last executing test programs: 2m39.559365407s ago: executing program 3 (id=911): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x99f}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0x2, 0x4e1e, 0x0, @remote}, 0x1c) 2m39.484669969s ago: executing program 3 (id=912): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000a92000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sched_setattr(0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000008c0)="7a2462528437fdc6a60d8b7b6bc17d3cc3c3ed067d1979631506a3edf466b3a9fe070dee34123e1254a21ae5894313f5e296f65d613b1d7efd768ef39160edfa3f25326e00814c5578e9615fdd3b22bdacb9e9377490970235e9d22f24425f5c46e16fe901dcd8af308cc857336e584f348b08d4792d3a8f99da37502c3106edc2fa8323ce94829d69b0ec59e68f41de239a03419c137eb81f05b088b5de91eb8f", 0xa1) ioprio_set$uid(0x3, 0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400) readv(0xffffffffffffffff, &(0x7f0000000740), 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x48c0) recvmmsg(r1, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000340)=@xdp, 0x80, &(0x7f00000000c0)}, 0x4}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/90, 0x5a}, {&(0x7f0000000680)=""/105, 0x69}, {&(0x7f0000000a80)=""/160, 0xa0}], 0x3, &(0x7f00000005c0)=""/60, 0x3c}, 0x9}, {{&(0x7f00000003c0)=@phonet, 0x80, &(0x7f0000001d40)=[{&(0x7f0000000b40)=""/233, 0xe9}, {&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f0000001c40)=""/113, 0x71}, {&(0x7f00000000c0)=""/60, 0x3c}, {&(0x7f0000001cc0)=""/106, 0x6a}, {&(0x7f0000000440)=""/39, 0x27}], 0x7, &(0x7f0000001dc0)=""/118, 0x76}, 0x2}], 0x4, 0x2, 0x0) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 2m38.064775604s ago: executing program 3 (id=919): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0xc10, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x5, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\t\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x21}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1b, 0x61, 0xe3, 0x8, 0x16d0, 0x10a9, 0x3052, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x7f, 0x88, 0x0, [], [{{0x9, 0x5, 0x3, 0x2}}]}}]}}]}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0x3008000}]}}]}, 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellinkprop={0x1f, 0x6d, 0x2ec9b2c728e3c67, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x48198, 0x800}}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r6, &(0x7f0000000140)={&(0x7f0000000040), 0x14, &(0x7f0000000100)={0x0}, 0x7}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)="911c2b8517d8682ec068eff9b6d218d442e2cacc173fab1984ed933677e4234e36ae726a0fd42f95acb28051d36e86b96d1da08550e98143700228ffff04225f69ae5f1847d8f28d475fd7640fef473773bbfa46cf208e7980", 0x59) r7 = socket$nl_audit(0x10, 0x3, 0x9) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x50d, 0x3201, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000000000)={0x2c, &(0x7f0000000280)={0x0, 0x23, 0x7, {0x4, 0xf, "3d3df816cc"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0x7, &(0x7f0000000080)={0x7, 0xef, 0xe050}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x520, 0x0, 0x0, 0x0, 0x8, 0x596, 0x502, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x99, 0x40, 0xe8, [{{0x9, 0x4, 0x0, 0x4d, 0x2, 0x3, 0x1, 0x0, 0x6, {0x9, 0x21, 0x7, 0x8, 0x1, {0x22, 0x177}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0x3, 0x7f}}}}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x200, 0x3, 0xfe, 0x0, 0x8, 0x48}, 0xe0, &(0x7f0000000480)={0x5, 0xf, 0xe0, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0xc, 0x2, 0x8000, 0x0, 0x1, [0x3f, 0xff962017dc550378]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x6, 0x5, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x0, 0x0, 0x9}, @ssp_cap={0x10, 0x10, 0xa, 0xf9, 0x1, 0x6, 0xf00, 0x1ff, [0xf]}, @generic={0xa6, 0x10, 0x3, "8cf0446451b538dd2ab190f807d59422c850c0fdd9b70a3b0c31e930316853d92d6087ff0ccdcb2ed448308c61f75442184659cb4b9a37dd4e1199e91091cfc33b4b74c863260eb2c7734c73eb955ed8c0aa557feb55bd720cc2e34a5785ef39aca988065366902c5a276cbd32c5e89483eb7c91fb8c997e9be5ebb60d392d26e0003a27f050314dd4696c64ba1a2b9fd1e4be6bbcd3d724c7add7f43a9ca1d9afd515"}]}, 0x6, [{0x93, &(0x7f0000000580)=@string={0x93, 0x3, "8101726bc03b8319de4528250c529d379bd7973dec475f2078e8e7484489e721857efb07bb2f084442b5a0d292d73bc4f2e68c40c0e4f247b9bf5c882c182df1ed2c4c9301912297fce3fe07997f406391f6863f21142bf255755a194d2c20e12b6cf25a7334069d2232b719f38ab2805615f3fa6d40f760b69018dbf995e3f808b2d3a8be57fc0feecb8e70df27aeea19"}}, {0x23, &(0x7f0000000640)=@string={0x23, 0x3, "269370b619f601b357748a60565fa5993e2518a0d70073ab481bfb3bdfdeb5ac60"}}, {0xf9, &(0x7f00000009c0)=ANY=[@ANYBLOB="f903121cbe428a996464e46731509acf2a46d0e34cb164c1e0c75b2b057888748df31307b09845816a922d0c5a9d817937db11fb7814317b9994d3fd88dfd2fefa54ecfdcf3bfbc5b1caef5cb72b3e4459867b83b4b680de96c45491a6aed76b4b08368b98039dc08f81f3ca2099486515b82c6a933b3f67a6995e2d3d62a10f4240839e8acce90bf4b4991ef5c3698261d0516a564ed729dcf38ad66112a363dbd700ea7c387b1a076fea7adbe9663da93030199120744a8aa9501f871f316ad83a74b367277eaac059fa186913a113d19bcf106f51af4d8392227295d72c44fea58ed6185bdf5c6b33a0107ee3f0c8ec55daae2c3746310464c9d4d23c6a11b077590d0beb803eed5f23d3fe9cfeb3fc015d7dfce08523450991bb"]}, {0x20, &(0x7f0000000780)=@string={0x20, 0x3, "6a7cf28c3851d6faabf343b473d775b1530e3f57254e28f02cbacaccb8bd"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0xc0c}}, {0x66, &(0x7f0000000800)=@string={0x66, 0x3, "f023d71b9d434cd253c0272bf056c1322f92fc62f147a51149dc5ee9c3c2ec60a5672ef2ab328f5019e950115f09921e461c37b9290961b34598bf17a7dddb223d115cade914922a6967d7a2b4277def54cdc9ae19ab20d4705666e97a3ffca8a322c0c4"}}]}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bb210a08c907120082f60102030109022d000100000000090400000396b70a0009050f000000000000090505000000000000090501"], 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r9, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000064}, 0x4081) syz_usb_control_io$cdc_ecm(r4, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341e9"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) 2m32.944352966s ago: executing program 3 (id=943): r0 = socket(0x1d, 0x6, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x84, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x20000850) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000300)={0x2, 0x4e24, @remote}, 0x10) mknod$loop(&(0x7f0000000080)='./file1\x00', 0xe050, 0x1) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r4, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) unshare(0x40020000) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaa27aaaaaaaaaa2808060001080006040001aaaaaaaaaa1aac1414bbaaaaaaaaaa00c7cf3307"], 0x0) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 2m30.811362418s ago: executing program 3 (id=955): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x2) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70ee}, 0x0, &(0x7f0000000040)={0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000340), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x70000, 0xb012, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x7f, 0x9, 0x1}, 0x0, 0x1, {0x0}, 0x10000000}) ppoll(&(0x7f00000001c0)=[{r1, 0x40}], 0x1, &(0x7f0000000240)={0x0, 0x989680}, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000380)={r3, 0x0, 0xffffffff, 0x6, &(0x7f0000000300)=[{0x2, 0x11, 0x945e, 0x4}, {0x3ff, 0x2, 0xc044, 0x3}, {0x4, 0x3, 0x21, 0x10}, {0x3, 0x3, 0x5, 0x3}, {0x7, 0x8, 0x0, 0x5}, {0x2, 0x4005, 0x7, 0x8}]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f006bbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x7) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2m26.804757831s ago: executing program 3 (id=973): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x24000811) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x30000040}, 0x1) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x18, 0x1404, 0x1, 0x50fd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b32964}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280)="04", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r1, &(0x7f0000000780)}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r3, &(0x7f0000000340), &(0x7f0000000000)=@tcp, 0x2}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='coredump_filter\x00') write$cgroup_pid(r4, &(0x7f0000000140), 0x12) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000a00)={0x0, 0x2, 0x6, 0x7fffffffffffffff}) inotify_init1(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000300)=ANY=[@ANYBLOB="12011003000000086b1d010140000102030109025f0003017828020904000000010100000224"], &(0x7f0000000a80)={0x0, 0x0, 0x53, &(0x7f0000000c00)=ANY=[], 0x1, [{0x0, 0x0}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r6, 0x0, &(0x7f0000001780)=""/4096}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x42, 0x40, 0xc0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r7}, 0x38) write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x8, 0x8, '9P2000.L'}, 0x15) 2m11.578818067s ago: executing program 32 (id=973): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x24000811) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x30000040}, 0x1) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x18, 0x1404, 0x1, 0x50fd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b32964}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280)="04", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r1, &(0x7f0000000780)}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r3, &(0x7f0000000340), &(0x7f0000000000)=@tcp, 0x2}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='coredump_filter\x00') write$cgroup_pid(r4, &(0x7f0000000140), 0x12) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000a00)={0x0, 0x2, 0x6, 0x7fffffffffffffff}) inotify_init1(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000300)=ANY=[@ANYBLOB="12011003000000086b1d010140000102030109025f0003017828020904000000010100000224"], &(0x7f0000000a80)={0x0, 0x0, 0x53, &(0x7f0000000c00)=ANY=[], 0x1, [{0x0, 0x0}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r6, 0x0, &(0x7f0000001780)=""/4096}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x42, 0x40, 0xc0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r7}, 0x38) write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x8, 0x8, '9P2000.L'}, 0x15) 1m2.90743287s ago: executing program 1 (id=1330): socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{0x0}], 0x1}], 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x52) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000000340)=ANY=[@ANYBLOB="66516c746572000000000000000000000000000000000000000000000000000002"], 0x48) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004000}, 0x24044814) mount$pvfs2(&(0x7f0000000140), &(0x7f0000000240)='./cgroup\x00', &(0x7f00000001c0), 0x404a, &(0x7f0000000200)=ANY=[]) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040), 0x6) accept4(r5, 0x0, 0x0, 0x0) ioctl$sock_bt_hci(r5, 0x400448e6, 0x0) ioctl$sock_bt_hci(r5, 0x400448e7, &(0x7f0000000080)) openat$ptp0(0xffffffffffffff9c, 0x0, 0x2000, 0x0) close(0xffffffffffffffff) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x6f) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, 0x0) 1m2.29473383s ago: executing program 1 (id=1333): r0 = socket(0x1d, 0x6, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x84, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x20000850) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000300)={0x2, 0x4e24, @remote}, 0x10) mknod$loop(&(0x7f0000000080)='./file1\x00', 0xe050, 0x1) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r4, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) unshare(0x40020000) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaa27aaaaaaaaaa2808060001080006040001aaaaaaaaaa1aac1414bbaaaaaaaaaa00c7cf3307"], 0x0) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 1m1.629630695s ago: executing program 2 (id=1335): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x40000120) listen(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000e00)=[{{&(0x7f0000000340)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @private1}}, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/62}, {&(0x7f00000001c0)}], 0x0, &(0x7f0000000440)=""/49}, 0x7}, {{&(0x7f0000000480)=@x25={0x9, @remote}, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)=""/85}, {&(0x7f0000000580)=""/32}, {&(0x7f0000000640)=""/92}, {&(0x7f00000006c0)=""/149}, {&(0x7f0000000780)=""/151}, {&(0x7f0000000840)=""/80}, {&(0x7f00000005c0)=""/26}, {&(0x7f00000008c0)=""/19}, {&(0x7f0000000900)=""/119}], 0x0, &(0x7f0000000a40)=""/112}, 0x6}, {{&(0x7f0000000ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b40)=""/1}, {&(0x7f0000000b80)=""/119}]}, 0xfffffff9}, {{&(0x7f0000000c40)=@rc={0x1f, @fixed}, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000cc0)=""/233}]}, 0x5}], 0x1015a, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1b05001, 0x0) r6 = socket(0x2, 0x80805, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r6) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c000180060206"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 1m0.882877079s ago: executing program 1 (id=1337): r0 = socket(0x1d, 0x6, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r0, 0x0, 0x20000850) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000300)={0x2, 0x4e24, @remote}, 0x10) mknod$loop(&(0x7f0000000080)='./file1\x00', 0xe050, 0x1) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r4, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) unshare(0x40020000) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaa27aaaaaaaaaa2808060001080006040001aaaaaaaaaa1aac1414bbaaaaaaaaaa00c7cf3307"], 0x0) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000100)="f257a8ea7bc273", 0x7, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 1m0.593066263s ago: executing program 2 (id=1338): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) prctl$PR_GET_DUMPABLE(0x26) sendmmsg$inet6(r0, 0x0, 0x0, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000800) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000740)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x5, 0x14, 0x67, 0x0, 0x5, 0x4, 0x0, @broadcast, @local}}}}}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) 1m0.018534822s ago: executing program 2 (id=1340): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ac0544020000000000010902240001da820000090400000003000288bc6c0159c87bc64833004ce5000921000000"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x8842) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x44, 0x12, 0x100, 0x0, 0x0, {@in=@empty}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x8140) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x62000, 0x1220}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) r3 = syz_open_dev$I2C(&(0x7f00000000c0), 0x3, 0x101002) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0xfffffffffffff3fb, 0x71cf4a07, 0x2, 0x2}) close_range(r0, 0xffffffffffffffff, 0x0) 59.867750398s ago: executing program 1 (id=1344): r0 = socket$qrtr(0x2a, 0x2, 0x0) recvmsg$qrtr(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000140)=[{&(0x7f0000000400)=""/201, 0xc9}, {&(0x7f0000000500)=""/227, 0xe3}], 0x2, &(0x7f0000000840)=[{0x60, 0x0, 0x0, ""/80}, {0xa0, 0x0, 0x0, ""/144}], 0x100, 0x2000}, 0x38, 0x12160) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xffffffffffffff93, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12"], 0x48) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0x7, 0x1, 0x4, 0x2, 0x1, 0x1, 0xff, 0x5, 0x0, 0xe, 0x9, 0xa, 0x2, 0xd, 0x5}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x36, 0x7, 0x0, 0x180, 0x7, 0x0, 0xf1, 0x0, 0x8000000000000, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0xbd9], 0x1, 0x3c4210}) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x64}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000100005800a00010048"], 0x48}}, 0x0) 59.247451302s ago: executing program 2 (id=1348): mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./bus\x00', 0x10) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x1) mount$overlay(0x0, &(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@redirect_dir_on}, {@uuid_off}, {@uuid_on}, {@userxattr}, {@redirect_dir_nofollow}, {@nfs_export_on}, {@uuid_null}, {@redirect_dir_on}]}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x4, 0x4, 0x3c8, 0xe8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xff, 0xd, 0x5, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x6, 0x8a2d, 0x1000, 0x100, 0xa, 0xc, 'sit0\x00', 'team0\x00', {0xff}, {}, 0x0, 0x290}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0xff03}}}, {{@arp={@multicast2, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'pim6reg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) readahead(r1, 0x8000000000000001, 0x7) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000300)="54dbe2b890d76720fdc41cb74ef63936ef81d9dd94", 0x15}, {0x0}], 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f00000000c0)) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x11, 0x7, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$usbmon(&(0x7f00000017c0), 0x70c41155, 0x20c00) ioctl$MON_IOCT_RING_SIZE(r3, 0x9204, 0xd851f) 59.173816555s ago: executing program 1 (id=1350): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x3, 0x0, [{0xbe5}, {0x93c, 0x0, 0x92a}, {0x815, 0x0, 0x9}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000021000040"]) 58.972508083s ago: executing program 2 (id=1351): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x4, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)='#', 0x1}], 0x1}}], 0x1, 0x4000c000) close(r0) 58.955265826s ago: executing program 1 (id=1352): r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x101) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x5, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x5, 0x5}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000000028850000008600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r7, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0xfca804a0, 0xe, 0x0, &(0x7f0000000580)="b80022ab98d1db1b883e04000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000640)={0x0, 0x6, 0x1, "af"}, 0x9) r11 = syz_socket_connect_nvme_tcp() setsockopt$SO_TIMESTAMPING(r11, 0x1, 0x25, &(0x7f0000000040)=0x3800, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) syz_emit_ethernet(0xf1, &(0x7f00000000c0)={@local, @local, @void, {@ipv4={0x800, @igmp={{0x10, 0x4, 0x2, 0x30, 0xe3, 0x66, 0x0, 0x2, 0x2, 0x0, @rand_addr=0x64010100, @multicast1, {[@noop, @lsrr={0x83, 0x27, 0x22, [@remote, @loopback, @loopback, @broadcast, @empty, @empty, @remote, @multicast1, @rand_addr=0x64010101]}, @noop]}}, {0x8, 0x81, 0x0, @broadcast, "45c4e2984849371e08d5a5b3873745b84e6e504c4205b53acf2d77069e8bc411091d8cbba75eceae44888f9a00e57ed0c1854c7f7f5ce7562e4664afd5d2f0d3742b71c77b4dbd41c399df1c2806516fe5defa62b20ec336cad518557a28b3cb5cdcd1b60d4feec843e53c51d2539e682876c069b7a56fadc8f05ff723ad98600104370505054d6ab4d44c1b77b3db3674e3cd4067607b2fcaa4ef"}}}}}, 0x0) sendmmsg$inet6(r8, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) unshare(0x42020000) lseek(r8, 0x9, 0x3) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYRES16=r8], 0x1000f) 58.856471995s ago: executing program 2 (id=1355): r0 = socket(0x1d, 0x6, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x84, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x20000850) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000300)={0x2, 0x4e24, @remote}, 0x10) mknod$loop(&(0x7f0000000080)='./file1\x00', 0xe050, 0x1) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r4, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) unshare(0x40020000) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaa27aaaaaaaaaa2808060001080006040001aaaaaaaaaa1aac1414bbaaaaaaaaaa00c7cf3307"], 0x0) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 46.143116193s ago: executing program 0 (id=1398): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) (async) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) r1 = syz_open_dev$radio(&(0x7f0000001640), 0x0, 0x2) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) (async) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x0, r3, 0xc2c7d5e577ca6d54, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x44}, 0x0) preadv(r1, &(0x7f00000033c0)=[{&(0x7f00000031c0)=""/207, 0xcf}], 0x1, 0x6, 0x0) (async) preadv(r1, &(0x7f00000033c0)=[{&(0x7f00000031c0)=""/207, 0xcf}], 0x1, 0x6, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r1, 0xf517, 0x0) (async) ioctl$F2FS_IOC_DECOMPRESS_FILE(r1, 0xf517, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sw_sync(0xffffff9c, &(0x7f0000000080), 0x80800, 0x0) (async) r5 = openat$sw_sync(0xffffff9c, &(0x7f0000000080), 0x80800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000140)={0x0, "e89c5b0900f8ff0000000007000000000000005b00", 0xffffffffffffffff}) epoll_create1(0x0) (async) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000100)={0x30000000}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r8}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x44, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x97, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x44, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x97, @void, @value}, 0x94) r9 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x8000, 0x0) write$P9_RWRITE(r9, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x6}, 0xb) dup(r4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x101400, 0x0) (async) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x101400, 0x0) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r10, 0xc0502100, &(0x7f0000000580)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r11, 0xc0502100, &(0x7f0000002040)) 45.111596858s ago: executing program 0 (id=1404): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004880}, 0x2004c050) 45.08576252s ago: executing program 0 (id=1406): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, 0x0, 