last executing test programs: 1m15.964954587s ago: executing program 32 (id=68): eventfd(0xa0416d21) io_setup(0xc7d, &(0x7f0000000080)) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xb) r1 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r5 = accept(r4, 0x0, 0x0) recvmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x8, 0x80, 0x9, 0x363, {{0x9, 0x4, 0x2, 0x3, 0x24, 0x66, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, {[@lsrr={0x83, 0xb, 0xb6, [@multicast1, @dev={0xac, 0x14, 0x14, 0x2a}]}, @end, @lsrr={0x83, 0x3, 0xb1}]}}}}}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x5, 0x65, 0xde, 0x5}, {0x800, 0x10, 0x4, 0x10001}]}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000640)={'syz0\x00', {0x1, 0x8, 0xfff8, 0x8}, 0x9, [0x5, 0x40, 0x40000, 0x32b6d5ae, 0x0, 0x8, 0x3, 0x4, 0x5, 0x1, 0x10000, 0x7f, 0x1, 0x1ff, 0xdc, 0xde8, 0xb78, 0x3, 0x1ff, 0x7fa2, 0x3, 0x2, 0x5, 0x80000000, 0x2, 0x0, 0x5, 0x7, 0x5, 0x3, 0x4, 0xf00, 0x9, 0x0, 0x9, 0xc, 0x6, 0x3, 0x3, 0x3, 0x2400, 0x7, 0x9, 0x4, 0x7fff, 0x8000, 0xe, 0xfffffff7, 0x401, 0x401, 0xffff, 0x3, 0x7546, 0x3, 0x470, 0xffffffc0, 0x3, 0x7, 0x8, 0x1, 0x100, 0xfffff63f, 0x800, 0xa6], [0x7fff, 0x3, 0xffff, 0x6, 0xffff, 0x8, 0x9d6d, 0x3, 0x6, 0xffff, 0x0, 0x8, 0xe, 0x6, 0x0, 0x7, 0x68d37dc8, 0xc, 0x9, 0x4, 0x1, 0x1, 0x80000001, 0x10001, 0x791cff13, 0x0, 0x1, 0x2, 0x0, 0x0, 0x7, 0x261, 0x9, 0x2, 0x7, 0x5, 0x10001, 0x8706, 0x3ff, 0xc8, 0x6, 0x445f, 0x9, 0x0, 0x5, 0x7, 0x40, 0x3ff, 0xc3d5, 0x2, 0x81, 0x0, 0x7, 0x5, 0x9, 0x9224, 0x9, 0xfff, 0x2, 0x1, 0x200, 0x200, 0x7ff, 0x7f], [0x7, 0xd364, 0x10000000, 0xc1, 0x737e, 0x2, 0x4, 0x9e4, 0x8, 0x7, 0xe, 0x3, 0x3, 0x2, 0x8000, 0xffff, 0xed3, 0x5, 0xc, 0x3, 0x5, 0x9, 0x7, 0x7, 0x7fff, 0x80, 0x7, 0x5, 0x9, 0x6, 0x5, 0x9, 0xdc45, 0x9, 0x943f, 0xb72e, 0x2, 0x7f, 0x7, 0x8, 0x7, 0x8, 0x100, 0x6, 0x5, 0x100000, 0x8000, 0xd, 0x4, 0xd8, 0x6, 0x0, 0x3, 0x8, 0x5, 0x5, 0x7f, 0x1ff, 0x1, 0xfffffeac, 0x2, 0x2, 0xfffffff9, 0xffffffff], [0x92, 0x5, 0x48, 0x15, 0x3, 0xfffffffa, 0x7, 0x9, 0x0, 0x8, 0x3ff, 0x8, 0x800, 0x400, 0x6b, 0x4, 0x2, 0x810, 0x6c68, 0xc, 0x6, 0x6, 0xa, 0x3ff, 0x0, 0x4, 0xffffff7f, 0xfffffffc, 0xb3, 0x1, 0x7, 0xa, 0x1000, 0xfd, 0x1, 0x7f5e, 0x3ff, 0x8, 0x5, 0x0, 0x101, 0x5, 0x7fffffff, 0x4, 0xdf, 0x3, 0x3f, 0x7, 0x7, 0xc, 0xfffffff8, 0x7, 0xff, 0x3, 0x3, 0x3, 0x4, 0x7, 0x100, 0xfffffffb, 0x8001, 0xffff, 0x3, 0x3]}, 0x45c) socket$rxrpc(0x21, 0x2, 0x2) ioctl$NBD_DO_IT(r1, 0xab03) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000480)=ANY=[], 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000040)={0x5, 0x1}) socket(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4}, 0x0, &(0x7f0000000100)={0x3ff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001, 0xfffffffffffffffc}, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 1m8.249330607s ago: executing program 2 (id=88): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x10) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x40}}, {0x2, 0x4e20, @private=0x2}, {0x2, 0x4e20, @remote}, 0x4, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000000)='veth1_to_batadv\x00', 0xffff, 0x0, 0x700}) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) msync(&(0x7f0000954000/0x4000)=nil, 0x4000, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') r2 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='source', &(0x7f0000000080)='//', 0x0) chdir(0x0) 1m6.552459263s ago: executing program 2 (id=94): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FREQUENCY(r0, 0xc0405627, &(0x7f0000000040)={0x2, 0x2, 0x20000000}) 1m6.258903776s ago: executing program 2 (id=97): r0 = add_key$fscrypt_v1(&(0x7f0000001000), &(0x7f0000001040)={'fscrypt:', @desc4}, &(0x7f0000001080)={0x0, "ddbccf094c5457df7a3f7457a4e81d59f6bffca5bf7c026c91255969954a3cec19ae878c0ca3fce72e29df4e4dbd001eb127ffbed6cc47890c19c3edc50daa56"}, 0x48, 0xfffffffffffffffe) r1 = request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00', r0) r2 = request_key(&(0x7f0000000380)='big_key\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000100)='\x00\x1b\x00', r1) keyctl$KEYCTL_MOVE(0x1e, r2, r1, r1, 0x1) keyctl$setperm(0x5, r0, 0x13220c28) 1m5.438382553s ago: executing program 2 (id=98): io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_io_uring_setup(0x557d, &(0x7f0000000500)={0x0, 0xab3f, 0x80, 0x2}, &(0x7f0000000300)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000340)={0xb, 0x0, 0x1, 0x0, 0x0, 0x1, 0x240, 0x0, 0x0, 0xf, 0x3, 0x0, 0x0, 0x3, 0x4777, 0x0, 0x8, 0x400000000000000, 0x101, 0xfd, 0x0, 0x0, 0x4, 0x20000000002, 0x0, 0x2}) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000400)='.\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x80700a, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000001000), &(0x7f0000001040)={'fscrypt:', @desc4}, &(0x7f0000001080)={0x0, "ddbccf094c5457df7a3f7457a4e81d59f6bffca5bf7c026c91255969954a3cec19ae878c0ca3fce72e29df4e4dbd001eb127ffbed6cc47890c19c3edc50daa56"}, 0x48, 0xfffffffffffffffe) r4 = request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00', r3) r5 = request_key(&(0x7f0000000380)='big_key\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000100)='\x00\x1b\x00', r4) keyctl$KEYCTL_MOVE(0x1e, r5, r4, r4, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r6 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setresuid(0x0, r7, 0x0) keyctl$setperm(0x5, r3, 0x13220c28) fchown(0xffffffffffffffff, r7, r8) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) statx(0xffffffffffffffff, 0x0, 0x100, 0x77f, &(0x7f0000000600)) mount$tmpfs(0x0, &(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000500)=ANY=[]) 1m5.005037076s ago: executing program 2 (id=101): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x6) mount$cgroup(0x0, 0x0, 0x0, 0x800000, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$sg(0x0, 0x0, 0xca442) ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="ba8d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) 1m2.970856617s ago: executing program 2 (id=106): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000079e02200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x29, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20060091) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x11, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="185000000100000000000000000000007197f4fff5ffffff18120000", @ANYRES32, @ANYBLOB="0000000000000000b703000019000000850000000c000000b700000000000000"], &(0x7f0000000380)='GPL\x00', 0x6, 0x1000, &(0x7f00000003c0)=""/4096, 0x40f00, 0x4, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001440)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000001480)={0x3, 0xd, 0x7, 0xe}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000015c0)=[0x1, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4], &(0x7f0000001600)=[{0x1, 0x1, 0x0, 0xb}, {0x1, 0x4, 0x5, 0x4}], 0x10, 0x7fff, @void, @value}, 0x94) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000140)={0xc}) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r10, 0x0, &(0x7f0000d14000/0x1000)=nil, 0x1000}) 1m2.734224637s ago: executing program 33 (id=106): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000079e02200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x29, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20060091) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x11, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="185000000100000000000000000000007197f4fff5ffffff18120000", @ANYRES32, @ANYBLOB="0000000000000000b703000019000000850000000c000000b700000000000000"], &(0x7f0000000380)='GPL\x00', 0x6, 0x1000, &(0x7f00000003c0)=""/4096, 0x40f00, 0x4, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001440)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000001480)={0x3, 0xd, 0x7, 0xe}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000015c0)=[0x1, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4], &(0x7f0000001600)=[{0x1, 0x1, 0x0, 0xb}, {0x1, 0x4, 0x5, 0x4}], 0x10, 0x7fff, @void, @value}, 0x94) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000140)={0xc}) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r10, 0x0, &(0x7f0000d14000/0x1000)=nil, 0x1000}) 55.911206531s ago: executing program 1 (id=124): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r1, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x3a, 0x1, &(0x7f00000000c0), 0xff2a) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000300)="2e000300010000", 0x7) 55.333890743s ago: executing program 1 (id=125): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) fdatasync(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) socket$nl_generic(0x10, 0x3, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 51.869792173s ago: executing program 1 (id=131): socketpair$unix(0x1, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x200002) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) io_destroy(0x0) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0}], 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x200) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB]) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x3a1280, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)='+', 0x1}], 0x1, &(0x7f0000000880)=[@rights={{0x10}}], 0x10}}], 0x1, 0x11) lseek(r3, 0x5, 0x0) getdents(r3, 0xfffffffffffffffd, 0x58) write(r3, 0x0, 0xffffffffffffff0a) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fcdbdf2523000000050027000900000008000200", @ANYRES32=r6, @ANYBLOB="055072ffdf7fd986330000eafffff6ff001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x810) r7 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) write$dsp(r2, &(0x7f0000000300)="f603a58cc8323885a4e82bdbaf5b19a8b77cd8f42eec563963edc88b5b1e9b15ab344627650cd80ae5d8c0a678e8f54f1028fc8e84c29e97aef1baf819b947c161203c9792ec75f8bd2edd4b8f1d3dc9dd6291c2c99d964d966bfde3f4f6116cdae64155e170080c47b1d1c2b075cbe6f5468d4c204d204ef3d95954363d81aaee949534f992dc9b4bd556053d98aa7fee3c4ab18175741ef532d778fc04fe21fa61466bd5f52528fe1f5141cec7306748eb1a5c17c1d146789096898365c72038557f0ba30f63d8bd00bc961472fcd8b45c4ed0dbea03f3a90b03a9b15ad863aa1220ddc3358f18a5bce1e0f931dc2d2746fdd9a5a17487", 0xf8) 44.384541153s ago: executing program 1 (id=146): io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_io_uring_setup(0x557d, &(0x7f0000000500)={0x0, 0xab3f, 0x80, 0x2}, &(0x7f0000000300)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000340)={0xb, 0x0, 0x1, 0x0, 0x0, 0x1, 0x240, 0x0, 0x0, 0xf, 0x3, 0x0, 0x0, 0x3, 0x4777, 0x0, 0x8, 0x400000000000000, 0x101, 0xfd, 0x0, 0x0, 0x4, 0x20000000002, 0x0, 0x2}) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000400)='.