last executing test programs: 16.450693693s ago: executing program 1 (id=23): ioperm(0x4, 0x3, 0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0x18, 0x2, 0x3b) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000002) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf9, 0x15, 0x1d, 0x8, 0xb48, 0x1009, 0x87f7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x32, 0x0, 0x0, 0x25, 0x3, 0xaa}}]}}]}}, 0x0) mremap(&(0x7f0000f1d000/0x2000)=nil, 0x2000, 0x3000, 0x7, &(0x7f0000248000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000300)=0x1, 0x4) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x20012, r2, 0x61864000) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) 13.307090324s ago: executing program 1 (id=32): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=@newtaction={0xe80, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x101, 0x5c, 0x0, 0xb, 0x9}, 0x8, 0x7}, [{0x7, 0x8, 0xb6f8, 0x8, 0x101, 0x3}, {0x9, 0x6, 0x6, 0xfffffff7, 0xd, 0xed7}, {0xaabee86, 0x100, 0x4, 0x8, 0x8, 0xb6d}, {0x66, 0x80000000, 0xfffffffd, 0x2, 0x10000, 0x9}, {0x2, 0xfffffffc, 0x9, 0x1, 0x9}, {0x3, 0x8, 0x9, 0x400, 0xf, 0x939b}, {0xdc11, 0xfffffff9, 0x3ff, 0xfada, 0x401, 0x10000}, {0x15, 0x9, 0x7, 0x81, 0x7, 0x1}, {0x5, 0x1, 0x2, 0x80000001, 0xfff, 0x8}, {0xb73, 0x5, 0x3, 0xfffffff7, 0x0, 0xd}, {0xffffff80, 0x3, 0x1, 0x80000001, 0x4, 0x4}, {0x519, 0xf0, 0x66, 0x3, 0x5, 0xfffffff7}, {0x400, 0x200, 0x1ff, 0x3, 0x5, 0x5}, {0x3, 0x5, 0x1, 0x101, 0x200}, {0x4, 0x7, 0x7, 0x9, 0xf, 0x1}, {0x401, 0x433, 0x7, 0xffffff7f, 0x9, 0x7}, {0x10, 0x6, 0x9, 0x0, 0x5, 0x2}, {0x5, 0x1, 0x8, 0x3, 0xa9, 0xfffffffc}, {0x0, 0x80000000, 0x2, 0xce6, 0x1ff, 0x2}, {0x1400, 0x8, 0x5, 0x3ff, 0xfffffffe, 0x8}, {0xa177, 0x8, 0x1, 0x7, 0x9, 0x8000}, {0xce0, 0x4, 0x1ff, 0xd7, 0x7, 0x6}, {0xffff4234, 0x4f9, 0xfffffff9, 0x1, 0xc, 0xffffffdd}, {0x81, 0x2c, 0xc13, 0x7d1, 0x4, 0x6}, {0x5, 0x7, 0x7, 0x1000, 0x2, 0x7f}, {0x400, 0x6, 0x7, 0x6, 0x120, 0x6}, {0x6, 0x3, 0x4, 0x7ff, 0x0, 0x3}, {0x6, 0x0, 0x3, 0x2, 0xfff, 0x2}, {0x8, 0x3, 0x6, 0x5c6a, 0x5, 0x9}, {0x8, 0x1, 0x8, 0x8, 0x8, 0x95}, {0xf80, 0x8, 0x10000, 0x8, 0xe, 0xfffeffff}, {0x4, 0x8000, 0x7, 0x8aa6, 0xfffffff7, 0x5}, {0x8, 0x7, 0xfffffff7, 0x3ff, 0xd7d, 0x5}, {0xd50, 0x2, 0x8, 0x4, 0x8, 0x3}, {0x2, 0x6, 0x7f, 0x9, 0xfffffff9, 0x1}, {0x162, 0x0, 0x4b3, 0xcb5, 0x5, 0x7fffffdf}, {0x80000000, 0x0, 0x1, 0x2, 0x100, 0x7}, {0x8, 0x8, 0x1, 0xffffffff, 0x3ff, 0x5d1}, {0x3, 0xd054, 0x9, 0x5, 0xfffff801, 0x1}, {0x7, 0x8, 0x983, 0x0, 0x6, 0x200}, {0x47, 0x200, 0x8, 0x9, 0x2, 0x9}, {0x1, 0xfffffff9, 0x2, 0x7, 0x7, 0x1000}, {0x10000, 0x24056a58, 0x8, 0x8, 0x0, 0x8}, {0x2, 0x1ff, 0x3ff, 0x0, 0x2, 0x40000000}, {0x7ff, 0x7ff, 0x0, 0x3, 0x9ca, 0xffffffff}, {0x80000000, 0x9, 0x2, 0x2, 0xdd9f, 0x40}, {0xa, 0x9, 0x3, 0x0, 0xe00, 0x7fff}, {0x4, 0x3, 0x3, 0x0, 0x7f, 0x8}, {0x7, 0x8, 0x10, 0x4, 0x0, 0x80000000}, {0x7, 0x5, 0xfffff801, 0x1ff, 0x1, 0x10000}, {0x80000001, 0x2, 0x2, 0x3, 0x4}, {0x40, 0x0, 0x7, 0xc, 0x1, 0xffff0001}, {0x6, 0x0, 0x2, 0x5, 0x742}, {0x4, 0x401, 0xc0, 0xffffffff, 0x8, 0x2}, {0x7, 0x6, 0x5, 0x4d2b, 0x4, 0x8001}, {0x6, 0xf731, 0x2b1, 0xfffffffa, 0x1, 0x101}, {0x5, 0x7, 0x101, 0x0, 0x7, 0x8}, {0x3, 0x7, 0x8, 0x8, 0x7, 0xa0}, {0x1a, 0xe, 0x3ff, 0x0, 0x3, 0xfe}, {0x2, 0x7, 0xcf0, 0x5, 0x7, 0x6}, {0xfff, 0x6, 0x0, 0x1000, 0x0, 0xf}, {0x9, 0xfffffbff, 0x2, 0x5}, {0x0, 0x22f, 0x2, 0xe7b, 0xba, 0x7ff}, {0x1, 0x7b7, 0x0, 0xcb2d, 0xe, 0x6}, {0x0, 0x30000, 0x50, 0x5, 0x5, 0x8000}, {0xf9, 0x5b, 0x8, 0x3, 0x3, 0xff36}, {0x2de, 0x6, 0x5, 0xa4, 0x6, 0x7}, {0x8, 0x9, 0xd32, 0xd4, 0x100, 0x1d}, {0x0, 0xb, 0xec36, 0x52, 0x7, 0xe}, {0x80000000, 0x7f, 0x80, 0x4, 0x35b3, 0x5}, {0x8, 0x7, 0x44c9bfe0, 0x40, 0x4, 0x1}, {0xffff7fff, 0xf7af, 0x1ff, 0x21, 0x81, 0xa}, {0x2, 0x4, 0x7fffffff, 0x2, 0x1ff, 0x800}, {0x9, 0x9, 0x8, 0x2, 0x9, 0x6}, {0x6, 0x9, 0xafb, 0x3, 0x9, 0x5}, {0x2b20, 0x9, 0x7fffffff, 0x7c82, 0x7f, 0x8}, {0x1ff, 0x0, 0x0, 0x6, 0x8, 0x2}, {0x3, 0x6, 0x1c97600f, 0x6, 0xd, 0x800}, {0x1, 0x0, 0x0, 0x9, 0x19, 0x2}, {0x3, 0x7, 0xd, 0x7fffffff, 0x4}, {0x7f, 0x3, 0x5, 0x1, 0x75, 0x100}, {0xfff, 0x1, 0x1d, 0x40, 0x472, 0x6}, {0xe, 0x48f, 0x7, 0xfffffffc, 0x6, 0x7}, {0x9, 0x9, 0x401, 0x6, 0x1ff, 0x1}, {0xdd4, 0x0, 0x9, 0x6, 0x7, 0x7e27a179}, {0x3134, 0xfffffff9, 0x7, 0x6, 0x2, 0x1ff}, {0x6, 0x9, 0x611, 0x3, 0x2, 0x1}, {0x9, 0x3, 0x2, 0x9e7, 0x6, 0x4}, {0x5, 0x7, 0x1, 0x10000, 0xa, 0x1}, {0x9, 0x8, 0x0, 0x5, 0x3, 0x80000001}, {0x8, 0x9, 0x2, 0x5, 0x6, 0xd888}, {0x1, 0xdc13, 0x8, 0x6, 0x5, 0x1}, {0xfffffff8, 0x7, 0xb13, 0x7f, 0x81, 0x3ff}, {0x2da, 0x0, 0x9, 0xa748, 0x4, 0x1}, {0x1, 0x5, 0x1, 0x6, 0x6, 0x4f}, {0x2a, 0x7, 0x1, 0x0, 0x2, 0x80000001}, {0x8, 0x2f, 0xfffffff9, 0x4, 0x200, 0x800}, {0x40, 0x6, 0xc, 0xa1f7, 0x9, 0x1000}, {0x4, 0x101, 0x3, 0x401, 0x0, 0xfff}, {0x1, 0x0, 0x9, 0xf, 0x1000, 0x40}, {0x3, 0x3, 0x1, 0x8, 0x400, 0x8}, {0x2, 0x1000, 0x5, 0x8, 0x200, 0x66d4}, {0x7, 0x2b914a38, 0xda2, 0x0, 0x2, 0x6}, {0x95, 0x9, 0x6, 0x3, 0x5, 0xfffffffb}, {0x3ed, 0x9, 0x4, 0x2, 0xfffff801, 0x9}, {0xf48, 0x80000000, 0x1000, 0x1, 0x9, 0x3}, {0x5, 0xffffffff, 0x3, 0xf, 0x8, 0x2}, {0x10000000, 0xbc9, 0x0, 0x6, 0x1}, {0x3ff, 0x0, 0x6, 0x3, 0x892, 0xffff5833}, {0x2, 0x5, 0x8, 0x8, 0xbcb7, 0x8}, {0x5, 0x3, 0x1, 0x7, 0x8, 0xfffffffb}, {0x6, 0x2, 0x8, 0x1, 0x9, 0x40}, {0x73d, 0x81, 0x4, 0x4c, 0x2, 0x10000}, {0x4, 0x1, 0x401, 0x4, 0x3}, {0x99, 0x1, 0xfffffffb, 0x2, 0xd, 0x4}, {0x100, 0xfffffffd, 0x5, 0xa, 0x7, 0x5cf4}, {0x8, 0x5, 0x9, 0x1000, 0x1ff, 0x80}, {0x800, 0x10000, 0x2, 0xd3, 0xe, 0xfffffffd}, {0x4, 0x3, 0x6, 0x727b, 0xc, 0x5}, {0x6, 0x2bf3, 0x3, 0x35, 0xd, 0xf24}, {0x9, 0x890c, 0xcf3, 0x87ee, 0x5, 0xfffffffc}, {0x49424b5d, 0xf, 0x3, 0x7, 0x2d219f14, 0x1ff}, {0x3, 0x5, 0x9, 0x9, 0xffffffff, 0x4}, {0x6, 0x5, 0x4, 0x80, 0x7fffffff, 0x8000}, {0x5, 0xfffff404, 0x1, 0x8, 0x879, 0x3}, {0x5, 0xc, 0x6, 0xfffffffb, 0x8, 0x2}, {0x4, 0x401, 0x39846a8c, 0x1, 0x7fff, 0xb}, {0xfffffff1, 0x8, 0x3, 0x3, 0x2, 0x3}], [{0x5, 0x1}, {}, {0x5, 0x1}, {0x1}, {}, {0x1, 0x4fa8102eea1673da}, {0x4}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1a2b73033141e383}, {0x3, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x7, 0x1}, {0x4}, {0x5}, {0x2}, {0x4, 0x1}, {}, {0x2}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x5}, {0x2, 0x1}, {}, {0x7}, {0x1, 0x1}, {0x3}, {0x2}, {0x1}, {0x8, 0x1}, {0x3}, {0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x1}, {0x0, 0xbfb90171edaf7461}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {}, {0x0, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x5}, {0x3}, {0x3}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x2}]}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x500}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe80}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) write$6lowpan_control(r3, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) mkdir(&(0x7f0000000140)='./control\x00', 0x5) r5 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0x64000ba6) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000960) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) r6 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, 0x8) sched_setattr(r2, &(0x7f00000001c0)={0x38, 0x3, 0xc, 0x105, 0x6, 0x7, 0x6b4, 0x510000000, 0x6, 0x40}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x38) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 12.162508794s ago: executing program 0 (id=35): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000d74000/0x1000)=nil, 0x1000, 0x3000002, 0x200000005c831, 0xffffffffffffffff, 0xbb4df000) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r3}, 0x94) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r5, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x800}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1a) close_range(r6, 0xffffffffffffffff, 0x2) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$SIOCSIFMTU(r0, 0x8947, &(0x7f0000000200)={'bond0\x00', 0x10000}) 10.72966289s ago: executing program 0 (id=38): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000280)={0x1, 0x0, 0x27f}) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_delete(0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x1, 'vlan1\x00', {}, 0x5832}) socket$inet6(0xa, 0x3, 0x3c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b000)=""/102400, 0x19000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x8, 0x10002a, 0x8, 0x0, 0x0}}, 0x10) fallocate(0xffffffffffffffff, 0x3, 0x5, 0x8) r4 = getpid() r5 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}}, [0xfff, 0xff, 0x2400000000, 0x5, 0x9a, 0x3, 0x5, 0x8000, 0x7, 0xdec, 0xfffffffffffffff8, 0x1, 0x3, 0x30, 0x6]}, 0x0) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x48002) write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000fe"], 0xc8) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000800)={{0x4, 0x0, 0x9, 0x8001, 'syz0\x00', 0xc22}, 0x2, 0x200, 0x9, r4, 0x0, 0x7fff, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r5, 0xc0405519, &(0x7f0000000bc0)={0x5, 0x4, 0x5, 0xe2, 'syz1\x00', 0x1}) 10.609599533s ago: executing program 3 (id=40): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000780)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x101048c, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x380}) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000400)={0xf0f021}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000113000/0x3000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r3 = socket(0x1e, 0x2, 0x0) write(r3, &(0x7f00000002c0)="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", 0xfc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 7.260630583s ago: executing program 1 (id=42): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20) accept$alg(r0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0xb00, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x100, 0x0) syz_io_uring_setup(0x708c, &(0x7f0000000380)={0x0, 0x1064, 0x80, 0x4, 0x224}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffb, 0x0, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x48040) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x103182, 0x0) socket(0x1, 0x1, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, &(0x7f0000000200)={@rand_addr=0x64010100, @empty}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000f0200006706000020000000620a00fe0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56bb5df3083d20f8c2bf304000000815dcf0066d7ded3c5c49a08a503ea6d54f7f3125a8200578ac0836d6454745e70a27444003c5b20451b624db6f5320e9befc1e00b8b32917c4d30d16b7edb732bc3ac330b16c442aff70d27659bc58e296b16750c5577c848754b4894b07f15bab1c640a5c0c4fd62f9db829b301ef67fd2b2736f3af0c54af2412313b17c4c8081c4ed0572261960e227d34cfbfdb247bc2351c9d8363a8cb18b7330604da78b0aba47545f9a25a80dd7d28a5ae41824f611dd2de6dd581c52698f9542a444a8a3969946faded5275c00"/420], &(0x7f0000000100)='GPL\x00'}, 