0xb1) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRESHEX=r3, @ANYBLOB="e244623f81f423adcdfb238032faaa0573b82a699d3a072085f6db27022c01dbab74614a52a1b86dd1905a39ddab9c6eb2b52d472a1ab35b60b2148795a01855f26496291895ba0b42e2867dbfa5b924fbd8532f57092372da2aaae09f64918e9cda205c1b960bbc94dfc12ed86cf85bc8", @ANYBLOB="8fb1492dd4894ef3c83e1dfe8581aaf41d7ab9dacba6312de4dd447a5f7a6a6b76a09756d4065342a6399471a60f18abfbf3f412a4ab00b7c609cfed57f8d50d8396e472f3228352e3d9205d5a6a0854aa7f226f0dbbb349d9cc329b564d905a542b30181608f65c79089fdd80c8a950da6a74255e34cfd3e9cddfcdc4f8e8b39aa3528392f403a4ab623120666f2b6a433518fd8a3700b17fb7d3afb42646cce9c9bda4637803ebd00b186fb53385d616704abace2e6a4cd89bbbaa637c73b633ce4e9bd54f519cb490e9a3739e38cf623e1f2528", @ANYRESHEX, @ANYBLOB="9ed9758f60c42b9e2af4aa25a3ba299195ac5ba91d3cdd6789c0965ad64463cf52b1dd7446a2775469b28fca4e6176aa3212d58c2bf7ff7c76d1fb4b68d67d76fe99f30e3c4eaf316cffef0e4db9ff82e08b9c3e11dd973c2f60f47d4ebf9002df9d5f492f70536fc82bb17f448e80a47a28d6ef90d37cd656c1778e7b86683a2d0864ae60a17196944c21d1d61129bf5301f2868126bcdfd77644f8"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0xef, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000110f000000000200000000000500", @ANYRES32, @ANYBLOB="0401000000000000280012800900010076657468000000001800028014000100000000", @ANYRES64], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) prctl$PR_SET_SECUREBITS(0x1c, 0x2d) (async) setuid(0xee00) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000002a444efa3b6237ad45dbd34fd470101080000ffffffffffffffff000a080015"], 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x40000) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) prlimit64(r1, 0x0, &(0x7f0000000000)={0x401}, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r7, @ANYBLOB="60005e80080006000002000008000700f605000008000900000000000c0001000500000002000000080005"], 0x7c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8d0) r9 = syz_open_procfs(r1, &(0x7f00000000c0)='net/tcp\x00') read$eventfd(r9, &(0x7f0000000080), 0x8) (async) openat$cgroup_devices(r9, &(0x7f0000000180)='devices.deny\x00', 0x2, 0x0) (async) dup3(r4, r5, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) 44.912501843s ago: executing program 0 (id=1409): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) lseek(0xffffffffffffffff, 0xa, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x210, 0x9403, 0x3002, 0x210, 0x2c0, 0x2f0, 0x3d8, 0x3d8, 0x2f0, 0x3d8, 0x3, 0x0, {[{{@ipv6={@private2, @remote, [0xffffff00, 0x500, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffffff], 'macvlan1\x00', 'wg2\x00', {}, {0xa4c8dd0ffa9b1578}, 0x73, 0x9, 0x4, 0x48}, 0x0, 0x1c8, 0x210, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x80, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x0, 0x2}, {0x4, 0x5, 0x5}, {0x3, 0x4}, 0xbf, 0xb}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x47b) 43.493492978s ago: executing program 33 (id=1352): r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x101) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x5, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x5, 0x5}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000000028850000008600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r7, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0xfca804a0, 0xe, 0x0, &(0x7f0000000580)="b80022ab98d1db1b883e04000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000640)={0x0, 0x6, 0x1, "af"}, 0x9) r11 = syz_socket_connect_nvme_tcp() setsockopt$SO_TIMESTAMPING(r11, 0x1, 0x25, &(0x7f0000000040)=0x3800, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) syz_emit_ethernet(0xf1, &(0x7f00000000c0)={@local, @local, @void, {@ipv4={0x800, @igmp={{0x10, 0x4, 0x2, 0x30, 0xe3, 0x66, 0x0, 0x2, 0x2, 0x0, @rand_addr=0x64010100, @multicast1, {[@noop, @lsrr={0x83, 0x27, 0x22, [@remote, @loopback, @loopback, @broadcast, @empty, @empty, @remote, @multicast1, @rand_addr=0x64010101]}, @noop]}}, {0x8, 0x81, 0x0, @broadcast, "45c4e2984849371e08d5a5b3873745b84e6e504c4205b53acf2d77069e8bc411091d8cbba75eceae44888f9a00e57ed0c1854c7f7f5ce7562e4664afd5d2f0d3742b71c77b4dbd41c399df1c2806516fe5defa62b20ec336cad518557a28b3cb5cdcd1b60d4feec843e53c51d2539e682876c069b7a56fadc8f05ff723ad98600104370505054d6ab4d44c1b77b3db3674e3cd4067607b2fcaa4ef"}}}}}, 0x0) sendmmsg$inet6(r8, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) unshare(0x42020000) lseek(r8, 0x9, 0x3) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYRES16=r8], 0x1000f) 43.086453109s ago: executing program 34 (id=1355): r0 = socket(0x1d, 0x6, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x84, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x20000850) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000300)={0x2, 0x4e24, @remote}, 0x10) mknod$loop(&(0x7f0000000080)='./file1\x00', 0xe050, 0x1) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r4, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) unshare(0x40020000) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaa27aaaaaaaaaa2808060001080006040001aaaaaaaaaa1aac1414bbaaaaaaaaaa00c7cf3307"], 0x0) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 43.079887966s ago: executing program 0 (id=1414): syz_extract_tcp_res$synack(&(0x7f0000000080)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x92, &(0x7f0000000240)=ANY=[@ANYBLOB="3e5421fcef9daaaaaaaaaa0086dd60000000005c0600fe8000000000000000000000000000bb00000000000000000000ffffac1e000100000000", @ANYRES32=r0, @ANYBLOB="700200009078000004022204566b72af0a3083bc"], 0x0) 42.450546836s ago: executing program 0 (id=1416): r0 = socket(0x1d, 0x6, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x84, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x20000850) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000300)={0x2, 0x4e24, @remote}, 0x10) mknod$loop(&(0x7f0000000080)='./file1\x00', 0xe050, 0x1) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r4, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) unshare(0x40020000) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaa27aaaaaaaaaa2808060001080006040001aaaaaaaaaa1aac1414bbaaaaaaaaaa00c7cf3307"], 0x0) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 25.791282037s ago: executing program 35 (id=1416): r0 = socket(0x1d, 0x6, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x84, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x20000850) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000300)={0x2, 0x4e24, @remote}, 0x10) mknod$loop(&(0x7f0000000080)='./file1\x00', 0xe050, 0x1) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r4, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) unshare(0x40020000) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaa27aaaaaaaaaa2808060001080006040001aaaaaaaaaa1aac1414bbaaaaaaaaaa00c7cf3307"], 0x0) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 25.693089233s ago: executing program 6 (id=1463): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="280000003ec8ee3cbbc696d76f000000047c00e27c716d800c00098008002400", @ANYRES32, @ANYBLOB="04000200"], 0x28}}, 0x4040040) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000d3a000/0x4000)=nil, 0x4000, 0x66) madvise(&(0x7f0000800000/0x800000)=nil, 0x800002, 0x18) ptrace$peeksig(0x4209, r1, &(0x7f0000000000)={0x2, 0x0, 0x8}, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}, {}]) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x28, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, 0x0, &(0x7f0000000080)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x358, 0x0) 25.105167625s ago: executing program 6 (id=1466): r0 = socket$qrtr(0x2a, 0x2, 0x0) recvmsg$qrtr(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000140)=[{&(0x7f0000000400)=""/201, 0xc9}, {&(0x7f0000000500)=""/227, 0xe3}], 0x2, &(0x7f0000000840)=[{0x60, 0x0, 0x0, ""/80}, {0xa0, 0x0, 0x0, ""/144}], 0x100, 0x2000}, 0x38, 0x12160) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f00000000c0)={@local, @broadcast}, 0xc) sendmsg$nl_route_sched(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xffffffffffffff93, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12"], 0x48) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0x7, 0x1, 0x4, 0x2, 0x1, 0x1, 0xff, 0x5, 0x0, 0xe, 0x9, 0xa, 0x2, 0xd, 0x5}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x36, 0x7, 0x0, 0x180, 0x7, 0x0, 0xf1, 0x0, 0x8000000000000, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0xbd9], 0x1, 0x3c4210}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000100005800a00010048"], 0x48}}, 0x0) 24.472265432s ago: executing program 6 (id=1468): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x8, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0x10, 0x7, 0x10001, 0x14, 0x5, "15c0f92ea5a6e3867f0d8ad1bbee4ba34a83c7", 0x3, 0xe}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7}, {0x7, 0xffffffffffffff5c}}}]}]}]}}]}, 0x54}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7, 0x79, 0x46, 0x8, 0xccd, 0x39, 0x907b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfc, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x65, 0x0, 0x0, 0x2, 0xc3, 0x5d}}]}}]}}, 0x0) 21.887032303s ago: executing program 6 (id=1475): iopl(0x3) r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000440)='.\x00', 0x10000000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x3, 0x391900) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r5, 0x851, 0x0) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000000080)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x3, 0x3a, '(', 0x3a, '', 0x3a, './file0'}, 0x28) syz_clone3(&(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0], 0x1}, 0x58) 19.25849291s ago: executing program 6 (id=1484): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0xb, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008204"]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x200008, 0x4, 0x20000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 19.039979327s ago: executing program 6 (id=1487): r0 = socket(0x1d, 0x6, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x84, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x20000850) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000300)={0x2, 0x4e24, @remote}, 0x10) mknod$loop(&(0x7f0000000080)='./file1\x00', 0xe050, 0x1) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r4, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) unshare(0x40020000) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaa27aaaaaaaaaa2808060001080006040001aaaaaaaaaa1aac1414bbaaaaaaaaaa00c7cf3307"], 0x0) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 4.36897473s ago: executing program 7 (id=1543): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05002abd7000fddbdf2501000000400008803c00008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e227f000001000000000000000008000100", @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) move_mount(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000100)='./file0\x00', 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x11, &(0x7f0000000200)={r6}, &(0x7f00000000c0)=0x8) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$TIOCCBRK(r4, 0x5428) 3.782059066s ago: executing program 36 (id=1487): r0 = socket(0x1d, 0x6, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x84, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x20000850) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000300)={0x2, 0x4e24, @remote}, 0x10) mknod$loop(&(0x7f0000000080)='./file1\x00', 0xe050, 0x1) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r4, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) unshare(0x40020000) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaa27aaaaaaaaaa2808060001080006040001aaaaaaaaaa1aac1414bbaaaaaaaaaa00c7cf3307"], 0x0) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 3.723106485s ago: executing program 7 (id=1545): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000000000000010100c0"]) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = dup(r5) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="82"]) r7 = socket$nl_route(0x10, 0x3, 0x0) read(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) shmctl$IPC_RMID(0x0, 0x0) unshare(0x46000200) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001680)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x80}, [@RTA_IIF={0x8, 0x1b}, @RTA_DPORT={0x6, 0x1d, 0x4e24}]}, 0x2c}}, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x10200, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000440)={0x9, 0x2, {0x5, @struct={0x1, 0x5}, 0x0, 0x7fff, 0x92, 0x5, 0x3, 0x8, 0x440, @struct={0x7fffffff, 0xffe}, 0x3, 0x9, [0x492de227, 0x100000000, 0x2, 0x6, 0x6, 0x1000000000]}, {0x5c, @usage=0x3, 0x0, 0x1, 0x8, 0x4, 0x7, 0x4, 0x40, @usage=0x2, 0x0, 0x5, [0x2, 0xffffffff, 0xcdaf, 0x9, 0x9, 0xbef]}, {0x30c3, @usage=0x7, 0x0, 0x4, 0x8, 0x1, 0x2000000000, 0x4, 0x90, @usage=0x3, 0x7fffffff, 0x2, [0x9, 0x58a48e9b, 0x9, 0x7, 0x34d1dedd, 0x1]}, {0x1fc, 0x0, 0x8}}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000001480)={0x0, "e4b02e4a1d71d03d09a3e0961fd6c5e5"}) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00101}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r10, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r10, 0x40082104, &(0x7f0000000300)) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000840)={0x0, 0x4, 0x9}) 2.398146129s ago: executing program 8 (id=1551): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x294}, 0x1, 0x0, 0x0, 0x8021}, 0x4020054) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x44, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @private2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4092}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) syz_emit_vhci(0x0, 0x0) syz_open_dev$video4linux(0x0, 0x7, 0x8001) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x530, 0xd0, 0xd0, 0x390, 0x2b8, 0x460, 0x460, 0x460, 0x460, 0x460, 0x460, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [0xffffff00], [], 'nicvf0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@empty, 0x39, 0x16}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0xe, 0x79}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x0}}}, {{@ipv6={@mcast1, @loopback, [], [], 'batadv_slave_0\x00', 'ipvlan1\x00', {}, {}, 0x2}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'batadv0\x00', 'virt_wifi0\x00', {}, {0xff}}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="c80000"], 0x4) accept4(r0, 0x0, 0x0, 0x80000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x110, &(0x7f0000000380)={0x0, 0x5885, 0x0, 0x1, 0x1ff}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x4, r2, 0x0, 0x0, 0x0, 0x800}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x100004) syz_emit_vhci(&(0x7f0000000780)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x25, 0xc9, 0x118}}}, 0x8) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x41, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000380)={0x0, 0xf4e2, 0x7fff, 0x8000000, 0x4, "7765fe40dd48dd666e666e79a87e86257edaf9", 0x7}) unshare(0x400) getpgrp(0xffffffffffffffff) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000600)) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) 2.185653528s ago: executing program 8 (id=1552): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r3 = syz_open_dev$vcsu(&(0x7f0000000240), 0x6, 0x240040) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000280)=[@in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e24, 0x400, @mcast2, 0xfffffffc}], 0x3c) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r4, 0x0, 0x0}, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r6 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) connect$can_bcm(r3, &(0x7f0000000480)={0x1d, r2}, 0x10) mknodat$loop(r6, &(0x7f00000002c0)='./file1\x00', 0x1000, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r6, &(0x7f0000000100)='./file1\x00', r6, &(0x7f0000000240)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@getchain={0x2c, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [{0x8, 0xb, 0x1}]}, 0x2c}}, 0x0) r8 = syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) ioctl$FS_IOC_SETFLAGS(r8, 0xc0606610, &(0x7f0000000040)=0x60) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a300000000018000380140000800800034000000002050006405200000014000000110001"], 0xc8}}, 0x0) 2.051434918s ago: executing program 7 (id=1553): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) rt_sigaction(0x16, &(0x7f0000000680)={&(0x7f0000000600)="410fb9fb0f860400000066440fc78b00000000c4c305686f6d58460fac1200f20f1bd66566400f3829f7c443694a66df7ac401d816d543d2ba08000000", 0x2, &(0x7f0000000640)="410f00e747d3aaa61b000036660f3a0ab9d019000002660f38171846fdc4a1f9116394440f491a0fb9e9c4c1fe2c8e00b000004070af", {[0x7b]}}, &(0x7f0000000740)={&(0x7f00000006c0)="0f2d1766430f3acf570d0a410f50f2c4419dd11af20f1ac0652667f3420fa7e80f4e9530ea0000c463fd7cb00800000008c401fa2c10410f01ee", 0x0, &(0x7f0000000700)="c4c3e16a4f3b03c4229db713f26ec40261a83dbfe9d0a020b61d3100000f0e66420fe58900000000f30faed2c483357e0900c4617c77"}, 0x8, &(0x7f0000000780)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r2 = socket(0x2b, 0x80801, 0x1) sendmsg$nl_route(r2, 0x0, 0x200400d4) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000680), &(0x7f0000000700)=0x68) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000540)=0x3) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) 1.945736751s ago: executing program 7 (id=1554): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000000100)={0x40, 0x2, 0x9, 0x301, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFCTH_TUPLE={0x2c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x40}}, 0x60844) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xf505, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r2, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000005000000000000000100000408000000000000000300000010000000000000000000000200000000030000000000000404000000000000"], 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x3, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_emit_ethernet(0x6a, &(0x7f0000000640)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x34, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[@hopopts={0x33, 0x3, '\x00', [@calipso={0x7, 0x8}, @calipso={0x7, 0x8}, @ra]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x8000) r5 = socket(0x10, 0x3, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001280)={0x7c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x7c}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) getpeername$unix(r7, &(0x7f00000011c0), &(0x7f0000001240)=0x6e) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40840) open$dir(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20480, 0xaa) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x17, 0x301, 0x0, 0x25dfdbfc, {0x5}}, 0x14}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1.843014197s ago: executing program 7 (id=1555): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x6, 0x0) mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = gettid() r2 = gettid() kcmp(r1, r2, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[], 0x54}, 0x1, 0xba01}, 0x810) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x2) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmsg$nl_netfilter(r4, 0x0, 0x20000080) recvmmsg(r4, 0x0, 0x0, 0x2000, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000880)={0x48, 0x140b, 0x10, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008004}, 0x40080) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff199610b90661408801010203010902120001000000000904"], 0x0) 1.791928382s ago: executing program 4 (id=1556): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.677884001s ago: executing program 4 (id=1557): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x400c041}, 0x0) 1.58412086s ago: executing program 4 (id=1558): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000340)='g', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x397, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='bic\x00', 0x4) shutdown(r0, 0x1) 1.561883948s ago: executing program 5 (id=1559): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) sendmsg$inet(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f00000001c0), &(0x7f00000002c0)=r1}, 0x20) recvmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/229, 0x8ec1}], 0x1}, 0x2002) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="6a448e140da5a35e", 0x8, 0x40000, 0x0, 0x0) shutdown(r0, 0x1) 1.419600653s ago: executing program 4 (id=1560): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 1.386079468s ago: executing program 8 (id=1561): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x294}, 0x1, 0x0, 0x0, 0x8021}, 0x4020054) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x44, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @private2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4092}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) syz_emit_vhci(0x0, 0x0) syz_open_dev$video4linux(0x0, 0x7, 0x8001) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x530, 0xd0, 0xd0, 0x390, 0x2b8, 0x460, 0x460, 0x460, 0x460, 0x460, 0x460, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [0xffffff00], [], 'nicvf0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@empty, 0x39, 0x16}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0xe, 0x79}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x0}}}, {{@ipv6={@mcast1, @loopback, [], [], 'batadv_slave_0\x00', 'ipvlan1\x00', {}, {}, 0x2}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'batadv0\x00', 'virt_wifi0\x00', {}, {0xff}}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="c80000"], 0x4) accept4(r0, 0x0, 0x0, 0x80000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x110, &(0x7f0000000380)={0x0, 0x5885, 0x0, 0x1, 0x1ff}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x4, r2, 0x0, 0x0, 0x0, 0x800}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x100004) syz_emit_vhci(&(0x7f0000000780)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x25, 0xc9, 0x118}}}, 0x8) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x41, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000380)={0x0, 0xf4e2, 0x7fff, 0x8000000, 0x4, "7765fe40dd48dd666e666e79a87e86257edaf9", 0x7}) unshare(0x400) getpgrp(0xffffffffffffffff) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) 1.376626056s ago: executing program 4 (id=1562): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = gettid() r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000740)={0x1f, @none}, 0x8) sched_setscheduler(r0, 0x3, &(0x7f0000000040)=0xd) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x80000) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) ioperm(0x40, 0x2, 0x8c2) process_mrelease(0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000000040101"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=@fuse_with_parent={0x18, 0x82, {{0x4, 0x0, 0x8}, {0x7, 0x80, 0x2f9c}}}, 