914] fuse: Bad value for 'group_id' [ 918.450167][ T30] audit: type=1400 audit(1762993336.873:840): avc: denied { create } for pid=16903 comm="syz.2.2504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 918.942206][T16926] batadv_slave_1: entered promiscuous mode [ 918.949404][T16925] batadv_slave_1: left promiscuous mode [ 919.815420][T13022] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 919.874318][ T5819] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 919.883547][ T5819] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 919.895740][ T5819] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 919.909045][ T5819] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 919.918434][ T5819] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 920.035488][T16935] Failed to initialize the IGMP autojoin socket (err -2) [ 920.043038][T13022] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 920.060287][T13022] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 920.075639][T13022] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 920.081867][ T1208] usbhid 3-1:0.0: can't add hid device: -71 [ 920.084771][T13022] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.102250][T13022] usb 9-1: config 0 descriptor?? [ 920.109593][ T1208] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 920.184063][ T1208] usb 3-1: USB disconnect, device number 44 [ 920.214873][T16941] IPv6: NLM_F_CREATE should be specified when creating new route [ 920.224947][T16941] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 920.232658][T16941] IPv6: NLM_F_CREATE should be set when creating new route [ 920.333993][ T30] audit: type=1400 audit(1762993338.763:841): avc: denied { setopt } for pid=16939 comm="syz.9.2512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 920.373209][ T30] audit: type=1400 audit(1762993338.763:842): avc: denied { getopt } for pid=16939 comm="syz.9.2512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 921.327832][T16962] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 922.436655][ T5816] Bluetooth: hci2: command tx timeout [ 922.445630][ T30] audit: type=1804 audit(1762993340.873:843): pid=16965 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.9.2516" name="file0" dev="tmpfs" ino=1843 res=1 errno=0 [ 922.703077][ T5812] usb 9-1: USB disconnect, device number 59 [ 923.737749][ T30] audit: type=1804 audit(1762993342.113:844): pid=16970 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.9.2517" name="file0" dev="tmpfs" ino=1850 res=1 errno=0 [ 923.850263][T16935] netdevsim netdevsim5 netdevsim0: renamed from eth25 [ 923.915984][T16935] netdevsim netdevsim5 netdevsim1: renamed from eth26 [ 923.957432][T16935] netdevsim netdevsim5 netdevsim2: renamed from eth27 [ 924.026207][T16935] netdevsim netdevsim5 netdevsim3: renamed from eth28 [ 924.716033][ T5816] Bluetooth: hci2: command tx timeout [ 925.100396][T16991] fuse: Invalid rootmode [ 925.129430][T16991] Failed to initialize the IGMP autojoin socket (err -2) [ 925.704801][ T5819] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 925.719780][ T5819] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 925.805880][ T5819] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 925.844995][ T5819] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 925.875210][ T5819] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 926.078761][T16998] Failed to initialize the IGMP autojoin socket (err -2) [ 926.142337][T17000] nvme_fabrics: missing parameter 'transport=%s' [ 926.161227][T17000] nvme_fabrics: missing parameter 'nqn=%s' [ 927.574360][ T5816] Bluetooth: hci2: command tx timeout [ 927.575311][ T30] audit: type=1804 audit(1762993345.543:845): pid=17018 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.2526" name="/newroot/249/file0" dev="tmpfs" ino=1383 res=1 errno=0 [ 927.988380][T17025] batadv_slave_1: entered promiscuous mode [ 928.031863][T17023] batadv_slave_1: left promiscuous mode [ 928.199179][T16935] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 928.221359][ T5870] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 928.251183][ T43] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 928.271223][T16935] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 928.295343][T16935] wireguard: wg0: Could not create IPv4 socket [ 928.304825][T16935] wireguard: wg1: Could not create IPv4 socket [ 928.341554][T16935] wireguard: wg2: Could not create IPv4 socket [ 928.416348][ T5816] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 928.426544][ T5816] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 928.440285][ T5870] usb 3-1: no configurations [ 928.446700][ T5816] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 928.454740][ T5816] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 928.469974][ T5816] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 928.478367][ T5870] usb 3-1: can't read configurations, error -22 [ 928.504928][T17033] Failed to initialize the IGMP autojoin socket (err -2) [ 928.551177][ T43] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 928.569635][ T43] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 928.962033][ T43] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 928.972209][ T43] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.001069][ T5870] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 929.201762][ T5870] usb 3-1: no configurations [ 929.214654][ T5870] usb 3-1: can't read configurations, error -22 [ 929.239068][ T5870] usb usb3-port1: attempt power cycle [ 929.631295][ T5870] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 929.662123][ T5870] usb 3-1: no configurations [ 929.666838][ T5870] usb 3-1: can't read configurations, error -22 [ 929.883150][ T5870] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 929.932380][ T5870] usb 3-1: no configurations [ 929.948990][ T5870] usb 3-1: can't read configurations, error -22 [ 929.967530][ T5870] usb usb3-port1: unable to enumerate USB device [ 930.993672][ T5819] Bluetooth: hci3: command tx timeout [ 931.007757][ T30] audit: type=1804 audit(1762993349.433:846): pid=17052 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.9.2535" name="file0" dev="tmpfs" ino=1892 res=1 errno=0 [ 931.311648][T17033] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 931.311937][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.333696][T17033] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 931.349927][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.444977][T17033] wireguard: wg0: Could not create IPv4 socket [ 931.458131][T17033] wireguard: wg1: Could not create IPv4 socket [ 931.483477][T17033] wireguard: wg2: Could not create IPv4 socket [ 931.501038][ T43] usbhid 9-1:16.0: can't add hid device: -71 [ 931.509610][ T43] usbhid 9-1:16.0: probe with driver usbhid failed with error -71 [ 931.541566][ T43] usb 9-1: USB disconnect, device number 60 [ 933.165986][T17070] batadv_slave_1: entered promiscuous mode [ 933.176601][T17069] batadv_slave_1: left promiscuous mode [ 934.677083][ T5927] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 934.750988][ T10] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 934.841369][ T5927] usb 3-1: Using ep0 maxpacket: 16 [ 934.849096][ T5927] usb 3-1: unable to get BOS descriptor or descriptor too short [ 934.858459][ T5927] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 934.868809][ T5927] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 12 [ 934.997661][ T10] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 934.998605][ T5927] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 935.008202][ T10] usb 9-1: config 0 has no interfaces? [ 935.017414][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.030772][ T5927] usb 3-1: Product: 栣舖㗗칀ⱓ⋀哅질↩ᕸ鷜䮍鹠O퉉笆촱臘ဲ瘐皝澟뼮౟눹䊁ὦ얋⇗䯆䅇퇷薚ꐟ⎩醙袌Ɥ䓁̞缺鉬艬 [ 935.066657][ T5927] usb 3-1: Manufacturer: 䐊 [ 935.076777][ T5927] usb 3-1: SerialNumber: Ж [ 935.083354][ T10] usb 9-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 935.092688][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.100647][ T10] usb 9-1: Product: syz [ 935.122049][ T10] usb 9-1: Manufacturer: syz [ 935.176600][ T10] usb 9-1: SerialNumber: syz [ 935.222379][ T10] usb 9-1: config 0 descriptor?? [ 935.420907][T17100] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 935.420907][T17100] The task syz.9.2547 (17100) triggered the difference, watch for misbehavior. [ 935.442097][ T30] audit: type=1326 audit(1762993353.873:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17097 comm="syz.9.2547" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f603bd8f6c9 code=0x0 [ 935.466850][ T10] usb 9-1: USB disconnect, device number 61 [ 936.330550][T17108] netlink: 'syz.8.2549': attribute type 12 has an invalid length. [ 937.120971][ T5927] cdc_ncm 3-1:1.0: bind() failure [ 937.141936][ T5927] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 937.148744][ T5927] cdc_ncm 3-1:1.1: bind() failure [ 937.221285][ T5927] usb 3-1: USB disconnect, device number 49 [ 938.293257][T17123] batadv_slave_1: entered promiscuous mode [ 938.780363][T17116] batadv_slave_1: left promiscuous mode [ 939.205501][T17132] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 939.248599][T17132] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 939.286721][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 939.296281][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 939.304401][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 939.312312][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 939.389786][T17139] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2555'. [ 939.417253][T17139] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 939.539068][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 939.716341][T17136] Failed to initialize the IGMP autojoin socket (err -2) [ 940.342621][T17152] binder: 17145:17152 ioctl c0046209 0 returned -22 [ 940.797733][T17152] Failed to initialize the IGMP autojoin socket (err -2) [ 941.004191][T17158] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2564'. [ 941.117889][ T10] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 941.294745][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 941.323673][ T10] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 941.342633][ T10] usb 9-1: config 0 has no interface number 0 [ 941.359577][ T10] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 941.370636][ T10] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 941.382756][ T10] usb 9-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 941.391977][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.419587][ T10] usb 9-1: config 0 descriptor?? [ 941.621745][ T5816] Bluetooth: hci2: command tx timeout [ 941.773484][T17136] netdevsim netdevsim5 netdevsim0: renamed from eth25 [ 941.800105][T17136] netdevsim netdevsim5 netdevsim1: renamed from eth26 [ 941.822850][T17136] netdevsim netdevsim5 netdevsim2: renamed from eth27 [ 941.840584][T17136] netdevsim netdevsim5 netdevsim3: renamed from eth28 [ 942.053188][ T10] usbhid 9-1:0.1: can't add hid device: -71 [ 942.059202][ T10] usbhid 9-1:0.1: probe with driver usbhid failed with error -71 [ 942.086428][ T10] usb 9-1: USB disconnect, device number 62 [ 942.247985][T17136] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 942.267067][T17136] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 942.285481][T17136] wireguard: wg0: Could not create IPv4 socket [ 942.293172][T17136] wireguard: wg1: Could not create IPv4 socket [ 942.300762][T17136] wireguard: wg2: Could not create IPv4 socket [ 942.783509][T17187] batadv_slave_1: entered promiscuous mode [ 943.219755][ T5819] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 943.230507][ T5819] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 943.239304][ T5819] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 943.247506][ T5819] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 943.256828][ T5819] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 943.288725][T17189] Failed to initialize the IGMP autojoin socket (err -2) [ 943.317258][T17182] batadv_slave_1: left promiscuous mode [ 944.216963][T17204] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2574'. [ 944.240745][T17204] openvswitch: netlink: Flow key attr not present in new flow. [ 945.187148][T17208] Failed to initialize the IGMP autojoin socket (err -2) [ 945.301334][ T5816] Bluetooth: hci2: command tx timeout [ 945.454197][T17212] overlayfs: failed to clone upperpath [ 946.917540][T17189] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 946.949517][T17189] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 947.293400][ T5927] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 947.381106][ T5816] Bluetooth: hci2: command tx timeout [ 947.402949][T17189] wireguard: wg0: Could not create IPv4 socket [ 947.411536][T17189] wireguard: wg1: Could not create IPv4 socket [ 947.419970][T17189] wireguard: wg2: Could not create IPv4 socket [ 947.522723][ T5927] usb 9-1: Using ep0 maxpacket: 32 [ 947.529722][ T5927] usb 9-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 947.549966][ T5927] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.577812][ T5927] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 948.101200][ T5927] gspca_nw80x: reg_w err -110 [ 948.106101][ T5927] nw80x 9-1:3.0: probe with driver nw80x failed with error -110 [ 948.174960][T17241] 9pnet_fd: Insufficient options for proto=fd [ 948.642509][T17250] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2585'. [ 948.678162][ T30] audit: type=1400 audit(1762993367.083:848): avc: denied { setopt } for pid=17249 comm="syz.2.2585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 948.960902][ T5927] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 949.114000][ T5927] usb 3-1: Using ep0 maxpacket: 8 [ 949.126500][ T5927] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 949.138575][ T5927] usb 3-1: config 0 has no interface number 0 [ 949.145249][ T5927] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 949.156518][ T5927] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 949.168656][ T5927] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 949.180205][ T5927] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 949.193722][ T5927] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 949.203481][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.218802][ T5927] usb 3-1: config 0 descriptor?? [ 949.230538][ T5927] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 949.447564][ T5927] usb 3-1: USB disconnect, device number 50 [ 949.462218][ T5927] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 949.762890][ T5927] usb 9-1: USB disconnect, device number 63 [ 950.011913][T17255] binder: 17252:17255 ioctl c0046209 0 returned -22 [ 950.042508][T17255] Failed to initialize the IGMP autojoin socket (err -2) [ 951.348535][T17262] overlayfs: invalid origin (0000) [ 951.842494][T17279] overlayfs: failed to resolve './file1': -2 [ 952.800467][T17287] batadv_slave_1: entered promiscuous mode [ 953.371601][T17284] batadv_slave_1: left promiscuous mode [ 953.833979][T17288] block device autoloading is deprecated and will be removed. [ 955.190769][T17303] binder: 17297:17303 ioctl c0046209 0 returned -22 [ 955.221301][T17303] Failed to initialize the IGMP autojoin socket (err -2) [ 956.620201][T17315] overlayfs: failed to clone upperpath [ 956.672915][ T5819] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 956.694038][ T5819] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 956.706597][ T5819] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 956.720476][ T5819] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 956.728331][ T5819] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 956.792829][T17316] Failed to initialize the IGMP autojoin socket (err -2) [ 956.822354][T17318] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 957.030942][ T7528] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 957.233324][ T7528] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 957.262008][ T5927] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 957.290140][ T7528] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 957.310860][ T7528] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 957.330910][ T7528] usb 3-1: Manufacturer: syz [ 957.351621][ T7528] usb 3-1: config 0 descriptor?? [ 957.368029][ T7528] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 957.440927][ T5927] usb 9-1: Using ep0 maxpacket: 8 [ 957.490905][ T5927] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 957.520974][ T5927] usb 9-1: config 1 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 957.577393][ T5927] usb 9-1: config 1 interface 0 has no altsetting 0 [ 957.625241][ T5927] usb 9-1: New USB device found, idVendor=0503, idProduct=a4a8, bcdDevice= 0.40 [ 957.651404][ T5927] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.679161][ T5927] usb 9-1: Product: syz [ 957.736229][ T5927] usb 9-1: Manufacturer: syz [ 957.741381][ T5927] usb 9-1: SerialNumber: syz [ 958.022106][T17316] netdevsim netdevsim5 netdevsim0: renamed from eth25 [ 958.057821][T17316] netdevsim netdevsim5 netdevsim1: renamed from eth26 [ 958.094342][T17316] netdevsim netdevsim5 netdevsim2: renamed from eth27 [ 958.124115][T17316] netdevsim netdevsim5 netdevsim3: renamed from eth28 [ 958.631822][T13022] usb 3-1: USB disconnect, device number 51 [ 958.793607][T17345] SELinux: syz.2.2607 (17345) set checkreqprot to 1. This is no longer supported. [ 958.821147][ T5819] Bluetooth: hci2: command tx timeout [ 959.727616][T17316] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 959.789521][ T5927] usb 9-1: USB disconnect, device number 64 [ 959.951187][T17316] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 960.052762][T17316] wireguard: wg0: Could not create IPv4 socket [ 960.116277][T17316] wireguard: wg1: Could not create IPv4 socket [ 960.151468][ T5816] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 960.153281][T17316] wireguard: wg2: Could not create IPv4 socket [ 960.181004][ T5816] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 960.190935][ T5816] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 960.199995][ T5816] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 960.209362][ T5816] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 960.258242][T17354] Failed to initialize the IGMP autojoin socket (err -2) [ 960.272629][ T30] audit: type=1400 audit(1762993378.703:849): avc: denied { unmount } for pid=8221 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 960.705631][ T30] audit: type=1400 audit(1762993379.133:850): avc: denied { map } for pid=17358 comm="syz.2.2610" path="socket:[60989]" dev="sockfs" ino=60989 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 960.730460][ T30] audit: type=1400 audit(1762993379.133:851): avc: denied { accept } for pid=17358 comm="syz.2.2610" path="socket:[60989]" dev="sockfs" ino=60989 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 960.816940][T17365] autofs: Unknown parameter '0x0000000000000000' [ 962.696648][ T30] audit: type=1400 audit(1762993381.123:852): avc: denied { getopt } for pid=17377 comm="syz.2.2615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 963.336737][ T5819] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 963.346429][ T5819] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 963.354716][ T5819] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 963.426203][ T5819] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 963.433811][ T5819] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 963.464947][T17384] Failed to initialize the IGMP autojoin socket (err -2) [ 963.609335][T17378] overlayfs: statfs failed on './file0' [ 963.661117][T13022] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 963.852338][T13022] usb 9-1: Using ep0 maxpacket: 8 [ 963.869747][T13022] usb 9-1: unable to get BOS descriptor or descriptor too short [ 963.893924][T13022] usb 9-1: config 4 interface 0 has no altsetting 0 [ 963.965406][T13022] usb 9-1: string descriptor 0 read error: -22 [ 963.986767][T13022] usb 9-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 964.447567][T13022] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.489968][T13022] usb 9-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 964.612294][T13022] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 964.662593][T13022] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 964.671575][T13022] usb 9-1: media controller created [ 964.739712][T13022] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 964.765892][T17401] netlink: 'syz.9.2620': attribute type 3 has an invalid length. [ 964.791023][T17387] usb 9-1: dvb_usb_au6610: wlen=0, aborting [ 964.985269][T13022] zl10353_read_register: readreg error (reg=127, ret==0) [ 965.124677][T13022] usb 9-1: USB disconnect, device number 65 [ 965.471154][ T5816] Bluetooth: hci2: command tx timeout [ 965.608772][T17412] netlink: 'syz.9.2621': attribute type 10 has an invalid length. [ 965.628312][T17412] 8021q: adding VLAN 0 to HW filter on device team0 [ 965.647950][T17412] bond0: (slave team0): Enslaving as an active interface with an up link [ 965.726758][T17384] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 965.768922][T17384] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 965.847871][T17384] wireguard: wg0: Could not create IPv4 socket [ 965.895571][T17384] wireguard: wg1: Could not create IPv4 socket [ 965.962593][T17384] wireguard: wg2: Could not create IPv4 socket [ 968.014420][ T30] audit: type=1400 audit(1762993386.443:853): avc: denied { append } for pid=17439 comm="syz.8.2629" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 969.174518][ T30] audit: type=1400 audit(1762993387.583:854): avc: denied { ioctl } for pid=17439 comm="syz.8.2629" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 969.329312][ T30] audit: type=1326 audit(1762993387.693:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17443 comm="syz.9.