last executing test programs: 9m33.086522095s ago: executing program 32 (id=2939): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x2, 0xd, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x1f, {0x6, 0x2b, 0x9, 0x40, 0x0, 0x2, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x2b, 0x2, 0x3, 0x0, 0x0, 0x0, @in6=@mcast1, @in=@remote}}, @sadb_lifetime={0x4, 0x4}]}, 0xd8}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x40010, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) flistxattr(r0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x4007}, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xb, &(0x7f00000000c0)=0xbfe, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r3, 0x24, &(0x7f0000000100)={0x0, 0x1, 0x36, 0xc1b0}) 7m21.248373193s ago: executing program 4 (id=3321): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x1f, 0x4, 0xfffffffff7350f4b, 0x6, 0x8001, 0x200, 0xffeffffa, 0x0, 0x0, 0x10, 0x7}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x6, 0x8}) 7m18.035995548s ago: executing program 4 (id=3331): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host}) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpgrp(0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000001c0)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000040)=[@ip_retopts={{0x10}}], 0x10}, 0x40810) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x80, @empty, 0xff}, 0x1c) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000000)={0xa, @raw_data="3aee44a9c226a51c91d96d057945493d62731d82b7b243ac2b8c09e616fac25ae19d22dde9f23f852c3c3ccc3a9bd805898c9b2332eefd90a8a3ec23a13d253cf99691b813d8bfe75bfd83c66b56546b67a6d49ef1aa41cd5fb1faa24fd3f04c0551ed1ce90da7f3c55d1722a954283520a13b98bbbda5d490614b0b944b44d09086680a995a0ef055c7b45c50f7096e53c69a5af5d8af27a799d80635b87bb98d78c265cc91f11d80f3215cb8e27902ded8695717e1bc25acbcb5f28d2e5cddcd7b000000009cae"}) unshare(0xc040480) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r6, &(0x7f0000000000), 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) 7m14.665994054s ago: executing program 4 (id=3345): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x103001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r2, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) mmap(&(0x7f0000ed2000/0x4000)=nil, 0x4000, 0x2000000, 0x10010, 0xffffffffffffffff, 0xfffff000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000004980), 0x0, 0x20008000) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x404, &(0x7f0000002140)=ANY=[@ANYBLOB='ft=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "60000100", "9de66ebc3914c06f0f109088d190e700", '\x00', "f8dde5bf3eba23db"}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000540)={0x1c, 0x8, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000010) 7m11.411615982s ago: executing program 4 (id=3354): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000280)={'multiq3\x00', [0x4f29, 0x5, 0x3ff, 0x601, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x805, 0x7ff, 0x2, 0x1, 0x2, 0x4, 0x101, 0xe1cb, 0x5, 0x1a44b, 0x2f, 0x201, 0x8f5e, 0xfffffff9, 0x9, 0x20001e56, 0x9, 0x3, 0x3c, 0x8, 0x4, 0x8000000, 0x1]}) 7m11.316507637s ago: executing program 2 (id=3356): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x103001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) io_uring_enter(r2, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) mmap(&(0x7f0000ed2000/0x4000)=nil, 0x4000, 0x2000000, 0x10010, 0xffffffffffffffff, 0xfffff000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x404, &(0x7f0000002140)=ANY=[@ANYBLOB='ft=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "60000100", "9de66ebc3914c06f0f109088d190e700", '\x00', "f8dde5bf3eba23db"}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f0000000040)='./file0\x00', 0xc) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000540)={0x1c, 0x8, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000010) 7m10.588560777s ago: executing program 2 (id=3360): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x6, 0x0, 0x39, @dev={0x12, 0x80, '\x00', 0xfe}, @mcast2={0xff, 0x3}, 0x2000, 0xba08}}) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000240)=0xb) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x93d4b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8000000}, 0x6b) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x4, &(0x7f0000000280)=[{0x80, 0x9c, 0x6, 0x3bb8}, {0x1, 0x6, 0xfa, 0x4}, {0x800, 0x7, 0x8, 0x7f}, {0x9, 0x4, 0xf, 0x8}]}) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f00000005c0)={0x2, &(0x7f0000000580)=[{0x4, 0x9, 0xc4, 0x7}, {0xf001, 0x2, 0x3, 0x6}]}) creat(&(0x7f00000002c0)='./file0\x00', 0x0) llistxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100180000000000000054000000540000000900000006000000040000934d0801ca10000000f20500000000010005000000050000000900000004000000f7ffffff070000000d00000008000000090000000f000000"], &(0x7f0000000400)=""/209, 0x75, 0xd1, 0x1, 0x8, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000200"/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = fsopen(&(0x7f0000000540)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x240000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f00000003c0), 0x4) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x32) wait4(r1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0x501480, 0x0) 7m10.486580415s ago: executing program 2 (id=3361): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x103001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r2, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x404, &(0x7f0000002140)=ANY=[@ANYBLOB='ft=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "60000100", "9de66ebc3914c06f0f109088d190e700", '\x00', "f8dde5bf3eba23db"}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f0000000040)='./file0\x00', 0xc) 7m9.503239095s ago: executing program 2 (id=3366): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)=@generic={0x0, r1}, 0x18) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getcwd(0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x304}, '\x00', "e8a1056a7c356ba2b862ef93136b1587", "28bc90f4", "790f59276094db31"}, 0x28) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}]}}}]}, 0x3c}}, 0x404c840) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x8001, 0x6, 0x1, 0x6, 0x0, 0x80000cc7, 0x659a29f6, 0x7, 0xffffff53, 0x100, 0xffffffff, 0x1, 0x8, 0x2, 0x6, 0xffffffff, 0x1, 0x1a449, 0x40005, 0x40000003, 0x89, 0x22, 0xf27, 0x6, 0xb, 0x6, 0x5, 0x0, 0x4, 0x10000, 0xfffffff8]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) 7m8.617134627s ago: executing program 5 (id=3368): add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000240)="000000000000002499b8f276dc7558ecf97a4449a2e3f8367d61f49e160ba48f614a54a8192c2876b7f843cd3a3c07288fa0f1e28983b5cdc2e29b6e", 0x3c, 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/msg\x00', 0x0, 0x0) (async) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000010) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) socket(0x1e, 0xa, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x1, 0x0) (async) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffed3) (async) close(0x3) socket$packet(0x11, 0x2, 0x300) r2 = fsopen(&(0x7f0000000140)='9p\x00', 0x1) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000780)=ANY=[@ANYBLOB="9c0100001000010000000000000000000a010101000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac141436000000000000000000000000000000000000000000010000000000000000000000000000fdffffffffffffff000000000000000000000000000000000000e300000000000000fdffffffffffffff04000000000066f8ba1b68c800000000000800000000000000000100000000110000000000000200000000000400000000000a000000cd000000000000004800020063626328616573290000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000081c"], 0x19c}}, 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000005ed90000000000000000000000c7e9301a0965e83e090e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x800007d}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa8}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100), 0x8) (async) syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r6, 0xc0106401, &(0x7f0000000100)={0x24, &(0x7f0000000080)=""/36}) (async) r7 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000200)={0x0}) 7m8.226295731s ago: executing program 4 (id=3369): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x103c43, 0x1ce) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x21, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x8004) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) close(0xffffffffffffffff) r6 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) socket$kcm(0x29, 0x7, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r7, r7, 0x0, 0x200000) r8 = syz_usb_connect(0x0, 0x36, &(0x7f0000000a40)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c2a1a3f5809022400010100000009046909000000a30009050402100000fa00090582024000000000ba5888485e21a0e2927b965af250a0e33fbd1402058d048127bb1d64e1c10424d75b59b700766c762e996de035e4038aad795157e018b7c5db0ff41e47e9e2ccd22166887cee9a81b177dee6090683f8b42c827b9aee2690a4968e7cd554d8ecbbc02d6d59d60da344040ddb2ae15b955dde804fdf74beef4c12efe40c989f24"], 0x0) syz_usb_control_io$printer(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$sierra_net(r8, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x40, 0x4, 0xb5, {0xb5, 0x42849d4c8ac68bd0, "ff9178f9168c04a750aaeba1c1e74eb56d54dda1650cd083f4e1faf799f5c3a9ddd520601d195035bd1d9fd890a52def603ff043fc1e8e8a139607fd07ed00efdd4271536a2f4263c6a4ec331aa29c4ff5917dc5e62d3e124a1dfb560f5f8891a6ce663dccbe3c71cea88820a50ef9c151708d5cb476eda11dec5bdee19c59ef39566097269709c09566a9e27cd1bbe9ad3ca67de55edbe56d39e56173814208b11ddbcd09bf2f425e1a9d1f5385487e4fc227"}}, &(0x7f0000000400)=ANY=[@ANYBLOB="0003d7000000d703fe651b1430bda896dede0d3adb620232b395d8a899d813cd7bd3ca28404422c0dee4dd0c6071b5604a8b0a574609f1169e51b6aaa906bd2a9a5167d0402b01d38202c74bf8b1406ef3b3c5bdecd6a186fc75a7d33c865d80085c5b7671be815854f8ffbe615f8760c7048a8827f0cf756d0864153263915191637d548d430202ad97d86f06d9d87c9ea0ae9f700627cad5b76d81a56d248a3a106e1d798a7be2f11707c7a34b08a6d834c6801ad61a6fd1a3a6c288908ead8a781fec78fb47dd5baacac3536fa50624c36446060000003a1e09df5b2f6a167b4b4387a25311ca4c20cea0"]}, &(0x7f0000000540)={0x1c, &(0x7f0000000b00)=ANY=[@ANYBLOB="400cc0000000505badd0c88dec23144fe85b8c0694a2018ddaaf17da2599c52e6a7ab79d666062fc6c2be5e9199e4d38a52b6540c3fe8679b9072e1aa4778067688f4007f78251f70b973aa2be0450cd5f20934e97fb3a841a02a1c167409fb06f5b473af6b10cd55837443f1b4c3586d6dbe5a36e615e4bda55bce0e87448c7491dd4f820175b3d3cea432e235a92b517bb04f8127418810534c9528ee3b95062b0f36592711f3b07000000de8f889a190d023bda5c8199b6984d6b3f5e00000000000096e6b1be23765de3c54c99727e"], &(0x7f0000000600)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000180)={0x21, 0x0, 0x4, "c056a62d"}}) 7m7.983525433s ago: executing program 5 (id=3370): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x1, 0x7fffffff, 0x0, 0x32}, 0x9c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback={0x700}, 0xfffffffd}}, 0x0, 0xffff, 0x0, 0x0, 0x2e, 0x6}, 0x9c) 7m7.909596782s ago: executing program 5 (id=3371): r0 = socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)={0x20, 0x1a, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x3ffc, 0x0, 0x0, @str=':*^${\x00'}, @nested={0x4, 0x1b}]}, 0x20}], 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000000)={r8, 0x4}, 0x8) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) 7m6.655907741s ago: executing program 5 (id=3375): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host}) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpgrp(0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000001c0)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000040)=[@ip_retopts={{0x10}}], 0x10}, 0x40810) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x80, @empty, 0xff}, 0x1c) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000000)={0xa, @raw_data="3aee44a9c226a51c91d96d057945493d62731d82b7b243ac2b8c09e616fac25ae19d22dde9f23f852c3c3ccc3a9bd805898c9b2332eefd90a8a3ec23a13d253cf99691b813d8bfe75bfd83c66b56546b67a6d49ef1aa41cd5fb1faa24fd3f04c0551ed1ce90da7f3c55d1722a954283520a13b98bbbda5d490614b0b944b44d09086680a995a0ef055c7b45c50f7096e53c69a5af5d8af27a799d80635b87bb98d78c265cc91f11d80f3215cb8e27902ded8695717e1bc25acbcb5f28d2e5cddcd7b000000009cae"}) unshare(0xc040480) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r6, &(0x7f0000000000), 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) 7m5.481003539s ago: executing program 5 (id=3378): write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000400)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000440)=0x24) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000480)={r6, 0x32d}, 0x8) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000b80)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000019480)={{}, 0x0, 0x8, @inherit={0x58, &(0x7f0000000580)=ANY=[@ANYBLOB="01000000ea4f600014addba10b843f642a0000000840000000000000000000000000000000c18a000000000000080000000000000045feffffffffffff0200000000000000f9ffffffffffffff4c0b00000000eaffffff0100000000000700000000000000"]}, @devid=r7}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="3400000040000100fcff0700040000000100000004004880100001800c00108004000880040008800c00020000000000000000003702ce7c8595a483529fa905978b82cf3e91c3598895e1ad73838e853b787cdf2978b3f22978fca63c18ee95d97476835af503bde5052137e84cf5419b53168d47b8409a14"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r9 = fsopen(&(0x7f0000000100)='reiserfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000000), 0x7, 0x4000) 7m4.492574644s ago: executing program 1 (id=3379): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mlock2(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000000) 7m4.484694876s ago: executing program 2 (id=3380): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffff8, @loopback}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0xce20, 0x0, @empty, 0x8}}, 0x1, 0x0, 0xfffffffc, 0x0, 0x32, 0xa}, 0x9c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local']) listen(r0, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0xd66}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @empty}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private0}}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r5}, 0x18) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r6, 0x10c000) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0xfffffffe, 0x101, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r6, 0x4008550d, &(0x7f0000000080)) sendmmsg$inet6(r4, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x64, r9, 0x1, 0xffffffff, 0x400000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x80}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x64}, 0x1, 0x620b}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x50, r9, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x81}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x81}, 0x8840) 7m4.423458491s ago: executing program 4 (id=3381): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44004) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000000000)={'sit0\x00', @random="e80300001000"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r4) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x48004}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20000023893) 7m4.381841286s ago: executing program 5 (id=3382): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r5, 0x2000012, 0xe, 0x0, &(0x7f00000004c0)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x1a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) io_setup(0x9, &(0x7f0000000b80)=0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = msgget$private(0x0, 0x193) msgsnd(r8, &(0x7f0000000040)=ANY=[@ANYRES8=r3], 0x8, 0x0) msgsnd(r8, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x3f9, 0x0) msgrcv(r8, &(0x7f00000002c0), 0x8, 0x1, 0x800) r9 = getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@private0}}, &(0x7f00000001c0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000004c0)=0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000001080)={0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000880)=[0xffffbec7, 0x0, 0x4, 0x1, 0x9, 0x1ff], &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001040)=[0x8001], 0x0, 0x101}) msgctl$IPC_SET(r8, 0x1, &(0x7f0000000500)={{0x0, r9, r10, r11, r12, 0xcc, 0x101}, 0x0, 0x0, 0x6e28, 0xbbc, 0x3, 0x400, 0x5, 0xf3b, 0x100, 0x1, r13}) sendmmsg$unix(r2, &(0x7f0000003340)=[{{&(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000580)="a1f3d8439ef5a43d95f8381b0906a42496c003f39219ff1e4bc5b1eb3409d3f02a50425e4d193c25d193ef550f4011dab3185958f7e0ddaeb52e952b497de313acbe63b3a2879f", 0x47}, {&(0x7f0000000600)="b99d2d5d38a2340397d1a4d01cb90c09c0739230895210d202e81f7458d9a19aa7f55fb5092b4e3c5d1ccfbaa56e69437313e235073936277d69ec49a2e276c63a2173e13e4b2625d2db9bc17ed030194b511174a4c7cd2d7abe72fdff800d7e7fe8b839e3a9aec9eadf05ed4420f71652a79503de3be4b472e66a84e861ddb5684d268c5f2823e889cbc33ecc", 0x8d}, {&(0x7f0000000780)="a79266af43d0c72ff5356fee6449149e488f45e9cf34004c255bb2c9e0a19d36a6f537ee3b77f556b3a4c015d9b30960dcf95647c8187a43c5b173a54a11cc760581fa5dccc128669caa9ff7834961ea6cbcfc631ea7e9f7e41c0cd8d9b3eea3b109ec4bf69818db1aa11fa590830e725da1e0fe79c6c907d483209a3b44f5", 0x7f}, {&(0x7f0000000800)="0a26abc5209b6cc020ba5eb31b06b19d2838eb94b6b773f65fa70bb981d5d95771a852ffcd0893f5a177177af9a5d99323d8678fc9cd565d0d854758af1b9279b946d0c450dbbde240c5817086a18e177633da679cdb5f2429e42e5793a8fbe038436d6ef021", 0x66}, {&(0x7f0000000bc0)="b402ad087f177535ac960ddc4ba1bcd03d60fa51946ad94e6453027836c5b47f33aff508169ac231ff48beda2ccabc07de2e7ddf0adefe01f730189a2dd557636b604fe72f3153a6a1bf7f3b6861cd2f737fc99bdec7f044b17a7f6425d8d192714c612364ec53b6d718917d1038e42d08", 0x71}], 0x5, &(0x7f0000003440)=[@cred={{0x1c, 0x1, 0x2, {r13}}}, @rights={{0x30, 0x1, 0x1, [r6, r6, r3, 0xffffffffffffffff, 0xffffffffffffffff, r3, r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x70}}, {{&(0x7f0000000e00)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000003240)=[{&(0x7f0000000e80)}, {&(0x7f0000001e80)="7c7d05d48454e5142a2fdadf3d659a5d6250e4b1b1b5e40e2a115144ccf9004ba5456d1db5cc4fd147d4772b7f6ecfe845d99858697fec5a778a6faeedba7b75ad5cd30d0c21e4b411c664b0bab189870747f9951b628c4da2a10596550430edb86c75713c57317f", 0x68}, {&(0x7f0000001f00)="84acfe782e1a41c88de7af68705a24b9695825e69bb99786508fa0613a3b7bdce96f4e7bf3dfef3c0d6d5b7e542acb499e9a9e707ca9f922cc451f2710176871cabcc6593cd9666b85950926f0aa60907ba11ac92e33e2255b93d1b46cf07657a9bf7c59d866fcbf42ba2df4ab5de6cadbf57420ebce4ca064321c8a3427fc635fa553e43a95dbbecfcc1375be68d8dfc2ed77f143f4373d40", 0x99}, {0x0}, {&(0x7f0000002fc0)="bec05510ffaaebbbf4447063306ad1fe63ae04235d02c09c7eb0fc40de81056d784dd555c7d218b08e458d879e792ac472f3900aad5253c7d083cd8e120b05e010adada2dbb75bfea7f03bbb3b9f5df3cd25290e0debf43eff8e5184aa9fa3a7748dd3e855ed4e550ca66ff8c7ca4c1f05425a0c184dd34a3b42384bd7a5fae6a1e925c2e8488ee8bf2f12d120fceb16c89f326bf6d07aafdbee55949f5649b437692ad109770379009b7503a5dd2f6d9c44f3e8699adf4ab93be07297ed16dfcba174e24974", 0xc6}, {&(0x7f00000030c0)}, {&(0x7f0000000480)="9a73742b5f62ff76", 0x8}, {&(0x7f00000031c0)="ddd98ad619646f48cd70d746f00d06b1a6aa3b6ac2b7a913c982780a6648645b9e9c40594208c413bae0692da81c92e0c94ded9ce1da1c3ef3c05a613fe34fd17c2348b4dc239478cd6e52ce89937bad7435fb8964ca802fc22ac907a63eb0e710257717f16e5b214dd0ae8274d145c6e54bae36f29321", 0x77}], 0x8, &(0x7f00000032c0)=[@rights={{0x2c, 0x1, 0x1, [r6, 0xffffffffffffffff, r1, r5, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [r4, 0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff]}}], 0x68, 0x4040}}], 0x2, 0x8000) io_submit(r7, 0x1, &(0x7f00000003c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, r6}]) 7m4.110692121s ago: executing program 1 (id=3384): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="2ec0b70007e03d3e000000020000000500060000", 0x14}, {&(0x7f0000000100)="f2486e61", 0x4}], 0x2) 7m3.87260662s ago: executing program 1 (id=3385): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r3, 0x4008af14, &(0x7f0000000140)={0x0, 0x8}) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0x0, 0x400, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 7m3.865832389s ago: executing program 2 (id=3386): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) unshare(0x22020600) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getcwd(0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x304}, '\x00', "e8a1056a7c356ba2b862ef93136b1587", "28bc90f4", "790f59276094db31"}, 0x28) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}]}}}]}, 0x3c}}, 0x404c840) 7m3.667296009s ago: executing program 1 (id=3387): syz_init_net_socket$ax25(0x3, 0x5, 0xc4) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f0000000100)="94", 0x1}], 0x1) dup(r0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2845) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10089}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000002c0)=0x2, 0xb, 0x2, &(0x7f0000000300)={0x77359400}, &(0x7f00000004c0)=0x1, 0x2) 7m2.787731115s ago: executing program 1 (id=3388): fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ppoll(0x0, 0xfefd, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) 7m2.761410131s ago: executing program 1 (id=3389): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_emit_ethernet(0x56, &(0x7f00000004c0)=ANY=[@ANYBLOB="aa00aaaaaaaaaaaaaaaabb86dd604dd318002006002001000000000001fe80000000000000000000020000000000000001dc5d79a0f015483735edb1a7ed7794d659fa45b4afb04a0faad09fb8bf0fd6ef4bed9acaf01889e04bc0b44536b85673356aacdca3db435a93842ea59f3c7eeb95613c", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8002000090780000050a0c311500073bb9b00000"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYRES32], 0x44}}, 0x8001) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="120000000401000008000000ffffffff00000000", @ANYRES32, @ANYRESDEC=r0, @ANYRESOCT, @ANYRES16=0x0, @ANYBLOB="000000000000001000"/28], 0x50) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r5 = dup(r4) ioctl$sock_inet_sctp_SIOCINQ(r5, 0x541b, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0xdb) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60e", 0x22) sendfile(r6, r6, 0x0, 0x2000200000) setns(0xffffffffffffffff, 0x2020000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1b7b, &(0x7f00000001c0)={0x0, 0xcf87, 0x1000, 0xa, 0x20002f8}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000004000070127bd7000fedbdf25037c00000400c280100e25d4f0526a0099275db6dbbc4d75c488a515db710007000000772e8b0004000800"], 0x2c}, 0x1, 0x0, 0x0, 0x4c090}, 0x4010) 6m43.843349392s ago: executing program 33 (id=3383): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) personality(0xfe47fef9f5ff7379) ppoll(0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 6m43.643695932s ago: executing program 34 (id=3389): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_emit_ethernet(0x56, &(0x7f00000004c0)=ANY=[@ANYBLOB="aa00aaaaaaaaaaaaaaaabb86dd604dd318002006002001000000000001fe80000000000000000000020000000000000001dc5d79a0f015483735edb1a7ed7794d659fa45b4afb04a0faad09fb8bf0fd6ef4bed9acaf01889e04bc0b44536b85673356aacdca3db435a93842ea59f3c7eeb95613c", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8002000090780000050a0c311500073bb9b00000"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYRES32], 0x44}}, 0x8001) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="120000000401000008000000ffffffff00000000", @ANYRES32, @ANYRESDEC=r0, @ANYRESOCT, @ANYRES16=0x0, @ANYBLOB="000000000000001000"/28], 0x50) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r5 = dup(r4) ioctl$sock_inet_sctp_SIOCINQ(r5, 0x541b, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0xdb) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60e", 0x22) sendfile(r6, r6, 0x0, 0x2000200000) setns(0xffffffffffffffff, 0x2020000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1b7b, &(0x7f00000001c0)={0x0, 0xcf87, 0x1000, 0xa, 0x20002f8}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000004000070127bd7000fedbdf25037c00000400c280100e25d4f0526a0099275db6dbbc4d75c488a515db710007000000772e8b0004000800"], 0x2c}, 0x1, 0x0, 0x0, 0x4c090}, 0x4010) 6m43.476339397s ago: executing program 35 (id=3386): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) unshare(0x22020600) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getcwd(0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x304}, '\x00', "e8a1056a7c356ba2b862ef93136b1587", "28bc90f4", "790f59276094db31"}, 0x28) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}]}}}]}, 0x3c}}, 0x404c840) 6m43.364706344s ago: executing program 36 (id=3382): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r5, 0x2000012, 0xe, 0x0, &(0x7f00000004c0)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x1a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) io_setup(0x9, &(0x7f0000000b80)=0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = msgget$private(0x0, 0x193) msgsnd(r8, &(0x7f0000000040)=ANY=[@ANYRES8=r3], 0x8, 0x0) msgsnd(r8, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x3f9, 0x0) msgrcv(r8, &(0x7f00000002c0), 0x8, 0x1, 0x800) r9 = getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@private0}}, &(0x7f00000001c0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000004c0)=0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000001080)={0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000880)=[0xffffbec7, 0x0, 0x4, 0x1, 0x9, 0x1ff], &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001040)=[0x8001], 0x0, 0x101}) msgctl$IPC_SET(r8, 0x1, &(0x7f0000000500)={{0x0, r9, r10, r11, r12, 0xcc, 0x101}, 0x0, 0x0, 0x6e28, 0xbbc, 0x3, 0x400, 0x5, 0xf3b, 0x100, 0x1, r13}) sendmmsg$unix(r2, &(0x7f0000003340)=[{{&(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000580)="a1f3d8439ef5a43d95f8381b0906a42496c003f39219ff1e4bc5b1eb3409d3f02a50425e4d193c25d193ef550f4011dab3185958f7e0ddaeb52e952b497de313acbe63b3a2879f", 0x47}, {&(0x7f0000000600)="b99d2d5d38a2340397d1a4d01cb90c09c0739230895210d202e81f7458d9a19aa7f55fb5092b4e3c5d1ccfbaa56e69437313e235073936277d69ec49a2e276c63a2173e13e4b2625d2db9bc17ed030194b511174a4c7cd2d7abe72fdff800d7e7fe8b839e3a9aec9eadf05ed4420f71652a79503de3be4b472e66a84e861ddb5684d268c5f2823e889cbc33ecc", 0x8d}, {&(0x7f0000000780)="a79266af43d0c72ff5356fee6449149e488f45e9cf34004c255bb2c9e0a19d36a6f537ee3b77f556b3a4c015d9b30960dcf95647c8187a43c5b173a54a11cc760581fa5dccc128669caa9ff7834961ea6cbcfc631ea7e9f7e41c0cd8d9b3eea3b109ec4bf69818db1aa11fa590830e725da1e0fe79c6c907d483209a3b44f5", 0x7f}, {&(0x7f0000000800)="0a26abc5209b6cc020ba5eb31b06b19d2838eb94b6b773f65fa70bb981d5d95771a852ffcd0893f5a177177af9a5d99323d8678fc9cd565d0d854758af1b9279b946d0c450dbbde240c5817086a18e177633da679cdb5f2429e42e5793a8fbe038436d6ef021", 0x66}, {&(0x7f0000000bc0)="b402ad087f177535ac960ddc4ba1bcd03d60fa51946ad94e6453027836c5b47f33aff508169ac231ff48beda2ccabc07de2e7ddf0adefe01f730189a2dd557636b604fe72f3153a6a1bf7f3b6861cd2f737fc99bdec7f044b17a7f6425d8d192714c612364ec53b6d718917d1038e42d08", 0x71}], 0x5, &(0x7f0000003440)=[@cred={{0x1c, 0x1, 0x2, {r13}}}, @rights={{0x30, 0x1, 0x1, [r6, r6, r3, 0xffffffffffffffff, 0xffffffffffffffff, r3, r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x70}}, {{&(0x7f0000000e00)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000003240)=[{&(0x7f0000000e80)}, {&(0x7f0000001e80)="7c7d05d48454e5142a2fdadf3d659a5d6250e4b1b1b5e40e2a115144ccf9004ba5456d1db5cc4fd147d4772b7f6ecfe845d99858697fec5a778a6faeedba7b75ad5cd30d0c21e4b411c664b0bab189870747f9951b628c4da2a10596550430edb86c75713c57317f", 0x68}, {&(0x7f0000001f00)="84acfe782e1a41c88de7af68705a24b9695825e69bb99786508fa0613a3b7bdce96f4e7bf3dfef3c0d6d5b7e542acb499e9a9e707ca9f922cc451f2710176871cabcc6593cd9666b85950926f0aa60907ba11ac92e33e2255b93d1b46cf07657a9bf7c59d866fcbf42ba2df4ab5de6cadbf57420ebce4ca064321c8a3427fc635fa553e43a95dbbecfcc1375be68d8dfc2ed77f143f4373d40", 0x99}, {0x0}, {&(0x7f0000002fc0)="bec05510ffaaebbbf4447063306ad1fe63ae04235d02c09c7eb0fc40de81056d784dd555c7d218b08e458d879e792ac472f3900aad5253c7d083cd8e120b05e010adada2dbb75bfea7f03bbb3b9f5df3cd25290e0debf43eff8e5184aa9fa3a7748dd3e855ed4e550ca66ff8c7ca4c1f05425a0c184dd34a3b42384bd7a5fae6a1e925c2e8488ee8bf2f12d120fceb16c89f326bf6d07aafdbee55949f5649b437692ad109770379009b7503a5dd2f6d9c44f3e8699adf4ab93be07297ed16dfcba174e24974", 0xc6}, {&(0x7f00000030c0)}, {&(0x7f0000000480)="9a73742b5f62ff76", 0x8}, {&(0x7f00000031c0)="ddd98ad619646f48cd70d746f00d06b1a6aa3b6ac2b7a913c982780a6648645b9e9c40594208c413bae0692da81c92e0c94ded9ce1da1c3ef3c05a613fe34fd17c2348b4dc239478cd6e52ce89937bad7435fb8964ca802fc22ac907a63eb0e710257717f16e5b214dd0ae8274d145c6e54bae36f29321", 0x77}], 0x8, &(0x7f00000032c0)=[@rights={{0x2c, 0x1, 0x1, [r6, 0xffffffffffffffff, r1, r5, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [r4, 0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff]}}], 0x68, 0x4040}}], 0x2, 0x8000) io_submit(r7, 0x1, &(0x7f00000003c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, r6}]) 6m43.023697572s ago: executing program 37 (id=3381): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44004) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000000000)={'sit0\x00', @random="e80300001000"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r4) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x48004}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20000023893) 3m22.950797726s ago: executing program 8 (id=3865): inotify_init() r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x145}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) socket$nl_route(0x10, 0x3, 0x0) r3 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)={0x20082, 0x200}, 0x18) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000001440)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080027bd7000fedbdf250d0000001c000380080001000000000008000500ac1e000108000100010000002000018014000300fc02000000000000000000000000000108000b00736970005747745b5cc18a8c0a14d41dbd87bdd75d24befc42c1d50b757d1b5f8fdbb9484cfba47f4b9e02d2a0df7664f07024a4d528af305e91f50a69a4f78121127e1068c161926318b3ce78cec3da207e4f42786ad6"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000180)={0x0, 0xffffffffffffffb7, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[], 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x3a00, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) 3m21.152238415s ago: executing program 8 (id=3868): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b) 3m18.890509513s ago: executing program 8 (id=3873): socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, 0x0, 0x10005, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0x2) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0xe32}}, './file0\x00'}) ioctl$DRM_IOCTL_GET_STATS(r7, 0x80f86406, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x8d8, 0x5, 0x36315247, 0x6, 0x8000002, 0xb, 0x0, 0xffffffff, 0x0, 0x6, 0x0, 0x4}}) 3m17.951648719s ago: executing program 8 (id=3876): r0 = inotify_init() r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x145}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) socket$nl_route(0x10, 0x3, 0x0) r4 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)={0x20082, 0x200}, 0x18) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000001440)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="080027bd7000fedbdf250d0000001c000380080001000000000008000500ac1e000108000100010000002000018014000300fc02000000000000000000000000000108000b00736970005747745b5cc18a8c0a14d41dbd87bdd75d24befc42c1d50b757d1b5f8fdbb9484cfba47f4b9e02d2a0df7664f07024a4d528af305e91f50a69a4f78121127e1068c161926318b3ce78cec3da207e4f42786ad6"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000180)={0x0, 0xffffffffffffffb7, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[], 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x3a00, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) fchdir(r6) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 3m17.272741296s ago: executing program 8 (id=3879): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x103001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r2, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) mmap(&(0x7f0000ed2000/0x4000)=nil, 0x4000, 0x2000000, 0x10010, 0xffffffffffffffff, 0xfffff000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x404, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "60000100", "9de66ebc3914c06f0f109088d190e700", '\x00', "f8dde5bf3eba23db"}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000540)={0x1c, 0x8, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000010) 3m14.313650318s ago: executing program 8 (id=3884): r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x41, 0x0) chmod(&(0x7f0000000280)='./file0\x00', 0x110) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000000)={0x4, 0x7f, 0x0, 0xbeb, 0x1, 0x14}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000d9c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x68801, 0x0) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xffbd) syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x18, 0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000002700)=""/102392, 0x18ff8) r8 = msgget$private(0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) msgsnd(r8, &(0x7f0000000080)=ANY=[@ANYRES8=r6], 0x2000, 0x0) msgrcv(r8, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) msgctl$IPC_SET(r8, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 2m58.878251845s ago: executing program 38 (id=3884): r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x41, 0x0) chmod(&(0x7f0000000280)='./file0\x00', 0x110) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000000)={0x4, 0x7f, 0x0, 0xbeb, 0x1, 0x14}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000d9c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x68801, 0x0) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xffbd) syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x18, 0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000002700)=""/102392, 0x18ff8) r8 = msgget$private(0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) msgsnd(r8, &(0x7f0000000080)=ANY=[@ANYRES8=r6], 0x2000, 0x0) msgrcv(r8, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) msgctl$IPC_SET(r8, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 16.215831393s ago: executing program 9 (id=4093): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44004) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x0, 0x268, 0x300, 0x2a0, 0x268, 0x3b0, 0x460, 0x460, 0x3b0, 0x460, 0x9, 0x0, {[{{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xffffffff], [0xff, 0x0, 0xff, 0xffffffff], 'nicvf0\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x0, 0xa, 0x1, 0x10}, 0x0, 0x240, 0x2a0, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x80000000, 0xb, 0x0, 0x3, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x2e}, [0xffffff00, 0xffffff00, 0xffffff00, 0xffffffff], 0x4e20, 0x4e23, 0x4e22, 0x4e20, 0xfffff801, 0x883, 0x4, 0x0, 0x10001}}}, {{@ipv6={@private2, @remote, [0x0, 0xffffff00], [], 'ip6gretap0\x00', 'ip6_vti0\x00', {0xff}}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48004}, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x20000023893) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x400448c9, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 15.105660376s ago: executing program 9 (id=4095): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000140)={0x60, 0x1, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x100, 0x0, 0x0, 0x100000c00, 0x38, 0x24, 0x42, 0x6e}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)=0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0xe7cc, 0x2, 0x3, 0x800}, &(0x7f00000003c0), &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x7f, 0x34325258, 0x0, [0x2], [0x800], [0x0, 0x0, 0x0, 0x3]}) 13.517890739s ago: executing program 0 (id=4100): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="120100009d82b40875068816b67e0102030109022400010000000009046d0009050d00000406084000000000"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24004015}, 0x448d0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000280)={0x24, 0x140f, 0x1, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x4048084) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000140)={0x2}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001800)=0x0) r7 = getegid() ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f00000018c0)={0x0, "43c212605c831934ba7533ebd36fec52228c00b91a4af53e9cd4e640f4f24335", 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001940)=[{{&(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000640)="8aed17dc5facec8f90a0f4605b9da76ab4c5e1950bcf38676c3b953ebe8a686b1495a5201c0080cac1678dbece17f7c567e07f10d10b4426671df72a393477d81b0146a1926bddd272488148cb87c886a52c4c61325315829010f967b8a6e859420903d725de7de9cd0238264cd151cd0039c58865493aa0f41ad57d684816b83663068784ac67e896828b8556221193e74754061bfa3e8fe65b2fab4fedcd7cb558557e1c08601c2897185f2fa8b34c11cd97df75ed", 0xb6}, {&(0x7f0000000780)="61fd592cccd2ac8ffaea990106da084cd0575f0365ccc4808a983c0b958557659a2980dfab28e4978917884b54f43e5b1d4abeb6c63e2a3390425449691663b438f19fb561c14329576bf9b179dad5de0289255e0c174df0e7", 0x59}, {&(0x7f0000000140)="55ca9c8481e82dab45ab31fd9f4fa5fedbba243951689e05f446e7d4b882acbef849a87a3aac6ddfe49a096c18d5637f24b83b338b94dd5e4017a3", 0x3b}, {&(0x7f0000000800)="1935efba8476a6c13c1222a2dbb4b83bc05b449cbbef74af19a8e819a2a85a3156290b53ca10eda201294950b3ac56b89662a58b454047f97ef52364a8630f68e86581527d5c51691bea8f235c0177267b8d1ff1b71f4f6c464059a13a1529e1c5e663f13ff7a32cf41bd6b3c04e7124a0df487f1829ac1b4206866dda55f824bdf8ec809b7109592e6154f378dfdfed8095", 0x92}, {&(0x7f00000001c0)="c6e68aae4cd5c9c49cce153f8fba4a8ee3", 0x11}], 0x5, &(0x7f0000000b00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x28, 0x1, 0x1, [r5, r0, r5, r3, 0xffffffffffffffff, r3]}}, @rights={{0x24, 0x1, 0x1, [r5, r5, r5, r0, r4]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000c00)}, {&(0x7f0000000c40)="e3d6549cf7", 0x5}], 0x2, &(0x7f0000001280)=[@rights={{0x24, 0x1, 0x1, [r4, 0xffffffffffffffff, r4, r5, r0]}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c}}], 0xe0, 0x4000}}, {{&(0x7f0000001380)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001780)=[{&(0x7f0000001400)="358428321ded91c1f0945dccf6eadac2a1c626da72d70808d0e2e96bc116f795d8f70199e6bf80a895ee58cdc21652fa5ec0c0f95f55e2faf06050a0c9d80f7537cc7e393d12a2f5b0316ad629b1c35b242e5e1c73f1e4868fa507680307726af8f1a8cb12f813e0c9cd861e30e242742491641fd64f414e615975375929359756f304fd7f17c40af5b490d63654a55585862b81a5e170ca8bce8aed5ebac1d2d50e903439594185cbf89e4b74e28fb5c49a0d995f19be2b954042579b33caaf48b979837e59c70d0f79a02d51ac22c1a282694dd6a0c31aeec0819a7e717216b7359566da734738a8", 0xe9}, {&(0x7f0000001500)="381acccfbf540964c699ee09901ad53ab51daaa5edaa097d280f0a2e2b9d82b27db37e8238de67abb0", 0x29}, {&(0x7f0000001540)="27ba7dedb31e53eb4b1b7a2d8fc84779a1aa149ca2f099e67a78f3407f593bb3bf92cb516928ee5f4892465d0bd2130c76d62b331b0e848f3bc571dd562a447c0c45ad4ff6bda274b11a98fb08bb7f2edf3f7729d46fe341f3e2b02e1a093f9c7e4cc2c03029649a70cf70478648accdd874715bece8045ffc133a987e639c3648fec5b5fac584036df979d208a9b4e3909b43ff5e67799854b07574ba3c34005e89044677ef7500e39c57ed111ec662793b9301537df9fa9935820522079e50f431dc8ba0e7d62da5c1f2d3e2f13e19e0e10183c8a76bc4c1f5d0e6a592880fead6678cf10077e2d5475fce5ddc", 0xee}, {&(0x7f0000001640)="723cbb8e9bf1ca9acf352a556f8eb7cfd49278b62ffff2ce95872c723ed103cd888d3ed5478776db7efca1ef832f0ee151b51ff275343e28c0cc7071e0597e969833c9d8888da76d12cfd06feed81e78859bbc7b7bf7b91364f88fcae8eb35106a11a439d07f443ad7f40ad210c44f10c9aa383fcc04bb38f47c96ed9bb1d58bd71a84d78323c35b30c8cf9d69439d2d28153b34fb5e3b2c7b4c78aa21584d68b3d5ee67bd20a831cb15ecc4ed2f448998044607d1d2728afc7b886ccd1dfecd", 0xc0}, {&(0x7f0000001700)="29ba639a9247bc2e3c536d28bcee73ed2a881450ed9e33011ce6119405840813df453d5cb4d04397b552bcc9e76bce603d8a7940", 0x34}, {&(0x7f0000001740)="093fe61753088822db6f80b63b7de3e0bee71b089b7602cad7ee584b39831352b4841c7c9d307001e3", 0x29}], 0x6, &(0x7f0000001840)=[@cred={{0x1c, 0x1, 0x2, {0x0, r6, r7}}}], 0x20, 0x10}}, {{0x0, 0x0, &(0x7f0000001880), 0x0, &(0x7f0000001900)=[@rights={{0x20, 0x1, 0x1, [r4, r4, r4, r8]}}], 0x20}}], 0x4, 0x20044090) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r9, 0x4048ae9b, &(0x7f0000000440)={0xa0001, 0x0, {[0x7, 0x1ff, 0x2, 0x6a, 0x4, 0xffffffff, 0x1000000000000401, 0x3e]}}) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000092ecc620ac05c2773aeb010203010902240001000020000904c40102fffd01800916020210020200000905820200"], 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf8}}, 0x7}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24088000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r10 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r12, 0x8982, &(0x7f0000000080)={0x7, 'pimreg0\x00', {0x2}}) write$binfmt_misc(r11, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r10, 0x4c0a, &(0x7f00000002c0)={r11, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 12.608477667s ago: executing program 7 (id=4102): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) syz_open_dev$radio(&(0x7f00000000c0), 0x0, 0x2) fsopen(&(0x7f0000000200)='jffs2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$kcm(0x10, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(0xffffffffffffffff, 0x3b87, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x5c5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4, 0x100000}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) 11.53790429s ago: executing program 9 (id=4103): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x103001, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) mmap(&(0x7f0000ed2000/0x4000)=nil, 0x4000, 0x2000000, 0x10010, 0xffffffffffffffff, 0xfffff000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x404, &(0x7f0000002140)=ANY=[@ANYBLOB='ft=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "60000100", "9de66ebc3914c06f0f109088d190e700", '\x00', "f8dde5bf3eba23db"}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f0000000040)='./file0\x00', 0xc) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000540)={0x1c, 0x8, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000010) 11.206847235s ago: executing program 7 (id=4106): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44004) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x0, 0x268, 0x300, 0x2a0, 0x268, 0x3b0, 0x460, 0x460, 0x3b0, 0x460, 0x9, 0x0, {[{{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xffffffff], [0xff, 0x0, 0xff, 0xffffffff], 'nicvf0\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x0, 0xa, 0x1, 0x10}, 0x0, 0x240, 0x2a0, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x80000000, 0xb, 0x0, 0x3, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x2e}, [0xffffff00, 0xffffff00, 0xffffff00, 0xffffffff], 0x4e20, 0x4e23, 0x4e22, 0x4e20, 0xfffff801, 0x883, 0x4, 0x0, 0x10001}}}, {{@ipv6={@private2, @remote, [0x0, 0xffffff00], [], 'ip6gretap0\x00', 'ip6_vti0\x00', {0xff}}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48004}, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x20000023893) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x400448c9, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 9.810004847s ago: executing program 7 (id=4109): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x103001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r2, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) mmap(&(0x7f0000ed2000/0x4000)=nil, 0x4000, 0x2000000, 0x10010, 0xffffffffffffffff, 0xfffff000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x404, &(0x7f0000002140)=ANY=[@ANYBLOB='ft=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "60000100", "9de66ebc3914c06f0f109088d190e700", '\x00', "f8dde5bf3eba23db"}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000540)={0x1c, 0x8, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000010) 9.6825932s ago: executing program 3 (id=4110): syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000340)={0x6, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000380)={r1, 0x8}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) r5 = socket(0x2b, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) prlimit64(0x0, 0xe, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x7, @remote, 0x2023}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80002, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) 8.752643612s ago: executing program 3 (id=4112): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18) getegid() fstat(r2, &(0x7f0000000080)) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/dev_mcast\x00') pread64(r5, &(0x7f0000000000)=""/198, 0xc6, 0x591f) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000200)={0x0, 0x1, 0x0, 0xff02, "4620f63a4e6b5c9b4410b99e0e549fcfdeb92566761ad1c34ca4a1abe476fa96"}) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x10040) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'dummy0\x00'}) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) ioctl$EVIOCGREP(r4, 0x80084503, &(0x7f0000001dc0)=""/4096) r10 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x1000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r9, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, r10}, './file0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000220400018095070000fb8178242b7787d1a80000030e000100"], 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 7.963014668s ago: executing program 3 (id=4114): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0xc04c000}, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x0, 0x1}, 0x8) (fail_nth: 1) 7.821774844s ago: executing program 7 (id=4115): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f0000005440)={0xa0, 0x8000000000000001, 0x0, {{0x6, 0x2, 0x8001, 0xfffffffffffffff8, 0x10, 0xffffffff, {0x4, 0x4, 0x7, 0xa78, 0x7, 0x6, 0xffffff60, 0x1, 0x401, 0xc000, 0x2, 0x0, 0x0, 0x7, 0xfffffff8}}, {0x0, 0x14}}}, 0xa0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0xc04c000}, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x0, 