0x488a00) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) 1.315367913s ago: executing program 5 (id=1563): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000006c0)={0x508, r1, 0x800, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x1d0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_NODE_ID={0xe6, 0x3, "5f101888f768afa0e94df0b87ab5ba5f0e1ca0bcb3582008142b67d74c403f8f4f89ee2f2ce21bd63a6355b82a991e8a2f28eba3b7e79b7ab26cd2afab24eaa604bc1e513db52c91e1bf29a7477a3f0147781ed2ea9f686d6011b58d7d7ab17b6bb18aa1e2e29b386dcdfb839035c482b6ff8714f116910a40c10fa8e6a70e3bd708b952faefabccd098fa2e5402aaa2c9d0d5eb2832cdfa0ed6f73b7a0f546fb94dbc9393f859b3d460dd4f786db42c660e58a7781f38be3474ccf08b816789dc38b94e70e542824664953a43a4eedd604fc90c90500cf1a1d5cd17fc3b4953efcd"}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "e659b0e3dc02bf4880f7d62582cd69060d35e7c556ee7eaad9f4ada8b1d2f3"}}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "d84e64d0bec578b0e9366b6720b1be880fd30bb58378bbbc54"}}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "cf8eb6a777aac2b7fed0293a3ad07aceb8b45e53b109dcd152b9"}}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe370}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x800}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1, @loopback, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e5}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x27}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7c0}]}]}, @TIPC_NLA_MEDIA={0xe4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3a3a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdd7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfcb2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x61b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4000000}]}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffeffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2cd04b32}]}]}]}, 0x508}, 0x1, 0x0, 0x0, 0x4004804}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81900) close(r3) move_mount(0xffffffffffffffff, 0x0, r3, 0x0, 0x47) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004840}, 0x20000010) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="580000001000010027bd7000fbdbdfa500000000", @ANYRES32=r5, @ANYBLOB="104e0600d5be225938001280110001006272696467655f736c617665000000402000058004001800050019"], 0x58}, 0x1, 0x0, 0x0, 0x404c000}, 0x2) 1.206694566s ago: executing program 8 (id=1564): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="44010000100013072abd700000000000ffffffff000000000000000000000000ac1e000100b062e0676fbd371098a74f32d00000000000000000000000000004", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000000000000000010000000032000000ac1414aa000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002200000000000000000000000000000000000000000000000000000000000000000000000000000100002000000000feffffff0000000002000400000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x144}}, 0x4000000) 1.131398779s ago: executing program 5 (id=1565): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="580000001000010027bd7000fbdbdfa500000000", @ANYRES32=r2, @ANYBLOB="104e0600d5be225938001280110001006272696467655f736c617665000000402000058004001800050019"], 0x58}, 0x1, 0x0, 0x0, 0x404c000}, 0x2) 969.453024ms ago: executing program 5 (id=1566): prctl$PR_GET_THP_DISABLE(0x2a) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@map, 0xffffffffffffffff, 0x27, 0x0, 0x0, @void, @value}, 0x20) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = io_uring_setup(0x1c1a, &(0x7f0000000900)={0x0, 0x763, 0x80, 0x0, 0x11cb}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) syz_usb_connect(0x6, 0x5a2, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0x8c, 0x3, 0x33, 0x10, 0x12d1, 0xb382, 0xc51e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x590, 0x2, 0xd0, 0xff, 0x10, 0x40, [{{0x9, 0x4, 0x94, 0x28, 0x10, 0xff, 0x4, 0x35, 0x1, [], [{{0x9, 0x5, 0x8a, 0x0, 0x10, 0x40, 0xb5, 0x9, [@generic={0x32, 0x23, "7d3056fb1bbc052ecfeb3ae195429ceb83d90bc3196eac2d18101396bbb1054211e5a14380b42d196037b224f680d029"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0xe}]}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0xd5, 0x81, 0x1, [@generic={0xf2, 0x22, "e8f47bd73fdedbf337811ef820af54b73cf8b970ede62113eff540f5ef9e40d0514eed3a99475717ae74ffb7b5a1ef857c31c4919c51e23e3009612f7373d573f1a27e7245e84b7665e4f146731482d7208798094ef5ec453d483bfa7ef2b9cae1f663b279bfa0e073443a4a8e6f419ba2b7b4b8d3f78a7e4677eb8d20b9ff4ab8066eff6c4df934f0012e060101d6eb527d438e258af4b71be73e6742f249e4308e5370b8cd691d3720c90359246cb79d9c05e3bda51e952fa18e5a4ce0d41d0ebeb89206cb26a282e5d71a97764d25f5776fac253ef05b51d4a33816570d082a55b2a0159bc5f19a20320a06566007"}]}}, {{0x9, 0x5, 0xb, 0xc, 0x400, 0x9, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0xc1f4}, @generic={0x67, 0x6, "8a7a5469fbc02b30468792ceb4c78ac584e21238e602e51c158e10409c29fbd369f990c4be13d2add0efee18c99a39b4185676e5194c394b26b736de9ea0c8a7f548d6dc7a7cec847c05ac91a1633125e22a204402127bffd4b187d220000e7ab8f3e62cf9"}]}}, {{0x9, 0x5, 0x5, 0x4, 0x10, 0xa, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xa}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x9}]}}, {{0x9, 0x5, 0xe, 0x3, 0x8, 0x2, 0x5, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0xf}, @generic={0x3f, 0x9, "f0e8737d6679598d7c5922967344ef41ca630921d12b61f3da422635c3bf8e9aa2ddec2cfcd3d58b94654b554eed47ed0fecf66c1bb34ad7117d0c402e"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x200, 0xbd, 0x1, 0x10}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x0, 0xfe, 0x3}}, {{0x9, 0x5, 0x8, 0x10, 0x5d7, 0x9, 0x7, 0x8, [@generic={0xf5, 0x7, "0d92f2beea640a9617b0219698b641e06a27f21c68134622b7c21c5478c9037f2a17e32aa9e20d70d497ab0da8ba7e845d456e19e673f757b03863ebf3757233c323ccf9e9d7133f2e045c0513b708c506813b1e0b5f58a3fca47b4b5f86b81889fe9941d78731cb9d780967f7a5f2b0e51681af74eb275956e57680f74d4370f4c1a6f39146c1491ab9e73d57f364a7bf2e3dab0d3026c7172ab7a6020c1b48e4c115deed12d6a74a0cc8396bafc85fc5bc9e9bab8818291c73338c489fb313571b0bc20aa1815b8f32bf9729d6ddabff99cbe292850659ecbbe20360d6647164b1788da4d5d6e96de8be68a90db6149af3f2"}]}}, {{0x9, 0x5, 0x80, 0x4, 0x20, 0x80, 0x5, 0xf6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x85, 0x9, 0x3}]}}, {{0x9, 0x5, 0xa0364f34e89177a5, 0x0, 0x3ff, 0x6, 0xf9, 0x5a, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0xa}]}}, {{0x9, 0x5, 0x4, 0x4, 0x10, 0x1, 0x1b, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x5}]}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x1f, 0x64, 0x5, [@generic={0x19, 0x23, "588ca98072cf559a1b1f8e9cbe0776b66c3fa626d9dca7"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x400, 0x2, 0x1d, 0x2}}, {{0x9, 0x5, 0x0, 0xc, 0x3ff, 0xc0, 0x2, 0xab, [@generic={0x61, 0x5, "a12a77a6ffc8fbbf1d8a14e09fa08678c6a6202f03714787df374dbb90e48bc1d7188aee5f92ce98f3f4618c40c1168b892d0a6fa9a9ced542a0a2d253f65e5699eeda778f0d5088f095629bc339d1c478453a7a623c71b77b4dfec573afd0"}]}}, {{0x9, 0x5, 0x83, 0x0, 0x20, 0x6, 0x8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x5b06}]}}, {{0x9, 0x5, 0x8, 0x3, 0x10, 0x6, 0x3, 0x2}}]}}, {{0x9, 0x4, 0x87, 0x9, 0x4, 0xf1, 0x50, 0x24, 0x6, [@hid_hid={0x9, 0x21, 0x6, 0xa, 0x1, {0x22, 0xc1c}}, @cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "77dc8b5774"}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0xf08, 0xe90f, 0x9, 0x4}, {0x6, 0x24, 0x1a, 0x202c, 0x1}, [@mdlm={0x15, 0x24, 0x12, 0x6}]}], [{{0x9, 0x5, 0xa, 0x0, 0x40, 0x1, 0xfc, 0x3}}, {{0x9, 0x5, 0xe, 0x4, 0x400, 0x9, 0x7, 0x4}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x1, 0xb, 0x0, [@generic={0xf4, 0x7, "b3096eeda161ea42caeda70af0dbe7ab54227be2e7bd9743435de6d9bdeaa9031d22d8f21e636a3d59bb17a3b0235e2f6868f61acd4e1f584a4a66de7736bd1e87ba172186696933e7c6127bf26acabbd762a645f239257dfbbf736197fbb028c36077356f99bb5ad7f6fc7f3b41bcba9672660d527d35e01b8c7877bac7c0d75604af01c35746d75350af8d5004708fd3c1c11c1aa580827c3fdff924ec8178bc9e1ac9e6e15d6c4017242fe2b9dc76b9b5e1bb1317249e7d006e469fa0abc7e17f2b37fed67472f3d15a5693ed13e96cef78be52b4484a0de58767f33574a1a9203a95f97d295d6c36f271370e28752cdb"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x8}]}}, {{0x9, 0x5, 0xe, 0x4, 0x40, 0x9, 0x3}}]}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x7, 0xf, 0x79, 0xff, 0x3}, 0x4b, &(0x7f00000000c0)={0x5, 0xf, 0x4b, 0x6, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x82, 0x3, 0xb, 0x1, 0xe}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xfa, 0xef, 0x800}, @ssp_cap={0x1c, 0x10, 0xa, 0xab, 0x4, 0x3ff, 0xf000, 0x1, [0xc0f0, 0xc00f, 0x0, 0xff3fc0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x9, 0xa3, 0x0, 0x88}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x6, 0x99d}]}, 0x3, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc8d1}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1009}}, {0x14, &(0x7f0000000240)=@string={0x14, 0x3, "44780ce704304a35d46a79b79d44deb9aaee"}}]}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 419.472948ms ago: executing program 4 (id=1567): r0 = socket$qrtr(0x2a, 0x2, 0x0) recvmsg$qrtr(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000140)=[{&(0x7f0000000400)=""/201, 0xc9}, {&(0x7f0000000500)=""/227, 0xe3}], 0x2, &(0x7f0000000840)=[{0x60, 0x0, 0x0, ""/80}, {0xa0, 0x0, 0x0, ""/144}], 0x100, 0x2000}, 0x38, 0x12160) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f00000000c0)={@local, @broadcast}, 0xc) sendmsg$nl_route_sched(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xffffffffffffff93, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12"], 0x48) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0x7, 0x1, 0x4, 0x2, 0x1, 0x1, 0xff, 0x5, 0x0, 0xe, 0x9, 0xa, 0x2, 0xd, 0x5}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x36, 0x7, 0x0, 0x180, 0x7, 0x0, 0xf1, 0x0, 0x8000000000000, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0xbd9], 0x1, 0x3c4210}) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x64}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000100005800a00010048"], 0x48}}, 0x0) 392.292628ms ago: executing program 7 (id=1568): bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x401, 0xffffffffffffffff, 0x4, 0x100000000000000}, 0x38) r0 = eventfd(0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000001100)="02965d1f5ec3de3d", 0x8}, {&(0x7f0000002180)="27a8104ce45cd4d5", 0x8}], 0x8) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/61, 0x3d}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x5, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x201, 0xc0, 0x3a, 0x4d, 0x20, 0x1604, 0x8005, 0xb21d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x3, 0x0, 0x8c, 0x0, 0x8, [{{0x9, 0x4, 0x52, 0x98, 0x0, 0xa7, 0xa6, 0xae, 0x4}}, {{0x9, 0x4, 0x9f, 0x6, 0x0, 0xff, 0xff, 0xff, 0x5}}, {{0x9, 0x4, 0x9c, 0x3, 0x0, 0xff, 0xff, 0xff, 0xfb}}]}}]}}, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timer_create(0x2, &(0x7f0000000000)={0x0, 0x12, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000100)=0x0) timer_settime(r2, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x3938700}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x7c}}, 0x800) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'gretap0\x00', 0x2}, 0x18) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) writev(r4, &(0x7f0000002100)=[{&(0x7f0000002080)='T', 0x1}], 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a4c000000060a0b04000000000000000002000000200004801c0001800b0001006f626a72656600000c000280080003400000000c0900010073797a3000000000090002007379843200000000140000001100010000000000000000000000000a"], 0x74}}, 0x0) 341.855982ms ago: executing program 5 (id=1569): bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000340)='g', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x397, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)='bic\x00', 0x4) shutdown(0xffffffffffffffff, 0x1) 313.082213ms ago: executing program 8 (id=1570): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010010000000ffdbdf2500000000", @ANYRES32=r2, @ANYRES16=r1], 0x3c}, 0x1, 0x0, 0x0, 0x24008001}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000)=0x14, 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee00}}, './file0\x00'}) r5 = syz_open_dev$vcsa(&(0x7f0000000180), 0x8, 0x111202) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x1ff, 0x0, r4, 0xffffffff, '\x00', r2, r5, 0x3, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x50) 171.301417ms ago: executing program 5 (id=1571): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$vcsa(&(0x7f0000000540), 0xfff, 0x20440) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r6) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x24000840) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, r7, 0x0, 0xdc}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x48080) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) gettid() timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f00000003c0)="192d62546ed6c0f13d1891fd8f71b6f69dfbdc0f54904a85ba7fcf4ed38a46cfe012a8a7dc9cb83b4cf1b0aca5e2ef9979113a486211ac8d61fc486fa83ee39fc13256614296d779034f8acae4f08aaae709b4665d06170f64d1385e884052382eebb27d4ad939b1f2bb60e63b9162361d194b77a46842f95fc14542854350ea58c28d22f2eddad4679fa2d86b19f6f935ad6e1c92e3b1ea7345a1895d24410f6e4654d1c3059ecca44e6e5e960660bcd5d9fbba1c6852fff49a0507982e44613277c704fca507c0ab273f9508154270cc1402665d834ade7ead94d7644480b98b9d20ef9653ce5e039da08cbb08ff01172ff5f8", &(0x7f0000000140)="32aa56f06c"}}, &(0x7f0000000100)) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e21, 0x4000, @mcast1, 0x1}, 0x1c) 0s ago: executing program 8 (id=1572): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r1, 0x80) accept$netrom(r1, 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000280)=""/116, 0x74}, {&(0x7f0000000380)=""/100, 0x64}, {&(0x7f0000000400)=""/91, 0x5b}], 0x3, 0xfffffff8, 0x1fc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r3, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4020ae46, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000000001200c7ac0156000000ffb61f7ab8936e1f3a9539c24ff84217c08f8245"]) fsopen(&(0x7f0000000080)='ocfs2\x00', 0x0) kernel console output (not intermixed with test programs): : denied { connect } for pid=10181 comm="syz.1.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 397.679776][ T6022] udevd[6022]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.156/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 397.715524][ T5800] udevd[5800]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.159/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 398.343570][ T30] audit: type=1400 audit(1746042230.590:408): avc: denied { write } for pid=10198 comm="syz.3.955" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 398.789532][ T30] audit: type=1400 audit(1746042230.710:409): avc: denied { map } for pid=10174 comm="syz.2.950" path="socket:[18979]" dev="sockfs" ino=18979 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 398.814076][ T30] audit: type=1400 audit(1746042230.710:410): avc: denied { accept } for pid=10174 comm="syz.2.950" path="socket:[18979]" dev="sockfs" ino=18979 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 398.907577][ T30] audit: type=1400 audit(1746042231.440:411): avc: denied { create } for pid=10178 comm="syz.4.951" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 399.981504][ T30] audit: type=1800 audit(1746042232.510:412): pid=10208 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.956" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 400.103428][ T9] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 400.210903][T10214] netlink: 'syz.0.959': attribute type 27 has an invalid length. [ 400.261616][T10212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.957'. [ 400.302190][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 400.312805][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 400.329277][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 400.338554][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.355018][T10220] fuse: Bad value for 'fd' [ 401.223211][T10233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.965'. [ 401.232037][T10233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.965'. [ 401.252562][ T9] usb 5-1: can't set config #16, error -71 [ 401.269232][ T9] usb 5-1: USB disconnect, device number 16 [ 401.661868][ T30] audit: type=1400 audit(1746042234.110:413): avc: denied { unlink } for pid=5809 comm="syz-executor" name="file1" dev="tmpfs" ino=912 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 401.706812][T10245] FAULT_INJECTION: forcing a failure. [ 401.706812][T10245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.753378][T10245] CPU: 0 UID: 0 PID: 10245 Comm: syz.4.970 Not tainted 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 401.753397][T10245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 401.753403][T10245] Call Trace: [ 401.753407][T10245] [ 401.753411][T10245] dump_stack_lvl+0x16c/0x1f0 [ 401.753429][T10245] should_fail_ex+0x512/0x640 [ 401.753451][T10245] _copy_from_user+0x2e/0xd0 [ 401.753466][T10245] copy_msghdr_from_user+0x98/0x160 [ 401.753477][T10245] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 401.753493][T10245] ___sys_sendmsg+0xfe/0x1d0 [ 401.753504][T10245] ? __pfx____sys_sendmsg+0x10/0x10 [ 401.753529][T10245] __sys_sendmsg+0x16d/0x220 [ 401.753540][T10245] ? __pfx___sys_sendmsg+0x10/0x10 [ 401.753553][T10245] ? rcu_is_watching+0x12/0xc0 [ 401.753573][T10245] do_syscall_64+0xcd/0x260 [ 401.753588][T10245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.753600][T10245] RIP: 0033:0x7fe65938e969 [ 401.753609][T10245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.753619][T10245] RSP: 002b:00007fe65a1aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.753631][T10245] RAX: ffffffffffffffda RBX: 00007fe6595b5fa0 RCX: 00007fe65938e969 [ 401.753637][T10245] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 401.753644][T10245] RBP: 00007fe65a1aa090 R08: 0000000000000000 R09: 0000000000000000 [ 401.753650][T10245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.753656][T10245] R13: 0000000000000000 R14: 00007fe6595b5fa0 R15: 00007ffe2e7b40b8 [ 401.753669][T10245] [ 401.925499][ C0] vkms_vblank_simulate: vblank timer overrun [ 402.240964][T10253] fuse: Bad value for 'fd' [ 403.043514][ T9] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 403.214551][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 403.238112][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 403.258498][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 403.275874][ T9] usb 4-1: string descriptor 0 read error: -22 [ 403.282313][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 403.302223][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.346280][ T9] usb 4-1: cannot find UAC_HEADER [ 403.415159][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 403.462548][ T6313] udevd[6313]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 403.559628][T10269] netlink: 96 bytes leftover after parsing attributes in process `syz.1.978'. [ 403.587352][T10269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.978'. [ 403.794802][T10269] team0 (unregistering): Port device team_slave_0 removed [ 403.815610][T10269] team0 (unregistering): Port device team_slave_1 removed [ 403.901806][ T5124] Bluetooth: hci3: Dropping invalid advertising data [ 403.909413][ T5124] Bluetooth: hci3: Malformed LE Event: 0x02 [ 403.966375][ T30] audit: type=1400 audit(1746042236.500:414): avc: granted { setsecparam } for pid=10272 comm="syz.4.979" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 404.226164][ T9] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 404.729069][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 404.737734][ T9] usb 5-1: config 1 interface 0 altsetting 5 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 404.748683][ T9] usb 5-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 404.761704][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 404.770292][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 404.779477][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.787525][ T9] usb 5-1: Product: ж [ 404.791637][ T9] usb 5-1: Manufacturer: э [ 404.796215][ T9] usb 5-1: SerialNumber: ᬔ傯皭ⷤ䕜됩㍦ଂ垄짶俻炌銕ᗗ룻ᕋ疈 ꋿ쾲졧◰꒜꼜納ᅊⳂ좬嘱䓼鉼賰ߞ飞팊뉙春⛧齓⑨훒出炠徿¬ꋐ㔃눧뒧⽋砇㋗ⴛ映渕樿®山蚨怍ᥐ闿㇚㫜与覍찀ﷷ썖쎼䟞ʃﲯ⎓튃鮷ꏭ稬綇缦⫍䞤㺁ꭊ▹兞杵襽쨴ᘋꝌ韓ꉦ [ 404.829139][T10276] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 405.046864][ T9] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 5 proto 1 vid 0x0525 pid 0xA4A8 [ 405.062395][ T9] usb 5-1: USB disconnect, device number 17 [ 405.076498][ T9] usblp0: removed [ 406.641193][ T30] audit: type=1400 audit(1746042239.170:415): avc: denied { ioctl } for pid=10303 comm="syz.2.988" path="socket:[19115]" dev="sockfs" ino=19115 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 406.803284][ T30] audit: type=1400 audit(1746042239.260:416): avc: denied { read write } for pid=10301 comm="syz.4.986" dev="sockfs" ino=19107 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 407.011882][T10310] netlink: 'syz.1.987': attribute type 2 has an invalid length. [ 407.639006][T10310] : entered promiscuous mode [ 407.657751][T10312] lo speed is unknown, defaulting to 1000 [ 409.782829][T10364] netlink: 16 bytes leftover after parsing attributes in process `syz.0.995'. [ 409.812943][T10364] team0: No ports can be present during mode change [ 409.832760][T10364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.995'. [ 409.929024][T10364] team0 (unregistering): Port device team_slave_0 removed [ 409.943293][T10364] team0 (unregistering): Port device team_slave_1 removed [ 411.091356][ T30] audit: type=1400 audit(1746042243.590:417): avc: denied { listen } for pid=10372 comm="syz.1.