\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x80700a, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000001000), &(0x7f0000001040)={'fscrypt:', @desc4}, &(0x7f0000001080)={0x0, "ddbccf094c5457df7a3f7457a4e81d59f6bffca5bf7c026c91255969954a3cec19ae878c0ca3fce72e29df4e4dbd001eb127ffbed6cc47890c19c3edc50daa56"}, 0x48, 0xfffffffffffffffe) r4 = request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00', r3) r5 = request_key(&(0x7f0000000380)='big_key\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000100)='\x00\x1b\x00', r4) keyctl$KEYCTL_MOVE(0x1e, r5, r4, r4, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r6 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setresuid(0x0, r7, 0x0) keyctl$setperm(0x5, r3, 0x13220c28) fchown(0xffffffffffffffff, r7, r8) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) statx(0xffffffffffffffff, 0x0, 0x100, 0x77f, &(0x7f0000000600)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 43.613571317s ago: executing program 1 (id=149): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x1, 0x0, @pic={0x0, 0xff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0xfd, 0x0, 0x0, 0x0, 0x4, 0x0, 0xff}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2004c9, 0x0, 0x0, 0x6, 0x0, 0x1ff, 0x40000000000185], 0x3000, 0x2c0710}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$isdn(0x22, 0x2, 0x26) gettid() socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000001400), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) getrandom(&(0x7f0000000600)=""/274, 0xffffff4f, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000026000706000000000000000015"], 0x1c}}, 0x0) 42.425311495s ago: executing program 1 (id=152): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x1f) 41.536393861s ago: executing program 34 (id=152): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x1f) 41.529458585s ago: executing program 0 (id=154): socket(0x840000000002, 0x3, 0x100) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x2) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x80400, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) unshare(0x8040080) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/image_size', 0x40042, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r3, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f00000000c0)="fc", 0xa}]) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x41, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x20}}, 0x0) 39.407150481s ago: executing program 0 (id=157): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x4040095}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000000306010100000000000000000700000a0900020073797a3100000000050001000700000005000100070000000900020073797a30"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 38.956336533s ago: executing program 0 (id=158): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x6) mount$cgroup(0x0, 0x0, 0x0, 0x800000, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0xca442) ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x3, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 37.7068677s ago: executing program 0 (id=159): io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_io_uring_setup(0x557d, &(0x7f0000000500)={0x0, 0xab3f, 0x80, 0x2}, &(0x7f0000000300)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000340)={0xb, 0x0, 0x1, 0x0, 0x0, 0x1, 0x240, 0x0, 0x0, 0xf, 0x3, 0x0, 0x0, 0x3, 0x4777, 0x0, 0x8, 0x400000000000000, 0x101, 0xfd, 0x0, 0x0, 0x4, 0x20000000002, 0x0, 0x2}) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000400)='.\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x80700a, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000001000), &(0x7f0000001040)={'fscrypt:', @desc4}, &(0x7f0000001080)={0x0, "ddbccf094c5457df7a3f7457a4e81d59f6bffca5bf7c026c91255969954a3cec19ae878c0ca3fce72e29df4e4dbd001eb127ffbed6cc47890c19c3edc50daa56"}, 0x48, 0xfffffffffffffffe) r4 = request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00', r3) r5 = request_key(&(0x7f0000000380)='big_key\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000100)='\x00\x1b\x00', r4) keyctl$KEYCTL_MOVE(0x1e, r5, r4, r4, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r6 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setresuid(0x0, r7, 0x0) keyctl$setperm(0x5, r3, 0x13220c28) fchown(0xffffffffffffffff, r7, r8) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) mount$tmpfs(0x0, &(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000500)=ANY=[]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 37.318032052s ago: executing program 0 (id=161): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f0000000400)='.\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x80700a, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000001000), &(0x7f0000001040)={'fscrypt:', @desc4}, &(0x7f0000001080)={0x0, "ddbccf094c5457df7a3f7457a4e81d59f6bffca5bf7c026c91255969954a3cec19ae878c0ca3fce72e29df4e4dbd001eb127ffbed6cc47890c19c3edc50daa56"}, 0x48, 0xfffffffffffffffe) r3 = request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00', r2) r4 = request_key(&(0x7f0000000180)='rxrpc_s\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)='syz', r2) keyctl$KEYCTL_MOVE(0x1e, r4, r3, r3, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r5 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setresuid(0x0, r6, 0x0) keyctl$setperm(0x5, r2, 0x13220c28) fchown(0xffffffffffffffff, r6, r7) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, 0x0, 0x0, 0x77f, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000600)={[{@usrquota}, {@huge_never}, {@mode={'mode', 0x3d, 0x1}}, {@inode32}, {@mpol={'mpol', 0x3d, {'interleave', '', @void}}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nl802154\x00'}}, {@obj_user}, {@flag='rw'}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x32, 0x39, 0x63, 0x32, 0x61, 0x65, 0x34], 0x2d, [0x62, 0x63, 0x36, 0x81c32c601b225b19], 0x2d, [0x63, 0x63, 0x32, 0x64], 0x2d, [0x6a, 0x33, 0x31, 0x30], 0x2d, [0x33, 0x31, 0x46, 0x64, 0x31, 0x37, 0x30, 0x31]}}}, {@seclabel}, {@uid_lt={'uid<', r8}}, {@fowner_lt={'fowner<', r9}}]}) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r0], 0x8c}}, 0x24000880) r10 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xa}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}, {0x4}}, {{0x1c, 0x1, {0x5, 0x0, 0xe}}, {0x4}}]}]}, 0x68}}, 0x0) bind$bt_rfcomm(r10, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xa) 36.614567559s ago: executing program 0 (id=162): r0 = io_uring_setup(0xdac, &(0x7f0000000180)) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r9 = accept(r7, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e0003000f3a000002800000121f", 0x2e}], 0x1}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 36.481741797s ago: executing program 35 (id=162): r0 = io_uring_setup(0xdac, &(0x7f0000000180)) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r9 = accept(r7, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e0003000f3a000002800000121f", 0x2e}], 0x1}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 32.152522909s ago: executing program 6 (id=107): r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000003a00), &(0x7f0000003a80)=0x60, 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003d40)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)="10db44a7fffb76f6a0f126314de7a39d8eeab86b2fd10c3392777feb5f49a790d4a0b54c881fe83ece788488111d8968df4eaa36f58ff172a8af15dc", 0x3c}, {&(0x7f0000000340)="2a28a9650e8856dd866c9db0b36f2d18c78fd9aae7392942650b1949e59c0a64117eaf0088b7e395118681f3cb8f7dbfdbaa423c78b4471678656b2b739a40401c24f9593b10bfc1e10871dffb624a6558329dec34101de4bc558406bed8d24229ebbae652608361f0ca54bad4c20c149278efaf7c", 0x75}, {&(0x7f00000003c0)="28f3a0c353c624bf3844c5fff93c0a727ba6249a6cd1ad50fb9974b74d7aa0815672772c7926047363d8f0f585ef2f7d5ad9faac96a7", 0x36}, {&(0x7f0000000400)="304a1100ad2af59c0b5702a7ddc5bc3dfbc6e0fab4e102f4995ead16726009fde4201fea0a4212f0791bc10e2db6b607452370991a13bbd765572670b0c25432f04569bd233a6e70c0c79c7baf8c20d0c46ac2e4633fff5bb4ecf73ae7e6c0861e8db7d69f0d1b76a44715e3958f4a5ba76cc567bfefdf531df5cd532072433d97188b89dec576b82bf06e3036776aa5169cc29bc0d6f0ebcafe2b97", 0x9c}, {&(0x7f00000006c0)="73652c2f44f8e9fc837563fffb40ec58d8cde964c898acf03e93d4505043a566862fb9a4012b95bb7739f794969a535c292b37da9cb5760ada172367ae7fdbab52c27efbda012ba37fb1e95885cade309bbaa1995740b362d7df71efe52c898c0dd1b5766dfeeff4c2d8396424b114d3c07b9a5fee4299fa229833d56edd3435", 0x80}, {&(0x7f00000012c0)="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", 0x800}, {0x0}], 0x7, &(0x7f00000007c0)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88, 0x1000}}, {{&(0x7f0000000880)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000900)="e8ea525409ae521bc697929a64ee8f0b2e60f6ead2e3ba398bf84b23ca3190ceaf30bae6e6e01201a407d3b7500e77aba353ab2e8fcff93e9b572a405840aab2a2e6fd5f85a19e34671c3dfc5ca39a535b142d73411b9932fd3a1c824ffb837da068cad6f1695a70", 0x68}, {&(0x7f0000000980)}, {&(0x7f00000009c0)="de820fedf889ae14985ce2d4bcac7e23801c5d4b6fadfa53a13211fe39d2035aad415b4baca29aa2b9c71d1d1f2ef947d3caa7b4d9659771cabc46ceb933f53300d85286c8068192dbd232e2bc3888a78cbdf2cc54ce3926bed452556c57742406f02fac71df78ccf3712ed60853372f18e5", 0x72}, {&(0x7f0000000a40)="7d24f99e507a3932070b1beaac54f71479c44d92bc4046ab4d99445f2aa76bbac97195f50e7d177cea0cc3863905f8949928f634854879fc1310c5c5f758b1890ebd3e8e2f360eebf8570f78845d588efde7a8c6aa6fa5907e2463a9f3bbfb8b5d9cbd0814320267527a4af308300ed01a4900c0e96c3e89d3a2dabb9ea8ee748e5d1b3007b5cb9db8114b59182dda13d0cfeee98d6c15a742a961555daec51bdcdbedfcea1ce130599594498e9fc389d709b457ad5d77ed059ff03abef92281a0d0484866d77dcd2bc02b84943f0127b4b8131f249ff77f732580d28cf51ce260f83995563aec4d8b0d2f85521e8e40a715f05c812fb5c14cd2221b", 0xfc}, {&(0x7f0000000b40)="af009d8c37f6737e26f2ef080d593c02605432b57348425581f12409685eaad948fdc22a23aec4aa32178f6d", 0x2c}], 0x5, 0x0, 0x0, 0x40000}}, {{&(0x7f0000000c00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001080)=[{0x0}, {&(0x7f0000000d00)="54bbff00ee67e9a11a0949e7c1f9b1e1ef8d9440ccf750", 0x17}, {&(0x7f0000000d40)="b05af4abacd42c97414621899a4046ec759d220f78a8e8bfc99b7449a8394396d22796c2bb697a46a0f4ff1c2744a825fd0ad7181d1383a300997192e50303e179eda690759196782bf699cbaf8e4be39e8e3c3bfab7226d7f6988c5a67f6377acf6cf4aa25754551492ad1f39c2d3b50d1667f7c5fd72b917fc88762525e2bae473dfc98f9dfd559081e2bbbf1b2b746ee86033076c8ef663036c2180b326362a85a1211b5d06397cf09b175b51e301d9a9169489f36ae5b8282b533284da56030c728129f7ecb13c2b14eab6b29831a87f72d2b4746c6d518d4d797c4a1fb8d4871b8cd1fd2164ff7e12e8b487293e9b88ad968500478a", 0xf8}, {&(0x7f0000000e80)="457762267762d7e5a9a2788b5f3325bef15afa14c8f33cb79068b4e95f99a9999bd38d4877fa45b76c0f399255fd536e172464d7eb8547b5f3ddec7030113dac1168805cd60010daa60607a1f0b8a7db1af33b61b2a695c9817e717cb2595b502e60f91ceba7276545f0526480e56d6e27b5e13d5d9a2e969f92ebbd2bd2e1be6e4bbe5712b635cb200ae42211b19670aef7f7b1d7d6c6d3d80325f43741dd0cefea446e4902af90762363edbdab254f3e449c157063da853fae525379b8a3e28a2069aa1f0339fd484afc3cad3b3a19505d9ae3842f4c0a34ab4ca6b15c6f42a35838552cc3a261208c57830382feeafaaf83c7337b7dd6", 