last executing test programs: 13m29.712820343s ago: executing program 1 (id=2828): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x84, @local, 0x15, 0x3, 'fo\x00', 0x1, 0x0, 0x69}, 0x2c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$sock(r0, &(0x7f0000000940)={&(0x7f0000000300)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000540)}, {&(0x7f0000000600)="bbc6351d5b17d69316ec14fbebe6d4f456979602ad91ae24f9a1da6834e77a49a31a836afb32294cf8453b100f60525874c6dd34f59950a10b18499cd72145cf42ccb624e5159a58257c6e1aed068f52", 0x50}, {&(0x7f0000000680)}, {&(0x7f00000006c0)="2219a8d1a15d2cc1d9f7e487ed6138173c17bebef35e5c731961e6d1d07d4bc0a9699ac13447f29c363112c81f005fb311", 0x31}], 0x4}, 0x800) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="05"], 0x10) close(r2) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 13m29.687000448s ago: executing program 1 (id=2829): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000002100), r0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000002140)) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000002180)={'\x00', 0x1, 0xd7e0, 0x10, 0x7, 0xffffffffffff27e1, 0xffffffffffffffff}) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) getpgid(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000000085af34"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = socket(0xa, 0x801, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="40f4e05335711d2df4de7000eaffffff0000a2ae1beef7c791a7c8dfa86ee834386414c4297f3243bb916df1848ccdc74dbf805ec63e94d86545d08b4d92e8f40865b43a165c06043040e4ebde82171e1a9685bbd7956e23a2d96fd62c4cc132f3d7f493", @ANYRES32=0x0, @ANYBLOB="830004000100000020001280080001007369740014000280080002000a0101020600080021000000"], 0x40}, 0x1, 0x0, 0x0, 0x24008080}, 0x4040) getsockopt(r8, 0x0, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f00000000c0)=0x54) r10 = dup(r7) write$UHID_INPUT(r10, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) r11 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r11, r6, 0x0, 0x3a) socket$nl_route(0x10, 0x3, 0x0) 13m28.753670537s ago: executing program 1 (id=2832): ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000040)) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, &(0x7f00000000c0)=0xfd4f, 0x0, 0x4) ioctl$VIDIOC_G_AUDIO(0xffffffffffffffff, 0x80345621, &(0x7f0000000100)) r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x9b) ioctl$HIDIOCSUSAGE(r0, 0x4018480c, &(0x7f0000000280)={0x3, 0x3, 0xb3e, 0x8, 0x1448, 0x101}) tee(r0, r0, 0x200, 0x4) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f00000002c0)={0x7, 0x101, 0x0, {0x8, 0xfffffffc, 0x3, 0x4}}) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000340)) r1 = syz_io_uring_setup(0x84a, &(0x7f0000000380)={0x0, 0xdbcc, 0x4, 0x2, 0x6, 0x0, r0}, &(0x7f0000000400), &(0x7f0000000440)) r2 = syz_open_dev$vim2m(&(0x7f0000000480), 0x7, 0x2) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000580)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f00000005c0)=@multiplanar_fd={0xee, 0x6, 0x4, 0x20, 0x7fff, {0x77359400}, {0x2, 0x8, 0xfc, 0x2, 0xfe, 0xf1, "20b3c937"}, 0x800, 0x4, {&(0x7f0000000500)=[{0x7, 0xfffffffc, {r3}, 0x6}, {0x1fec, 0x9, {r0}, 0x1000}]}, 0xd16, 0x0, r4}) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000640)={0x0, 0x6082, 0x200, 0x39ad, 0x4, 0x9, 0x7, 0x3, {0x0, @in6={{0xa, 0x4e20, 0x2, @empty, 0x7}}, 0xfffffffe, 0x0, 0xfff, 0xfffff801, 0x3}}, &(0x7f0000000700)=0xb0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000740)={r5, 0x0, 0x2}, &(0x7f0000000780)=0x8) preadv(r1, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/104, 0x68}, {&(0x7f0000000840)=""/47, 0x2f}], 0x2, 0x4, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=@base={0x0, 0x7000, 0x6, 0x0, 0x40044, r0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) ioctl$DRM_IOCTL_MODE_GETGAMMA(r3, 0xc02064a4, &(0x7f0000001a00)={0x0, 0x4, &(0x7f0000001940)=[0x0, 0x2, 0x4, 0x1], &(0x7f0000001980)=[0x7fff], &(0x7f00000019c0)=[0x1, 0x0, 0x0, 0x7, 0x0, 0x5, 0x3c5, 0x5, 0x1]}) ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f0000001a40)={'wlan0\x00', 0x400}) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001ac0), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)={0x6c, r6, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x39}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffff9}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x10, 0x3f8, 0x300, 0x70bd25, 0x25dfdbfe, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}}, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001ec0)={&(0x7f0000001d00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x4, [@ptr={0xa, 0x0, 0x0, 0x2, 0x5}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x4, 0x3}, @var={0x2, 0x0, 0x0, 0xe, 0x2}, @union={0x7, 0x2, 0x0, 0x5, 0x1, 0x3, [{0x9, 0x0, 0x4}, {0x5, 0x1, 0x1ff}]}, @enum={0x7, 0x1, 0x0, 0x6, 0x4, [{0x7, 0xac8e}]}, @union={0xe, 0x6, 0x0, 0x5, 0x1, 0x3, [{0x9, 0x3, 0x80000001}, {0x0, 0x4, 0x9}, {0xa, 0x5, 0x7}, {0x2, 0x4, 0x100}, {0xf, 0x0, 0x7}, {0xd, 0x2, 0xc4b}]}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x1, 0x7}, @float={0xc}, @ptr={0x6, 0x0, 0x0, 0x2, 0x1}]}, {0x0, [0x0, 0x61]}}, &(0x7f0000001e00)=""/182, 0xfc, 0xb6, 0x1, 0x6, 0x10000, @value=r0}, 0x28) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001f00)) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x1) 13m28.699384204s ago: executing program 1 (id=2833): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) socket(0x400000000010, 0x3, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e22}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x7ffd, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa13, 0xffffffff}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) pread64(r2, 0x0, 0x0, 0xadc) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000140)={0x463, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_UNBIND(r2, 0x40106437, &(0x7f0000000180)={r4, 0x8000000000000000}) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mount$9p_fd(0x0, 0x0, 0x0, 0x8c, 0x0) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0xffffffffffffff5d, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd7000ffdbdf250200000008000100", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x1000}, 0x4) write$nci(r5, &(0x7f0000000040)=ANY=[], 0x61) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000002240), 0x80) 13m25.754673521s ago: executing program 1 (id=2842): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'bridge_slave_1\x00', &(0x7f00000000c0)=@ethtool_stats}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, {0x10, 0x8}, {0x100008, 0x8}, {0x80, 0x0, 0x80000000}, {}, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6}) 13m24.66913121s ago: executing program 1 (id=2847): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) memfd_create(0x0, 0x18) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x117, &(0x7f0000000400)={0x0, 0x0, 0x10, 0x0, 0x3a2}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r2, 0x47f6, 0x80ffff, 0x7f00000000000000, 0x0, 0x0) 13m9.983098183s ago: executing program 32 (id=2847): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) memfd_create(0x0, 0x18) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x117, &(0x7f0000000400)={0x0, 0x0, 0x10, 0x0, 0x3a2}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r2, 0x47f6, 0x80ffff, 0x7f00000000000000, 0x0, 0x0) 12m42.211522786s ago: executing program 0 (id=2968): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, 0x0, &(0x7f0000000340)='GPL\x00', 0x6, 0xb9, &(0x7f0000000140)=""/185, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23, 0x2}, 0x18}}, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x1e) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') lseek(r5, 0x289e0cb5, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 12m40.562242232s ago: executing program 0 (id=2969): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r3 = socket(0x2, 0x3, 0xff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x6f, 0xfffffff8, 0x4, 0x8000, 0xffff, 0x5a, 0x8, 0x3}, 0x0) r5 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[0x0], &(0x7f00000190c0), 0x0, 0x1}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x9, 0x3, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000640)={&(0x7f0000000540), &(0x7f0000000580)=[0x0], 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x1, 0x0, 0x4}) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000680)={0x0, 0x0, 0x0, r8, 0x401, 0x5, 0x7ff, 0xd, {0x4, 0x6, 0x315, 0x9, 0x1, 0x3, 0x7, 0x4214, 0x1c9, 0x9, 0x2, 0x80000000, 0x8, 0x3, "e055a5e7cd28c03db092fc099643dd81000f2ffae2a6f7ae3cdd424fdb982f5a"}}) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendfile(r3, r2, 0x0, 0xffba83) 12m38.770646551s ago: executing program 0 (id=2976): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @local, {[], @echo_request={0x2}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={0x0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, 0x0, 0x140, 0x82) r2 = fanotify_init(0x81, 0x40000) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x802, 0x110) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000200)={0x6, r2}) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac0040002020800020003000a002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) read$FUSE(r2, &(0x7f0000002300)={0x2020}, 0x2020) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x24040854}, 0x24014080) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000005300)={'pcl818\x00', [0x800, 0x6, 0x10000, 0x80000004, 0x0, 0x10000cc7, 0x4, 0x10, 0x10000, 0x6, 0x4000002, 0x2, 0x7, 0x1, 0x6, 0x10000105, 0x5, 0x1244d, 0x200, 0x3fff7fff, 0x89, 0x10, 0x1, 0xf, 0x80000b, 0xffffffff, 0x8, 0x8, 0x6, 0xffffffff, 0xeffffff8]}) 12m37.860646048s ago: executing program 0 (id=2977): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)={0x0, 0x0}) r1 = syz_open_procfs(r0, &(0x7f0000000700)='mounts\x00') r2 = open(&(0x7f0000000240)='./file2\x00', 0x145142, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) (async) ioprio_set$uid(0x3, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x800000009) fsopen(&(0x7f0000000400)='iso9660\x00', 0x0) (async) r3 = fsopen(&(0x7f0000000400)='iso9660\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x1, 0x0) (async) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mknodat(r2, &(0x7f0000000200)='./file2\x00', 0x80, 0x3) (async) mknodat(r2, &(0x7f0000000200)='./file2\x00', 0x80, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000380)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000380)='./file1/file0\x00', 0x0, 0x1085408, 0x0) read$FUSE(r1, &(0x7f0000002780)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x5ecfb203) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000100)=0x200000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8931, &(0x7f0000000080)={'bond0\x00', @random}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@datasec={0x2, 0x0, 0x0, 0xf, 0x2, [], "25ff"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "b8b3"}]}, {0x0, [0x0]}}, 0x0, 0x37, 0x0, 0x1}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prctl$PR_SET_THP_DISABLE(0x29, 0x1) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000002060108000000000000000007000004050000000500000005000400010000000900020073797a32000000000500050007000000050005000a000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000004}, 0x40855) prlimit64(r5, 0x6, &(0x7f0000000300)={0x9, 0x7}, &(0x7f00000003c0)) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSET={0x28, 0xb, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x50}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSET={0x28, 0xb, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x50}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 12m33.701435801s ago: executing program 0 (id=2991): r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, r0, 0x0) keyctl$read(0xb, r0, &(0x7f0000000000)=""/64, 0x40) r1 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) r2 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f041, 0x8e7}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, 0x0) 12m33.049142646s ago: executing program 0 (id=2994): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, 0x0, &(0x7f0000000340)='GPL\x00', 0x6, 0xb9, &(0x7f0000000140)=""/185, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23, 0x2}, 0x18}}, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x1e) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) 12m32.630710156s ago: executing program 33 (id=2994): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, 0x0, &(0x7f0000000340)='GPL\x00', 0x6, 0xb9, &(0x7f0000000140)=""/185, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23, 0x2}, 0x18}}, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x1e) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) 8m15.534399819s ago: executing program 6 (id=3979): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400070000001f3d00"/20], 0x14}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20201, 0x0) r2 = syz_open_dev$media(&(0x7f00000006c0), 0x1004007, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x6, &(0x7f0000000000)=0x10086) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0xc4) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r6, &(0x7f0000004380), 0x34000, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0x7c80, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@window={0x3, 0xc7, 0x1}, @window={0x3, 0x6, 0x4007}, @sack_perm, @window={0x3, 0x7eb1}, @sack_perm, @mss={0x2, 0x6}, @window={0x3, 0x8, 0x6}, @window={0x3, 0x1, 0x5}, @sack_perm, @timestamp], 0xa) sendto$inet(r0, &(0x7f00000007c0)='%', 0x1, 0xe044, 0x0, 0x0) 8m14.356647869s ago: executing program 6 (id=3985): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000225c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000022540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200, 0x8d0, 0xfff, 0x401, 0x5, 0x9, 0x0, 0x401, 0x9}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xd, 0xb}, {0x3, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x1, 0x1, {0x8, 0x7f, 0x400000, 0x0, 0x3, 0x6, 0x1, 0x6, 0x400}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040e0}, 0x20044890) 8m13.953546671s ago: executing program 6 (id=3989): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0xfffc, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0xfd, 0x0, 0xfe, 0x22, 0x0, 0x7, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0xe) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, 0x0, 0x0) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x1000000}], 0x414, 0x0, 0x0) 8m12.110130636s ago: executing program 6 (id=3998): syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="120101022e6a6308fd0b27011d6f0102030109022400018afa100e0904f10502c270f0060905990240008108010905a4"], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000040), 0x3, 0xa2242) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_mr_vif\x00') read$FUSE(r1, &(0x7f0000000240)={0x2020}, 0x2020) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r6 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e501070000000000000007100400", @ANYRES32=r7, @ANYBLOB="20000100", @ANYRES32=r9, @ANYBLOB="010101007f0000010000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) write(r2, &(0x7f0000000000)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff0500000005d0000000000000039815fa2c1ec28656aaa79bb94946fe000000bc0003000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a8700"/252, 0xfc) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}], 0x1, 0x40800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c000140060404000b0404", 0x57}], 0x1}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x54, 0x30, 0x9, 0x0, 0x0, {}, [{0x40, 0x1, [@m_xt={0x3c, 0x19, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0xc, 0x6, "b82a2de6050f37f1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x54}}, 0x84) sendmsg$nl_generic(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002280)=ANY=[@ANYBLOB="a81400002a00070127bd700000000000017c00000c00028005007c8ed932a9000400"], 0x14a8}, 0x1, 0x0, 0x0, 0xc000}, 0x4004845) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) socket$nl_route(0x10, 0x3, 0x0) 8m9.041386881s ago: executing program 6 (id=4015): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8804, 0x6, 0x8000, 0x6}, 0xffffffffffffff54) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x700) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) migrate_pages(r1, 0x1000, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)=0x10) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x7, &(0x7f00000001c0)=0x8d, 0x4) 8m7.776251951s ago: executing program 6 (id=4023): r0 = syz_open_dev$loop(0x0, 0xffffffff7ffffffd, 0x160862) pwritev(r0, &(0x7f0000000500), 0x0, 0x5, 0xfffffff9) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x2}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) socket(0x10, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x3, 0x0, 0x0, 0x0, 0x132}) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/102400, 0x19000, 0x80000000000000) pidfd_getfd(0xffffffffffffffff, r6, 0x0) socket$l2tp6(0xa, 0x2, 0x73) 7m53.104976792s ago: executing program 34 (id=4023): r0 = syz_open_dev$loop(0x0, 0xffffffff7ffffffd, 0x160862) pwritev(r0, &(0x7f0000000500), 0x0, 0x5, 0xfffffff9) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x2}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) socket(0x10, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x3, 0x0, 0x0, 0x0, 0x132}) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/102400, 0x19000, 0x80000000000000) pidfd_getfd(0xffffffffffffffff, r6, 0x0) socket$l2tp6(0xa, 0x2, 0x73) 5m5.872435912s ago: executing program 7 (id=4815): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) kexec_load(0x0, 0x3, &(0x7f0000000140)=[{&(0x7f0000000000)="7e7fb9d8bcb1a4c451f7aeb68446366739a761a61e2a24f4a603e288fe96c6b6483227212cfa9e023969096c36ef39e05863cfecf4eb951598b7c058a85cc6aaa6c4c9d53c076c3e559447efbfaed8fdc969624e3a320947c36e69", 0x5b, 0xff, 0x1}, {&(0x7f00000000c0)="c2b2f6e6130ba3e5a8dc8a480431a9711ce569a80af64b4b20cf61373ff2882dbda222095590981ac9f998acaa93aa62b7dd", 0x32, 0xffff, 0x9}, {&(0x7f0000000100)="7481494f6559dbb11125d575f5c51c1741e61e31f110b919bc905aa88709ed41473d1989ddd69f", 0x27, 0x8, 0x100000001}], 0x280000) ioctl$TUNGETVNETLE(r0, 0x8008743f, 0x0) 5m5.429354815s ago: executing program 7 (id=4817): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000003b40), r0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000002680)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4040000) 5m5.367866415s ago: executing program 7 (id=4818): socket$key(0xf, 0x3, 0x2) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40043d0d, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000280), 0x0, 0x800) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44000) (rerun: 32) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r9 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r10, r11, &(0x7f0000000040)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r8, 0x0, 0x0, 0x0, 0x800}) (async) io_uring_register$IORING_UNREGISTER_PBUF_RING(r9, 0x17, &(0x7f0000000000)={&(0x7f0000001000)={[{&(0x7f0000000180)="86387b8313c21903ba45ff75b0d942515db8a67065e8d03c94ef709d16170c3d7788e18a5836ca35135bc1bb31458170a7d657418741945ff24206bf9b556f96d4fee24d543f433ab2589988f7c7f254dc3abefc5c873e6e79bdab88fedcc6c74b6f8bbe18eb44bd1a7aa45ab3cd732ffeaf93b8aaaaf672eba9942daf3f056fcbdf0af414b1c8b3227c1575e4220754474ba880e61b50cf543ea2bb2dd6203fd56e93a9e1d6ad2202f0c599", 0xac, 0x1}]}, 0x1, 0x1}, 0x1) (async) io_uring_enter(r9, 0x47f5, 0x0, 0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1709a70000000000000101000000080009003f00000014001f00000000000000000000000000000000011400200000000000000000000000ffffe00000000500070000000000060002000100000008000a0004000000"], 0x5c}}, 0x0) 5m4.91690326s ago: executing program 7 (id=4821): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0/../file0/../file0/../file0/file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0/file0\x00') r4 = socket$unix(0x1, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r6, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x808) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000740)={0x290, r7, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TESTDATA={0xf, 0x45, "c229dbbf4a40bf42201145"}, @NL80211_ATTR_TESTDATA={0xf7, 0x45, "e4600b0d25e469324b975af834a41f26a2a69d7436cb041516d83d4184281c46d027e43575b6eca2e99ecf0d92cfdf9c4c3d14409e39a8ac37f6d9cc4b51d875a9a4aa12b7a563a4a32ffc4de608ead0963ddd887447b5a5e8155dd06b8b0eca765f8e40ad5d66c257c8c772cf9475799c1907f0b1cafb5caa544a04d6768e4c4d456bce4d2141dc463f9995a167a63069cf8cb7fe908f70996bb9927a46726b6b2671c2d6457bf3e24fadc8efc96764a9cf6ca92bc137c350cb2903fdfa90a3b50fd3b6f2ac1bb79cc5100fcfba05bf618539fc6aeb6a3321a90cb1b9102e287e5e1f8c8356876c400e356083669bb27e5630"}, @NL80211_ATTR_TESTDATA={0x5f, 0x45, "dc374141cc9d885a869feda103103b375de03b4ba3dd3b622c5654058e3272ac0478f63150e9a873e071efebb543125f26804437afd639405dae42d02e0592e432eee0266909c112491a92af17ddf218eaf1e36f442058f07b7747"}, @NL80211_ATTR_TESTDATA={0x1e, 0x45, "405343b049702bd318a1a01be079bffd02286e91ce27b7398939"}, @NL80211_ATTR_TESTDATA={0x10, 0x45, "ee4e4aceca90389de7902157"}, @NL80211_ATTR_TESTDATA={0xd9, 0x45, "fe5c5d370973c7e091b708c6b332391cc7e2424e7aa93386ba407dcbc446da47adb3663774a1c56bd408fe71a7b836fd8b665af91f4054e36a53d56646c38de13d25db49e4ccb1a8335e5128ee5ca774d784438282aa86cc9fd959d39faeafbf96d0f4951f5028e7a70e9665ee11665c2ce9ccbd906fae8c3311e5a2822edf1efcaaf653cae3056d1577e07c1cfa3d17bb25f436a7372c213104d39b483b652bb5558d8ae1e375b5a7e9a2d3fd08d0f9d57339f765c615ce26dc041934b430807a312c329dd2945b52f137ee3787b9a5ef2b3705b8"}]}, 0x290}, 0x1, 0x0, 0x0, 0x8040}, 0x800) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r11 = accept4(r10, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r11) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)=@newqdisc={0xc4, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x94, 0x2, [@TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x4}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x6}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x5}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x8}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x100000000}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x0, 0x9, 0xe, 0xf, 0xd, 0x1, 0xd, 0xa, 0xc, 0x4, 0xc, 0xc, 0xc, 0x6, 0x10, 0x9], 0x1, [0x5, 0x4, 0x8, 0xb50a, 0x9, 0x0, 0x81, 0x9, 0x1, 0x3, 0x6, 0x2, 0x3, 0x8, 0x0, 0x2], [0x2440, 0xf, 0x2, 0x7, 0x5, 0x1, 0x406, 0xe4, 0x6, 0xf1c, 0x3, 0x30, 0x930b, 0x4, 0xe, 0x5]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 5m4.527172217s ago: executing program 7 (id=4823): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80, 0x23456}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 5m4.097308124s ago: executing program 7 (id=4825): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) syz_emit_ethernet(0x0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x40000032, r0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0xfe, 0x0, 0x0, 0x0, 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x6, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r6 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", '\x00', "0f00", "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]}) ioctl$CEC_TRANSMIT(r6, 0xc0386105, &(0x7f0000000480)={0x5, 0xfffffffffffffffe, 