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 411.270861][ T30] audit: type=1400 audit(1746042243.670:418): avc: denied { ioctl } for pid=10372 comm="syz.1.998" path="socket:[19202]" dev="sockfs" ino=19202 ioctlcmd=0x5661 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 411.542037][ T30] audit: type=1400 audit(1746042244.050:419): avc: denied { connect } for pid=10379 comm="syz.4.1000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 412.159251][T10391] lo speed is unknown, defaulting to 1000 [ 412.243563][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 412.396082][ T9] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 412.411370][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 412.428299][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 412.444543][ T9] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 412.452811][ T9] usb 5-1: Product: syz [ 412.457388][ T9] usb 5-1: Manufacturer: syz [ 412.465073][ T9] usb 5-1: SerialNumber: syz [ 412.474209][ T9] usb 5-1: config 0 descriptor?? [ 412.485121][ T9] usb 5-1: selecting invalid altsetting 0 [ 412.661249][T10400] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1005'. [ 412.705351][ T30] audit: type=1400 audit(1746042245.230:420): avc: denied { map } for pid=10401 comm="syz.1.1006" path="pipe:[20504]" dev="pipefs" ino=20504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 412.728171][ T30] audit: type=1400 audit(1746042245.230:421): avc: denied { execute } for pid=10401 comm="syz.1.1006" path="pipe:[20504]" dev="pipefs" ino=20504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 412.857400][T10404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.867282][T10404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.895018][T10404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1002'. [ 414.149961][ T30] audit: type=1800 audit(1746042246.680:422): pid=10433 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1017" name="SYSV00000000" dev="hugetlbfs" ino=5 res=0 errno=0 [ 414.415499][T10435] overlayfs: missing 'lowerdir' [ 414.512179][T10440] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1019'. [ 414.529096][ T30] audit: type=1400 audit(1746042247.060:423): avc: denied { create } for pid=10441 comm="syz.2.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 414.636678][ T30] audit: type=1400 audit(1746042247.170:424): avc: denied { read } for pid=10441 comm="syz.2.1020" path="socket:[19317]" dev="sockfs" ino=19317 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 414.680460][ T24] usb 5-1: USB disconnect, device number 18 [ 415.133342][ T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 415.283254][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 415.292226][ T24] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 415.301394][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.309560][ T24] usb 5-1: Product: syz [ 415.316350][ T24] usb 5-1: Manufacturer: syz [ 415.320967][ T24] usb 5-1: SerialNumber: syz [ 415.329082][ T24] usb 5-1: config 0 descriptor?? [ 415.551343][ T24] speedtch 5-1:0.0: speedtch_bind: data interface not found! [ 415.561780][ T24] speedtch 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 415.577013][ T24] usb 5-1: USB disconnect, device number 19 [ 416.261420][T10474] netlink: 'syz.4.1029': attribute type 2 has an invalid length. [ 416.491270][T10484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1031'. [ 416.533529][ T30] audit: type=1800 audit(1746042249.060:425): pid=10482 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1032" name="SYSV00000000" dev="hugetlbfs" ino=10 res=0 errno=0 [ 416.789887][T10486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1033'. [ 416.858613][T10486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1033'. [ 416.932123][T10489] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1034'. [ 418.149579][T10501] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1037'. [ 418.500918][T10507] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1038'. [ 419.353455][T10515] lo speed is unknown, defaulting to 1000 [ 419.674845][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 419.697540][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 419.707032][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 419.728303][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 419.737518][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 419.791821][ T30] audit: type=1400 audit(1746042252.320:426): avc: denied { mounton } for pid=10513 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 419.811993][T10513] lo speed is unknown, defaulting to 1000 [ 419.992929][T10524] : entered promiscuous mode [ 420.236625][T10513] chnl_net:caif_netlink_parms(): no params data found [ 420.338769][T10513] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.346677][T10513] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.357338][T10513] bridge_slave_0: entered allmulticast mode [ 420.364196][T10513] bridge_slave_0: entered promiscuous mode [ 420.372828][T10513] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.390899][T10513] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.401058][T10513] bridge_slave_1: entered allmulticast mode [ 420.421290][T10513] bridge_slave_1: entered promiscuous mode [ 420.440619][ T30] audit: type=1800 audit(1746042252.970:427): pid=10545 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1045" name="SYSV00000000" dev="hugetlbfs" ino=10 res=0 errno=0 [ 420.535562][T10513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.547821][T10513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.596159][T10513] team0: Port device team_slave_0 added [ 420.608623][T10513] team0: Port device team_slave_1 added [ 420.645390][T10513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.652911][T10513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.717079][T10513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.773429][T10513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.802653][T10513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.970257][T10513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.049396][ T30] audit: type=1400 audit(1746042253.460:428): avc: denied { connect } for pid=10558 comm="syz.2.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 421.346154][ T30] audit: type=1400 audit(1746042253.870:429): avc: denied { create } for pid=10565 comm="syz.4.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 421.536203][ T30] audit: type=1400 audit(1746042253.980:430): avc: denied { mount } for pid=10567 comm="syz.2.1054" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 421.633263][ T30] audit: type=1400 audit(1746042253.990:431): avc: denied { sys_admin } for pid=10565 comm="syz.4.1053" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 421.682823][T10566] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1053'. [ 421.709535][T10513] hsr_slave_0: entered promiscuous mode [ 421.732845][T10513] hsr_slave_1: entered promiscuous mode [ 421.744444][T10513] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 421.904542][ T54] Bluetooth: hci5: command tx timeout [ 421.953424][T10513] Cannot create hsr debugfs directory [ 422.331008][T10585] netlink: 'syz.2.1057': attribute type 2 has an invalid length. [ 422.715803][T10585] : entered promiscuous mode [ 423.183744][ T30] audit: type=1800 audit(1746042255.710:432): pid=10594 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1062" name="SYSV00000000" dev="hugetlbfs" ino=17 res=0 errno=0 [ 423.284661][T10513] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 423.296389][T10513] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 423.349288][T10513] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 423.458537][T10513] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 423.953331][ T54] Bluetooth: hci5: command tx timeout [ 424.222911][T10513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.361046][T10513] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.609714][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.616819][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.925579][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.932671][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.374546][ T30] audit: type=1400 audit(1746042257.690:433): avc: denied { write } for pid=10615 comm="syz.4.1068" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 425.714833][ T30] audit: type=1400 audit(1746042258.250:434): avc: denied { setopt } for pid=10620 comm="syz.1.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 425.795385][ T30] audit: type=1400 audit(1746042258.300:435): avc: denied { read } for pid=10620 comm="syz.1.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 425.799617][T10513] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 426.052251][ T54] Bluetooth: hci5: command tx timeout [ 426.635362][ T30] audit: type=1400 audit(1746042259.150:436): avc: denied { read } for pid=10632 comm="syz.4.1071" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 426.682502][T10637] 9pnet_fd: Insufficient options for proto=fd [ 427.052438][ T30] audit: type=1400 audit(1746042259.150:437): avc: denied { open } for pid=10632 comm="syz.4.1071" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 427.108794][T10513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.114978][ T54] Bluetooth: hci5: command tx timeout [ 428.144934][ T30] audit: type=1800 audit(1746042260.230:438): pid=10653 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1074" name="SYSV00000000" dev="hugetlbfs" ino=6 res=0 errno=0 [ 429.049490][T10513] veth0_vlan: entered promiscuous mode [ 429.067078][T10513] veth1_vlan: entered promiscuous mode [ 429.125698][T10513] veth0_macvtap: entered promiscuous mode [ 429.148209][T10513] veth1_macvtap: entered promiscuous mode [ 429.177806][T10513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.191149][T10513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.202448][T10513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.213778][T10513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.223691][T10513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.234384][T10513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.244327][T10513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.259169][T10513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.273583][T10513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.288462][T10513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.316039][T10513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.339364][T10671] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1078'. [ 429.348543][T10513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.359941][T10513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.372666][T10513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.383782][T10513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.396419][T10513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.407621][T10513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.421406][T10513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.436909][T10513] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.447137][T10513] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.466763][T10513] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.478442][T10513] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.561252][ T6000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.616005][ T6000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.713040][T10681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.837444][ T2964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.856799][ T2964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.921584][ T30] audit: type=1400 audit(1746042262.450:439): avc: denied { mounton } for pid=10513 comm="syz-executor" path="/root/syzkaller.9XHGqD/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 430.203218][ T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 430.508055][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 430.526902][ T24] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.540292][ T24] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.557895][ T24] usb 5-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 430.557951][ T30] audit: type=1400 audit(1746042262.950:440): avc: denied { bind } for pid=10697 comm="syz.5.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 430.557992][ T30] audit: type=1800 audit(1746042262.970:441): pid=10696 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1084" name="SYSV00000000" dev="hugetlbfs" ino=11 res=0 errno=0 [ 430.655531][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 430.670149][ T24] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 431.473506][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.190269][ T24] usb 5-1: config 0 descriptor?? [ 433.200532][T10727] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10727 comm=syz.4.1081 [ 434.295773][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 434.301786][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 434.435678][ T24] usb 5-1: USB disconnect, device number 20 [ 434.829712][T10763] overlayfs: failed to clone upperpath [ 435.199662][T10768] lo speed is unknown, defaulting to 1000 [ 435.958251][T10777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1109'. [ 435.967934][T10777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1109'. [ 436.088675][ T30] audit: type=1400 audit(1746042268.620:442): avc: denied { block_suspend } for pid=10745 comm="syz.5.1099" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 436.160042][T10784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 437.218161][T10793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4114 sclass=netlink_route_socket pid=10793 comm=syz.0.1113 [ 437.477339][T10800] autofs: Unknown parameter './file1' [ 437.582249][ T30] audit: type=1400 audit(1746042269.770:443): avc: denied { setopt } for pid=10792 comm="syz.0.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 437.745878][ T30] audit: type=1400 audit(1746042269.770:444): avc: denied { create } for pid=10792 comm="syz.0.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 437.932217][T10805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1116'. [ 438.408048][T10805] macsec0: left allmulticast mode [ 438.448863][T10805] veth1_macvtap: left allmulticast mode [ 438.473449][T10805] macsec0: left promiscuous mode [ 438.495853][T10805] bridge0: port 3(macsec0) entered disabled state [ 438.517336][T10805] bridge_slave_1: left allmulticast mode [ 438.531325][T10805] bridge_slave_1: left promiscuous mode [ 438.539058][T10805] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.558896][T10805] bridge_slave_0: left allmulticast mode [ 438.566737][T10805] bridge_slave_0: left promiscuous mode [ 438.572836][T10805] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.302220][T10786] kexec: Could not allocate control_code_buffer [ 439.871822][T10826] lo speed is unknown, defaulting to 1000 [ 439.903327][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.909650][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.036771][T10830] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1122'. [ 440.058953][T10832] binder: 10831:10832 ioctl 4018620d 0 returned -22 [ 440.507648][T10832] binder: 10831:10832 ioctl c0306201 0 returned -14 [ 440.632210][ T30] audit: type=1400 audit(1746042272.600:445): avc: denied { write } for pid=10822 comm="syz.4.1122" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 440.695692][ T30] audit: type=1400 audit(1746042273.160:446): avc: denied { open } for pid=10822 comm="syz.4.1122" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 441.457554][T10854] fuse: Unknown parameter 'fd0x0000000000000007' [ 441.801390][ T30] audit: type=1800 audit(1746042274.090:447): pid=10854 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1128" name="SYSV00000000" dev="hugetlbfs" ino=7 res=0 errno=0 [ 442.817613][T10869] lo speed is unknown, defaulting to 1000 [ 443.944519][T10885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.812825][T10896] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1138'. [ 445.832103][T10896] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1138'. [ 446.199926][T10904] lo speed is unknown, defaulting to 1000 [ 446.305961][ T30] audit: type=1400 audit(1746042278.840:448): avc: denied { lock } for pid=10891 comm="syz.4.1135" path="socket:[22731]" dev="sockfs" ino=22731 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 447.075844][T10915] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1143'. [ 447.251825][T10915] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10915 comm=syz.4.1143 [ 447.389426][ T30] audit: type=1400 audit(1746042279.840:449): avc: denied { read } for pid=10914 comm="syz.4.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 447.465658][ T30] audit: type=1400 audit(1746042279.990:450): avc: denied { ioctl } for pid=10914 comm="syz.4.1143" path="socket:[22772]" dev="sockfs" ino=22772 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 447.561156][T10924] netlink: 'syz.0.1145': attribute type 2 has an invalid length. [ 447.625679][T10924] : entered promiscuous mode [ 448.093135][T10929] lo speed is unknown, defaulting to 1000 [ 448.959494][T10937] overlayfs: failed to clone upperpath [ 449.421687][ T30] audit: type=1400 audit(1746042281.950:451): avc: denied { shutdown } for pid=10950 comm="syz.1.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 449.442903][T10951] 9pnet_fd: Insufficient options for proto=fd [ 449.865636][T10960] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 449.873070][T10960] IPv6: NLM_F_CREATE should be set when creating new route [ 450.428096][T10971] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1160'. [ 450.532940][ T30] audit: type=1400 audit(1746042283.040:452): avc: denied { setopt } for pid=10965 comm="syz.0.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 451.054595][T10974] tmpfs: Bad value for 'gid' [ 451.063485][T10974] tmpfs: Bad value for 'gid' [ 451.278799][T10981] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1165'. [ 451.372017][ T5853] IPVS: starting estimator thread 0... [ 451.463289][T10987] IPVS: using max 49 ests per chain, 117600 per kthread [ 452.387488][T11017] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1175'. [ 453.154138][T11029] fuse: Unknown parameter 'fd0x0000000000000007' [ 453.736897][ T30] audit: type=1800 audit(1746042286.270:453): pid=11029 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1177" name="SYSV00000000" dev="hugetlbfs" ino=12 res=0 errno=0 [ 454.923577][T11046] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1181'. [ 454.967016][T11023] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1178'. [ 455.375143][T11019] ALSA: mixer_oss: invalid OSS volume '' [ 456.369184][T11069] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1190'. [ 456.873133][T11086] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1194'. [ 458.114991][T11093] fuse: Bad value for 'fd' [ 458.341771][T11098] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 458.367897][ T971] lo speed is unknown, defaulting to 1000 [ 458.610356][T11107] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1203'. [ 458.624402][T11107] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1203'. [ 459.582605][T11121] fuse: Unknown parameter 'fd0x0000000000000008' [ 459.949078][ T30] audit: type=1800 audit(1746042292.210:454): pid=11121 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1200" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 460.379445][ T30] audit: type=1400 audit(1746042292.910:455): avc: denied { read write } for pid=11130 comm="syz.4.1209" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 460.384193][T11131] UHID_CREATE from different security context by process 858 (syz.4.1209), this is not allowed. [ 460.421021][ T30] audit: type=1400 audit(1746042292.910:456): avc: denied { open } for pid=11130 comm="syz.4.1209" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 460.649814][T11138] fuse: Bad value for 'fd' [ 460.947706][ T30] audit: type=1400 audit(1746042293.480:457): avc: denied { name_bind } for pid=11139 comm="syz.4.1212" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 461.377953][ T30] audit: type=1400 audit(1746042293.910:458): avc: denied { ioctl } for pid=11139 comm="syz.4.1212" path="socket:[22493]" dev="sockfs" ino=22493 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 461.508618][ T30] audit: type=1400 audit(1746042294.000:459): avc: denied { write } for pid=11139 comm="syz.4.1212" name="event3" dev="devtmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 461.573728][ T30] audit: type=1400 audit(1746042294.030:460): avc: denied { write } for pid=11139 comm="syz.4.1212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 461.609506][ T30] audit: type=1400 audit(1746042294.140:461): avc: denied { read write } for pid=11141 comm="syz.5.1213" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 461.634127][ T30] audit: type=1400 audit(1746042294.140:462): avc: denied { open } for pid=11141 comm="syz.5.1213" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 461.658380][ T30] audit: type=1400 audit(1746042294.170:463): avc: denied { ioctl } for pid=11141 comm="syz.5.1213" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 461.763633][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 461.893455][T11151] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1216'. [ 461.913317][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 461.916796][T11151] netlink: 'syz.5.1216': attribute type 5 has an invalid length. [ 461.932348][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 461.935347][T11151] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.940667][ T9] usb 5-1: can't read configurations, error -61 [ 461.948828][T11151] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.948860][T11151] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.948885][T11151] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.949202][T11151] vxlan0: entered promiscuous mode [ 462.084223][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 462.307420][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 462.317894][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 462.329308][ T9] usb 5-1: can't read configurations, error -61 [ 462.353660][ T9] usb usb5-port1: attempt power cycle [ 462.433473][T11157] fuse: Bad value for 'fd' [ 463.378287][T11166] netlink: 'syz.1.1219': attribute type 2 has an invalid length. [ 463.509354][T11172] fuse: Bad value for 'fd' [ 463.613441][ T5124] Bluetooth: hci1: command 0x0406 tx timeout [ 464.013418][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 464.910383][ T9] usb 5-1: device not accepting address 23, error -71 [ 464.922725][T11181] lo speed is unknown, defaulting to 1000 [ 465.245573][T11186] netlink: 'syz.0.1223': attribute type 2 has an invalid length. [ 465.302457][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 465.302472][ T30] audit: type=1400 audit(1746042297.830:468): avc: denied { create } for pid=11184 comm="syz.2.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 465.445775][ T30] audit: type=1400 audit(1746042297.830:469): avc: denied { write } for pid=11184 comm="syz.2.