0xf8}, {&(0x7f0000000f80)="a308addfaa4ae5aeafd5d80b1802b0f0803cae11009274786e1f701eb34ad9136e0c268497115fe437da70555b37ee59eefac206625c8286693bf95e2080072bbf1454d54131490a4ed68b5d8e270a32a76f30ffa596b3828aa6bdc20a8c88f6953630859f2c3b0034120c9b417556ab08bdf97ae4ea6ea7e59188ca36deeed9112d1b59b71660f9770f8530f052090d315e1fd2fde5b2f4e4541c8d4de8338e8823aa232856b2fbd82bc47c57496a9a9d1f2ddba9bb7e36280cd83eeb8b2d46d16d2633ebf5bea813c2673224289602a7670c65c31c4df31eb8366b", 0xdc}], 0x5, &(0x7f0000003ac0)=ANY=[@ANYBLOB="240000000000000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000d00003000000000000000a000", @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x170, 0x50}}, {{0x0, 0x0, &(0x7f0000003d00)=[{&(0x7f0000003c40)="b3338dceb2c0d7053ebb0edfed0efcd941ce11d25f3dae6169f906bd16d3d99d8cb5045543fd6c79bc2a87c824e86ea733444a43efedf9726d33718525bb169a5d3660d67e04a869948dd5592ca4fee08aaf00e8a99b07952a670b68dea41eddcc0494381e044f88d58c8d791bc69544cec6802d8fc22383cbc0220af2852ee542caa6019f2b17f3015ddcde7bcba4c78ada21ab062e1f16a695f12a3264c2637ad03112", 0xa4}], 0x1, 0x0, 0x0, 0x10}}], 0x4, 0x44050) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) pipe2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001280), 0xaa000, 0x0) socket(0x10, 0x3, 0x0) ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40f02, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000040)) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f00000000c0)=0x40) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00:\x00\v\x00\x00'], 0x24}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000080000085000000d0000000a50000009700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) get_mempolicy(0x0, 0x0, 0x1, &(0x7f0000003000/0x1000)=nil, 0x6) r9 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r9, &(0x7f0000000180)='system_u:object_r:removable_device_t:s0\x00', 0x28) 31.160221506s ago: executing program 6 (id=170): io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_io_uring_setup(0x557d, &(0x7f0000000500)={0x0, 0xab3f, 0x80, 0x2}, &(0x7f0000000300)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000340)={0xb, 0x0, 0x1, 0x0, 0x0, 0x1, 0x240, 0x0, 0x0, 0xf, 0x3, 0x0, 0x0, 0x3, 0x4777, 0x0, 0x8, 0x400000000000000, 0x101, 0xfd, 0x0, 0x0, 0x4, 0x20000000002, 0x0, 0x2}) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000400)='.\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x80700a, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000001000), &(0x7f0000001040)={'fscrypt:', @desc4}, &(0x7f0000001080)={0x0, "ddbccf094c5457df7a3f7457a4e81d59f6bffca5bf7c026c91255969954a3cec19ae878c0ca3fce72e29df4e4dbd001eb127ffbed6cc47890c19c3edc50daa56"}, 0x48, 0xfffffffffffffffe) r4 = request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00', r3) r5 = request_key(&(0x7f0000000380)='big_key\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000100)='\x00\x1b\x00', r4) keyctl$KEYCTL_MOVE(0x1e, r5, r4, r4, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r6 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setresuid(0x0, r7, 0x0) keyctl$setperm(0x5, r3, 0x13220c28) fchown(0xffffffffffffffff, r7, r8) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) mount$tmpfs(0x0, &(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000500)=ANY=[]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 30.922799794s ago: executing program 6 (id=172): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x5, &(0x7f00000000c0)=0x7, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000018500000086000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) 29.783121595s ago: executing program 6 (id=175): mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000000), 0x800) (async) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RLERRORu(r0, &(0x7f0000000080)={0xd, 0x7, 0x2, {{}, 0x1ff}}, 0xd) 29.696302078s ago: executing program 36 (id=175): mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000000), 0x800) (async) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RLERRORu(r0, &(0x7f0000000080)={0xd, 0x7, 0x2, {{}, 0x1ff}}, 0xd) 29.690922739s ago: executing program 5 (id=177): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) (async) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a0000000000000000070000007151f9b22b2d6075dd893b003e9af4b42a1f6fa601298b2fa6a3928b16c5bc4cd3482943106e0b3cce9bace3af3248585d72feab91d9de18b6ff40a613a6726e8802f075d22f4adeb724aa7080a70c1ad2ed4a09a61ebb16f26537b253158c7727fed9d523932c50322268c560b9a04423", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028004000500080000003e12000008000500000000000800000000000000"], 0x44}}, 0x0) 29.07343951s ago: executing program 5 (id=179): socket$inet(0x2, 0x2, 0x1) ioprio_set$uid(0x3, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0xd8) keyctl$revoke(0x3, r3) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="8c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001007a5a0000240002801400018008000100ac1e000108000200ac1e00010c0002"], 0x8c}}, 0x0) 28.480756884s ago: executing program 5 (id=180): r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000003a00), &(0x7f0000003a80)=0x60, 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003d40)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)="10db44a7fffb76f6a0f126314de7a39d8eeab86b2fd10c3392777feb5f49a790d4a0b54c881fe83ece788488111d8968df4eaa36f58ff172a8af15dc", 0x3c}, {&(0x7f0000000340)="2a28a9650e8856dd866c9db0b36f2d18c78fd9aae7392942650b1949e59c0a64117eaf0088b7e395118681f3cb8f7dbfdbaa423c78b4471678656b2b739a40401c24f9593b10bfc1e10871dffb624a6558329dec34101de4bc558406bed8d24229ebbae652608361f0ca54bad4c20c149278efaf7c", 0x75}, {&(0x7f00000003c0)="28f3a0c353c624bf3844c5fff93c0a727ba6249a6cd1ad50fb9974b74d7aa0815672772c7926047363d8f0f585ef2f7d5ad9faac96a7", 0x36}, {&(0x7f0000000400)="304a1100ad2af59c0b5702a7ddc5bc3dfbc6e0fab4e102f4995ead16726009fde4201fea0a4212f0791bc10e2db6b607452370991a13bbd765572670b0c25432f04569bd233a6e70c0c79c7baf8c20d0c46ac2e4633fff5bb4ecf73ae7e6c0861e8db7d69f0d1b76a44715e3958f4a5ba76cc567bfefdf531df5cd532072433d97188b89dec576b82bf06e3036776aa5169cc29bc0d6f0ebcafe2b97", 0x9c}, {&(0x7f00000006c0)="73652c2f44f8e9fc837563fffb40ec58d8cde964c898acf03e93d4505043a566862fb9a4012b95bb7739f794969a535c292b37da9cb5760ada172367ae7fdbab52c27efbda012ba37fb1e95885cade309bbaa1995740b362d7df71efe52c898c0dd1b5766dfeeff4c2d8396424b114d3c07b9a5fee4299fa229833d56edd3435", 0x80}, {&(0x7f00000012c0)="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", 0x800}, {0x0}], 0x7, &(0x7f00000007c0)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88, 0x1000}}, {{&(0x7f0000000880)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000900)="e8ea525409ae521bc697929a64ee8f0b2e60f6ead2e3ba398bf84b23ca3190ceaf30bae6e6e01201a407d3b7500e77aba353ab2e8fcff93e9b572a405840aab2a2e6fd5f85a19e34671c3dfc5ca39a535b142d73411b9932fd3a1c824ffb837da068cad6f1695a70", 0x68}, {&(0x7f0000000980)}, {&(0x7f00000009c0)="de820fedf889ae14985ce2d4bcac7e23801c5d4b6fadfa53a13211fe39d2035aad415b4baca29aa2b9c71d1d1f2ef947d3caa7b4d9659771cabc46ceb933f53300d85286c8068192dbd232e2bc3888a78cbdf2cc54ce3926bed452556c57742406f02fac71df78ccf3712ed60853372f18e5", 0x72}, {&(0x7f0000000a40)="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", 0xfc}, {&(0x7f0000000b40)="af009d8c37f6737e26f2ef080d593c02605432b57348425581f12409685eaad948fdc22a23aec4aa32178f6d", 0x2c}], 0x5, 0x0, 0x0, 0x40000}}, {{&(0x7f0000000c00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001080)=[{0x0}, {&(0x7f0000000d00)="54bbff00ee67e9a11a0949e7c1f9b1e1ef8d9440ccf750", 0x17}, {&(0x7f0000000d40)="b05af4abacd42c97414621899a4046ec759d220f78a8e8bfc99b7449a8394396d22796c2bb697a46a0f4ff1c2744a825fd0ad7181d1383a300997192e50303e179eda690759196782bf699cbaf8e4be39e8e3c3bfab7226d7f6988c5a67f6377acf6cf4aa25754551492ad1f39c2d3b50d1667f7c5fd72b917fc88762525e2bae473dfc98f9dfd559081e2bbbf1b2b746ee86033076c8ef663036c2180b326362a85a1211b5d06397cf09b175b51e301d9a9169489f36ae5b8282b533284da56030c728129f7ecb13c2b14eab6b29831a87f72d2b4746c6d518d4d797c4a1fb8d4871b8cd1fd2164ff7e12e8b487293e9b88ad968500478a", 0xf8}, {&(0x7f0000000e80)="457762267762d7e5a9a2788b5f3325bef15afa14c8f33cb79068b4e95f99a9999bd38d4877fa45b76c0f399255fd536e172464d7eb8547b5f3ddec7030113dac1168805cd60010daa60607a1f0b8a7db1af33b61b2a695c9817e717cb2595b502e60f91ceba7276545f0526480e56d6e27b5e13d5d9a2e969f92ebbd2bd2e1be6e4bbe5712b635cb200ae42211b19670aef7f7b1d7d6c6d3d80325f43741dd0cefea446e4902af90762363edbdab254f3e449c157063da853fae525379b8a3e28a2069aa1f0339fd484afc3cad3b3a19505d9ae3842f4c0a34ab4ca6b15c6f42a35838552cc3a261208c57830382feeafaaf83c7337b7dd6", 0xf8}, {&(0x7f0000000f80)="a308addfaa4ae5aeafd5d80b1802b0f0803cae11009274786e1f701eb34ad9136e0c268497115fe437da70555b37ee59eefac206625c8286693bf95e2080072bbf1454d54131490a4ed68b5d8e270a32a76f30ffa596b3828aa6bdc20a8c88f6953630859f2c3b0034120c9b417556ab08bdf97ae4ea6ea7e59188ca36deeed9112d1b59b71660f9770f8530f052090d315e1fd2fde5b2f4e4541c8d4de8338e8823aa232856b2fbd82bc47c57496a9a9d1f2ddba9bb7e36280cd83eeb8b2d46d16d2633ebf5bea813c2673224289602a7670c65c31c4df31eb8366b", 0xdc}], 0x5, &(0x7f0000003ac0)=ANY=[@ANYBLOB="240000000000000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000d00003000000000000000a000", @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x170, 0x50}}, {{0x0, 0x0, &(0x7f0000003d00)=[{&(0x7f0000003c40)="b3338dceb2c0d7053ebb0edfed0efcd941ce11d25f3dae6169f906bd16d3d99d8cb5045543fd6c79bc2a87c824e86ea733444a43efedf9726d33718525bb169a5d3660d67e04a869948dd5592ca4fee08aaf00e8a99b07952a670b68dea41eddcc0494381e044f88d58c8d791bc69544cec6802d8fc22383cbc0220af2852ee542caa6019f2b17f3015ddcde7bcba4c78ada21ab062e1f16a695f12a3264c2637ad03112", 0xa4}], 0x1, 0x0, 0x0, 0x10}}], 0x4, 0x44050) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) pipe2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001280), 0xaa000, 0x0) socket(0x10, 0x3, 0x0) ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40f02, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000040)) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f00000000c0)=0x40) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00:\x00\v\x00\x00'], 0x24}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000080000085000000d0000000a50000009700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) get_mempolicy(0x0, 0x0, 0x1, &(0x7f0000003000/0x1000)=nil, 0x6) r9 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r9, &(0x7f0000000180)='system_u:object_r:removable_device_t:s0\x00', 0x28) 27.498578251s ago: executing program 5 (id=181): io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_io_uring_setup(0x557d, &(0x7f0000000500)={0x0, 0xab3f, 0x80, 0x2}, &(0x7f0000000300)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000340)={0xb, 0x0, 0x1, 0x0, 0x0, 0x1, 0x240, 0x0, 0x0, 0xf, 0x3, 0x0, 0x0, 0x3, 0x4777, 0x0, 0x8, 0x400000000000000, 0x101, 0xfd, 0x0, 0x0, 0x4, 0x20000000002, 0x0, 0x2}) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000400)='.