0x48) setpgid(r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) 7.256960642s ago: executing program 3 (id=43): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x105cc6, 0x1, 0x0, 0x207}, &(0x7f0000000040)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mount(&(0x7f00000002c0)=@sg0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000300)='gfs2\x00', 0x3000080, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2300, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xbbb71000) r3 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x6a, 0x4, 0x1, 0x27) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000000100)='./cgroup\x00', 0x63) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000649000/0x4000)=nil, 0x4000, 0x2000004) socket(0x200000000000011, 0x2, 0x0) socket(0x200000000000011, 0x2, 0xd) syz_emit_ethernet(0x32, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500"], 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000180)={'pcl818\x00', [0x4f27, 0x4, 0x3, 0x2, 0x5, 0xcc9, 0xf, 0x7, 0x5, 0x0, 0xefb, 0x1, 0x6, 0x1, 0x6, 0x101, 0x1000, 0x1a449, 0x3, 0x40000007, 0x9d, 0xcaa7, 0x4, 0x20001e58, 0x4, 0xe69, 0x3c, 0x8, 0x5, 0x0, 0xfffffff8]}) syz_io_uring_submit(r2, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) r7 = syz_open_dev$media(&(0x7f0000000040), 0x7ffffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r7, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r8, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 7.074643245s ago: executing program 0 (id=44): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x4}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000f37718777296322de87700000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f0000000140)=0x4000, 0x4) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000180)=0x20000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) 6.125160467s ago: executing program 0 (id=47): prlimit64(0x0, 0xa, &(0x7f0000000000)={0xc153, 0x8001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000040), 0x0, 0x1, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000007700), 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000400)={0x0, 'veth1_to_bridge\x00', {0x5}}) fchdir(r2) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}, {0x0}], 0x2}, 0x0) r3 = fsopen(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000080)=0xa) write$dsp(r6, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) 5.74761514s ago: executing program 2 (id=48): syz_emit_ethernet(0x46, &(0x7f0000000b00)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20000, 0x1000300}}}}}}, 0x0) 5.681349141s ago: executing program 1 (id=49): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) lsm_set_self_attr(0x68, &(0x7f0000000800)=ANY=[@ANYBLOB='h\x00\x00\x00\x00\x00\x00\x00K\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00'], 0x20, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) r5 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000001780)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001740)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001095df15698984504012df2582df0001"], 0x14}, 0x1, 0x0, 0x0, 0x4051}, 0x20000800) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r6 = memfd_secret(0x80000) r7 = memfd_secret(0x80000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80002200}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000125bd7000fddb3b2a4d9900000c0099000600005958e7fc6f8890c200080000000500c25aa9745000170013008489b00592308103e06c8b9200e01b9be09b860028001180040003000400070004000200040007000400030004000700040001000400030004000100"], 0x70}, 0x1, 0x0, 0x0, 0x40480c0}, 0x24000000) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) 5.599285848s ago: executing program 2 (id=50): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x36}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4008041}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) request_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={'syz', 0x0}, 0xffffffffffffffff, 0xfffffffffffffff8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000100100000d"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x3, 0x8, 0x3, r5}, 0x10) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x2bc, 0x12, 0x8, 0x70bd2c, 0x25dfdbfc, {0x22, 0x9, 0x5, 0x0, {0x4e20, 0x4e23, [0x5, 0x9, 0x39b, 0x5], [0x7, 0x10001, 0x40, 0x7], 0x0, [0x5, 0x9]}, 0x10, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x5b, 0x1, "49943a10c0106fe87ca4775ab8ff2360c185a507b65ae7eb571bc80052954f8c6951d484d17f4066f66fa12acc45b7c737f3ccc5f02f01cc6f9f39cd9c2a8fd6922047d2c6190146ab1cca18c4f9311b3297e413277d2db76eb185228c38c83eeed1afd23ee5e32f20a2ecc4"}, @INET_DIAG_REQ_BYTECODE={0x68, 0x1, "e3410c4492e37d9cd9cf958117c6b04c3ceb0acac5e4fbd5334c9058768fa7b557a43fc736e267ca73a354c6d06d372c93bfe6727eb8f493b31d784d556aa82f8c0a5020bf4419f014339d79f53ec3bf9a4d87948f1eefe11a5b648545d065937e960988"}, @INET_DIAG_REQ_BYTECODE={0xe9, 0x1, "54b3f57b49284e2a1d2701c5a995de188bd4d2f023642c35399daaae7bb7938acea587d2495b769da352f258840ef60dbc1d7ad268f6e765bdc34ad948b18a9a50c3e95eccb6cb053668ebf658738e5dfcaedfeae5b36f01b630e9ee97c09aa35f4c5dfb755955c74cb46cd9bc2f12416eb0c8d70776e36a2d45cf791267c3812900efd95e7fcda7fd02aaa0c6c95f9ea091bc15c1681626d11ec6b4564eb63f4614086e19caace29689063b93742f64d9a51a79d800e56517aedfe2226d5a8c6856e71d2fcfdcf2037e44abb255787f38706ba5822866e5e04952193f6c228d7af252d7e8"}, @INET_DIAG_REQ_BYTECODE={0x80, 0x1, "6b185dea01af44043911fa17a3d9d9ec6f2d5fcd2d20be425082d3ff2e4218ae1b927104170c1a3d705acaceaeaabd7445178049f1216e7c1b3bb131c8158992b7253c9be128c29648e691230090cb480b5754e76fdf2b629e4790bd3c9852be23ce192362bd4510b5508a8f20348b7fc43af509ea7648c482ddc1f2"}, @INET_DIAG_REQ_BYTECODE={0x2c, 0x1, "05df4eda935d52580de0909fb10c9a704deabe84f31d126c4187a47b9d2d4b1e8ac27b814c60b15e"}]}, 0x2bc}}, 0x880) 5.326407376s ago: executing program 4 (id=51): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)='\b', 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f00000003c0)="03", 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0x5}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) socket$nl_sock_diag(0x10, 0x3, 0x4) sendto$inet(r0, &(0x7f00000005c0)="e2e79bf5", 0x4, 0x4000, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x180, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x4, 0x80, 0x2000000, 0x3a2}, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r9, 0xff05, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000001000000"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r5, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40002, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) 5.326001572s ago: executing program 2 (id=52): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, r2) io_uring_setup(0x1148, &(0x7f0000000300)={0x0, 0xc95e, 0x80, 0x2, 0x30f}) r3 = syz_open_procfs(0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44050) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x1, @empty, 'ip6gre0\x00'}}, 0x1e) r6 = msgget$private(0x0, 0x140) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000080)=0xc) r8 = getegid() getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r10}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r10, &(0x7f0000004300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r10, &(0x7f0000002300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x403, {0x1, 0x7, 0x0, '\x00', {0x1000, 0xad4, 0x8, 0x8, 0x0, r11, 0x5000, '\x00', 0x1, 0x7, 0xfffffffc, 0x3, {0x6, 0x6}, {0x20000000000004}, {0x100000000, 0xc}, {0x8, 0xad}, 0x4, 0x8001, 0x4, 0x3}}}}) msgctl$IPC_SET(r6, 0x1, &(0x7f0000000240)={{0x3, r7, r8, r9, r11, 0x9, 0x1}, 0x0, 0x0, 0x3, 0x250000, 0x100000000, 0x6, 0x9, 0xda7, 0x400, 0x3, r4, r4}) sendmmsg(r5, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 4.411238044s ago: executing program 4 (id=53): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0xe0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1c000}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000300)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r7, 0x29, 0x8, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000500)={"ade19463b9783a8fa30920748ad73fe817c8b7ebd8ca7094122a6c869ab4d5a206640abb569803f22fa2e3f89a25806dded7aac2c4b4e3b9726123a4c4ed1d96fc739ce836edc34190ea97d01d611596e672a6f10359013dfe653714ae9533884b2e2753aa3d0b20feacf5c4eb7a9c73d0bf380f19c343bacee4bb96b459fc87b7e243171829f0c990093c277937055557740103ff73bf2031afc4819801a7f80792c64577e3cd4105f253b65e16a0413eecf6295770a8647003ee4609672555d02d7c8229ef545e0f36dcae5bfd8c60b38007221b5d4294c8d851d13f3f1c44e7417e97838d3c3a8991c8a47a5a31b00f556d15fd781f8acc1b6f1bd33841b073caeb0466758174a22746a5bdc6f7d69c6c7976bf57e88f203570b82154768602b6a2063a7147dfbaddd84f2f9734236c7f8253d0935060d45bd789d3c04d1244b3002ea817909349229d50f801f58445bbf19368afbee374713349bb78fcfcbd8f51da4f2a5e3df5aee2417481b1dfa9a81e15290e11d90efb6c7cb2a6f1e613b3af81316b11b5f8e639f5ad3fd6cedc5006725a94843812070589ddb8ce587f601bf995c2d85f67224c797fe37b4cd83fa02ea1d006ad213da63870e86053a966155f74346b43425dcbc8d241296c74c154ed6d39bf206a2978b1e0297904178ce786c4d7b04ea8d0fdbf049e98aa7df786d2bae52293da3e872b0422f67ee44f85353ea7e79f50de73743aac30c8b6f58a96479e5416102c3f010e2aa6e87c34c094d5ea976eec01f8ad8a197ed12371899d65e0672dbd8a1542ca2fbff1766773e43b21e87ce39d093cada728eb3cdab90a15c69a89d05d9f1b8cfba2a266d91eab0ca23f61ed94e5bd21fa6014c4747b29a5c0be716761357cf64a23b843b36474ae2c00407bf1f407a13214cfbdbe757335152483161c8bfee2cbd6d34179393c5f1ed51523a9d822ebf24eb4ca26511f539600d6c49f36fa0eb26bc77a00934a6bacf1045a170291b20d5c3013e1762f22b8ef3927fef37f21cfc9e04eb8d96d175d025029a650f1e9e67ed179198fe6f984f8e1fd6c5196c1ab97a03d433dfeb6872727862df4e642a463346bdb78dca5e60c58a23f257cdb600100f63377b3859bfd644deddb9bfe9a8a5a698456dbf1177e60463ed337eca75d6513a1080d2aa21af1bf862e8f9dfbe0ce46e47c705d5bacb49752b9dc75ee589bb628df2080963a3db116035ce283d13e0fe050de02f5315f975d4d0712988063ca667bb69aed9f794f3fb064132a6d9037c5073507fe8dd59c527ac8c7ee445983beed1d8bc6a86ea6b46c83ffd8501c8e320da1eb1e02498656f3939be8ee0b441b00a14ab2d4f585a7e0aa7cbf9115709815bd597c85ff00c693b537a4f36fe3c362a79a336de82060f3a1bff89da531542a34019b9615572f302ea9b73efe"}) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x8, 