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 465.599292][T11200] overlayfs: failed to clone lowerpath [ 465.674320][ T30] audit: type=1400 audit(1746042298.210:470): avc: denied { mounton } for pid=11196 comm="syz.5.1229" path="/proc/115/task" dev="proc" ino=23609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 465.832196][T11212] gre1: entered promiscuous mode [ 466.075449][T11220] fuse: Bad value for 'fd' [ 466.421103][ T30] audit: type=1800 audit(1746042298.700:471): pid=11220 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1234" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 467.341756][T11236] gre1: entered promiscuous mode [ 467.433797][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 467.644613][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 467.660380][ T30] audit: type=1400 audit(1746042300.180:472): avc: denied { create } for pid=11248 comm="syz.5.1247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 467.684797][ T9] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 467.722233][ T9] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 467.747413][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 467.789556][ T9] usb 5-1: config 1 has no interface number 0 [ 467.817049][ T9] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 467.866855][ T9] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 467.900375][ T9] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 467.917632][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.934665][ T9] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 468.216477][ T9] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 468.578352][T11268] netlink: 'syz.1.1253': attribute type 1 has an invalid length. [ 468.639988][ T5881] usb 5-1: USB disconnect, device number 25 [ 468.646557][ T5881] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 468.718081][ T30] audit: type=1400 audit(1746042301.160:473): avc: denied { ioctl } for pid=11231 comm="syz.4.1240" path="socket:[23357]" dev="sockfs" ino=23357 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 468.763570][T11275] netlink: 'syz.1.1255': attribute type 1 has an invalid length. [ 470.517157][T11294] overlayfs: failed to clone upperpath [ 471.007836][ T30] audit: type=1800 audit(1746042303.540:474): pid=11304 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1258" name="SYSV00000000" dev="hugetlbfs" ino=11 res=0 errno=0 [ 471.704986][T11320] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 472.389727][T11327] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 472.462272][T11327] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1272'. [ 473.401119][ T5124] Bluetooth: Wrong link type (-22) [ 473.683265][ T5881] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 474.292358][T11351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 474.337409][ T5881] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 474.375215][ T5881] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 474.424932][ T5881] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 474.436018][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.576649][T11356] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1281'. [ 474.663315][ T5881] usb 5-1: string descriptor 0 read error: -71 [ 474.672646][ T5881] hub 5-1:32.0: USB hub found [ 474.690580][ T5881] hub 5-1:32.0: config failed, can't read hub descriptor (err -22) [ 474.876996][ T5881] usb 5-1: USB disconnect, device number 26 [ 474.950705][T11366] fuse: Unknown parameter 'fd0x0000000000000007' [ 475.327494][ T30] audit: type=1800 audit(1746042307.580:475): pid=11366 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1283" name="SYSV00000000" dev="hugetlbfs" ino=13 res=0 errno=0 [ 475.661101][ T30] audit: type=1400 audit(1746042308.190:476): avc: denied { mount } for pid=11374 comm="syz.2.1289" name="/" dev="autofs" ino=23790 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 476.093318][ T30] audit: type=1400 audit(1746042308.620:477): avc: denied { map } for pid=11381 comm="syz.4.1293" path="socket:[23531]" dev="sockfs" ino=23531 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 476.125876][T11383] fuse: Bad value for 'fd' [ 476.907685][T11395] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1297'. [ 476.918666][T11395] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1297'. [ 477.755238][T11403] bridge0: port 3(macsec0) entered blocking state [ 477.761888][T11403] bridge0: port 3(macsec0) entered disabled state [ 477.769426][T11403] macsec0: entered allmulticast mode [ 477.774898][T11403] veth1_macvtap: entered allmulticast mode [ 477.789437][T11403] macsec0: entered promiscuous mode [ 477.798740][T11403] bridge0: port 3(macsec0) entered blocking state [ 477.805310][T11403] bridge0: port 3(macsec0) entered forwarding state [ 479.024544][T11413] lo speed is unknown, defaulting to 1000 [ 480.219756][T11420] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1302'. [ 480.251242][T11420] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1302'. [ 480.344323][T11425] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 480.957348][T11420] kvm: pic: non byte read [ 480.964670][T11420] kvm: pic: non byte read [ 480.984115][T11420] kvm: pic: non byte read [ 480.991981][ T30] audit: type=1400 audit(1746042313.520:478): avc: denied { write } for pid=5166 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 481.040090][T11420] kvm: pic: non byte read [ 481.058451][T11420] kvm: pic: non byte read [ 481.072490][ T30] audit: type=1400 audit(1746042313.520:479): avc: denied { remove_name } for pid=5166 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 481.150856][T11420] kvm: pic: non byte read [ 481.203551][T11420] kvm: pic: non byte read [ 481.226772][T11420] kvm: pic: non byte read [ 481.240568][ T30] audit: type=1400 audit(1746042313.520:480): avc: denied { add_name } for pid=5166 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 481.263544][T11420] kvm: pic: non byte read [ 481.527546][ T30] audit: type=1400 audit(1746042314.060:481): avc: denied { getopt } for pid=11436 comm="syz.2.1306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 481.623032][T11441] netlink: 'syz.0.1307': attribute type 2 has an invalid length. [ 482.136407][T11444] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1308'. [ 482.176334][T11448] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1309'. [ 482.987157][T11465] lo speed is unknown, defaulting to 1000 [ 483.345262][T11474] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1317'. [ 484.023384][ T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 484.663574][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 484.692957][ T9] usb 5-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 484.828400][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.844320][ T9] usb 5-1: Product: syz [ 484.849465][ T9] usb 5-1: Manufacturer: syz [ 484.856666][ T9] usb 5-1: SerialNumber: syz [ 484.867473][ T9] usb 5-1: config 0 descriptor?? [ 485.183472][T11491] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1321'. [ 485.359306][ T9] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 485.580402][ T9] gspca_sn9c2028: read1 error -71 [ 485.647759][ T9] gspca_sn9c2028: read1 error -71 [ 485.680301][ T9] gspca_sn9c2028: read1 error -71 [ 485.701292][T11498] SET target dimension over the limit! [ 485.721819][ T9] sn9c2028 5-1:0.0: probe with driver sn9c2028 failed with error -71 [ 485.771100][ T9] usb 5-1: USB disconnect, device number 27 [ 485.838620][T11501] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1325'. [ 486.056242][T11514] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1329'. [ 487.212398][T11524] lo speed is unknown, defaulting to 1000 [ 487.351072][T11533] IPVS: sync thread started: state = BACKUP, mcast_ifn = gretap0, syncid = 2, id = 0 [ 487.584491][T11536] netlink: 'syz.2.1335': attribute type 2 has an invalid length. [ 487.995968][T11537] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 488.606773][T11542] lo speed is unknown, defaulting to 1000 [ 488.939908][T11554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1340'. [ 488.961851][T11554] netlink: 'syz.2.1340': attribute type 30 has an invalid length. [ 489.000305][T11554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1340'. [ 489.047721][T11559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1344'. [ 489.058172][T11559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1344'. [ 489.069929][T11558] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1343'. [ 489.563388][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 489.723227][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 489.827822][ T9] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 489.843439][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.973590][ T9] usb 5-1: config 0 descriptor?? [ 489.988791][ T30] audit: type=1400 audit(1746042322.510:482): avc: denied { read } for pid=11576 comm="syz.1.1352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 490.050870][ T9] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 490.276961][T11580] lo speed is unknown, defaulting to 1000 [ 490.285958][T11561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1345'. [ 490.899194][ T9] gspca_vc032x: reg_r err -110 [ 490.904095][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 490.909403][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 490.919263][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 490.924876][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 490.930178][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 490.966074][T11561] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1345'. [ 490.997128][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 491.004259][T11599] lo speed is unknown, defaulting to 1000 [ 491.010498][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 491.032700][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 491.112611][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 491.141334][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 491.167254][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 491.186831][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 491.221380][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 491.229319][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 491.247824][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 491.269242][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 491.292342][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 491.300153][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 491.320407][ T9] gspca_vc032x: Unknown sensor... [ 491.352483][ T9] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 491.989140][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 492.235261][ T9] usb 6-1: too many configurations: 86, using maximum allowed: 8 [ 492.390529][T11605] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1354'. [ 492.399460][ T30] audit: type=1400 audit(1746042324.920:483): avc: denied { create } for pid=11586 comm="syz.5.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 492.472472][ T30] audit: type=1400 audit(1746042324.920:484): avc: denied { write } for pid=11586 comm="syz.5.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 492.512624][ T3161] usb 5-1: USB disconnect, device number 28 [ 493.031587][T11639] lo speed is unknown, defaulting to 1000 [ 495.039115][ T9] usb 6-1: string descriptor 0 read error: -71 [ 495.046616][ T9] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 495.062425][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.088251][ T9] usb 6-1: can't set config #1, error -71 [ 495.141334][ T9] usb 6-1: USB disconnect, device number 2 [ 495.423541][ T30] audit: type=1800 audit(1746042327.900:485): pid=11649 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1359" name="SYSV00000000" dev="hugetlbfs" ino=9 res=0 errno=0 [ 495.573262][T11219] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 495.723333][T11219] usb 5-1: Using ep0 maxpacket: 32 [ 495.730050][T11219] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.740165][T11219] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 495.749146][T11219] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 495.758215][T11219] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.768347][T11219] usb 5-1: config 0 descriptor?? [ 495.843261][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 496.003212][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 496.018037][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.033011][ T9] usb 6-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 496.042836][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.056684][ T9] usb 6-1: config 0 descriptor?? [ 496.770142][ T9] kye 0003:0458:5013.0003: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 496.811207][ T9] kye 0003:0458:5013.0003: hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.5-1/input0 [ 496.822435][ T9] kye 0003:0458:5013.0003: tablet-enabling feature report not found [ 496.832896][ T9] kye 0003:0458:5013.0003: tablet enabling failed [ 496.859371][ T9] usb 6-1: USB disconnect, device number 3 [ 497.160237][T11674] fuse: Bad value for 'fd' [ 498.359202][T11687] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1372'. [ 498.371332][ T9] usb 5-1: USB disconnect, device number 29 [ 498.691376][ T30] audit: type=1326 audit(1746042331.200:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11698 comm="syz.4.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65938e969 code=0x7ffc0000 [ 498.742703][ T30] audit: type=1326 audit(1746042331.200:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11698 comm="syz.4.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65938e969 code=0x7ffc0000 [ 498.785854][ T30] audit: type=1326 audit(1746042331.200:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11698 comm="syz.4.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fe65938e969 code=0x7ffc0000 [ 498.810826][ T30] audit: type=1326 audit(1746042331.200:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11698 comm="syz.4.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65938e969 code=0x7ffc0000 [ 498.902117][ T30] audit: type=1326 audit(1746042331.200:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11698 comm="syz.4.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65938e969 code=0x7ffc0000 [ 498.936922][ T30] audit: type=1326 audit(1746042331.200:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11698 comm="syz.4.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fe65938e969 code=0x7ffc0000 [ 499.027261][ T30] audit: type=1326 audit(1746042331.460:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11698 comm="syz.4.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65938e969 code=0x7ffc0000 [ 499.053625][ T30] audit: type=1326 audit(1746042331.460:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11698 comm="syz.4.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65938e969 code=0x7ffc0000 [ 499.136608][ T30] audit: type=1400 audit(1746042331.670:494): avc: denied { create } for pid=11711 comm="syz.5.1381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 500.283318][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 500.443444][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 500.451493][ T9] usb 6-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 500.461871][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.470968][ T9] usb 6-1: Product: syz [ 500.475256][ T9] usb 6-1: Manufacturer: syz [ 500.479911][ T9] usb 6-1: SerialNumber: syz [ 500.551255][ T9] usb 6-1: config 0 descriptor?? [ 500.857409][ T5905] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 500.866697][ T9] speedtch 6-1:0.0: speedtch_bind: data interface not found! [ 500.875274][ T9] speedtch 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 500.885917][ T9] usb 6-1: USB disconnect, device number 4 [ 501.013327][ T5905] usb 5-1: Using ep0 maxpacket: 16 [ 501.020995][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 169, changing to 7 [ 501.032121][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 25965, setting to 1024 [ 501.045502][ T5905] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 501.054998][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.062975][ T5905] usb 5-1: Product: syz [ 501.067200][ T5905] usb 5-1: Manufacturer: syz [ 501.071797][ T5905] usb 5-1: SerialNumber: syz [ 501.079448][ T5905] usb 5-1: config 0 descriptor?? [ 501.087408][ T5905] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 501.096902][ T5905] em28xx 5-1:0.0: DVB interface 0 found: isoc [ 501.166327][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.172688][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.287627][T11731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.296632][T11731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.447189][ T5905] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 501.477534][T11749] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1393'. [ 501.529841][ T5905] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 501.535997][T11751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1394'. [ 501.538120][ T5905] em28xx 5-1:0.0: board has no eeprom [ 501.623202][ T5905] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 501.631053][ T5905] em28xx 5-1:0.0: dvb set to isoc mode. [ 501.637651][ T971] em28xx 5-1:0.0: Binding DVB extension [ 501.648735][ T5905] usb 5-1: USB disconnect, device number 30 [ 501.660879][ T5905] em28xx 5-1:0.0: Disconnecting em28xx [ 501.691530][ T971] em28xx 5-1:0.0: Registering input extension [ 501.698531][ T5905] em28xx 5-1:0.0: Closing input extension [ 501.715519][ T5905] em28xx 5-1:0.0: Freeing device [ 501.723307][T11219] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 501.883302][T11219] usb 6-1: Using ep0 maxpacket: 16 [ 501.891554][T11219] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 501.901164][T11219] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 501.909479][T11219] usb 6-1: Manufacturer: syz [ 501.916349][T11219] usb 6-1: config 0 descriptor?? [ 502.023278][ T5905] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 502.140124][T11219] usb 6-1: Cannot retrieve CPort count: -71 [ 502.148951][T11219] usb 6-1: Cannot retrieve CPort count: -71 [ 502.155287][T11219] es2_ap_driver 6-1:0.0: probe with driver es2_ap_driver failed with error -71 [ 502.167670][T11219] usb 6-1: USB disconnect, device number 5 [ 502.186028][ T5905] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 502.197068][ T5905] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 502.206083][ T5905] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 502.217931][ T5905] usb 5-1: config 220 has no interface number 2 [ 502.224301][ T5905] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 502.238711][ T5905] usb 5-1: config 220 interface 0 has no altsetting 0 [ 502.246904][ T5905] usb 5-1: config 220 interface 76 has no altsetting 0 [ 502.253836][ T5905] usb 5-1: config 220 interface 1 has no altsetting 0 [ 502.262165][ T5905] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 502.271316][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.279727][ T5905] usb 5-1: Product: syz [ 502.284016][ T5905] usb 5-1: Manufacturer: syz [ 502.288605][ T5905] usb 5-1: SerialNumber: syz [ 502.442768][T11759] 9pnet_fd: Insufficient options for proto=fd [ 502.517832][ T5905] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 502.526231][ T5905] usb 5-1: No valid video chain found. [ 502.531777][ T5905] usb 5-1: selecting invalid altsetting 0 [ 502.549066][ T5905] usb 5-1: selecting invalid altsetting 0 [ 502.555959][ T5905] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 502.570349][ T5905] usb 5-1: USB disconnect, device number 31 [ 503.187953][T11778] FAULT_INJECTION: forcing a failure. [ 503.187953][T11778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 503.217475][T11778] CPU: 0 UID: 0 PID: 11778 Comm: syz.4.1402 Not tainted 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 503.217501][T11778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 503.217509][T11778] Call Trace: [ 503.217514][T11778] [ 503.217520][T11778] dump_stack_lvl+0x16c/0x1f0 [ 503.217538][T11778] should_fail_ex+0x512/0x640 [ 503.217555][T11778] _copy_from_user+0x2e/0xd0 [ 503.217570][T11778] copy_from_sockptr_offset.constprop.0+0x153/0x1a0 [ 503.217584][T11778] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 503.217600][T11778] do_ipv6_setsockopt+0x865/0x4420 [ 503.217614][T11778] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 503.217627][T11778] ? find_held_lock+0x2b/0x80 [ 503.217641][T11778] ? avc_has_perm_noaudit+0x117/0x3b0 [ 503.217660][T11778] ? avc_has_perm_noaudit+0x149/0x3b0 [ 503.217679][T11778] ? avc_has_perm+0x11a/0x1c0 [ 503.217696][T11778] ? __pfx_avc_has_perm+0x10/0x10 [ 503.217717][T11778] ? sock_has_perm+0x259/0x2f0 [ 503.217729][T11778] ? __pfx_sock_has_perm+0x10/0x10 [ 503.217743][T11778] ? ipv6_setsockopt+0xcb/0x170 [ 503.217753][T11778] ipv6_setsockopt+0xcb/0x170 [ 503.217765][T11778] rawv6_setsockopt+0xc2/0x510 [ 503.217783][T11778] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 503.217800][T11778] ? selinux_socket_setsockopt+0x6a/0x80 [ 503.217812][T11778] ? sock_common_setsockopt+0x2e/0xf0 [ 503.217825][T11778] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 503.217838][T11778] do_sock_setsockopt+0x221/0x470 [ 503.217851][T11778] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 503.217878][T11778] __sys_setsockopt+0x1a0/0x230 [ 503.217908][T11778] __x64_sys_setsockopt+0xbd/0x160 [ 503.217931][T11778] ? syscall_trace_enter+0xee/0x260 [ 503.217955][T11778] do_syscall_64+0xcd/0x260 [ 503.217971][T11778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.217983][T11778] RIP: 0033:0x7fe65938e969 [ 503.217991][T11778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.218002][T11778] RSP: 002b:00007fe65a1aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 503.218013][T11778] RAX: ffffffffffffffda RBX: 00007fe6595b5fa0 RCX: 00007fe65938e969 [ 503.218020][T11778] RDX: 00000000000000ca RSI: 0000000000000029 RDI: 0000000000000003 [ 503.218026][T11778] RBP: 00007fe65a1aa090 R08: 000000000000000c R09: 0000000000000000 [ 503.218032][T11778] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 503.218038][T11778] R13: 0000000000000000 R14: 00007fe6595b5fa0 R15: 00007ffe2e7b40b8 [ 503.218052][T11778] [ 503.552859][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 503.552873][ T30] audit: type=1326 audit(1746042336.070:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11763 comm="syz.0.