\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x80700a, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000001000), &(0x7f0000001040)={'fscrypt:', @desc4}, &(0x7f0000001080)={0x0, "ddbccf094c5457df7a3f7457a4e81d59f6bffca5bf7c026c91255969954a3cec19ae878c0ca3fce72e29df4e4dbd001eb127ffbed6cc47890c19c3edc50daa56"}, 0x48, 0xfffffffffffffffe) r4 = request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00', r3) r5 = request_key(&(0x7f0000000380)='big_key\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000100)='\x00\x1b\x00', r4) keyctl$KEYCTL_MOVE(0x1e, r5, r4, r4, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r6 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setresuid(0x0, r7, 0x0) keyctl$setperm(0x5, r3, 0x13220c28) fchown(0xffffffffffffffff, r7, r8) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) mount$tmpfs(0x0, &(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000500)=ANY=[]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 27.310248845s ago: executing program 5 (id=182): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x2, 0x1}, 0x6) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in=@remote}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xe8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b0500155000010001000000000000801248018086dd1700d100"/46, 0x2e}], 0x1}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000040)={0x90000008}) connect$unix(r1, &(0x7f0000000140)=@abs, 0x6e) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000100)=0x33, 0x4) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffb000/0x2000)=nil) r5 = socket$packet(0x11, 0x3, 0x300) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000f8ff00"/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000140)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b5af8fe00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000200850000001400000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r7, 0x0, 0xe, 0x0, &(0x7f0000000040)="0200ad66890ebbf7eb9f5fd3fda2", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1000, &(0x7f00006c3000/0x1000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r11, 0x4048aecb, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x5000001, 0x13, r8, 0xd2a67000) ioctl$KVM_RUN(r11, 0xae80, 0x0) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x8) 25.958989397s ago: executing program 5 (id=184): r0 = socket(0x21, 0xa, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) syz_io_uring_setup(0x19d3, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x81, 0xc0102) r2 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_INFO(r2, 0xe, 0x0) sync_file_range(r1, 0x1ff, 0x7, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x118) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)=0x10001) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$video(0x0, 0xa7, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1) r5 = getpid() shmctl$SHM_LOCK(r2, 0xb) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) 25.615474903s ago: executing program 37 (id=184): r0 = socket(0x21, 0xa, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) syz_io_uring_setup(0x19d3, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x81, 0xc0102) r2 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_INFO(r2, 0xe, 0x0) sync_file_range(r1, 0x1ff, 0x7, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x118) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)=0x10001) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$video(0x0, 0xa7, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1) r5 = getpid() shmctl$SHM_LOCK(r2, 0xb) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) 10.36109041s ago: executing program 8 (id=202): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) connect$bt_sco(r3, 0x0, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000600)={0x1f, @none}, 0x8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) shutdown(r3, 0x1) writev(r3, &(0x7f0000000140)=[{&(0x7f00000002c0)="be330d00bc02c4dc68c1d3ca38ef5f6d8cd0fb84a78f187651db6aab77e5900ccb3e49b173178ccc1f26ffb055a58feda646cae44e4070792e0107e46fa36d529f8b47a278f16af968e9366ed7d5b44e1e224ec3964be6f7adaa4dc94f67306e28911b0091eae83b5a4dc07ec8410db06e2ab8cab59aa1cac02ce08aed819b4f7a6b6e8fb93b75d10071aaf79e1566240d7d5daef94c8a42912e4c113b85839995", 0xa1}, {0x0}, {&(0x7f00000004c0)="f1143ed3c364b553e7b691ae9c7505849d34b5fb1f3f9ec81dbf73c74f20c5d865ad7da3177f36a29ee1b4c9aceb4365d12d4fd8bab038fae97f9585bbb86957a6919a6167e92f0d3a2b146e3bff4bc91656", 0x52}, {&(0x7f0000000580)="4b891bb33d312846d0829289bb3e399fd59140d59f994b6e11ea81bdd637fcc7fc29965584d26f", 0x27}], 0x4) connect$bt_sco(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, @none}, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xeb8, 0x30, 0xb, 0x0, 0x0, {}, [{0xea4, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe58, 0x2, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x1}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffc01}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x81}]}}, @TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb8}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="800013"], 0x28}, 0x1, 0x0, 0x0, 0x20040801}, 0x0) 9.424569392s ago: executing program 8 (id=204): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x1, 0x2}, 0x6) write(r0, &(0x7f0000000000)="38000300010003", 0x7) keyctl$dh_compute(0x17, &(0x7f0000000a80), 0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)={'nhpoly1305-neon\x00'}}) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000380)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000340)={0x8, 0xffffffffffffffff}) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000100)={0xc}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r3, &(0x7f00000006c0)=[{&(0x7f0000000400)=""/164, 0xa4}, {&(0x7f00000000c0)=""/48, 0x30}, {&(0x7f0000000240)=""/123, 0x7b}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000600)=""/191, 0xbf}, {&(0x7f0000000300)}, {&(0x7f0000000540)=""/63, 0x3f}], 0x7) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_pts(r3, 0x801) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ppoll(&(0x7f0000000080)=[{r4, 0xad0}, {r4, 0x4063}], 0x2, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r4, 0x40045402, 0x0) chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x4, 0x200) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r5, 0x0) iopl(0x3) 8.59896151s ago: executing program 9 (id=176): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r4, 0x3b70, &(0x7f0000000240)={0x30}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x50}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x0, 0x0, 0x0, 0xe4}]}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x14}]}}}]}]}], {0x14}}, 0xc4}}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b0", 0x27, 0x11, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000040)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r9, @ANYBLOB="010000000000fbdbdf25010000000800050001000000060006004e220000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5427c0108800c01008006000500070000002400020086650b35f0b4c2dc04a95e352f55e8204db1e72262099a4daa6bd5d598d1ecdb24000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e24ac1e0001000000000000000008000300000000009c0009801c00008006000100"], 0x1d8}}, 0x0) 7.899083171s ago: executing program 8 (id=210): r0 = socket(0x2a, 0x2, 0x0) mlockall(0x4) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) llistxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000040)='syzkaller\x00', 0x9, 0x7a, &(0x7f00000004c0)=""/122, 0x41000, 0xe, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x3, 0x304b6548, 0x3dc1}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000005c0)=[0xffffffffffffffff], &(0x7f0000000600)=[{0x2, 0x4, 0x6, 0xa}, {0x5, 0x3, 0xd}, {0x5, 0x2, 0xe, 0x1}], 0x10, 0x100, @void, @value}, 0x94) umount2(&(0x7f0000001540)='./file0\x00', 0x2) dup3(r1, r2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x0, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r9}, 0x10, &(0x7f0000000180)={&(0x7f0000000200)={0x5, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "5893df66bf3ce816"}}, 0x48}}, 0x0) sendmsg$can_bcm(r8, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r9}, 0x10, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB='\a\x00'/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000000000adb06909d592bc208a287c965b1b4d39dc60a5d1b461bdab3134060000000b0eed6bb1356ee4503320876e09cc094bd462a6ae0755dcbbd9bb8dadbe92e291c9825d5f009d23271a43c732df87bee07f1c6118b482da1ee2484868c3eb333731606376000000000000000000005bdb7cca99120c1e2322b9a69e2c771078412ab367eede7c4fb44a78cdcba18d3b5b0b4c9fc1ed732965419dec1052cbb92473d65137be65d4645c18bd4d84a6bce00000000000000000"], 0x48}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000001c0001000000000056641298388fb76d49879126e4780000000002000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00*\x00'], 0x1c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd27, 0x71b527, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8, 0x2f, 0x5}]}}]}, 0xfffffffffffffe35}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 7.040005869s ago: executing program 9 (id=213): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x2, 0x1}, 0x6) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in=@remote}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xe8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b0500155000010001000000000000801248018086dd1700d100"/46, 0x2e}], 0x1}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000040)={0x90000008}) connect$unix(r1, &(0x7f0000000140)=@abs, 0x6e) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000100)=0x33, 0x4) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffb000/0x2000)=nil) r5 = socket$packet(0x11, 0x3, 0x300) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000f8ff00"/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b5af8fe00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000200850000001400000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r7, 0x0, 0xe, 0x0, &(0x7f0000000040)="0200ad66890ebbf7eb9f5fd3fda2", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1000, &(0x7f00006c3000/0x1000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r11, 0x4048aecb, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x5000001, 0x13, r8, 0xd2a67000) ioctl$KVM_RUN(r11, 0xae80, 0x0) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x8) 6.869352054s ago: executing program 8 (id=215): ioprio_set$uid(0x3, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0xd8) keyctl$revoke(0x3, r3) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="8c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001007a5a0000240002801400018008000100ac1e000108000200ac1e00010c0002"], 0x8c}}, 0x0) 6.816528831s ago: executing program 7 (id=217): r0 = io_uring_setup(0xdac, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe0500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r9 = accept(r7, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e0003000f3a000002800000121f", 0x2e}], 0x1}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.845985222s ago: executing program 7 (id=219): r0 = socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x3, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$alg(0x26, 0x5, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000000)=0x8f8) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r5 = accept4(r3, 0x0, 0x0, 0x800) syz_emit_ethernet(0x4e, &(0x7f00000002c0)=ANY=[@ANYBLOB="cf702e8cf675aaaaaaaaaabb86dd6000000000183a0000000000000000000000ffffac1414bbff0200000000000000000000000000019c59fd70fbb8c2a3ff020000000000000000000000000001"], 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x4c810) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r7}, 0x18) bind$can_j1939(r2, &(0x7f00000001c0)={0x1d, r1, 0x1, {}, 0x1}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$selinux_load(r11, &(0x7f0000000340)=ANY=[@ANYRES8=r7], 0x23) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0xd00, 0x0) socket$packet(0x11, 0x3, 0x300) 5.186412325s ago: executing program 9 (id=221): writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000880)='GPL\x00', 0x5, 0xc3, &(0x7f0000000380)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r3) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r5, 0x103, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8040044}, 0x20004044) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042cbd7000ffdbdf255100000008000300", @ANYRES32=r4, @ANYBLOB="0a000600ffffffffffff000005008a00000000000a00060008021100000000000a000600ffffffffffff00200a00061cf426ffffffffffff000005246406e6670d7090a2ccb91fff087bc37eaf4106c12d23060ed1950e5d"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x1, r7}) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f00000002c0)={0x1}) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x230}) ioctl$UFFDIO_COPY(r8, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x1000, 0x2}) 4.558558873s ago: executing program 9 (id=223): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r5 = syz_io_uring_setup(0x279, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000040)={0x0}) syz_io_uring_setup(0x677d, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2000000, 0x3a5}, &(0x7f0000000300), &(0x7f0000000180)) io_uring_enter(r5, 0x3701, 0x0, 0x0, 0x0, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r4}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "408100008b20aaf0"}, 0x10}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, 0x0) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, 0x0, 0x0) listen(r8, 0x8) sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x1, 0x2c5, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0xd0, 0x5d, 0xb, 0x40, 0x1bc7, 0x1072, 0x7364, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b3, 0x1, 0x6, 0x5, 0xb0, 0x4, [{{0x9, 0x4, 0x97, 0x10, 0xa, 0xff, 0x99, 0xc7, 0x3, [], [{{0x9, 0x5, 0xb, 0x10, 0x8, 0x4, 0xe, 0x2}}, {{0x9, 0x5, 0xe, 0x4, 0x3ff, 0xff, 0xb, 0xa, [@generic={0x6f, 0x1, "b49858fe3c066a992a627ef0425893ced169e5e827029b03651274126975e02d5a7a976a5eefea8af088ee0a7b67ce30ce627f27065738b03d49834a77db830fa55e37ba6906f7519b0ce261b390c0379cb2b84f4685857e28e1b2712d0b3742515b6f57b6178d24adc8c4ca89"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x20, 0x8, 0x2, 0xc0}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x2, 0x8c, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xff, 0x9078}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x1}]}}, {{0x9, 0x5, 0xd, 0x1, 0x20, 0x3, 0x9, 0x2, [@generic={0xe2, 0x0, "88a71ac59feab7d0ecedf8d6275290e4ca4b5ab450bf9bcc0cd8258d17a5f502886c9970191acca50b832f268320d5605f013deb009d4a2bacb8ff20f748206bcf8e73682a9e8e19bac595cbace4a876a7e4542973f53f5df9f7562df413a9ed6ce28d85c7bdbd04a30f645f75eb32637fb43ecf6c0bae540d927d61329c90635058d11447c652c812b79c05d3f62985dd72ad8fdf0bfb52dfd01e9ca9ca2965516cb3a835d5f02c855e012a81b417f5832689fc80bdeeecbd2af543b345a0ef56377c2b12cb0d0dbbe9d36d35035fdda31165722c6f87b88aee8a931283af38"}, @uac_iso={0x7, 0x25, 0x1, 0xc2, 0x0, 0x10}]}}, {{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x10, 0x2, 0x1}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x4, 0x6, 0x4}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x5, 0x10, 0x23}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0xd, 0xc, 0xb8, [@generic={0xe1, 0x9, "34fe821a51437f7524353aedf7f89dfa804eda485a035142ba964286ff85fafd81be8eb0f6132982d7d5ee757dd463342f5da307bf8a978881edbdfbb4e3d1fa9d7b024f6aaff1ebfa24007b50b30afcb87d7ae544efdd555cc9bf8096340a70dba98030daa3e86658ba894be03ce38173431082efacf60fff695c016cad9bc2f694443130e9608b1c36d5da237b069dc517414749e31f3a3112cf96738b5c2f7f51a12abe8a3662ff7e2d678122a5a4e2597137f604c71464599ee5d5b0ef93ef020b9e8afbd06a64db25e398645406929fd009407687987fb63adaa6fea2"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x10, 0x81, 0x7f, 0x5}}]}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x201, 0x1, 0x8, 0x7, 0x20, 0x1}, 0x3d, &(0x7f0000000380)={0x5, 0xf, 0x3d, 0x5, [@wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x40, 0xfb, 0x3, 0x81}, @wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0x5d, 0x1, 0x0, 0xff}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa, 0xfc, 0x7, 0x4, 0x81}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "1cf6f3fd936d5a14f02cf61ae63dcb77"}]}, 0xa, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x140c}}, {0x8d, &(0x7f0000000440)=@string={0x8d, 0x3, "80ea555b04073947242d031d986823279f616a0ed0c465e5cbcda5a105177dd36fa0040a708ba5fc2b26f8fb84099ab6bd5115def5bd25bdfd15cf0f9284e0b8b772ec6e2ff1afe61601ce48462ba5e1817f73ba9afe63a79eb74b146539b246a40ec9c80a77cc399e0e06a5b48bb4efb1dc509b3280fdf58360157e268c4ba6c378dc047693224ed8797b"}}, {0x78, &(0x7f0000000500)=@string={0x78, 0x3, "aaa720db2c877d5e349c712061ceb24a33fc6c0b143bec827b337a995a4be7c4bc2658a9927e4dfc3ca99b664a4e8bde4edcfe4d2338677610349e56f958e095a677e7b6444f4d1e10525a1e6a541b610c486b88f0a3d9d37049c37ccc9965d4736ee3d85c376a4df6b69b7d72d5e7c5e353c191b73f"}}, {0x7e, &(0x7f0000000580)=@string={0x7e, 0x3, "e9fd5d864521916c4508fb1639b0802e70ca332b19bce4939af83050811ba0a7c91d0cb443ebb1e84eed90c6d70ffbbc6c86e1381a075f7cd4692c20243b2a7c50323829c31229a9e372f6061340b4e6a3f835be95e38c1efeb66b68c882c49ae379ba4044e57517093f91104befd9e9ada45657b26d74b32f5eda5e"}}, {0xc0, &(0x7f00000008c0)=ANY=[@ANYBLOB="c00323cec97d6a6f00a3b6d0cf64224f053faf1b53b94a9c1d46e6fde588f8fb34d50f7c8c24806f6a87faa2e60e5eb08e5fd97454b0d47e68cba324e94a7c68b8ce4a78c030446195223a75bfe3453d5009e677a981a791a0b6338deb78af636fcabe808995b3c51928ff4eead25f12ab71681007b1e4c3fd0fe49dddd1625d7bef0bcf6535133a63d076577ad994829c2e9562a55924184b2409a61eac971a07b2918fc47136da254589d17d99c947b935323903a7417e1e4362debdbcf1f6b41212888709dece8b0e32d9968676f74cd00bce8f7356c52ffef1397106adf1d0b9a26316e963a4eee38cc386ce980d771624"]}, {0x3d, &(0x7f00000006c0)=@string={0x3d, 0x3, "0babbe73d3017c1b0e1244ecf6550316aaad6785aeeaac3d2a4043d17e0c1c5d5ef64e9beec21b5134952865a0fbf68eb0e5ea7f8795e48e3b71e8"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f0000000740)=@string={0x4, 0x3, "8497"}}, {0x7f, &(0x7f0000000780)=@string={0x7f, 0x3, "56048781ef56de309466b7e566f0974b6a54fdd539be57b84449a48340430f9a0fc1c33132493874fec7dc851d655643ea8d63058c24199b4ca11a6dab91e7de5b961e83a920660cb65cc4985cc157f166c7a45428c76ccc3db0eb1f152083d09970cbbd9120d12e63ebd06605daab06bd50d5c4d73d6c908e319a197b"}}]}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000ac0)={0x0, 0x0, 0x11, "0790fcc6c83ed711efba22764d06f291ef"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.446397655s ago: executing program 3 (id=224): r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000003a00), &(0x7f0000003a80)=0x60, 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003d40)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)="10db44a7fffb76f6a0f126314de7a39d8eeab86b2fd10c3392777feb5f49a790d4a0b54c881fe83ece788488111d8968df4eaa36f58ff172a8af15dc", 0x3c}, {&(0x7f0000000340)="2a28a9650e8856dd866c9db0b36f2d18c78fd9aae7392942650b1949e59c0a64117eaf0088b7e395118681f3cb8f7dbfdbaa423c78b4471678656b2b739a40401c24f9593b10bfc1e10871dffb624a6558329dec34101de4bc558406bed8d24229ebbae652608361f0ca54bad4c20c149278efaf7c", 0x75}, {&(0x7f00000003c0)="28f3a0c353c624bf3844c5fff93c0a727ba6249a6cd1ad50fb9974b74d7aa0815672772c7926047363d8f0f585ef2f7d5ad9faac96a7", 0x36}, {&(0x7f0000000400)="304a1100ad2af59c0b5702a7ddc5bc3dfbc6e0fab4e102f4995ead16726009fde4201fea0a4212f0791bc10e2db6b607452370991a13bbd765572670b0c25432f04569bd233a6e70c0c79c7baf8c20d0c46ac2e4633fff5bb4ecf73ae7e6c0861e8db7d69f0d1b76a44715e3958f4a5ba76cc567bfefdf531df5cd532072433d97188b89dec576b82bf06e3036776aa5169cc29bc0d6f0ebcafe2b97", 0x9c}, {&(0x7f00000006c0)="73652c2f44f8e9fc837563fffb40ec58d8cde964c898acf03e93d4505043a566862fb9a4012b95bb7739f794969a535c292b37da9cb5760ada172367ae7fdbab52c27efbda012ba37fb1e95885cade309bbaa1995740b362d7df71efe52c898c0dd1b5766dfeeff4c2d8396424b114d3c07b9a5fee4299fa229833d56edd3435", 0x80}, {&(0x7f00000012c0)="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", 0x400}, {&(0x7f0000000540)="5c5fbb413b6aa60a685fa39916037a429d304964efbff441933d24017a38dfdd7df0b19def9c7bb4f5e12c8708ef261bdbeebab9db22a248a33a3761a20169ab4a2e970a15923ef6a28b18aed1375455cb6c8e193de6bd2438", 0x59}], 0x7, &(0x7f00000007c0)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88, 0x1000}}, {{&(0x7f0000000880)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000900)="e8ea525409ae521bc697929a64ee8f0b2e60f6ead2e3ba398bf84b23ca3190ceaf30bae6e6e01201a407d3b7500e77aba353ab2e8fcff93e9b572a405840aab2a2e6fd5f85a19e34671c3dfc5ca39a535b142d73411b9932fd3a1c", 0x5b}, {&(0x7f0000000980)}, {&(0x7f00000009c0)}, {&(0x7f0000000a40)="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", 0xfc}, {&(0x7f0000000b40)="af009d8c37f6737e26f2ef080d593c02605432b57348425581f12409685eaad948", 0x21}], 0x5, 0x0, 0x0, 0x40000}}, {{&(0x7f0000000c00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001080)=[{0x0}, {&(0x7f0000000d00)="54bbff00ee67e9a11a0949e7c1f9b1e1ef8d9440ccf750", 0x17}, {&(0x7f0000000d40)="b05af4abacd42c97414621899a4046ec759d220f78a8e8bfc99b7449a8394396d22796c2bb697a46a0f4ff1c2744a825fd0ad7181d1383a300997192e50303e179eda690759196782bf699cbaf8e4be39e8e3c3bfab7226d7f6988c5a67f6377acf6cf4aa25754551492ad1f39c2d3b50d1667f7c5fd72b917fc88762525e2bae473dfc98f9dfd559081e2bbbf1b2b746ee86033076c8ef663036c2180b326362a85a1211b5d06397cf09b175b51e301d9a9169489f36ae5b8282b533284da56030c728129f7ecb13c2b14eab6b29831a87f72d2b4746c6d518d4d797c4a1fb8d4871b8cd1fd2164ff", 