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603bd8f6c9 code=0x7fc00000 [ 969.461048][ T30] audit: type=1326 audit(1762993387.873:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17443 comm="syz.9.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f603bd8f6c9 code=0x7fc00000 [ 970.513187][T17459] netlink: 'syz.9.2632': attribute type 1 has an invalid length. [ 970.540324][T17459] 8021q: adding VLAN 0 to HW filter on device bond1 [ 970.551654][T17459] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2632'. [ 970.801793][T15593] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 970.810748][T15593] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 970.822300][T15593] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 970.833312][T15593] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 970.842390][T15593] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 970.883637][T17473] Failed to initialize the IGMP autojoin socket (err -2) [ 970.910891][ T10] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 971.064353][ T10] usb 3-1: config index 0 descriptor too short (expected 156, got 72) [ 971.076461][ T10] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 971.086171][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.095248][ T10] usb 3-1: Product: syz [ 971.099411][ T10] usb 3-1: Manufacturer: syz [ 971.104684][ T10] usb 3-1: SerialNumber: syz [ 971.113976][ T10] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 971.130330][T17475] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 971.174610][T17478] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.182220][T17478] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.250940][T17349] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 971.558226][ T10] usb 3-1: USB disconnect, device number 52 [ 972.511284][T17475] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 972.518920][T17475] ath9k_htc: Failed to initialize the device [ 972.526253][ T10] usb 3-1: ath9k_htc: USB layer deinitialized [ 972.740956][ T5819] Bluetooth: hci4: command 0x0406 tx timeout [ 972.901086][ T5819] Bluetooth: hci2: command tx timeout [ 973.885704][T17475] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 974.047564][T17513] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2648'. [ 974.062772][T17475] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 974.076889][T17475] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 974.089923][T17475] usb 3-1: config 0 has no interface number 0 [ 974.099588][T17475] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 974.119830][T17475] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 974.145717][T17475] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 974.163547][T17475] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.171994][T17475] usb 3-1: Product: syz [ 974.180065][T17475] usb 3-1: Manufacturer: syz [ 974.184809][T17475] usb 3-1: SerialNumber: syz [ 974.193925][T17475] usb 3-1: config 0 descriptor?? [ 974.816130][T17507] cgroup: Unknown subsys name '' [ 974.938103][ T5819] Bluetooth: hci4: command 0x0406 tx timeout [ 975.030994][ T5816] Bluetooth: hci2: command tx timeout [ 975.159113][ T30] audit: type=1400 audit(1762993393.583:857): avc: denied { unmount } for pid=11207 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 975.182572][T17349] usb 3-1: USB disconnect, device number 53 [ 975.426225][T17473] netdevsim netdevsim5 netdevsim0: renamed from eth25 [ 975.437323][T17473] netdevsim netdevsim5 netdevsim1: renamed from eth26 [ 975.448565][T17473] netdevsim netdevsim5 netdevsim2: renamed from eth27 [ 975.459954][T17473] netdevsim netdevsim5 netdevsim3: renamed from eth28 [ 975.762916][T17473] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 975.784141][T17473] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 975.801930][T17473] wireguard: wg0: Could not create IPv4 socket [ 975.809581][T17473] wireguard: wg1: Could not create IPv4 socket [ 975.817499][T17473] wireguard: wg2: Could not create IPv4 socket [ 976.524946][T17531] netlink: 80 bytes leftover after parsing attributes in process `syz.8.2651'. [ 976.693946][ T5819] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 976.705367][ T5819] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 976.713884][ T5819] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 976.724405][ T5819] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 976.731980][ T5819] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 976.753813][T17536] Failed to initialize the IGMP autojoin socket (err -2) [ 976.760927][ T5927] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 976.914894][ T5927] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 976.926903][ T5927] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 976.940732][ T5927] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 976.956552][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.245092][T17547] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2653'. [ 978.472327][T17536] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 978.497213][T17536] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 978.534131][T17536] wireguard: wg0: Could not create IPv4 socket [ 978.552897][T17536] wireguard: wg1: Could not create IPv4 socket [ 978.580019][T17536] wireguard: wg2: Could not create IPv4 socket [ 978.844433][T17560] netlink: 'syz.8.2656': attribute type 12 has an invalid length. [ 979.480982][ T7528] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 979.716361][T17566] Failed to initialize the IGMP autojoin socket (err -2) [ 980.163735][ T7528] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 980.181438][ T7528] usb 9-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 980.191128][ T7528] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.199187][ T7528] usb 9-1: Product: syz [ 980.204439][ T7528] usb 9-1: Manufacturer: syz [ 980.209096][ T7528] usb 9-1: SerialNumber: syz [ 980.225835][ T7528] usb 9-1: config 0 descriptor?? [ 980.387503][ T5927] usbhid 3-1:16.0: can't add hid device: -71 [ 980.399521][ T5927] usbhid 3-1:16.0: probe with driver usbhid failed with error -71 [ 980.424010][ T5927] usb 3-1: USB disconnect, device number 54 [ 