0x7, 0x0, 0x0, 0x0, "0ff8000000000000c5c6ff0717c3a86d", 0x0, 0x2, 0x0, 0x6, 0x0, 0x5, 0xff}) readv(r5, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/177, 0xb1}], 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5m3.15859771s ago: executing program 35 (id=4825): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) syz_emit_ethernet(0x0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x40000032, r0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0xfe, 0x0, 0x0, 0x0, 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x6, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r6 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", '\x00', "0f00", "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]}) ioctl$CEC_TRANSMIT(r6, 0xc0386105, &(0x7f0000000480)={0x5, 0xfffffffffffffffe, 0x7, 0x0, 0x0, 0x0, "0ff8000000000000c5c6ff0717c3a86d", 0x0, 0x2, 0x0, 0x6, 0x0, 0x5, 0xff}) readv(r5, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/177, 0xb1}], 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m40.378273629s ago: executing program 4 (id=5618): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e5010786dd000000000007100400", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="010101007f0000010000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m15.468989016s ago: executing program 5 (id=5671): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5416, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f00000004c0), 0x48, 0x820b, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) sendto$inet6(r2, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x51, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70200"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 1m13.33446852s ago: executing program 5 (id=5672): add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f00000022c0)='user\x00', &(0x7f0000002300)={'syz', 0x1}, &(0x7f0000002340)='\\\x00', 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) dup3(0xffffffffffffffff, r0, 0x80000) r2 = syz_io_uring_setup(0x1108, &(0x7f0000000880)={0x0, 0x2, 0x80, 0x2, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r2, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r5, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) utime(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x810000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x30, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x401}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x40) preadv(r8, &(0x7f0000000240)=[{&(0x7f0000007280)=""/102397, 0x18ffd}], 0x8, 0xeffffffd, 0x7) 1m5.574977029s ago: executing program 4 (id=5619): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast6)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x7) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x2) (async) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) (async) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f00000041c0)={{r0}, "c4f95b5b0eec1295ed5fde78dc97017b3d735495a9b6fd34be8fad03d67506221248a114169e1aa3c6be5bf00f4a4e8f25f2921a754cf5af2cfdfd00a85e492ef3e7ad2a2b91c804649367c71822224296c6c898f81ba6397a3a971a31fd8922f30fafa4f9fae3ec2b06b924fdc60764b56aeb572bd277e55b9b61dfbdd400d28427e708b8b360f89768b15827c7784a6ebf53a0cc516c29e2eb539837e52dd738d74799393237b371531ce8a4a71264f4b63ae0e03ca5b46508b95000c5e4e4c90fdd3f8a6d4c41125c9967faae14b3d9ad9940cf8de0fbce8747f985d00d4c1c8fa07d0178ab86db39b0d184f4f9e10f58f044abdd822166d35587bb6e5369b94d661b12d2580dcd5130f7e43195602236a7acb72ae2815e164cbbedc6eaaa506ad803d75b981ac2d2316f700ee27b4470c322c05b0781c3998b77bc45e5a82ab366ca0ac38c2fc2757c5ecf3a96d7a46f0105ac98a891e9db5a31a6b23b5c8480ade1fd86ddf750cb02d4c15a77d492e3301dead877a43fb1a6dec65f13c9291efa7a2105954becdbfc740ef303eff3d91979d09ecd5a3028cefef882d11dbdd5d019a431d292864d30b528d690735ed4554e36be5c471ab86abde55514307d222562bb0f78b1fcda9f5c2fe29ec73d52438095d5c5f7b779e02883cd3d6998b2ceeeaf55d96688808921a14574881cfe8627c6973314e795f285cb248a40150d311a09eefd425b2c3e74473e13e83befae62f9178f4c33a6087227dee9f17922c8f5d1f2dca0d34185c5b1cdce2e72b62adb5e384dc11e8c61ef241f6e18c7b7aea85d078edc359760fcda76aedc348548f8707e40ba73293d3006573d5ad0ffca0ff1bf2d95f0c85336c9a72d79cfd8155697fabb9b86feced849c87d8a1d34f846bb057b3e629aa1b52915ee39bcbb3870c716b5c249eadba4d25822f7d6a004450b99a331ed97efe6201ac568e4856dc9344b6a4ccc1e6862b2b2f883830e794f491aaa884dd3dd6883ecb9ca9b6979513433f5d34d5dba5d3030b522ef255bfb33f5ce5c6069d207f0fc18ac28eb529a3f1c7ebc52dc19c107ce1dad606498c059fe4ba468047d962cde887ff74fed1257afa3624a157c3f3a2c22dcf7182e38d04559a2a9cc0e03213b92c29e12639782b2eeaa271b3a0b95be19ebbd12342b5309bf28facf5de6e41d017d70b7fb5a85e029f4b08b1e1c6b2ee0682a9ba05acac88b0d0ca42122629cb7609077ab823ad3408bac3c8341fdb3527de3a8dcecb230157d6eb86d3ee72b43c1fae057b8a2c3863fd7ee125dfb0fbe19ed2286423453467737c548aade6930c666d7a5b1deb32a8d0d48c996985c7649e891676b501142bb18cff229bc29868b66b42b6427c0bee939f4b2a4c797b6e2e896e49b56ca7ee1af49d2c950341fa8fc089f2c9a0050fe852e67ca8ac119d582f904f7cc11ae05098391419897427c82b6b2ce7eb645665dd3c162eb410e06a11cb2a922cf619f3dea72ac22d8f3602e3b99c30e963d101c89f592d15fa42b756d0012ed5c19762bb13cdb500a4635e9443afbc3861ea7bded54290a6e5e168aa2d1054883228420efff655a7e161b57d8fe9a725a15bfb4151648014b8d3182596d7c75167314cd3102350ecce2c4340e833a25fff13309cfa8915e55430a78a889b4c0309fbcd738eaedd4a9ecf29e351af6c0740eb9a174f64f011cc300c631e796700b481b55617f923dc6d64622fee8ff660badc9b9e7a83bf239b3a4bf5ffae669a3ff2184dba9dcbab6d0729e2006abb20c8cc8cb8aeda522732cf648004eaac53e323d96751588e44f29fd5befc23942365e7b2371e544f4911bc68afb05fce8283e933a3a3b454fa50baa701b6de7dc17a3aefdf847a3dcd7fbe2858937ccb9ddf29e7aee91e58ee90bcd17c808402e6c186c52447344aa6eb7a799820493f90f2b86ab3a83800793ee556677b528b4ece66d9a9d2e3a927d5a0e338511cfe0cbfdbe8bc2183884930e2c43e5f1ef2f63c19b30073c97f328b7a0d7693ad744e527ec0267b58caf5fd2b4c274020e94e9245047f554551bb412168e3e90e5bf4c821b5dc39758ebb97c547871b3216ab197f457d9a27c468f44baeeffeb9a2f7b881b8126258f6736faae8516179ca9efe3d60f9639a4ec78cfbd9424623bfff884c48e1435cc0e523a92ceeeb22c5ef0cb3f86600bade55b99128fc25b134a85f1764b169ba26d7a1c827ab55f2dbca7127887eddf03dc0587f34054b6c4b25bf952f7cfc298d7fc80f7eb24b5d2cd09dc78cce1b81ca7a7bf8dc71cbfd451dd7221efe4860bdcedea395d4c50824a3f75895a6d9d6fc116998f721920d7f8158b23570c4a501385dd894acc4920651ddc19488154ea9729bf839944f8de4c48d9ec4d6ce38da23a5ea1e41164fd5e638ce4d95690c0fb0d765d5694794b92b76e453f475bafd432cf69ef8cd90340d50c3631740c98a479eaffaee5ee2938dec66426590eb148295378c8723a109920ae92ea29b884e4ab4173560ecad7cd49acba0ffa830e4ed86b6df3af1b23af0eb22538846337e8d25300c4b6852238a70b21a105f34874bba2bc1077c2c11ef74eaa5df3528edc211fdbe1759bc8d0bcc8975431ca99b9ad77251347ff68d13f23c5dce574e40b03f3c8f83acf7b10004772ede16a9d6bd1a51a7d8a55020bb0599693d5287a9cf7b37434624839ab89d2b0c495b2ec14cdc00aaae000fcef9bc4881c9eaf26280e686213819902fd58bc5708da67e3d3a3f7d64ba184264b64b42c31c0b18dfb59e1f823e9a55e0d89e9381f5dd79853e963ddd40bbd2d37782408e36e82ed2c2f4003ee015bb9cf3d9398f949ac902cb2a52ee59fd51d8cf97af66c63f101da00c92be102497ef5c10db0faa0b667e4b75f03e7591d5fc0f299f3b063509fc360eef9ac8395da7032290fe9d0dd4ff06526cb7178d8efd4d09c62fb43813ad8b87590bbfb11f13ca712d0d18382b9c4d7cfa4f1f81145b8b492d82d8ed6b611896a0c4a7682ff615503b1d912b182364696c1b7aa662d6bdc40cdd3f98f4ff905e334ddd99d9f87fc27a4ac2e7896f5b8792e29939005e0be02599da3988ff29cc0015f61a5b357e8edbb57de378723a8065487c954670bd9d08839c0f60e8b9331bef20b76d604bd85a410b8cc8d7be5933f45746bef9d831244a5bccc98aeed78d6f6f5e3b543c39b7c152dbe957309b88ad03821c0d7ab56dc194e3343baeb353e72dd7e216565e6c8634ff1933c38a1ae3c4600a8e182a6e6078a60b1755a14b69860a4af172e38d83b0c1324d193cade868586d5b07c695b84f56881c8db65d5b15fa110ce9a35c2bc0af5ca632c303e03f50cab12ea3afdf989086764054a26b2bcd0df8e646ea2d2b19c258f7cf75ebb6599320d137b3c353d499a548a465a783ccd9fd477fee1d2c642040b9bc1f3ac9f9abb96d5a78597febc54b714945aa3c55c61c1a955568a673c523c69c2d4485fc976f27badcaa1ccc2438b1671ff8e56446467534cbe6aa35e61df30adaf48470d81875d531979393268842f5ac7a28dad17796f33d6d958a9e1666ff823b6f7f2d251074cb81ac454e7a4dc6ccc0c6a3a1f1993025eb6803107e6b1c181e0f704c9861a92188814ddeded1d31c597e1a40d31cbbac543de22b49ad837e9c2558edc273c371b46bdfa3f531296b9dfe13f5512431462a5308595336d0a4a74867d2d0a4891a126ad0bcfca2d5712414d74026d1f9b349db0f1ec1ec409317fcf1c91d127581f06225160857d76a3e251400a643722640c138c3aff7b55b8d2502ca16f70d9f92554001abc812c7cefbe90d663a9a579091ab8812b86b98653b50a1415548283e5611e4ddba7760c4acb5e2accf62c87dc534ef98921d828a9f583b041a7201fb7faf35767c2658b88e5e6947eae01ff47f1cf2721fd5d835b32938ed57bc9d07972e79b7d277057855baa4abb3fc3a396524c7790ab30f39560d146f9e91c3b1fac8fbc9a186fb48c57cd08860bbea2d055a158d2805d763903d14290440f60821077d1a113af2edfa50bd29fc3b84c4905536d490c9d67f100a2160169202eb1d9743f8169ac7d27f2a8e393f111f4f1174147086cdc935942f556851306a2bffe616647337aa292237e33c00900932b194722f3505bfc296826f086ce92a75975945416655007187461fa3ca53396031a1e6446edbf2f71fc69a2c19da69f0311811d8775ac6b422494987884f654358186adcad2053272e4fd6b3e473262c426eda383d07c5065769457273f88f2e6f9fefef328b6112a22a17d69263499fe0446863cb6580049b79355382bd25438b6c524053ffbb8b64ed29dc5690965705995d88e01aabe49dac5389a46a887df7e0e6eed48c7b8fb99d85565d92538db02be25872d48ff03e71b4ab2c41be9b82bf2dd409a366525d1785cd9eb7bd3119dedf74ab5d8a9d12c20bba904c7d6aee3e05bf143ea8d742cbc2efd25099a09ce042e6539317375fe4f27213fd84980e1b2fb3f7f1c3cf72000a66ff725475125589a348a093ade68be38349a3037d7df0ac7c120afc58d95a26b43cd4659440feae9919dff017de6ffd6c25cd2444ff4fea0e190a72c3b5fb566c0d1a3fc7786e10c2b4176e783b3ee62a360ac3e755060ed1fd9894fa0911804c80138ad46e714ba7f1fa4a6cfbbf805260f9f3db4b685710df53cacb654cca8a9baaeb7b55604a0cb7b4c468314799e93f1f0e6b8be521ffa662a53b4cd8b06e0ba666081d2d6753153d44f9ee22d570367d96d2aaa2ae023e5b1a4319776f0c57c95955ba0c76f04b0f1bbc1d01c349b9d8f11255d157da27aa96d0aa27319a5c540e7823ea07b7361f776e44234423abcc8daefaa27d7afc2b06b774640e06b319f5a5af7b3540eeeadfce203f2a06927436e4da493a1a6d1f1fa3b807fc0a154c9e2104c1f8c306e9ed7b83678355c54c237718657f3556d315943723c84e9c8ff9142b05b45d35b323950ba92756fc065ce16bea8d55c873da050a9a37430350805b309a5765270e0a1c4018b55a9fb983cc8654b5ba83f4f16a3395eb9a3cdaea24f36d30ce7ba617fd04aec452da00fe3393b04ce73d1adbf2a8180b7e6c654b50ca562d6ef76b78fca4825b24669ad4c5980d1c99ee864fe713f5f977d3801d771713167967ce6fa5cc5ecae1b97d0cd4b21c5ccaf0069a70a946ee19da502ff6aba35a37f4d39f347d0db0d604d4c206591ad8dc43a19f30fbd98991c5ff5a4ddadd0af04f7c2b4539290f2a5861b58864cd5f3ee4554d3cd5b5fcc8be4fb550b3a9cdd577f7bc3265b3c28c5692b77c5f1a710cf1bfb12037465765b66eecb0676b4bc2d87e1a65793995dc3c2127f73f5ac9ac4f0982a595060026d9408b6f46e59dd5f65c11b090fe2d80f616ddfe5bed1679601356e37666dce23f055dc4bb34eddf8a740ccfca21020167512fe974dd6b49d8ee69dde85b1ad16d09d86691a482f0feab9307219e323189204c9066c9281b078c65821e34dedb47f17f4336e3b50e9428f34ba6a4586a61c75b58df7e23f5dd2299c4e286e9668ca4f86244fc19148fc46edbc843302d38e8cbabebdda2f0aaaa1edc0d2d7bbc7c6adcef23b06dfe09889b7d53d149b00f5cd204f088df394b59bf34bc983566e3a1b76f94dbcdaa4e00116a3ea8ffb691bf620b321b83f5800ec86659a75e1ee0551aeb6656d1a71c791df5537b7a0322340dd762e4d647fddf358ed9774058f631c6c"}) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10}}, 0x50) (async) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x10002}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r4, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) (async) write$FUSE_NOTIFY_POLL(r4, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) (async) syz_emit_ethernet(0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) fanotify_init(0x200, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r2) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r6, 0x1, 0x29, 0x0, &(0x7f000000d340)) 1m4.578743762s ago: executing program 4 (id=5684): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0x3) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) syz_emit_vhci(&(0x7f00000024c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_read_num_supported_iac={{0x75}, {0x6, 0x5}}}}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00'}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0) r6 = dup3(r5, r4, 0x80000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r7, &(0x7f0000006380)={0x2020}, 0x2020) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, 0x0, 0x0) r8 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r8, 0x47f6, 0x0, 0x2, 0x0, 0x0) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x123a02, 0x0) pwritev(r11, &(0x7f0000000040)=[{&(0x7f00000000c0)="b2", 0xfdef}], 0x10000000000000bb, 0x7, 0x1) 1m3.448646651s ago: executing program 3 (id=5687): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000078000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0011800a0001006c696d69740000002c0002800c00024000000000000000030c00014000000000000001010800054040"], 0xc0}, 0x1, 0x0, 0x0, 0x40c1}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="01002bbd700000dcdf251d00000008000300", @ANYRES32=r5, @ANYBLOB="b546a2ac7d7b5d1740542e3f5ff6c1389cb064a437872f7873c6aee8bb3e6297f0144b9db7b69c077f5bc757786c743b6d044b6b7de660cdb5506bd1b2177efba28764c53e9de245e5bef2a8132fb20c29c71cda88a5b7c5b22d869b01e521a597a43a6ba4419c111e0ab815a9a1c0740e605865bfac1f4369d3e0285dd80a79b5add1152a962eff94baf8cf9cbaac68feb41c2ef86594a60ed898c4778cc636b96999d9f5880ee1"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2400c0c0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYRES64=0x0], 0x88}, 0x1, 0x0, 0x0, 0x40011}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x8000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000000000406de7a40eb7c0d04727010902240001000000000904000001030001000921001006012207000905810300000d0300e084a6918858ec443d1bdeb112fc3747ed1fb73f6ba46483882bdbd8dc3e8c35a6665cbf0c382ce4902604a8de709b531cdcd7a25fc8064ab921a27ea005ac1d8063fee66de81c2f2fb7dd24afbcc7ab8d50291e02f8296b7ef6fbf27c1b37292c58286762935a3ee9be80aff2493e2c11edd2e81338e8d792e037be9ab9a56fc06d4c284b093070fb9b86d2baedae01d2be0e3ce8"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0xb, {[@local=@item_4={0x3, 0x2, 0xa}, @global=@item_012={0x0, 0x1, 0x2}, @global=@item_4={0x3, 0x1, 0x9, "658ca26b"}]}}, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x1, 0x1, 0xfffffffe) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0xa}, 0x1, 0x0, 0x0, 0x4000010}, 0x40) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYRESOCT=r1, @ANYRES32=0x0, @ANYBLOB="0003000000000000"], 0x20}}, 0x884) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c00000000080102000000000000000001000009060002408808000073801766b2c28fcf00675d9724d61de930eda061ae2666d0489025c1560c46827c97ea1d6349f13cd18979b300d99dbc502c45f319a525ad77db91a90124558ee2e5d8397555b416dc7ad409ae614097fdd897f69388a099cc473b6805c9028d86b3e4254ee07e752decfb4a36b716d6e0b8d3c884dcf71963a7b2690ac3a63d261dbb74cc7f9648a321a9345c50431c32fe39d93647752682f5d5e6c1b989cc4705eae1ffb768a27b1e85dbd981"], 0x1c}, 0x1, 0x0, 0x0, 0x44008}, 0x40010) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x42, 0x800000, 0x8, 0x7}) 1m0.412215218s ago: executing program 5 (id=5690): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000080)=0x5, 0x4) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e94d1a84b7fa0bf2cca6b3a9e63b680b609000000000000005386103a5ccbe47b7b9a0bc5fe096be6756d0008007800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r0, 0x118, 0x0, 0x0, &(0x7f00000003c0)=0x14) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00e70008000200d4d73603"], 0x44}}, 0x2000800) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000040)={@remote, r3}, 0x14) sendmsg$inet6(r1, &(0x7f00000018c0)={&(0x7f0000000300)={0xa, 0x4e23, 0x5, @private0, 0x100}, 0x1c, &(0x7f0000001740)=[{&(0x7f0000000340)="108f12b17db03e1af0c213f94f91fd962be0727235d5bb8c8dc5934d0fec3fb9cf30422e72c87fadb942f8f86451f769c7efe50bf6539f76b971b773ec1386783a9d408d", 0x44}, {&(0x7f0000000480)="a76f487c46f11886374b18677ca21c828ac2e67185edeefdad778470a34080f1872d8f0eccd77d2287175ae26f2dfe6b5c01bbf20b50ce8474c0334cefa85f924903e10e8db22e31bfe65f7ac1e930d1bd37532cec103053a4100f17a312f941ca70086e4d79e86fb8513676842eaae1d7b2199364b8c2de01ba77d694dcdecb6862e4dfefde7cb990e4d3218f6e4883802268e74e362961db137047819321da3e5f3832bddfd1c7b3aafcaa59885bfe093b011d89161355f4c1ec3bf23bdb5e88eb2e0a3f177c55fccbdc3c4645e5780e7b2dd09a08c6337510fcb5e34d65c05aeb445de2d3a33b7ddf4c6bab0e", 0xee}, {&(0x7f0000000580)}, {&(0x7f00000005c0)="93a042eeed0e3943b6b0870ea385be5692ec6e86e7b8635f7942ffc44f09fe6b694a1bd426bdaf2d79b53e61e3b34fc4534f1d1742929c74c53bd56c1cf243e340e60d37afe24bd41d59f967af939c55584740a56f2cdbe03147fad7469fc2e6da7eb55c1dd3966f5502106d952142c706441fbc5ebcecaf", 0x78}, {&(0x7f0000000640)="96d3d4d8a9d9313e43a9ab7c511bbd17892c21971f80a2b27b35980ce5d5c52c064234535af84ffdee03fab47b3493d401df78413873a2612786d595ab15d06158aaf1e809e55b005bfcf7b0119e6f4f1df5582a6bafd86847fe0477", 0x5c}, {&(0x7f00000006c0)="3a8c1be5857f6a2433d89010b419f3ca55b08d2d71201dbb7a7a0b73379f3d80995e1f3387b952388280ae7927abdf2e417345665863f076d9658efa531a0e8319d4b6003f4e1d1142b29677cb15dc2a8119b4111df8bafb48b1ff073021624e70cbeea9469dd43f8fd7e772d4cbe78eba83265fea3b4891de", 0x79}, {&(0x7f0000000740)="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", 0x1000}], 0x7, &(0x7f00000017c0)=ANY=[@ANYBLOB="2400000800000000000000003200000000000000000000000000ffffac1414aa", @ANYRES32=r3, @ANYBLOB="00000000380000000000000029000000390000000204020900000000fc010000000000000000000000000000fe8000000000000000000000000000aa780000000000000029000000390000002b0c014000000000fe8000000000000000000000000000aa20010000000000000000000000000002fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000001fc020000000000000000000000000001"], 0xd8}, 0x4000) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x89, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0xff, 0x0, 0xfffff038}, {0x28, 0x0, 0x4d, 0xffeff024}, {0x6, 0x0, 0xff}]}, 0x10) r6 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x237b, 0x400, 0x7, 0x28b}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r6, 0x40f6, 0x4f7c, 0x0, 0x0, 0x0) 59.255363319s ago: executing program 3 (id=5691): socket$inet6_tcp(0xa, 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r0 = syz_io_uring_setup(0xbde, &(0x7f0000000640)={0x0, 0xe827, 0x80, 0x1, 0x3c2}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000f14010000008000fedbdfd09d7f77863ab23dccae52c26a2526650d0045006f70615f766e696300000000775273abbcf361449d5c41407107da2f37282ab94bf7e07c33e50a4783a8644bbd8bf0e0c5ab09230d492bd9160200c1d71b799fcbf04e21015bd51e78daf99db0e3aa3b2e5ae981a6d82092fe4b3f5f75968c61d282fd064d2ac2fb3c73d460248ff9d894b98504e73bc062c4d40009ae5ccea090477e75ac71d4d22c10c706"], 0x20}, 0x1, 0x0, 0x0, 0x4004051}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_complete(r1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 59.091317052s ago: executing program 4 (id=5693): r0 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0x9, {0xf8000000, 0x4, 0x2008, 0xffffbfff}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getpeername$qrtr(0xffffffffffffffff, 0x0, 0x0) get_mempolicy(0x0, &(0x7f0000000100), 0x3, &(0x7f000000f000/0x2000)=nil, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x400000000fffd, 0xffffffffffff7d0d}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) setrlimit(0x6, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x32) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1}, 0x20002100) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) getrlimit(0x7, &(0x7f0000000000)) ioctl$SOUND_MIXER_WRITE_VOLUME(r7, 0xc0040d07, &(0x7f0000000040)=0x121) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r8, &(0x7f0000008340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}}], 0x4000000000002a0, 0x40004000) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 57.424603482s ago: executing program 5 (id=5694): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) msgrcv(0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1000) syz_open_dev$sndpcmc(0x0, 0xda, 0x16000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, &(0x7f0000000140)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000000c0), 0x400000000000006, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0xf0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$RTC_ALM_READ(r2, 0x40187014, &(0x7f0000000000)) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe000000000000", 0x1b) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r4) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000900000020"], 0x0) mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) 49.448690777s ago: executing program 3 (id=5696): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100070000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, 0x0, 0x0) 49.200173525s ago: executing program 5 (id=5699): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5416, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f00000004c0), 0x48, 0x820b, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) sendto$inet6(r2, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x51, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70200"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x70, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2fc}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x30ae}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x48}]}]}]}, 0x70}}, 0xc001) 47.741021719s ago: executing program 5 (id=5700): add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f00000022c0)='user\x00', &(0x7f0000002300)={'syz', 0x1}, &(0x7f0000002340)='\\\x00', 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) dup3(0xffffffffffffffff, r0, 0x80000) r2 = syz_io_uring_setup(0x1108, &(0x7f0000000880)={0x0, 0x2, 0x80, 0x2, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r2, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r5, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) utime(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x810000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x30, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x401}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x40) preadv(r8, &(0x7f0000000240)=[{&(0x7f0000007280)=""/102397, 0x18ffd}], 0x8, 0xeffffffd, 0x7) 46.457214176s ago: executing program 2 (id=5701): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x400, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r3, 0x331, 0x70bd2a, 0x25dfdbfb, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000000) 46.360625547s ago: executing program 4 (id=5702): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) rt_tgsigqueueinfo(r2, r2, 0x2a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(&(0x7f0000002740), 0x80080) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) syz_emit_ethernet(0x6e, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r6, 0x103, 0x3, 0x0, &(0x7f0000000540)) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000370000000e0001006e657464657673696d000000ad0002006e657464657673696d3000000800030000000000"], 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) 46.231790027s ago: executing program 3 (id=5703): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000"/18, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010062726964676500000c000280080001001c000000"], 0x3c}}, 0x20048010) openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0) r5 = socket(0xa, 0x3, 0x87) sendto(r5, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IMADDTIMER(r6, 0x80044940, &(0x7f0000000280)=0x14) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xffffff81, {0x0, 