0x2, 0x2, '\x00', 0x2}) r9 = syz_io_uring_setup(0x4f00, &(0x7f0000000100)={0x0, 0x7dd6, 0x80, 0x0, 0x81, 0x0, r4}, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x45b6, &(0x7f0000000280)={0x0, 0x2cc8, 0x8000, 0x3, 0x3d7, 0x0, r9}, &(0x7f0000000340), &(0x7f0000000380)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r10, &(0x7f00000025c0)={0x2020}, 0x2020) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="002800000000810637a4c39f00000000000000047864", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c1002ca90781000"], 0x0) 4.25185171s ago: executing program 0 (id=54): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x401, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, 0x0, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3}, @CTA_NAT_DST={0x64, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}, @CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0xad0b}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010101}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x821}, 0x4048010) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) 3.961829863s ago: executing program 0 (id=55): ioperm(0x4, 0x3, 0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0x18, 0x2, 0x3b) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000002) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf9, 0x15, 0x1d, 0x8, 0xb48, 0x1009, 0x87f7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x32, 0x0, 0x0, 0x25, 0x3, 0xaa}}]}}]}}, 0x0) mremap(&(0x7f0000f1d000/0x2000)=nil, 0x2000, 0x3000, 0x7, &(0x7f0000248000/0x3000)=nil) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000300)=0x1, 0x4) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x20012, r2, 0x61864000) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) 3.818207789s ago: executing program 4 (id=56): r0 = socket$inet6_udp(0xa, 0x2, 0x0) pipe2(&(0x7f0000001040)={0xffffffffffffffff}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r3, 0xfffffffffffffc01, 0x0) (fail_nth: 3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000700)={{}, "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"}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r5, 0x0, 0x0) 3.315314893s ago: executing program 4 (id=57): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000280)={0x1, 0x0, 0x27f}) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_delete(0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x1, 'vlan1\x00', {}, 0x5832}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b000)=""/102400, 0x19000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x8, 0x10002a, 0x8, 0x0, 0x0}}, 0x10) fallocate(0xffffffffffffffff, 0x3, 0x5, 0x8) r4 = getpid() r5 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}}, [0xfff, 0xff, 0x2400000000, 0x5, 0x9a, 0x3, 0x5, 0x8000, 0x7, 0xdec, 0xfffffffffffffff8, 0x1, 0x3, 0x30, 0x6]}, 0x0) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x48002) write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000fe"], 0xc8) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000800)={{0x4, 0x0, 0x9, 0x8001, 'syz0\x00', 0xc22}, 0x2, 0x200, 0x9, r4, 0x0, 0x7fff, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r5, 0xc0405519, &(0x7f0000000bc0)={0x5, 0x4, 0x5, 0xe2, 'syz1\x00', 0x1}) 2.635755372s ago: executing program 3 (id=58): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24048084}, 0x20004450) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000070a050000000000000000000a0040010900010073797a31000000000900020073797a32000000000c0003"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x4004014) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000040)=""/16) 2.445394914s ago: executing program 1 (id=59): syz_open_dev$vbi(0x0, 0x2, 0x2) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000) modify_ldt$write2(0x11, &(0x7f0000000600)={0x8, 0x100000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000640)=@gettaction={0x19c, 0x32, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}]}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0x10, 0x2020, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x113, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xfff}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x74, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffd}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x19c}}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x100000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000010140)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) 2.445233464s ago: executing program 3 (id=60): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond_slave_0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x40efe, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a3000"], 0xfc}}, 0x0) 2.150621404s ago: executing program 2 (id=61): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x44, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_ID={0xc, 0x1, 0x4}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}]}, 0x44}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000d80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x1, 0x1}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x4008800) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xd}}, './file0\x00'}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e24, @remote}}, 0x8000, 0x4}, 0x90) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e110b"], 0xec) 1.948341347s ago: executing program 4 (id=62): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond_slave_0\x00', 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x19, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x2a}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40efe, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00') socket$packet(0x11, 0x2, 0x300) preadv(r3, &(0x7f0000004300)=[{&(0x7f0000000040)=""/144, 0x90}], 0x1, 0x1a, 0xc) 1.869625017s ago: executing program 2 (id=63): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) r0 = syz_open_procfs(0x0, &(0x7f0000019080)='net/rt6_stats\x00') pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) r2 = openat$comedi(0xffffff9c, &(0x7f0000000200)='/dev/comedi3\x00', 0x2000, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r3 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r3}, &(0x7f0000044000)=0x0) timer_settime(r4, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r5 = gettid() tkill(r5, 0x12) syz_emit_ethernet(0x11, &(0x7f0000000480)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@llc_tr={0x11, {@llc={0xf0, 0x7e, "fe"}}}}}, 0x0) rt_sigaction(0x14, &(0x7f00000000c0)={0x0, 0x90000000, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000280)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000080)=0x80000003) r7 = dup2(r6, r6) read$FUSE(r7, &(0x7f00000063c0)={0x2020}, 0x2020) syz_fuse_handle_req(r7, 0x0, 0x0, &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) sched_getscheduler(r8) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000190c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000562c6d0cc07a17249fc2b3090a7ca45ff471cc53a40af45b50d72201b5616cbe44a336955437f04d0ffdd9dda3bce2497cee641c705614ee31ce045b7128deabf21a1a0eb413d1b2b2e7fa72219808a08c6402b374b0534f077a8ef1aa341633ba5648ef2762746d76fddb478a64301d9ee438bd3fe9c7d2231063c9c08e388e1927e81e801d012c35657f923d69f968b7dfdde9"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x0, 0x80000000}) write$selinux_load(r0, &(0x7f0000000000)={0xf97cff8c, 0x8, 'SE Linux', "67e24ca41ec46a12dd49d62c4e71ebd578da47a3197f0243c2681ebda99199b95161b0429d"}, 0x35) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f00000016c0)='autofs\x00', 0x201000c, &(0x7f0000000040)) lsetxattr$security_selinux(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180), 0x0, 0x0, 0x1) 991.012272ms ago: executing program 3 (id=64): syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc000, 0x0, 0x81, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) timer_create(0x7, &(0x7f0000000000)={0x0, 0xf}, &(0x7f0000000040)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000240)={0x16, 0x98, 0xfa00, {0x0, 0x4, 0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e24, @loopback}}}, 0xa0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_setup(0x7e4, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES32=r1, @ANYRES32=r0], 0x18}}, 0x20008050) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x1000000000000002) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000280)=0xc0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCSETA(r4, 0x8925, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x24000100}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x48004}, 0x4001040) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="478130bb2d4860ca5b9110028b9d64895c50da437549944a231a822ecb5d93999633eac8ac10b16ae70c83672bc1c5ef162a67aa557a45ddc0f09e3c092d71d5cc72cece4b44a50ba4dabe37a5ff07000000000000893c430aa79e04ed8510d8660fd559aadad08529b801b37f2406e172c7def399d613b21688b1afad8629016941f41634bcc0fa33ae"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) socket$pppl2tp(0x18, 0x1, 0x1) 572.692149ms ago: executing program 1 (id=65): syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc000, 0x0, 0x81, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) timer_create(0x7, &(0x7f0000000000)={0x0, 0xf}, &(0x7f0000000040)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000240)={0x16, 0x98, 0xfa00, {0x0, 0x4, 0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e24, @loopback}}}, 0xa0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_setup(0x7e4, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x20008050) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x1000000000000002) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000280)=0xc0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCSETA(r4, 0x8925, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x24000100}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x48004}, 0x4001040) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="478130bb2d4860ca5b9110028b9d64895c50da437549944a231a822ecb5d93999633eac8ac10b16ae70c83672bc1c5ef162a67aa557a45ddc0f09e3c092d71d5cc72cece4b44a50ba4dabe37a5ff07000000000000893c430aa79e04ed8510d8660fd559aadad08529b801b37f2406e172c7def399d613b21688b1afad8629016941f41634bcc0fa33ae"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) socket$pppl2tp(0x18, 0x1, 0x1) 94.287197ms ago: executing program 2 (id=66): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r2, 0x0, 