980.616304][ T7528] usb 9-1: USB disconnect, device number 67 [ 981.287932][ T5927] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 981.571262][ T5927] usb 3-1: Using ep0 maxpacket: 16 [ 981.577788][ T5927] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 982.026635][ T5927] usb 3-1: config 1 has no interface number 1 [ 982.032955][ T5927] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 982.047383][ T5927] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 982.060297][ T5927] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 982.069660][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.077947][ T5927] usb 3-1: Product: syz [ 982.082272][ T5927] usb 3-1: Manufacturer: syz [ 982.086929][ T5927] usb 3-1: SerialNumber: syz [ 984.184318][ T5927] usb 3-1: 2:1 : no UAC_FORMAT_TYPE desc [ 984.212709][ T5927] usb 3-1: USB disconnect, device number 55 [ 984.243514][T16331] udevd[16331]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 984.610908][ T5927] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 984.710982][ T10] usb 9-1: new full-speed USB device number 68 using dummy_hcd [ 984.786513][ T5927] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 984.798105][ T5927] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 984.809277][ T5927] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 984.818435][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.862201][ T10] usb 9-1: config 0 has an invalid descriptor of length 198, skipping remainder of the config [ 984.872899][ T10] usb 9-1: config 0 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 984.886197][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 984.892891][ T10] usb 9-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 984.902136][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.912168][ T10] usb 9-1: config 0 descriptor?? [ 984.923271][ T10] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 985.760736][T17349] usb 9-1: USB disconnect, device number 68 [ 987.370951][ T10] usb 9-1: new full-speed USB device number 69 using dummy_hcd [ 987.395555][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 987.415337][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 987.423409][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 987.460959][ T5927] usbhid 3-1:16.0: can't add hid device: -71 [ 987.470404][ T5927] usbhid 3-1:16.0: probe with driver usbhid failed with error -71 [ 987.489354][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 987.496030][ T5927] usb 3-1: USB disconnect, device number 56 [ 987.504318][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 987.532164][T17622] Failed to initialize the IGMP autojoin socket (err -2) [ 987.601288][ T10] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 987.610423][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.619328][ T10] usb 9-1: Product: syz [ 987.624629][ T10] usb 9-1: Manufacturer: syz [ 987.629255][ T10] usb 9-1: SerialNumber: syz [ 987.641759][ T10] usb 9-1: config 0 descriptor?? [ 987.855158][ T10] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 988.063900][T17622] netdevsim netdevsim5 netdevsim0: renamed from eth25 [ 988.075405][T17622] netdevsim netdevsim5 netdevsim1: renamed from eth26 [ 988.087332][T17622] netdevsim netdevsim5 netdevsim2: renamed from eth27 [ 988.098591][T17622] netdevsim netdevsim5 netdevsim3: renamed from eth28 [ 988.466350][T17622] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 988.485535][T17622] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 988.504020][T17622] wireguard: wg0: Could not create IPv4 socket [ 988.512699][T17622] wireguard: wg1: Could not create IPv4 socket [ 988.520655][T17622] wireguard: wg2: Could not create IPv4 socket [ 989.134757][ T5819] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 989.145246][ T5819] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 989.153738][ T5819] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 989.162165][ T5819] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 989.169837][ T5819] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 989.269442][T17643] Failed to initialize the IGMP autojoin socket (err -2) [ 990.135933][T17654] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2679'. [ 990.207319][ T10] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 990.318993][ T10] usb 9-1: USB disconnect, device number 69 [ 991.305663][ T5816] Bluetooth: hci2: command tx timeout [ 991.511018][T16005] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 991.659423][T17643] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 991.702059][T17643] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 991.725127][T17643] wireguard: wg0: Could not create IPv4 socket [ 991.737208][T17643] wireguard: wg1: Could not create IPv4 socket [ 991.747327][T17643] wireguard: wg2: Could not create IPv4 socket [ 991.833301][T16005] usb 9-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 991.855452][T16005] usb 9-1: config 0 has an invalid descriptor of length 109, skipping remainder of the config [ 991.895386][T16005] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 991.925074][T16005] usb 9-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 991.935917][T16005] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.948942][T16005] usb 9-1: Product: syz [ 991.953435][T16005] usb 9-1: Manufacturer: syz [ 991.958092][T16005] usb 9-1: SerialNumber: syz [ 991.970045][T16005] usb 9-1: config 0 descriptor?? [ 991.977624][T16005] usb-storage 9-1:0.0: USB Mass Storage device detected [ 991.989624][T16005] usb-storage 9-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 992.249859][ T5870] usb 9-1: USB disconnect, device number 70 [ 992.362862][T17690] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2687'. [ 992.389626][T17690] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 992.747763][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.754442][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.053459][T17692] overlayfs: workdir and upperdir must be separate subtrees [ 993.079426][T17692] overlayfs: workdir and upperdir must be separate subtrees [ 993.089587][T17692] overlayfs: workdir and upperdir must be separate subtrees [ 993.105038][T17692] overlayfs: workdir and upperdir must be separate subtrees [ 993.114884][T17692] overlayfs: workdir and upperdir must be separate subtrees [ 993.123554][T17692] overlayfs: workdir and upperdir must be separate subtrees [ 993.132639][T17692] overlayfs: workdir and upperdir must be separate subtrees [ 993.153652][T17692] overlayfs: workdir and upperdir must be separate subtrees [ 993.162662][T17692] overlayfs: workdir and upperdir must be separate subtrees [ 993.173400][T17692] overlayfs: workdir and upperdir must be separate subtrees [ 993.182495][T17692] overlayfs: workdir and upperdir must be separate subtrees [ 993.190555][T17692] overlayfs: workdir and upperdir must be separate subtrees [ 993.202634][T17692] overlayfs: workdir and upperdir must be separate subtrees [ 993.214822][T17692] overlayfs: workdir