0x0, 0x0, r8, {0xe, 0x3}, {}, {0x9, 0xfff1}}}, 0x24}}, 0x40004) r9 = syz_open_dev$loop(&(0x7f0000000000), 0x80000000, 0x10b200) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000140)={0x3, 0x0, 0x98, &(0x7f0000000080)={0x7, 0x2, 0x11}}) socket$netlink(0x10, 0x3, 0x14) 44.879305842s ago: executing program 2 (id=5704): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000080)=0x5, 0x4) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e94d1a84b7fa0bf2cca6b3a9e63b680b609000000000000005386103a5ccbe47b7b9a0bc5fe096be6756d0008007800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r0, 0x118, 0x0, 0x0, &(0x7f00000003c0)=0x14) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00e70008000200d4d73603"], 0x44}}, 0x2000800) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000040)={@remote, r3}, 0x14) sendmsg$inet6(r1, &(0x7f00000018c0)={&(0x7f0000000300)={0xa, 0x4e23, 0x5, @private0, 0x100}, 0x1c, &(0x7f0000001740)=[{&(0x7f0000000340)="108f12b17db03e1af0c213f94f91fd962be0727235d5bb8c8dc5934d0fec3fb9cf30422e72c87fadb942f8f86451f769c7efe50bf6539f76b971b773ec1386783a9d408d", 0x44}, {&(0x7f0000000480)="a76f487c46f11886374b18677ca21c828ac2e67185edeefdad778470a34080f1872d8f0eccd77d2287175ae26f2dfe6b5c01bbf20b50ce8474c0334cefa85f924903e10e8db22e31bfe65f7ac1e930d1bd37532cec103053a4100f17a312f941ca70086e4d79e86fb8513676842eaae1d7b2199364b8c2de01ba77d694dcdecb6862e4dfefde7cb990e4d3218f6e4883802268e74e362961db137047819321da3e5f3832bddfd1c7b3aafcaa59885bfe093b011d89161355f4c1ec3bf23bdb5e88eb2e0a3f177c55fccbdc3c4645e5780e7b2dd09a08c6337510fcb5e34d65c05aeb445de2d3a33b7ddf4c6bab0e", 0xee}, {&(0x7f0000000580)}, {&(0x7f00000005c0)="93a042eeed0e3943b6b0870ea385be5692ec6e86e7b8635f7942ffc44f09fe6b694a1bd426bdaf2d79b53e61e3b34fc4534f1d1742929c74c53bd56c1cf243e340e60d37afe24bd41d59f967af939c55584740a56f2cdbe03147fad7469fc2e6da7eb55c1dd3966f5502106d952142c706441fbc5ebcecaf", 0x78}, {&(0x7f0000000640)="96d3d4d8a9d9313e43a9ab7c511bbd17892c21971f80a2b27b35980ce5d5c52c064234535af84ffdee03fab47b3493d401df78413873a2612786d595ab15d06158aaf1e809e55b005bfcf7b0119e6f4f1df5582a6bafd86847fe0477", 0x5c}, {&(0x7f00000006c0)="3a8c1be5857f6a2433d89010b419f3ca55b08d2d71201dbb7a7a0b73379f3d80995e1f3387b952388280ae7927abdf2e417345665863f076d9658efa531a0e8319d4b6003f4e1d1142b29677cb15dc2a8119b4111df8bafb48b1ff073021624e70cbeea9469dd43f8fd7e772d4cbe78eba83265fea3b4891de", 0x79}, {&(0x7f0000000740)="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", 0x1000}], 0x7, &(0x7f00000017c0)=ANY=[@ANYBLOB="2400000800000000000000003200000000000000000000000000ffffac1414aa", @ANYRES32=r3, @ANYBLOB="00000000380000000000000029000000390000000204020900000000fc010000000000000000000000000000fe8000000000000000000000000000aa780000000000000029000000390000002b0c014000000000fe8000000000000000000000000000aa20010000000000000000000000000002fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000001fc020000000000000000000000000001"], 0xd8}, 0x4000) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x89, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0xff, 0x0, 0xfffff038}, {0x28, 0x0, 0x4d, 0xffeff024}, {0x6, 0x0, 0xff}]}, 0x10) r6 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x237b, 0x400, 0x7, 0x28b}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r6, 0x40f6, 0x4f7c, 0x0, 0x0, 0x0) 44.401349703s ago: executing program 4 (id=5706): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fddbdf250af40100"], 0x14}, 0x1, 0x0, 0x0, 0x1d36702d6b2a3417}, 0x20004000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r4 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r4, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0xffffffffffff8001, 0x400, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x200448c0) socket$inet_mptcp(0x2, 0x1, 0x106) futex(&(0x7f0000000000)=0x2, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x2, 0x2) futex(&(0x7f000000cffc)=0x3, 0x5, 0xf2, 0x0, &(0x7f0000000000), 0x5000000) r5 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x800, 0xffffffff, 0x0, 0x0, r4}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000540)=@multiplanar_mmap={0x46, 0x2, 0x4, 0x800, 0x1, {r8, r9/1000+60000}, {0x5, 0xa, 0x5, 0x4, 0x4, 0x7, "e24d6740"}, 0xfffffffe, 0x1, {&(0x7f00000004c0)=[{0x34d1de4a, 0x9, {0x688}, 0x10001}, {0x8, 0xe, {0x8b9}, 0x2}]}, 0x7}) semtimedop(0x0, &(0x7f00000005c0)=[{0x2, 0x5, 0x800}, {0x4, 0x6, 0x1000}, {0x1, 0xffff, 0x1000}, {0x3, 0x1, 0x800}], 0x4, &(0x7f0000000600)={0x0, 0x3938700}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000980)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000a80)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012bbd7000fedbdf251600000008000300", @ANYRES32=r10, @ANYBLOB="0a001a00ffffffffffff00000a000600ffffffffffff00000a001a0008021100000100000a0006158d02110000010000"], 0x4c}, 0x1, 0x0, 0x0, 0x44091}, 0x20000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000010000000400000008000000000000", @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$inet_nvme(r4, &(0x7f0000000200)={&(0x7f0000000700)=@nl, 0x80, &(0x7f0000000180)=[{&(0x7f0000000ac0)=""/229, 0xe5}], 0x1, &(0x7f0000000900)=""/104, 0x68}, 0x100) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x0, 0xd, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d28", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_io_uring_submit(r6, r7, 0x0) io_uring_enter(r5, 0x47f5, 0x0, 0x0, 0x0, 0x0) 36.853916621s ago: executing program 3 (id=5708): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000900007911a8000000000006020000000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x5, 0x400002) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000240)=@urb_type_interrupt={0x1, {0x0, 0x1}, 0x8, 0x67, &(0x7f00000000c0)="123b3983a091fca653b4abe2ae84722450b15f14549f03ac7ddefbdac04a3ca6fe9cbc1996e6d6035d8f61cec447c17cc9e6360a6ea2fc05676126e70332463389f1c59498b4df59d82fc9f725ae3d78135161d8d666695e7ce3708ff377970a4972639e5f2e95d5dbcfb8f9d9b51d63bdb4305144816743fe28f942dd7d81cc6fcc53bfa13659c94103b11f9b4c5f6d22b376c807b3a78102815aa5b56991eeddb5277ddf56c169556e373c1dec8e8a", 0xb0, 0x20, 0x0, 0x0, 0x80, 0x1, &(0x7f0000000180)='\x00\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000ffdbdf25010000000000000001410000001800170000ce52e59097683a"], 0x34}}, 0x0) ptrace$ARCH_GET_CPUID(0x1e, r1, 0x0, 0x1011) ptrace(0x10, r1) ptrace$setregs(0x2, r1, 0xfffffffffffffe00, 0xffffffffffffffff) 36.674833413s ago: executing program 8 (id=5709): gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f00000001c0)='binder\x00', 0x1) fsmount(r1, 0x0, 0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=ANY=[@ANYBLOB="f81000ca4f0007010300000000000000017c00000400428011000100686d61d31acb1b323234290100000000cc100280c510f480830f9e80a21561002100000008002a00", @ANYRES32=r4, @ANYBLOB="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"/4272], 0x10f8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 36.665853082s ago: executing program 2 (id=5710): r0 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0x9, {0xf8000000, 0x4, 0x2008, 0xffffbfff}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getpeername$qrtr(0xffffffffffffffff, 0x0, 0x0) get_mempolicy(0x0, &(0x7f0000000100), 0x3, &(0x7f000000f000/0x2000)=nil, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x400000000fffd, 0xffffffffffff7d0d}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) setrlimit(0x6, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x32) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1}, 0x20002100) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) getrlimit(0x7, &(0x7f0000000000)) ioctl$SOUND_MIXER_WRITE_VOLUME(r7, 0xc0040d07, &(0x7f0000000040)=0x121) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000008340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}}], 0x4000000000002a0, 0x40004000) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 35.882098734s ago: executing program 3 (id=5711): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r3, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syslog(0x4, &(0x7f00000001c0)=""/211, 0xd3) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES8, @ANYRES8=r2, @ANYBLOB="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", @ANYBLOB="04005a80"], 0x20}, 0x1, 0x0, 0x0, 0x20000855}, 0x0) syslog(0x3, &(0x7f0000002d00)=""/147, 0x93) r5 = socket$inet6(0xa, 0x3, 0x3c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019100)={0x0, 0x0, &(0x7f0000019080)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) writev(r5, &(0x7f00000192c0)=[{&(0x7f00000191c0)="91a734f9ec34f417d2fd4ceebf91d450feaee433e903ae37504e59f7fd28526a05fb", 0x22}, {&(0x7f000001a500)="5359b30adba55aba146e23d2d24b922d83acd5b893234064d638038f27ec41c3f6190b219ded5a2b500e79693dcde53c159faeed9dfe060c830a673d50991502867f049879", 0x45}], 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000003000000180001800d0001006574683a677265300000000004000280"], 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x2084, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './file0'}}, {@nfs_export_off}, {@nfs_export_on}], [{@flag='nomand'}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, 0x0}, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) 24.430113215s ago: executing program 36 (id=5700): add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f00000022c0)='user\x00', &(0x7f0000002300)={'syz', 0x1}, &(0x7f0000002340)='\\\x00', 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) dup3(0xffffffffffffffff, r0, 0x80000) r2 = syz_io_uring_setup(0x1108, &(0x7f0000000880)={0x0, 0x2, 0x80, 0x2, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r2, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r5, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) utime(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x810000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x30, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x401}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x40) preadv(r8, &(0x7f0000000240)=[{&(0x7f0000007280)=""/102397, 0x18ffd}], 0x8, 0xeffffffd, 0x7) 24.006804043s ago: executing program 37 (id=5706): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fddbdf250af40100"], 0x14}, 0x1, 0x0, 0x0, 0x1d36702d6b2a3417}, 0x20004000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r4 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r4, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0xffffffffffff8001, 0x400, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x200448c0) socket$inet_mptcp(0x2, 0x1, 0x106) futex(&(0x7f0000000000)=0x2, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x2, 0x2) futex(&(0x7f000000cffc)=0x3, 0x5, 0xf2, 0x0, &(0x7f0000000000), 0x5000000) r5 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x800, 0xffffffff, 0x0, 0x0, r4}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000540)=@multiplanar_mmap={0x46, 0x2, 0x4, 0x800, 0x1, {r8, r9/1000+60000}, {0x5, 0xa, 0x5, 0x4, 0x4, 0x7, "e24d6740"}, 0xfffffffe, 0x1, {&(0x7f00000004c0)=[{0x34d1de4a, 0x9, {0x688}, 0x10001}, {0x8, 0xe, {0x8b9}, 0x2}]}, 0x7}) semtimedop(0x0, &(0x7f00000005c0)=[{0x2, 0x5, 0x800}, {0x4, 0x6, 0x1000}, {0x1, 0xffff, 0x1000}, {0x3, 0x1, 0x800}], 0x4, &(0x7f0000000600)={0x0, 0x3938700}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000980)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000a80)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012bbd7000fedbdf251600000008000300", @ANYRES32=r10, @ANYBLOB="0a001a00ffffffffffff00000a000600ffffffffffff00000a001a0008021100000100000a0006158d02110000010000"], 0x4c}, 0x1, 0x0, 0x0, 0x44091}, 0x20000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000010000000400000008000000000000", @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$inet_nvme(r4, &(0x7f0000000200)={&(0x7f0000000700)=@nl, 0x80, &(0x7f0000000180)=[{&(0x7f0000000ac0)=""/229, 0xe5}], 0x1, &(0x7f0000000900)=""/104, 0x68}, 0x100) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x0, 0xd, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d28", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_io_uring_submit(r6, r7, 0x0) io_uring_enter(r5, 0x47f5, 0x0, 0x0, 0x0, 0x0) 23.758913456s ago: executing program 2 (id=5714): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f00000006c0)) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x628, 0x0, 0x488, 0xffffffff, 0x0, 0x268, 0x558, 0x558, 0xffffffff, 0x558, 0x558, 0x5, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@common=@rt={{0x138}, {0x4, [0x3, 0x800], 0x0, 0xf23d8cefb056ae2b, 0x7, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @dev={0xfe, 0x80, '\x00', 0x2b}, @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote], 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xffffffff, 0xffffffff, 0xff000000], 0xffffff7f, 0x1, {0x4}}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xff000000], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@mpls_delroute={0x1c, 0x19, 0x1, 0x70bd25, 0x0, {0x1c, 0x14, 0x0, 0x1, 0xfe, 0x0, 0x0, 0x1}}, 0x1c}}, 0x4004094) r6 = socket(0x400000000010, 0x3, 0x0) setsockopt$inet_tcp_TLS_RX(r6, 0x11a, 0x2, &(0x7f0000000800)=@gcm_128={{0x304}, "790c5218da21c0a0", "2150eb6a0707371d1a6fd0de74686700", "1b5847cc", "948380c2baf78f50"}, 0x28) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000700)={@in6={{0xa, 0x4e20, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x0, 0x0, 0x39, 0x0, "525d1c32ddca63d3045a7eedf31e9df628c5e09af92ea1bf3ae02468d02982b715cce27eeb83d455f791cf56e8c3918cde24cda3e17c0cb787d9c8f2d3c5f20c29d7b35a5a28177b0ab9117f53bcdb5b"}, 0xd8) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8}]}}]}, 0x40}}, 0x0) 23.295469951s ago: executing program 8 (id=5715): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x80000000}}, './file0\x00'}) accept$inet6(r1, 0x0, &(0x7f0000000100)) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@empty, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) 22.70712194s ago: executing program 8 (id=5716): pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RLOPEN(r0, &(0x7f0000000100)={0x18, 0xd, 0x2, {{0x40, 0x4, 0x5}, 0xffffffff}}, 0x2f) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffd}, 0x0) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="68000000000105"], 0x68}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x1b, 0x1}, 0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$session_to_parent(0x12) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0x200008c0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)={0x14, 0x3a, 0x229, 0x0, 0x0, {0x2}}, 0x14}}, 0x1000000) socket$nl_rdma(0x10, 0x3, 0x14) openat$binderfs(0xffffffffffffff9c, 0x0, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r6 = openat$sndseq(0xffffff9c, &(0x7f0000000140), 0x400) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r6, 0xc08c5336, 0x0) unlink(&(0x7f0000000000)='./bus/\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000200)=0x6) 21.577864877s ago: executing program 8 (id=5717): r0 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0x9, {0xf8000000, 0x4, 0x2008, 0xffffbfff}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getpeername$qrtr(0xffffffffffffffff, 0x0, 0x0) get_mempolicy(0x0, &(0x7f0000000100), 0x3, &(0x7f000000f000/0x2000)=nil, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x400000000fffd, 0xffffffffffff7d0d}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) setrlimit(0x6, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x32) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1}, 0x20002100) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r7, 0xc0040d07, &(0x7f0000000040)=0x121) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r8, &(0x7f0000008340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}}], 0x4000000000002a0, 0x40004000) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 21.52262917s ago: executing program 38 (id=5711): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r3, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syslog(0x4, &(0x7f00000001c0)=""/211, 0xd3) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES8, @ANYRES8=r2, @ANYBLOB="759d96c36f74b52e1f740b7035327ab930653aaaaf6ed4076eb10ec1e77fb27fe43e5086393de502b2c22ddb155a4755d2201e78e84042a755dc9d0a62a075f66dfe981a66582e1fc245be2730c33ea886abc56a86e844280962b45825e43aacf5fb7bd66d36d66389751945f7bd5f9857d9c6aa47ac6f5c0485634ec00251914b3f0980e95b41a87afbf0ca239a504d2fb8ca94fe3e1bdbb024f7fba2ad42cef8d041601670cb4846350bf2867688b234def515e9e98cce8d8d6b383296b030587b5010dea5d9922bc9a3339e429a15dd96d8300db5000608de86c31c7f5a455e433dd7194a33f759aa1864a8bdb1423148cbb39b9900d39994c25f8084b31a815e3a4962325db6d4e82d57aacb8ec86ee0854ace65207c9782d043bb35093d23575e68c8e2b218d4189b318fa4f803099735b39bf1114ecfc2fa9b85fc2546f3a8868868a535aa1cdfdaf7181771d21ca96010c4e9a193502de6adb6a6fd8eb77d0840c703b30862af4b7932fd57c8d77bc6622625e60ddf3a3a425ecbec5b64b9e0972d2f060e10408131d29cacd00b3f91727e7440cb1a50e7f5d392c18da1e2c1e7bd301d17fecdc13f2b413791ec58946b0f27b18f431cb74ddb37bcab748f2f3ddca429529224c71a85a1da43a0e7b1c92794ba151c5bd2e6e34a50196bf11a3bd55e47315a72cfa907484b4cc6be59e6eee6120be59ad6c602d85047c9bca9de43736d908efd3a4643bf8c24a05be315a5614601103a75dc0cf5b5be9a7b2d1af80a7f547d180cc1b1bfb5e6a5d989b83826a2c5872a1780fc7cf714b755d39011ebf8f812495f2e8f3b989c45f6008e323a3feb86cc04eeff265ce66fb36dd0857918c1075c9e1bdf305f2ef3f127b8ae9c0b22b9707133f9e47d3c072802ff9f0b2899cf0d15509ca521bf7c8331c9d76fd65bebad4ae4d2479319cea45af7cbac930310d97818b8113b4838664d48d00258267ab326e62365ee2d8c672e02a2e68b3b045c61ae0a3bcf14853b3a77ea4c002dd7f573881cd6322582a9689b25693c35110d26f58033977fd136861979f039f755516d71574a17441c081f7056ba2e5841f08c5d3d8a8b8426bed192c8cf41fb1dfa366cddf3f0e4a0f16cc1bb7ef371cbb36d141ea70a925473ab3acff911873304db28400c051329e2b1a2026c1dfb709f8ec03eadbf285d83096f2a12bf928cd5a8e0b2435519fb7f4063c190f014d3b324afb98eefcac7f5fe3b36a5f6b044d7a05951e86e8285525aef9b61b5df3a54a100d7f1e886d33cdc9df1b05af75ccaa89b4cc1ec1467030b996f0d1af23ac6a463fb4319b0c32fb41ee16d40e430f7872fbeb59ff2c541a7154c830abad6c52c58e47b2ec6a952c9552789f36a753f9ec07af79634cd66d267a6f05a106e59274524c8a73e65141ce60f65345785f902f98842c13962931d4349970838c4169199b38fdb039cb1732e9708497175f83e6794f935001455fbae37f122d41fe514bb0eb73690cc51bb935676940fcd9d9a515e6fc076846fae8099172a6bfa03aee3708c58cbd283c99f8814780395476591988ef588e506624ce297a24e8fc71beb9f3e68f575de95e5c40792014e498f31a46f4c8946f410f645b5fa73c85098521907ce135b0e0a93153d263c0951d59d7dce059fdca7cded89e9a96d41bbf938d6e45e310b68913ed3aef8a0bf3eb5a489572a886330ff3997f92f4840ce13665f1de493e4edfa56b257a5c42a48f8253c61b735efab5269614f22c2788b8f3b669bb613b8fe2faad77c4b46beb83df98cb8e275e2bf0be893a3684531fe11bb0ac48af9a0afdbed46a1be82ebeafdb4ffa2bd686bcbb3161522444dced7a748a2640dbb3b4ecce5fa371ff9c9936d309241ddb93a34ede0fc92aba51df3931b85f6ee92ac0a882871d20e7fbd6874062e88d075d3f1f3205ab76db9f421a4a31b24131b46b7982a1b2493c048c534f8df902308e7e1a05064b7795db4bc5daed8af01a1fcf12ee0ef573d2e78a479d95e1e1af8f60cb10c00333897db9812134b3cf76223e616f7ff497b3542e99cab7c2bfe59b14bcb53cec4c3cb54e3ee6e327822f17e616c36df8ea97320e028644fce9f69e63edc95b86737e019cc48d01625e88b71cb494319bb477f8d2126dcfd52b01e16c3989eb7f16f860d631b383da568a5a496deec55d487993cb82dcf71aab6503a47c42771515b95481842e1302e6866ba3521db9f088dba8c6d9821403999da210eb672d654488d52f0d892f8397f42cd571bfc4531ea319e1fed1b5e46305025ca4ed1bf790bd2964e0128950a8b6c2747208b29a329e3b13289399c512427704265d01b3df8b3a55c8142af1620f05aa274f6c7f8c747fa4f0dbc1d98258610ab72c8f71ac237312688ea65b7eaed7bbfac3a217836cede4129aaa240c4dc688532f98fa2970bfd5dd53ceae521743846318f5b60c51115e41593dd7e0268e68e58b2ecda0172c4b932426b1ee1fb78f0d1f2d3dfa34131ef6ac59e1cc5c5333fb8d32cc328883b8659fdc15b84bb86a8016c4daf922ec5c207a590682ecbd6a4d076e6841cc7684f1f8dec553e9a3d349e767f171686dd413d7f43e76357120c9e822bc2cb05451ca9febdf64c51d951b88eef219b074590ea644adaae6102d93fae9fae761b2fb0daf7dfe93fd00000b894737efcf6bd930301ca5272f738db5d35ae6df1f8ba597b2b9eaa0d5f763d285f073a37c146138d13838ccf5b2447827189729ee43b8e6b92b30c2ad19098d3e39a059a809fa62cb672352dbedf6fe006f28e312aef83e545ceb55b0b9301af4e1d2263dfd13156b4cc0eed0855d9969547d5be7acd7393ed42df1fff5a156e470929087a163d9291618617d8072afdd1260c767fda4403b501957fe8ab4a37b81ca8f96b72d732d628c0b5350751fcd031107be712b331391eb359ac2d42dbb0048ff83da790b46e5b8cbe24d91aca56deb7f72f53251154a42b73d5235b50b83d724158266cf9a6516d15631572f06f7f5ea8a96a61c8280ab38053f8e0c694822647b2d35c7f4ba296397918c52829e5cf13440eff75332f33b92d2c59b7fc3e3b287d66527abb6537842e6e2db0feb450c78ab21ea6864c03cf9db23f43c8a273a33d0428a9c9d8e35d509cdf6a935da5d830cfa1cec2c0fea25505fffa09aa1c71e25d79bc8197f3ddcc4df9d1cb8c15d5083c527405caedfe47abcad05d8e0e1cb9cadb2fb08667662faaccdd6562cc6039a09e27f7494b749397b4641e495cda54c103eea5f6c672e76ede43c65bb3b3f6c847131cbb4a34ee7b38e15731f62291cb27460fb7201b403b85f5c78a0602bcf6dad3208d3c873715aa0d9d3581f9291fbdebaf7169f1a614dc2e7d7b66fb7cdf8069ba02d5299b0b16df3d1f128d6d6b71075890387f57f8c856ac199feeaf02f2e96ba0e03177aeb63ca841fb55f0864c7fb81b938bcb3acadbe2bf09416d9a0f5138b2b2895e8026bb9f204f570d1a9d83f161fb64d177f1eee376188ed3edde2089b318b35e515473de12599c95c4d3a2991533f5da306335a8779b142c3cd8a55a2ba55254097558d906c4d71c1cc965f8929a48238f2e3c59d02df35847356de3bdb139f7c87eb0786bfc4cffe0cd55992c760a530278bb56ad7a87cad7a649bd5b51d106e91d2d60e9be9384281ffcdf2ba8538ac712ce282cef71f0045e1488eed61f7655a9cdfef0928018f9886b34a7a4148f61127b33a9ab00d36d2273ed45f0529df14b944a2574d26d541157927ab80b30ed07e6104e9bf9a0209caa250beae5ac9ad3795b3c12dc9640b66144f75f050a92780d1a60382ba91697a124e48f68ae278a831955006268da93b6a2a5c7159ed070963bfec8f8c16fe3c58da4e14e5cb23d86700abecb622f6d29c220ed91cb237a7e59ad259eab953a07d2cdce602133e86073e49f197a7fb6940a92b0d3c181ba740c2acd4f8a3ac34fb2fb6238fb63d3f6decd746bf780f1ff46c61b01d6d633120d1d432d1ca1af901697cecc1052fc8165721f5de5439427e1b0391e1fffbae9ba75bfc7d0d79d25c6cc2af0fe5597705d3749a83bcb330f9bf05506ca43320f2fca51cc21b72180b5801b38ac43c530c5908400c2d75cc769b3b8d7c07c3412f0fed96b9bb4672e12dcafa68669ce5f1807702cc5c766ab6246272a20328f9a03613ecfd27013d7ee817f961ab59f16429b59624a660147128ed5357d8a5507ff80517d41e9434eb877ce6321b4afadb64d8c356433763c55c62338462508eaa010f86dce5519d8caa3526440825f23c055031624f715f22265589a9aec0fcb1f7d260db38ad1ee46bc1b0e53e73c59945c82db6a27beb4b0ad6033afed51b66df75c4759d6a17ab35e7a79522a4a112467b9d8f2ef4448a5498ca9fd7388a4f800874c99bde8ef5386038d28945794ef7e4ddbe49a3c95b761154d802c91f1408a2ba1ef713917cc4c2a4cce49f3aa7a2b1751acef0cbaad2c8a6e3a24ff1cde40174ed868201a23bb85bec1dea994fbae925e94bab04759bb2f396e9937f78b0778613023dcef9a39669e7fcaff8d8b95e157c85bdc477e93960ef82c31d2c0ee9c2cd06cd9ee8d02e07326c81fa02c7452bed15240d5c97182ff50289bc0fc52472c5501de9c483fabd0d31a9e6427b3ec8ead85b65ed029a85cf7b98f7a83f980ac2cbc9939d7b2ce07c12470292120df8ee7474073940dd2b9dfc37e77585c55444a4ded4b5992fbbde5ed74c2c02bc3be76c6ff639ba0f0459ccda9a3be4a06656e2cf7161574a9aedde5d3fc89971902cc5052f281035ac50fe20964bebdced716a7e9ee91199911b0532370beb5f62222e1717fdde74d0022025c01c8be5933f25b7f22517cf89ac136a5648ffd9dfc916c9002ca5cd9a4be7cc7630abb75623531df771483ac2e8f060a942fd5b0b32c643277e0ef3f31e1b2da2f58dc62030feadc91c899cb4352be5df66344ee5f032c3443a245daa0ef5bdb0f9f06dfee73398052b2791809681f87b3c76d7e0cf4bcad40e26f6acc0362b4a2c56582beffc15ca5df4fc0c31196d0d116dc5bcb122e03abc7ade84b91172c6faa729d20782b96f9eb6370f36e8f7135c5e492ba77c18942117dcb42e3eed714d2b99992138f9fc907ed0531c8fcf069f9c2602a5c831f197c6e0f449becb0f379afa4cd8c9d3f98af9d12aeac4c3c9dc0419838fed45c9a9cf14d49fe010991681bfc4ff8c45c24de5760a02b6d13806982974b2336a4246cde25f50e49db9e64174a37ba7a5be389ceea02391510b7e2579759fc72c797d929d12c5b20f74b1f5a77a025667bffc40a3c0e7ad55d555b702d0ff21ca489bd5207066751da3c367a93c7c7244658fe27049c7e99f0d7be316473a82480da0ee2b386a3a01713bb40ceaf30d0ac4779480ee99602f03f38a7bd4b1adb08db38755eb8f0426990c0b3092b38ec1c90aea7200e14b1b859e3fd316e73b8015f6a6e62c11c0a4f6d870d11e8bb555dd182bd4e9e5c8252fec7be474717caee6ff3b04afcea58767363796e8de7f5bcf6cc4b75d0690b16d113593e8c14cc10d4a68256f1722bc494fa1685e385eb20b62d98af333672c4cabc2cd97216f827f7c4cf9dfd6dd510d2cb6fe705771a4dba99168d02dbe24664357e1916880c6ddde7e393fae4427acf74b02fad01e66159b1723a817f7f91b600167d9a8196e659e7110a5f10d6d72613b4a41f6a713ef605b6edc93c0db66a3ad4772533572611b5d8ccc218", @ANYBLOB="04005a80"], 