0x1}, 0x8) 7.718092227s ago: executing program 0 (id=4116): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) syz_open_dev$radio(&(0x7f00000000c0), 0x0, 0x2) fsopen(&(0x7f0000000200)='jffs2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$kcm(0x10, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(0xffffffffffffffff, 0x3b87, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x5c5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4, 0x100000}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) 7.610932286s ago: executing program 3 (id=4117): r0 = syz_open_dev$midi(&(0x7f0000000000), 0x1000000, 0x5bb880) r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc262, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x2003) r4 = syz_clone(0x20042400, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0) ptrace(0x4206, r4) ptrace(0x8, r4) ptrace(0x4207, r4) fchdir(r2) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) unshare(0x22020600) setuid(0xee01) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r5}, 0x8) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045730, 0x0) 7.006116584s ago: executing program 7 (id=4118): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x24000844}, 0x40000) sendmsg$nl_xfrm(r1, 0x0, 0x4000) socket$inet6_sctp(0xa, 0x1, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000300)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10000, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r5, 0x40806685, &(0x7f0000000c40)={0x1, [{0x1, 0x100000, 0xfff, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x2, 0x0, 0x1, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x7f, 0x0}, {0x3, 0x0, 0x2, 0x0}, {0x1, 0x0, 0xd, 0x0}, {0x0, 0x0, 0x6, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x1, 0x0, 0xff, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x2, 0x0, 0x10000, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x5, 0x0}]}) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="1400000016004163d25a80648c2594f91724fc60", 0x14}], 0x1}, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a0000004000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="000000800000000080000000006e"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x2000000000000366, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000100), 0x0, 0x2) 5.971954885s ago: executing program 0 (id=4119): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44004) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x0, 0x268, 0x300, 0x2a0, 0x268, 0x3b0, 0x460, 0x460, 0x3b0, 0x460, 0x9, 0x0, {[{{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xffffffff], [0xff, 0x0, 0xff, 0xffffffff], 'nicvf0\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x0, 0xa, 0x1, 0x10}, 0x0, 0x240, 0x2a0, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x80000000, 0xb, 0x0, 0x3, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x2e}, [0xffffff00, 0xffffff00, 0xffffff00, 0xffffffff], 0x4e20, 0x4e23, 0x4e22, 0x4e20, 0xfffff801, 0x883, 0x4, 0x0, 0x10001}}}, {{@ipv6={@private2, @remote, [0x0, 0xffffff00], [], 'ip6gretap0\x00', 'ip6_vti0\x00', {0xff}}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48004}, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x20000023893) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x400448c9, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 5.91938432s ago: executing program 6 (id=4120): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) ioprio_get$pid(0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = fcntl$getown(r0, 0x9) sched_getscheduler(r1) 5.211306915s ago: executing program 9 (id=4121): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_settime(0x7ffffffff000, &(0x7f0000000040)={0x77359400}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f00000013c0)) sendmmsg$unix(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="14000017000000000100000001000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x40044}}], 0x1, 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=[@cred={{0x1c}}], 0x20, 0x40044}}], 0x1, 0x4) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x4048000}, 0x880) getdents64(r3, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 5.09902917s ago: executing program 6 (id=4122): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x103001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r2, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) mmap(&(0x7f0000ed2000/0x4000)=nil, 0x4000, 0x2000000, 0x10010, 0xffffffffffffffff, 0xfffff000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x404, &(0x7f0000002140)=ANY=[@ANYBLOB='ft=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000540)={0x1c, 0x8, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000010) 4.481989061s ago: executing program 0 (id=4123): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xf, 0xe, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100}, 0x94) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r3, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000}, 0x5}], 0x40001af, 0x12122, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r1], 0x48) setreuid(0xee01, 0xee01) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r5 = fanotify_init(0x200, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) readv(r5, &(0x7f0000000200)=[{&(0x7f0000000000)=""/182, 0xb6}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000a40000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a31000000005c000000060a010400000000000000000100000008000b4000000000340004803000018008000100636d70002400028008000140000000011000038009000100efbb17b79900000008000240000001000900010073797a30"], 0xd0}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 4.098906003s ago: executing program 9 (id=4124): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES8], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0003040000000403013cbc29eb1b37d923e87abd70f3bcdc05635cba949b0a1d06461772d539429b9d2ded2e9a31fac52ce47584d3d37e58662fd59c2a335f41016dfe921129e9920a09c54fe0dcd80385e7e6b9658f5a7a04fc80d26e0dfca4e2965e7e0be1ab8c9e7e55ef72d9b63a66faa834054e53752bae7b22ad4c9c4799f07d0bed3db0c8ad6758cd906df61752b56a54a07379c54229b407e6f8b0a46f93d1c536e1accb1875006a47ce537a066b2d02c5cd8c94d33d353a88991ccf13f75113d316eca1bfefff8872b29ba91db254b16491a3f532224fa9f3cacb01ed98c25f01d5874ab7e9c8246600000000"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$MSR(0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x18, 0x8001, 0x0, 0x9, 0x0, 0xe, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f000075f000/0x4000)=nil) memfd_create(0x0, 0x3) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) socket$tipc(0x1e, 0x2, 0x0) 3.531897996s ago: executing program 6 (id=4125): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000040), 0x4) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb173, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x3b, 0x3, 0x2, "4749570000000000000000000e160ade00000000000f00", 0x38414261}) 2.807156065s ago: executing program 6 (id=4126): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x103001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r2, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) mmap(&(0x7f0000ed2000/0x4000)=nil, 0x4000, 0x2000000, 0x10010, 0xffffffffffffffff, 0xfffff000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x404, &(0x7f0000002140)=ANY=[@ANYBLOB='ft=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "60000100", "9de66ebc3914c06f0f109088d190e700", '\x00', "f8dde5bf3eba23db"}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000540)={0x1c, 0x8, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000010) 2.780240586s ago: executing program 0 (id=4127): socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001180)={0xa, {"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", 0x1000}}, 0x1006) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000013c0)=ANY=[@ANYBLOB=' \x00\x00\x00v\x00'], 0x20}}, 0x0) r4 = socket(0x840000000002, 0x3, 0xff) connect$inet(r4, &(0x7f0000000540)={0x2, 0x4e22, @remote}, 0x6b) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 2.213310678s ago: executing program 6 (id=4128): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r0 = syz_io_uring_setup(0x1110, &(0x7f0000000240)={0x0, 0xdb9c, 0x800, 0x10000000, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x3, 0x8000000000000001, 0x0, 0x40001, 0x5, 0x9ed8823284be87d3}) io_uring_enter(r0, 0x47f6, 0x0, 0x20, 0x0, 0x0) 2.045105546s ago: executing program 3 (id=4129): socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc010) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"}) r2 = syz_open_pts(r1, 0x0) r3 = dup(r2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x3) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r3, 0x4004e502, &(0x7f0000000040)=0x5) 1.782879628s ago: executing program 0 (id=4130): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) syz_open_dev$radio(&(0x7f00000000c0), 0x0, 0x2) fsopen(&(0x7f0000000200)='jffs2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(0xffffffffffffffff, 0x3b87, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x5c5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4, 0x100000}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) 1.781830484s ago: executing program 6 (id=4131): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x10010, r2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r5, 0x541c, &(0x7f0000000040)={0x5, 0x745, 0x5, 0xc262, 0x9}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="370000001000010000000000000000000000000a78000000060a0b04000000000000000002000000500004804c00018011000100666c6f775f6f66666c6f616400000000340002800900010073797a30000000000900010073797a30000000000900010073797a30000000000900010073797a32000000000900010073797a300000000008000a7f61d68f0acb6d69001100010000000000000000000300000a"], 0xa0}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, r8, &(0x7f0000000180)="282fa8c2", 0x4, 0x5}]) 367.454419ms ago: executing program 3 (id=4132): syz_init_net_socket$ax25(0x3, 0x5, 0xc4) writev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10089}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getrlimit(0x6, &(0x7f0000000000)) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000002c0)=0x2, 0xb, 0x2, &(0x7f0000000300)={0x77359400}, &(0x7f00000004c0)=0x1, 0x2) 302.772315ms ago: executing program 9 (id=4133): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x5366b55936d99625) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000040)={0x100f8, 0x0, 0x601, 0xffffffff}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) socket$packet(0x11, 0x3, 0x300) r5 = openat$selinux_validatetrans(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$selinux_validatetrans(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB='system_u:object_r:croWtab_exec_t:s0 system_u:object_r:netutils_exec_t:s0 00000000000000003360 /usr/sbin/cups-browsed\x00'], 0x75) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ntfs3\x00', 0x1000080, 0x0) 0s ago: executing program 7 (id=4134): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_settime(0x7ffffffff000, &(0x7f0000000040)={0x77359400}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f00000013c0)) sendmmsg$unix(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="14000017000000000100000001000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x40044}}], 0x1, 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=[@cred={{0x1c}}], 0x20, 0x40044}}], 0x1, 0x4) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x4048000}, 0x880) getdents64(r3, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) kernel console output (not intermixed with test programs): ave_1: left promiscuous mode [ 1209.532466][T16830] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.545194][T16830] bridge_slave_0: left allmulticast mode [ 1209.551838][T16830] bridge_slave_0: left promiscuous mode [ 1209.557551][T16830] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.584274][T16830] bridge_slave_1: left allmulticast mode [ 1209.589914][T16830] bridge_slave_1: left promiscuous mode [ 1209.597057][T16830] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.614324][T16830] bridge_slave_0: left allmulticast mode [ 1209.619958][T16830] bridge_slave_0: left promiscuous mode [ 1209.626210][T16830] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.639436][T16830] bridge_slave_0: left allmulticast mode [ 1209.645190][T16830] bridge_slave_0: left promiscuous mode [ 1209.653114][T16830] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.822221][ T5833] Bluetooth: hci9: command tx timeout [ 1210.188498][T16830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1210.198808][T16830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1210.208776][T16830] bond0 (unregistering): Released all slaves [ 1210.455054][T16830] team0: Port device bond0 removed [ 1210.461330][T16830] bond0 (unregistering): Released all slaves [ 1210.686632][T16830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1210.696479][T16830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1210.706510][T16830] bond0 (unregistering): Released all slaves [ 1210.972320][T16830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1210.982333][T16830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1210.992313][T16830] bond0 (unregistering): Released all slaves [ 1211.058573][T17990] veth0_macvtap: entered promiscuous mode [ 1211.076438][T17990] veth1_macvtap: entered promiscuous mode [ 1211.222888][T16830] tipc: Left network mode [ 1211.275372][T16830] tipc: Left network mode [ 1211.294524][T17985] veth0_vlan: entered promiscuous mode [ 1211.328250][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1211.333564][T17990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1211.344912][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1211.401360][T17990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1211.474854][ T3540] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.492303][ T3540] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.502213][T17992] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1211.515388][T17985] veth1_vlan: entered promiscuous mode [ 1211.540623][ T3540] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.566631][T17992] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1211.598509][ T3540] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.627225][T17992] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1211.635166][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1211.645861][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1211.671054][T17992] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1211.994081][T17995] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1212.026351][T17995] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1212.047225][T17995] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1212.201968][T18170] geneve2: entered promiscuous mode [ 1212.238797][ T34] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 40557 - 0 [ 1212.475192][T17995] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1212.513321][ T34] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 40557 - 0 [ 1212.551996][T17985] veth0_macvtap: entered promiscuous mode [ 1212.559605][ T34] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 40557 - 0 [ 1212.573333][ T34] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 40557 - 0 [ 1212.617127][T17985] veth1_macvtap: entered promiscuous mode [ 1212.633173][ T3559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1212.648708][ T3559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1212.746721][T17985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1212.798943][ T3559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1212.816043][ T3559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1212.817456][T17985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1212.945928][ T1090] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.965762][ T1090] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.997233][ T1090] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.028242][ T1090] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.067159][T16830] hsr_slave_0: left promiscuous mode [ 1213.084714][T16830] hsr_slave_1: left promiscuous mode [ 1213.096415][T16830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1213.104162][T16830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1213.112589][T16830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1213.120017][T16830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1213.147879][T16830] hsr_slave_0: left promiscuous mode [ 1213.187753][T16830] hsr_slave_0: left promiscuous mode [ 1213.195949][T16830] hsr_slave_1: left promiscuous mode [ 1213.201974][T16830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1213.209583][T16830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1213.217924][T16830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1213.237759][T16830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1213.261051][T16830] hsr_slave_0: left promiscuous mode [ 1213.267004][T16830] hsr_slave_1: left promiscuous mode [ 1213.277191][T16830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1213.285221][T16830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1213.293646][T16830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1213.303254][T16830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1213.491511][T16830] veth1_macvtap: left promiscuous mode [ 1213.497765][T16830] veth0_macvtap: left allmulticast mode [ 1213.504342][T16830] veth0_macvtap: left promiscuous mode [ 1213.511005][T16830] veth1_vlan: left promiscuous mode [ 1213.516658][T16830] veth0_vlan: left promiscuous mode [ 1213.525414][T18207] FAULT_INJECTION: forcing a failure. [ 1213.525414][T18207] name failslab, interval 1, probability 0, space 0, times 0 [ 1213.539059][T16830] veth1_macvtap: left promiscuous mode [ 1213.545106][T16830] veth0_macvtap: left allmulticast mode [ 1213.550656][T18207] CPU: 1 UID: 0 PID: 18207 Comm: syz.9.3396 Tainted: G L syzkaller #0 PREEMPT(full) [ 1213.550682][T18207] Tainted: [L]=SOFTLOCKUP [ 1213.550688][T18207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1213.550699][T18207] Call Trace: [ 1213.550705][T18207] [ 1213.550713][T18207] dump_stack_lvl+0x16c/0x1f0 [ 1213.550741][T18207] should_fail_ex+0x512/0x640 [ 1213.550766][T18207] ? __kmalloc_noprof+0xca/0x910 [ 1213.550795][T18207] should_failslab+0xc2/0x120 [ 1213.550820][T18207] __kmalloc_noprof+0xeb/0x910 [ 1213.550846][T18207] ? io_cache_alloc_new+0x45/0xf0 [ 1213.550873][T18207] ? io_cache_alloc_new+0x45/0xf0 [ 1213.550894][T18207] io_cache_alloc_new+0x45/0xf0 [ 1213.550917][T18207] __io_prep_rw+0x21d/0x1060 [ 1213.550944][T18207] ? __pfx___io_prep_rw+0x10/0x10 [ 1213.550968][T18207] ? __pfx_io_arm_apoll+0x10/0x10 [ 1213.550988][T18207] ? __pfx_io_async_queue_proc+0x10/0x10 [ 1213.551013][T18207] io_prep_rw+0x76/0x2c0 [ 1213.551036][T18207] ? __pfx_io_prep_rw+0x10/0x10 [ 1213.551061][T18207] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1213.551088][T18207] io_submit_sqes+0xa14/0x28e0 [ 1213.551123][T18207] __do_sys_io_uring_enter+0xd6b/0x1630 [ 1213.551147][T18207] ? __fget_files+0x20e/0x3c0 [ 1213.551171][T18207] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 1213.551194][T18207] ? fput+0x70/0xf0 [ 1213.551210][T18207] ? ksys_write+0x1ac/0x250 [ 1213.551232][T18207] ? __pfx_ksys_write+0x10/0x10 [ 1213.551261][T18207] do_syscall_64+0xcd/0xf80 [ 1213.551285][T18207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1213.551304][T18207] RIP: 0033:0x7f3f9d98f749 [ 1213.551319][T18207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1213.551343][T18207] RSP: 002b:00007f3f9e78f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1213.551361][T18207] RAX: ffffffffffffffda RBX: 00007f3f9dbe5fa0 RCX: 00007f3f9d98f749 [ 1213.551373][T18207] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 1213.551384][T18207] RBP: 00007f3f9e78f090 R08: 0000000000000000 R09: 0000000000000000 [ 1213.551395][T18207] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 1213.551406][T18207] R13: 00007f3f9dbe6038 R14: 00007f3f9dbe5fa0 R15: 00007ffef73111b8 [ 1213.551434][T18207] [ 1213.778651][T16830] veth0_macvtap: left promiscuous mode [ 1213.784421][T16830] veth1_vlan: left promiscuous mode [ 1213.789773][T16830] veth0_vlan: left promiscuous mode [ 1213.802720][T16830] veth1_macvtap: left promiscuous mode [ 1213.818349][T16830] veth0_macvtap: left promiscuous mode [ 1213.834620][T16830] veth1_vlan: left promiscuous mode [ 1213.862765][T16830] veth0_vlan: left promiscuous mode [ 1213.881952][T16830] veth1_macvtap: left promiscuous mode [ 1213.888005][T16830] veth0_macvtap: left promiscuous mode [ 1213.896582][T16830] veth1_vlan: left promiscuous mode [ 1213.909591][T16830] veth0_vlan: left promiscuous mode [ 1215.357330][T16830] team0 (unregistering): Port device team_slave_1 removed [ 1215.397967][T16830] team0 (unregistering): Port device team_slave_0 removed [ 1215.649848][T18240] gfs2: error -5 reading superblock [ 1216.842468][T16830] pimreg (unregistering): left allmulticast mode [ 1218.376720][T16830] pimreg (unregistering): left allmulticast mode [ 1218.643693][T16830] team0 (unregistering): Port device team_slave_1 removed [ 1218.677239][T16830] team0 (unregistering): Port device team_slave_0 removed [ 1219.496132][T16830] pimreg (unregistering): left allmulticast mode [ 1219.764845][T16830] team0 (unregistering): Port device team_slave_1 removed [ 1219.794720][T16830] team0 (unregistering): Port device team_slave_0 removed [ 1220.066497][T18263] pimreg: entered allmulticast mode [ 1220.250197][ T3540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1220.278986][ T3540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1220.373516][T17992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1220.575348][T18268] geneve2: entered promiscuous mode [ 1220.635293][T11263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1220.698616][ T3540] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 58436 - 0 [ 1220.746091][T11263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1220.792853][ T3540] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 58436 - 0 [ 1220.815726][ T3540] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 58436 - 0 [ 1220.837804][ T3540] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 58436 - 0 [ 1220.895468][T17995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1220.946100][T17992] 8021q: adding VLAN 0 to HW filter on device team0 [ 1221.032633][T17995] 8021q: adding VLAN 0 to HW filter on device team0 [ 1221.052487][T11263] bridge0: port 1(bridge_slave_0) entered blocking state [ 1221.059609][T11263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1221.112125][T11263] bridge0: port 2(bridge_slave_1) entered blocking state [ 1221.119272][T11263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1221.160413][T11263] bridge0: port 1(bridge_slave_0) entered blocking state [ 1221.167550][T11263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1221.223517][T11263] bridge0: port 2(bridge_slave_1) entered blocking state [ 1221.230707][T11263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1222.644999][T17995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1222.686477][T17992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1222.704366][T16830] IPVS: stop unused estimator thread 0... [ 1222.724573][T16830] IPVS: stop unused estimator thread 0... [ 1222.757986][T16830] IPVS: stop unused estimator thread 0... [ 1222.787327][T16830] IPVS: stop unused estimator thread 0... [ 1222.819017][T17995] veth0_vlan: entered promiscuous mode [ 1222.859854][T17995] veth1_vlan: entered promiscuous mode [ 1222.957993][T17995] veth0_macvtap: entered promiscuous mode [ 1223.031849][T17995] veth1_macvtap: entered promiscuous mode [ 1223.126156][T17995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1223.241113][T17995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1223.351604][ T1162] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.419686][ T1162] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.462839][ T1162] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.484335][ T1162] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.780850][T18329] mac80211_hwsim hwsim24 4: renamed from wlan1 (while UP) [ 1223.920286][ T30] audit: type=1400 audit(1766921925.006:739): avc: denied { block_suspend } for pid=18321 comm="syz.9.3411" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1224.088235][T15985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1224.114087][T15985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1224.133559][T17992] veth0_vlan: entered promiscuous mode [ 1224.174129][ T4468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1224.184786][T17992] veth1_vlan: entered promiscuous mode [ 1224.192272][ T4468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1224.247403][T17992] veth0_macvtap: entered promiscuous mode [ 1224.269770][T17992] veth1_macvtap: entered promiscuous mode [ 1224.309185][T17992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1224.334539][T17992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1224.568968][T15985] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.577927][T15985] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.589821][T15985] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.672758][T18345] lo speed is unknown, defaulting to 1000 [ 1224.679162][T18345] lo speed is unknown, defaulting to 1000 [ 1224.701576][T18345] lo speed is unknown, defaulting to 1000 [ 1224.736444][T18345] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1224.797281][T18345] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1224.967012][T11263] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.992827][T18345] lo speed is unknown, defaulting to 1000 [ 1225.000243][T18345] lo speed is unknown, defaulting to 1000 [ 1225.007419][T18345] lo speed is unknown, defaulting to 1000 [ 1225.014827][T18345] lo speed is unknown, defaulting to 1000 [ 1225.089908][T18345] lo speed is unknown, defaulting to 1000 [ 1225.247360][ T3744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1225.275434][ T3744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1225.300601][ T30] audit: type=1400 audit(1766921926.386:740): avc: denied { ioctl } for pid=18354 comm="syz.3.3414" path="socket:[88409]" dev="sockfs" ino=88409 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1225.481771][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1225.509281][T18360] comedi comedi3: bad chanlist[0]=0xfffffffd chan=65533 range length=1 [ 1225.554185][T18362] netlink: 'syz.6.3412': attribute type 1 has an invalid length. [ 1225.996460][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1227.908464][ T5929] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1228.790235][T17452] Bluetooth: hci9: command 0x0405 tx timeout [ 1228.884309][T18407] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1228.959948][T17452] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1228.971012][T17452] CPU: 0 UID: 0 PID: 17452 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 1228.971032][T17452] Tainted: [L]=SOFTLOCKUP [ 1228.971037][T17452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1228.971045][T17452] Workqueue: hci1 hci_rx_work [ 1228.971061][T17452] Call Trace: [ 1228.971067][T17452] [ 1228.971071][T17452] dump_stack_lvl+0x16c/0x1f0 [ 1228.971088][T17452] sysfs_warn_dup+0x7f/0xa0 [ 1228.971103][T17452] sysfs_create_dir_ns+0x24b/0x2b0 [ 1228.971116][T17452] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1228.971129][T17452] ? find_held_lock+0x2b/0x80 [ 1228.971149][T17452] ? do_raw_spin_unlock+0x172/0x230 [ 1228.971165][T17452] kobject_add_internal+0x2c4/0x9d0 [ 1228.971184][T17452] kobject_add+0x16e/0x240 [ 1228.971198][T17452] ? __pfx_kobject_add+0x10/0x10 [ 1228.971216][T17452] ? kobject_put+0xaf/0x6f0 [ 1228.971229][T17452] ? _raw_spin_unlock+0x28/0x50 [ 1228.971245][T17452] device_add+0x288/0x1980 [ 1228.971259][T17452] ? __pfx_dev_set_name+0x10/0x10 [ 1228.971272][T17452] ? __pfx_device_add+0x10/0x10 [ 1228.971284][T17452] ? mgmt_send_event_skb+0x2fb/0x460 [ 1228.971301][T17452] hci_conn_add_sysfs+0x1a8/0x260 [ 1228.971316][T17452] le_conn_complete_evt+0x11ed/0x1fa0 [ 1228.971333][T17452] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1228.971350][T17452] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 1228.971363][T17452] ? skb_pull_data+0x166/0x210 [ 1228.971376][T17452] hci_le_meta_evt+0x357/0x610 [ 1228.971389][T17452] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 1228.971404][T17452] hci_event_packet+0x685/0x1210 [ 1228.971417][T17452] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1228.971430][T17452] ? __pfx_hci_event_packet+0x10/0x10 [ 1228.971444][T17452] ? kcov_remote_start+0x399/0x680 [ 1228.971457][T17452] ? lockdep_hardirqs_on+0x7c/0x110 [ 1228.971474][T17452] hci_rx_work+0x2c9/0x1020 [ 1228.971496][T17452] process_one_work+0x9ba/0x1b20 [ 1228.971519][T17452] ? __pfx_process_one_work+0x10/0x10 [ 1228.971539][T17452] ? assign_work+0x1a0/0x250 [ 1228.971555][T17452] worker_thread+0x6c8/0xf10 [ 1228.971575][T17452] ? __kthread_parkme+0x19e/0x250 [ 1228.971587][T17452] ? __pfx_worker_thread+0x10/0x10 [ 1228.971600][T17452] kthread+0x3c5/0x780 [ 1228.971614][T17452] ? __pfx_kthread+0x10/0x10 [ 1228.971627][T17452] ? rcu_is_watching+0x12/0xc0 [ 1228.971638][T17452] ? __pfx_kthread+0x10/0x10 [ 1228.971651][T17452] ret_from_fork+0x983/0xb10 [ 1228.971665][T17452] ? __pfx_ret_from_fork+0x10/0x10 [ 1228.971678][T17452] ? __switch_to+0x7af/0x10d0 [ 1228.971692][T17452] ? __pfx_kthread+0x10/0x10 [ 1228.971705][T17452] ret_from_fork_asm+0x1a/0x30 [ 1228.971729][T17452] [ 1228.971822][T17452] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1229.240636][T17452] Bluetooth: hci1: failed to register connection device [ 1229.532623][T18423] FAULT_INJECTION: forcing a failure. [ 1229.532623][T18423] name failslab, interval 1, probability 0, space 0, times 0 [ 1229.595438][T18423] CPU: 0 UID: 0 PID: 18423 Comm: syz.7.3426 Tainted: G L syzkaller #0 PREEMPT(full) [ 1229.595469][T18423] Tainted: [L]=SOFTLOCKUP [ 1229.595476][T18423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1229.595487][T18423] Call Trace: [ 1229.595494][T18423] [ 1229.595502][T18423] dump_stack_lvl+0x16c/0x1f0 [ 1229.595529][T18423] should_fail_ex+0x512/0x640 [ 1229.595554][T18423] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1229.595584][T18423] should_failslab+0xc2/0x120 [ 1229.595608][T18423] __kmalloc_cache_noprof+0x80/0x800 [ 1229.595636][T18423] ? fuse_lookup_name+0x19f/0x780 [ 1229.595668][T18423] ? fuse_lookup_name+0x19f/0x780 [ 1229.595693][T18423] fuse_lookup_name+0x19f/0x780 [ 1229.595721][T18423] ? fuse_lock_inode+0xd2/0x110 [ 1229.595741][T18423] ? __pfx_fuse_lookup_name+0x10/0x10 [ 1229.595768][T18423] ? __pfx___mutex_lock+0x10/0x10 [ 1229.595822][T18423] fuse_lookup+0x26a/0x560 [ 1229.595850][T18423] ? __pfx_fuse_lookup+0x10/0x10 [ 1229.595893][T18423] ? lockdep_init_map_type+0x5c/0x270 [ 1229.595922][T18423] __lookup_slow+0x251/0x460 [ 1229.595943][T18423] ? __pfx___lookup_slow+0x10/0x10 [ 1229.595989][T18423] lookup_slow+0x50/0x70 [ 1229.596008][T18423] path_lookupat+0x5e9/0xc40 [ 1229.596030][T18423] ? kasan_save_stack+0x42/0x60 [ 1229.596049][T18423] ? kasan_save_stack+0x33/0x60 [ 1229.596073][T18423] filename_lookup+0x224/0x5f0 [ 1229.596099][T18423] ? __pfx_filename_lookup+0x10/0x10 [ 1229.596157][T18423] do_linkat+0x14c/0x5d0 [ 1229.596187][T18423] ? __pfx_do_linkat+0x10/0x10 [ 1229.596212][T18423] ? strncpy_from_user+0x203/0x2e0 [ 1229.596240][T18423] ? getname_flags.part.0+0x1c5/0x550 [ 1229.596266][T18423] __x64_sys_link+0x7d/0xa0 [ 1229.596292][T18423] do_syscall_64+0xcd/0xf80 [ 1229.596316][T18423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1229.596334][T18423] RIP: 0033:0x7f69eed8f749 [ 1229.596348][T18423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1229.596359][T18423] RSP: 002b:00007f69ecff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 1229.596371][T18423] RAX: ffffffffffffffda RBX: 00007f69eefe6090 RCX: 00007f69eed8f749 [ 1229.596379][T18423] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000200000000280 [ 1229.596386][T18423] RBP: 00007f69ecff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1229.596393][T18423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1229.596399][T18423] R13: 00007f69eefe6128 R14: 00007f69eefe6090 R15: 00007fff4512abb8 [ 1229.596416][T18423] [ 1231.137805][T18424] lo speed is unknown, defaulting to 1000 [ 1231.261159][ T5833] Bluetooth: hci1: command 0x2016 tx timeout [ 1232.630912][T18474] FAULT_INJECTION: forcing a failure. [ 1232.630912][T18474] name failslab, interval 1, probability 0, space 0, times 0 [ 1232.659013][T18474] CPU: 0 UID: 0 PID: 18474 Comm: syz.9.3434 Tainted: G L syzkaller #0 PREEMPT(full) [ 1232.659044][T18474] Tainted: [L]=SOFTLOCKUP [ 1232.659051][T18474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1232.659063][T18474] Call Trace: [ 1232.659069][T18474] [ 1232.659077][T18474] dump_stack_lvl+0x16c/0x1f0 [ 1232.659105][T18474] should_fail_ex+0x512/0x640 [ 1232.659132][T18474] ? fs_reclaim_acquire+0xae/0x150 [ 1232.659159][T18474] should_failslab+0xc2/0x120 [ 1232.659184][T18474] __kmalloc_noprof+0xeb/0x910 [ 1232.659212][T18474] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1232.659242][T18474] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1232.659266][T18474] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1232.659293][T18474] ? tomoyo_profile+0x47/0x60 [ 1232.659322][T18474] tomoyo_path_number_perm+0x245/0x580 [ 1232.659343][T18474] ? tomoyo_path_number_perm+0x237/0x580 [ 1232.659367][T18474] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1232.659391][T18474] ? find_held_lock+0x2b/0x80 [ 1232.659443][T18474] ? find_held_lock+0x2b/0x80 [ 1232.659468][T18474] ? hook_file_ioctl_common+0x144/0x410 [ 1232.659501][T18474] ? __fget_files+0x20e/0x3c0 [ 1232.659531][T18474] security_file_ioctl+0x9b/0x240 [ 1232.659562][T18474] __x64_sys_ioctl+0xb7/0x210 [ 1232.659587][T18474] do_syscall_64+0xcd/0xf80 [ 1232.659612][T18474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1232.659632][T18474] RIP: 0033:0x7f3f9d98f749 [ 1232.659648][T18474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1232.659665][T18474] RSP: 002b:00007f3f9e78f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1232.659684][T18474] RAX: ffffffffffffffda RBX: 00007f3f9dbe5fa0 RCX: 00007f3f9d98f749 [ 1232.659698][T18474] RDX: 0000000000000008 RSI: 00000000400455cb RDI: 0000000000000003 [ 1232.659710][T18474] RBP: 00007f3f9e78f090 R08: 0000000000000000 R09: 0000000000000000 [ 1232.659722][T18474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1232.659733][T18474] R13: 00007f3f9dbe6038 R14: 00007f3f9dbe5fa0 R15: 00007ffef73111b8 [ 1232.659762][T18474] [ 1232.659771][T18474] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1232.901915][T18478] C: renamed from team_slave_0 (while UP) [ 1232.946051][T18478] netlink: 'syz.7.3435': attribute type 2 has an invalid length. [ 1232.964316][T18478] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3435'. [ 1233.000201][T18478] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1233.344084][T17452] Bluetooth: hci1: command 0x2016 tx timeout [ 1233.590428][ T5935] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 1233.803754][ T5935] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1234.804463][ T5935] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1234.863826][ T5935] usb 7-1: New USB device found, idVendor=1b96, idProduct=0005, bcdDevice= 0.00 [ 1234.921258][ T5935] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.960660][ T5935] usb 7-1: config 0 descriptor?? [ 1236.273777][T18531] netlink: 'syz.8.3444': attribute type 1 has an invalid length. [ 1237.610193][ T5929] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 1237.782188][ T5929] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1237.801800][ T5929] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1237.850161][ T5929] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1237.887770][ T5929] usb 4-1: config 1 has no interface number 1 [ 1237.911680][ T5929] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1237.961195][ T5929] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1238.021285][ T5929] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1238.067309][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.104103][ T5929] usb 4-1: Product: syz [ 1238.122779][ T5929] usb 4-1: Manufacturer: syz [ 1238.148063][ T5929] usb 4-1: SerialNumber: syz [ 1238.479274][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.516624][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.109816][ T30] audit: type=1400 audit(1766921939.926:741): avc: denied { read } for pid=18577 comm="syz.9.3455" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1239.510135][ T30] audit: type=1400 audit(1766921939.926:742): avc: denied { open } for pid=18577 comm="syz.9.3455" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1239.677950][T18583] bridge0: port 1(bridge_slave_0) entered disabled state [ 1239.685400][T18583] netlink: 'syz.7.3456': attribute type 3 has an invalid length. [ 1239.693199][T18583] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1240.576979][ T5929] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1240.589496][ T5929] usb 4-1: MIDIStreaming interface descriptor not found [ 1240.622836][ T5935] usbhid 7-1:0.0: can't add hid device: -71 [ 1240.628820][ T5935] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1240.704912][ T5935] usb 7-1: USB disconnect, device number 2 [ 1240.730426][ T5929] usb 4-1: USB disconnect, device number 75 [ 1240.810573][T18599] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3458'. [ 1240.859963][T18604] faux_driver vkms: [drm] Unknown color mode 65535; guessing buffer size. [ 1240.885030][T18605] lo speed is unknown, defaulting to 1000 [ 1240.902536][T18605] lo speed is unknown, defaulting to 1000 [ 1240.931187][T18605] lo speed is unknown, defaulting to 1000 [ 1240.972042][T18610] udevd[18610]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1241.485953][T18605] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1241.608321][T18605] lo speed is unknown, defaulting to 1000 [ 1241.723805][T18605] lo speed is unknown, defaulting to 1000 [ 1241.731175][T18605] lo speed is unknown, defaulting to 1000 [ 1241.738329][T18605] lo speed is unknown, defaulting to 1000 [ 1242.295392][T18605] lo speed is unknown, defaulting to 1000 [ 1242.983969][T18636] netlink: 'syz.7.3464': attribute type 11 has an invalid length. [ 1245.524569][T18656] lo speed is unknown, defaulting to 1000 [ 1245.707615][T18668] fuse: Unknown parameter 'user' [ 1246.950407][ T30] audit: type=1400 audit(1766921947.996:743): avc: denied { write } for pid=18679 comm="syz.7.3474" path="socket:[90333]" dev="sockfs" ino=90333 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1249.337226][T18703] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3476'. [ 1249.412580][ T30] audit: type=1400 audit(1766921950.356:744): avc: denied { listen } for pid=18700 comm="syz.7.3476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1249.622649][ T30] audit: type=1400 audit(1766921950.376:745): avc: denied { search } for pid=18700 comm="syz.7.3476" name="/" dev="configfs" ino=1254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1249.692048][ T30] audit: type=1400 audit(1766921950.386:746): avc: denied { search } for pid=18700 comm="syz.7.3476" name="/" dev="configfs" ino=1254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1249.810134][ T6043] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1249.818226][ T30] audit: type=1400 audit(1766921950.386:747): avc: denied { read open } for pid=18700 comm="syz.7.3476" path="/" dev="configfs" ino=1254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1250.259456][ T6043] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1250.303465][ T6043] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1250.327475][ T6043] usb 9-1: can't read configurations, error -71 [ 1252.107992][ T30] audit: type=1400 audit(1766921953.186:748): avc: denied { ioctl } for pid=18739 comm="syz.3.3485" path="socket:[91557]" dev="sockfs" ino=91557 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1256.188306][T18752] geneve2: entered promiscuous mode [ 1256.209285][ T60] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 58590 - 0 [ 1256.218689][ T60] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 58590 - 0 [ 1256.227617][ T60] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 58590 - 0 [ 1256.236470][ T60] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 58590 - 0 [ 1256.560300][ T6249] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1258.724919][ T6043] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1259.187386][ T6043] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1259.213740][ T6043] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1259.225441][ T6043] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1259.235504][ T6043] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1259.244840][ T6043] usb 4-1: Manufacturer: syz [ 1259.253188][ T6043] usb 4-1: config 0 descriptor?? [ 1259.332954][ T6043] rc_core: IR keymap rc-hauppauge not found [ 1259.340380][ T6043] Registered IR keymap rc-empty [ 1259.347850][ T6043] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1259.365579][ T6043] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input30 [ 1259.792234][T18803] rc rc0: two consecutive events of type space [ 1259.832475][T18811] netlink: 6024 bytes leftover after parsing attributes in process `syz.6.3495'. [ 1259.996131][ T30] audit: type=1400 audit(1766921961.076:749): avc: denied { listen } for pid=18765 comm="syz.3.3489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1260.129209][ T30] audit: type=1400 audit(1766921961.126:750): avc: denied { accept } for pid=18765 comm="syz.3.3489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1260.225066][ T2974] nci: nci_rx_work: unknown MT 0x4 [ 1260.409612][ T30] audit: type=1400 audit(1766921961.486:751): avc: denied { bind } for pid=18821 comm="syz.9.3498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1260.492548][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1260.514505][ T30] audit: type=1400 audit(1766921961.506:752): avc: denied { listen } for pid=18821 comm="syz.9.3498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1260.578816][ T30] audit: type=1400 audit(1766921961.506:753): avc: denied { setopt } for pid=18821 comm="syz.9.3498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1260.605328][ T30] audit: type=1400 audit(1766921961.516:754): avc: denied { accept } for pid=18821 comm="syz.9.3498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1260.650587][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1260.658270][ T10] usb 7-1: config 1 has an invalid interface number: 137 but max is 0 [ 1260.675977][ T10] usb 7-1: config 1 has no interface number 0 [ 1260.690698][T17741] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 1260.693301][ T10] usb 7-1: config 1 interface 137 altsetting 4 bulk endpoint 0x6 has invalid maxpacket 545 [ 1260.724751][ T10] usb 7-1: config 1 interface 137 altsetting 4 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1260.744688][ T10] usb 7-1: config 1 interface 137 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 0 [ 1260.768837][ T10] usb 7-1: config 1 interface 137 has no altsetting 0 [ 1260.793491][ T10] usb 7-1: New USB device found, idVendor=0557, idProduct=2021, bcdDevice=74.1a [ 1260.818974][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.830838][ T10] usb 7-1: Product: syz [ 1260.837808][ T10] usb 7-1: Manufacturer: syz [ 1260.845333][ T10] usb 7-1: SerialNumber: syz [ 1260.867672][T18811] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1260.887001][T17741] usb 8-1: config 201 has an invalid interface number: 249 but max is 0 [ 1260.906844][T17741] usb 8-1: config 201 has an invalid descriptor of length 0, skipping remainder of the config [ 1260.968050][T17741] usb 8-1: config 201 has no interface number 0 [ 1261.019962][T17741] usb 8-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 1261.057660][T17741] usb 8-1: config 201 interface 249 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1261.095510][T17741] usb 8-1: config 201 interface 249 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1261.147890][T17741] usb 8-1: config 201 interface 249 has no altsetting 0 [ 1261.221038][T17741] usb 8-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 1261.235276][T17741] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.250231][T17741] usb 8-1: Product: syz [ 1261.254651][ T7060] usb 4-1: USB disconnect, device number 76 [ 1261.465590][T17741] usb 8-1: Manufacturer: syz [ 1261.476551][T17741] usb 8-1: SerialNumber: syz [ 1262.889222][T18806] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1262.993714][ T10] pl2303 7-1:1.137: required interrupt-in endpoint missing [ 1263.011188][ T10] usb 7-1: USB disconnect, device number 3 [ 1264.020544][T17741] ath6kl: Failed to submit usb control message: -71 [ 1264.037349][T17741] ath6kl: unable to send the bmi data to the device: -71 [ 1264.074328][T17741] ath6kl: Unable to send get target info: -71 [ 1264.103686][T17741] ath6kl: Failed to init ath6kl core: -71 [ 1264.115506][T17741] ath6kl_usb 8-1:201.249: probe with driver ath6kl_usb failed with error -71 [ 1264.424934][T17741] usb 8-1: USB disconnect, device number 2 [ 1265.940311][T18902] geneve2: entered promiscuous mode [ 1266.019085][T11261] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 41553 - 0 [ 1266.334897][T11261] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 41553 - 0 [ 1266.381373][T11261] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 41553 - 0 [ 1266.583041][T18755] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 41553 - 0 [ 1267.579083][T18937] mac80211_hwsim hwsim26 4: renamed from wlan1 (while UP) [ 