0x12, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x17, 0x0, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x45833af92e4bbbfe, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = syz_open_dev$radio(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r4, 0x402c5639, &(0x7f0000000200)={0x0, 0x1, 0x10007d50}) r5 = dup(r3) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x04\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}h\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00r3, {0x80000001}}, './file0\x00'}) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f00000000c0)={0x280040, 0x50, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r8, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r8, 0x1000) r9 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x802, 0x14a042) ioctl$HIDIOCGFEATURE(r9, 0xc0404807, &(0x7f0000000340)={0x0, "87bffd670230e6fc03b5d899c89937769ce2b8b4ba39fef879aa53114f0600000000000000764262d6bd870ae5117e38267d64e7c383dd68b77c4a97ee1cef24"}) fanotify_mark(r6, 0x1, 0x40001010, r7, &(0x7f0000000140)='./file0\x00') ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x2000008) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) 1.22756ms ago: executing program 3 (id=67): syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc000, 0x0, 0x81, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) timer_create(0x7, &(0x7f0000000000)={0x0, 0xf}, &(0x7f0000000040)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000240)={0x16, 0x98, 0xfa00, {0x0, 0x4, 0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e24, @loopback}}}, 0xa0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_setup(0x7e4, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x20008050) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x1000000000000002) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000280)=0xc0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCSETA(r4, 0x8925, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x24000100}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x48004}, 0x4001040) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="478130bb2d4860ca5b9110028b9d64895c50da437549944a231a822ecb5d93999633eac8ac10b16ae70c83672bc1c5ef162a67aa557a45ddc0f09e3c092d71d5cc72cece4b44a50ba4dabe37a5ff07000000000000893c430aa79e04ed8510d8660fd559aadad08529b801b37f2406e172c7def399d613b21688b1afad8629016941f41634bcc0fa33ae"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) socket$pppl2tp(0x18, 0x1, 0x1) 0s ago: executing program 4 (id=68): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_usb_connect(0x3, 0x8c, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0x7c, 0xcb, 0x74, 0x10, 0x2013, 0x1faa, 0x475d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xe6, 0x0, 0x0, 0x7f, 0x4e, 0x8c, 0x0, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "7c88624f"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x6553, 0x8, 0x8}, {0x6, 0x24, 0x1a, 0x1}, [@mbim_extended={0x8, 0x24, 0x1c, 0x2d, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x71, 0x6, 0x800}, @mbim_extended={0x8, 0x24, 0x1c, 0xf, 0xfa, 0x2}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0x6, 0x4}, @mbim={0xc, 0x24, 0x1b, 0x89, 0x4, 0xff, 0x2, 0x10, 0x6}, @obex={0x5, 0x24, 0x15, 0x63}]}, @cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x2, 0xfff9, 0xfff7}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000080)={0xf0, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f0000000500)={0x66666666666666d, 0x0, [{0x80000001, 0x3, 0x1, 0x7fffffff, 0x9, 0x3, 0x4}, {0x7, 0xb, 0x6, 0x7f, 0xd11, 0x4, 0xfffffffe}, {0xd, 0x9, 0x1, 0x4, 0x80, 0x81, 0x2}, {0x2, 0x40, 0x5, 0x5, 0x2, 0x4, 0x1}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x80500, 0x0) write$P9_RREADDIR(r5, &(0x7f0000000740)={0x141, 0x29, 0x1, {0x7, [{{0x40, 0x0, 0x4}, 0xfffffffffffff000, 0x7f, 0x7, './file0'}, {{0x2, 0x0, 0x8}, 0x3, 0xae, 0x7, './file0'}, {{0x0, 0x1}, 0x2213, 0xbf, 0x7, './file0'}, {{0x80, 0x3, 0x8}, 0x5, 0x0, 0x7, './file0'}, {{0x1, 0x3, 0x7}, 0x7, 0xe, 0x7, './file0'}, {{0x8, 0x2, 0x6}, 0x5, 0x0, 0x7, './file0'}, {{0x4, 0x1, 0x7}, 0xe, 0x0, 0x7, './file0'}, {{0x10, 0x2, 0x4}, 0x5b09, 0x5, 0x7, './file0'}, {{0x40, 0x0, 0x1}, 0x8, 0x3, 0x7, './file0'}, {{0x0, 0x2, 0x2}, 0x3, 0x70, 0x7, './file0'}]}}, 0x141) bpf$ITER_CREATE(0x21, &(0x7f0000000280)={r5}, 0x8) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x577b18056e32b64f}}, [@NFT_MSG_NEWFLOWTABLE={0x190, 0x16, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x140, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xb4ae}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'lo\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_NEWSETELEM={0x1c, 0xc, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_NEWCHAIN={0x58, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6548b9d2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x15b974a2}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}, @NFT_MSG_DELTABLE={0xe4, 0x2, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0x89, 0x6, "bbd271412d8ad4269f9f3def1a327987e874cbd66d1a546a5a110f086899b8f24ec2fcdb02eb9520946e60256f1b91a04eba68ab0226d28c2fd653b8bda5a602c2da2b43fbfafe13742211da0f6a4bdc474f4c65d9918ce5c9d29b03f21c9a222a39a0b64ac001582be1d95c61e29b52237bc507910f6fab68e14645ba4fbfcefd438b00c8"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x344}, 0x1, 0x0, 0x0, 0x8085}, 0x8000) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/bus/input/handlers\x00', 0x0, 0x0) pread64(r6, &(0x7f00000002c0)=""/124, 0x7c, 0x7) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.168' (ED25519) to the list of known hosts. [ 58.978653][ T30] audit: type=1400 audit(1758008085.065:62): avc: denied { mounton } for pid=5831 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 58.982059][ T5831] cgroup: Unknown subsys name 'net' [ 59.001417][ T30] audit: type=1400 audit(1758008085.065:63): avc: denied { mount } for pid=5831 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.031061][ T30] audit: type=1400 audit(1758008085.115:64): avc: denied { unmount } for pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.149153][ T5831] cgroup: Unknown subsys name 'cpuset' [ 59.156926][ T5831] cgroup: Unknown subsys name 'rlimit' [ 59.263562][ T30] audit: type=1400 audit(1758008085.345:65): avc: denied { setattr } for pid=5831 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.296515][ T30] audit: type=1400 audit(1758008085.345:66): avc: denied { create } for pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.319515][ T30] audit: type=1400 audit(1758008085.345:67): avc: denied { write } for pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.341204][ T30] audit: type=1400 audit(1758008085.345:68): avc: denied { read } for pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.362753][ T5833] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 59.363131][ T30] audit: type=1400 audit(1758008085.355:69): avc: denied { mounton } for pid=5831 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 59.396468][ T30] audit: type=1400 audit(1758008085.355:70): avc: denied { mount } for pid=5831 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 59.420723][ T30] audit: type=1400 audit(1758008085.405:71): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 60.352156][ T5831] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.585721][ T5857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.593761][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.601877][ T5857] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.609598][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.617750][ T5857] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.625760][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.633582][ T5861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.641695][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.648941][ T5861] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.653059][ T5860] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.657874][ T5861] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.663787][ T5860] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.670681][ T5862] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.677628][ T5860] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.685506][ T5862] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.698161][ T5861] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.706700][ T5862] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.714706][ T5861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.717243][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.729942][ T5857] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.730936][ T5861] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.744883][ T5861] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.753808][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.761424][ T5861] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.773431][ T5861] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.163386][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 63.224619][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 63.283142][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 63.344069][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.351416][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.359078][ T5841] bridge_slave_0: entered allmulticast mode [ 63.366464][ T5841] bridge_slave_0: entered promiscuous mode [ 63.402392][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.410463][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.418045][ T5841] bridge_slave_1: entered allmulticast mode [ 63.424696][ T5841] bridge_slave_1: entered promiscuous mode [ 63.438267][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 63.501345][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.514753][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.568522][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.576048][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.583160][ T5842] bridge_slave_0: entered allmulticast mode [ 63.590820][ T5842] bridge_slave_0: entered promiscuous mode [ 63.600819][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.608065][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.615180][ T5842] bridge_slave_1: entered allmulticast mode [ 63.622440][ T5842] bridge_slave_1: entered promiscuous mode [ 63.629015][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.636167][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.643733][ T5843] bridge_slave_0: entered allmulticast mode [ 63.650523][ T5843] bridge_slave_0: entered promiscuous mode [ 63.668036][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 63.685416][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.692972][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.700291][ T5843] bridge_slave_1: entered allmulticast mode [ 63.707054][ T5843] bridge_slave_1: entered promiscuous mode [ 63.714682][ T5841] team0: Port device team_slave_0 added [ 63.722994][ T5841] team0: Port device team_slave_1 added [ 63.776989][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.789254][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.809431][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.827783][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.834733][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.861163][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.892990][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.904111][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.911339][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.937338][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.974779][ T5842] team0: Port device team_slave_0 added [ 64.000542][ T5843] team0: Port device team_slave_0 added [ 64.006984][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.014171][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.022031][ T5845] bridge_slave_0: entered allmulticast mode [ 64.028865][ T5845] bridge_slave_0: entered promiscuous mode [ 64.042110][ T5842] team0: Port device team_slave_1 added [ 64.057501][ T5843] team0: Port device team_slave_1 added [ 64.063430][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.070717][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.077936][ T5845] bridge_slave_1: entered allmulticast mode [ 64.084660][ T5845] bridge_slave_1: entered promiscuous mode [ 64.136936][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.144077][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.151461][ T5854] bridge_slave_0: entered allmulticast mode [ 64.158381][ T5854] bridge_slave_0: entered promiscuous mode [ 64.173243][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.180482][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.207188][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.237719][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.244845][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.252138][ T5854] bridge_slave_1: entered allmulticast mode [ 64.259673][ T5854] bridge_slave_1: entered promiscuous mode [ 64.279397][ T5841] hsr_slave_0: entered promiscuous mode [ 64.285696][ T5841] hsr_slave_1: entered promiscuous mode [ 64.292268][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.299244][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.325185][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.336793][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.343745][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.369780][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.382360][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.402576][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.416558][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.423498][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.449706][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.467309][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.487540][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.517933][ T5854] team0: Port device team_slave_0 added [ 64.525787][ T5854] team0: Port device team_slave_1 added [ 64.560139][ T5845] team0: Port device team_slave_0 added [ 64.568173][ T5845] team0: Port device team_slave_1 added [ 64.612054][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.619271][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.645355][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.674021][ T5842] hsr_slave_0: entered promiscuous mode [ 64.681340][ T5842] hsr_slave_1: entered promiscuous mode [ 64.687430][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 64.693215][ T5842] Cannot create hsr debugfs directory [ 64.720302][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.727394][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.753943][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.756278][ T5847] Bluetooth: hci0: command tx timeout [ 64.770168][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.770193][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.770213][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.771517][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.820806][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.835710][ T5847] Bluetooth: hci4: command tx timeout [ 64.847766][ T5861] Bluetooth: hci3: command tx timeout [ 64.852399][ T5847] Bluetooth: hci2: command tx timeout [ 64.858288][ T5858] Bluetooth: hci1: command tx timeout [ 64.869105][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.891844][ T5843] hsr_slave_0: entered promiscuous mode [ 64.897930][ T5843] hsr_slave_1: entered promiscuous mode [ 64.903762][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 64.909506][ T5843] Cannot create hsr debugfs directory [ 64.983275][ T5854] hsr_slave_0: entered promiscuous mode [ 64.990036][ T5854] hsr_slave_1: entered promiscuous mode [ 64.996490][ T5854] debugfs: 'hsr0' already exists in 'hsr' [ 65.002225][ T5854] Cannot create hsr debugfs directory [ 65.040135][ T5845] hsr_slave_0: entered promiscuous mode [ 65.046632][ T5845] hsr_slave_1: entered promiscuous mode [ 65.052530][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 65.058333][ T5845] Cannot create hsr debugfs directory [ 65.335105][ T5841] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.347300][ T5841] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.359761][ T5841] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.378103][ T5841] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.439569][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.452184][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.461940][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.472356][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.540757][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.555080][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.577646][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.597648][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.649436][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.664224][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.688016][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.709812][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.720721][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.771484][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.796660][ T5854] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.808822][ T1332] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.816046][ T1332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.825470][ T1332] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.832583][ T1332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.851963][ T5854] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.861498][ T5854] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.871640][ T5854] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.921673][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.951598][ T5841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.989136][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.017187][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 66.017201][ T30] audit: type=1400 audit(1758008092.105:86): avc: denied { sys_module } for pid=5841 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 66.020024][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.072527][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.079696][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.090726][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.097865][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.151111][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.183203][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.190374][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.233321][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.240472][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.264161][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.317542][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.389789][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.400420][ T5843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.423459][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.453601][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.460762][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.473297][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.480859][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.523849][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.579867][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.587021][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.634145][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.641269][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.718920][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.825038][ T5841] veth0_vlan: entered promiscuous mode [ 66.836714][ T5858] Bluetooth: hci0: command tx timeout [ 66.864845][ T5841] veth1_vlan: entered promiscuous mode [ 66.917068][ T5858] Bluetooth: hci1: command tx timeout [ 66.921654][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.922488][ T5858] Bluetooth: hci2: command tx timeout [ 66.934689][ T51] Bluetooth: hci4: command tx timeout [ 66.942981][ T5861] Bluetooth: hci3: command tx timeout [ 66.980348][ T5842] veth0_vlan: entered promiscuous mode [ 66.994734][ T5841] veth0_macvtap: entered promiscuous mode [ 67.020349][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.035358][ T5841] veth1_macvtap: entered promiscuous mode [ 67.047470][ T5842] veth1_vlan: entered promiscuous mode [ 67.084907][ T5843] veth0_vlan: entered promiscuous mode [ 67.107244][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.118626][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.135392][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.153679][ T5843] veth1_vlan: entered promiscuous mode [ 67.163407][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.177034][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.187093][ T74] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.211399][ T74] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.229989][ T5845] veth0_vlan: entered promiscuous mode [ 67.246638][ T5842] veth0_macvtap: entered promiscuous mode [ 67.257124][ T5842] veth1_macvtap: entered promiscuous mode [ 67.274261][ T5843] veth0_macvtap: entered promiscuous mode [ 67.283236][ T5845] veth1_vlan: entered promiscuous mode [ 67.309650][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.321914][ T5843] veth1_macvtap: entered promiscuous mode [ 67.350651][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.382382][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.394173][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.410591][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.437347][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.450959][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.452784][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.463461][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.477361][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.487302][ T5854] veth0_vlan: entered promiscuous mode [ 67.508599][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.517012][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.520078][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.545262][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.554972][ T30] audit: type=1400 audit(1758008093.625:87): avc: denied { mounton } for pid=5841 comm="syz-executor" path="/root/syzkaller.IkD4hx/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 67.562051][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.593546][ T30] audit: type=1400 audit(1758008093.625:88): avc: denied { mount } for pid=5841 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 67.610304][ T5845] veth0_macvtap: entered promiscuous mode [ 67.621327][ T30] audit: type=1400 audit(1758008093.625:89): avc: denied { mounton } for pid=5841 comm="syz-executor" path="/root/syzkaller.IkD4hx/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 67.648508][ T30] audit: type=1400 audit(1758008093.625:90): avc: denied { mount } for pid=5841 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 67.671552][ T5854] veth1_vlan: entered promiscuous mode [ 67.677147][ T30] audit: type=1400 audit(1758008093.645:91): avc: denied { mounton } for pid=5841 comm="syz-executor" path="/root/syzkaller.IkD4hx/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 67.717228][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.719554][ T30] audit: type=1400 audit(1758008093.645:92): avc: denied { mounton } for pid=5841 comm="syz-executor" path="/root/syzkaller.IkD4hx/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 67.738795][ T5845] veth1_macvtap: entered promiscuous mode [ 67.759425][ T30] audit: type=1400 audit(1758008093.645:93): avc: denied { unmount } for pid=5841 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 67.771427][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 67.794534][ T30] audit: type=1400 audit(1758008093.675:94): avc: denied { mounton } for pid=5841 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 67.831083][ T30] audit: type=1400 audit(1758008093.675:95): avc: denied { mount } for pid=5841 comm="syz-executor" name="/" dev="gadgetfs" ino=6786 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 67.852723][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.923027][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.947439][ T5944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.955872][ T5944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.994933][ T5854] veth0_macvtap: entered promiscuous mode [ 68.002351][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.014913][ T5959] ALSA: mixer_oss: invalid OSS volume './file0' [ 68.028805][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.038072][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.045637][ T1032] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.055583][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.056348][ T1032] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.088662][ T5854] veth1_macvtap: entered promiscuous mode [ 68.098478][ T1032] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.108574][ T1032] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.183702][ T1332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.191358][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.197266][ T1332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.209863][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.248291][ T5962] netlink: 'syz.4.6': attribute type 4 has an invalid length. [ 68.288891][ T1332] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.303197][ T1332] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.322472][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.386366][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.408286][ T5944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.432491][ T5944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.569739][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.576092][ T5972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8'. [ 68.577942][ T5915] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 68.606840][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.657313][ T5944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.699366][ T5944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.786432][ T5915] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 68.796972][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 68.806242][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 68.843262][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.855923][ T5915] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 68.869237][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.880469][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.909354][ T5915] usb 1-1: config 0 descriptor?? [ 68.928088][ T5858] Bluetooth: hci0: command tx timeout [ 68.934068][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 68.952271][ T5915] pwc: Askey VC010 type 2 USB webcam detected. [ 68.995690][ T5858] Bluetooth: hci4: command tx timeout [ 69.001113][ T5861] Bluetooth: hci1: command tx timeout [ 69.009348][ T5861] Bluetooth: hci2: command tx timeout [ 69.014725][ T5861] Bluetooth: hci3: command tx timeout [ 69.035095][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 69.368815][ T5984] Zero length message leads to an empty skb [ 69.421605][ T5915] pwc: recv_control_msg error -32 req 02 val 2b00 [ 69.430942][ T5915] pwc: recv_control_msg error -32 req 02 val 2700 [ 69.439601][ T5915] pwc: recv_control_msg error -32 req 02 val 2c00 [ 69.450981][ T5915] pwc: recv_control_msg error -32 req 04 val 1000 [ 69.477915][ T5915] pwc: recv_control_msg error -32 req 04 val 1300 [ 69.491500][ T5915] pwc: recv_control_msg error -32 req 04 val 1400 [ 69.516832][ T5915] pwc: recv_control_msg error -32 req 02 val 2000 [ 69.535853][ T5915] pwc: recv_control_msg error -32 req 02 val 2100 [ 69.542906][ T5915] pwc: recv_control_msg error -32 req 04 val 1500 [ 69.565180][ T5915] pwc: recv_control_msg error -32 req 02 val 2500 [ 69.573681][ T5915] pwc: recv_control_msg error -32 req 02 val 2400 [ 69.599125][ T5915] pwc: recv_control_msg error -32 req 02 val 2600 [ 69.623771][ T5915] pwc: recv_control_msg error -32 req 02 val 2900 [ 69.763131][ T5915] pwc: recv_control_msg error -71 req 02 val 2800 [ 69.809401][ T5915] pwc: recv_control_msg error -71 req 04 val 1100 [ 69.980938][ T5915] pwc: recv_control_msg error -71 req 04 val 1200 [ 69.994020][ T5915] pwc: Registered as video103. [ 70.071898][ T5915] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 70.182694][ T5915] usb 1-1: USB disconnect, device number 2 [ 70.890622][ T6009] netlink: 'syz.0.12': attribute type 10 has an invalid length. [ 71.026968][ T51] Bluetooth: hci0: command tx timeout [ 71.033181][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.043047][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.075801][ T51] Bluetooth: hci3: command tx timeout [ 71.076254][ T5861] Bluetooth: hci4: command tx timeout [ 71.081215][ T51] Bluetooth: hci2: command tx timeout [ 71.088395][ T5858] Bluetooth: hci1: command tx timeout [ 71.185891][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 71.185908][ T30] audit: type=1400 audit(1758008097.255:157): avc: denied { ioctl } for pid=6007 comm="syz.1.14" path="/dev/vbi4" dev="devtmpfs" ino=980 ioctlcmd=0x565a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 71.389852][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 71.533193][ T6009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.551967][ T6018] ksmbd: Unknown IPC event: 3, ignore. [ 71.651025][ T6009] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 71.694914][ T6019] usb usb8: usbfs: process 6019 (syz.4.13) did not claim interface 0 before use [ 71.901874][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 72.064794][ T30] audit: type=1400 audit(1758008097.625:158): avc: denied { write } for pid=6006 comm="syz.4.13" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 72.087865][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.096766][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.105023][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.113549][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 72.193221][ T30] audit: type=1400 audit(1758008097.985:159): avc: denied { create } for pid=6020 comm="syz.2.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.301362][ T6022] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 72.433595][ T6022] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 72.596073][ T30] audit: type=1400 audit(1758008097.985:160): avc: denied { write } for pid=6020 comm="syz.2.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.703972][ T30] audit: type=1400 audit(1758008097.985:161): avc: denied { create } for pid=6020 comm="syz.2.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.825646][ T30] audit: type=1400 audit(1758008097.985:162): avc: denied { ioctl } for pid=6020 comm="syz.2.15" path="socket:[8558]" dev="sockfs" ino=8558 ioctlcmd=0x42c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.934640][ T30] audit: type=1400 audit(1758008097.985:163): avc: denied { read } for pid=6020 comm="syz.2.