0x20}, 0x1, 0x0, 0x0, 0x20000855}, 0x0) syslog(0x3, &(0x7f0000002d00)=""/147, 0x93) r5 = socket$inet6(0xa, 0x3, 0x3c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019100)={0x0, 0x0, &(0x7f0000019080)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) writev(r5, &(0x7f00000192c0)=[{&(0x7f00000191c0)="91a734f9ec34f417d2fd4ceebf91d450feaee433e903ae37504e59f7fd28526a05fb", 0x22}, {&(0x7f000001a500)="5359b30adba55aba146e23d2d24b922d83acd5b893234064d638038f27ec41c3f6190b219ded5a2b500e79693dcde53c159faeed9dfe060c830a673d50991502867f049879", 0x45}], 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000003000000180001800d0001006574683a677265300000000004000280"], 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x2084, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './file0'}}, {@nfs_export_off}, {@nfs_export_on}], [{@flag='nomand'}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, 0x0}, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) 20.186366208s ago: executing program 8 (id=5719): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) syz_usb_connect(0x3, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9d1c40899040a50b7e70102030109024400020000000009049700010dd5ce0008240201000000000905000000000000000705a3f6d2fb5b09040000014106cf0008240201000000000905c926"], 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700200000000000ff3f08000000480100100000000019002b000a001e", 0x27}], 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x4, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000100000061117820000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x1, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0xffffffeb}, 0x94) 18.669956738s ago: executing program 8 (id=5720): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000640)={@void, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x7, 0x1, 0x42}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3a, 0x28, 0x65, 0x60, 0x2, 0x6, 0x0, @loopback, @private=0xa010140}, {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x8fd, 0x0, 0x4}}}}}}}, 0x3a) 18.204643558s ago: executing program 2 (id=5721): socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/mdstat\x00', 0x1800, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x5818, 0x400, 0x0, 0xc0000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r4, 0x5761, &(0x7f0000000140)={0x2, 0x0, [{0x4001ff, 0x0, 0x2}, {0x0, 0x0, 0x0, [0x8, 0x1]}]}) fcntl$lock(r3, 0x25, &(0x7f00000000c0)={0x1, 0x0, 0x80, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) file_getattr(r5, 0x0, &(0x7f0000000040), 0x64, 0x1000) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2}) eventfd2(0x3fa, 0x40801) unshare(0x2040400) r6 = semget(0x1, 0x4, 0x39c) semop(r6, &(0x7f0000000080)=[{0x3, 0x8001, 0x1000}], 0x1) semop(r6, &(0x7f00000000c0)=[{0x1, 0xbbdd, 0x1000}], 0x1) semctl$SETVAL(r6, 0x0, 0x10, 0x0) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x29cab, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000280000000400"/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f0000000080), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r7, &(0x7f0000000080), 0x0}, 0x20) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) 14.884920858s ago: executing program 2 (id=5722): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5416, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f00000004c0), 0x48, 0x820b, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) sendto$inet6(r2, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x51, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70200"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x70, r5, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2fc}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x30ae}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x48}]}]}]}, 0x70}}, 0xc001) 4.106639588s ago: executing program 39 (id=5720): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000640)={@void, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x7, 0x1, 0x42}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3a, 0x28, 0x65, 0x60, 0x2, 0x6, 0x0, @loopback, @private=0xa010140}, {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x8fd, 0x0, 0x4}}}}}}}, 0x3a) 0s ago: executing program 40 (id=5722): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5416, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f00000004c0), 0x48, 0x820b, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) sendto$inet6(r2, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x51, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70200"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x70, r5, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2fc}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x30ae}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x48}]}]}]}, 0x70}}, 0xc001) kernel console output (not intermixed with test programs): rocess `syz.2.5465'. [ 1486.579708][ T30] audit: type=1400 audit(1771402187.480:6166): avc: denied { map } for pid=27339 comm="syz.5.5460" path="/proc/1797/task/1799/pagemap" dev="proc" ino=103364 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 1486.604863][ T8096] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 2 [ 1486.654180][ T8096] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1486.697752][ T8096] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 83 [ 1486.701499][ T30] audit: type=1400 audit(1771402187.480:6167): avc: denied { execute } for pid=27339 comm="syz.5.5460" path="/proc/1797/task/1799/pagemap" dev="proc" ino=103364 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 1486.733090][T27370] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1486.789096][ T8096] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 3 [ 1486.836576][ T8096] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1486.851253][ T8096] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 84 [ 1486.886229][ T8096] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 4 [ 1486.906483][ T8096] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1486.945718][ T8096] usb 6-1: USB disconnect, device number 76 [ 1486.959121][ T8096] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1487.019399][ T8096] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1487.069439][ T8096] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1487.117221][ T8096] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1487.177321][ T8096] keyspan 6-1:0.11: device disconnected [ 1487.723718][T27386] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5469'. [ 1488.285524][T27393] PKCS7: Unknown OID: [4] 0.0.0.0(bad) [ 1488.323438][T27393] PKCS7: Only support pkcs7_signedData type [ 1488.470469][T27404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5476'. [ 1488.485048][T27398] SELinux: ebitmap: empty map [ 1488.556926][T27398] SELinux: failed to load policy [ 1488.692251][ T8098] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1488.847191][ T8098] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1488.891424][T27413] binder: 27407:27413 ioctl c0306201 200000000640 returned -22 [ 1488.915002][ T8098] usb 9-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 1488.940022][ T8098] usb 9-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 1488.968725][ T8098] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.977281][ T8098] usb 9-1: Product: syz [ 1488.982752][ T8098] usb 9-1: Manufacturer: syz [ 1488.987842][ T8098] usb 9-1: SerialNumber: syz [ 1489.267614][T27400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1489.297575][T27400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1489.418525][T27400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1489.459703][T27400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1489.667363][T27425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5480'. [ 1489.759746][ T30] audit: type=1400 audit(1771402190.766:6168): avc: denied { listen } for pid=27422 comm="syz.2.5480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1489.990595][ T8098] ati_remote2 9-1:66.0: ati_remote2_probe(): interface 0 must have an endpoint [ 1490.048529][ T8098] usb 9-1: USB disconnect, device number 20 [ 1490.324252][ T10] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1491.398348][ T10] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1491.406630][ T10] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1491.477993][T27430] syzkaller0: entered promiscuous mode [ 1491.689996][ T10] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1491.701902][T27430] syzkaller0: entered allmulticast mode [ 1491.721451][ T10] usb 4-1: config 220 has no interface number 2 [ 1491.721512][ T10] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1491.721538][ T10] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1491.721557][ T10] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1491.721575][ T10] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1491.730062][ T10] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1491.996102][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1492.016877][ T10] usb 4-1: Product: syz [ 1492.021062][ T10] usb 4-1: Manufacturer: syz [ 1492.037222][ T10] usb 4-1: SerialNumber: syz [ 1492.293669][T27460] 9p: Bad value for 'rfdno' [ 1492.349707][ T30] audit: type=1400 audit(1771402193.528:6169): avc: denied { watch_sb } for pid=27457 comm="syz.4.5488" path="/564" dev="tmpfs" ino=3002 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1492.575827][ T8087] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1492.711591][ T8087] usb 3-1: device descriptor read/64, error -71 [ 1492.746484][T27462] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5481'. [ 1492.941012][ T8087] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1493.000578][T27467] binder: 27463:27467 ioctl c0306201 200000000640 returned -22 [ 1493.102158][ T8087] usb 3-1: device descriptor read/64, error -71 [ 1493.235635][ T8087] usb usb3-port1: attempt power cycle [ 1493.968672][ T8087] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1494.017200][ T8087] usb 3-1: device descriptor read/8, error -71 [ 1494.274004][ T8087] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1494.331649][ T8087] usb 3-1: device descriptor read/8, error -71 [ 1494.445518][ T8087] usb usb3-port1: unable to enumerate USB device [ 1494.533144][T20140] block nbd0: Possible stuck request ffff888027d58000: control (read@0,1024B). Runtime 150 seconds [ 1494.544393][T20140] block nbd0: Possible stuck request ffff888027d58200: control (read@1024,1024B). Runtime 150 seconds [ 1494.555595][T20140] block nbd0: Possible stuck request ffff888027d58400: control (read@2048,1024B). Runtime 150 seconds [ 1494.566785][T20140] block nbd0: Possible stuck request ffff888027d58600: control (read@3072,1024B). Runtime 150 seconds [ 1496.959825][ T10] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1496.967158][ T10] uvcvideo 4-1:220.0: No valid video chain found. [ 1497.001399][ T30] audit: type=1400 audit(1771402198.420:6170): avc: denied { accept } for pid=27495 comm="syz.8.5498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1497.464090][ T10] usb 4-1: selecting invalid altsetting 0 [ 1497.816598][ T10] usb 4-1: selecting invalid altsetting 0 [ 1497.822372][ T10] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 1497.998884][ T10] usb 4-1: USB disconnect, device number 90 [ 1498.214488][T27504] syz.8.5498 (27504): drop_caches: 2 [ 1498.484862][T27518] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1498.797767][ T10] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1498.806374][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1498.962962][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1498.984779][ T10] usb 3-1: config 0 has an invalid interface number: 211 but max is 0 [ 1499.004360][ T10] usb 3-1: config 0 has no interface number 0 [ 1499.020890][ T10] usb 3-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice=a5.e1 [ 1499.035911][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1499.053970][ T10] usb 3-1: Product: syz [ 1499.063713][ T10] usb 3-1: Manufacturer: syz [ 1499.073982][ T10] usb 3-1: SerialNumber: syz [ 1499.089818][ T10] usb 3-1: config 0 descriptor?? [ 1499.367871][T27518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1500.792774][T27535] fuse: Unknown parameter '{' [ 1500.804886][T27535] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1500.861938][T27518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1500.881803][ T10] peak_usb 3-1:0.211 can0: unable to request usb[type=0 value=1] err=-71 [ 1500.931369][ T10] peak_usb 3-1:0.211: unable to read PCAN-USB Pro FD firmware info (err -71) [ 1501.607650][ T10] peak_usb 3-1:0.211: probe with driver peak_usb failed with error -71 [ 1501.680565][ T10] usb 3-1: USB disconnect, device number 75 [ 1501.912530][ T8095] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1502.103194][ T8095] usb 6-1: Using ep0 maxpacket: 16 [ 1502.130456][ T8095] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1502.162230][ T8095] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1502.232409][T27556] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5512'. [ 1502.294068][ T8095] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1502.417491][ T8095] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1502.520911][ T8095] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1502.559783][ T8095] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1502.604430][ T8095] usb 6-1: Product: syz [ 1502.614412][ T8095] usb 6-1: Manufacturer: syz [ 1502.644127][ T8095] usb 6-1: SerialNumber: syz [ 1502.683474][ T8095] usb 6-1: config 0 descriptor?? [ 1502.712668][ T8095] mcba_usb 6-1:0.0: Can't find endpoints [ 1502.919531][T27539] netlink: 'syz.5.5509': attribute type 10 has an invalid length. [ 1502.933951][ T793] usb 6-1: USB disconnect, device number 77 [ 1503.763920][T27599] vlan0: entered promiscuous mode [ 1503.789511][T27601] gfs2: path_lookup on /dev/media# returned error -2 [ 1503.817249][T27599] vlan0: left allmulticast mode [ 1503.972161][T22451] Bluetooth: hci2: link tx timeout [ 1503.977356][T22451] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1503.987306][T17138] Bluetooth: hci2: link tx timeout [ 1504.045841][T17138] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1504.293436][ T793] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1504.449470][ T793] usb 9-1: Using ep0 maxpacket: 32 [ 1504.477945][ T793] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1504.589058][ T793] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1504.721553][ T793] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1504.992753][T12454] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1505.260385][T17138] Bluetooth: hci2: link tx timeout [ 1505.271434][T17138] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1505.344609][ T793] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1505.355795][ T793] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.364077][ T793] usb 9-1: Product: syz [ 1505.368233][ T793] usb 9-1: Manufacturer: syz [ 1505.372915][ T793] usb 9-1: SerialNumber: syz [ 1505.637565][T27624] binder: BINDER_SET_CONTEXT_MGR already set [ 1505.686361][T27624] binder: 27620:27624 ioctl 4018620d 200000000100 returned -16 [ 1505.815960][ T793] usb 9-1: USB disconnect, device number 21 [ 1506.036994][T17138] Bluetooth: hci2: command 0x0406 tx timeout [ 1506.042210][ T10] usb 6-1: new low-speed USB device number 78 using dummy_hcd [ 1506.209658][T26873] udevd[26873]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1506.399804][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 1506.411031][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1506.424729][T27636] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1506.464121][T27636] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1506.475141][ T10] usb 6-1: config 0 descriptor?? [ 1506.486872][ T10] pwc: Logitech QuickCam Notebook Pro USB webcam detected. [ 1506.535553][T27636] veth0_to_bridge: entered allmulticast mode [ 1506.554605][T27638] FAULT_INJECTION: forcing a failure. [ 1506.554605][T27638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1506.571790][T27638] CPU: 0 UID: 0 PID: 27638 Comm: syz.3.5530 Tainted: G L syzkaller #0 PREEMPT(full) [ 1506.571818][T27638] Tainted: [L]=SOFTLOCKUP [ 1506.571824][T27638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1506.571834][T27638] Call Trace: [ 1506.571841][T27638] [ 1506.571848][T27638] dump_stack_lvl+0x100/0x190 [ 1506.571880][T27638] should_fail_ex.cold+0x5/0xa [ 1506.571908][T27638] _copy_to_user+0x32/0xd0 [ 1506.571932][T27638] simple_read_from_buffer+0xcb/0x170 [ 1506.571961][T27638] proc_fail_nth_read+0x1af/0x230 [ 1506.571984][T27638] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1506.572008][T27638] ? rw_verify_area+0xce/0x6d0 [ 1506.572029][T27638] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1506.572050][T27638] vfs_read+0x1e4/0xb30 [ 1506.572077][T27638] ? __pfx_vfs_read+0x10/0x10 [ 1506.572100][T27638] ? __fget_files+0x215/0x3d0 [ 1506.572131][T27638] ? __fget_files+0x21f/0x3d0 [ 1506.572164][T27638] ksys_read+0x12a/0x250 [ 1506.572187][T27638] ? __pfx_ksys_read+0x10/0x10 [ 1506.572218][T27638] do_syscall_64+0x106/0xf80 [ 1506.572245][T27638] ? clear_bhb_loop+0x40/0x90 [ 1506.572266][T27638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1506.572284][T27638] RIP: 0033:0x7f501315cece [ 1506.572299][T27638] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1506.572317][T27638] RSP: 002b:00007f50140f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1506.572334][T27638] RAX: ffffffffffffffda RBX: 00007f50140f76c0 RCX: 00007f501315cece [ 1506.572346][T27638] RDX: 000000000000000f RSI: 00007f50140f70a0 RDI: 0000000000000004 [ 1506.572356][T27638] RBP: 00007f50140f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1506.572367][T27638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1506.572377][T27638] R13: 00007f5013416038 R14: 00007f5013415fa0 R15: 00007ffc57820278 [ 1506.572402][T27638] [ 1506.789366][T27636] veth0_to_bridge: entered promiscuous mode [ 1506.795400][T27636] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1506.885004][T27636] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1506.892202][T27636] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 1507.188075][ T10] pwc: Failed to set LED on/off time (-71) [ 1507.868711][ T10] pwc: send_video_command error -71 [ 1507.874131][ T10] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1507.882266][ T10] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 1507.899805][ T10] usb 6-1: USB disconnect, device number 78 [ 1508.685713][T27656] tipc: Started in network mode [ 1508.690736][T27656] tipc: Node identity 7f000001, cluster identity 4711 [ 1508.703217][T27656] tipc: Enabling of bearer rejected, failed to enable media [ 1509.170434][T27677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5535'. [ 1510.465012][T27688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5542'. [ 1510.473920][T27688] netlink: 'syz.4.5542': attribute type 30 has an invalid length. [ 1510.485515][T27688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5542'. [ 1510.494379][T27688] netlink: 'syz.4.5542': attribute type 30 has an invalid length. [ 1510.508004][T12447] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1510.533621][T12447] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1510.542662][T12447] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1510.556934][T12447] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1510.797696][T27692] SET target dimension over the limit! [ 1511.217685][ T8095] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1511.428340][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1511.560842][ T8095] usb 4-1: device descriptor read/64, error -32 [ 1511.655780][T27709] netlink: 'syz.8.5547': attribute type 1 has an invalid length. [ 1511.793359][T27709] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1511.961903][ T8095] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1512.070945][T27712] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1512.079630][T27712] bond1: (slave vxcan5): The slave device specified does not support setting the MAC address [ 1512.098137][T27712] bond1: (slave vxcan5): Error -95 calling set_mac_address [ 1512.289024][ T8095] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1512.371492][ T8095] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1512.471290][ T8095] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1512.581026][ T8095] usb 4-1: config 0 descriptor?? [ 1512.667262][T27717] FAULT_INJECTION: forcing a failure. [ 1512.667262][T27717] name failslab, interval 1, probability 0, space 0, times 0 [ 1512.714776][T27717] CPU: 1 UID: 0 PID: 27717 Comm: syz.2.5549 Tainted: G L syzkaller #0 PREEMPT(full) [ 1512.714805][T27717] Tainted: [L]=SOFTLOCKUP [ 1512.714811][T27717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1512.714821][T27717] Call Trace: [ 1512.714827][T27717] [ 1512.714834][T27717] dump_stack_lvl+0x100/0x190 [ 1512.714865][T27717] should_fail_ex.cold+0x5/0xa [ 1512.714892][T27717] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1512.714911][T27717] should_failslab+0xc2/0x120 [ 1512.714936][T27717] __kmalloc_noprof+0xe0/0x850 [ 1512.714962][T27717] tomoyo_realpath_from_path+0xb6/0x690 [ 1512.714982][T27717] tomoyo_path_number_perm+0x23c/0x580 [ 1512.715006][T27717] ? tomoyo_path_number_perm+0x22e/0x580 [ 1512.715028][T27717] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1512.715077][T27717] ? find_held_lock+0x2b/0x80 [ 1512.715098][T27717] ? __fget_files+0x215/0x3d0 [ 1512.715120][T27717] ? hook_file_ioctl_common+0x146/0x410 [ 1512.715142][T27717] ? __fget_files+0x21f/0x3d0 [ 1512.715170][T27717] security_file_ioctl+0xd3/0x230 [ 1512.715198][T27717] __x64_sys_ioctl+0xb7/0x210 [ 1512.715219][T27717] do_syscall_64+0x106/0xf80 [ 1512.715242][T27717] ? clear_bhb_loop+0x40/0x90 [ 1512.715263][T27717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1512.715280][T27717] RIP: 0033:0x7f859c39c629 [ 1512.715295][T27717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1512.715310][T27717] RSP: 002b:00007f859d2d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1512.715331][T27717] RAX: ffffffffffffffda RBX: 00007f859c615fa0 RCX: 00007f859c39c629 [ 1512.715342][T27717] RDX: 00002000000000c0 RSI: 00000000c0205648 RDI: 0000000000000004 [ 1512.715353][T27717] RBP: 00007f859d2d9090 R08: 0000000000000000 R09: 0000000000000000 [ 1512.715364][T27717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1512.715374][T27717] R13: 00007f859c616038 R14: 00007f859c615fa0 R15: 00007fff4c393398 [ 1512.715399][T27717] [ 1512.715422][T27717] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1512.745638][ T8095] pwc: Askey VC010 type 2 USB webcam detected. [ 1513.237267][ T30] audit: type=1400 audit(1771402215.482:6171): avc: denied { setattr } for pid=27716 comm="syz.4.5550" name="NETLINK" dev="sockfs" ino=106121 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1513.307011][T27723] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5546'. [ 1513.449291][ T30] audit: type=1326 audit(1771402215.723:6172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27716 comm="syz.4.5550" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f66f979c629 code=0x0 [ 1513.915979][T27731] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5551'. [ 1513.951773][T27731] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5551'. [ 1513.966799][T27713] mac80211_hwsim hwsim33 wlan0: entered promiscuous mode [ 1513.978340][T27729] [U] ^A [ 1513.987861][T27713] bond1: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1514.019788][T27732] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1514.028739][T27723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5546'. [ 1514.853955][T27743] tipc: Enabled bearer , priority 0 [ 1514.902118][T27742] tipc: Disabling bearer [ 1514.992011][ T30] audit: type=1400 audit(1771402217.340:6173): avc: denied { link } for pid=27748 comm="syz.5.5556" name="#3f" dev="tmpfs" ino=2860 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1515.123717][ T30] audit: type=1400 audit(1771402217.371:6174): avc: denied { rename } for pid=27748 comm="syz.5.5556" name="#40" dev="tmpfs" ino=2860 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1515.349507][ T8095] pwc: send_video_command error -71 [ 1515.396615][ T8095] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1515.438836][ T8095] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 1515.591356][ T8095] usb 4-1: USB disconnect, device number 92 [ 1516.281616][T27783] mkiss: ax0: crc mode is auto. [ 1516.859953][T27797] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1516.887740][ T30] audit: type=1400 audit(1771402219.324:6175): avc: denied { setattr } for pid=27796 comm="syz.3.5570" name="/" dev="configfs" ino=1082 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1517.166276][T27804] overlayfs: missing 'lowerdir' [ 1519.122699][ T30] audit: type=1400 audit(1771402221.666:6176): avc: denied { bind } for pid=27833 comm="syz.5.5578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1519.242802][ T30] audit: type=1400 audit(1771402221.687:6177): avc: denied { accept } for pid=27833 comm="syz.5.5578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1519.980265][ T8095] usb 3-1: new low-speed USB device number 76 using dummy_hcd [ 1520.152441][T27880] FAULT_INJECTION: forcing a failure. [ 1520.152441][T27880] name failslab, interval 1, probability 0, space 0, times 0 [ 1520.166089][T27880] CPU: 0 UID: 0 PID: 27880 Comm: syz.8.5588 Tainted: G L syzkaller #0 PREEMPT(full) [ 1520.166116][T27880] Tainted: [L]=SOFTLOCKUP [ 1520.166123][T27880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1520.166133][T27880] Call Trace: [ 1520.166140][T27880] [ 1520.166147][T27880] dump_stack_lvl+0x100/0x190 [ 1520.166180][T27880] should_fail_ex.cold+0x5/0xa [ 1520.166203][T27880] should_failslab+0xc2/0x120 [ 1520.166229][T27880] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1520.166247][T27880] ? rt_acct_proc_show+0x51/0x3d0 [ 1520.166267][T27880] ? __kasan_kmalloc+0xaa/0xb0 [ 1520.166293][T27880] rt_acct_proc_show+0x51/0x3d0 [ 1520.166316][T27880] traverse.part.0.constprop.0+0x107/0x650 [ 1520.166351][T27880] seq_read_iter+0x93f/0x1270 [ 1520.166376][T27880] ? lock_acquire+0x1cf/0x380 [ 1520.166401][T27880] ? avc_policy_seqno+0x9/0x20 [ 1520.166433][T27880] proc_reg_read_iter+0x220/0x310 [ 1520.166458][T27880] ? __pfx_proc_reg_read_iter+0x10/0x10 [ 1520.166483][T27880] vfs_read+0x825/0xb30 [ 1520.166510][T27880] ? __pfx_vfs_read+0x10/0x10 [ 1520.166531][T27880] ? find_held_lock+0x2b/0x80 [ 1520.166573][T27880] __x64_sys_pread64+0x1eb/0x250 [ 1520.166598][T27880] ? __pfx___x64_sys_pread64+0x10/0x10 [ 1520.166630][T27880] do_syscall_64+0x106/0xf80 [ 1520.166657][T27880] ? clear_bhb_loop+0x40/0x90 [ 1520.166679][T27880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.166698][T27880] RIP: 0033:0x7f1f48b9c629 [ 1520.166713][T27880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1520.166729][T27880] RSP: 002b:00007f1f46dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1520.166747][T27880] RAX: ffffffffffffffda RBX: 00007f1f48e16180 RCX: 00007f1f48b9c629 [ 1520.166759][T27880] RDX: 00000000000000ed RSI: 0000200000002240 RDI: 0000000000000005 [ 1520.166770][T27880] RBP: 00007f1f46dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1520.166781][T27880] R10: 00000000000004eb R11: 0000000000000246 R12: 0000000000000001 [ 1520.166791][T27880] R13: 00007f1f48e16218 R14: 00007f1f48e16180 R15: 00007ffe821e1018 [ 1520.166815][T27880] [ 1520.586664][ T8095] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1520.594783][ T8095] usb 3-1: config 0 has no interface number 0 [ 1520.610241][ T8095] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1520.693529][ T8095] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1520.756183][ T8095] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1520.778112][ T8095] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1520.852948][ T8095] usb 3-1: config 0 descriptor?? [ 1520.877081][T27876] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1521.163129][ T30] audit: type=1400 audit(1771402223.755:6178): avc: denied { shutdown } for pid=27881 comm="syz.3.5589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1521.904365][ T8095] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1522.201210][ T8095] usb 3-1: USB disconnect, device number 76 [ 1522.434854][T27895] syzkaller0: entered promiscuous mode [ 1522.466322][T27895] syzkaller0: entered allmulticast mode [ 1522.780780][T17983] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1522.957730][T17983] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1522.976330][T17983] usb 4-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 1522.997373][T17983] usb 4-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 1523.007594][T17983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1523.015816][T17983] usb 4-1: Product: syz [ 1523.025950][T17983] usb 4-1: Manufacturer: syz [ 1523.039374][T17983] usb 4-1: SerialNumber: syz [ 1523.181855][T20140] block nbd0: Possible stuck request ffff888027d58000: control (read@0,1024B). Runtime 180 seconds [ 1523.192881][T20140] block nbd0: Possible stuck request ffff888027d58200: control (read@1024,1024B). Runtime 180 seconds [ 1523.204070][T20140] block nbd0: Possible stuck request ffff888027d58400: control (read@2048,1024B). Runtime 180 seconds [ 1523.215246][T20140] block nbd0: Possible stuck request ffff888027d58600: control (read@3072,1024B). Runtime 180 seconds [ 1523.299014][T17983] ati_remote2 4-1:66.0: ati_remote2_probe(): interface 0 must have an endpoint [ 1523.324539][T17983] usb 4-1: USB disconnect, device number 93 [ 1523.353858][T27920] 9pnet_virtio: no channels available for device syz [ 1523.425754][T27921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5598'. [ 1523.628655][ T10] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1523.924682][ T10] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 1523.953893][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1523.992279][ T10] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1524.013680][ T10] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1524.043210][ T10] usb 9-1: Product: syz [ 1524.060039][ T10] usb 9-1: Manufacturer: syz [ 1524.085666][ T10] usb 9-1: SerialNumber: syz [ 1524.110926][ T10] usb 9-1: config 0 descriptor?? [ 1524.170381][ T10] usb 9-1: selecting invalid altsetting 0 [ 1524.305254][T27929] binder: 27926:27929 ioctl c0306201 200000000640 returned -22 [ 1524.404278][ T793] usb 9-1: USB disconnect, device number 22 [ 1526.315351][T27945] syz.2.5605 (27945): drop_caches: 2 [ 1528.175732][T27921] syz_tun: left promiscuous mode [ 1528.184046][T27921] bridge0: port 3(syz_tun) entered disabled state [ 1528.202368][T27921] bridge_slave_1: left promiscuous mode [ 1528.208051][T27921] bridge0: port 2(bridge_slave_1) entered disabled state [ 1528.229150][T27921] bridge_slave_0: left promiscuous mode [ 1528.234780][T27921] bridge0: port 1(bridge_slave_0) entered disabled state [ 1529.443651][ T30] audit: type=1400 audit(1771402232.480:6179): avc: denied { getopt } for pid=27974 comm="syz.5.5611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1529.885162][T27989] overlayfs: missing 'lowerdir' [ 1530.333244][ T8098] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1530.506162][ T8098] usb 9-1: Using ep0 maxpacket: 8 [ 1530.521211][ T8098] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1530.541271][ T8098] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1530.555593][ T8098] usb 9-1: can't read configurations, error -71 [ 1530.920704][T22451] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1530.934279][T22451] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1530.942978][T22451] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1530.953085][T22451] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1530.963939][T22451] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1531.128765][T17983] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1531.284597][T21166] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1531.299832][T17983] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1531.314171][T17983] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1531.336858][T17983] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1531.347977][T17983] usb 4-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 1531.373832][T28025] program syz.2.5624 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1531.401152][T17983] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1531.420293][T17983] usb 4-1: config 0 descriptor?? [ 1531.426982][T21166] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1531.552505][ T8098] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1531.584170][T21166] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1531.784109][ T8098] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1531.805220][T28009] chnl_net:caif_netlink_parms(): no params data found [ 1531.831021][ T8098] usb 9-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 1531.874126][ T8098] usb 9-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 1531.924504][ T8098] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1531.940278][T17983] kye 0003:0458:0138.0023: hidraw0: USB HID v0.10 Device [HID 0458:0138] on usb-dummy_hcd.3-1/input0 [ 1531.957502][ T8098] usb 9-1: Product: syz [ 1531.963681][T21166] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1531.984946][ T8098] usb 9-1: Manufacturer: syz [ 1532.279630][ T8098] usb 9-1: SerialNumber: syz [ 1532.925376][ T8098] ati_remote2 9-1:66.0: ati_remote2_probe(): interface 0 must have an endpoint [ 1532.937145][T22451] Bluetooth: hci4: command tx timeout [ 1532.948349][T28009] bridge0: port 1(bridge_slave_0) entered blocking state [ 1532.971832][ T793] usb 6-1: new full-speed USB device number 79 using dummy_hcd [ 1532.991112][T28009] bridge0: port 1(bridge_slave_0) entered disabled state [ 1533.004454][ T8098] usb 9-1: USB disconnect, device number 24 [ 1533.028487][T28009] bridge_slave_0: entered allmulticast mode [ 1533.048436][T28009] bridge_slave_0: entered promiscuous mode [ 1533.136087][ T793] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1533.181915][ T793] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1533.208792][T28009] bridge0: port 2(bridge_slave_1) entered blocking state [ 1533.219551][ T793] usb 6-1: Product: syz [ 1533.225908][T28009] bridge0: port 2(bridge_slave_1) entered disabled state [ 1533.234664][ T793] usb 6-1: Manufacturer: syz [ 1533.247906][ T793] usb 6-1: SerialNumber: syz [ 1533.254805][T28009] bridge_slave_1: entered allmulticast mode [ 1533.267402][ T793] usb 6-1: config 0 descriptor?? [ 1533.274834][T28009] bridge_slave_1: entered promiscuous mode [ 1534.366320][ T793] airspy 6-1:0.0: usb_control_msg() failed -110 request 09 [ 1534.427393][T28043] netlink: 'syz.5.5626': attribute type 3 has an invalid length. [ 1534.450805][ T793] airspy 6-1:0.0: Could not detect board [ 1534.682187][ T793] airspy 6-1:0.0: probe with driver airspy failed with error -110 [ 1534.821315][ T8087] usb 4-1: USB disconnect, device number 94 [ 1534.924139][T22451] Bluetooth: hci4: command tx timeout [ 1535.381422][T21179] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1535.398304][T21166] bond2 (unregistering): (slave gre1): Releasing backup interface [ 1535.540180][T21166] bond1 (unregistering): Released all slaves [ 1535.598474][T21166] bond0 (unregistering): Released all slaves [ 1535.636995][ T8087] usb 6-1: USB disconnect, device number 79 [ 1535.715969][T21166] bond2 (unregistering): Released all slaves [ 1535.748405][T21166] bond3 (unregistering): Released all slaves [ 1535.820049][T28071] netlink: 35 bytes leftover after parsing attributes in process `syz.2.5631'. [ 1535.864103][T28072] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5632'. [ 1535.876959][T28072] openvswitch: netlink: Flow actions attr not present in new flow. [ 1535.922113][T28009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1536.013218][T28069] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5631'. [ 1536.043595][T28009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1536.169580][T28074] netlink: 'syz.5.5632': attribute type 2 has an invalid length. [ 1536.219396][T28074] netlink: 'syz.5.5632': attribute type 11 has an invalid length. [ 1536.237154][T28009] team0: Port device team_slave_0 added [ 1536.300353][T28074] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5632'. [ 1536.343326][T21166] hmaÓË224): left promiscuous mode [ 1536.398344][T28080] tmpfs: Unknown parameter 'uid>00000000000000000000' [ 1536.509836][T28009] team0: Port device team_slave_1 added [ 1536.629645][T21166] tipc: Left network mode [ 1536.732010][T28009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1536.797383][T28009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1536.899575][T22451] Bluetooth: hci4: command tx timeout [ 1536.962434][T28009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1537.074193][T28094] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5636'. [ 1537.298308][T28009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1537.331972][T28009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1537.421004][T28009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1537.673310][T28103] sch_tbf: burst 0 is lower than device veth1 mtu (1514) ! [ 1537.906570][T28118] FAULT_INJECTION: forcing a failure. [ 1537.906570][T28118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1537.962637][ T8096] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 1537.969391][T28118] CPU: 1 UID: 0 PID: 28118 Comm: syz.3.5641 Tainted: G L syzkaller #0 PREEMPT(full) [ 1537.969417][T28118] Tainted: [L]=SOFTLOCKUP [ 1537.969423][T28118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1537.969432][T28118] Call Trace: [ 1537.969438][T28118] [ 1537.969444][T28118] dump_stack_lvl+0x100/0x190 [ 1537.969473][T28118] should_fail_ex.cold+0x5/0xa [ 1537.969493][T28118] _copy_from_user+0x2e/0xd0 [ 1537.969514][T28118] kstrtouint_from_user+0xd6/0x1d0 [ 1537.969536][T28118] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1537.969558][T28118] ? __lock_acquire+0x4a5/0x2630 [ 1537.969584][T28118] ? lock_acquire+0x1cf/0x380 [ 1537.969611][T28118] proc_fail_nth_write+0x83/0x220 [ 1537.969631][T28118] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1537.969655][T28118] vfs_write+0x2aa/0x1070 [ 1537.969676][T28118] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1537.969696][T28118] ? __pfx_vfs_write+0x10/0x10 [ 1537.969716][T28118] ? __fget_files+0x215/0x3d0 [ 1537.969743][T28118] ? __fget_files+0x21f/0x3d0 [ 1537.969770][T28118] ksys_write+0x12a/0x250 [ 1537.969790][T28118] ? __pfx_ksys_write+0x10/0x10 [ 1537.969816][T28118] do_syscall_64+0x106/0xf80 [ 1537.969839][T28118] ? clear_bhb_loop+0x40/0x90 [ 1537.969859][T28118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1537.969874][T28118] RIP: 0033:0x7f501315cece [ 1537.969887][T28118] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1537.969901][T28118] RSP: 002b:00007f50140f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1537.969916][T28118] RAX: ffffffffffffffda RBX: 00007f50140f76c0 RCX: 00007f501315cece [ 1537.969927][T28118] RDX: 0000000000000001 RSI: 00007f50140f70a0 RDI: 0000000000000004 [ 1537.969936][T28118] RBP: 00007f50140f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1537.969945][T28118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1537.969953][T28118] R13: 00007f5013416038 R14: 00007f5013415fa0 R15: 00007ffc57820278 [ 1537.969975][T28118] [ 1538.205320][T28009] hsr_slave_0: entered promiscuous mode [ 1538.261471][T28120] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 1538.270529][T28120] overlayfs: missing 'lowerdir' [ 1538.271756][T28009] hsr_slave_1: entered promiscuous mode [ 1538.296403][ T30] audit: type=1400 audit(1771402241.803:6180): avc: denied { setcurrent } for pid=28119 comm="syz.8.5642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1538.464742][T28009] debugfs: 'hsr0' already exists in 'hsr' [ 1538.470703][T28009] Cannot create hsr debugfs directory [ 1538.519276][T21166] hsr_slave_0: left promiscuous mode [ 1538.553371][ T8087] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1538.576645][T21166] hsr_slave_1: left promiscuous mode [ 1538.582752][T21166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1538.590479][T21166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1538.602917][ T8096] usb 3-1: config 8 has an invalid interface number: 177 but max is 0 [ 1538.613315][ T8096] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1538.626053][ T8096] usb 3-1: config 8 has no interface number 0 [ 1538.633902][ T8096] usb 3-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1538.714910][ T8087] usb 6-1: Using ep0 maxpacket: 8 [ 1538.738510][ T8087] usb 6-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1538.751899][ T8087] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1538.777778][ T8096] usb 3-1: config 8 interface 177 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1538.790845][ T8096] usb 3-1: config 8 interface 177 has no altsetting 0 [ 1538.797997][ T8096] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1538.799576][ T8087] usb 6-1: config 0 descriptor?? [ 1538.807108][ T8096] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1538.809972][T28113] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1538.877013][T22451] Bluetooth: hci4: command tx timeout [ 1539.039451][ T8096] usb 3-1: string descriptor 0 read error: -71 [ 1539.094696][ T8096] ir_toy 3-1:8.177: required endpoints not found [ 1539.143838][ T8096] usb 3-1: USB disconnect, device number 77 [ 1539.187088][ T8087] qmi_wwan 6-1:0.0: probe with driver qmi_wwan failed with error -22 [ 1539.224749][T21166] team0 (unregistering): Port device team_slave_1 removed [ 1539.258889][T21166] team0 (unregistering): Port device team_slave_0 removed [ 1539.457283][T28115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1539.506966][T28115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1539.572157][T28115] ieee802154 phy0 wpan0: encryption failed: -22 [ 1539.617305][ T8087] usb 6-1: USB disconnect, device number 80 [ 1539.782650][T28136] binder: 28132:28136 ioctl c0306201 200000000640 returned -22 [ 1540.106418][T21166] IPVS: stop unused estimator thread 0... [ 1540.612544][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1540.625488][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1540.638349][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1540.650583][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1540.662789][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1540.674961][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1540.687170][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1540.699374][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1540.711667][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1540.723856][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1540.736050][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1540.748180][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1540.760396][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1541.753297][T28161] binder: 28156:28161 ioctl c0306201 200000000040 returned -22 [ 1545.266293][T28009] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1545.360097][T28009] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1545.420648][ C1] net_ratelimit: 21595 callbacks suppressed [ 1545.420664][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1545.438923][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1545.451119][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1545.463342][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1545.475474][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1545.487797][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1545.500145][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1545.512423][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1545.524723][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1545.537068][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1546.313267][ T8098] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1546.478139][ T8098] usb 6-1: device descriptor read/64, error -71 [ 1546.739489][ T8098] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1546.907413][ T8098] usb 6-1: device descriptor read/64, error -71 [ 1547.026299][ T8098] usb usb6-port1: attempt power cycle [ 1547.370144][ T8098] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1547.409428][ T8098] usb 6-1: device descriptor read/8, error -71 [ 1547.671160][ T8098] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1547.702333][ T8098] usb 6-1: device descriptor read/8, error -71 [ 1547.827708][ T8098] usb usb6-port1: unable to enumerate USB device [ 1549.098126][T28210] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42563 sclass=netlink_route_socket pid=28210 comm=syz.5.5659 [ 1549.685193][T28009] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1549.708970][T28009] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1550.137900][ T8096] usb 9-1: new full-speed USB device number 25 using dummy_hcd [ 1550.192342][ C1] net_ratelimit: 19610 callbacks suppressed [ 1550.192360][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1550.210652][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1550.222930][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1550.239778][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1550.251962][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1550.264246][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1550.276378][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1550.288551][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1550.300627][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1550.312932][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1550.324195][ T8096] usb 