1268.124555][T18944] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3521'. [ 1268.317440][T18944] lo speed is unknown, defaulting to 1000 [ 1269.535111][T18977] syzkaller0: entered promiscuous mode [ 1269.778456][T18977] syzkaller0: entered allmulticast mode [ 1270.196592][T18987] fuse: Unknown parameter 'user' [ 1273.390987][T19028] geneve2: entered promiscuous mode [ 1273.749576][ T4348] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 51185 - 0 [ 1273.759117][ T4348] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 51185 - 0 [ 1273.767996][ T4348] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 51185 - 0 [ 1273.780165][ T4348] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 51185 - 0 [ 1277.057157][T19077] fuse: Unknown parameter 'user' [ 1277.379104][ T30] audit: type=1400 audit(1766921978.456:755): avc: denied { setattr } for pid=19078 comm="syz.3.3547" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1277.410513][T19084] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3546'. [ 1277.755239][T19097] fuse: Unknown parameter 'user' [ 1280.500145][ T7060] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1280.669315][T19132] netlink: 'syz.6.3555': attribute type 6 has an invalid length. [ 1281.063634][ T7060] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1281.085185][ T7060] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1281.106573][ T7060] usb 8-1: config 0 has no interfaces? [ 1281.228147][ T7060] usb 8-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 1281.250071][ T7060] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.264975][ T7060] usb 8-1: Product: syz [ 1281.275478][ T7060] usb 8-1: Manufacturer: syz [ 1281.280475][ T7060] usb 8-1: SerialNumber: syz [ 1281.303206][ T7060] usb 8-1: config 0 descriptor?? [ 1281.527249][ T6249] usb 8-1: USB disconnect, device number 3 [ 1282.143426][T19155] netlink: 'syz.6.3557': attribute type 1 has an invalid length. [ 1282.787876][T19169] pimreg: entered allmulticast mode [ 1286.695610][T19206] JFS: discard option not supported on device [ 1286.708426][T19206] Mount JFS Failure: -22 [ 1286.717037][T19206] jfs_mount failed w/return code = -22 [ 1286.950333][ T5995] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1287.932543][ T5995] usb 8-1: Using ep0 maxpacket: 32 [ 1287.949278][ T5995] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1287.999858][ T5995] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1288.059634][ T5995] usb 8-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1288.117362][ T5995] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1288.137581][ T5995] usb 8-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1288.265484][ T5995] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.801775][ T5995] usb 8-1: config 0 descriptor?? [ 1288.930496][ T30] audit: type=1400 audit(1766921990.006:756): avc: denied { write } for pid=19232 comm="syz.6.3573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1289.222767][T19245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1289.234888][T19245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1289.252801][ T5995] hid-thrustmaster 0003:044F:B65D.000F: unknown main item tag 0x0 [ 1289.312068][ T5995] hid-thrustmaster 0003:044F:B65D.000F: unknown main item tag 0x0 [ 1289.386236][ T5995] hid-thrustmaster 0003:044F:B65D.000F: unknown main item tag 0x0 [ 1289.426593][ T5995] hid-thrustmaster 0003:044F:B65D.000F: unknown main item tag 0x0 [ 1289.460944][ T5995] hid-thrustmaster 0003:044F:B65D.000F: unknown main item tag 0x0 [ 1289.472033][T19215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1289.500752][ T5995] hid-thrustmaster 0003:044F:B65D.000F: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.7-1/input0 [ 1289.552865][ T5995] hid-thrustmaster 0003:044F:B65D.000F: Unexpected non-int endpoint [ 1289.580855][T19258] fuse: Unknown parameter 'user' [ 1289.596215][T19215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1289.790831][T19215] tipc: Enabling of bearer <õdp:syz1> rejected, media not registered [ 1290.085882][ C0] hid-thrustmaster 0003:044F:B65D.000F: URB to get model id failed with error -71 [ 1290.096326][ T5995] usb 8-1: USB disconnect, device number 4 [ 1290.160799][T19266] lo speed is unknown, defaulting to 1000 [ 1291.513725][T19282] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1291.523596][T19282] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1292.457614][T19291] netlink: 'syz.3.3580': attribute type 32 has an invalid length. [ 1293.084149][ T30] audit: type=1400 audit(1766921994.136:757): avc: denied { write } for pid=19302 comm="syz.8.3582" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1294.407485][ T30] audit: type=1800 audit(1766921995.486:758): pid=19328 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.3586" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1295.656891][T19336] comedi comedi1: dt2801: I/O port conflict (0xcff,2) [ 1297.563095][ T796] Bluetooth: (null): Too short H5 packet [ 1297.790317][ T796] Bluetooth: (null): Invalid header checksum [ 1297.816674][ T796] Bluetooth: (null): Invalid header checksum [ 1297.893387][ T796] Bluetooth: (null): Invalid header checksum [ 1297.899510][T17452] Bluetooth: hci9: unexpected cc 0x1005 length: 9 > 8 [ 1297.906373][T17452] Bluetooth: hci9: unexpected event for opcode 0x1005 [ 1297.921696][ T796] Bluetooth: (null): Invalid header checksum [ 1297.930163][ T796] Bluetooth: (null): Invalid header checksum [ 1297.936255][ T796] Bluetooth: (null): Invalid header checksum [ 1297.942492][ T796] Bluetooth: (null): Invalid header checksum [ 1298.247935][T19368] lo speed is unknown, defaulting to 1000 [ 1298.254835][T19374] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3595'. [ 1299.910715][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.918248][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.298625][ T30] audit: type=1800 audit(1766922002.376:759): pid=19414 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.3603" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1304.740166][ T5995] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1304.829823][T19460] PKCS7: Unknown OID: [4] (bad) [ 1304.854687][T19460] PKCS7: Only support pkcs7_signedData type [ 1305.152356][ T5995] usb 9-1: Using ep0 maxpacket: 16 [ 1305.171690][ T5995] usb 9-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 1305.182770][ T5995] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=24 [ 1305.450396][ T5995] usb 9-1: Product: syz [ 1305.540509][ T5995] usb 9-1: Manufacturer: syz [ 1305.548295][ T5995] usb 9-1: SerialNumber: syz [ 1305.558463][ T5995] usb 9-1: config 0 descriptor?? [ 1307.200118][ T5995] usb 9-1: USB disconnect, device number 4 [ 1307.532216][T19492] lo speed is unknown, defaulting to 1000 [ 1308.881013][T19514] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1308.926892][ T4348] Bluetooth: hci0: Frame reassembly failed (-84) [ 1310.951191][ T5833] Bluetooth: hci0: command 0x1003 tx timeout [ 1310.962375][T17452] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1311.027882][T19553] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3624'. [ 1311.787723][T19572] syz_tun: entered allmulticast mode [ 1313.500751][ T30] audit: type=1400 audit(1766922014.586:760): avc: denied { ioctl } for pid=19588 comm="syz.9.3632" path="socket:[94323]" dev="sockfs" ino=94323 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1313.600625][T19596] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3631'. [ 1313.637039][ T30] audit: type=1400 audit(1766922014.606:761): avc: denied { write } for pid=19588 comm="syz.9.3632" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 1313.683822][T19590] lo speed is unknown, defaulting to 1000 [ 1315.090134][T19512] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1316.420132][T19512] usb 10-1: Using ep0 maxpacket: 16 [ 1316.588668][T19512] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1316.607629][T19512] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1316.722735][T19512] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1316.748212][T19512] usb 10-1: config 0 descriptor?? [ 1317.468790][ T30] audit: type=1400 audit(1766922018.546:762): avc: denied { ioctl } for pid=19614 comm="syz.9.3636" path="socket:[94557]" dev="sockfs" ino=94557 ioctlcmd=0xae92 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1317.938758][T19512] mcp2221 0003:04D8:00DD.0010: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.9-1/input0 [ 1318.108440][T19662] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3644'. [ 1318.196385][T19662] lo speed is unknown, defaulting to 1000 [ 1318.455349][T19512] usb 10-1: USB disconnect, device number 3 [ 1319.185819][T19675] lo speed is unknown, defaulting to 1000 [ 1320.610473][T19693] syzkaller1: entered promiscuous mode [ 1320.630202][T19693] syzkaller1: entered allmulticast mode [ 1320.905624][ T6087] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 1321.821951][ T6087] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1321.837755][ T6087] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1321.910295][ T6087] usb 10-1: New USB device found, idVendor=1b96, idProduct=0005, bcdDevice= 0.00 [ 1321.919441][ T6087] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.986974][ T6087] usb 10-1: config 0 descriptor?? [ 1322.450803][T19727] netdevsim netdevsim7: Direct firmware load for lookup_extent_enter failed with error -2 [ 1322.476197][T19727] netdevsim netdevsim7: Falling back to sysfs fallback for: lookup_extent_enter [ 1322.615273][ T30] audit: type=1400 audit(1766922023.556:763): avc: denied { firmware_load } for pid=19720 comm="syz.7.3654" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1323.350139][T17971] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 1323.522804][T19741] bridge0: port 2(bridge_slave_1) entered disabled state [ 1323.530634][T19741] bridge0: port 1(bridge_slave_0) entered disabled state [ 1324.637058][T17971] usb 8-1: device descriptor read/64, error -71 [ 1324.871043][ T6087] usbhid 10-1:0.0: can't add hid device: -71 [ 1324.908013][ T6087] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1324.944912][T17971] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 1325.057291][ T6087] usb 10-1: USB disconnect, device number 4 [ 1325.104609][T17971] usb 8-1: device descriptor read/64, error -71 [ 1325.174872][ T30] audit: type=1800 audit(1766922026.256:764): pid=19752 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.3659" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 1325.250688][T17971] usb usb8-port1: attempt power cycle [ 1325.710442][T17971] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 1326.200783][T17971] usb 8-1: device descriptor read/8, error -71 [ 1326.732614][T19777] Device name cannot be null; rc = [-22] [ 1326.744875][T19777] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3662'. [ 1327.374436][ T30] audit: type=1400 audit(1766922028.456:765): avc: denied { write } for pid=19790 comm="syz.9.3666" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1327.494997][ T30] audit: type=1400 audit(1766922028.506:766): avc: denied { ioctl } for pid=19790 comm="syz.9.3666" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1327.551181][ T6087] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1327.580289][ T52] Bluetooth: hci7: command 0x0406 tx timeout [ 1327.584532][T19763] Bluetooth: hci8: command 0x0406 tx timeout [ 1327.588483][ T52] Bluetooth: hci6: command 0x0406 tx timeout [ 1327.593084][T19763] Bluetooth: hci9: command 0x0405 tx timeout [ 1327.599463][ T52] Bluetooth: hci1: command 0x2016 tx timeout [ 1327.631483][ T30] audit: type=1800 audit(1766922028.716:767): pid=19796 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.3667" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 1327.751799][ T6087] usb 4-1: Using ep0 maxpacket: 32 [ 1327.807054][ T6087] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1327.872396][T19804] netlink: 63 bytes leftover after parsing attributes in process `syz.9.3669'. [ 1328.117068][ T30] audit: type=1400 audit(1766922029.106:768): avc: denied { connect } for pid=19799 comm="syz.9.3669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1328.278046][ T6087] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1328.324717][ T6087] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1328.339731][ T6087] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1328.364583][ T6087] usb 4-1: Product: syz [ 1328.370305][ T6087] usb 4-1: Manufacturer: syz [ 1328.400336][ T6087] usb 4-1: SerialNumber: syz [ 1328.418607][ T6087] usb 4-1: config 0 descriptor?? [ 1329.004794][T14024] usb 4-1: USB disconnect, device number 77 [ 1329.080078][ T6087] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 1329.418856][ T6087] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1329.441012][ T6087] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1329.460272][ T6087] usb 10-1: New USB device found, idVendor=1b96, idProduct=0005, bcdDevice= 0.00 [ 1329.483970][ T6087] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.503473][ T6087] usb 10-1: config 0 descriptor?? [ 1329.910097][ T10] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1330.066752][ T10] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 1330.098865][ T10] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 1330.120906][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1330.135259][ T10] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1330.153433][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.180683][ T10] usb 4-1: Product: syz [ 1330.197339][ T10] usb 4-1: Manufacturer: syz [ 1330.213072][ T10] usb 4-1: SerialNumber: syz [ 1330.248387][T19835] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1330.268812][T19835] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1331.613952][ T6087] usbhid 10-1:0.0: can't add hid device: -71 [ 1331.621226][ T6087] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1331.768927][ T6087] usb 10-1: USB disconnect, device number 5 [ 1332.088124][ T10] rtl8150 4-1:1.0: eth21: rtl8150 is detected [ 1332.147772][T19868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1332.195181][T19868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1332.427907][T19871] netlink: 'syz.8.3679': attribute type 1 has an invalid length. [ 1332.841879][T19283] usb 4-1: USB disconnect, device number 78 [ 1332.900168][ T6087] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1333.090126][ T6087] usb 8-1: Using ep0 maxpacket: 32 [ 1333.218347][ T6087] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1333.273710][ T6087] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1333.439183][ T6087] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1333.540068][ T6087] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1333.548267][ T6087] usb 8-1: Product: syz [ 1333.573091][ T6087] usb 8-1: Manufacturer: syz [ 1333.584606][ T6087] usb 8-1: SerialNumber: syz [ 1333.612998][ T6087] usb 8-1: config 0 descriptor?? [ 1334.713238][T19916] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1334.721272][T19916] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1335.070960][T11509] usb 8-1: USB disconnect, device number 9 [ 1335.939959][ T6087] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 1336.125181][ C1] raw-gadget.0 gadget.7: ignoring, device is not running [ 1336.213374][ T30] audit: type=1400 audit(1766922037.296:769): avc: denied { name_bind } for pid=19939 comm="syz.6.3691" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 1336.260087][ T6087] usb 8-1: device descriptor read/64, error -32 [ 1336.956480][T19955] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256 [ 1336.969740][T19955] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512 [ 1336.984910][ T6087] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 1337.011227][T19955] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256 [ 1337.061944][T19955] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512 [ 1337.114075][T19955] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256 [ 1337.126519][T19955] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512 [ 1337.149869][T19955] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256 [ 1337.161631][T19955] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512 [ 1337.176030][T19955] UDF-fs: warning (device md0): udf_fill_super: No partition found (1) [ 1337.318066][T16226] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 1337.415829][ T6087] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1337.453503][T19959] FAULT_INJECTION: forcing a failure. [ 1337.453503][T19959] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1337.469513][T19959] CPU: 0 UID: 0 PID: 19959 Comm: syz.3.3694 Tainted: G L syzkaller #0 PREEMPT(full) [ 1337.469549][T19959] Tainted: [L]=SOFTLOCKUP [ 1337.469556][T19959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1337.469566][T19959] Call Trace: [ 1337.469573][T19959] [ 1337.469580][T19959] dump_stack_lvl+0x16c/0x1f0 [ 1337.469609][T19959] should_fail_ex+0x512/0x640 [ 1337.469638][T19959] _copy_from_iter+0x2a4/0x16c0 [ 1337.469666][T19959] ? irqentry_exit+0x1dd/0x8c0 [ 1337.469698][T19959] ? __pfx__copy_from_iter+0x10/0x10 [ 1337.469738][T19959] netlink_sendmsg+0x820/0xdd0 [ 1337.469766][T19959] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1337.469798][T19959] ____sys_sendmsg+0xa5d/0xc30 [ 1337.469824][T19959] ? copy_msghdr_from_user+0x10a/0x160 [ 1337.469843][T19959] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1337.469871][T19959] ? ___sys_sendmsg+0xde/0x1d0 [ 1337.469895][T19959] ___sys_sendmsg+0x134/0x1d0 [ 1337.469916][T19959] ? __pfx____sys_sendmsg+0x10/0x10 [ 1337.469969][T19959] __sys_sendmsg+0x16d/0x220 [ 1337.469989][T19959] ? __pfx___sys_sendmsg+0x10/0x10 [ 1337.470027][T19959] do_syscall_64+0xcd/0xf80 [ 1337.470050][T19959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1337.470070][T19959] RIP: 0033:0x7f9511f8f749 [ 1337.470085][T19959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1337.470103][T19959] RSP: 002b:00007f9512e6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1337.470121][T19959] RAX: ffffffffffffffda RBX: 00007f95121e6180 RCX: 00007f9511f8f749 [ 1337.470135][T19959] RDX: 0000000004040800 RSI: 0000200000000480 RDI: 000000000000000c [ 1337.470147][T19959] RBP: 00007f9512e6f090 R08: 0000000000000000 R09: 0000000000000000 [ 1337.470158][T19959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1337.470170][T19959] R13: 00007f95121e6218 R14: 00007f95121e6180 R15: 00007fff265500c8 [ 1337.470198][T19959] [ 1337.674946][ T6087] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1337.689055][ T6087] usb 8-1: New USB device found, idVendor=1b96, idProduct=0005, bcdDevice= 0.00 [ 1337.698949][ T6087] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.845007][ T6087] usb 8-1: config 0 descriptor?? [ 1337.872622][T16226] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1337.883629][T16226] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1337.897016][T16226] usb 7-1: New USB device found, idVendor=1b96, idProduct=0005, bcdDevice= 0.00 [ 1337.907252][T16226] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.917632][T16226] usb 7-1: config 0 descriptor?? [ 1338.740212][T19512] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1338.920147][T19512] usb 4-1: Using ep0 maxpacket: 32 [ 1338.943265][T19512] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1338.990126][T19512] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1339.004035][T19512] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1339.029190][T19512] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1339.057608][T19512] usb 4-1: Product: syz [ 1339.070104][T19512] usb 4-1: Manufacturer: syz [ 1339.074791][T19512] usb 4-1: SerialNumber: syz [ 1339.226406][T19512] usb 4-1: config 0 descriptor?? [ 1340.035243][T19512] usb 4-1: USB disconnect, device number 79 [ 1340.113641][ T6087] usbhid 8-1:0.0: can't add hid device: -71 [ 1340.119740][ T6087] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1340.146928][ T6087] usb 8-1: USB disconnect, device number 11 [ 1340.198559][T19995] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3701'. [ 1340.240390][T19995] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3701'. [ 1340.472260][ T60] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1340.500641][ T60] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1341.098461][ T60] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1341.222783][ T60] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1341.700097][ T6087] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1342.251387][T20030] netlink: 288 bytes leftover after parsing attributes in process `syz.9.3708'. [ 1342.692817][T19341] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1342.870125][ T6087] usb 4-1: device descriptor read/64, error -71 [ 1343.259971][T19341] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1343.275626][T19341] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1343.410234][T19341] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1343.438848][T19341] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1343.467282][T19341] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1343.511674][T19341] usb 9-1: config 0 descriptor?? [ 1343.520311][ T6087] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1343.758513][ T6087] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1343.806603][ T6087] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.831672][T17972] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 1343.860377][ T6087] usb 4-1: Product: syz [ 1343.864626][ T6087] usb 4-1: Manufacturer: syz [ 1343.869215][ T6087] usb 4-1: SerialNumber: syz [ 1343.980455][T19341] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1344.004197][T17972] usb 8-1: not running at top speed; connect to a high speed hub [ 1344.191231][T17972] usb 8-1: config 1 has an invalid descriptor of length 98, skipping remainder of the config [ 1344.221612][T17972] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1344.248618][T19341] usb 9-1: USB disconnect, device number 5 [ 1344.431886][T17972] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1344.508137][T17972] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1344.518990][T17972] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.528750][T17972] usb 8-1: Product: syz [ 1344.536481][T17972] usb 8-1: Manufacturer: syz [ 1344.545828][T17972] usb 8-1: SerialNumber: syz [ 1344.756674][T20041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1344.821493][T20041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1345.032811][T17972] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found [ 1345.072137][T17972] cdc_ncm 8-1:1.0: bind() failure [ 1345.138219][T19341] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1345.162446][T17972] usb 8-1: USB disconnect, device number 12 [ 1345.360100][T19341] usb 9-1: Using ep0 maxpacket: 32 [ 1345.477378][T19341] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1345.508096][T19341] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1345.541282][T16226] usbhid 