and upperdir must be separate subtrees [ 993.226924][T17692] overlayfs: workdir and upperdir must be separate subtrees [ 993.296937][T17692] overlayfs: workdir and upperdir must be separate subtrees [ 993.311554][T17692] overlayfs: workdir and upperdir must be separate subtrees [ 993.324442][T17701] Failed to get privilege flags for destination (handle=0x2:0x9) [ 993.333765][T17701] FAULT_INJECTION: forcing a failure. [ 993.333765][T17701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 993.350110][T17701] CPU: 1 UID: 0 PID: 17701 Comm: syz.8.2690 Not tainted syzkaller #0 PREEMPT(full) [ 993.350135][T17701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 993.350146][T17701] Call Trace: [ 993.350153][T17701] [ 993.350162][T17701] dump_stack_lvl+0x16c/0x1f0 [ 993.350199][T17701] should_fail_ex+0x512/0x640 [ 993.350228][T17701] _copy_from_user+0x2e/0xd0 [ 993.350255][T17701] copy_msghdr_from_user+0x98/0x160 [ 993.350283][T17701] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 993.350314][T17701] ? __schedule+0x11a3/0x5de0 [ 993.350341][T17701] ? __pfx__kstrtoull+0x10/0x10 [ 993.350376][T17701] ___sys_sendmsg+0xfe/0x1d0 [ 993.350405][T17701] ? __pfx____sys_sendmsg+0x10/0x10 [ 993.350445][T17701] ? find_held_lock+0x2b/0x80 [ 993.350495][T17701] __sys_sendmmsg+0x200/0x420 [ 993.350525][T17701] ? __pfx___sys_sendmmsg+0x10/0x10 [ 993.350562][T17701] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 993.350595][T17701] ? fput+0x9b/0xd0 [ 993.350618][T17701] ? ksys_write+0x1ac/0x250 [ 993.350634][T17701] ? __pfx_ksys_write+0x10/0x10 [ 993.350658][T17701] __x64_sys_sendmmsg+0x9c/0x100 [ 993.350685][T17701] ? lockdep_hardirqs_on+0x7c/0x110 [ 993.350704][T17701] do_syscall_64+0xcd/0xfa0 [ 993.350727][T17701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.350748][T17701] RIP: 0033:0x7ff0d198f6c9 [ 993.350765][T17701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 993.350784][T17701] RSP: 002b:00007ff0d2841038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 993.350806][T17701] RAX: ffffffffffffffda RBX: 00007ff0d1be6180 RCX: 00007ff0d198f6c9 [ 993.350818][T17701] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 0000000000000007 [ 993.350830][T17701] RBP: 00007ff0d2841090 R08: 0000000000000000 R09: 0000000000000000 [ 993.350840][T17701] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000001 [ 993.350851][T17701] R13: 00007ff0d1be6218 R14: 00007ff0d1be6180 R15: 00007ffd5f97bd28 [ 993.350876][T17701] [ 993.563843][T17692] overlayfs: workdir and upperdir must be separate subtrees [ 993.572228][T17692] overlayfs: workdir and upperdir must be separate subtrees [ 993.580285][T17692] overlayfs: workdir and upperdir must be separate subtrees [ 993.588443][T17692] overlayfs: workdir and upperdir must be separate subtrees [ 993.596454][T17692] overlayfs: workdir and upperdir must be separate subtrees [ 993.605005][T17692] overlayfs: workdir and upperdir must be separate subtrees [ 993.613051][T17692] overlayfs: workdir and upperdir must be separate subtrees [ 993.623230][T17692] overlayfs: workdir and upperdir must be separate subtrees [ 993.632339][T17692] overlayfs: workdir and upperdir must be separate subtrees [ 993.640220][T17692] overlayfs: workdir and upperdir must be separate subtrees [ 993.650982][T17692] overlayfs: workdir and upperdir must be separate subtrees [ 993.661982][T17692] overlayfs: workdir and upperdir must be separate subtrees [ 993.672132][T17692] overlayfs: workdir and upperdir must be separate subtrees [ 993.688401][T17692] overlayfs: workdir and upperdir must be separate subtrees [ 993.701117][T17692] overlayfs: workdir and upperdir must be separate subtrees [ 993.711642][T17692] overlayfs: workdir and upperdir must be separate subtrees [ 993.731784][T17692] overlayfs: workdir and upperdir must be separate subtrees [ 993.739801][T17692] overlayfs: workdir and upperdir must be separate subtrees [ 993.748206][T17692] overlayfs: workdir and upperdir must be separate subtrees [ 993.756316][T17692] overlayfs: workdir and upperdir must be separate subtrees [ 993.787958][T17692] overlayfs: workdir and upperdir must be separate subtrees [ 993.861975][T17692] overlayfs: workdir and upperdir must be separate subtrees [ 994.953628][ T30] audit: type=1326 audit(1762993413.383:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17707 comm="syz.8.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d198f6c9 code=0x7ffc0000 [ 995.161397][ T30] audit: type=1326 audit(1762993413.383:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17707 comm="syz.8.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d198f6c9 code=0x7ffc0000 [ 995.205175][ T30] audit: type=1326 audit(1762993413.383:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17707 comm="syz.8.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff0d198f6c9 code=0x7ffc0000 [ 995.247700][ T30] audit: type=1326 audit(1762993413.383:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17707 comm="syz.8.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d198f6c9 code=0x7ffc0000 [ 995.272216][ T30] audit: type=1326 audit(1762993413.383:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17707 comm="syz.8.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff0d198f6c9 code=0x7ffc0000 [ 995.297308][ T30] audit: type=1326 audit(1762993413.383:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17707 comm="syz.8.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d198f6c9 code=0x7ffc0000 [ 995.322832][ T30] audit: type=1326 audit(1762993413.383:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17707 comm="syz.8.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff0d198f6c9 code=0x7ffc0000 [ 995.346590][ T30] audit: type=1326 audit(1762993413.383:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17707 comm="syz.8.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d198f6c9 code=0x7ffc0000 [ 995.370399][ T30] audit: type=1326 audit(1762993413.383:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17707 comm="syz.8.