9-1: config 2 has an invalid interface number: 211 but max is 0 [ 1550.333662][ T8096] usb 9-1: config 2 has no interface number 0 [ 1550.340153][ T8096] usb 9-1: config 2 interface 211 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1550.351287][ T8096] usb 9-1: config 2 interface 211 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1550.365438][ T8096] usb 9-1: New USB device found, idVendor=2040, idProduct=8268, bcdDevice=27.95 [ 1550.374794][ T8096] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.382953][ T8096] usb 9-1: Product: syz [ 1550.387181][ T8096] usb 9-1: Manufacturer: syz [ 1550.391786][ T8096] usb 9-1: SerialNumber: syz [ 1550.403772][T28216] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1550.416373][ T8096] em28xx 9-1:2.211: New device syz syz @ 12 Mbps (2040:8268, interface 211, class 211) [ 1550.431386][ T8096] em28xx 9-1:2.211: Device initialization failed. [ 1550.437806][ T8096] em28xx 9-1:2.211: Device must be connected to a high-speed USB 2.0 port. [ 1550.658885][ T8096] usb 9-1: USB disconnect, device number 25 [ 1551.922559][T20140] block nbd0: Possible stuck request ffff888027d58000: control (read@0,1024B). Runtime 210 seconds [ 1551.939647][T20140] block nbd0: Possible stuck request ffff888027d58200: control (read@1024,1024B). Runtime 210 seconds [ 1551.956404][T20140] block nbd0: Possible stuck request ffff888027d58400: control (read@2048,1024B). Runtime 210 seconds [ 1551.972940][T20140] block nbd0: Possible stuck request ffff888027d58600: control (read@3072,1024B). Runtime 210 seconds [ 1552.759072][T28009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1552.864109][T28009] 8021q: adding VLAN 0 to HW filter on device team0 [ 1552.985447][T21166] bridge0: port 1(bridge_slave_0) entered blocking state [ 1552.992609][T21166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1553.215022][T21172] bridge0: port 2(bridge_slave_1) entered blocking state [ 1553.222210][T21172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1553.288285][T28247] FAULT_INJECTION: forcing a failure. [ 1553.288285][T28247] name failslab, interval 1, probability 0, space 0, times 0 [ 1553.382200][T28247] CPU: 0 UID: 0 PID: 28247 Comm: syz.5.5666 Tainted: G L syzkaller #0 PREEMPT(full) [ 1553.382230][T28247] Tainted: [L]=SOFTLOCKUP [ 1553.382237][T28247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1553.382248][T28247] Call Trace: [ 1553.382254][T28247] [ 1553.382261][T28247] dump_stack_lvl+0x100/0x190 [ 1553.382294][T28247] should_fail_ex.cold+0x5/0xa [ 1553.382319][T28247] should_failslab+0xc2/0x120 [ 1553.382345][T28247] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1553.382369][T28247] ? __alloc_skb+0x140/0x710 [ 1553.382398][T28247] __alloc_skb+0x140/0x710 [ 1553.382421][T28247] ? __alloc_skb+0x5b7/0x710 [ 1553.382444][T28247] ? __pfx___alloc_skb+0x10/0x10 [ 1553.382472][T28247] ? rcu_is_watching+0x12/0xc0 [ 1553.382494][T28247] ? trace_contention_end+0x140/0x180 [ 1553.382516][T28247] netlink_dump+0x19b/0xd30 [ 1553.382546][T28247] ? __netlink_lookup+0x652/0x900 [ 1553.382572][T28247] ? __netlink_lookup+0x652/0x900 [ 1553.382599][T28247] ? __pfx_netlink_dump+0x10/0x10 [ 1553.382625][T28247] ? __pfx___mutex_lock+0x10/0x10 [ 1553.382661][T28247] __netlink_dump_start+0x6d6/0x990 [ 1553.382692][T28247] ? __pfx_rtnl_fdb_dump+0x10/0x10 [ 1553.382719][T28247] rtnetlink_rcv_msg+0xb3e/0xe90 [ 1553.382746][T28247] ? __pfx_rtnl_fdb_dump+0x10/0x10 [ 1553.382773][T28247] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1553.382800][T28247] ? __pfx_rtnl_dumpit+0x10/0x10 [ 1553.382819][T28247] ? __pfx_rtnl_fdb_dump+0x10/0x10 [ 1553.382849][T28247] ? ref_tracker_free+0x37e/0x6c0 [ 1553.382877][T28247] netlink_rcv_skb+0x159/0x420 [ 1553.382894][T28247] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1553.382923][T28247] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1553.382950][T28247] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1553.382977][T28247] netlink_unicast+0x5aa/0x870 [ 1553.382997][T28247] ? __pfx_netlink_unicast+0x10/0x10 [ 1553.383025][T28247] netlink_sendmsg+0x8b0/0xda0 [ 1553.383047][T28247] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1553.383074][T28247] sock_write_iter+0x566/0x610 [ 1553.383095][T28247] ? __pfx_sock_write_iter+0x10/0x10 [ 1553.383123][T28247] ? bpf_lsm_file_permission+0x9/0x10 [ 1553.383146][T28247] ? security_file_permission+0x76/0x210 [ 1553.383166][T28247] ? rw_verify_area+0xce/0x6d0 [ 1553.383190][T28247] vfs_write+0x6ac/0x1070 [ 1553.383213][T28247] ? __pfx_sock_write_iter+0x10/0x10 [ 1553.383235][T28247] ? __pfx_vfs_write+0x10/0x10 [ 1553.383256][T28247] ? find_held_lock+0x2b/0x80 [ 1553.383293][T28247] ksys_write+0x1f8/0x250 [ 1553.383316][T28247] ? __pfx_ksys_write+0x10/0x10 [ 1553.383346][T28247] do_syscall_64+0x106/0xf80 [ 1553.383372][T28247] ? clear_bhb_loop+0x40/0x90 [ 1553.383395][T28247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1553.383413][T28247] RIP: 0033:0x7fc008b9c629 [ 1553.383429][T28247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1553.383446][T28247] RSP: 002b:00007fc009acd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1553.383472][T28247] RAX: ffffffffffffffda RBX: 00007fc008e15fa0 RCX: 00007fc008b9c629 [ 1553.383484][T28247] RDX: 0000000000000024 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1553.383494][T28247] RBP: 00007fc009acd090 R08: 0000000000000000 R09: 0000000000000000 [ 1553.383505][T28247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1553.383515][T28247] R13: 00007fc008e16038 R14: 00007fc008e15fa0 R15: 00007ffcc684b918 [ 1553.383540][T28247] [ 1554.178494][T28009] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1554.348943][T28009] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1554.688219][ T8096] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1554.743714][T22451] Bluetooth: hci2: unexpected event for opcode 0x0c38 [ 1554.895593][T28259] binder: 28248:28259 ioctl c0306201 200000000040 returned -22 [ 1554.925626][ T8096] usb 4-1: Using ep0 maxpacket: 8 [ 1554.953761][ T8096] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1554.964124][ C1] net_ratelimit: 17614 callbacks suppressed [ 1554.964140][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1554.982409][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1554.994731][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1555.006986][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1555.019105][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1555.031348][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1555.043669][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1555.055804][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1555.067931][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1555.080141][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1555.212786][ T8096] usb 4-1: config 8 has an invalid interface number: 255 but max is 8 [ 1555.308174][ T8096] usb 4-1: config 8 has 1 interface, different from the descriptor's value: 9 [ 1555.360243][ T8096] usb 4-1: config 8 has no interface number 0 [ 1555.449691][ T8096] usb 4-1: config 8 interface 255 has no altsetting 0 [ 1555.530231][ T8096] usb 4-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice= 0.00 [ 1555.592356][ T8096] usb 4-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 1555.617628][ T8096] usb 4-1: Product: syz [ 1555.632951][ T8096] usb 4-1: Manufacturer: syz [ 1555.682404][ T8096] usb 4-1: SerialNumber: syz [ 1555.925249][T28279] tipc: Started in network mode [ 1555.933616][T28279] tipc: Node identity 7f000001, cluster identity 4711 [ 1555.940534][T28279] tipc: Enabling of bearer rejected, failed to enable media [ 1557.319891][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1557.510632][ T8096] catc 4-1:8.255: Can't set altsetting 1. [ 1557.578724][ T8096] catc 4-1:8.255: probe with driver catc failed with error -5 [ 1557.591900][T28009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1557.654523][ T8096] usb 4-1: USB disconnect, device number 95 [ 1558.916223][ T30] audit: type=1400 audit(1771402263.368:6181): avc: denied { read } for pid=28295 comm="syz.3.5674" laddr=172.20.20.170 lport=7398 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1559.116770][ T8096] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1559.202545][ T10] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1559.309546][ T8096] usb 4-1: Using ep0 maxpacket: 16 [ 1559.318777][ T8096] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1559.340353][ T8096] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1559.375191][ T10] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1559.392203][ T10] usb 9-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1559.407552][ T8096] usb 4-1: New USB device found, idVendor=04b8, idProduct=b39a, bcdDevice=3f.cb [ 1559.427638][ T8096] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1559.449103][T28009] veth0_vlan: entered promiscuous mode [ 1559.462432][ T10] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1559.474977][ T8096] usb 4-1: Product: syz [ 1559.487565][ T8096] usb 4-1: Manufacturer: syz [ 1559.497578][ T10] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1559.519205][ T8096] usb 4-1: SerialNumber: syz [ 1559.528141][T28009] veth1_vlan: entered promiscuous mode [ 1559.567788][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1559.628369][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1559.691476][T28009] veth0_macvtap: entered promiscuous mode [ 1559.698700][ T10] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1559.716701][T28009] veth1_macvtap: entered promiscuous mode [ 1559.722604][ T10] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1559.736111][ C1] net_ratelimit: 17978 callbacks suppressed [ 1559.736126][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1559.738299][ T10] usb 9-1: Product: syz [ 1559.742300][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1559.768167][ T8096] usb 4-1: USB disconnect, device number 96 [ 1559.770536][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1559.788411][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1559.800761][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1559.804911][T28009] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1559.813140][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1559.832595][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1559.844887][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1559.857243][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1559.869391][T28009] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1559.869604][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1559.877767][ T10] usb 9-1: Manufacturer: syz [ 1559.916111][T21178] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1559.966904][T21178] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1559.976397][T28301] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1559.987587][ T10] cdc_wdm 9-1:1.0: skipping garbage [ 1559.992801][ T10] cdc_wdm 9-1:1.0: skipping garbage [ 1560.013419][T21172] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1560.039734][ T10] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1560.064699][T21172] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1560.079076][ T10] cdc_wdm 9-1:1.0: Unknown control protocol [ 1560.249355][ C0] wdm_int_callback: 12031 callbacks suppressed [ 1560.249380][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1560.262127][ C0] wdm_int_callback: 12031 callbacks suppressed [ 1560.262147][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1560.274768][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1560.281364][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1560.287787][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1560.294387][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1560.300829][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1560.307422][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1560.313672][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1560.320260][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1560.326642][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1560.333229][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1560.339799][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1560.346387][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1560.352639][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1560.359225][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1560.366003][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1560.372596][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1560.378890][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1560.385484][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1560.728931][T21178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1560.773689][T21178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1561.239082][T21172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1561.304915][T21172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1561.339099][T28317] SELinux: ebitmap: empty map [ 1561.461679][T28317] SELinux: failed to load policy [ 1564.507721][ C1] net_ratelimit: 18591 callbacks suppressed [ 1564.507740][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1564.525942][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1564.538016][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1564.550097][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1564.562257][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1564.574350][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1564.586373][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1564.598426][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1564.610559][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1564.622686][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1564.660226][ T8096] usb 9-1: USB disconnect, device number 26 [ 1565.316756][T28331] netlink: 'syz.3.5681': attribute type 9 has an invalid length. [ 1565.345016][T28328] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5680'. [ 1565.394184][T28331] netlink: 'syz.3.5681': attribute type 11 has an invalid length. [ 1565.448503][T28331] netlink: 'syz.3.5681': attribute type 12 has an invalid length. [ 1565.505471][T28331] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.5681'. [ 1565.560857][T28331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5681'. [ 1565.857217][T21183] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1565.974053][ T8096] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1566.174620][ T8096] usb 9-1: Using ep0 maxpacket: 8 [ 1566.198605][ T8096] usb 9-1: config 3 has an invalid interface number: 177 but max is 0 [ 1566.227015][ T8096] usb 9-1: config 3 has no interface number 0 [ 1566.244052][ T8096] usb 9-1: config 3 interface 177 has no altsetting 0 [ 1566.262115][ T8096] usb 9-1: New USB device found, idVendor=07b4, idProduct=0f02, bcdDevice=28.b0 [ 1566.271785][ T8096] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.296465][ T8096] usb 9-1: Product: syz [ 1566.348873][ T8096] usb 9-1: Manufacturer: syz [ 1566.359027][ T8096] usb 9-1: SerialNumber: syz [ 1566.987147][ T30] audit: type=1400 audit(1771402271.925:6182): avc: denied { read } for pid=28360 comm="syz.3.5685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1567.033206][ T8096] zaurus 9-1:3.177: skipping garbage [ 1567.346622][ T8096] usb 9-1: bad CDC descriptors [ 1567.420553][ T8096] usb 9-1: USB disconnect, device number 27 [ 1567.595282][T28366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5687'. [ 1567.698696][T28364] binder: 28355:28364 ioctl c0306201 200000000040 returned -22 [ 1568.146262][ T8096] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1568.423981][ T8096] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1568.726999][ T8096] usb 4-1: New USB device found, idVendor=e76d, idProduct=0ea4, bcdDevice=c0.b7 [ 1568.769841][ T8096] usb 4-1: New USB device strings: Mfr=208, Product=71, SerialNumber=39 [ 1568.856081][ T8096] usb 4-1: Product: syz [ 1568.860428][ T8098] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1568.884129][ T8096] usb 4-1: Manufacturer: syz [ 1568.888725][ T8096] usb 4-1: SerialNumber: syz [ 1568.944156][T22451] Bluetooth: hci2: unexpected event for opcode 0x0c38 [ 1568.949985][ T8096] usb 4-1: config 0 descriptor?? [ 1569.279591][ C1] net_ratelimit: 20718 callbacks suppressed [ 1569.279609][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1569.297714][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1569.309882][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1569.321957][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1569.334074][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1569.346264][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1569.358472][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1569.370645][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1569.382867][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1569.395056][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1569.574438][ T8098] usb 3-1: Using ep0 maxpacket: 32 [ 1569.609316][T28366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=28366 comm=syz.3.5687 [ 1569.624868][ T8098] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1569.657004][T28374] binder: 28371:28374 ioctl c0306201 200000000040 returned -14 [ 1569.947464][ T8098] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1569.972925][ T8096] usbhid 4-1:0.0: can't add hid device: -71 [ 1570.126472][ T8096] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1570.139960][ T8098] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1570.229192][ T8098] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1570.248674][ T8096] usb 4-1: USB disconnect, device number 97 [ 1570.314397][ T8098] usb 3-1: config 0 descriptor?? [ 1571.618939][ T8098] usbhid 3-1:0.0: can't add hid device: -71 [ 1571.798599][ T8098] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1572.757498][T28383] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5691'. [ 1572.782025][ T8098] usb 3-1: USB disconnect, device number 78 [ 1574.051399][ C1] net_ratelimit: 23132 callbacks suppressed [ 1574.051414][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1574.069477][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1574.081730][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1574.093916][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1574.106025][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1574.118093][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1574.130151][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1574.142237][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1574.154271][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1574.166624][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1576.413377][ T8098] usb 6-1: new full-speed USB device number 85 using dummy_hcd [ 1578.823040][ C1] net_ratelimit: 26405 callbacks suppressed [ 1578.823055][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1578.841078][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1578.853125][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1578.865177][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1578.877254][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1578.889398][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1578.901576][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1578.913690][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1578.925753][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1578.937800][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1581.137932][T20140] block nbd0: Possible stuck request ffff888027d58000: control (read@0,1024B). Runtime 240 seconds [ 1581.171303][T20140] block nbd0: Possible stuck request ffff888027d58200: control (read@1024,1024B). Runtime 240 seconds [ 1581.187845][T20140] block nbd0: Possible stuck request ffff888027d58400: control (read@2048,1024B). Runtime 240 seconds [ 1581.204114][T20140] block nbd0: Possible stuck request ffff888027d58600: control (read@3072,1024B). Runtime 240 seconds [ 1581.299731][ T5179] udevd[5179]: worker [23822] /devices/virtual/block/nbd0 timeout; kill it [ 1581.543026][ T5179] udevd[5179]: seq 41272 '/devices/virtual/block/nbd0' killed [ 1581.832946][ T8098] usb 6-1: device not accepting address 85, error -71 [ 1583.326525][T22451] Bluetooth: hci4: link tx timeout [ 1583.340519][T22451] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 1583.361500][T22451] Bluetooth: hci4: link tx timeout [ 1583.376675][T22451] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1583.595067][ C1] net_ratelimit: 26764 callbacks suppressed [ 1583.595089][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1583.613305][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1583.625477][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1583.637556][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1583.649691][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1583.661885][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1583.674143][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1583.686299][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1583.698452][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1583.710526][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1585.003592][T28425] 9p: Bad value for 'wfdno' [ 1585.170834][T28428] ptrace attach of "./syz-executor exec"[28009] was attempted by ""[28428] [ 1585.313944][T28428] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5702'. [ 1585.383448][ T30] audit: type=1400 audit(1771402291.055:6183): avc: denied { getopt } for pid=28417 comm="syz.4.5702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1585.946683][T17138] Bluetooth: hci4: command 0x0406 tx timeout [ 1586.157767][ T30] audit: type=1326 audit(1771402292.063:6184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28432 comm="syz.8.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f48b9c629 code=0x7ffc0000 [ 1586.238311][ T30] audit: type=1326 audit(1771402292.063:6185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28432 comm="syz.8.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f48b9c629 code=0x7ffc0000 [ 1587.733563][ T30] audit: type=1326 audit(1771402292.084:6186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28432 comm="syz.8.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f1f48b9c629 code=0x7ffc0000 [ 1588.249567][ T30] audit: type=1326 audit(1771402292.084:6187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28432 comm="syz.8.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f48b9c629 code=0x7ffc0000 [ 1588.366770][ C1] net_ratelimit: 23214 callbacks suppressed [ 1588.366790][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:bd:51:74:a3:f8, vlan:0) [ 1588.384984][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1588.397174][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1588.409279][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1588.421463][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1588.433657][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1588.445886][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1588.458025][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:bd:51:74:a3:f8, vlan:0) [ 1588.470181][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1588.482324][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1588.660369][ T30] audit: type=1326 audit(1771402292.084:6188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28432 comm="syz.8.