7-1:0.0: can't add hid device: -71 [ 1345.580305][T16226] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1345.652864][ T6087] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1345.668099][T16226] usb 7-1: USB disconnect, device number 4 [ 1345.681763][T19341] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1346.030100][ T6087] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1346.053285][T19341] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1346.078315][T19341] usb 9-1: Product: syz [ 1346.097393][T19341] usb 9-1: Manufacturer: syz [ 1346.104623][T19341] usb 9-1: SerialNumber: syz [ 1346.106055][ T6087] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1346.129987][T19341] usb 9-1: config 0 descriptor?? [ 1346.165328][ T6087] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1346.234961][ T6087] usb 4-1: USB disconnect, device number 81 [ 1346.928105][ T30] audit: type=1400 audit(1766922047.986:770): avc: denied { read } for pid=20099 comm="syz.6.3717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1347.427442][ T5930] usb 9-1: USB disconnect, device number 6 [ 1348.865055][T20145] netlink: 76 bytes leftover after parsing attributes in process `syz.8.3725'. [ 1349.213553][T20151] syz_tun: entered allmulticast mode [ 1350.895113][T20177] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3730'. [ 1351.082387][T20177] lo speed is unknown, defaulting to 1000 [ 1351.177996][T20182] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1351.185259][T20182] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1351.962801][T20188] batadv_slave_1: entered promiscuous mode [ 1352.342741][T20199] netlink: 'syz.6.3736': attribute type 1 has an invalid length. [ 1352.583391][T20185] batadv_slave_1: left promiscuous mode [ 1353.776122][T20224] syz_tun: entered allmulticast mode [ 1353.819686][T20226] netlink: 76 bytes leftover after parsing attributes in process `syz.8.3742'. [ 1355.072745][T20237] openvswitch: netlink: Multiple metadata blocks provided [ 1356.045194][T20246] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1356.052042][T20246] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1356.091408][T20252] Invalid source name [ 1357.314393][T20260] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1357.323165][T20260] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1358.099983][T20264] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1358.107276][T20264] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1359.032482][T20279] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3749'. [ 1359.176545][T20280] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1359.718126][T20279] lo speed is unknown, defaulting to 1000 [ 1359.927322][T20284] netlink: 'syz.8.3750': attribute type 1 has an invalid length. [ 1360.515936][T20299] mac80211_hwsim hwsim30 4: renamed from wlan1 (while UP) [ 1360.965099][T20303] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3755'. [ 1361.346808][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.358752][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.753641][T20319] netlink: 'syz.8.3757': attribute type 11 has an invalid length. [ 1361.801522][T20319] bond1: Removing last arp target with arp_interval on [ 1361.929496][T20319] bond1: entered allmulticast mode [ 1361.937208][T20319] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1362.673713][T20336] FAULT_INJECTION: forcing a failure. [ 1362.673713][T20336] name failslab, interval 1, probability 0, space 0, times 0 [ 1362.687247][T20336] CPU: 1 UID: 0 PID: 20336 Comm: syz.6.3761 Tainted: G L syzkaller #0 PREEMPT(full) [ 1362.687276][T20336] Tainted: [L]=SOFTLOCKUP [ 1362.687283][T20336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1362.687296][T20336] Call Trace: [ 1362.687302][T20336] [ 1362.687310][T20336] dump_stack_lvl+0x16c/0x1f0 [ 1362.687339][T20336] should_fail_ex+0x512/0x640 [ 1362.687364][T20336] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1362.687395][T20336] should_failslab+0xc2/0x120 [ 1362.687419][T20336] __kmalloc_cache_noprof+0x80/0x800 [ 1362.687446][T20336] ? gfs2_init_fs_context+0x47/0x400 [ 1362.687476][T20336] ? gfs2_init_fs_context+0x47/0x400 [ 1362.687500][T20336] gfs2_init_fs_context+0x47/0x400 [ 1362.687526][T20336] gfs2_meta_init_fs_context+0x16/0x70 [ 1362.687550][T20336] ? __pfx_gfs2_meta_init_fs_context+0x10/0x10 [ 1362.687574][T20336] alloc_fs_context+0x629/0xf50 [ 1362.687599][T20336] __x64_sys_fsopen+0xeb/0x240 [ 1362.687622][T20336] do_syscall_64+0xcd/0xf80 [ 1362.687646][T20336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1362.687666][T20336] RIP: 0033:0x7fdf52b8f749 [ 1362.687681][T20336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1362.687699][T20336] RSP: 002b:00007fdf50dd5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1362.687717][T20336] RAX: ffffffffffffffda RBX: 00007fdf52de6180 RCX: 00007fdf52b8f749 [ 1362.687731][T20336] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 1362.687742][T20336] RBP: 00007fdf50dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1362.687754][T20336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1362.687766][T20336] R13: 00007fdf52de6218 R14: 00007fdf52de6180 R15: 00007ffd1980f998 [ 1362.687794][T20336] [ 1364.344732][T20352] syz_tun: entered allmulticast mode [ 1364.404877][ T30] audit: type=1400 audit(1766922065.486:771): avc: denied { getopt } for pid=20349 comm="syz.7.3765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1364.777348][ T30] audit: type=1400 audit(1766922065.486:772): avc: denied { write } for pid=20349 comm="syz.7.3765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1364.800430][ T30] audit: type=1400 audit(1766922065.536:773): avc: denied { connect } for pid=20349 comm="syz.7.3765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1365.046812][T20362] netlink: 'syz.8.3764': attribute type 1 has an invalid length. [ 1365.368047][ T30] audit: type=1400 audit(1766922066.446:774): avc: denied { read } for pid=20367 comm="syz.7.3768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1365.691092][T20376] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3769'. [ 1366.025638][T20384] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3770'. [ 1368.065668][T20413] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3776'. [ 1368.075036][T20413] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3776'. [ 1368.214815][T20420] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1368.582759][ T30] audit: type=1400 audit(1766922069.666:775): avc: denied { ioctl } for pid=20421 comm="syz.6.3779" path="socket:[96150]" dev="sockfs" ino=96150 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1368.678120][T20424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1368.932431][T20424] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1369.435200][T20427] llc_conn_state_process: llc_conn_service failed [ 1371.174627][T20467] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1371.182759][T20467] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1372.185510][ T7060] IPVS: starting estimator thread 0... [ 1372.343085][T20480] IPVS: using max 65 ests per chain, 156000 per kthread [ 1372.576018][T20487] lo speed is unknown, defaulting to 1000 [ 1373.175483][T20503] FAULT_INJECTION: forcing a failure. [ 1373.175483][T20503] name failslab, interval 1, probability 0, space 0, times 0 [ 1373.225037][T20503] CPU: 1 UID: 0 PID: 20503 Comm: syz.8.3792 Tainted: G L syzkaller #0 PREEMPT(full) [ 1373.225069][T20503] Tainted: [L]=SOFTLOCKUP [ 1373.225076][T20503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1373.225088][T20503] Call Trace: [ 1373.225095][T20503] [ 1373.225104][T20503] dump_stack_lvl+0x16c/0x1f0 [ 1373.225134][T20503] should_fail_ex+0x512/0x640 [ 1373.225160][T20503] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 1373.225184][T20503] should_failslab+0xc2/0x120 [ 1373.225208][T20503] kmem_cache_alloc_node_noprof+0x86/0x800 [ 1373.225228][T20503] ? __alloc_skb+0x156/0x410 [ 1373.225259][T20503] ? __alloc_skb+0x156/0x410 [ 1373.225282][T20503] __alloc_skb+0x156/0x410 [ 1373.225305][T20503] ? __alloc_skb+0x35d/0x410 [ 1373.225329][T20503] ? __pfx___alloc_skb+0x10/0x10 [ 1373.225352][T20503] ? __pfx___might_resched+0x10/0x10 [ 1373.225370][T20503] ? rcu_is_watching+0x12/0xc0 [ 1373.225386][T20503] ? trace_contention_end+0xdd/0x110 [ 1373.225420][T20503] netlink_dump+0x19b/0xd30 [ 1373.225438][T20503] ? __netlink_dump_start+0x150/0x990 [ 1373.225457][T20503] ? __netlink_lookup+0x654/0x900 [ 1373.225475][T20503] ? __pfx_netlink_dump+0x10/0x10 [ 1373.225493][T20503] ? __pfx___mutex_lock+0x10/0x10 [ 1373.225514][T20503] ? __netlink_lookup+0x65e/0x900 [ 1373.225550][T20503] __netlink_dump_start+0x6d6/0x990 [ 1373.225581][T20503] ? __pfx_tc_dump_tfilter+0x10/0x10 [ 1373.225600][T20503] rtnetlink_rcv_msg+0xb3e/0xe90 [ 1373.225620][T20503] ? __pfx_tc_dump_tfilter+0x10/0x10 [ 1373.225641][T20503] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1373.225660][T20503] ? __pfx_rtnl_dumpit+0x10/0x10 [ 1373.225683][T20503] ? __pfx_tc_dump_tfilter+0x10/0x10 [ 1373.225706][T20503] ? ref_tracker_free+0x37c/0x830 [ 1373.225734][T20503] netlink_rcv_skb+0x158/0x420 [ 1373.225755][T20503] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1373.225776][T20503] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1373.225805][T20503] ? netlink_deliver_tap+0x1ae/0xd30 [ 1373.225830][T20503] netlink_unicast+0x5aa/0x870 [ 1373.225854][T20503] ? __pfx_netlink_unicast+0x10/0x10 [ 1373.225885][T20503] netlink_sendmsg+0x8c8/0xdd0 [ 1373.225910][T20503] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1373.225940][T20503] ____sys_sendmsg+0xa5d/0xc30 [ 1373.225963][T20503] ? copy_msghdr_from_user+0x10a/0x160 [ 1373.225981][T20503] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1373.226015][T20503] ___sys_sendmsg+0x134/0x1d0 [ 1373.226035][T20503] ? __pfx____sys_sendmsg+0x10/0x10 [ 1373.226086][T20503] __sys_sendmsg+0x16d/0x220 [ 1373.226104][T20503] ? __pfx___sys_sendmsg+0x10/0x10 [ 1373.226139][T20503] do_syscall_64+0xcd/0xf80 [ 1373.226164][T20503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1373.226182][T20503] RIP: 0033:0x7f0656b8f749 [ 1373.226198][T20503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1373.226214][T20503] RSP: 002b:00007f0657966038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1373.226231][T20503] RAX: ffffffffffffffda RBX: 00007f0656de5fa0 RCX: 00007f0656b8f749 [ 1373.226243][T20503] RDX: 0000000004041080 RSI: 0000200000006040 RDI: 0000000000000004 [ 1373.226254][T20503] RBP: 00007f0657966090 R08: 0000000000000000 R09: 0000000000000000 [ 1373.226264][T20503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1373.226274][T20503] R13: 00007f0656de6038 R14: 00007f0656de5fa0 R15: 00007ffe3ce23738 [ 1373.226300][T20503] [ 1374.245657][T20516] pimreg: entered allmulticast mode [ 1374.706605][T20518] syz_tun: entered allmulticast mode [ 1375.117056][T20521] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3796'. [ 1375.293511][T20521] lo speed is unknown, defaulting to 1000 [ 1377.720268][T20567] 9pnet_fd: Insufficient options for proto=fd [ 1377.845777][T20568] lo speed is unknown, defaulting to 1000 [ 1383.130106][ T6043] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1383.475629][ T6043] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 184, changing to 11 [ 1383.488178][ T6043] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 16497, setting to 1024 [ 1383.499485][ T6043] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1383.508607][ T6043] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1383.589543][ T6043] usb 8-1: config 0 descriptor?? [ 1383.745622][ T30] audit: type=1400 audit(1766922084.826:776): avc: denied { read } for pid=20644 comm="syz.9.3818" dev="nsfs" ino=4026534258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1383.816954][ T30] audit: type=1400 audit(1766922084.826:777): avc: denied { open } for pid=20644 comm="syz.9.3818" path="net:[4026534258]" dev="nsfs" ino=4026534258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1384.097529][ T6043] ath6kl: Failed to submit usb control message: -71 [ 1384.483952][ T6043] ath6kl: unable to send the bmi data to the device: -71 [ 1384.535693][ T6043] ath6kl: Unable to send get target info: -71 [ 1384.663985][ T6043] ath6kl: Failed to init ath6kl core: -71 [ 1384.677030][ T6043] ath6kl_usb 8-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1384.853535][ T6043] usb 8-1: USB disconnect, device number 13 [ 1385.753541][T20668] pimreg: entered allmulticast mode [ 1387.274302][ T30] audit: type=1400 audit(1766922088.146:778): avc: denied { allowed } for pid=20670 comm="syz.9.3824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1387.411836][T20685] futex_wake_op: syz.3.3827 tries to shift op by -1; fix this program [ 1387.667399][ T30] audit: type=1400 audit(1766922088.346:779): avc: denied { sqpoll } for pid=20670 comm="syz.9.3824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1387.829026][T20683] lo speed is unknown, defaulting to 1000 [ 1390.833048][ T30] audit: type=1400 audit(1766922091.916:780): avc: denied { link } for pid=20719 comm="syz.3.3835" name="#15" dev="tmpfs" ino=488 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1390.836051][T20720] FAULT_INJECTION: forcing a failure. [ 1390.836051][T20720] name failslab, interval 1, probability 0, space 0, times 0 [ 1390.886597][T20720] CPU: 1 UID: 0 PID: 20720 Comm: syz.3.3835 Tainted: G L syzkaller #0 PREEMPT(full) [ 1390.886627][T20720] Tainted: [L]=SOFTLOCKUP [ 1390.886634][T20720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1390.886644][T20720] Call Trace: [ 1390.886650][T20720] [ 1390.886657][T20720] dump_stack_lvl+0x16c/0x1f0 [ 1390.886683][T20720] should_fail_ex+0x512/0x640 [ 1390.886707][T20720] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 1390.886730][T20720] should_failslab+0xc2/0x120 [ 1390.886754][T20720] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 1390.886774][T20720] ? __d_alloc+0x35/0xa80 [ 1390.886796][T20720] ? __d_alloc+0x35/0xa80 [ 1390.886810][T20720] __d_alloc+0x35/0xa80 [ 1390.886824][T20720] ? stack_depot_save_flags+0x29/0x9b0 [ 1390.886848][T20720] ? stack_trace_save+0x8e/0xc0 [ 1390.886869][T20720] d_alloc_parallel+0x111/0x1510 [ 1390.886903][T20720] ? __pfx_selinux_inode_permission+0x10/0x10 [ 1390.886931][T20720] ? do_syscall_64+0xcd/0xf80 [ 1390.886954][T20720] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1390.886976][T20720] ? lockdep_init_map_type+0x5c/0x270 [ 1390.886998][T20720] ? lockdep_init_map_type+0x5c/0x270 [ 1390.887022][T20720] __lookup_slow+0x193/0x460 [ 1390.887043][T20720] ? __pfx___lookup_slow+0x10/0x10 [ 1390.887089][T20720] lookup_slow+0x50/0x70 [ 1390.887109][T20720] path_lookupat+0x5e9/0xc40 [ 1390.887138][T20720] path_openat+0x1dfc/0x3140 [ 1390.887161][T20720] ? do_syscall_64+0xcd/0xf80 [ 1390.887182][T20720] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.887211][T20720] ? __pfx_path_openat+0x10/0x10 [ 1390.887249][T20720] do_filp_open+0x20b/0x470 [ 1390.887275][T20720] ? __pfx_do_filp_open+0x10/0x10 [ 1390.887323][T20720] ? alloc_fd+0x471/0x7d0 [ 1390.887356][T20720] do_sys_openat2+0x121/0x290 [ 1390.887375][T20720] ? __pfx_do_sys_openat2+0x10/0x10 [ 1390.887397][T20720] ? __fget_files+0x20e/0x3c0 [ 1390.887427][T20720] __x64_sys_openat+0x174/0x210 [ 1390.887446][T20720] ? __pfx___x64_sys_openat+0x10/0x10 [ 1390.887464][T20720] ? ksys_write+0x1ac/0x250 [ 1390.887497][T20720] do_syscall_64+0xcd/0xf80 [ 1390.887522][T20720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.887541][T20720] RIP: 0033:0x7f9511f8f749 [ 1390.887556][T20720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1390.887574][T20720] RSP: 002b:00007f9512eb1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1390.887593][T20720] RAX: ffffffffffffffda RBX: 00007f95121e5fa0 RCX: 00007f9511f8f749 [ 1390.887607][T20720] RDX: 0000000000200002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1390.887620][T20720] RBP: 00007f9512eb1090 R08: 0000000000000000 R09: 0000000000000000 [ 1390.887630][T20720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1390.887642][T20720] R13: 00007f95121e6038 R14: 00007f95121e5fa0 R15: 00007fff265500c8 [ 1390.887672][T20720] [ 1391.228707][ T30] audit: type=1400 audit(1766922091.916:781): avc: denied { rename } for pid=20719 comm="syz.3.3835" name="#16" dev="tmpfs" ino=488 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1391.818295][ T30] audit: type=1800 audit(1766922092.896:782): pid=20728 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.3840" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 1393.230323][T19512] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1393.483107][T19512] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 1393.774695][T19512] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1393.841931][T19512] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1393.895754][T20766] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3847'. [ 1394.176101][T19512] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1394.485371][T19512] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1394.556827][T19512] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1394.599930][T19512] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.617418][T19512] usb 7-1: config 0 descriptor?? [ 1394.625379][T20743] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1395.648381][T19512] plantronics 0003:047F:FFFF.0012: reserved main item tag 0xd [ 1395.777353][T19512] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1395.847075][T20743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1395.906587][T20743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1396.562261][T20797] bridge1: entered promiscuous mode [ 1396.567501][T20797] bridge1: entered allmulticast mode [ 1396.800819][T20743] plantronics 0003:047F:FFFF.0012: implement() called with too large value 19203840 (n: 0)! (syz.6.3842) [ 1396.812440][T20743] plantronics 0003:047F:FFFF.0012: implement() called with too large value 129 (n: 0)! (syz.6.3842) [ 1397.057094][T20804] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1397.201804][T20807] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1397.411029][ T30] audit: type=1400 audit(1766922098.496:783): avc: denied { watch_sb watch_reads } for pid=20811 comm="syz.9.3857" path="/111/file0" dev="tmpfs" ino=603 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1398.228250][T19283] usb 7-1: USB disconnect, device number 5 [ 1399.760344][T20838] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3856'. [ 1399.772717][T20838] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3856'. [ 1399.786388][T20838] netlink: 'syz.7.3856': attribute type 15 has an invalid length. [ 1399.935477][ T1090] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 1399.935483][T20838] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3856'. [ 1399.935519][ T1090] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 1400.020221][ T1090] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 1400.030068][T20838] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3856'. [ 1400.042716][ T1090] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 1400.072467][T20838] netlink: 'syz.7.3856': attribute type 15 has an invalid length. [ 1401.494375][T20862] openvswitch: netlink: Multiple metadata blocks provided [ 1402.994995][T20875] syzkaller1: entered promiscuous mode [ 1403.013017][T20875] syzkaller1: entered allmulticast mode [ 1406.852134][T20928] openvswitch: netlink: Multiple metadata blocks provided [ 1408.808060][ T30] audit: type=1400 audit(1766922109.886:784): avc: denied { ioctl } for pid=20933 comm="syz.7.3881" path="/" dev="configfs" ino=1254 ioctlcmd=0x9428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1409.485657][T20957] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1409.492991][T20957] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1409.957322][T20956] futex_wake_op: syz.7.3883 tries to shift op by -1; fix this program [ 1410.458021][T20969] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3885'. [ 1410.576777][T20968] netlink: 'syz.8.3884': attribute type 10 has an invalid length. [ 1410.653096][T20966] lo speed is unknown, defaulting to 1000 [ 1410.673899][T20968] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3884'. [ 1410.788358][T20968] dummy0: entered promiscuous mode [ 1410.869417][T20968] bridge0: port 3(dummy0) entered blocking state [ 1410.900305][T20968] bridge0: port 3(dummy0) entered disabled state [ 1410.906829][T20968] dummy0: entered allmulticast mode [ 1411.666296][ T5995] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1412.534524][ T5995] usb 8-1: Using ep0 maxpacket: 32 [ 1412.813653][ T5995] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1412.823486][ T5995] usb 8-1: config 7 has an invalid interface number: 187 but max is 0 [ 1412.876652][ T5995] usb 8-1: config 7 has no interface number 0 [ 1413.004122][ T5995] usb 8-1: config 7 interface 187 has no altsetting 0 [ 1413.205423][ T5995] usb 8-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1413.349829][T21009] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3894'. [ 1413.551631][ T5995] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.570392][ T5995] usb 8-1: Product: syz [ 1413.582041][ T5995] usb 8-1: Manufacturer: syz [ 1413.586704][ T5995] usb 8-1: SerialNumber: syz [ 1414.361647][ T5995] usb 8-1: Cannot retrieve CPort count: -110 [ 1414.861511][ T5995] usb 8-1: Cannot retrieve CPort count: -110 [ 1414.929084][T21020] lo speed is unknown, defaulting to 1000 [ 1414.957178][ T5995] es2_ap_driver 8-1:7.187: probe with driver es2_ap_driver failed with error -110 [ 1415.071754][ T5995] usb 8-1: USB disconnect, device number 14 [ 1415.618285][T21034] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 1416.899966][T21052] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3902'. [ 1420.389464][T21075] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1420.396835][T21075] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1422.784809][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.794391][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.997158][ T30] audit: type=1800 audit(1766922124.076:785): pid=21108 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.3914" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1424.461224][ T7221] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1424.693718][ T7221] usb 8-1: Using ep0 maxpacket: 16 [ 1424.953870][ T7221] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1425.057467][ T7221] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1425.090063][ T7221] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1425.096720][ T7221] usb 8-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1425.162319][ T7221] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1425.214698][ T7221] usb 8-1: config 0 descriptor?? [ 1425.579335][T21138] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1425.586776][T21138] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1426.124171][ T7221] cougar 0003:060B:500A.0013: unknown main item tag 0x0 [ 1426.140193][ T7221] cougar 0003:060B:500A.0013: unknown main item tag 0x0 [ 1426.147280][ T7221] cougar 0003:060B:500A.0013: unknown main item tag 0x0 [ 1426.206727][ T7221] cougar 0003:060B:500A.0013: unknown main item tag 0x0 [ 1426.214190][ T7221] cougar 0003:060B:500A.0013: unknown main item tag 0x0 [ 1426.221623][ T7221] cougar 0003:060B:500A.0013: unknown main item tag 0x0 [ 1426.221637][T15776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1426.228586][ T7221] cougar 0003:060B:500A.0013: unknown main item tag 0x0 [ 1426.248923][ T7221] cougar 0003:060B:500A.0013: unknown main item tag 0x0 [ 1426.261252][T15776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1426.265207][T21116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1426.279354][T15776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1426.294255][T15776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1426.303060][T15776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1426.320073][ T7221] cougar 0003:060B:500A.0013: unknown main item tag 0x0 [ 1426.327038][ T7221] cougar 0003:060B:500A.0013: unknown main item tag 0x0 [ 1426.377282][T21116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1426.411566][ T7221] cougar 0003:060B:500A.0013: unexpected long global item [ 1426.419552][ T7221] cougar 0003:060B:500A.0013: parse failed [ 1426.433152][ T7221] cougar 0003:060B:500A.0013: probe with driver cougar failed with error -22 [ 1426.793467][T21142] lo speed is unknown, defaulting to 1000 [ 1426.841988][ T7221] usb 8-1: USB disconnect, device number 15 [ 1427.309933][T20959] Set syz1 is full, maxelem 65536 reached [ 1428.188483][T21142] chnl_net:caif_netlink_parms(): no params data found [ 1428.360283][ T30] audit: type=1800 audit(1766922129.446:786): pid=21180 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.3926" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 1428.559228][T21181] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1428.567518][T21181] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1428.826972][T17452] Bluetooth: hci0: command tx timeout [ 1429.439410][T21194] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3928'. [ 1430.324476][T20959] syz_tun (unregistering): left allmulticast mode [ 1430.571748][T21142] bridge0: port 1(bridge_slave_0) entered blocking state [ 1430.786050][T21215] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1430.793455][T21215] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1431.239327][T17452] Bluetooth: hci0: command tx timeout [ 1431.249444][T21142] bridge0: port 1(bridge_slave_0) entered disabled state [ 1431.329794][T21216] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3933'. [ 1431.345968][T21142] bridge_slave_0: entered allmulticast mode [ 1431.669270][T21142] bridge_slave_0: entered promiscuous mode [ 1432.935223][ T60] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1432.946979][ T60] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 58590 - 0 [ 1433.260127][T17452] Bluetooth: hci0: command tx timeout [ 1433.331883][T21142] bridge0: port 2(bridge_slave_1) entered blocking state [ 1433.368015][T21142] bridge0: port 2(bridge_slave_1) entered disabled state [ 1433.398697][T21142] bridge_slave_1: entered allmulticast mode [ 1433.477359][T21142] bridge_slave_1: entered promiscuous mode [ 1433.643740][ T60] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.686051][ T60] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 58590 - 0 [ 1433.687368][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1433.722856][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1434.015661][T11509] libceph: connect (1)[c::]:6789 error -101 [ 1434.031884][T11509] libceph: mon0 (1)[c::]:6789 connect error [ 1434.119059][T21142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1434.237413][ T60] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1434.256423][ T60] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 58590 - 0 [ 1434.365571][T21142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1434.376903][T21233] ceph: No mds server is up or the cluster is laggy [ 1434.470318][T11509] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1434.515538][ T60] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1434.529500][ T60] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 58590 - 0 [ 1434.554544][T21142] team0: Port device team_slave_0 added [ 1434.565988][T21142] team0: Port device team_slave_1 added [ 1434.693997][T21142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1434.701134][T11509] usb 7-1: Using ep0 maxpacket: 32 [ 1434.710908][T21142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1434.737652][T21142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1434.748461][T11509] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1434.758305][T11509] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1434.813289][T11509] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1434.829890][T21142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1434.843460][T11509] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1434.860454][T21142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1435.230109][T11509] usb 7-1: Product: syz [ 1435.238679][T11509] usb 7-1: Manufacturer: syz [ 1435.243622][T11509] usb 7-1: SerialNumber: syz [ 1435.249707][T21142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1435.350232][T17452] Bluetooth: hci0: command tx timeout [ 1435.351289][T11509] usb 7-1: config 0 descriptor?? [ 1435.378967][T21250] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3941'. [ 1435.685776][ T60] dummy0: left allmulticast mode [ 1435.720589][ T60] bridge0: port 3(dummy0) entered disabled state [ 1435.746084][ T60] bridge_slave_1: left allmulticast mode [ 1435.845421][ T60] bridge_slave_1: left promiscuous mode [ 1435.851588][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 1435.864487][ T60] bridge_slave_0: left allmulticast mode [ 1435.879501][ T60] bridge_slave_0: left promiscuous mode [ 1435.885381][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 1436.105262][T14024] usb 7-1: USB disconnect, device number 6 [ 1439.127402][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1439.153369][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1439.169210][ T60] bond0 (unregistering): Released all slaves [ 1439.470466][T21285] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3950'. [ 1439.522517][T21290] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3952'. [ 1440.074174][ T60] bond1 (unregistering): Released all slaves [ 1440.107041][T21142] hsr_slave_0: entered promiscuous mode [ 1440.118430][T21142] hsr_slave_1: entered promiscuous mode [ 1440.247613][T21289] lo speed is unknown, defaulting to 1000 [ 1440.256480][ T10] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1440.523208][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 1440.532859][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1440.630701][ T10] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1440.665975][ T10] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1440.698524][ T10] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1440.728450][ T10] usb 8-1: Product: syz [ 1440.758290][ T10] usb 8-1: Manufacturer: syz [ 1440.810055][ T10] usb 8-1: SerialNumber: syz [ 1441.095062][ T10] usb 8-1: config 0 descriptor?? [ 1442.188397][ T6839] usb 8-1: USB disconnect, device number 16 [ 1442.429063][ T60] hsr_slave_0: left promiscuous mode [ 1442.439870][ T60] hsr_slave_1: left promiscuous mode [ 1442.450778][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1442.459076][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1442.471060][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1442.490119][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1442.643493][ T60] veth1_macvtap: left promiscuous mode [ 1442.705839][ T60] veth0_macvtap: left promiscuous mode [ 1442.748998][ T60] veth1_vlan: left promiscuous mode [ 1442.802127][ T60] veth0_vlan: left promiscuous mode [ 1446.200735][ T60] team0 (unregistering): Port device team_slave_1 removed [ 1446.293129][ T60] team0 (unregistering): Port device team_slave_0 removed [ 1447.110214][T19341] lo speed is unknown, defaulting to 1000 [ 1447.135785][T21362] bridge1: entered promiscuous mode [ 1447.141030][T21362] bridge1: entered allmulticast mode [ 1447.166613][T19341] syz2: Port: 1 Link DOWN [ 1447.530862][ T5930] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1447.690106][ T5930] usb 8-1: Using ep0 maxpacket: 32 [ 1447.714857][T21388] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3971'. [ 1447.716422][ T5930] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1447.847857][T11509] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1447.850590][ T5930] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1447.907507][ T5930] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1447.928170][ T5930] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1447.953508][ T5930] usb 8-1: Product: syz [ 1447.961252][ T5930] usb 8-1: Manufacturer: syz [ 1447.965867][ T5930] usb 8-1: SerialNumber: syz [ 1447.994330][ T5930] usb 8-1: config 0 descriptor?? [ 1448.010220][T11509] usb 10-1: device descriptor read/64, error -71 [ 1448.270607][T21400] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3973'. [ 1448.329295][T11509] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1448.610154][T11509] usb 10-1: device descriptor read/64, error -71 [ 1448.872565][T16226] usb 8-1: USB disconnect, device number 17 [ 1448.879136][T11509] usb usb10-port1: attempt power cycle [ 1449.320631][T11509] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1449.700499][T11509] usb 10-1: device descriptor read/8, error -71 [ 1450.140073][T11509] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1450.940416][T11509] usb 10-1: device descriptor read/8, error -71 [ 1450.987690][T21142] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1451.048545][T21142] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1451.061454][T11509] usb usb10-port1: unable to enumerate USB device [ 1451.093330][T21430] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3980'. [ 1451.107647][T21142] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1451.159511][T21435] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3981'. [ 1451.953800][T21142] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1452.104812][T21439] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3982'. [ 1452.153100][T21441] bridge2: entered promiscuous mode [ 1452.158309][T21441] bridge2: entered allmulticast mode [ 1453.345441][T21142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1453.592792][T21142] 8021q: adding VLAN 0 to HW filter on device team0 [ 1454.210673][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 1454.217777][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1454.314079][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 1454.321217][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1454.415152][T21484] FAULT_INJECTION: forcing a failure. [ 1454.415152][T21484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1454.417854][T21479] bridge1: entered promiscuous mode [ 1454.434941][T21479] bridge1: entered allmulticast mode [ 1454.473055][T21484] CPU: 0 UID: 0 PID: 21484 Comm: syz.9.3988 Tainted: G L syzkaller #0 PREEMPT(full) [ 1454.473089][T21484] Tainted: [L]=SOFTLOCKUP [ 1454.473096][T21484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1454.473108][T21484] Call Trace: [ 1454.473121][T21484] [ 1454.473129][T21484] dump_stack_lvl+0x16c/0x1f0 [ 1454.473158][T21484] should_fail_ex+0x512/0x640 [ 1454.473189][T21484] _copy_from_user+0x2e/0xd0 [ 1454.473216][T21484] move_addr_to_kernel+0x65/0x170 [ 1454.473243][T21484] __sys_bind+0x11b/0x260 [ 1454.473268][T21484] ? __pfx___sys_bind+0x10/0x10 [ 1454.473290][T21484] ? __fget_files+0x20e/0x3c0 [ 1454.473326][T21484] ? __pfx_ksys_write+0x10/0x10 [ 1454.473354][T21484] __x64_sys_bind+0x72/0xb0 [ 1454.473376][T21484] ? lockdep_hardirqs_on+0x7c/0x110 [ 1454.473399][T21484] do_syscall_64+0xcd/0xf80 [ 1454.473424][T21484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1454.473443][T21484] RIP: 0033:0x7f3f9d98f749 [ 1454.473459][T21484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1454.473477][T21484] RSP: 002b:00007f3f9e78f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1454.473496][T21484] RAX: ffffffffffffffda RBX: 00007f3f9dbe5fa0 RCX: 00007f3f9d98f749 [ 1454.473509][T21484] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 1454.473520][T21484] RBP: 00007f3f9e78f090 R08: 0000000000000000 R09: 0000000000000000 [ 1454.473531][T21484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1454.473543][T21484] R13: 00007f3f9dbe6038 R14: 00007f3f9dbe5fa0 R15: 00007ffef73111b8 [ 1454.473571][T21484] [ 1454.729473][T21142] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1454.741702][T21142] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1454.874947][ T30] audit: type=1400 audit(1766922155.946:787): avc: denied { mount } for pid=21489 comm="syz.9.3990" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1455.162687][T21501] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3992'. [ 1457.478225][T21142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1457.597921][T21142] veth0_vlan: entered promiscuous mode [ 1457.613305][T21142] veth1_vlan: entered promiscuous mode [ 1457.668340][T21142] veth0_macvtap: entered promiscuous mode [ 1457.700138][T17972] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1457.712473][T21142] veth1_macvtap: entered promiscuous mode [ 1457.746120][T21142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1457.772787][T21142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1457.900134][T16226] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1457.955309][ T796] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.967001][ T796] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.970120][T17972] usb 8-1: Using ep0 maxpacket: 32 [ 1457.982858][ T796] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.433987][T21539] bridge3: entered promiscuous mode [ 1458.439229][T21539] bridge3: entered allmulticast mode [ 1458.447795][ T796] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.463018][T16226] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 1458.463983][T17972] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1458.482617][T17972] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1458.487982][T16226] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1458.495008][T17972] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1458.513695][T17972] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1458.522319][T17972] usb 8-1: Product: syz [ 1458.526892][T17972] usb 8-1: Manufacturer: syz [ 1458.533055][T17972] usb 8-1: SerialNumber: syz [ 1458.547858][T17972] usb 8-1: config 0 descriptor?? [ 1458.571101][T16226] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1458.625115][T16226] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1458.642709][T16226] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1458.670204][T16226] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1458.691371][T16226] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.728621][T16226] usb 7-1: config 0 descriptor?? [ 1458.737975][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1458.763559][T21529] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1458.788827][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1458.805809][ T3559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1458.977723][ T3559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1459.007386][ T30] audit: type=1400 audit(1766922160.086:788): avc: denied { mounton } for pid=21142 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1459.260153][T17972] usb 8-1: USB disconnect, device number 18 [ 1459.281811][T16226] plantronics 0003:047F:FFFF.0014: reserved main item tag 0xd [ 1459.310560][T11509] IPVS: starting estimator thread 0... [ 1459.370363][T16226] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1459.510136][T21552] IPVS: using max 39 ests per chain, 93600 per kthread [ 1459.700697][T21529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1459.741871][T21529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1459.994474][T21529] plantronics 0003:047F:FFFF.0014: implement() called with too large value 19203840 (n: 0)! (syz.6.3997) [ 1460.005716][T21529] plantronics 0003:047F:FFFF.0014: implement() called with too large value 129 (n: 0)! (syz.6.3997) [ 1460.098127][T21576] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4002'. [ 1460.393897][T21577] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4003'. [ 1461.740716][T21610] syz_tun: entered allmulticast mode [ 1462.237426][T16226] usb 7-1: USB disconnect, device number 7 [ 1462.417672][T21621] FAULT_INJECTION: forcing a failure. [ 1462.417672][T21621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1462.484762][T21621] CPU: 0 UID: 0 PID: 21621 Comm: syz.3.4007 Tainted: G L syzkaller #0 PREEMPT(full) [ 1462.484794][T21621] Tainted: [L]=SOFTLOCKUP [ 1462.484801][T21621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1462.484812][T21621] Call Trace: [ 1462.484819][T21621] [ 1462.484827][T21621] dump_stack_lvl+0x16c/0x1f0 [ 1462.484855][T21621] should_fail_ex+0x512/0x640 [ 1462.484885][T21621] _copy_from_user+0x2e/0xd0 [ 1462.484918][T21621] copy_msghdr_from_user+0x98/0x160 [ 1462.484938][T21621] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1462.484970][T21621] ___sys_sendmsg+0xfe/0x1d0 [ 1462.484991][T21621] ? __pfx____sys_sendmsg+0x10/0x10 [ 1462.485043][T21621] __sys_sendmsg+0x16d/0x220 [ 1462.485063][T21621] ? __pfx___sys_sendmsg+0x10/0x10 [ 1462.485099][T21621] do_syscall_64+0xcd/0xf80 [ 1462.485125][T21621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1462.485143][T21621] RIP: 0033:0x7f9511f8f749 [ 1462.485159][T21621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1462.485181][T21621] RSP: 002b:00007f9512eb1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1462.485200][T21621] RAX: ffffffffffffffda RBX: 00007f95121e5fa0 RCX: 00007f9511f8f749 [ 1462.485213][T21621] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 1462.485225][T21621] RBP: 00007f9512eb1090 R08: 0000000000000000 R09: 0000000000000000 [ 1462.485236][T21621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1462.485247][T21621] R13: 00007f95121e6038 R14: 00007f95121e5fa0 R15: 00007fff265500c8 [ 1462.485275][T21621] [ 1464.302706][T21633] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.4010'. [ 1464.612823][T21660] pim6reg: entered allmulticast mode [ 1465.020520][ T30] audit: type=1400 audit(1766922165.706:789): avc: denied { setopt } for pid=21651 comm="syz.6.4009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1465.060181][ T5929] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1465.270102][T11509] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1465.312507][ T5929] usb 1-1: no configurations [ 1465.317128][ T5929] usb 1-1: can't read configurations, error -22 [ 1465.461069][T17971] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1465.468916][T11509] usb 7-1: Using ep0 maxpacket: 32 [ 1465.479017][T11509] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1465.499969][T11509] usb 7-1: can't read configurations, error -61 [ 1465.560415][ T5929] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1465.565631][T21673] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4014'. [ 1465.720039][T17971] usb 10-1: Using ep0 maxpacket: 32 [ 1465.727060][T17971] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1465.737832][T17971] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1465.766008][T11509] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1465.803018][T17971] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1465.813340][T17971] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1465.960419][T17971] usb 10-1: Product: syz [ 1465.975530][T17971] usb 10-1: Manufacturer: syz [ 1466.004621][T17971] usb 10-1: SerialNumber: syz [ 1466.020960][T17971] usb 10-1: config 0 descriptor?? [ 1466.030093][T11509] usb 7-1: Using ep0 maxpacket: 32 [ 1466.037072][T11509] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1466.066291][T11509] usb 7-1: can't read configurations, error -61 [ 1466.083493][T11509] usb usb7-port1: attempt power cycle [ 1466.740377][T17972] usb 10-1: USB disconnect, device number 10 [ 1466.790402][T11509] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1466.820708][T11509] usb 7-1: Using ep0 maxpacket: 32 [ 1466.834422][T11509] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1466.852535][T11509] usb 7-1: can't read configurations, error -61 [ 1467.029881][T11509] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1467.590605][T21701] openvswitch: netlink: Multiple metadata blocks provided [ 1467.884728][T11509] usb 7-1: Using ep0 maxpacket: 32 [ 1467.901968][T11509] usb 7-1: device descriptor read/all, error -71 [ 1467.931738][T11509] usb usb7-port1: unable to enumerate USB device [ 1468.399718][T17452] Bluetooth: hci7: unexpected event for opcode 0x200f [ 1468.418766][T21708] syzkaller0: entered promiscuous mode [ 1468.431689][T21708] syzkaller0: entered allmulticast mode [ 1484.223915][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.232273][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.663499][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.669777][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1552.860053][T15776] Bluetooth: hci0: command 0x0406 tx timeout [ 1564.786760][T21950] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4030'. [ 1564.960225][ T5930] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1565.263108][ T5930] usb 10-1: Using ep0 maxpacket: 32 [ 1565.480074][ T5930] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1565.489917][ T5930] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1565.504584][ T5930] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1565.539985][ T5930] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1565.952111][T21959] openvswitch: netlink: Multiple metadata blocks provided [ 1566.000136][ T5930] usb 10-1: Product: syz [ 1566.022866][ T5930] usb 10-1: Manufacturer: syz [ 1566.034817][ T5930] usb 10-1: SerialNumber: syz [ 1566.052858][ T5930] usb 10-1: config 0 descriptor?? [ 1566.696697][T11509] usb 10-1: USB disconnect, device number 11 [ 1566.750726][T21935] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4026'. [ 1567.086342][T21979] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1568.729850][T21996] syzkaller1: entered promiscuous mode [ 1568.735520][T21996] syzkaller1: entered allmulticast mode [ 1570.198081][T22010] openvswitch: netlink: Multiple metadata blocks provided [ 1570.830520][ T7221] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1571.100146][ T7221] usb 10-1: Using ep0 maxpacket: 32 [ 1571.153202][ T7221] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1571.237886][ T7221] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1571.422876][ T7221] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1571.440264][ T7221] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1571.453857][ T7221] usb 10-1: Product: syz [ 1571.458110][ T7221] usb 10-1: Manufacturer: syz [ 1571.950373][ T7221] usb 10-1: SerialNumber: syz [ 1571.969116][ T7221] usb 10-1: config 0 descriptor?? [ 1573.223709][T19512] usb 10-1: USB disconnect, device number 12 [ 1574.186535][T22050] syzkaller1: entered promiscuous mode [ 1574.232689][T22050] syzkaller1: entered allmulticast mode [ 1576.312178][T22070] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4062'. [ 1576.732457][T22068] FAULT_INJECTION: forcing a failure. [ 1576.732457][T22068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1576.832649][T22068] CPU: 0 UID: 0 PID: 22068 Comm: syz.0.4061 Tainted: G L syzkaller #0 PREEMPT(full) [ 1576.832682][T22068] Tainted: [L]=SOFTLOCKUP [ 1576.832689][T22068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1576.832701][T22068] Call Trace: [ 1576.832708][T22068] [ 1576.832717][T22068] dump_stack_lvl+0x16c/0x1f0 [ 1576.832746][T22068] should_fail_ex+0x512/0x640 [ 1576.832776][T22068] _copy_from_user+0x2e/0xd0 [ 1576.832803][T22068] copy_msghdr_from_user+0x98/0x160 [ 1576.832825][T22068] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1576.832858][T22068] ___sys_sendmsg+0xfe/0x1d0 [ 1576.832879][T22068] ? __pfx____sys_sendmsg+0x10/0x10 [ 1576.832934][T22068] __sys_sendmsg+0x16d/0x220 [ 1576.832954][T22068] ? __pfx___sys_sendmsg+0x10/0x10 [ 1576.832992][T22068] do_syscall_64+0xcd/0xf80 [ 1576.833017][T22068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1576.833037][T22068] RIP: 0033:0x7fe78238f749 [ 1576.833053][T22068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1576.833071][T22068] RSP: 002b:00007fe783149038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1576.833090][T22068] RAX: ffffffffffffffda RBX: 00007fe7825e6090 RCX: 00007fe78238f749 [ 1576.833105][T22068] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1576.833117][T22068] RBP: 00007fe783149090 R08: 0000000000000000 R09: 0000000000000000 [ 1576.833128][T22068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1576.833140][T22068] R13: 00007fe7825e6128 R14: 00007fe7825e6090 R15: 00007fff4791f6c8 [ 1576.833168][T22068] [ 1578.424855][T22084] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4067'. [ 1578.442685][T22084] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4067'. [ 1579.291717][T22091] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4068'. [ 1579.300660][T22091] openvswitch: netlink: nsh attr 8 is out of range max 3 [ 1579.700031][ T10] usb 8-1: new low-speed USB device number 19 using dummy_hcd [ 1579.853625][ T10] usb 8-1: config 9 has an invalid interface number: 1 but max is 0 [ 1579.957351][ T10] usb 8-1: config 9 has no interface number 0 [ 1580.098321][T22105] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4071'. [ 1580.107305][T22105] openvswitch: netlink: nsh attr 8 is out of range max 3 [ 1580.503034][ T10] usb 8-1: string descriptor 0 read error: -22 [ 1580.530724][ T10] usb 8-1: New USB device found, idVendor=2040, idProduct=b140, bcdDevice=75.36 [ 1580.562224][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1580.853490][ T10] cx231xx 8-1:9.1: New device @ 1.5 Mbps (2040:b140) with 1 interfaces [ 1580.889039][T22107] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4074'. [ 1580.917727][ T10] cx231xx 8-1:9.1: Not found matching IAD interface [ 1581.260172][ T10] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 1581.558886][ T30] audit: type=1400 audit(1766922282.456:790): avc: denied { append } for pid=22080 comm="syz.7.4066" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1581.742599][ T10] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 232, setting to 64 [ 1581.753878][ T10] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1581.768885][ T10] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1581.788715][ T10] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1581.800240][ T10] usb 10-1: Product: syz [ 1581.804699][ T10] usb 10-1: Manufacturer: syz [ 1581.809818][ T10] usb 10-1: SerialNumber: syz [ 1581.846597][ T10] usb 10-1: config 0 descriptor?? [ 1581.853409][T22112] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1581.874706][ T10] usb 10-1: selecting invalid altsetting 0 [ 1582.710152][ T10] usb 8-1: USB disconnect, device number 19 [ 1583.031119][T22135] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4079'. [ 1583.134791][T22137] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22137 comm=syz.7.4080 [ 1584.733322][T22177] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4084'. [ 1585.958440][T22188] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4087'. [ 1586.400361][T19512] usb 10-1: USB disconnect, device number 13 [ 1588.234193][T22213] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4092'. [ 1589.952029][T22217] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4096'. [ 1590.293924][T22241] netlink: 'syz.7.4098': attribute type 1 has an invalid length. [ 1590.450187][T11509] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1590.870832][T11509] usb 1-1: Using ep0 maxpacket: 8 [ 1590.937476][T11509] usb 1-1: config 0 has an invalid interface number: 109 but max is 0 [ 1590.953480][T11509] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1591.395872][T22252] bridge2: entered promiscuous mode [ 1591.401171][T22252] bridge2: entered allmulticast mode [ 1591.774017][T11509] usb 1-1: config 0 has no interface number 0 [ 1591.780370][T11509] usb 1-1: config 0 interface 109 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1591.890490][T11509] usb 1-1: New USB device found, idVendor=0675, idProduct=1688, bcdDevice=7e.b6 [ 1591.899552][T11509] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.928122][T11509] usb 1-1: Product: syz [ 1592.039609][T11509] usb 1-1: Manufacturer: syz [ 1592.057045][T11509] usb 1-1: SerialNumber: syz [ 1592.095067][T11509] usb 1-1: config 0 descriptor?? [ 1592.197024][T11509] HFC-S_USB 1-1:0.109: probe with driver HFC-S_USB failed with error -5 [ 1592.310519][T22262] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.4104' sets config #-1 [ 1593.044533][T22236] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1593.739376][T22236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1593.761146][T22236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1593.916055][T22236] loop2: detected capacity change from 0 to 7 [ 1594.284034][T22236] loop2: [ 1594.392923][T22236] loop2: partition table partially beyond EOD, truncated [ 1595.773702][T11509] usb 1-1: USB disconnect, device number 14 [ 1597.140080][T19512] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1597.676212][T19512] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1597.725996][T19512] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1597.849327][T19512] usb 4-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 1597.863543][T19512] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1598.384246][T19512] usb 4-1: config 0 descriptor?? [ 1599.931528][T19512] hid_parser_main: 457 callbacks suppressed [ 1599.931548][T19512] logitech-hidpp-device 0003:046D:C262.0015: unknown main item tag 0x0 [ 1600.070563][T19283] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1600.530646][T19512] logitech-hidpp-device 0003:046D:C262.0015: hidraw0: USB HID v0.00 Device [HID 046d:c262] on usb-dummy_hcd.3-1/input0 [ 1600.579173][T19283] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1600.654411][T19283] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1600.735301][T19283] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1600.770443][T19283] usb 10-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1600.799982][T19283] usb 10-1: Manufacturer: syz [ 1600.818297][T19283] usb 10-1: config 0 descriptor?? [ 1601.197876][T22354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4127'. [ 1601.819508][T19283] uclogic 0003:256C:006D.0016: interface is invalid, ignoring [ 1602.330802][T19283] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1602.755113][T19283] usb 7-1: Using ep0 maxpacket: 8 [ 1602.917974][T19283] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1603.103276][T19283] usb 7-1: config 179 has no interface number 0 [ 1603.249186][T19283] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1603.578415][T19283] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1603.848670][T19512] usb 10-1: USB disconnect, device number 14 [ 1603.978227][T19283] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1604.232282][T19283] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1604.505621][T19283] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1604.636373][T19283] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1604.660032][T19283] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1604.680761][T22367] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1604.997789][T16226] usb 7-1: USB disconnect, device number 12 [ 1604.997818][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1605.012101][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1605.021214][ C1] ================================================================== [ 1605.029286][ C1] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x26f/0x2b0 [ 1605.037110][ C1] Read of size 4 at addr ffff8880924ae85c by task dhcpcd/22376 [ 1605.044648][ C1] [ 1605.046964][ C1] CPU: 1 UID: 0 PID: 22376 Comm: dhcpcd Tainted: G L syzkaller #0 PREEMPT(full) [ 1605.046994][ C1] Tainted: [L]=SOFTLOCKUP [ 1605.047001][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1605.047014][ C1] Call Trace: [ 1605.047021][ C1] [ 1605.047028][ C1] dump_stack_lvl+0x116/0x1f0 [ 1605.047058][ C1] print_report+0xcd/0x630 [ 1605.047082][ C1] ? __virt_addr_valid+0x81/0x610 [ 1605.047101][ C1] ? __phys_addr+0xe8/0x180 [ 1605.047120][ C1] ? do_raw_spin_lock+0x26f/0x2b0 [ 1605.047146][ C1] kasan_report+0xe0/0x110 [ 1605.047171][ C1] ? do_raw_spin_lock+0x26f/0x2b0 [ 1605.047199][ C1] do_raw_spin_lock+0x26f/0x2b0 [ 1605.047224][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1605.047251][ C1] ? kcov_remote_stop+0x1b0/0x590 [ 1605.047274][ C1] _raw_spin_lock_irqsave+0x42/0x60 [ 1605.047295][ C1] ? __wake_up+0x1c/0x60 [ 1605.047313][ C1] __wake_up+0x1c/0x60 [ 1605.047332][ C1] usb_anchor_resume_wakeups+0xc2/0xe0 [ 1605.047358][ C1] __usb_hcd_giveback_urb+0x3d5/0x610 [ 1605.047379][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 1605.047401][ C1] dummy_timer+0x1809/0x3ad0 [ 1605.047430][ C1] ? find_held_lock+0x2b/0x80 [ 1605.047458][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 1605.047485][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 1605.047509][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 1605.047534][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1605.047557][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1605.047581][ C1] ? mark_held_locks+0x49/0x80 [ 1605.047601][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1605.047625][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1605.047648][ C1] __hrtimer_run_queues+0x202/0xc40 [ 1605.047681][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1605.047710][ C1] ? read_tsc+0x9/0x20 [ 1605.047739][ C1] hrtimer_run_softirq+0x17d/0x350 [ 1605.047769][ C1] handle_softirqs+0x219/0x950 [ 1605.047799][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1605.047826][ C1] ? irqtime_account_irq+0x18d/0x2e0 [ 1605.047848][ C1] ? packet_release+0x7c0/0xd50 [ 1605.047882][ C1] do_softirq+0xb2/0xf0 [ 1605.047908][ C1] [ 1605.047915][ C1] [ 1605.047921][ C1] __local_bh_enable_ip+0x100/0x120 [ 1605.047949][ C1] packet_release+0x7c0/0xd50 [ 1605.047980][ C1] ? __pfx_packet_release+0x10/0x10 [ 1605.048009][ C1] ? __pfx_down_write+0x10/0x10 [ 1605.048036][ C1] ? __pfx_locks_remove_file+0x10/0x10 [ 1605.048067][ C1] __sock_release+0xb3/0x270 [ 1605.048088][ C1] ? __pfx_sock_close+0x10/0x10 [ 1605.048107][ C1] sock_close+0x1c/0x30 [ 1605.048126][ C1] __fput+0x402/0xb70 [ 1605.048145][ C1] fput_close_sync+0x118/0x260 [ 1605.048164][ C1] ? __pfx_fput_close_sync+0x10/0x10 [ 1605.048182][ C1] ? dnotify_flush+0x79/0x4c0 [ 1605.048206][ C1] __x64_sys_close+0x8b/0x120 [ 1605.048226][ C1] do_syscall_64+0xcd/0xf80 [ 1605.048251][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1605.048271][ C1] RIP: 0033:0x7f08c825f407 [ 1605.048287][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1605.048307][ C1] RSP: 002b:00007fff933aea50 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 1605.048327][ C1] RAX: ffffffffffffffda RBX: 00007f08c81d5740 RCX: 00007f08c825f407 [ 1605.048341][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1605.048352][ C1] RBP: 0000558df3dd54b0 R08: 0000000000000000 R09: 0000000000000000 [ 1605.048364][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1605.048376][ C1] R13: 0000558e2d750a70 R14: 0000000000000000 R15: 0000558df3deaac0 [ 1605.048395][ C1] [ 1605.048402][ C1] [ 1605.407840][ C1] Allocated by task 19283: [ 1605.412231][ C1] kasan_save_stack+0x33/0x60 [ 1605.416896][ C1] kasan_save_track+0x14/0x30 [ 1605.421553][ C1] __kasan_kmalloc+0xaa/0xb0 [ 1605.426123][ C1] xpad_probe+0x286/0x1ff0 [ 1605.430526][ C1] usb_probe_interface+0x303/0xa80 [ 1605.435798][ C1] really_probe+0x241/0xb20 [ 1605.440300][ C1] __driver_probe_device+0x1de/0x470 [ 1605.445574][ C1] driver_probe_device+0x4c/0x1b0 [ 1605.450585][ C1] __device_attach_driver+0x1df/0x350 [ 1605.455948][ C1] bus_for_each_drv+0x159/0x1e0 [ 1605.460784][ C1] __device_attach+0x1e4/0x4e0 [ 1605.465539][ C1] device_initial_probe+0xaa/0xc0 [ 1605.470629][ C1] bus_probe_device+0x64/0x150 [ 1605.475380][ C1] device_add+0x116e/0x1980 [ 1605.479865][ C1] usb_set_configuration+0x1187/0x1e50 [ 1605.485313][ C1] usb_generic_driver_probe+0xb1/0x110 [ 1605.490759][ C1] usb_probe_device+0xef/0x400 [ 1605.495775][ C1] really_probe+0x241/0xb20 [ 1605.500266][ C1] __driver_probe_device+0x1de/0x470 [ 1605.505541][ C1] driver_probe_device+0x4c/0x1b0 [ 1605.510570][ C1] __device_attach_driver+0x1df/0x350 [ 1605.515931][ C1] bus_for_each_drv+0x159/0x1e0 [ 1605.520765][ C1] __device_attach+0x1e4/0x4e0 [ 1605.525517][ C1] device_initial_probe+0xaa/0xc0 [ 1605.530519][ C1] bus_probe_device+0x64/0x150 [ 1605.535267][ C1] device_add+0x116e/0x1980 [ 1605.540012][ C1] usb_new_device+0xd07/0x1a90 [ 1605.544766][ C1] hub_event+0x313a/0x52f0 [ 1605.549168][ C1] process_one_work+0x9ba/0x1b20 [ 1605.554107][ C1] worker_thread+0x6c8/0xf10 [ 1605.558681][ C1] kthread+0x3c5/0x780 [ 1605.562732][ C1] ret_from_fork+0x983/0xb10 [ 1605.567303][ C1] ret_from_fork_asm+0x1a/0x30 [ 1605.572057][ C1] [ 1605.574358][ C1] Freed by task 16226: [ 1605.578398][ C1] kasan_save_stack+0x33/0x60 [ 1605.583061][ C1] kasan_save_track+0x14/0x30 [ 1605.587728][ C1] kasan_save_free_info+0x3b/0x60 [ 1605.592744][ C1] __kasan_slab_free+0x5f/0x80 [ 1605.597490][ C1] kfree+0x2f8/0x6e0 [ 1605.601361][ C1] xpad_disconnect+0x1cf/0x580 [ 1605.606112][ C1] usb_unbind_interface+0x1dd/0x9e0 [ 1605.611287][ C1] device_remove+0x125/0x170 [ 1605.615864][ C1] device_release_driver_internal+0x44b/0x620 [ 1605.621909][ C1] bus_remove_device+0x22f/0x450 [ 1605.626836][ C1] device_del+0x396/0x9f0 [ 1605.631153][ C1] usb_disable_device+0x355/0x820 [ 1605.636163][ C1] usb_disconnect+0x2e1/0x9e0 [ 1605.640830][ C1] hub_event+0x1d84/0x52f0 [ 1605.645233][ C1] process_one_work+0x9ba/0x1b20 [ 1605.650155][ C1] worker_thread+0x6c8/0xf10 [ 1605.654729][ C1] kthread+0x3c5/0x780 [ 1605.658782][ C1] ret_from_fork+0x983/0xb10 [ 1605.663355][ C1] ret_from_fork_asm+0x1a/0x30 [ 1605.668110][ C1] [ 1605.670411][ C1] The buggy address belongs to the object at ffff8880924ae800 [ 1605.670411][ C1] which belongs to the cache kmalloc-1k of size 1024 [ 1605.684443][ C1] The buggy address is located 92 bytes inside of [ 1605.684443][ C1] freed 1024-byte region [ffff8880924ae800, ffff8880924aec00) [ 1605.698219][ C1] [ 1605.700519][ C1] The buggy address belongs to the physical page: [ 1605.706914][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x924a8 [ 1605.715650][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1605.724125][ C1] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1605.732001][ C1] page_type: f5(slab) [ 1605.735962][ C1] raw: 00fff00000000040 ffff88813ff26dc0 ffffea000089ca00 dead000000000003 [ 1605.744525][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1605.753088][ C1] head: 00fff00000000040 ffff88813ff26dc0 ffffea000089ca00 dead000000000003 [ 1605.761737][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1605.770385][ C1] head: 00fff00000000003 ffffea0002492a01 00000000ffffffff 00000000ffffffff [ 1605.779034][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1605.787677][ C1] page dumped because: kasan: bad access detected [ 1605.794075][ C1] page_owner tracks the page as allocated [ 1605.799766][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 11263, tgid 11263 (kworker/u8:22), ts 1522632255778, free_ts 1201166441469 [ 1605.821022][ C1] post_alloc_hook+0x1af/0x220 [ 1605.825782][ C1] get_page_from_freelist+0xd0b/0x31a0 [ 1605.831393][ C1] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 1605.837266][ C1] alloc_pages_mpol+0x1fb/0x550 [ 1605.842102][ C1] new_slab+0x2c3/0x430 [ 1605.846245][ C1] ___slab_alloc+0xe18/0x1c90 [ 1605.850908][ C1] __slab_alloc.constprop.0+0x63/0x110 [ 1605.856358][ C1] __kmalloc_noprof+0x4fc/0x910 [ 1605.861199][ C1] ieee802_11_parse_elems_full+0x1db/0x3780 [ 1605.867098][ C1] ieee80211_inform_bss+0x15a/0x1150 [ 1605.872372][ C1] cfg80211_inform_single_bss_data+0x8e9/0x1d30 [ 1605.878617][ C1] cfg80211_inform_bss_data+0x22b/0x3be0 [ 1605.884246][ C1] cfg80211_inform_bss_frame_data+0x26f/0x720 [ 1605.890302][ C1] ieee80211_bss_info_update+0x310/0xab0 [ 1605.895940][ C1] ieee80211_ibss_rx_queued_mgmt+0x1927/0x2fc0 [ 1605.902118][ C1] ieee80211_iface_work+0xe28/0x1350 [ 1605.907382][ C1] page last free pid 16784 tgid 16784 stack trace: [ 1605.913853][ C1] __free_frozen_pages+0x7df/0x1170 [ 1605.919038][ C1] vfree+0x1fd/0xb50 [ 1605.922929][ C1] kcov_close+0x34/0x60 [ 1605.927065][ C1] __fput+0x402/0xb70 [ 1605.931025][ C1] task_work_run+0x150/0x240 [ 1605.935598][ C1] do_exit+0x87f/0x2bd0 [ 1605.939732][ C1] do_group_exit+0xd3/0x2a0 [ 1605.944215][ C1] get_signal+0x2671/0x26d0 [ 1605.948703][ C1] arch_do_signal_or_restart+0x8f/0x7e0 [ 1605.954241][ C1] exit_to_user_mode_loop+0x8c/0x540 [ 1605.959513][ C1] do_syscall_64+0x4ee/0xf80 [ 1605.964090][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1605.969966][ C1] [ 1605.972265][ C1] Memory state around the buggy address: [ 1605.977869][ C1] ffff8880924ae700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1605.985910][ C1] ffff8880924ae780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1605.994130][ C1] >ffff8880924ae800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1606.002172][ C1] ^ [ 1606.009088][ C1] ffff8880924ae880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1606.017130][ C1] ffff8880924ae900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1606.025168][ C1] ================================================================== [ 1606.033207][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1606.040387][ C1] CPU: 1 UID: 0 PID: 22376 Comm: dhcpcd Tainted: G L syzkaller #0 PREEMPT(full) [ 1606.050960][ C1] Tainted: [L]=SOFTLOCKUP [ 1606.055269][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1606.065309][ C1] Call Trace: [ 1606.068568][ C1] [ 1606.071391][ C1] dump_stack_lvl+0x3d/0x1f0 [ 1606.075971][ C1] vpanic+0x640/0x6f0 [ 1606.079941][ C1] panic+0xca/0xd0 [ 1606.083648][ C1] ? __pfx_panic+0x10/0x10 [ 1606.088082][ C1] ? end_report+0x4c/0x160 [ 1606.092492][ C1] ? rcu_is_watching+0x12/0xc0 [ 1606.097241][ C1] ? lock_release+0x201/0x2d0 [ 1606.101904][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 1606.107001][ C1] check_panic_on_warn+0xab/0xb0 [ 1606.111925][ C1] end_report+0x107/0x160 [ 1606.116250][ C1] kasan_report+0xee/0x110 [ 1606.120666][ C1] ? do_raw_spin_lock+0x26f/0x2b0 [ 1606.125688][ C1] do_raw_spin_lock+0x26f/0x2b0 [ 1606.130528][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1606.135889][ C1] ? kcov_remote_stop+0x1b0/0x590 [ 1606.140901][ C1] _raw_spin_lock_irqsave+0x42/0x60 [ 1606.146088][ C1] ? __wake_up+0x1c/0x60 [ 1606.150313][ C1] __wake_up+0x1c/0x60 [ 1606.154365][ C1] usb_anchor_resume_wakeups+0xc2/0xe0 [ 1606.159814][ C1] __usb_hcd_giveback_urb+0x3d5/0x610 [ 1606.165181][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 1606.170375][ C1] dummy_timer+0x1809/0x3ad0 [ 1606.174962][ C1] ? find_held_lock+0x2b/0x80 [ 1606.179630][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 1606.185252][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 1606.190871][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 1606.196844][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1606.201776][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1606.206702][ C1] ? mark_held_locks+0x49/0x80 [ 1606.211449][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1606.217253][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1606.222187][ C1] __hrtimer_run_queues+0x202/0xc40 [ 1606.227386][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1606.233097][ C1] ? read_tsc+0x9/0x20 [ 1606.237163][ C1] hrtimer_run_softirq+0x17d/0x350 [ 1606.242266][ C1] handle_softirqs+0x219/0x950 [ 1606.247035][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1606.252317][ C1] ? irqtime_account_irq+0x18d/0x2e0 [ 1606.257587][ C1] ? packet_release+0x7c0/0xd50 [ 1606.262427][ C1] do_softirq+0xb2/0xf0 [ 1606.266569][ C1] [ 1606.269478][ C1] [ 1606.272387][ C1] __local_bh_enable_ip+0x100/0x120 [ 1606.277582][ C1] packet_release+0x7c0/0xd50 [ 1606.282252][ C1] ? __pfx_packet_release+0x10/0x10 [ 1606.287441][ C1] ? __pfx_down_write+0x10/0x10 [ 1606.292283][ C1] ? __pfx_locks_remove_file+0x10/0x10 [ 1606.297744][ C1] __sock_release+0xb3/0x270 [ 1606.302321][ C1] ? __pfx_sock_close+0x10/0x10 [ 1606.307155][ C1] sock_close+0x1c/0x30 [ 1606.311295][ C1] __fput+0x402/0xb70 [ 1606.315258][ C1] fput_close_sync+0x118/0x260 [ 1606.320003][ C1] ? __pfx_fput_close_sync+0x10/0x10 [ 1606.325271][ C1] ? dnotify_flush+0x79/0x4c0 [ 1606.329934][ C1] __x64_sys_close+0x8b/0x120 [ 1606.334597][ C1] do_syscall_64+0xcd/0xf80 [ 1606.339087][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1606.344968][ C1] RIP: 0033:0x7f08c825f407 [ 1606.349372][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1606.368964][ C1] RSP: 002b:00007fff933aea50 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 1606.377361][ C1] RAX: ffffffffffffffda RBX: 00007f08c81d5740 RCX: 00007f08c825f407 [ 1606.385312][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1606.393262][ C1] RBP: 0000558df3dd54b0 R08: 0000000000000000 R09: 0000000000000000 [ 1606.401218][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1606.409172][ C1] R13: 0000558e2d750a70 R14: 0000000000000000 R15: 0000558df3deaac0 [ 1606.417130][ C1] [ 1606.420420][ C1] Kernel Offset: disabled [ 1606.424717][ C1] Rebooting in 86400 seconds..