0xe9}, {&(0x7f0000000e80)="457762267762d7e5a9a2788b5f3325bef15afa14c8f33cb79068b4e95f99a9999bd38d4877fa45b76c0f399255fd536e172464d7eb8547b5f3ddec7030113dac1168805cd60010daa60607a1f0b8a7db1af33b61b2a695c9817e717cb2595b502e60f91ceba7276545f0526480e56d6e27b5e13d5d9a2e969f92ebbd2bd2e1be6e4bbe5712b635cb200ae42211b19670aef7f7b1d7d6c6d3d80325f43741dd0cefea446e4902af90762363edbdab254f3e449c157063da853fae525379b8a3e28a2069aa1f0339fd484afc3cad3b3a19505d9ae3842f4c0a34ab4ca6b15c6f42a35838552cc3a261208c57830382feeafaaf83c7337b7dd6", 0xf8}, {&(0x7f0000000f80)="a308addfaa4ae5aeafd5d80b1802b0f0803cae11009274786e1f701eb34ad9136e0c268497115fe437da70555b37ee59eefac206625c8286693bf95e2080072bbf1454d54131490a4ed68b5d8e270a32a76f30ffa596b3828aa6bdc20a8c88f6953630859f2c3b0034120c9b4175", 0x6e}], 0x5, &(0x7f0000003ac0)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\r\x00\x000\x00\x00\x00\x00\x00\x00', @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x170, 0x50}}, {{0x0, 0x0, &(0x7f0000003d00)=[{&(0x7f0000003c40)="b3338dceb2c0d7053ebb0edfed0efcd941ce11d25f3dae6169f906bd16d3d99d8cb5045543fd6c79bc2a87c824e86ea733444a43efedf9726d33718525bb169a5d3660d67e04a869948dd5592ca4fee08aaf00e8a99b07952a670b68dea41eddcc0494381e044f88d58c8d791bc69544cec6802d8fc22383cbc0220af2852ee542caa6019f2b17f3015ddcde7bcba4c78ada21ab062e1f16a695f12a3264c2637ad03112", 0xa4}], 0x1, 0x0, 0x0, 0x10}}], 0x4, 0x44050) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) pipe2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001280), 0xaa000, 0x0) socket(0x10, 0x3, 0x0) ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40f02, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000040)) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f00000000c0)=0x40) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00:\x00\v\x00\x00'], 0x24}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000080000085000000d0000000a50000009700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) get_mempolicy(0x0, 0x0, 0x1, &(0x7f0000003000/0x1000)=nil, 0x6) r9 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r9, &(0x7f0000000180)='system_u:object_r:removable_device_t:s0\x00', 0x28) 4.420965394s ago: executing program 4 (id=225): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000100)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x800000}}, 0x18) 4.34671075s ago: executing program 7 (id=226): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0xa031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="090000000400000004000000f400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="020000000100"/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c000000040000000700000000000000f00e84c5da4b663d283d7de961684f020d4462e09accf4842d896842aeaa7b9865e74dfe35eab634e411566be54d92663bdc215497f47a558f15b980899e410688afa2109cae28980757459b28e56366ece24e7577f31ef167ef2aa280aec3184a0a1998fe64998fb81fa14cdb27426523a94c689d1041527e0a00cd44e4f076259d91b5b600"/163, @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000000200"/28], 0x48) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x4}) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x18) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}}) syz_io_uring_setup(0x46a8, &(0x7f0000000000)={0x0, 0x0, 0x4}, &(0x7f0000000100), &(0x7f0000000140)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{}, 0x0, 0x0}, 0x20) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setrlimit(0x8, 0x0) syz_open_dev$video4linux(0x0, 0x10000, 0xe8fc0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$unix(0x1, 0x5, 0x0) r6 = dup2(r5, r3) close_range(r6, 0xffffffffffffffff, 0x0) 4.311530172s ago: executing program 4 (id=227): socket$inet(0x2, 0x2, 0x1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x400}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}, 0x100}], 0x1, 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x8, 0x24, 0xfff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_open_procfs(0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) 4.236124785s ago: executing program 4 (id=228): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) tee(r1, r0, 0x60000000000, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x25) setresuid(0xee01, 0xee01, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r3 = accept(r2, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) ioprio_set$uid(0x3, 0x0, 0x4004) sendmmsg$alg(r3, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES8=r4, @ANYRES32=0x0, @ANYRESDEC=r4], 0x68}}, 0x4000005) syz_clone(0x200, &(0x7f0000000100)="74be29228a92e4fb5b42da54a4af52922ed965e8639cb0bd97cbe9cd466b55927f6a", 0x22, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000380)="c5e3d30365bb6d613c3aff1906338e33c0b28b9c7c7192fb236458b033565d59aa03587cc55606fd0123789d5b07468f5a82e6cd9114fc0f7f316e5b025d9f24b038b0b4888fc2a2230d8c349cc7aaf35e0fb3fc917f63590d0f50d257ae8b7e4491fb66427a688e686752d41718e7bfd23c863872882c70e99e56ef0707506a32135b583c56930c6afc5ddcd9640402ee1cd2a7fde754783883e4524b5d3d70b325223ba73ad6e7659d4289d35fae75166563fb89cc0ccca91f7725d05bef2ae5d0d0eea88c54b98c2e9478498bc25fffabc977800e7b03e2479f4d589b292fe748282c27481479fd50631e48b11621178f8e") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9febe30018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x12, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000614f7dae6a62bcdae5fcf8cd237f4e0000009500"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r6 = add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000000000006162636465666768696a6b6c04006f70"], 0x18, 0xfffffffffffffffd) keyctl$unlink(0x9, r6, 0xfffffffffffffffd) 4.066989141s ago: executing program 4 (id=229): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) connect$bt_sco(r3, 0x0, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000600)={0x1f, @none}, 0x8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) shutdown(r3, 0x1) writev(r3, &(0x7f0000000140)=[{&(0x7f00000002c0)="be330d00bc02c4dc68c1d3ca38ef5f6d8cd0fb84a78f187651db6aab77e5900ccb3e49b173178ccc1f26ffb055a58feda646cae44e4070792e0107e46fa36d529f8b47a278f16af968e9366ed7d5b44e1e224ec3964be6f7adaa4dc94f67306e28911b0091eae83b5a4dc07ec8410db06e2ab8cab59aa1cac02ce08aed819b4f7a6b6e8fb93b75d10071aaf79e1566240d7d5daef94c8a42912e4c113b85839995", 0xa1}, {0x0}, {&(0x7f00000004c0)="f1143ed3c364b553e7b691ae9c7505849d34b5fb1f3f9ec81dbf73c74f20c5d865ad7da3177f36a29ee1b4c9aceb4365d12d4fd8bab038fae97f9585bbb86957a6919a6167e92f0d3a2b146e3bff4bc91656", 0x52}, {&(0x7f0000000580)="4b891bb33d312846d0829289bb3e399fd59140d59f994b6e11ea81bdd637fcc7fc29965584d26f", 0x27}], 0x4) connect$bt_sco(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, @none}, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xeb8, 0x30, 0xb, 0x0, 0x0, {}, [{0xea4, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe58, 0x2, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x1}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffc01}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x81}]}}, @TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb8}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="800013"], 0x28}, 0x1, 0x0, 0x0, 0x20040801}, 0x0) 3.277146113s ago: executing program 3 (id=230): socket$inet(0x2, 0x2, 0x1) ioprio_set$uid(0x3, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0xd8) keyctl$revoke(0x3, r3) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="8c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001007a5a0000240002801400018008000100ac1e000108000200ac1e00010c0002"], 0x8c}}, 0x0) 2.538420874s ago: executing program 7 (id=231): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x2, 0x1}, 0x6) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in=@remote}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xe8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b0500155000010001000000000000801248018086dd1700d100"/46, 0x2e}], 0x1}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000040)={0x90000008}) connect$unix(r1, &(0x7f0000000140)=@abs, 0x6e) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000100)=0x33, 0x4) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffb000/0x2000)=nil) r5 = socket$packet(0x11, 0x3, 0x300) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000f8ff00"/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b5af8fe00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000200850000001400000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r7, 0x0, 0xe, 0x0, &(0x7f0000000040)="0200ad66890ebbf7eb9f5fd3fda2", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1000, &(0x7f00006c3000/0x1000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r11, 0x4048aecb, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x5000001, 0x13, r8, 0xd2a67000) ioctl$KVM_RUN(r11, 0xae80, 0x0) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x8) 2.335405145s ago: executing program 4 (id=232): syz_usb_connect$uac1(0x7, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b0001010000000904000012020a0000052406000005240000000d240f010000000000000000", @ANYRESOCT], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, 0x0, 0x0) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e27, 0xd142, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x8}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000840)=0x6) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_debug_messages', 0x149a82, 0xa) write$cgroup_int(r4, &(0x7f0000000040)=0x1f00, 0x12) socket(0x2a, 0x2, 0x0) prlimit64(r3, 0x1, &(0x7f0000000380)={0x6, 0x5ac}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000100)="b98287895128d78e46a788cc2f926429e5ec6419e9a295754d1e603f8af3442cd6b1323af5b276705ed029ea07e05c078c54f45fe1f40dacc47d459e", 0x3c}, {&(0x7f00000003c0)="5ffc77", 0x3}], 0x2}}], 0x1, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="440000007795b4927d06fd8eec8e2d85377c6f0748bed66d8807b9b9411667330329a7602d9c054ceb13c19541ce96629dd1b3eddd4ca809c7bc2952a307fd83c85392b251fc1b442cc108d032e9e080a5002138dad7da832e42095c75437eed17aa6a2c3ab311aaa8e0aa348cfb29667b174ef4f557ba9e81fc91e726ad113da6427eaf747bcf", @ANYRES16=r1, @ANYBLOB="010000000000fcffffff090000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300000000000800090000000000"], 0x44}}, 0x0) 1.83319535s ago: executing program 3 (id=233): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x3]}, 0x8) waitid(0x2, r0, &(0x7f0000000180), 0x8, &(0x7f0000000480)) socket$inet6_sctp(0xa, 0x801, 0x84) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x5, 0x12, 0xffffffffffffffff, 0x0) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000340)=""/23) read(r1, &(0x7f00000002c0)=""/199, 0xc7) mkdir(&(0x7f0000000240)='./file0\x00', 0xc4049c7be93371e9) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000100)={0x1}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x100) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000000c0)={{r2}, 0x0, 0x0, 0x100000}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r3, &(0x7f00000000c0), 0x2, 0x0) rmdir(&(0x7f0000000700)='./cgroup/../file0\x00') openat$cgroup_type(r3, &(0x7f0000000080), 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4621, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) 