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f48b9c629 code=0x7ffc0000 [ 1588.808898][ T30] audit: type=1326 audit(1771402292.084:6189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28432 comm="syz.8.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f1f48b9c629 code=0x7ffc0000 [ 1588.978178][ T30] audit: type=1326 audit(1771402292.084:6190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28432 comm="syz.8.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f48b9c629 code=0x7ffc0000 [ 1590.120096][ T30] audit: type=1326 audit(1771402292.084:6191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28432 comm="syz.8.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f48b9c629 code=0x7ffc0000 [ 1590.144054][ T30] audit: type=1326 audit(1771402292.084:6192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28432 comm="syz.8.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1f48b9c629 code=0x7ffc0000 [ 1590.699877][T17138] Bluetooth: hci4: command 0x0406 tx timeout [ 1591.405080][ T30] audit: type=1326 audit(1771402292.084:6193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28432 comm="syz.8.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f48b9c629 code=0x7ffc0000 [ 1591.488876][ T30] audit: type=1326 audit(1771402292.084:6194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28432 comm="syz.8.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f48b9c629 code=0x7ffc0000 [ 1591.554246][ T30] audit: type=1326 audit(1771402292.094:6195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28432 comm="syz.8.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1f48b9c629 code=0x7ffc0000 [ 1591.579682][ T30] audit: type=1326 audit(1771402292.094:6196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28432 comm="syz.8.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f48b9c629 code=0x7ffc0000 [ 1591.603844][ T30] audit: type=1326 audit(1771402292.094:6197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28432 comm="syz.8.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f48b9c629 code=0x7ffc0000 [ 1591.632547][ T30] audit: type=1326 audit(1771402292.094:6198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28432 comm="syz.8.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1f48b5cece code=0x7ffc0000 [ 1591.657204][ T30] audit: type=1326 audit(1771402292.094:6199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28432 comm="syz.8.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f48b9c629 code=0x7ffc0000 [ 1591.685767][ T30] audit: type=1326 audit(1771402292.094:6200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28432 comm="syz.8.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f48b9c629 code=0x7ffc0000 [ 1591.711496][ T30] audit: type=1326 audit(1771402292.105:6201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28432 comm="syz.8.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1f48b9c629 code=0x7ffc0000 [ 1591.740701][ T30] audit: type=1326 audit(1771402292.105:6202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28432 comm="syz.8.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f48b9c629 code=0x7ffc0000 [ 1593.138480][ C1] net_ratelimit: 23749 callbacks suppressed [ 1593.138495][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1593.156679][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1593.168836][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1593.181007][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1593.193136][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1593.205336][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1593.217422][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:bd:51:74:a3:f8, vlan:0) [ 1593.229607][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1593.241776][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1593.253855][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1593.445458][T28449] netlink: 80 bytes leftover after parsing attributes in process `syz.8.5707'. [ 1597.910326][ C1] net_ratelimit: 28979 callbacks suppressed [ 1597.910342][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1597.928439][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1597.940563][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1597.952615][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1597.964667][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1597.976742][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:bd:51:74:a3:f8, vlan:0) [ 1597.988890][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1598.001015][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1598.013092][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1598.025218][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1602.682080][ C1] net_ratelimit: 33873 callbacks suppressed [ 1602.682095][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1602.700070][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1602.712145][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:bd:51:74:a3:f8, vlan:0) [ 1602.724260][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1602.736357][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1602.748397][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1602.760501][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1602.772616][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1602.784651][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1602.796691][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1605.905912][T17126] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1607.453859][ C1] net_ratelimit: 28623 callbacks suppressed [ 1607.453878][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1607.472199][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:bd:51:74:a3:f8, vlan:0) [ 1607.484608][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1607.497013][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1607.509387][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1607.521789][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1607.534206][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1607.546556][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1607.558880][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1607.571300][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:bd:51:74:a3:f8, vlan:0) [ 1608.180980][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1608.193140][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1608.201638][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1608.210140][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1608.220472][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1608.266123][ T5825] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1608.276682][ T5825] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1608.285116][ T5825] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1608.292997][ T5825] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1608.300511][ T5825] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1608.577380][T28486] netlink: 84 bytes leftover after parsing attributes in process `syz.8.5716'. [ 1610.186938][T17138] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1610.206365][T17138] Bluetooth: hci0: command tx timeout [ 1610.283926][T17138] Bluetooth: hci6: command tx timeout [ 1610.335031][T17138] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1610.357851][T17138] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1610.369026][T17138] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1610.375873][T20140] block nbd0: Possible stuck request ffff888027d58000: control (read@0,1024B). Runtime 270 seconds [ 1610.376764][T17138] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1610.395576][T20140] block nbd0: Possible stuck request ffff888027d58200: control (read@1024,1024B). Runtime 270 seconds [ 1610.416519][T20140] block nbd0: Possible stuck request ffff888027d58400: control (read@2048,1024B). Runtime 270 seconds [ 1610.435328][T20140] block nbd0: Possible stuck request ffff888027d58600: control (read@3072,1024B). Runtime 270 seconds [ 1610.990668][ T10] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1611.168382][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 1611.175115][ T10] usb 9-1: config 0 has an invalid interface number: 151 but max is 1 [ 1611.185706][ T10] usb 9-1: config 0 has no interface number 1 [ 1611.192193][ T10] usb 9-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1611.205841][ T10] usb 9-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1611.218987][ T10] usb 9-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 1611.230860][ T10] usb 9-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1611.246874][ T10] usb 9-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1611.266385][ T10] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 1611.281773][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1611.292856][ T10] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1611.305684][ T10] usb 9-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 1611.315268][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1611.323806][ T10] usb 9-1: Product: syz [ 1611.328270][ T10] usb 9-1: Manufacturer: syz [ 1611.333383][ T10] usb 9-1: SerialNumber: syz [ 1611.348576][ T10] usb 9-1: config 0 descriptor?? [ 1611.372874][T28496] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1611.386683][ T10] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1611.398594][ T10] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1611.556178][ T10] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 1611.637004][ T10] usb 9-1: USB disconnect, device number 28 [ 1612.178904][ T5825] Bluetooth: hci0: command tx timeout [ 1612.225627][ C1] net_ratelimit: 18951 callbacks suppressed [ 1612.225640][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:bd:51:74:a3:f8, vlan:0) [ 1612.244160][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1612.256462][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1612.268386][ T5825] Bluetooth: hci6: command tx timeout [ 1612.268701][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1612.286007][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1612.298221][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1612.310436][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1612.322693][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1612.335464][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:bd:51:74:a3:f8, vlan:0) [ 1612.340118][ T5825] Bluetooth: hci4: command tx timeout [ 1612.348269][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1615.928950][ T5825] Bluetooth: hci0: command tx timeout [ 1615.934407][ T5825] Bluetooth: hci6: command tx timeout [ 1615.939783][ T5825] Bluetooth: hci4: command tx timeout [ 1615.996198][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1616.997500][ C1] net_ratelimit: 19054 callbacks suppressed [ 1616.997513][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:bd:51:74:a3:f8, vlan:0) [ 1617.016463][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1617.028661][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1617.040882][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1617.053076][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1617.065345][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1617.077720][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1617.089806][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1617.101859][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:bd:51:74:a3:f8, vlan:0) [ 1617.114299][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1619.706039][T28418] syz_tun (unregistering): left allmulticast mode [ 1619.718418][ T5825] Bluetooth: hci4: command tx timeout [ 1619.723897][T17138] Bluetooth: hci6: command tx timeout [ 1619.729280][T17138] Bluetooth: hci0: command tx timeout [ 1620.050082][T28418] syz_tun (unregistering): left promiscuous mode [ 1620.084804][T28418] bridge0: port 3(syz_tun) entered disabled state [ 1621.706830][T17138] Bluetooth: hci4: command tx timeout [ 1621.769284][ C1] net_ratelimit: 23164 callbacks suppressed [ 1621.769299][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1621.787333][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1621.799460][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:bd:51:74:a3:f8, vlan:0) [ 1621.812055][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1621.824155][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1621.836342][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1621.848619][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1621.860900][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1621.873082][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1621.885199][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1626.540969][ C1] net_ratelimit: 23690 callbacks suppressed [ 1626.540988][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1626.559075][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1626.571373][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1626.583522][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1626.595683][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1626.607807][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1626.620006][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:bd:51:74:a3:f8, vlan:0) [ 1626.632602][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1626.644907][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1626.657182][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1626.896518][ T5825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1626.906251][ T5825] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1626.915353][ T5825] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1626.925509][ T5825] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1626.946621][ T5825] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1628.865064][ T5825] Bluetooth: hci1: command tx timeout [ 1630.851855][ T5825] Bluetooth: hci1: command tx timeout [ 1631.052976][T17138] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1631.065240][T17138] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1631.073247][T17138] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1631.084136][T17138] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1631.092914][T17138] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1631.182700][T21170] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1631.312816][ C1] net_ratelimit: 21833 callbacks suppressed [ 1631.312836][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1631.330835][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1631.342867][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1631.354927][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:bd:51:74:a3:f8, vlan:0) [ 1631.367408][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1631.379594][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1631.391664][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1631.403769][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1631.415857][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1631.427906][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1631.964877][T28511] tipc: Started in network mode [ 1631.983502][T28511] tipc: Node identity 7f000001, cluster identity 4711 [ 1633.067389][ T5825] Bluetooth: hci5: command tx timeout [ 1633.075954][T17138] Bluetooth: hci1: command tx timeout [ 1633.110279][T28511] tipc: Enabling of bearer rejected, failed to enable media [ 1634.666626][T21170] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1635.041068][ T5825] Bluetooth: hci5: command tx timeout [ 1635.046600][ T5825] Bluetooth: hci1: command tx timeout [ 1635.110273][T21170] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1635.505647][T21170] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1636.084953][ C1] net_ratelimit: 19714 callbacks suppressed [ 1636.084977][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1636.103245][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1636.115584][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1636.127925][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1636.140213][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1636.152461][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1636.164571][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1636.176822][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:bd:51:74:a3:f8, vlan:0) [ 1636.189782][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1636.202023][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1636.561822][T19284] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1636.783797][T21170] bridge_slave_1: left allmulticast mode [ 1636.799856][T21170] bridge_slave_1: left promiscuous mode [ 1636.805598][T21170] bridge0: port 2(bridge_slave_1) entered disabled state [ 1636.855346][T21170] bridge_slave_0: left allmulticast mode [ 1636.861428][T21170] bridge_slave_0: left promiscuous mode [ 1636.867706][T21170] bridge0: port 1(bridge_slave_0) entered disabled state [ 1637.030742][T17138] Bluetooth: hci5: command tx timeout [ 1637.427191][T21170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1637.444864][T21170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1637.463421][T21170] bond0 (unregistering): Released all slaves [ 1637.509136][T28481] chnl_net:caif_netlink_parms(): no params data found [ 1637.921537][T28480] chnl_net:caif_netlink_parms(): no params data found [ 1638.698998][T28481] bridge0: port 1(bridge_slave_0) entered blocking state [ 1638.706445][T28481] bridge0: port 1(bridge_slave_0) entered disabled state [ 1638.713991][T28481] bridge_slave_0: entered allmulticast mode [ 1638.721474][T28481] bridge_slave_0: entered promiscuous mode [ 1638.965426][T21170] hsr_slave_0: left promiscuous mode [ 1638.985582][T21170] hsr_slave_1: left promiscuous mode [ 1638.994631][T21170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1639.002557][T17138] Bluetooth: hci5: command tx timeout [ 1639.018845][T21170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1639.030361][T20140] block nbd0: Possible stuck request ffff888027d58000: control (read@0,1024B). Runtime 300 seconds [ 1639.034027][T21170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1639.049780][T21170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1639.050673][T20140] block nbd0: Possible stuck request ffff888027d58200: control (read@1024,1024B). Runtime 300 seconds [ 1639.086799][T21170] veth1_macvtap: left promiscuous mode [ 1639.092286][T21170] veth0_macvtap: left promiscuous mode [ 1639.092905][T20140] block nbd0: Possible stuck request ffff888027d58400: control (read@2048,1024B). Runtime 300 seconds [ 1639.099010][T21170] veth1_vlan: left promiscuous mode [ 1639.099102][T21170] veth0_vlan: left promiscuous mode [ 1639.174285][T20140] block nbd0: Possible stuck request ffff888027d58600: control (read@3072,1024B). Runtime 300 seconds [ 1639.425069][T21170] team0 (unregistering): Port device team_slave_1 removed [ 1639.454225][T21170] team0 (unregistering): Port device team_slave_0 removed [ 1639.612101][T28481] bridge0: port 2(bridge_slave_1) entered blocking state [ 1639.619659][T28481] bridge0: port 2(bridge_slave_1) entered disabled state [ 1639.626865][T28481] bridge_slave_1: entered allmulticast mode [ 1639.637716][T28481] bridge_slave_1: entered promiscuous mode [ 1639.762367][T28480] bridge0: port 1(bridge_slave_0) entered blocking state [ 1639.769534][T28480] bridge0: port 1(bridge_slave_0) entered disabled state [ 1639.780507][T28480] bridge_slave_0: entered allmulticast mode [ 1639.787894][T28480] bridge_slave_0: entered promiscuous mode [ 1639.829632][T28493] chnl_net:caif_netlink_parms(): no params data found [ 1639.861180][T28481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1639.871311][T28480] bridge0: port 2(bridge_slave_1) entered blocking state [ 1639.882251][T28480] bridge0: port 2(bridge_slave_1) entered disabled state [ 1639.890971][T28480] bridge_slave_1: entered allmulticast mode [ 1639.898812][T28480] bridge_slave_1: entered promiscuous mode [ 1639.941121][T28481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1640.097359][T28480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1640.184639][T28481] team0: Port device team_slave_0 added [ 1640.212923][T28480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1640.358307][T28481] team0: Port device team_slave_1 added [ 1640.370137][T28514] chnl_net:caif_netlink_parms(): no params data found [ 1640.541092][T28480] team0: Port device team_slave_0 added [ 1640.554211][T28517] chnl_net:caif_netlink_parms(): no params data found [ 1640.580372][T28481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1640.587500][T28481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1640.625082][T28481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1640.651348][T28480] team0: Port device team_slave_1 added [ 1640.677248][T28481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1640.684203][T28481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1640.744145][T28481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1640.856519][ C1] net_ratelimit: 13868 callbacks suppressed [ 1640.856532][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1640.874647][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:bd:51:74:a3:f8, vlan:0) [ 1640.887217][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1640.899514][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1640.911667][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1640.923970][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1640.936147][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1640.948457][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1640.960742][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1640.973083][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:bd:51:74:a3:f8, vlan:0) [ 1641.143059][T28480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1641.153200][T28480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1641.207005][T28480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1641.235384][T28493] bridge0: port 1(bridge_slave_0) entered blocking state [ 1641.242806][T28493] bridge0: port 1(bridge_slave_0) entered disabled state [ 1641.250390][T28493] bridge_slave_0: entered allmulticast mode [ 1641.258073][T28493] bridge_slave_0: entered promiscuous mode [ 1641.378733][T28480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1641.387159][T28480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1641.422819][T28480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1641.452165][T28493] bridge0: port 2(bridge_slave_1) entered blocking state [ 1641.459499][T28493] bridge0: port 2(bridge_slave_1) entered disabled state [ 1641.467063][T28493] bridge_slave_1: entered allmulticast mode [ 1641.474366][T28493] bridge_slave_1: entered promiscuous mode [ 1641.569332][T21170] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.608837][T28481] hsr_slave_0: entered promiscuous mode [ 1641.615257][T28481] hsr_slave_1: entered promiscuous mode [ 1641.629229][T28481] debugfs: 'hsr0' already exists in 'hsr' [ 1641.634953][T28481] Cannot create hsr debugfs directory [ 