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d198f6c9 code=0x7ffc0000 [ 996.168953][T17738] random: crng reseeded on system resumption [ 997.860851][ C0] ------------[ cut here ]------------ [ 997.866636][ C0] ODEBUG: free active (active state 0) object: ffff888032a53890 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 997.881083][ C0] WARNING: CPU: 0 PID: 17749 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 997.890704][ C0] Modules linked in: [ 997.894922][ C0] CPU: 0 UID: 0 PID: 17749 Comm: syz.2.2700 Not tainted syzkaller #0 PREEMPT(full) [ 997.904363][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 997.914520][ C0] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 997.920379][ C0] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 20 81 f0 8b 4c 89 e6 48 c7 c7 a0 75 f0 8b e8 5f b4 ce fc 90 <0f> 0b 90 90 58 83 05 76 d7 d5 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 997.940090][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010282 [ 997.946316][ C0] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817b1cd8 [ 997.954392][ C0] RDX: ffff888027f28000 RSI: ffffffff817b1ce5 RDI: 0000000000000001 [ 997.962425][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 997.970406][ C0] R10: 0000000000000000 R11: fffffffffffceaf0 R12: ffffffff8bf07c40 [ 997.978448][ C0] R13: ffffffff8b9021a0 R14: ffffffff8a4d9dc0 R15: ffffc90000007b18 [ 997.986518][ C0] FS: 00007fd11dece6c0(0000) GS:ffff888124a08000(0000) knlGS:0000000000000000 [ 997.995522][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 998.002169][ C0] CR2: 00007fd11deccfb8 CR3: 000000007b54a000 CR4: 00000000003526f0 [ 998.010162][ C0] Call Trace: [ 998.013480][ C0] [ 998.016343][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 998.022040][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 998.027906][ C0] debug_check_no_obj_freed+0x4b7/0x600 [ 998.033514][ C0] ? try_to_wake_up+0xa5d/0x1870 [ 998.038501][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 998.044642][ C0] kfree+0x291/0x6d0 [ 998.048565][ C0] ? rose_timer_expiry+0x53f/0x630 [ 998.053745][ C0] ? rose_timer_expiry+0x53f/0x630 [ 998.058888][ C0] rose_timer_expiry+0x53f/0x630 [ 998.063904][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 998.069376][ C0] call_timer_fn+0x19a/0x620 [ 998.074047][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 998.079208][ C0] ? mark_held_locks+0x49/0x80 [ 998.084050][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 998.089549][ C0] __run_timers+0x6ef/0x960 [ 998.094161][ C0] ? __pfx___run_timers+0x10/0x10 [ 998.099223][ C0] run_timer_base+0x114/0x190 [ 998.103958][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 998.109175][ C0] run_timer_softirq+0x1a/0x40 [ 998.113993][ C0] handle_softirqs+0x219/0x8e0 [ 998.118804][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 998.124178][ C0] __irq_exit_rcu+0x109/0x170 [ 998.128880][ C0] irq_exit_rcu+0x9/0x30 [ 998.133187][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 998.138854][ C0] [ 998.141823][ C0] [ 998.144775][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 998.150780][ C0] RIP: 0010:__schedule+0x1198/0x5de0 [ 998.156157][ C0] Code: fa 48 c1 ea 03 80 3c 02 00 0f 85 80 43 00 00 49 89 5e 10 48 8b bd 10 ff ff ff 48 89 de e8 20 08 ca f5 48 89 c7 e8 28 9b 28 f6 <8b> bd 08 ff ff ff e8 7d 58 28 f6 48 8b b5 90 fe ff ff 48 b8 00 00 [ 998.175836][ C0] RSP: 0018:ffffc900032f7250 EFLAGS: 00000202 [ 998.182012][ C0] RAX: 0000000000001879 RBX: ffff888027f28000 RCX: 0000000000000006 [ 998.190020][ C0] RDX: 0000000000000000 RSI: ffffffff8da2b882 RDI: ffffffff8bf07040 [ 998.198068][ C0] RBP: ffffc900032f7408 R08: 0000000000000001 R09: 0000000000000001 [ 998.206131][ C0] R10: ffffffff90820dd7 R11: 0000000000000001 R12: 0000000000000000 [ 998.214183][ C0] R13: 0000000000000000 R14: ffff8880b843a380 R15: ffff888027f28000 [ 998.222270][ C0] ? __pfx___schedule+0x10/0x10 [ 998.227170][ C0] ? __pfx___schedule+0x10/0x10 [ 998.232115][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 998.237384][ C0] preempt_schedule_irq+0x51/0x90 [ 998.242483][ C0] irqentry_exit+0x36/0x90 [ 998.246915][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 998.252958][ C0] RIP: 0010:__asan_memcpy+0x6/0x60 [ 998.258095][ C0] Code: 5c e9 3e 23 3b 09 5b 31 c0 5d 41 5c c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 54 <49> 89 fc 55 48 89 f5 53 48 89 d3 48 8b 4c 24 18 31 d2 48 89 de 48 [ 998.277785][ C0] RSP: 0018:ffffc900032f74e8 EFLAGS: 00000246 [ 998.283934][ C0] RAX: ffff888080c3a224 RBX: 0000000000000000 RCX: 0000000000000000 [ 998.291985][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888080c3a228 [ 998.299972][ C0] RBP: 0000000000000004 R08: 0000000000000004 R09: 0000000000000000 [ 998.308013][ C0] R10: ffff888080c3a228 R11: 0000000000000000 R12: 0000000000000000 [ 998.316038][ C0] R13: 0000000000000c9c R14: 0000000000000019 R15: 0000000000000000 [ 998.324106][ C0] nla_put+0xfc/0x140 [ 998.328122][ C0] ctrl_fill_info+0x66d/0xd50 [ 998.332886][ C0] ? __pfx_ctrl_fill_info+0x10/0x10 [ 998.338106][ C0] ? sk_setsockopt+0x3305/0x3ac0 [ 998.343126][ C0] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 998.348534][ C0] ? __pfx_nl80211_set_reg+0x10/0x10 [ 998.353887][ C0] ? __pfx_nl80211_post_doit+0x10/0x10 [ 998.359398][ C0] ? idr_get_next+0xec/0x150 [ 998.364056][ C0] ? __pfx_idr_get_next+0x10/0x10 [ 998.369120][ C0] ctrl_build_family_msg+0x5a/0xa0 [ 998.374317][ C0] ctrl_getfamily+0x354/0x540 [ 998.379034][ C0] ? __pfx_ctrl_getfamily+0x10/0x10 [ 998.384325][ C0] genl_family_rcv_msg_doit+0x209/0x2f0 [ 998.389898][ C0] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 998.396022][ C0] ? genl_get_cmd+0x194/0x580 [ 998.400750][ C0] genl_rcv_msg+0x55c/0x800 [ 998.405316][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 998.410362][ C0] ? __pfx_ctrl_getfamily+0x10/0x10 [ 998.415628][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 998.420677][ C0] netlink_rcv_skb+0x158/0x420 [ 998.425506][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 998.430552][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 998.435942][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 998.441027][ C0] genl_rcv+0x28/0x40 [ 998.445025][ C0] netlink_unicast+0x5aa/0x870 [ 998.449817][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 998.455206][ C0] netlink_sendmsg+0x8c8/0xdd0 [ 998.460009][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 998.465371][ C0] __sys_sendto+0x4a3/0x520 [ 998.469898][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 998.475070][ C0] __x64_sys_sendto+0xe0/0x1c0 [ 998.479862][ C0] ? do_syscall_64+0x91/0xfa0 [ 998.484597][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 998.489810][ C0] do_syscall_64+0xcd/0xfa0 [ 998.494378][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.500312][ C0] RIP: 0033:0x7fd11cf9155c [ 998.504795][ C0] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 998.524489][ C0] RSP: 002b:00007fd11deccec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 998.532998][ C0] RAX: ffffffffffffffda RBX: 00007fd11deccfc0 RCX: 00007fd11cf9155c [ 998.541030][ C0] RDX: 0000000000000020 RSI: 00007fd11decd010 RDI: 000000000000000c [ 998.549038][ C0] RBP: 0000000000000000 R08: 00007fd11deccf14 R09: 000000000000000c [ 998.557059][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000c [ 998.565075][ C0] R13: 00007fd11deccf68 R14: 00007fd11decd010 R15: 0000000000000000 [ 998.573147][ C0] [ 998.576201][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 998.583467][ C0] CPU: 0 UID: 0 PID: 17749 Comm: syz.2.2700 Not tainted syzkaller #0 PREEMPT(full) [ 998.592806][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 998.602838][ C0] Call Trace: [ 998.606097][ C0] [ 998.608913][ C0] dump_stack_lvl+0x3d/0x1f0 [ 998.613488][ C0] vpanic+0x640/0x6f0 [ 998.617448][ C0] ? debug_print_object+0x1a2/0x2b0 [ 998.622624][ C0] panic+0xca/0xd0 [ 998.626323][ C0] ? __pfx_panic+0x10/0x10 [ 998.630720][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 998.635807][ C0] check_panic_on_warn+0xab/0xb0 [ 998.640746][ C0] __warn+0xf6/0x3c0 [ 998.644613][ C0] ? debug_print_object+0x1a2/0x2b0 [ 998.649791][ C0] report_bug+0x3c3/0x580 [ 998.654103][ C0] ? debug_print_object+0x1a2/0x2b0 [ 998.659277][ C0] handle_bug+0x184/0x210 [ 998.663580][ C0] exc_invalid_op+0x17/0x50 [ 998.668056][ C0] asm_exc_invalid_op+0x1a/0x20 [ 998.672880][ C0] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 998.678667][ C0] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 20 81 f0 8b 4c 89 e6 48 c7 c7 a0 75 f0 8b e8 5f b4 ce fc 90 <0f> 0b 90 90 58 83 05 76 d7 d5 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 998.698254][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010282 [ 998.704299][ C0] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817b1cd8 [ 998.712241][ C0] RDX: ffff888027f28000 RSI: ffffffff817b1ce5 RDI: 0000000000000001 [ 998.720183][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 998.728125][ C0] R10: 0000000000000000 R11: fffffffffffceaf0 R12: ffffffff8bf07c40 [ 998.736071][ C0] R13: ffffffff8b9021a0 R14: ffffffff8a4d9dc0 R15: ffffc90000007b18 [ 998.744022][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 998.749638][ C0] ? __warn_printk+0x198/0x350 [ 998.754381][ C0] ? __warn_printk+0x1a5/0x350 [ 998.759125][ C0] ? debug_print_object+0x1a1/0x2b0 [ 998.764312][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 998.769936][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 998.775740][ C0] debug_check_no_obj_freed+0x4b7/0x600 [ 998.781286][ C0] ? try_to_wake_up+0xa5d/0x1870 [ 998.786241][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 998.792320][ C0] kfree+0x291/0x6d0 [ 998.796203][ C0] ? rose_timer_expiry+0x53f/0x630 [ 998.801299][ C0] ? rose_timer_expiry+0x53f/0x630 [ 998.806437][ C0] rose_timer_expiry+0x53f/0x630 [ 998.811357][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 998.816801][ C0] call_timer_fn+0x19a/0x620 [ 998.821367][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 998.826454][ C0] ? mark_held_locks+0x49/0x80 [ 998.831202][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 998.836666][ C0] __run_timers+0x6ef/0x960 [ 998.841155][ C0] ? __pfx___run_timers+0x10/0x10 [ 998.846162][ C0] run_timer_base+0x114/0x190 [ 998.850815][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 998.856000][ C0] run_timer_softirq+0x1a/0x40 [ 998.860734][ C0] handle_softirqs+0x219/0x8e0 [ 998.865476][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 998.870741][ C0] __irq_exit_rcu+0x109/0x170 [ 998.875393][ C0] irq_exit_rcu+0x9/0x30 [ 998.879612][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 998.885228][ C0] [ 998.888136][ C0] [ 998.891044][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 998.897002][ C0] RIP: 0010:__schedule+0x1198/0x5de0 [ 998.902268][ C0] Code: fa 48 c1 ea 03 80 3c 02 00 0f 85 80 43 00 00 49 89 5e 10 48 8b bd 10 ff ff ff 48 89 de e8 20 08 ca f5 48 89 c7 e8 28 9b 28 f6 <8b> bd 08 ff ff ff e8 7d 58 28 f6 48 8b b5 90 fe ff ff 48 b8 00 00 [ 998.921846][ C0] RSP: 0018:ffffc900032f7250 EFLAGS: 00000202 [ 998.927887][ C0] RAX: 0000000000001879 RBX: ffff888027f28000 RCX: 0000000000000006 [ 998.935832][ C0] RDX: 0000000000000000 RSI: ffffffff8da2b882 RDI: ffffffff8bf07040 [ 998.943778][ C0] RBP: ffffc900032f7408 R08: 0000000000000001 R09: 0000000000000001 [ 998.951722][ C0] R10: ffffffff90820dd7 R11: 0000000000000001 R12: 0000000000000000 [ 998.959664][ C0] R13: 0000000000000000 R14: ffff8880b843a380 R15: ffff888027f28000 [ 998.967617][ C0] ? __pfx___schedule+0x10/0x10 [ 998.972458][ C0] ? __pfx___schedule+0x10/0x10 [ 998.977288][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 998.982468][ C0] preempt_schedule_irq+0x51/0x90 [ 998.987478][ C0] irqentry_exit+0x36/0x90 [ 998.991866][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 998.997819][ C0] RIP: 0010:__asan_memcpy+0x6/0x60 [ 999.002910][ C0] Code: 5c e9 3e 23 3b 09 5b 31 c0 5d 41 5c c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 54 <49> 89 fc 55 48 89 f5 53 48 89 d3 48 8b 4c 24 18 31 d2 48 89 de 48 [ 999.022489][ C0] RSP: 0018:ffffc900032f74e8 EFLAGS: 00000246 [ 999.028527][ C0] RAX: ffff888080c3a224 RBX: 0000000000000000 RCX: 0000000000000000 [ 999.036477][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888080c3a228 [ 999.044425][ C0] RBP: 0000000000000004 R08: 0000000000000004 R09: 0000000000000000 [ 999.052369][ C0] R10: ffff888080c3a228 R11: 0000000000000000 R12: 0000000000000000 [ 999.060312][ C0] R13: 0000000000000c9c R14: 0000000000000019 R15: 0000000000000000 [ 999.068268][ C0] nla_put+0xfc/0x140 [ 999.072232][ C0] ctrl_fill_info+0x66d/0xd50 [ 999.076888][ C0] ? __pfx_ctrl_fill_info+0x10/0x10 [ 999.082061][ C0] ? sk_setsockopt+0x3305/0x3ac0 [ 999.086985][ C0] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 999.092335][ C0] ? __pfx_nl80211_set_reg+0x10/0x10 [ 999.097594][ C0] ? __pfx_nl80211_post_doit+0x10/0x10 [ 999.103030][ C0] ? idr_get_next+0xec/0x150 [ 999.107598][ C0] ? __pfx_idr_get_next+0x10/0x10 [ 999.112601][ C0] ctrl_build_family_msg+0x5a/0xa0 [ 999.117688][ C0] ctrl_getfamily+0x354/0x540 [ 999.122336][ C0] ? __pfx_ctrl_getfamily+0x10/0x10 [ 999.127513][ C0] genl_family_rcv_msg_doit+0x209/0x2f0 [ 999.133035][ C0] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 999.139078][ C0] ? genl_get_cmd+0x194/0x580 [ 999.143752][ C0] genl_rcv_msg+0x55c/0x800 [ 999.148228][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 999.153224][ C0] ? __pfx_ctrl_getfamily+0x10/0x10 [ 999.158396][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 999.163397][ C0] netlink_rcv_skb+0x158/0x420 [ 999.168144][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 999.173139][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 999.178408][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 999.183405][ C0] genl_rcv+0x28/0x40 [ 999.187359][ C0] netlink_unicast+0x5aa/0x870 [ 999.192104][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 999.197373][ C0] netlink_sendmsg+0x8c8/0xdd0 [ 999.202117][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 999.207385][ C0] __sys_sendto+0x4a3/0x520 [ 999.211863][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 999.216879][ C0] __x64_sys_sendto+0xe0/0x1c0 [ 999.221617][ C0] ? do_syscall_64+0x91/0xfa0 [ 999.226264][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 999.231435][ C0] do_syscall_64+0xcd/0xfa0 [ 999.235922][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.241802][ C0] RIP: 0033:0x7fd11cf9155c [ 999.246192][ C0] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 999.265795][ C0] RSP: 002b:00007fd11deccec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 999.274180][ C0] RAX: ffffffffffffffda RBX: 00007fd11deccfc0 RCX: 00007fd11cf9155c [ 999.282124][ C0] RDX: 0000000000000020 RSI: 00007fd11decd010 RDI: 000000000000000c [ 999.290068][ C0] RBP: 0000000000000000 R08: 00007fd11deccf14 R09: 000000000000000c [ 999.298014][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000c [ 999.305958][ C0] R13: 00007fd11deccf68 R14: 00007fd11decd010 R15: 0000000000000000 [ 999.313918][ C0] [ 999.317139][ C0] Kernel Offset: disabled [ 999.321445][ C0] Rebooting in 86400 seconds..