1.68315409s ago: executing program 9 (id=234): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, 0x0) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x5cb9}}, './file0\x00'}) read$char_usb(r3, &(0x7f0000000140)=""/88, 0x58) write$6lowpan_control(r2, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 0', 0x1b) write$6lowpan_control(r2, &(0x7f0000000280)='connect aa:aa:aa:aa:aa:11 0', 0x1b) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, 0x0, r1, 0x1c, 0x3, 0x2}) 1.682703542s ago: executing program 7 (id=235): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x2) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x1, 0x0, 0x5, &(0x7f0000000080)={0x0, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0xd, 0x10, 0x10, 0x0, @in6={0xa, 0x4e23, 0x4, @remote, 0x7ffffffd}, @ib={0x1b, 0x1, 0x8, {"62e7e7c4def74e7b3ccbbb0e3b44d4cc"}, 0x1ff, 0x8001, 0x1}}}, 0x118) r4 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000100)={0x10000011}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}}) write$P9_RVERSION(r2, &(0x7f0000000140)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) r5 = memfd_secret(0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12014000f273a440cd061501c3d90102030109021b0001000000000904000c019d0178000905", @ANYBLOB="872f"], 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$I2C_PEC(r0, 0x708, 0x2) (async) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x1, 0x0, 0x5, &(0x7f0000000080)={0x0, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) (async) mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000000c0), 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0xd, 0x10, 0x10, 0x0, @in6={0xa, 0x4e23, 0x4, @remote, 0x7ffffffd}, @ib={0x1b, 0x1, 0x8, {"62e7e7c4def74e7b3ccbbb0e3b44d4cc"}, 0x1ff, 0x8001, 0x1}}}, 0x118) (async) epoll_create(0x5) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000100)={0x10000011}) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}}) (async) write$P9_RVERSION(r2, &(0x7f0000000140)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) (async) memfd_secret(0x0) (async) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) (async) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12014000f273a440cd061501c3d90102030109021b0001000000000904000c019d0178000905", @ANYBLOB="872f"], 0x0) (async) 1.564409798s ago: executing program 9 (id=236): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/resume_offset', 0x0, 0x0) read$usbfs(r1, &(0x7f00000001c0)=""/93, 0x5d) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES8=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x1c, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) syz_pidfd_open(r5, 0x0) r6 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r6, 0x4d10, 0x2, 0x2, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) read$FUSE(r4, &(0x7f0000001600)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r9, {0x7, 0x29, 0x6, 0x400, 0x10, 0xf916, 0x3b, 0x10001}}, 0x50) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x1c, &(0x7f0000000480)={0x3, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x1713, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.033987525s ago: executing program 8 (id=237): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000003400)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffff}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000001600)='C', 0x1}], 0x1}}], 0x1, 0x0) r1 = dup3(r0, r0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='pids.events\x00', 0x26e1, 0x0) close(r2) getsockopt(r0, 0xad, 0x0, &(0x7f00000000c0)=""/142, &(0x7f0000000180)=0x8e) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001940)={{{@in6=@loopback, @in6=@local}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f0000000000)=0xe8) sendmsg$kcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000340)}, {&(0x7f0000000380)="69c14ca7eab07e748a5ceaa882d7f64658c48f3c3ae620f6f5da6faa58d4cc992a4f545d7599233000666d4226e5c32636ed28714bdfb3d93fd50c4e0a2c30f430e8bd401856564f9a3fcfd7f187779238b386c711c534d28c56c8dab12e42c16bbf18c62e145dd4438f5ffd0654a5d8540ebac46f", 0x75}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000000440)="c8b487ae9dd05e1149a4456c519b1622e0a8ef52157908383fa5d7ba5aac65cbfa5a4d5268e91cba7043eecd384d491086881ef66737f8b3ebd1e611f0be247341d937e70ff894e6ea37e16e6af0c0429b25914dd2b2fc669ea2a4d76d58a7ddb94d7f12b78f", 0x66}, {&(0x7f0000001540)="1885c87e38b93eb7382890c4690631e00e0ae45cb5cd22ea166da633ea5ebde9eff75e39e9e63feeeba70d02dcf062c599d949a37a79ad136c290da5ba5a392cea71db862ee7c8b8742c8b88da210b9083766240aee7dc9cde23913af8e7dd943416dbe6fae4302f7fc06e1000ef16ae7adbaa953c34526d10de2838c4469ec5cad72ff0fbd5085aec72d12595c9acafef0860ea14a30f8c81cb972793360f33c34fba0cc5375e59d3", 0xa9}, {&(0x7f0000001640)="027217ce555f8f7bc310fc0299d0ce7f6a762a0e7ce837caf81b75f48e84a1b6ff531f728ca3dd4df2187af04f28a53cdaacc5b93557fea89211b35463ad8feb19586686a906530ecac20a6c53887e8d2dae9bd958e2efed6be025bd93ca1ac6de932ecec576d8227201015504dae9207abf53cef9a46830e7ba77d787d6c67a853fad709777c50c4e361e27c1f18d693bf0aaf72f6279c751402a111f2c63a5943674d979b04c9aa134927c5d2db32bd84151cece9dbae028d0554311c6a134e3ea2659ff146850bab661450a08a2452385990708", 0xd5}, {&(0x7f0000001740)="3ea60007ad184d70e4d195193229f6aae6288142ed8f925d27126458cb3ac39fa5f2be4fc26869bf0c2d618427ed7db959cf133c96d4c73678b3cd133871c69e9ccdef1dedf03ba9f3bab68a023d786e39a98717ba90e4268a269fedcf28a04bbca3acb382cf812951c877793ec9010c75f8da68dc124a5f492aa20bcb1658ee25eda3b25ba59ef79565ed41b0133d9c5337da7f0be63204e3990472bd92af266b83888973fa4121192eab24b40b9426545bfb510f6fe6be0f6b2ae55105e2b6cd", 0xc1}, {&(0x7f0000001840)="b80ec33f66a18f4c9b07cfd26f2ffa789031e3f3617edf8d5e412e8553e0eccaa5edf11d3209225fd9b3fa70ae4bba6bb0b8f98c93a1d416515e4e5137faa44ded180b7f", 0x44}], 0x8}, 0x2404c001) socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1c8, 0x12) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[0x0], &(0x7f0000000900), 0x0, 0x1, 0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000280)={0x0, r10, r5}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) 820.521249ms ago: executing program 3 (id=238): socket$inet(0x2, 0x2, 0x1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x400}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}, 0x100}], 0x1, 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x8, 0x24, 0xfff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_open_procfs(0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) 762.57964ms ago: executing program 3 (id=239): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x3}, {0xa, 0x0, 0x0, @remote}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0xffff0000, 0x10, 0x10, 0x0, @in={0x2, 0x7, @empty}, @in={0x2, 0x4f27, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) 173.59937ms ago: executing program 3 (id=240): r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000003a00), &(0x7f0000003a80)=0x60, 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003d40)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)="10db44a7fffb76f6a0f126314de7a39d8eeab86b2fd10c3392777feb5f49a790d4a0b54c881fe83ece788488111d8968df4eaa36f58ff172a8af15dc", 0x3c}, {&(0x7f0000000340)="2a28a9650e8856dd866c9db0b36f2d18c78fd9aae7392942650b1949e59c0a64117eaf0088b7e395118681f3cb8f7dbfdbaa423c78b4471678656b2b739a40401c24f9593b10bfc1e10871dffb624a6558329dec34101de4bc558406bed8d24229ebbae652608361f0ca54bad4c20c149278efaf7c", 0x75}, {&(0x7f00000003c0)="28f3a0c353c624bf3844c5fff93c0a727ba6249a6cd1ad50fb9974b74d7aa0815672772c7926047363d8f0f585ef2f7d5ad9faac96a7", 0x36}, {&(0x7f0000000400)="304a1100ad2af59c0b5702a7ddc5bc3dfbc6e0fab4e102f4995ead16726009fde4201fea0a4212f0791bc10e2db6b607452370991a13bbd765572670b0c25432f04569bd233a6e70c0c79c7baf8c20d0c46ac2e4633fff5bb4ecf73ae7e6c0861e8db7d69f0d1b76a44715e3958f4a5ba76cc567bfefdf531df5cd532072433d97188b89dec576b82bf06e3036776aa5169cc29bc0d6f0ebcafe2b97", 0x9c}, {&(0x7f00000006c0)="73652c2f44f8e9fc837563fffb40ec58d8cde964c898acf03e93d4505043a566862fb9a4012b95bb7739f794969a535c292b37da9cb5760ada172367ae7fdbab52c27efbda012ba37fb1e95885cade309bbaa1995740b362d7df71efe52c898c0dd1b5766dfeeff4c2d8396424b114d3c07b9a5fee4299fa229833d56edd3435", 0x80}, {&(0x7f00000012c0)="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", 0x600}, {&(0x7f0000000540)="5c5fbb413b6aa60a685fa39916037a429d304964efbff441933d24017a38dfdd7df0b19def9c7bb4f5e12c8708ef261bdbeebab9db22a248a33a3761a20169ab4a2e970a15923ef6a28b18aed1375455cb6c8e193de6bd2438", 0x59}], 0x7, &(0x7f00000007c0)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88, 0x1000}}, {{&(0x7f0000000880)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000900)="e8ea525409ae521bc697929a64ee8f0b2e60f6ead2e3ba398bf84b23ca3190ceaf30bae6e6e01201a407d3b7500e77aba353ab2e8fcff93e9b572a405840aab2a2e6fd5f85a19e34671c3dfc5ca39a535b142d73411b9932fd3a1c", 0x5b}, {&(0x7f0000000980)}, {&(0x7f00000009c0)}, {&(0x7f0000000a40)="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", 0xfc}, {&(0x7f0000000b40)="af009d8c37f6737e26f2ef080d593c02605432b57348425581f12409685eaad948", 0x21}], 0x5, 0x0, 0x0, 0x40000}}, {{&(0x7f0000000c00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001080)=[{0x0}, {&(0x7f0000000d00)="54bbff00ee67e9a11a0949e7c1f9b1e1ef8d9440ccf750", 0x17}, {&(0x7f0000000d40)="b05af4abacd42c97414621899a4046ec759d220f78a8e8bfc99b7449a8394396d22796c2bb697a46a0f4ff1c2744a825fd0ad7181d1383a300997192e50303e179eda690759196782bf699cbaf8e4be39e8e3c3bfab7226d7f6988c5a67f6377acf6cf4aa25754551492ad1f39c2d3b50d1667f7c5fd72b917fc88762525e2bae473dfc98f9dfd559081e2bbbf1b2b746ee86033076c8ef663036c2180b326362a85a1211b5d06397cf09b175b51e301d9a9169489f36ae5b8282b533284da56030c728129f7ecb13c2b14eab6b29831a87f72d2b4746c6d518d4d797c4a1fb8d4871b8cd1fd2164ff", 0xe9}, {&(0x7f0000000e80)="457762267762d7e5a9a2788b5f3325bef15afa14c8f33cb79068b4e95f99a9999bd38d4877fa45b76c0f399255fd536e172464d7eb8547b5f3ddec7030113dac1168805cd60010daa60607a1f0b8a7db1af33b61b2a695c9817e717cb2595b502e60f91ceba7276545f0526480e56d6e27b5e13d5d9a2e969f92ebbd2bd2e1be6e4bbe5712b635cb200ae42211b19670aef7f7b1d7d6c6d3d80325f43741dd0cefea446e4902af90762363edbdab254f3e449c157063da853fae525379b8a3e28a2069aa1f0339fd484afc3cad3b3a19505d9ae3842f4c0a34ab4ca6b15c6f42a35838552cc3a261208c57830382feeafaaf83c7337b7dd6", 0xf8}, {&(0x7f0000000f80)="a308addfaa4ae5aeafd5d80b1802b0f0803cae11009274786e1f701eb34ad9136e0c268497115fe437da70555b37ee59eefac206625c8286693bf95e2080072bbf1454d54131490a4ed68b5d8e270a32a76f30ffa596b3828aa6bdc20a8c88f6953630859f2c3b0034120c9b4175", 0x6e}], 0x5, &(0x7f0000003ac0)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\r\x00\x000\x00\x00\x00\x00\x00\x00', @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x170, 0x50}}, {{0x0, 0x0, &(0x7f0000003d00)=[{&(0x7f0000003c40)="b3338dceb2c0d7053ebb0edfed0efcd941ce11d25f3dae6169f906bd16d3d99d8cb5045543fd6c79bc2a87c824e86ea733444a43efedf9726d33718525bb169a5d3660d67e04a869948dd5592ca4fee08aaf00e8a99b07952a670b68dea41eddcc0494381e044f88d58c8d791bc69544cec6802d8fc22383cbc0220af2852ee542caa6019f2b17f3015ddcde7bcba4c78ada21ab062e1f16a695f12a3264c2637ad03112", 