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40f98e969 code=0x7fc00000 [ 503.813828][T11789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1406'. [ 504.123387][T11800] netlink: zone id is out of range [ 504.173043][T11800] netlink: set zone limit has 4 unknown bytes [ 504.865165][T11807] Cannot find del_set index 4 as target [ 506.715749][ T30] audit: type=1400 audit(1746042339.250:497): avc: denied { setattr } for pid=11828 comm="syz.5.1418" name="tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 506.744379][T11832] netlink: 'syz.4.1417': attribute type 2 has an invalid length. [ 506.757212][T11832] : entered promiscuous mode [ 506.854510][ T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 506.855724][ T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 506.872598][ T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 506.884369][ T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 506.893687][ T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 506.954331][T11833] lo speed is unknown, defaulting to 1000 [ 507.060377][ T5124] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 507.062233][ T5124] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 507.077993][ T5124] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 507.080110][ T5124] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 507.080745][ T5124] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 507.238028][T11838] lo speed is unknown, defaulting to 1000 [ 507.314752][T11833] chnl_net:caif_netlink_parms(): no params data found [ 507.324037][T11837] lo speed is unknown, defaulting to 1000 [ 508.187522][T11833] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.200974][T11833] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.208276][T11833] bridge_slave_0: entered allmulticast mode [ 508.217146][T11833] bridge_slave_0: entered promiscuous mode [ 508.224806][T11833] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.231955][T11833] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.239367][T11833] bridge_slave_1: entered allmulticast mode [ 508.246048][T11833] bridge_slave_1: entered promiscuous mode [ 508.274402][T11833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.290198][T11833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.366763][T11833] team0: Port device team_slave_0 added [ 508.379841][T11833] team0: Port device team_slave_1 added [ 508.490581][T11833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.498086][T11833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.530297][T11833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.549048][T11833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.556225][T11833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.582749][T11833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.593349][ T5905] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 508.597951][T11837] chnl_net:caif_netlink_parms(): no params data found [ 508.700887][T11833] hsr_slave_0: entered promiscuous mode [ 508.707431][T11833] hsr_slave_1: entered promiscuous mode [ 508.717175][T11833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 508.724904][T11833] Cannot create hsr debugfs directory [ 508.813010][T11837] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.820488][T11837] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.827849][T11837] bridge_slave_0: entered allmulticast mode [ 508.836430][T11837] bridge_slave_0: entered promiscuous mode [ 508.956504][ T54] Bluetooth: hci6: command tx timeout [ 509.140604][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.153785][ T54] Bluetooth: hci7: command tx timeout [ 509.201933][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.212029][ T5905] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 509.232154][ T5905] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 509.234910][T11837] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.241398][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.249701][T11837] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.259664][ T5905] usb 6-1: config 0 descriptor?? [ 509.272652][T11837] bridge_slave_1: entered allmulticast mode [ 509.279600][T11837] bridge_slave_1: entered promiscuous mode [ 509.322284][T11837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.338808][T11837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.388445][T11837] team0: Port device team_slave_0 added [ 509.402017][T11837] team0: Port device team_slave_1 added [ 509.430412][T11837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.437676][T11837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.463535][ C0] vkms_vblank_simulate: vblank timer overrun [ 509.470282][T11837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.483087][T11837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.490560][T11837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.519867][T11837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.647879][T11837] hsr_slave_0: entered promiscuous mode [ 509.658649][T11837] hsr_slave_1: entered promiscuous mode [ 509.666422][T11837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 509.674506][T11837] Cannot create hsr debugfs directory [ 509.743255][T11833] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 509.760892][T11833] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 509.784888][T11833] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 509.823492][T11833] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 509.828882][T11856] SELinux: Context system_u:object_r:devicekit_disk_exec_t:s0 is not valid (left unmapped). [ 509.842681][ T30] audit: type=1400 audit(1746042342.380:498): avc: denied { relabelto } for pid=11855 comm="syz.5.1421" name="bus" dev="tmpfs" ino=392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:devicekit_disk_exec_t:s0" [ 509.870732][ T30] audit: type=1400 audit(1746042342.380:499): avc: denied { associate } for pid=11855 comm="syz.5.1421" name="bus" dev="tmpfs" ino=392 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:devicekit_disk_exec_t:s0" [ 509.898551][ C0] vkms_vblank_simulate: vblank timer overrun [ 509.997796][T11876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.071348][ T5905] usbhid 6-1:0.0: can't add hid device: -71 [ 510.080346][ T5905] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 510.143998][ T5905] usb 6-1: USB disconnect, device number 6 [ 510.230827][T11837] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 510.241551][T11837] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 510.252763][T11837] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 510.264862][T11833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.274233][T11837] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 510.299259][T11833] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.376068][T11837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.391998][ T6000] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.399084][ T6000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.425463][T11833] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 510.438768][T11833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 510.453978][ T6000] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.461054][ T6000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.531491][T11837] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.548314][ T6000] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.555455][ T6000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.571921][T11817] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.579541][T11817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.667613][T11883] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1425'. [ 510.848545][T11833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 511.328289][ T54] Bluetooth: hci6: command tx timeout [ 511.335329][ T5124] Bluetooth: hci7: command tx timeout [ 511.787235][T11837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 511.999246][T11833] veth0_vlan: entered promiscuous mode [ 512.018872][T11833] veth1_vlan: entered promiscuous mode [ 512.058575][T11833] veth0_macvtap: entered promiscuous mode [ 512.069739][T11833] veth1_macvtap: entered promiscuous mode [ 512.092523][T11833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.130720][T11833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.140747][T11833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.151399][T11833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.161592][T11833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.172239][T11833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.182151][T11833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.658916][ T53] wlan1: Trigger new scan to find an IBSS to join [ 512.668265][T11833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.690957][T11833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.702000][T11833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.716413][T11833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 512.740339][T11833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.751106][T11833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.767508][T11833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.782259][T11833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.820117][T11833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.836945][T11833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.847958][T11833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.859677][T11916] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1429'. [ 512.872016][T11833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.882120][T11833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.904486][T11833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.920406][T11833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 512.940061][T11916] team_slave_0: entered promiscuous mode [ 512.946049][T11916] team_slave_1: entered promiscuous mode [ 512.962520][T11916] macvtap1: entered promiscuous mode [ 512.968090][T11916] team0: entered promiscuous mode [ 512.977475][T11916] macvtap1: entered allmulticast mode [ 512.983376][T11916] team0: entered allmulticast mode [ 512.991049][T11916] team_slave_0: entered allmulticast mode [ 512.999832][T11916] team_slave_1: entered allmulticast mode [ 513.022131][T11916] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 513.047899][T11833] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.057292][ T30] audit: type=1400 audit(1746042345.580:500): avc: denied { execute_no_trans } for pid=11917 comm="syz.4.1430" path=2F6D656D66643A202864656C6574656429 dev="hugetlbfs" ino=25914 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 513.062275][T11918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1430'. [ 513.085265][T11833] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.101843][T11833] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.111219][T11833] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.177583][T11925] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 513.317191][T11837] veth0_vlan: entered promiscuous mode [ 513.393257][ T5124] Bluetooth: hci7: command tx timeout [ 513.398731][ T54] Bluetooth: hci6: command tx timeout [ 513.418331][T11837] veth1_vlan: entered promiscuous mode [ 513.942039][ T30] audit: type=1800 audit(1746042346.450:501): pid=11935 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1433" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 513.999962][ T3000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.000327][T11837] veth0_macvtap: entered promiscuous mode [ 514.012290][ T3000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.035708][T11837] veth1_macvtap: entered promiscuous mode [ 514.132807][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.149392][T11837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.150280][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.160822][T11837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.180023][T11837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.190620][T11837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.201670][T11837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.212312][T11837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.222487][T11837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.247604][T11837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.262478][T11837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.273788][T11837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.283865][T11837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.294504][T11837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.309606][T11837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 514.321603][T11837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.327161][ T30] audit: type=1400 audit(1746042346.860:502): avc: granted { setsecparam } for pid=11937 comm="syz.4.1434" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 514.334130][T11837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.388349][T11837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.398911][T11837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.408866][T11837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.419382][T11837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.429186][T11837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.439853][T11837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.450321][T11837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.461110][T11837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.471306][T11837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.481763][T11837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.493104][T11837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.521684][T11837] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.534873][T11837] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.543875][T11837] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.552564][T11837] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.563220][ T9] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 514.706875][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.731026][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 514.748509][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.758545][ T9] usb 5-1: config 1 interface 0 altsetting 5 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 514.784425][ T9] usb 5-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 514.816160][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 514.826183][T11814] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.839417][T11814] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.859809][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 514.871856][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.899239][ T9] usb 5-1: Product: ж [ 514.911601][ T9] usb 5-1: Manufacturer: э [ 514.917763][ T9] usb 5-1: SerialNumber: ᬔ傯皭ⷤ䕜됩㍦ଂ垄짶俻炌銕ᗗ룻ᕋ疈 ꋿ쾲졧◰꒜꼜納ᅊⳂ좬嘱䓼鉼賰ߞ飞팊뉙春⛧齓⑨훒出炠徿¬ꋐ㔃눧뒧⽋砇㋗ⴛ映渕樿®山蚨怍ᥐ闿㇚㫜与覍찀ﷷ썖쎼䟞ʃﲯ⎓튃鮷ꏭ稬綇缦⫍䞤㺁ꭊ▹兞杵襽쨴ᘋꝌ韓ꉦ [ 515.018623][T11938] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 515.151870][T11957] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1437'. [ 515.161353][ T30] audit: type=1400 audit(1746042347.680:503): avc: denied { unmount } for pid=11954 comm="syz.7.1438" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 515.185284][T11957] netlink: 'syz.6.1437': attribute type 5 has an invalid length. [ 515.205326][T11957] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.214161][T11957] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.222889][T11957] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.231722][T11957] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.259587][T11957] vxlan0: entered promiscuous mode [ 515.269430][ T9] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 5 proto 1 vid 0x0525 pid 0xA4A8 [ 515.290925][ T9] usb 5-1: USB disconnect, device number 32 [ 515.455257][ T9] usblp0: removed [ 515.494049][ T54] Bluetooth: hci6: command tx timeout [ 515.502039][ T54] Bluetooth: hci7: command tx timeout [ 516.503360][ T30] audit: type=1400 audit(1746042349.030:504): avc: denied { ioctl } for pid=11971 comm="syz.6.1443" path="socket:[27348]" dev="sockfs" ino=27348 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 516.535705][T11819] wlan1: Trigger new scan to find an IBSS to join [ 516.792670][T11980] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1445'. [ 516.803945][T11980] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 517.246473][T11994] FAULT_INJECTION: forcing a failure. [ 517.246473][T11994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 517.259837][T11994] CPU: 1 UID: 0 PID: 11994 Comm: syz.4.1450 Not tainted 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 517.259859][T11994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 517.259868][T11994] Call Trace: [ 517.259874][T11994] [ 517.259880][T11994] dump_stack_lvl+0x16c/0x1f0 [ 517.259905][T11994] should_fail_ex+0x512/0x640 [ 517.259929][T11994] _copy_from_user+0x2e/0xd0 [ 517.259953][T11994] copy_msghdr_from_user+0x98/0x160 [ 517.259969][T11994] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 517.259998][T11994] ___sys_sendmsg+0xfe/0x1d0 [ 517.260015][T11994] ? __pfx____sys_sendmsg+0x10/0x10 [ 517.260068][T11994] __sys_sendmsg+0x16d/0x220 [ 517.260084][T11994] ? __pfx___sys_sendmsg+0x10/0x10 [ 517.260108][T11994] ? rcu_is_watching+0x12/0xc0 [ 517.260134][T11994] do_syscall_64+0xcd/0x260 [ 517.260157][T11994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.260173][T11994] RIP: 0033:0x7fe65938e969 [ 517.260186][T11994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 517.260202][T11994] RSP: 002b:00007fe65a1aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 517.260219][T11994] RAX: ffffffffffffffda RBX: 00007fe6595b5fa0 RCX: 00007fe65938e969 [ 517.260230][T11994] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 517.260240][T11994] RBP: 00007fe65a1aa090 R08: 0000000000000000 R09: 0000000000000000 [ 517.260250][T11994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 517.260260][T11994] R13: 0000000000000000 R14: 00007fe6595b5fa0 R15: 00007ffe2e7b40b8 [ 517.260282][T11994] [ 517.423017][ C1] vkms_vblank_simulate: vblank timer overrun [ 517.522010][T11996] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1451'. [ 517.574825][ T5899] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 517.593466][T11996] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1451'. [ 517.733370][ T5899] usb 7-1: Using ep0 maxpacket: 8 [ 517.763879][ T5899] usb 7-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 517.788222][ T5899] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.829501][ T5899] usb 7-1: Product: syz [ 517.851002][ T5899] usb 7-1: Manufacturer: syz [ 517.873865][ T5899] usb 7-1: SerialNumber: syz [ 517.984036][T11817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.025159][ T5899] usb 7-1: config 0 descriptor?? [ 518.149692][ T5899] gspca_main: sq930x-2.14.0 probing 2770:930c [ 518.483753][T12013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.764512][ T30] audit: type=1400 audit(1746042351.050:505): avc: denied { module_request } for pid=12002 comm="syz.7.1454" kmod="nfct-helper-snmp" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 518.963260][ T5899] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 519.055242][ T5899] sq930x 7-1:0.0: probe with driver sq930x failed with error -71 [ 519.328331][ T5899] usb 7-1: USB disconnect, device number 2 [ 519.429402][T12013] xt_CT: No such helper "snmp" [ 520.444021][T12027] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 520.674506][T12027] evm: overlay not supported [ 520.968342][ T30] audit: type=1400 audit(1746042353.500:506): avc: denied { unmount } for pid=10513 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 523.505225][T12031] ICMPv6: NA: ff:ff:ff:ff:ff:ff advertised our address fe80::aa on syz_tun! [ 523.750089][T12048] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1466'. [ 523.787182][T12048] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1466'. [ 523.810932][T12045] binder: 12043:12045 ioctl c018620c 200000000040 returned -1 [ 523.948025][ T5124] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 523.958788][ T30] audit: type=1400 audit(1746042356.480:507): avc: denied { connect } for pid=12051 comm="syz.4.1467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 523.982149][ T5124] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 523.993553][ T5124] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 524.002287][T12055] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 524.009532][T11219] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 524.017713][T12055] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 524.052780][T12050] lo speed is unknown, defaulting to 1000 [ 524.173219][T11219] usb 8-1: Using ep0 maxpacket: 8 [ 524.183934][T11219] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 524.218441][T11219] usb 8-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 524.229404][T11219] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.241516][T12050] chnl_net:caif_netlink_parms(): no params data found [ 524.253254][T11219] usb 8-1: Product: syz [ 524.261621][T11219] usb 8-1: Manufacturer: syz [ 524.273495][T11219] usb 8-1: SerialNumber: syz [ 524.280821][T11219] usb 8-1: config 0 descriptor?? [ 524.289989][T11219] ati_remote 8-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 524.370872][T12050] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.396612][T12050] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.404769][T12050] bridge_slave_0: entered allmulticast mode [ 524.412718][T12050] bridge_slave_0: entered promiscuous mode [ 524.421362][T12050] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.428728][T12050] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.437455][T12050] bridge_slave_1: entered allmulticast mode [ 524.444879][T12050] bridge_slave_1: entered promiscuous mode [ 524.490397][T12050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.505943][T12050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.507395][ T5899] usb 8-1: USB disconnect, device number 2 [ 524.578934][T12050] team0: Port device team_slave_0 added [ 524.590950][T12050] team0: Port device team_slave_1 added [ 524.649660][T12050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.657915][T12050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.693070][T12050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.711582][T12050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.720295][T12050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.752147][T12050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.835504][T11219] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 524.859990][T12050] hsr_slave_0: entered promiscuous mode [ 525.438820][T12050] hsr_slave_1: entered promiscuous mode [ 525.445175][T12050] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 525.454574][T12050] Cannot create hsr debugfs directory [ 526.015704][T11219] usb 7-1: config 252 has an invalid interface number: 101 but max is 0 [ 526.024738][T11219] usb 7-1: config 252 has no interface number 0 [ 526.031032][T11219] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 526.042326][T11219] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.043438][ T54] Bluetooth: hci8: command tx timeout [ 526.061330][T11219] pvrusb2: Hardware description: Terratec Grabster AV400 [ 526.107570][T11219] pvrusb2: ********** [ 526.137679][T11219] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 526.166979][T11219] pvrusb2: Important functionality might not be entirely working. [ 526.293253][T11219] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 526.305824][T11219] pvrusb2: ********** [ 526.316457][ T2332] pvrusb2: Invalid write control endpoint [ 526.330436][T11219] usb 7-1: USB disconnect, device number 3 [ 526.389112][ T2332] pvrusb2: Invalid write control endpoint [ 526.402689][ T2332] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 526.414365][ T2332] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 526.422199][ T2332] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 526.423015][ T30] audit: type=1400 audit(1746042358.950:508): avc: denied { sqpoll } for pid=12079 comm="syz.7.1473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 526.454130][ T2332] pvrusb2: Device being rendered inoperable [ 526.464615][ T2332] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 526.472261][ T2332] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 526.493700][T12080] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1473'. [ 526.503292][T12080] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1473'. [ 526.514875][ T2332] pvrusb2: Attached sub-driver cx25840 [ 526.526695][ T2332] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 526.540308][ T30] audit: type=1400 audit(1746042359.080:509): avc: denied { ioctl } for pid=12079 comm="syz.7.1473" path="/dev/input/event3" dev="devtmpfs" ino=987 ioctlcmd=0x45e0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 526.548808][ T2332] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 526.585310][T12050] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 526.599809][T12050] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 526.610622][T12050] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 526.627380][T12050] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 526.756300][T12050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.786540][T12050] 8021q: adding VLAN 0 to HW filter on device team0 [ 526.799264][ T2964] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.806402][ T2964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.851250][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.858426][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.912018][T12050] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 527.099860][T12097] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1477'. [ 527.846168][T12050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.801389][ T54] Bluetooth: hci8: command tx timeout [ 528.934134][T12106] lo speed is unknown, defaulting to 1000 [ 529.212493][T12119] xt_hashlimit: size too large, truncated to 1048576 [ 529.270885][T12123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1482'. [ 529.493283][T12127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 529.986415][ T5850] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 530.182743][T12149] netlink: 'syz.7.1489': attribute type 2 has an invalid length. [ 530.197131][T12149] : entered promiscuous mode [ 530.314766][ T5850] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 530.324852][ T5850] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 530.338620][ T5850] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 530.349897][ T5850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.364395][T12050] veth0_vlan: entered promiscuous mode [ 530.477596][T12050] veth1_vlan: entered promiscuous mode [ 530.522130][T12050] veth0_macvtap: entered promiscuous mode [ 530.536651][T12050] veth1_macvtap: entered promiscuous mode [ 530.601645][ T5850] usb 5-1: usb_control_msg returned -32 [ 530.617651][ T5850] usbtmc 5-1:16.0: can't read capabilities [ 530.672553][T12153] lo speed is unknown, defaulting to 1000 [ 530.691516][T12050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.745248][T12050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.809760][T12050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.833617][ T54] Bluetooth: hci8: command tx timeout [ 530.913649][T12050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.069382][T12050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.120044][T12050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.551005][T12050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.566537][T12050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.577594][T12050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.601499][T12050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.626626][T12050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.660417][T12050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.690803][T12050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.707198][T12050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.723089][T12050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 531.832575][T12050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.865935][T12050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.899576][T12050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.928562][T12050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.948438][T12050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.960575][T12050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.970677][T12050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.982465][T12050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.992662][T12050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.008784][T12050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.021135][T12050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.038253][T12050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.038970][ T30] audit: type=1400 audit(1746042364.570:510): avc: denied { create } for pid=12163 comm="syz.5.1493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 532.048838][T12050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.088600][T12050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.145223][T12050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 532.279979][T12050] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.290048][T12050] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.302808][ T30] audit: type=1400 audit(1746042364.840:511): avc: denied { ioctl } for pid=12165 comm="syz.5.1494" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 532.720219][T12050] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.729113][T12050] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.771014][ T5899] usb 5-1: USB disconnect, device number 33 [ 532.914423][ T54] Bluetooth: hci8: command tx timeout [ 532.932274][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.958703][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.070459][ T3000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.083985][ T3000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.533358][ T5899] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 533.924475][ T5899] usb 5-1: Using ep0 maxpacket: 32 [ 533.974398][ T5899] usb 5-1: unable to get BOS descriptor or descriptor too short [ 534.007853][ T5899] usb 5-1: config 0 has an invalid interface number: 82 but max is 2 [ 534.030832][ T5899] usb 5-1: config 0 has an invalid interface number: 159 but max is 2 [ 534.051130][ T5899] usb 5-1: config 0 has an invalid interface number: 156 but max is 2 [ 534.084809][ T5899] usb 5-1: config 0 has no interface number 0 [ 534.102082][ T5899] usb 5-1: config 0 has no interface number 1 [ 534.129077][ T5899] usb 5-1: config 0 has no interface number 2 [ 534.183282][ T5899] usb 5-1: config 0 interface 82 has no altsetting 0 [ 534.223402][ T5899] usb 5-1: config 0 interface 159 has no altsetting 0 [ 534.296832][ T5899] usb 5-1: config 0 interface 156 has no altsetting 0 [ 534.318514][ T5899] usb 5-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice=b2.1d [ 534.340789][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.369248][ T5899] usb 5-1: Product: syz [ 534.379113][ T5899] usb 5-1: Manufacturer: syz [ 534.391805][ T5899] usb 5-1: SerialNumber: syz [ 534.453263][ T9] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 534.454833][ T5899] usb 5-1: config 0 descriptor?? [ 534.630203][ T9] usb 8-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 534.661486][ T9] usb 8-1: config 32 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 534.687899][ T9] usb 8-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 534.704418][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.085481][T12213] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1504'. [ 535.093801][ T30] audit: type=1400 audit(1746042367.620:512): avc: denied { getopt } for pid=12189 comm="syz.7.1500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 535.312101][ T5899] usb 5-1: USB disconnect, device number 34 [ 535.486049][ T6127] udevd[6127]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.82/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 535.630886][ T5937] udevd[5937]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.159/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 535.671924][ T5800] udevd[5800]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.156/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 535.749631][ T30] audit: type=1400 audit(1746042368.270:513): avc: denied { bind } for pid=12223 comm="syz.5.1508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 535.791040][ T30] audit: type=1400 audit(1746042368.270:514): avc: denied { write } for pid=12223 comm="syz.5.1508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 535.923704][T12228] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1509'. [ 535.962092][T12228] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1509'. [ 536.393393][T11219] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 536.603575][T11219] usb 5-1: Using ep0 maxpacket: 32 [ 536.610811][T11219] usb 5-1: unable to get BOS descriptor or descriptor too short [ 536.779037][T11219] usb 5-1: config 0 has an invalid interface number: 82 but max is 2 [ 536.793788][T11219] usb 5-1: config 0 has an invalid interface number: 159 but max is 2 [ 536.806140][T11219] usb 5-1: config 0 has an invalid interface number: 156 but max is 2 [ 536.815811][T11219] usb 5-1: config 0 has no interface number 0 [ 536.827776][T11219] usb 5-1: config 0 has no interface number 1 [ 536.836658][T11219] usb 5-1: config 0 has no interface number 2 [ 536.845884][T11219] usb 5-1: config 0 interface 82 has no altsetting 0 [ 536.853342][T11219] usb 5-1: config 0 interface 159 has no altsetting 0 [ 536.868662][T11219] usb 5-1: config 0 interface 156 has no altsetting 0 [ 536.881590][T11219] usb 5-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice=b2.1d [ 536.894667][T11219] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.902981][T11219] usb 5-1: Product: syz [ 536.908025][T11219] usb 5-1: Manufacturer: syz [ 536.912807][T11219] usb 5-1: SerialNumber: syz [ 536.924690][T11219] usb 5-1: config 0 descriptor?? [ 537.084671][T12245] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1514'. [ 537.851771][T11219] usb 5-1: USB disconnect, device number 35 [ 537.889342][T12255] gre1: entered promiscuous mode [ 538.031161][ T5799] udevd[5799]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.82/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 538.056122][ T6127] udevd[6127]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.159/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 538.238216][ T30] audit: type=1400 audit(1746042370.769:515): avc: denied { create } for pid=12258 comm="syz.4.1518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 538.297761][ T9] usb 8-1: string descriptor 0 read error: -71 [ 538.338961][ T30] audit: type=1400 audit(1746042370.769:516): avc: denied { bind } for pid=12258 comm="syz.4.1518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 538.536430][T12270] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1521'. [ 538.604963][ T9] usb 8-1: USB disconnect, device number 3 [ 539.536680][ T30] audit: type=1400 audit(1746042372.102:517): avc: denied { bind } for pid=12286 comm="syz.7.1523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 540.269961][T12305] smc: net device bond0 applied user defined pnetid SYZ0 [ 540.619272][ T24] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 540.687335][ T5899] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 540.811284][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 540.839559][ T30] audit: type=1400 audit(1746042373.440:518): avc: denied { mounton } for pid=12310 comm="syz.8.1528" path="/proc/25/cgroup" dev="proc" ino=29125 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 540.888577][ T24] usb 8-1: unable to get BOS descriptor or descriptor too short [ 540.902968][ T5899] usb 5-1: Using ep0 maxpacket: 32 [ 540.910317][ T24] usb 8-1: config 0 has an invalid interface number: 82 but max is 2 [ 540.925173][ T24] usb 8-1: config 0 has an invalid interface number: 159 but max is 2 [ 540.938675][ T24] usb 8-1: config 0 has an invalid interface number: 156 but max is 2 [ 540.950033][ T5899] usb 5-1: unable to get BOS descriptor or descriptor too short [ 540.962403][ T24] usb 8-1: config 0 has no interface number 0 [ 540.969012][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 540.985743][ T24] usb 8-1: config 0 has no interface number 1 [ 540.992946][ T24] usb 8-1: config 0 has no interface number 2 [ 540.999857][ T24] usb 8-1: config 0 interface 82 has no altsetting 0 [ 541.006881][ T5899] usb 5-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe [ 541.020748][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.028792][ T24] usb 8-1: config 0 interface 159 has no altsetting 0 [ 541.035731][ T24] usb 8-1: config 0 interface 156 has no altsetting 0 [ 541.043108][ T5899] usb 5-1: Product: syz [ 541.047773][ T5899] usb 5-1: Manufacturer: 杣୿窚Ꮔᤧꭏﻂ妪ᩄᤗࣇ㿆⧻궚껜ঃ旎ኲ뚭닞蓷呬ઁ꿍⃗⊼涏쉮巾엌ﶟ鮞ꀁ枯䛓ॖ [ 541.063601][ T5899] usb 5-1: SerialNumber: syz [ 541.069892][ T24] usb 8-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice=b2.1d [ 541.079805][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.089028][ T24] usb 8-1: Product: syz [ 541.093191][ T24] usb 8-1: Manufacturer: syz [ 541.098231][ T24] usb 8-1: SerialNumber: syz [ 541.103387][ T5899] usb 5-1: config 0 descriptor?? [ 541.110023][ T24] usb 8-1: config 0 descriptor?? [ 541.130377][ T3161] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 541.284436][ T3161] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 541.294368][ T3161] usb 6-1: config 0 interface 0 has no altsetting 0 [ 541.302858][ T3161] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 541.311980][ T3161] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 541.318265][ T5899] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 541.320762][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 541.339094][ T3161] usb 6-1: Product: syz [ 541.339400][ T5899] usb 5-1: USB disconnect, device number 36 [ 541.350063][ T3161] usb 6-1: Manufacturer: syz [ 541.354671][ T3161] usb 6-1: SerialNumber: syz [ 541.359509][T12325] IPVS: sync thread started: state = BACKUP, mcast_ifn = gretap0, syncid = 2, id = 0 [ 541.382872][ T3161] usb 6-1: config 0 descriptor?? [ 541.406022][ T3161] usb 6-1: selecting invalid altsetting 0 [ 541.457423][ T24] usb 8-1: USB disconnect, device number 4 [ 541.530172][ T6127] udevd[6127]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.82/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 541.546325][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 541.560845][ T9] usb 9-1: unable to get BOS descriptor or descriptor too short [ 541.582249][T12229] udevd[12229]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.156/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 541.586065][ T9] usb 9-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 541.621753][ T9] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 541.639857][ T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 541.667083][ T9] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 541.679039][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.689292][ T9] usb 9-1: Product: syz [ 541.694289][ T9] usb 9-1: Manufacturer: syz [ 541.698882][ T9] usb 9-1: SerialNumber: syz [ 541.784527][T12327] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1529'. [ 542.158887][T12324] lo speed is unknown, defaulting to 1000 [ 542.171213][T12334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.244797][T12334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.470226][ T24] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 542.629730][ T30] audit: type=1400 audit(1746042375.276:519): avc: denied { append } for pid=12323 comm="syz.8.1530" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 542.683703][ T9] usb 9-1: 0:2 : does not exist [ 542.707740][ T24] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 542.718273][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.729655][ T9] usb 9-1: USB disconnect, device number 2 [ 542.766477][ T24] usb 8-1: config 0 descriptor?? [ 542.864374][ T24] cp210x 8-1:0.0: cp210x converter detected [ 543.315046][ T24] cp210x 8-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 543.334832][ T24] cp210x 8-1:0.0: failed to get vendor val 0x000e size 678: -121 [ 543.346909][ T24] cp210x 8-1:0.0: GPIO initialisation failed: -121 [ 543.370662][ T24] usb 8-1: cp210x converter now attached to ttyUSB0 [ 543.542919][ T24] usb 8-1: USB disconnect, device number 5 [ 543.557714][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 543.578798][ T24] cp210x 8-1:0.0: device disconnected [ 543.942276][T12349] lo speed is unknown, defaulting to 1000 [ 544.045624][ T54] Bluetooth: hci5: command 0x0406 tx timeout [ 544.286344][T12356] can: request_module (can-proto-4) failed. [ 544.310190][ T24] usb 6-1: USB disconnect, device number 7 [ 544.963461][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 545.140532][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 545.242702][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 545.300705][ T24] usb 6-1: config 0 has an invalid interface number: 82 but max is 2 [ 545.686597][T12375] lo speed is unknown, defaulting to 1000 [ 545.870954][T12374] netlink: 'syz.7.1545': attribute type 27 has an invalid length. [ 545.953786][ T24] usb 6-1: config 0 has an invalid interface number: 159 but max is 2 [ 545.975041][ T24] usb 6-1: config 0 has an invalid interface number: 156 but max is 2 [ 546.017175][ T24] usb 6-1: config 0 has no interface number 0 [ 546.044748][ T24] usb 6-1: config 0 has no interface number 1 [ 546.087387][ T24] usb 6-1: config 0 has no interface number 2 [ 546.124946][ T24] usb 6-1: config 0 interface 82 has no altsetting 0 [ 546.174129][ T30] audit: type=1326 audit(1746042378.873:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12373 comm="syz.7.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb49158e969 code=0x7fc00000 [ 546.209208][ T24] usb 6-1: config 0 interface 159 has no altsetting 0 [ 546.252332][ T24] usb 6-1: config 0 interface 156 has no altsetting 0 [ 546.306543][ T30] audit: type=1326 audit(1746042378.873:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12373 comm="syz.7.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb49158e969 code=0x7fc00000 [ 546.320471][ T24] usb 6-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice=b2.1d [ 546.354720][ T30] audit: type=1326 audit(1746042378.873:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12373 comm="syz.7.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb49158e969 code=0x7fc00000 [ 546.385832][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.393841][ T24] usb 6-1: Product: syz [ 546.414186][ T24] usb 6-1: Manufacturer: syz [ 546.418796][ T24] usb 6-1: SerialNumber: syz [ 546.426114][ T30] audit: type=1326 audit(1746042378.873:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12373 comm="syz.7.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb49158e969 code=0x7fc00000 [ 546.464267][ T24] usb 6-1: config 0 descriptor?? [ 546.488972][ T54] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 546.503773][ T54] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 546.511961][ T54] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 546.522998][ T54] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 546.531452][ T54] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 546.541879][ T30] audit: type=1326 audit(1746042378.873:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12373 comm="syz.7.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb49158e969 code=0x7fc00000 [ 546.566171][ T30] audit: type=1326 audit(1746042378.873:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12373 comm="syz.7.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb49158e969 code=0x7fc00000 [ 546.590442][ T30] audit: type=1326 audit(1746042378.873:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12373 comm="syz.7.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb49158e969 code=0x7fc00000 [ 546.615346][ T30] audit: type=1326 audit(1746042378.873:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12373 comm="syz.7.