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.957921][ T30] audit: type=1400 audit(1758008098.265:164): avc: denied { write } for pid=6023 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 73.331081][ T30] audit: type=1400 audit(1758008098.925:165): avc: denied { unmount } for pid=5854 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 73.440310][ T30] audit: type=1400 audit(1758008098.975:166): avc: denied { create } for pid=6030 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 74.070176][ T5908] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 74.299380][ T5908] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 74.316921][ T5908] usb 3-1: config 0 has no interface number 0 [ 74.398562][ T5908] usb 3-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=87.f7 [ 74.453697][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.488267][ T5908] usb 3-1: Product: syz [ 74.492526][ T5908] usb 3-1: Manufacturer: syz [ 74.507489][ T5908] usb 3-1: SerialNumber: syz [ 74.524446][ T5908] usb 3-1: config 0 descriptor?? [ 74.559445][ T5908] ttusb_dec_send_command: command bulk message failed: error -22 [ 74.685124][ T5908] ttusb-dec 3-1:0.50: probe with driver ttusb-dec failed with error -22 [ 74.695792][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 74.782952][ T6043] mmap: syz.2.18 (6043) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 74.891434][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.901697][ T48] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 74.926369][ T10] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 74.972356][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.072100][ T10] usb 5-1: config 0 descriptor?? [ 75.143710][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 75.182080][ T48] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 75.261006][ T48] usb 2-1: config 0 has no interface number 0 [ 75.292728][ T48] usb 2-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=87.f7 [ 75.529558][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.553765][ T48] usb 2-1: Product: syz [ 75.558637][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 75.566718][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 75.584545][ T48] usb 2-1: Manufacturer: syz [ 75.595163][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 75.614007][ T48] usb 2-1: SerialNumber: syz [ 75.682374][ T6062] netlink: 16 bytes leftover after parsing attributes in process `syz.0.26'. [ 75.788184][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 75.799252][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 75.808019][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 75.848348][ T48] usb 2-1: config 0 descriptor?? [ 75.848608][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 75.868515][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 75.876330][ T10] pwc: recv_control_msg error -32 req 04 val 1500 [ 75.885353][ T10] pwc: recv_control_msg error -32 req 02 val 2500 [ 75.899153][ T10] pwc: recv_control_msg error -32 req 02 val 2400 [ 75.911285][ T10] pwc: recv_control_msg error -32 req 02 val 2600 [ 75.928484][ T10] pwc: recv_control_msg error -32 req 02 val 2900 [ 75.937305][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 75.944275][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 75.991395][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 76.019309][ T10] pwc: Registered as video103. [ 76.032959][ T48] ttusb_dec_send_command: command bulk message failed: error -22 [ 76.087036][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 76.205083][ T10] usb 5-1: USB disconnect, device number 2 [ 76.235598][ T48] ttusb-dec 2-1:0.50: probe with driver ttusb-dec failed with error -22 [ 76.849465][ T5858] Bluetooth: hci1: Malformed LE Event: 0x0b [ 77.442241][ T1540] usb 3-1: USB disconnect, device number 2 [ 77.472548][ T5922] usb 2-1: USB disconnect, device number 2 [ 77.526100][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 77.526111][ T30] audit: type=1400 audit(1758008103.605:185): avc: denied { create } for pid=6078 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 77.586519][ T6083] /dev/sg0: Can't lookup blockdev [ 77.613887][ T30] audit: type=1400 audit(1758008103.645:186): avc: denied { read write } for pid=6080 comm="syz.3.30" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 77.641297][ T30] audit: type=1400 audit(1758008103.645:187): avc: denied { open } for pid=6080 comm="syz.3.30" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 77.664736][ T30] audit: type=1400 audit(1758008103.665:188): avc: denied { mounton } for pid=6080 comm="syz.3.30" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 78.005681][ T30] audit: type=1400 audit(1758008104.045:189): avc: denied { read } for pid=6081 comm="syz.1.32" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 78.042288][ T6092] sctp: [Deprecated]: syz.1.32 (pid 6092) Use of struct sctp_assoc_value in delayed_ack socket option. [ 78.042288][ T6092] Use struct sctp_sack_info instead [ 78.224301][ T30] audit: type=1400 audit(1758008104.045:190): avc: denied { open } for pid=6081 comm="syz.1.32" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 78.396149][ T6088] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 78.402435][ T6088] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 78.578903][ T6088] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 78.647773][ T30] audit: type=1400 audit(1758008104.735:191): avc: denied { append } for pid=6094 comm="syz.2.33" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.791647][ T30] audit: type=1400 audit(1758008104.735:192): avc: denied { bind } for pid=6094 comm="syz.2.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.792375][ T6088] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 78.814444][ T6088] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 78.833061][ T6088] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 78.873151][ T6088] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 78.931996][ T6108] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 78.945724][ T6088] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 79.021829][ T30] audit: type=1400 audit(1758008104.735:193): avc: denied { name_bind } for pid=6094 comm="syz.2.33" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 79.091158][ T6088] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 79.100189][ T30] audit: type=1400 audit(1758008104.735:194): avc: denied { node_bind } for pid=6094 comm="syz.2.33" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 79.143968][ T6088] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 79.150242][ T6088] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 79.505681][ T6088] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 79.549110][ T6088] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 79.555317][ T6088] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 79.566448][ T6088] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 80.464360][ T5861] Bluetooth: hci0: command 0x0c1a tx timeout [ 80.844283][ T5861] Bluetooth: hci1: command 0x0c1a tx timeout [ 82.737520][ T5861] Bluetooth: hci2: command 0x0c1a tx timeout [ 82.739954][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 82.739965][ T30] audit: type=1400 audit(1758008107.025:203): avc: denied { getopt } for pid=6121 comm="syz.2.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 82.743547][ T5861] Bluetooth: hci3: command 0x0c1a tx timeout [ 82.749686][ T5858] Bluetooth: hci4: command 0x0405 tx timeout [ 82.770541][ T5861] Bluetooth: hci0: command 0x0c1a tx timeout [ 82.802473][ T1206] cfg80211: failed to load regulatory.db [ 82.814165][ T30] audit: type=1400 audit(1758008107.025:204): avc: denied { read write } for pid=6121 comm="syz.2.39" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 82.865345][ T30] audit: type=1400 audit(1758008107.025:205): avc: denied { open } for pid=6121 comm="syz.2.39" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 83.270576][ T6133] FAULT_INJECTION: forcing a failure. [ 83.270576][ T6133] name failslab, interval 1, probability 0, space 0, times 1 [ 83.284041][ T6133] CPU: 0 UID: 0 PID: 6133 Comm: syz.4.41 Not tainted syzkaller #0 PREEMPT(full) [ 83.284065][ T6133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 83.284075][ T6133] Call Trace: [ 83.284081][ T6133] [ 83.284087][ T6133] dump_stack_lvl+0x16c/0x1f0 [ 83.284114][ T6133] should_fail_ex+0x512/0x640 [ 83.284137][ T6133] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 83.284167][ T6133] should_failslab+0xc2/0x120 [ 83.284188][ T6133] __kmalloc_cache_noprof+0x6a/0x3e0 [ 83.284213][ T6133] ? io_wq_create+0x6a/0x9a0 [ 83.284233][ T6133] io_wq_create+0x6a/0x9a0 [ 83.284252][ T6133] io_uring_alloc_task_context+0x1e1/0x650 [ 83.284280][ T6133] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 83.284314][ T6133] __io_uring_add_tctx_node+0x2dd/0x500 [ 83.284339][ T6133] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 83.284368][ T6133] ? __fget_files+0x20e/0x3c0 [ 83.284390][ T6133] __io_uring_add_tctx_node_from_submit+0x89/0x130 [ 83.284417][ T6133] __do_sys_io_uring_enter+0x123a/0x1630 [ 83.284442][ T6133] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 83.284462][ T6133] ? __pfx_bpf_trace_run2+0x10/0x10 [ 83.284482][ T6133] ? __might_fault+0xe3/0x190 [ 83.284498][ T6133] ? __might_fault+0x13b/0x190 [ 83.284515][ T6133] ? find_held_lock+0x2b/0x80 [ 83.284538][ T6133] ? syscall_trace_enter+0x1cb/0x240 [ 83.284560][ T6133] ? rcu_is_watching+0x12/0xc0 [ 83.284585][ T6133] do_syscall_64+0xcd/0x4e0 [ 83.284609][ T6133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.284626][ T6133] RIP: 0033:0x7fef7fd8eba9 [ 83.284641][ T6133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.284656][ T6133] RSP: 002b:00007fef80c8d038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 83.284673][ T6133] RAX: ffffffffffffffda RBX: 00007fef7ffd6180 RCX: 00007fef7fd8eba9 [ 83.284684][ T6133] RDX: 0000000000000000 RSI: 00000000000047f5 RDI: 0000000000000003 [ 83.284695][ T6133] RBP: 00007fef80c8d090 R08: 0000000000000000 R09: 0000000000000000 [ 83.284705][ T6133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.284715][ T6133] R13: 00007fef7ffd6218 R14: 00007fef7ffd6180 R15: 00007ffc73bf1f58 [ 83.284739][ T6133] [ 83.586731][ T30] audit: type=1400 audit(1758008109.665:206): avc: denied { unmount } for pid=5854 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 84.026615][ T6139] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.079670][ T30] audit: type=1400 audit(1758008110.075:207): avc: denied { create } for pid=6134 comm="syz.0.