1641.693820][T28493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1641.721274][T21170] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.777526][T28480] hsr_slave_0: entered promiscuous mode [ 1641.784279][T28480] hsr_slave_1: entered promiscuous mode [ 1641.790963][T28480] debugfs: 'hsr0' already exists in 'hsr' [ 1641.796685][T28480] Cannot create hsr debugfs directory [ 1641.806031][T28493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1641.824193][T28514] bridge0: port 1(bridge_slave_0) entered blocking state [ 1641.831643][T28514] bridge0: port 1(bridge_slave_0) entered disabled state [ 1641.839093][T28514] bridge_slave_0: entered allmulticast mode [ 1641.846356][T28514] bridge_slave_0: entered promiscuous mode [ 1641.905023][T21170] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1642.023455][T28514] bridge0: port 2(bridge_slave_1) entered blocking state [ 1642.033660][T28514] bridge0: port 2(bridge_slave_1) entered disabled state [ 1642.041240][T28514] bridge_slave_1: entered allmulticast mode [ 1642.049866][T28514] bridge_slave_1: entered promiscuous mode [ 1642.057722][T28517] bridge0: port 1(bridge_slave_0) entered blocking state [ 1642.064821][T28517] bridge0: port 1(bridge_slave_0) entered disabled state [ 1642.072494][T28517] bridge_slave_0: entered allmulticast mode [ 1642.085754][T28517] bridge_slave_0: entered promiscuous mode [ 1642.124416][T21170] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1642.169977][T28517] bridge0: port 2(bridge_slave_1) entered blocking state [ 1642.178132][T28517] bridge0: port 2(bridge_slave_1) entered disabled state [ 1642.192435][T28517] bridge_slave_1: entered allmulticast mode [ 1642.200391][T28517] bridge_slave_1: entered promiscuous mode [ 1642.293520][T28493] team0: Port device team_slave_0 added [ 1642.346316][T28514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1642.364018][T28514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1642.423369][T28493] team0: Port device team_slave_1 added [ 1642.461794][T28517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1642.543880][T28517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1642.620891][T28493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1642.627852][T28493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1642.674346][T28493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1642.724132][T28514] team0: Port device team_slave_0 added [ 1642.736948][T28493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1642.744121][T28493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1642.778802][T28493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1642.831534][T28517] team0: Port device team_slave_0 added [ 1642.894472][T28514] team0: Port device team_slave_1 added [ 1642.920921][T28517] team0: Port device team_slave_1 added [ 1643.143488][T28514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1643.150456][T28514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1643.177160][T28514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1643.235876][T28514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1643.261290][T28514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1643.288299][T28514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1643.319166][T28493] hsr_slave_0: entered promiscuous mode [ 1643.325692][T28493] hsr_slave_1: entered promiscuous mode [ 1643.331939][T28493] debugfs: 'hsr0' already exists in 'hsr' [ 1643.341358][T28493] Cannot create hsr debugfs directory [ 1643.376165][T28517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1643.383892][T28517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1643.410369][T28517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1643.435291][T28517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1643.443028][T28517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1643.475037][T28517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1643.800964][T21170] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1643.813640][T21170] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1643.843278][T28514] hsr_slave_0: entered promiscuous mode [ 1643.851095][T28514] hsr_slave_1: entered promiscuous mode [ 1643.858000][T28514] debugfs: 'hsr0' already exists in 'hsr' [ 1643.863755][T28514] Cannot create hsr debugfs directory [ 1643.954996][T21170] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1643.970006][T21170] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1644.051593][T28517] hsr_slave_0: entered promiscuous mode [ 1644.058359][T28517] hsr_slave_1: entered promiscuous mode [ 1644.064602][T28517] debugfs: 'hsr0' already exists in 'hsr' [ 1644.071410][T28517] Cannot create hsr debugfs directory [ 1644.165162][T21170] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1644.176386][T21170] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1644.383953][T21170] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1644.406156][T21170] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.196999][T21170] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1645.214100][T21170] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.360135][T21170] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1645.371617][T21170] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.514273][T21170] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1645.533760][T21170] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.628924][ C1] net_ratelimit: 14664 callbacks suppressed [ 1645.628944][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1645.647153][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1645.659447][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1645.671795][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1645.684127][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1645.696404][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1645.708677][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1645.720999][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:bd:51:74:a3:f8, vlan:0) [ 1645.733968][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1645.746299][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1645.825272][T21170] bond0: (slave netdevsim0): Releasing backup interface [ 1646.137719][T21170] bridge_slave_1: left allmulticast mode [ 1646.152049][T21170] bridge_slave_1: left promiscuous mode [ 1646.157783][T21170] bridge0: port 2(bridge_slave_1) entered disabled state [ 1646.213459][T21170] bridge_slave_0: left allmulticast mode [ 1646.219296][T21170] bridge_slave_0: left promiscuous mode [ 1646.224978][T21170] bridge0: port 1(bridge_slave_0) entered disabled state [ 1646.262719][T21170] bridge_slave_1: left allmulticast mode [ 1646.268712][T21170] bridge_slave_1: left promiscuous mode [ 1646.274396][T21170] bridge0: port 2(bridge_slave_1) entered disabled state [ 1646.293998][T21170] bridge_slave_0: left allmulticast mode [ 1646.300691][T21170] bridge_slave_0: left promiscuous mode [ 1646.315469][T21170] bridge0: port 1(bridge_slave_0) entered disabled state [ 1646.422546][T21170] bridge_slave_1: left allmulticast mode [ 1646.432229][T21170] bridge_slave_1: left promiscuous mode [ 1646.438591][T21170] bridge0: port 2(bridge_slave_1) entered disabled state [ 1646.453256][T21170] bridge_slave_0: left allmulticast mode [ 1646.460809][T21170] bridge_slave_0: left promiscuous mode [ 1646.467905][T21170] bridge0: port 1(bridge_slave_0) entered disabled state [ 1646.967301][T21170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1646.987128][T21170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1647.002630][T21170] bond0 (unregistering): Released all slaves [ 1647.309307][T21170] bond0 (unregistering): (slave bridge2): Releasing active interface [ 1647.393834][T21170] smc: removing net device bond0 with user defined pnetid SYZ2 [ 1647.410265][T21170] bond0 (unregistering): Released all slaves [ 1647.429509][T21170] bond1 (unregistering): (slave veth5): Releasing active interface [ 1647.447246][T21170] bond1 (unregistering): Released all slaves [ 1647.718406][T21170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1647.737826][T21170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1647.749668][T21170] bond0 (unregistering): Released all slaves [ 1647.763068][T21170] bond1 (unregistering): (slave veth3): Releasing active interface [ 1647.784593][T21170] bond1 (unregistering): Released all slaves [ 1647.803259][T21170] bond2 (unregistering): (slave dummy0): Releasing backup interface [ 1647.815349][T21170] dummy0: left promiscuous mode [ 1647.827267][T21170] dummy0: left allmulticast mode [ 1647.844903][T21170] bond2 (unregistering): Released all slaves [ 1648.030193][T21170] tipc: Left network mode [ 1648.173249][T21170] tipc: Left network mode [ 1648.669719][T28481] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1648.862012][T28481] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1648.953756][T28481] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1648.968931][T28481] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1649.963700][T28493] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1649.978153][T28493] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1650.135894][T28493] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1650.177099][T28493] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1650.198811][T28481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1650.400017][ C1] net_ratelimit: 15517 callbacks suppressed [ 1650.400036][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:bd:51:74:a3:f8, vlan:0) [ 1650.419042][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1650.431591][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1650.443884][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1650.456181][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1650.468448][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1650.480691][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1650.492947][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1650.505210][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:bd:51:74:a3:f8, vlan:0) [ 1650.518195][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1651.028444][T28481] 8021q: adding VLAN 0 to HW filter on device team0 [ 1651.056662][T21170] hsr_slave_0: left promiscuous mode [ 1651.070853][T21170] hsr_slave_1: left promiscuous mode [ 1651.077912][T21170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1651.085293][T21170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1651.099107][T21170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1651.108959][T21170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1651.153678][T21170] hsr_slave_0: left promiscuous mode [ 1651.162338][T21170] hsr_slave_1: left promiscuous mode [ 1651.168332][T21170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1651.178517][T21170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1651.190460][T21170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1651.197869][T21170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1651.244145][T21170] hsr_slave_0: left promiscuous mode [ 1651.251180][T21170] hsr_slave_1: left promiscuous mode [ 1651.257034][T21170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1651.264579][T21170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1651.279226][T21170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1651.287267][T21170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1651.328023][T21170] veth1_macvtap: left promiscuous mode [ 1651.333633][T21170] veth0_macvtap: left promiscuous mode [ 1651.339170][T21170] veth1_vlan: left promiscuous mode [ 1651.367446][T21170] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 1651.375143][T21170] veth1_macvtap: left promiscuous mode [ 1651.380617][T21170] veth0_macvtap: left promiscuous mode [ 1651.387035][T21170] veth1_vlan: left promiscuous mode [ 1651.408434][T21170] veth1_macvtap: left promiscuous mode [ 1651.415992][T21170] veth0_macvtap: left promiscuous mode [ 1651.422602][T21170] veth1_vlan: left promiscuous mode [ 1651.774965][T12441] smc: removing ib device syz2 [ 1651.912050][T21170] team0 (unregistering): Port device team_slave_1 removed [ 1651.934929][T21170] team0 (unregistering): Port device team_slave_0 removed [ 1652.172100][T21170] team0 (unregistering): Port device batadv1 removed [ 1652.399961][T21170] team0 (unregistering): Port device team_slave_1 removed [ 1652.426236][T21170] team0 (unregistering): Port device team_slave_0 removed [ 1652.779742][T21170] team0 (unregistering): Port device team_slave_1 removed [ 1652.801125][T21170] team0 (unregistering): Port device team_slave_0 removed [ 1653.049069][ T8099] ================================================================== [ 1653.057154][ T8099] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x190/0x1c0 [ 1653.065997][ T8099] Read of size 8 at addr ffff88805c4c02f0 by task kworker/0:14/8099 [ 1653.073965][ T8099] [ 1653.076282][ T8099] CPU: 0 UID: 0 PID: 8099 Comm: kworker/0:14 Tainted: G L syzkaller #0 PREEMPT(full) [ 1653.076309][ T8099] Tainted: [L]=SOFTLOCKUP [ 1653.076316][ T8099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1653.076329][ T8099] Workqueue: events smc_ib_port_event_work [ 1653.076365][ T8099] Call Trace: [ 1653.076372][ T8099] [ 1653.076380][ T8099] dump_stack_lvl+0x100/0x190 [ 1653.076408][ T8099] print_report+0x156/0x4c9 [ 1653.076433][ T8099] ? __virt_addr_valid+0x81/0x620 [ 1653.076458][ T8099] ? __phys_addr+0xe8/0x180 [ 1653.076483][ T8099] ? __ethtool_get_link_ksettings+0x190/0x1c0 [ 1653.076506][ T8099] kasan_report+0xdf/0x1e0 [ 1653.076531][ T8099] ? __ethtool_get_link_ksettings+0x190/0x1c0 [ 1653.076555][ T8099] __ethtool_get_link_ksettings+0x190/0x1c0 [ 1653.076577][ T8099] __ethtool_get_link_ksettings+0x144/0x1c0 [ 1653.076599][ T8099] ib_get_eth_speed+0x13a/0xb40 [ 1653.076623][ T8099] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 1653.076651][ T8099] ? do_raw_spin_unlock+0x145/0x1e0 [ 1653.076672][ T8099] rxe_query_port+0x12a/0x330 [ 1653.076701][ T8099] ib_query_port+0x441/0x8a0 [ 1653.076726][ T8099] smc_ib_port_event_work+0x14c/0xbd0 [ 1653.076754][ T8099] ? smc_ib_port_event_work+0x54/0xbd0 [ 1653.076783][ T8099] ? rcu_is_watching+0x12/0xc0 [ 1653.076804][ T8099] process_one_work+0x9d7/0x1920 [ 1653.076826][ T8099] ? __pfx_process_one_work+0x10/0x10 [ 1653.076847][ T8099] ? __pfx_smc_ib_port_event_work+0x10/0x10 [ 1653.076877][ T8099] worker_thread+0x5da/0xe40 [ 1653.076898][ T8099] ? kthread+0x13a/0x450 [ 1653.076912][ T8099] ? __pfx_worker_thread+0x10/0x10 [ 1653.076928][ T8099] kthread+0x370/0x450 [ 1653.076943][ T8099] ? __pfx_kthread+0x10/0x10 [ 1653.076959][ T8099] ret_from_fork+0x754/0xd80 [ 1653.076977][ T8099] ? __pfx_ret_from_fork+0x10/0x10 [ 1653.076994][ T8099] ? rcu_is_watching+0x12/0xc0 [ 1653.077013][ T8099] ? __switch_to+0x7b4/0x1120 [ 1653.077033][ T8099] ? __pfx_kthread+0x10/0x10 [ 1653.077049][ T8099] ret_from_fork_asm+0x1a/0x30 [ 1653.077075][ T8099] [ 1653.077081][ T8099] [ 1653.273280][ T8099] Allocated by task 18163: [ 1653.277685][ T8099] kasan_save_stack+0x30/0x50 [ 1653.282362][ T8099] kasan_save_track+0x14/0x30 [ 1653.287033][ T8099] __kasan_kmalloc+0xaa/0xb0 [ 1653.291612][ T8099] __kvmalloc_node_noprof+0x360/0xa00 [ 1653.296978][ T8099] alloc_netdev_mqs+0xd7/0x14f0 [ 1653.301827][ T8099] rtnl_create_link+0xc13/0xf80 [ 1653.306673][ T8099] rtnl_newlink+0x13b8/0x2380 [ 1653.311346][ T8099] rtnetlink_rcv_msg+0x95e/0xe90 [ 1653.316283][ T8099] netlink_rcv_skb+0x159/0x420 [ 1653.321031][ T8099] netlink_unicast+0x5aa/0x870 [ 1653.325780][ T8099] netlink_sendmsg+0x8b0/0xda0 [ 1653.330530][ T8099] __sys_sendto+0x4aa/0x520 [ 1653.335027][ T8099] __x64_sys_sendto+0xe0/0x1c0 [ 1653.339786][ T8099] do_syscall_64+0x106/0xf80 [ 1653.344373][ T8099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1653.350255][ T8099] [ 1653.352562][ T8099] Freed by task 21170: [ 1653.356608][ T8099] kasan_save_stack+0x30/0x50 [ 1653.361278][ T8099] kasan_save_track+0x14/0x30 [ 1653.365943][ T8099] kasan_save_free_info+0x3b/0x70 [ 1653.370956][ T8099] __kasan_slab_free+0x5f/0x80 [ 1653.375702][ T8099] kfree+0x1f6/0x6b0 [ 1653.379586][ T8099] device_release+0xa4/0x240 [ 1653.384195][ T8099] kobject_put+0x1f7/0x640 [ 1653.388604][ T8099] netdev_run_todo+0x817/0x12c0 [ 1653.393457][ T8099] default_device_exit_batch+0x94b/0xc60 [ 1653.399086][ T8099] ops_undo_list+0x363/0xab0 [ 1653.403673][ T8099] cleanup_net+0x499/0x920 [ 1653.408078][ T8099] process_one_work+0x9d7/0x1920 [ 1653.413002][ T8099] worker_thread+0x5da/0xe40 [ 1653.417582][ T8099] kthread+0x370/0x450 [ 1653.421636][ T8099] ret_from_fork+0x754/0xd80 [ 1653.426211][ T8099] ret_from_fork_asm+0x1a/0x30 [ 1653.430965][ T8099] [ 1653.433273][ T8099] The buggy address belongs to the object at ffff88805c4c0000 [ 1653.433273][ T8099] which belongs to the cache kmalloc-cg-4k of size 4096 [ 1653.447570][ T8099] The buggy address is located 752 bytes inside of [ 1653.447570][ T8099] freed 4096-byte region [ffff88805c4c0000, ffff88805c4c1000) [ 1653.461436][ T8099] [ 1653.463744][ T8099] The buggy address belongs to the physical page: [ 1653.470145][ T8099] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5c4c0 [ 1653.478902][ T8099] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1653.487393][ T8099] memcg:ffff88804af65081 [ 1653.491624][ T8099] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1653.499155][ T8099] page_type: f5(slab) [ 1653.503128][ T8099] raw: 00fff00000000040 ffff88813fe56500 dead000000000100 dead000000000122 [ 1653.511705][ T8099] raw: 0000000000000000 0000000800040004 00000000f5000000 ffff88804af65081 [ 1653.520283][ T8099] head: 00fff00000000040 ffff88813fe56500 dead000000000100 dead000000000122 [ 1653.528946][ T8099] head: 0000000000000000 0000000800040004 00000000f5000000 ffff88804af65081 [ 1653.537611][ T8099] head: 00fff00000000003 ffffea0001713001 00000000ffffffff 00000000ffffffff [ 1653.546270][ T8099] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1653.554925][ T8099] page dumped because: kasan: bad access detected [ 1653.561322][ T8099] page_owner tracks the page as allocated [ 1653.567018][ T8099] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5812, tgid 5812 (syz-executor), ts 58296790835, free_ts 12684911814 [ 1653.588368][ T8099] post_alloc_hook+0x153/0x170 [ 1653.593127][ T8099] get_page_from_freelist+0x111d/0x3140 [ 1653.598666][ T8099] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 1653.604550][ T8099] new_slab+0xa6/0x6d0 [ 1653.608604][ T8099] refill_objects+0x26b/0x400 [ 1653.613271][ T8099] __pcs_replace_empty_main+0x19f/0x600 [ 1653.618807][ T8099] __kmalloc_noprof+0x688/0x850 [ 1653.623639][ T8099] __register_sysctl_table+0xac/0x1650 [ 1653.629095][ T8099] __addrconf_sysctl_register+0x1a2/0x360 [ 1653.634812][ T8099] addrconf_sysctl_register+0x163/0x200 [ 1653.640356][ T8099] ipv6_add_dev+0xaf2/0x1520 [ 1653.644940][ T8099] addrconf_notify+0x563/0x19c0 [ 1653.649779][ T8099] notifier_call_chain+0x99/0x420 [ 1653.654800][ T8099] call_netdevice_notifiers_info+0xbe/0x110 [ 1653.660685][ T8099] register_netdevice+0x16e6/0x2210 [ 1653.665877][ T8099] register_netdev+0x34/0x50 [ 1653.670464][ T8099] page last free pid 1 tgid 1 stack trace: [ 1653.676246][ T8099] __free_frozen_pages+0x7ca/0x10a0 [ 1653.681423][ T8099] free_contig_range+0xde/0x1d0 [ 1653.686261][ T8099] destroy_args+0xa8/0x7a0 [ 1653.690666][ T8099] debug_vm_pgtable+0x1b66/0x34c0 [ 1653.695680][ T8099] do_one_initcall+0x11d/0x760 [ 1653.700434][ T8099] kernel_init_freeable+0x6e5/0x7a0 [ 1653.705621][ T8099] kernel_init+0x1f/0x1e0 [ 1653.709943][ T8099] ret_from_fork+0x754/0xd80 [ 1653.714518][ T8099] ret_from_fork_asm+0x1a/0x30 [ 1653.719274][ T8099] [ 1653.721582][ T8099] Memory state around the buggy address: [ 1653.727195][ T8099] ffff88805c4c0180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1653.735246][ T8099] ffff88805c4c0200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1653.743293][ T8099] >ffff88805c4c0280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1653.751337][ T8099] ^ [ 1653.759040][ T8099] ffff88805c4c0300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1653.767087][ T8099] ffff88805c4c0380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1653.775132][ T8099] ================================================================== [ 1653.814798][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 1653.814816][ T30] audit: type=1400 audit(1771402362.397:6254): avc: denied { write } for pid=5790 comm="syz-executor" path="pipe:[3875]" dev="pipefs" ino=3875 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1653.980188][ T30] audit: type=1400 audit(1771402363.258:6255): avc: denied { read } for pid=5161 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1654.004873][ T30] audit: type=1400 audit(1771402363.258:6256): avc: denied { search } for pid=5161 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1654.052160][ T8099] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1654.059379][ T8099] CPU: 0 UID: 0 PID: 8099 Comm: kworker/0:14 Tainted: G L syzkaller #0 PREEMPT(full) [ 1654.070395][ T8099] Tainted: [L]=SOFTLOCKUP [ 1654.074704][ T8099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1654.084748][ T8099] Workqueue: events smc_ib_port_event_work [ 1654.090563][ T8099] Call Trace: [ 1654.093830][ T8099] [ 1654.096751][ T8099] dump_stack_lvl+0x100/0x190 [ 1654.101431][ T8099] vpanic+0x552/0x970 [ 1654.105405][ T8099] ? __pfx_vpanic+0x10/0x10 [ 1654.109900][ T8099] ? __ethtool_get_link_ksettings+0x190/0x1c0 [ 1654.115963][ T8099] panic+0xd1/0xe0 [ 1654.119675][ T8099] ? __pfx_panic+0x10/0x10 [ 1654.124081][ T8099] ? __ethtool_get_link_ksettings+0x190/0x1c0 [ 1654.130145][ T8099] ? preempt_schedule_common+0x42/0xc0 [ 1654.135604][ T8099] ? check_panic_on_warn+0x1f/0x90 [ 1654.140715][ T8099] check_panic_on_warn.cold+0x19/0x34 [ 1654.146082][ T8099] end_report.part.0+0x3a/0x90 [ 1654.150844][ T8099] kasan_report.cold+0xe/0x18 [ 1654.155523][ T8099] ? __ethtool_get_link_ksettings+0x190/0x1c0 [ 1654.161586][ T8099] __ethtool_get_link_ksettings+0x190/0x1c0 [ 1654.167473][ T8099] __ethtool_get_link_ksettings+0x144/0x1c0 [ 1654.173363][ T8099] ib_get_eth_speed+0x13a/0xb40 [ 1654.178214][ T8099] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 1654.183586][ T8099] ? do_raw_spin_unlock+0x145/0x1e0 [ 1654.188777][ T8099] rxe_query_port+0x12a/0x330 [ 1654.193457][ T8099] ib_query_port+0x441/0x8a0 [ 1654.198044][ T8099] smc_ib_port_event_work+0x14c/0xbd0 [ 1654.203421][ T8099] ? smc_ib_port_event_work+0x54/0xbd0 [ 1654.208880][ T8099] ? rcu_is_watching+0x12/0xc0 [ 1654.213638][ T8099] process_one_work+0x9d7/0x1920 [ 1654.218571][ T8099] ? __pfx_process_one_work+0x10/0x10 [ 1654.223943][ T8099] ? __pfx_smc_ib_port_event_work+0x10/0x10 [ 1654.229837][ T8099] worker_thread+0x5da/0xe40 [ 1654.234424][ T8099] ? kthread+0x13a/0x450 [ 1654.238652][ T8099] ? __pfx_worker_thread+0x10/0x10 [ 1654.243752][ T8099] kthread+0x370/0x450 [ 1654.247808][ T8099] ? __pfx_kthread+0x10/0x10 [ 1654.252387][ T8099] ret_from_fork+0x754/0xd80 [ 1654.256971][ T8099] ? __pfx_ret_from_fork+0x10/0x10 [ 1654.262075][ T8099] ? rcu_is_watching+0x12/0xc0 [ 1654.266832][ T8099] ? __switch_to+0x7b4/0x1120 [ 1654.271504][ T8099] ? __pfx_kthread+0x10/0x10 [ 1654.276082][ T8099] ret_from_fork_asm+0x1a/0x30 [ 1654.280846][ T8099] [ 1654.284128][ T8099] Kernel Offset: disabled [ 1654.288425][ T8099] Rebooting in 86400 seconds..