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb49158e969 code=0x7fc00000 [ 546.639642][ T30] audit: type=1326 audit(1746042378.873:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12373 comm="syz.7.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb49158e969 code=0x7fc00000 [ 546.663253][ T30] audit: type=1326 audit(1746042378.873:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12373 comm="syz.7.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb49158e969 code=0x7fc00000 [ 546.710498][T12393] IPVS: sync thread started: state = BACKUP, mcast_ifn = gretap0, syncid = 2, id = 0 [ 546.722428][T12388] lo speed is unknown, defaulting to 1000 [ 546.870186][T12396] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1552'. [ 546.910960][T12396] bridge_slave_1: left allmulticast mode [ 546.924043][ T24] usb 6-1: USB disconnect, device number 8 [ 546.930220][T12401] netlink: 'syz.7.1554': attribute type 1 has an invalid length. [ 546.939766][T12396] bridge_slave_1: left promiscuous mode [ 546.947777][T12401] netlink: 'syz.7.1554': attribute type 2 has an invalid length. [ 547.004958][T12396] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.049920][T12396] bridge_slave_0: left allmulticast mode [ 547.075508][T12396] bridge_slave_0: left promiscuous mode [ 547.081211][T12396] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.114757][T12409] openvswitch: netlink: Flow actions attr not present in new flow. [ 547.196082][ T5800] udevd[5800]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.159/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 547.200231][ T6313] udevd[6313]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.82/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 547.214570][ T5799] udevd[5799]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.156/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 547.367209][T11219] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 547.420753][T12388] chnl_net:caif_netlink_parms(): no params data found [ 547.544549][T11219] usb 8-1: Using ep0 maxpacket: 16 [ 547.560942][T11219] usb 8-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 547.578804][T11219] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.587758][T11219] usb 8-1: Product: syz [ 547.592263][T11219] usb 8-1: Manufacturer: syz [ 547.600759][T12422] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1563'. [ 547.611790][T12429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1562'. [ 547.637521][T11219] usb 8-1: SerialNumber: syz [ 547.648079][T12422] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.674354][T11219] usb 8-1: config 0 descriptor?? [ 547.781554][T12388] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.799276][T12388] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.806544][T12388] bridge_slave_0: entered allmulticast mode [ 547.820108][T12388] bridge_slave_0: entered promiscuous mode [ 547.830541][T12439] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1565'. [ 547.842541][T12388] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.864090][T12388] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.871681][T12388] bridge_slave_1: entered allmulticast mode [ 547.879349][T12388] bridge_slave_1: entered promiscuous mode [ 547.887765][T11219] speedtch 8-1:0.0: speedtch_bind: data interface not found! [ 547.896707][T11219] speedtch 8-1:0.0: usbatm_usb_probe: bind failed: -19! [ 547.918119][T11219] usb 8-1: USB disconnect, device number 6 [ 547.942659][T12388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 547.960467][T12388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.992130][T12388] team0: Port device team_slave_0 added [ 548.000828][T12388] team0: Port device team_slave_1 added [ 548.022771][T12388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.030570][T12388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.066610][T12388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.079160][T12388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 548.086120][T12388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.112639][T12388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 548.147114][T12388] hsr_slave_0: entered promiscuous mode [ 548.154295][T12388] hsr_slave_1: entered promiscuous mode [ 548.160302][T12388] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 548.168502][T12388] Cannot create hsr debugfs directory [ 548.281467][T12388] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 548.290390][T12388] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 548.299319][T12388] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 548.314438][T12388] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 548.394609][T12388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 548.425738][T12388] 8021q: adding VLAN 0 to HW filter on device team0 [ 548.470983][ T3000] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.478170][ T3000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.546646][T12445] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1567'. [ 548.580710][T12452] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1570'. [ 548.583979][T12445] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1567'. [ 548.595568][ T54] Bluetooth: hci9: command tx timeout [ 548.631478][ T3000] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.638644][ T3000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.662088][T12445] kvm: pic: single mode not supported [ 548.662171][T12445] kvm: pic: level sensitive irq not supported [ 548.671409][T12445] kvm: pic: non byte read [ 548.682249][T12445] kvm: pic: non byte read [ 548.694917][T12445] kvm: pic: single mode not supported [ 548.694973][T12445] kvm: pic: non byte read [ 548.728235][T12445] kvm: pic: non byte read [ 548.746082][T12445] kvm: pic: non byte read [ 548.755089][T12388] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 548.770470][T12445] kvm: pic: non byte read [ 548.775616][T12445] kvm: pic: non byte read [ 548.780473][T12388] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 548.795918][T12445] kvm: pic: non byte read [ 548.802326][T12445] kvm: pic: non byte read [ 548.871326][ T5881] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 549.005553][ T31] INFO: task syz.3.973:10250 blocked for more than 144 seconds. [ 549.038765][ T5881] usb 8-1: Using ep0 maxpacket: 32 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 549.114213][ T5881] usb 8-1: unable to get BOS descriptor or descriptor too short [ 549.183298][ T31] Not tainted 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 [ 549.263453][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 549.272440][ T31] task:syz.3.973 state:D stack:25304 pid:10250 tgid:10248 ppid:5817 task_flags:0x400140 flags:0x00004006 [ 549.285519][ T5881] usb 8-1: config 0 has an invalid interface number: 82 but max is 2 [ 549.313500][ T5881] usb 8-1: config 0 has an invalid interface number: 159 but max is 2 [ 549.315177][ T31] Call Trace: [ 549.345324][ T5881] usb 8-1: config 0 has an invalid interface number: 156 but max is 2 [ 549.377450][ T5881] usb 8-1: config 0 has no interface number 0 [ 549.393875][ T5881] usb 8-1: config 0 has no interface number 1 [ 549.403066][ T31] [ 549.406024][ T31] __schedule+0x116f/0x5de0 [ 549.560419][ T5881] usb 8-1: config 0 has no interface number 2 [ 549.566566][ T5881] usb 8-1: config 0 interface 82 has no altsetting 0 [ 549.573275][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 549.573317][ T31] ? __pfx___schedule+0x10/0x10 [ 549.588657][ T5881] usb 8-1: config 0 interface 159 has no altsetting 0 [ 549.595726][ T5881] usb 8-1: config 0 interface 156 has no altsetting 0 [ 549.890292][ T31] ? find_held_lock+0x2b/0x80 [ 549.914677][ T31] ? schedule+0x2d7/0x3a0 [ 549.919054][ T31] schedule+0xe7/0x3a0 [ 549.923131][ T31] schedule_timeout+0x257/0x290 [ 549.928770][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 549.934171][ T31] ? mark_held_locks+0x49/0x80 [ 549.942193][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 549.950452][ T31] __wait_for_common+0x2fc/0x4e0 [ 549.963889][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 549.969282][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 549.984607][ T31] ? ib_cq_pool_cleanup+0x220/0x360 [ 549.989840][ T31] disable_device+0x16f/0x280 [ 549.999141][ T31] ? __pfx_disable_device+0x10/0x10 [ 550.013202][ T31] ? irqentry_exit+0x3b/0x90 [ 550.032871][ T31] __ib_unregister_device+0x2b4/0x480 [ 550.042796][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 550.049347][ T31] ib_unregister_device_and_put+0x5a/0x80 [ 550.055669][ T31] nldev_dellink+0x21f/0x320 [ 550.062377][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 550.072665][ T31] ? __lock_acquire+0xaa4/0x1ba0 [ 550.077666][ T31] ? irqentry_exit+0x3b/0x90 [ 550.082735][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 550.087950][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 550.093289][ T31] rdma_nl_rcv_msg+0x387/0x6e0 [ 550.098069][ T31] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 550.103764][ T31] ? __pfx___schedule+0x10/0x10 [ 550.108657][ T31] rdma_nl_rcv_skb.constprop.0.isra.0+0x2e5/0x450 [ 550.116545][ T31] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 550.123834][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 550.129145][ T31] netlink_unicast+0x53a/0x7f0 [ 550.134075][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 550.139378][ T31] netlink_sendmsg+0x8d1/0xdd0 [ 550.144318][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 550.150393][ T31] ____sys_sendmsg+0xa95/0xc70 [ 550.155258][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 550.160747][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 550.166044][ T31] ___sys_sendmsg+0x134/0x1d0 [ 550.171218][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 550.176457][ T31] __sys_sendmsg+0x16d/0x220 [ 550.181227][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 550.186327][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 550.191384][ T31] ? rcu_is_watching+0x12/0xc0 [ 550.196157][ T31] do_syscall_64+0xcd/0x260 [ 550.200700][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.206594][ T31] RIP: 0033:0x7f87d778e969 [ 550.211223][ T31] RSP: 002b:00007f87d868e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 550.219696][ T31] RAX: ffffffffffffffda RBX: 00007f87d79b5fa0 RCX: 00007f87d778e969 [ 550.227874][ T31] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 550.238733][ T31] RBP: 00007f87d7810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 550.248498][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 550.261370][ T31] R13: 0000000000000000 R14: 00007f87d79b5fa0 R15: 00007ffea7d0d828 [ 550.270396][ T31] [ 550.273504][ T31] [ 550.273504][ T31] Showing all locks held in the system: [ 550.281490][ T31] 2 locks held by kworker/u8:0/12: [ 550.308675][ T31] #0: ffff888020b41948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 550.358016][ T31] #1: ffffc90000117d18 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 550.392880][ T31] 1 lock held by khungtaskd/31: [ 550.421342][ T31] #0: ffffffff8e3bf5c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 550.456670][ T31] 2 locks held by kworker/u8:3/53: [ 550.461815][ T31] #0: ffff888020b41948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 550.509314][ T31] #1: ffffc90000bf7d18 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 550.545289][ T31] 3 locks held by kworker/1:1/60: [ 550.551332][ T31] #0: ffff88801b478d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 550.605131][ T31] #1: ffffc9000212fd18 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 550.644271][ T54] Bluetooth: hci9: command tx timeout [ 550.658546][ T31] #2: ffffffff8e3caaf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 550.674602][ T31] 4 locks held by kworker/u8:6/1159: [ 550.679899][ T31] #0: ffff88801c2f3948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 550.690564][ T31] #1: ffffc90003e0fd18 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 550.700586][ T31] #2: ffffffff9010e510 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xc9/0xb30 [ 550.709957][ T31] #3: ffff88805be6c6d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x30/0x320 [ 550.722012][ T31] 2 locks held by kworker/u8:8/3000: [ 550.727328][ T31] #0: ffff888020b41948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 550.738154][ T31] #1: ffffc9000b967d18 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 550.756294][ T31] 2 locks held by getty/5561: [ 550.761015][ T31] #0: ffff8880362d20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 550.771378][ T31] #1: ffffc900036cb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 550.783618][ T31] 3 locks held by kworker/0:6/5881: [ 550.788820][ T31] #0: ffff888022292148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 550.799723][ T31] #1: ffffc9000442fd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 550.811532][ T31] #2: ffff8881457cc198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 550.820460][ T31] 2 locks held by kworker/u8:9/6000: [ 550.826178][ T31] #0: ffff888020b41948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 550.837285][ T31] #1: ffffc90004c5fd18 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 550.848968][ T31] 2 locks held by syz.3.973/10250: [ 550.855357][ T31] #0: ffffffff9ae82c18 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv_msg+0x169/0x6e0 [ 550.865898][ T31] #1: ffff88805be6c6d0 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x23b/0x480 [ 550.877403][ T31] 3 locks held by kworker/0:1/11219: [ 550.882864][ T31] #0: ffff88801b478d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 550.893469][ T31] #1: ffffc900048dfd18 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 550.905510][ T31] #2: ffff8880887fa240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1bb/0x2e80 [ 550.915760][ T31] 2 locks held by syz.1.1352/11580: [ 550.920995][ T31] #0: ffffffff9010e510 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 550.930579][ T31] #1: ffff88805be6c6d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x30/0x320 [ 550.941863][ T31] 2 locks held by syz.2.1355/11599: [ 550.947048][ T31] #0: ffffffff9010e510 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 550.957332][ T31] #1: ffff88805be6c6d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x30/0x320 [ 550.969320][ T31] 2 locks held by kworker/u8:2/11814: [ 550.974702][ T31] #0: ffff888020b41948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 550.985357][ T31] #1: ffffc9000b067d18 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 550.996898][ T31] 2 locks held by kworker/u8:11/11818: [ 551.002400][ T31] #0: ffff888020b41948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 551.013121][ T31] #1: ffffc9000b017d18 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 551.024726][ T31] 2 locks held by syz.0.1416/11838: [ 551.030033][ T31] #0: ffffffff9010e510 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 551.039893][ T31] #1: ffff88805be6c6d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x30/0x320 [ 551.051233][ T31] 2 locks held by syz.6.1487/12153: [ 551.057398][ T31] #0: ffffffff9010e510 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 551.066872][ T31] #1: ffff88805be6c6d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x30/0x320 [ 551.078321][ T31] 3 locks held by syz.5.1502/12207: [ 551.083503][ T31] #0: ffff88802adacd80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 551.093213][ T31] #1: ffff88802adac078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 551.102908][ T31] #2: ffffffff90393488 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 551.112950][ T31] 3 locks held by syz-executor/12388: [ 551.118378][ T31] #0: ffff888029d20d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 551.128052][ T31] #1: ffff888029d20078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 551.137758][ T31] #2: ffffffff90393488 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 551.147859][ T31] 1 lock held by syz.4.1567/12444: [ 551.152964][ T31] #0: ffffffff8e3ca9c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 551.163813][ T31] 5 locks held by syz.7.1568/12450: [ 551.169092][ T31] #0: ffff888034f40d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 551.178723][ T31] #1: ffff888034f40078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 551.188609][ T31] #2: ffffffff90393488 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 551.199084][ T31] #3: ffff888089bbcb38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x730 [ 551.208680][ T31] #4: ffffffff8e3caaf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 551.218738][ T31] 3 locks held by syz.8.1572/12463: [ 551.223920][ T31] #0: ffff888092428d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 551.233546][ T31] #1: ffff888092428078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 551.243241][ T31] #2: ffffffff90393488 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 551.253580][ T31] [ 551.261142][ T31] ============================================= [ 551.261142][ T31] [ 551.287037][ T31] NMI backtrace for cpu 0 [ 551.287052][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 551.287074][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 551.287083][ T31] Call Trace: [ 551.287089][ T31] [ 551.287095][ T31] dump_stack_lvl+0x116/0x1f0 [ 551.287124][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 551.287150][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 551.287169][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 551.287187][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 551.287215][ T31] watchdog+0xf70/0x12c0 [ 551.287237][ T31] ? __pfx_watchdog+0x10/0x10 [ 551.287251][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 551.287272][ T31] ? __kthread_parkme+0x19e/0x250 [ 551.287297][ T31] ? __pfx_watchdog+0x10/0x10 [ 551.287312][ T31] kthread+0x3c2/0x780 [ 551.287329][ T31] ? __pfx_kthread+0x10/0x10 [ 551.287342][ T31] ? __pfx_kthread+0x10/0x10 [ 551.287357][ T31] ? __pfx_kthread+0x10/0x10 [ 551.287370][ T31] ? __pfx_kthread+0x10/0x10 [ 551.287383][ T31] ? rcu_is_watching+0x12/0xc0 [ 551.287403][ T31] ? __pfx_kthread+0x10/0x10 [ 551.287419][ T31] ret_from_fork+0x45/0x80 [ 551.287435][ T31] ? __pfx_kthread+0x10/0x10 [ 551.287450][ T31] ret_from_fork_asm+0x1a/0x30 [ 551.287486][ T31] [ 551.287507][ T31] Sending NMI from CPU 0 to CPUs 1: [ 551.426439][ C1] NMI backtrace for cpu 1 [ 551.426450][ C1] CPU: 1 UID: 0 PID: 3000 Comm: kworker/u8:8 Not tainted 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 551.426466][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 551.426474][ C1] Workqueue: bat_events batadv_nc_worker [ 551.426491][ C1] RIP: 0010:lock_acquire+0x62/0x350 [ 551.426510][ C1] Code: d0 0b 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 32 ed ec 0e 0f 82 74 02 00 00 8b 35 ca 1c ed 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 09 d0 0b 12 0f 85 c7 02 00 00 48 83 c4 [ 551.426521][ C1] RSP: 0018:ffffc9000b967a30 EFLAGS: 00000206 [ 551.426531][ C1] RAX: 0000000000000046 RBX: ffff88805e460f58 RCX: ffffffff93b4c980 [ 551.426540][ C1] RDX: 0000000000000000 RSI: ffffffff8dbbb2b7 RDI: ffffffff8bf47e20 [ 551.426549][ C1] RBP: 0000000000000000 R08: d46b85665eab4bb2 R09: 0000000000000001 [ 551.426556][ C1] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000001 [ 551.426564][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 551.426571][ C1] FS: 0000000000000000(0000) GS:ffff888124ae2000(0000) knlGS:0000000000000000 [ 551.426583][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 551.426591][ C1] CR2: 0000001b2c60bff8 CR3: 000000003523d000 CR4: 00000000003526f0 [ 551.426599][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 551.426606][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 551.426613][ C1] Call Trace: [ 551.426617][ C1] [ 551.426624][ C1] ? __pfx_batadv_nc_to_purge_nc_path_coding+0x10/0x10 [ 551.426639][ C1] _raw_spin_lock_bh+0x33/0x40 [ 551.426651][ C1] ? batadv_nc_purge_paths+0xd9/0x3a0 [ 551.426663][ C1] batadv_nc_purge_paths+0xd9/0x3a0 [ 551.426679][ C1] batadv_nc_worker+0x921/0x1030 [ 551.426694][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 551.426708][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 551.426723][ C1] ? rcu_is_watching+0x12/0xc0 [ 551.426738][ C1] process_one_work+0x9cc/0x1b70 [ 551.426753][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 551.426766][ C1] ? __pfx_process_one_work+0x10/0x10 [ 551.426780][ C1] ? assign_work+0x1a0/0x250 [ 551.426792][ C1] worker_thread+0x6c8/0xf10 [ 551.426809][ C1] ? __pfx_worker_thread+0x10/0x10 [ 551.426823][ C1] kthread+0x3c2/0x780 [ 551.426833][ C1] ? __pfx_kthread+0x10/0x10 [ 551.426843][ C1] ? __pfx_kthread+0x10/0x10 [ 551.426853][ C1] ? __pfx_kthread+0x10/0x10 [ 551.426863][ C1] ? __pfx_kthread+0x10/0x10 [ 551.426873][ C1] ? rcu_is_watching+0x12/0xc0 [ 551.426886][ C1] ? __pfx_kthread+0x10/0x10 [ 551.426896][ C1] ret_from_fork+0x45/0x80 [ 551.426907][ C1] ? __pfx_kthread+0x10/0x10 [ 551.426918][ C1] ret_from_fork_asm+0x1a/0x30 [ 551.426940][ C1] [ 551.427725][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 551.703185][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 551.714970][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 551.725006][ T31] Call Trace: [ 551.728275][ T31] [ 551.731189][ T31] dump_stack_lvl+0x3d/0x1f0 [ 551.735768][ T31] panic+0x71c/0x800 [ 551.739655][ T31] ? __pfx_panic+0x10/0x10 [ 551.744061][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 551.749420][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 551.755381][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 551.760741][ T31] ? watchdog+0xdda/0x12c0 [ 551.765144][ T31] ? watchdog+0xdcd/0x12c0 [ 551.769546][ T31] watchdog+0xdeb/0x12c0 [ 551.773772][ T31] ? __pfx_watchdog+0x10/0x10 [ 551.778431][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 551.783617][ T31] ? __kthread_parkme+0x19e/0x250 [ 551.788629][ T31] ? __pfx_watchdog+0x10/0x10 [ 551.793285][ T31] kthread+0x3c2/0x780 [ 551.797332][ T31] ? __pfx_kthread+0x10/0x10 [ 551.801903][ T31] ? __pfx_kthread+0x10/0x10 [ 551.806472][ T31] ? __pfx_kthread+0x10/0x10 [ 551.811039][ T31] ? __pfx_kthread+0x10/0x10 [ 551.815612][ T31] ? rcu_is_watching+0x12/0xc0 [ 551.820359][ T31] ? __pfx_kthread+0x10/0x10 [ 551.824927][ T31] ret_from_fork+0x45/0x80 [ 551.829324][ T31] ? __pfx_kthread+0x10/0x10 [ 551.833896][ T31] ret_from_fork_asm+0x1a/0x30 [ 551.838655][ T31] [ 551.841847][ T31] Kernel Offset: disabled [ 551.846147][ T31] Rebooting in 86400 seconds..