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 84.236129][ T6144] /dev/sg0: Can't lookup blockdev [ 84.241746][ T30] audit: type=1400 audit(1758008110.085:208): avc: denied { setopt } for pid=6134 comm="syz.0.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 84.264896][ T30] audit: type=1400 audit(1758008110.125:209): avc: denied { ioctl } for pid=6134 comm="syz.0.44" path="socket:[9420]" dev="sockfs" ino=9420 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.684667][ T30] audit: type=1400 audit(1758008110.735:210): avc: denied { mount } for pid=6137 comm="syz.1.42" name="/" dev="autofs" ino=8796 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 84.754226][ T30] audit: type=1400 audit(1758008110.765:211): avc: denied { write } for pid=6143 comm="syz.4.46" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 84.836529][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 84.838055][ T5861] Bluetooth: hci0: command 0x0c1a tx timeout [ 84.842613][ T5858] Bluetooth: hci3: command 0x0c1a tx timeout [ 84.848798][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 84.854592][ T5858] Bluetooth: hci1: command 0x0c1a tx timeout [ 84.947363][ T6158] netlink: 'syz.0.47': attribute type 10 has an invalid length. [ 85.076991][ T30] audit: type=1400 audit(1758008111.165:212): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 85.378003][ T6172] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 86.239913][ T6184] usb usb8: usbfs: process 6184 (syz.1.49) did not claim interface 0 before use [ 86.929449][ T5861] Bluetooth: hci1: command 0x0c1a tx timeout [ 86.929475][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 86.935726][ T5861] Bluetooth: hci2: command 0x0c1a tx timeout [ 86.942266][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 87.012522][ T6194] FAULT_INJECTION: forcing a failure. [ 87.012522][ T6194] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 87.025649][ T6194] CPU: 0 UID: 0 PID: 6194 Comm: syz.4.56 Not tainted syzkaller #0 PREEMPT(full) [ 87.025665][ T6194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 87.025672][ T6194] Call Trace: [ 87.025676][ T6194] [ 87.025680][ T6194] dump_stack_lvl+0x16c/0x1f0 [ 87.025699][ T6194] should_fail_ex+0x512/0x640 [ 87.025715][ T6194] _copy_from_user+0x2e/0xd0 [ 87.025732][ T6194] restore_altstack+0x93/0x170 [ 87.025749][ T6194] ? __pfx_restore_altstack+0x10/0x10 [ 87.025767][ T6194] ? _raw_spin_unlock_irq+0x23/0x50 [ 87.025779][ T6194] ? lockdep_hardirqs_on+0x7c/0x110 [ 87.025793][ T6194] ? _raw_spin_unlock_irq+0x2e/0x50 [ 87.025804][ T6194] ? set_current_blocked+0xdd/0x120 [ 87.025817][ T6194] __do_sys_rt_sigreturn+0x13c/0x230 [ 87.025833][ T6194] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 87.025846][ T6194] ? syscall_trace_enter+0x1cb/0x240 [ 87.025860][ T6194] ? rcu_is_watching+0x12/0xc0 [ 87.025876][ T6194] do_syscall_64+0xcd/0x4e0 [ 87.025892][ T6194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.025903][ T6194] RIP: 0033:0x7fef7fd2ada9 [ 87.025912][ T6194] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 87.025922][ T6194] RSP: 002b:00007fef80cdb340 EFLAGS: 00000206 ORIG_RAX: 000000000000000f [ 87.025933][ T6194] RAX: ffffffffffffffda RBX: 00007fef7ffd5fa0 RCX: 00007fef7fd2ada9 [ 87.025940][ T6194] RDX: 00007fef80cdb340 RSI: 00007fef80cdb470 RDI: 0000000000000021 [ 87.025946][ T6194] RBP: 00007fef80cdc090 R08: 0000000000000000 R09: 0000000000000000 [ 87.025952][ T6194] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 87.025958][ T6194] R13: 00007fef7ffd6038 R14: 00007fef7ffd5fa0 R15: 00007ffc73bf1f58 [ 87.025971][ T6194] [ 87.622291][ T5908] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 88.141089][ T5908] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 88.164038][ T5908] usb 1-1: config 0 has no interface number 0 [ 88.274070][ T5908] usb 1-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=87.f7 [ 88.527204][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.595855][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 88.595870][ T30] audit: type=1400 audit(1758008114.655:221): avc: denied { map } for pid=6203 comm="syz.1.59" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 88.628139][ T6207] netlink: 60 bytes leftover after parsing attributes in process `syz.3.60'. [ 88.665251][ T5908] usb 1-1: Product: syz [ 88.673938][ T5908] usb 1-1: Manufacturer: syz [ 88.715695][ T5908] usb 1-1: SerialNumber: syz [ 88.724505][ T5861] Bluetooth: hci0: Malformed LE Event: 0x0b [ 88.728779][ T30] audit: type=1400 audit(1758008114.715:222): avc: denied { ioctl } for pid=6205 comm="syz.3.60" path="socket:[9501]" dev="sockfs" ino=9501 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 88.756111][ T5908] usb 1-1: config 0 descriptor?? [ 88.823983][ T5908] ttusb_dec_send_command: command bulk message failed: error -22 [ 88.865852][ T5908] ttusb-dec 1-1:0.50: probe with driver ttusb-dec failed with error -22 [ 89.829486][ T6215] autofs: Unknown parameter 'contention_end' [ 89.863045][ T30] audit: type=1400 audit(1758008115.945:223): avc: denied { read write } for pid=6216 comm="syz.3.64" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 90.148533][ T6218] mkiss: ax0: crc mode is auto. [ 90.194736][ T74] Bluetooth: (null): Invalid header checksum [ 90.217933][ T74] Bluetooth: (null): Invalid header checksum [ 90.329526][ T74] Bluetooth: (null): Invalid header checksum [ 90.409214][ T30] audit: type=1400 audit(1758008115.945:224): avc: denied { open } for pid=6216 comm="syz.3.64" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 90.521505][ T30] audit: type=1400 audit(1758008116.305:225): avc: denied { search } for pid=5513 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.708294][ T30] audit: type=1400 audit(1758008116.305:226): avc: denied { search } for pid=5513 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.733726][ T30] audit: type=1400 audit(1758008116.305:227): avc: denied { search } for pid=5513 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.767784][ T30] audit: type=1400 audit(1758008116.305:228): avc: denied { read } for pid=5513 comm="dhcpcd" name="n100" dev="tmpfs" ino=2215 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 90.851609][ T30] audit: type=1400 audit(1758008116.315:230): avc: denied { name_bind } for pid=6211 comm="syz.4.62" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 90.916647][ T30] audit: type=1400 audit(1758008116.315:231): avc: denied { bind } for pid=6211 comm="syz.4.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.073064][ T6231] mkiss: ax0: crc mode is auto. [ 91.222207][ T74] Bluetooth: (null): Invalid header checksum [ 91.232084][ T6222] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005f: 0000 [#1] SMP KASAN NOPTI [ 91.244241][ T6222] KASAN: null-ptr-deref in range [0x00000000000002f8-0x00000000000002ff] [ 91.252625][ T6222] CPU: 1 UID: 0 PID: 6222 Comm: syz.1.65 Not tainted syzkaller #0 PREEMPT(full) [ 91.261713][ T6222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 91.271753][ T6222] RIP: 0010:h5_recv+0x104/0x950 [ 91.276589][ T6222] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 a1 35 40 f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 91.296176][ T6222] RSP: 0018:ffffc900057f7c00 EFLAGS: 00010287 [ 91.302222][ T6222] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffc90004dc2000 [ 91.310178][ T6222] RDX: 0000000000080000 RSI: ffffffff887b679f RDI: 0000000000000005 [ 91.318125][ T6222] RBP: ffffc900057f7d88 R08: 0000000000000005 R09: 0000000000000000 [ 91.326073][ T6222] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 91.334021][ T6222] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8cb48720 [ 91.341979][ T6222] FS: 00007fafc00ae6c0(0000) GS:ffff8881247b2000(0000) knlGS:0000000000000000 [ 91.350899][ T6222] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 91.357462][ T6222] CR2: 0000555585d67588 CR3: 0000000034804000 CR4: 00000000003526f0 [ 91.365416][ T6222] Call Trace: [ 91.368765][ T6222] [ 91.371692][ T6222] ? __pfx_h5_recv+0x10/0x10 [ 91.376261][ T6222] hci_uart_tty_receive+0x254/0x7e0 [ 91.381890][ T6222] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 91.387601][ T6222] tty_ioctl+0x580/0x1680 [ 91.391948][ T6222] ? __pfx_tty_ioctl+0x10/0x10 [ 91.396746][ T6222] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 91.403671][ T6222] ? hook_file_ioctl_common+0x145/0x410 [ 91.409202][ T6222] ? selinux_file_ioctl+0x180/0x270 [ 91.414984][ T6222] ? selinux_file_ioctl+0xb4/0x270 [ 91.420071][ T6222] ? __pfx_tty_ioctl+0x10/0x10 [ 91.424812][ T6222] __x64_sys_ioctl+0x18b/0x210 [ 91.429553][ T6222] do_syscall_64+0xcd/0x4e0 [ 91.434032][ T6222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.439901][ T6222] RIP: 0033:0x7fafbf18eba9 [ 91.444300][ T6222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.463894][ T6222] RSP: 002b:00007fafc00ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 91.472283][ T6222] RAX: ffffffffffffffda RBX: 00007fafbf3d5fa0 RCX: 00007fafbf18eba9 [ 91.480325][ T6222] RDX: 0000200000000280 RSI: 0000000000005412 RDI: 000000000000000a [ 91.488278][ T6222] RBP: 00007fafbf211e19 R08: 0000000000000000 R09: 0000000000000000 [ 91.496230][ T6222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.504182][ T6222] R13: 00007fafbf3d6038 R14: 00007fafbf3d5fa0 R15: 00007ffca818cc98 [ 91.512127][ T6222] [ 91.515121][ T6222] Modules linked in: [ 91.519721][ T6222] ---[ end trace 0000000000000000 ]--- [ 91.525160][ T6222] RIP: 0010:h5_recv+0x104/0x950 [ 91.530020][ T6222] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 a1 35 40 f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 91.549644][ T6222] RSP: 0018:ffffc900057f7c00 EFLAGS: 00010287 [ 91.555768][ T6222] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffc90004dc2000 [ 91.563944][ T6222] RDX: 0000000000080000 RSI: ffffffff887b679f RDI: 0000000000000005 [ 91.571918][ T6222] RBP: ffffc900057f7d88 R08: 0000000000000005 R09: 0000000000000000 [ 91.579901][ T6222] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 91.587869][ T6222] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8cb48720 [ 91.595822][ T6222] FS: 00007fafc00ae6c0(0000) GS:ffff8881247b2000(0000) knlGS:0000000000000000 [ 91.604722][ T6222] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 91.611291][ T6222] CR2: 0000555585d67588 CR3: 0000000034804000 CR4: 00000000003526f0 [ 91.619248][ T6222] Kernel panic - not syncing: Fatal exception [ 91.625509][ T6222] Kernel Offset: disabled [ 91.629808][ T6222] Rebooting in 86400 seconds..