0xa4}], 0x1, 0x0, 0x0, 0x10}}], 0x4, 0x44050) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) pipe2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001280), 0xaa000, 0x0) socket(0x10, 0x3, 0x0) ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40f02, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000040)) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f00000000c0)=0x40) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00:\x00\v\x00\x00'], 0x24}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000080000085000000d0000000a50000009700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) get_mempolicy(0x0, 0x0, 0x1, &(0x7f0000003000/0x1000)=nil, 0x6) r9 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r9, &(0x7f0000000180)='system_u:object_r:removable_device_t:s0\x00', 0x28) 166.936287ms ago: executing program 4 (id=241): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x118, r1, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7fffffff, 0x59}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3aa}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8001}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1a9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x247}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x33f}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x118}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7f}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xb4}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x159}]]}, 0x118}, 0x1, 0x0, 0x0, 0x4000084}, 0x20048000) kexec_load(0x100, 0x7, &(0x7f00000015c0)=[{&(0x7f0000000280)="ffddcfdf7fa7d133c2a260ae2dd82bf904e92881fb36626802e91ed32137bc19048f0e22a4cf5049d5ef316d583b023573ae736d6c918cee45e1e033b9fc607a4b78527b4958cbd3516773264e78f05b90f05ca051f5436069ca370a2a1807e83c10399c2039b314c364e9c033faa3e48b800e9fbb48485abc92e4e09e5c49f59a47fbf35a5e075fac7de2e9e02c4c46b0c3f379c8b0fbcdd340c56d88935494351011b03b768e741893bb890a47f74f7a6b9f43c9623c38a534eded28a165ac8841ba4fe8451918de45dcb65e8eb3f6ee2b76faf7245db330e6b289109ba8d7c6a3c0a4cdc84bc9af22df9c0ed8e287d641fb5f6fa7f8749141a2de49db9affd59bbfdbba0ca2f4fd9e1f6dffdbd269631d96250bf07b9b864635b3807484d6e458d4454ed1298db458b79329603623a57048ac5ad84cfa985e4a7144c6dcaed5b9a305494567e0f68b6033221fac0aa3930b4774385300c5e8a172a7194fb186c0f8cb773b25b97311fd15ae273a554bd5e5d00dc96b35cb52f69107b35472f639d046b42cef4265c9e250dbd23537a46a893bc5a01c1486d736cd096737b116b9435b0f4375e9e4ee783be8e9e1d22dff6ee9a0f078bfebc7425fa37b37c7e7ca8762cefef0fbb4cf70f3b99af34f2e4f31e9ab680a818028d2ad062314569ece5b6df733994aba010d57df980ef24665bc38c97d61851176931ef23f6f8b5e474aa057f1203893c4b07727256428c5f859c3186bc898e319411c227266a40159f871c95b1f6fc42ce2861d8ddd857ddf79cda58a9067e043cc604906827b936f3ff7b3aa0955e55bef1478609944d11705810dce24f8f141233c4dba60ace873738bef456c15a22596cf4ad213549baf42f301daa327a391e41e4d6a413ee459f78a9f5e124124fdbf4fcd09e9c82169a73dd8411a352345fd9c4c3b4d81aff6e5d39491736d7cfafe8545fac3c7a1725a955053a4dfb31bf9a354efd21ee2669b8f2253053c23d58775594760c348f56943aa1758ad8e98b00f4f02908e962a428b47b3c7b6ff6312b3d95269c41a9247231ef2006c8a7f6f95eb332c44025715f8af57f27918cc009d66ea8fe9f6fd8b1403942ac56c81b1d9188dd1ed6a7f4842083183a6ddc0cfa0aad56855d07753f095260f4f5576b6f222c565a3283d844795f1534089bfdfdb382b8e59bd8eceaf9fac1e9a97873939ef125f6fe091f2c08dafc3219711af22181f23c4ca7e987e7b6be1f25cd7d81743cea9f7ac70f490c42b6758805b250e7f848ee6ae2d065162ec59ab9f6f6f0416aab8bf81c46ef0823f2110c084781fbbf946f115bb3e5a0ce89138551e6ca59f95ab4987993ed1d1750d17f0b031a7cb8e451df3c836a9588e89d08e1a678f29aeb956fc193b1e6f9a59be7670e88be2843a35f82065082b63c74d8e36301c1b1103807e5eed576793dce55b03ba587fcc0559437041b6e82717de405a2ca3189db276b47e605912f48fde95dd746b740cdc003c9b68f3aa12b304cfb06dd5c3be2c07232be54a232f70c95162cd968a30b7ab08e5764dc5f67665b61cddd21aa8b7eca0072f26a0c0e4b25e48ff615f543b246739540a2b5648a63ad82dd1957fc4251dc2ef61da9adaa61f3e5ef5a4205426d7263d991a5593489b4cbb6e1502ff2156ee25bafc6c423e068f83e764b0ee8ad687467cbfa6381252e4c1c6d91ba62e6488472ea078fd345eecedb778b2ea47f8c98c40ab759db0a9d5cf7e120ccc2a76eb53d6086bcfaece4e6935991377dabfa356145f8acf7d03740c35c72f06ea2bdef3f9999fd044488dbb7616ded8a4f2d8f43eaa0c738f0154a60e4851eae8c0dfff630aed633ab4c7d086ea7961fb6b1ec10a716ba11e7745ecc36e049a732a7f26b0a672c9b268e16447282d82479a6b4f033d249cfb49c1f8b8c9b774b9031edd26a5b76f8e32b6ba44bdaa92adea2b1b32baca855134102217ef3142a6a4af7c5d3caffc26660a79d7a6fed4959c70b28587e9ea2f1cd53080bb09c47c645b6dd28b6e951c087b28f49aa35bbcaf249dc4661a06d9c640c973fac41fce1cc947d42c82c8d0240107d9e5fddf71adfc06c299816a590b3703308622aa96b7ec5a516b13cd1d0ccee44f02a0f37b577d3db6c261166f1e3d5280df51d3f89f2e94d954819b90017c94c82f0d201ba56a38ffe12bd72662b4325b0cc227603d31aac5b3b723634032fc729d8d6edeb1f78858f293bef2541b57f934a4cf5d14a73d31a4cb29188f60d1ce48a8399294908752146ebf57e898fd7f582bae01a587c2b7971909f7fe04197785cf11b72a44d5c64dbd95b0e95f5ad3e16f20472c4a852e274aa81b2ea87b9624cc317f410ca32770f0b3ccd6d4df3d96d306f8c181bbd6b5f8b33c92ea6bbbb072b5cd62dba932c901d34c39e64d439c5190fbc4de4b3d844acd6422c5a229c736e9860871d4722a742903a951d29d59aa22fc339d5ee15d732889986a2da850da4981bdf58674a6ff5b686ac73df95102c149697c373922049f1cfea225b730cddbaa80e5aa53808d94ed74c3426de3d63c84a3ec98d878df5f36124f6bab0df609202aca71553a5068cc3910b10e7f69b8e5ca04cd91c3c1428c40be50f00dab7e8f016bbb9cbb74482d8c9b9698fd4e926571888a20f1e4b208e4a40f145d31d0a1d99ac56cc30aa90a4ca51261c870b8d1972aa8dfb3b1f74a78b9e5444c426a8c65ee55f69ac86820601a6cea9abe3f5cfe68bd4a9939a21bad3b1c076b191aa0631185f8fa51f3fdfd8aa33573252cb8eb40014fea39900603f32a0aed2fff7b27e01106070a9b017544dd915a0adc8d3685ce1121279a900d2229799b2d3fbf6de623e6cb48a3445fc9eae8b11456aedd2ac812e33b1b63e492bbd79dacbe706e06419d5428de665dc8151f7b4f9cf773c7b9d7d6495db8ef7c9c286bc347e981aaaf315ae2396b6d1580f1cdb88dc10d841bdd69076e749b1d60b3ae72e50f6207bb8ff2d93160ca923f3042e0a41ebe96450f1e56044aa92063c6a51e6938cfa9876b4cc90b15bc17ff1cd685910ed2835f7924e76eea3c4817afef374e69c81f829a7271a34c65cfb21ae81ca07f33a21ffac1c4e1f78031e8b592d451d4ec85bad1b959918bb4abba7533191ac02726c81d120349f2011601280484dc57fdc0064f0c80ea79655dc60b7a0e762cc5ad0e3950b025caaaf1da015d8c891e9adaac3e01d5f37165ed5fbf4ca125004028bcd8de7f84352fcb849a5b67e1b98a875d9113b787554932d658292ea8824fba43c6e8228d012bfff1dd5664d6a5694839e44b004c0609c219f5d28ebf7b86df8b0da5826cd1d59abdd1cb17394ab794f9c1dcc470d83cd817b2b66fbc4e8c9941dd9392f62f02ef4970fe1e8a240469eac59db244790dec8e479ce1a30d256882004babff1d6428c30d12e0a6bbd843d99aca8cb4a8fbee579619a71c196e95b0465cb4fee40bb6c0c0c667aca2eaef3fdb6e0af16e9316cae6032539c25c76a6acb66b617530c3bf18a603baf35aed928c28bc0d95981378ca98bd557481a69fba0104ca62324ba2134ee49adb1a1ba3a902b9d086e416db75bf9de8878657254578a4f0a0ac81f4cad967418911c621b629d27c81c0d300f8bf8820cdf98bd648cba4bd8a49733cc38829a9d06261c04bd08323034608914be732f20d2a37595b0be6905928323bb423124e2d61a9c5575549c7cc9abf836fe622c517757fa6dcfdf828546bf8b0b55e74e02b55ce37960672f854f8180fc5c09a16feecbd40c00efa6a33f5aa14fa0ae4ca24b7d49adde284166d33e51a90c6a0a2b33ff42042a138004fc65ba20509ffb77f202925a31f8d15c8774ae702a06b866a3830ff5d3273549b8ff7dc6f056d5e096ce4e2f275c1811e8d30e0959e38118c76ba67b67497a64adeafc36801e7261e930440122ba5503031e5658b30ef63ce7e3a16646de3b150b8cdcc6e491171d50c4128de9f0930a54b67f628e3f32769afdae334b972c47d97c1fb057c9cdf1e8effdbe3c9b51d23e80f7fb7d2ff556f7d719b10fbf54dcdf42009eed870508ce8d6765a30fe57f54788f2885649138e561e82a4d6da7ff7971f5aded7c8db4f9ed311ba93844d72864251dae307f730e599941fb894732353e9f5652a963f7f4726a28cc05b0073f50f9fe789ca5f510443e240604f56ec08f1b6e5a800ea594839b6fd0712113d28dd0d5875c64d44196207b93516bd17b7c0bae5202b908ad322f59c0f76ec62881e3f7951a87a8372eee42e9d74dfe646503df27644f3eacf50543143283fa2383546dd101e0095b4444a9dc72a895ce7f1a52bf2dc914ebdbd15856e5f52456782b4cf9383d3cd4cb3edde4a007f60690b7f9d2b9de7825742670bf0c7085d91108b94c2d21060c42eb9dce79317506e8a23ce9b6ddb6f8a201a9dcacc7c32e4d096c98bc1f7d7e30d1beeff219f03773b52ccef98d2245577d4ab76525b3fca98171a67f795d4db751cdc5e510f96e6c306d9038cd85992a5e464a3dc97b92be535dd971ca469b6a081ad7251b529a631c3c2fad7f7c1fbca9a3889271bf1ac8b619d086d1760d8ee15b3f530677d35d9936ccc56f1a31250f90e2b2d6bb52fc7857a7f36297c4814e3049679a9e20c9d19495d1ccd32580cccc7b3b4e212cb60e1049218f833def092f66a447805fdda3b50dcc79d21bfdae76a2adcf200a6cef446967846ca7fbd1a47f8c3fae13d43f2b93df18d3fb22fa5629fcb1e0c9049a01dd53d2a5e3cbff9dba29712e70d54788d7ce9f1a4650440e58138c44935d31553bdff3b59aaa08587817b1c3400b03ee0dafd9604190becbbf82fc6eb6a6e6436c0170282ff38ac8e1e3bcff301c69d93b7461524d4b758e5927c74f7a6667bd8d858fc55cb2db5e05af1a98cda35d30d4ee8a88d3f2cfbb1acc947fcb199b91a0b0d664de07d6e7012081eb210076a3865e4bcb534e9a8a93843a2eebf86b37674c386d63ca770b2a39e50be9f252caf11bfb570a2eaa0a46097ed9ff1ab85a214bd6dd1753a4c2c1609a1ea04824689047d71416c94ed99097c81a1e30b32b0162a0cb784c7931d81e7f3aac161b3147126031aed75592abee52582007cbd4361b775ff2e965d43d77eb1655dce3c1662c927faae91f13d04e2394a1c533288ab7d7ea5e9afa1070f0b94ab3bdbff08304e4ef917bf26f4e7d3c184b7b480d264aecbe3b706ea36bb778f2ff6ea0b8fd4a7995ac566449d56279860048c5a6066c8a7da528e934078aacce381ca341645b4c88676e5cb80acd6248e5c70fe5fce45c08c9a5b1bfad24ccdbe380465a9b3de32bbc5b529e4c26d48e94a2821d230fbb8982a50c607fa47d989b2c560b7034c1d197b210b148e3b587ca4d403c4ccb6286b11239812f515c194d0b56e7f7a0b7f689b1072d65331fa4d76651f4ff61bde492f8247e3ca70f9b67a7678ff0607cd1f077dd5be4aec9d237147dc334a9ba34b2ed079f0a368c7312019c61b5f2feacd0cfb5d10f8ba917cc53ed2cf2e5bfc05eb41875b817ce8372557a40f50489e3d80d11acce4020b3b7a2f2196817618cdb631071eb8e2b5fec8a96ebdc4f1ee7d135d698902da8420799708e1cdfe06d619bf42e734680ea5b57c19d74a576d0cde937415793df401b6971df116810d7227fc6d4cfbc90b243e9a51d95d654ad9988616132a9938382c9c3a26c0b56132f472444720926149afe8bcd918461f8d4f833559836f3f80ef2d9e390fffa2e8", 0x1000, 0x1, 0x7}, {&(0x7f0000001280)="51ad744368980dd545dc3c11732d8ad07a8ce05960e60a8084df72e40b55e19e8433b3d11233d82b7f266c5fb93d2eededc38ddd0ac6782f785d9bab3c499ef6eef2000c4535cf75da889107b9dda5bbdad9cc015f085927731a99a495ff0cc8d64ca09c6999d8db91d8021ecb435808ba395cff230413ee9bb4d8accc9c2d4493bd84910543105cc603dd65b57a85ecd07539f11d1371a14108b33fe1efb5ae6baaf4f8b4670afc46c96eb32bf9e705c554c8fd56bc809b84200de82fdcb69f4d3f657b24324df1541fbc4dc2d9be6db587284902e082bdd28bb9c92f23382c0ece", 0xe2, 0x0, 0x81}, {&(0x7f0000001380)="4922a2bf20721be2c3ae", 0xa, 0x2, 0x2}, {&(0x7f00000013c0)="18ce12b1af3d29c624a3b0d7b1976d01dec4b408a891aafb4a7793338359bf9b1e150fee43f2275c2f3377b3cf7fec4cfb63fae026c700f5117f9de5f039e0a7592cd28cbdb3b5184f114c62c3a41b6c1d69cee16aef4925d86f4c2435e659359c6f7a2f7ba514e71bfb1e5bbef22beaccebe1bca502d2b99942bc570fc2077c07a0dad23987", 0x86, 0x100000001, 0x9}, {&(0x7f0000001480)="00ff2ecb0f85cf41a04bff5f07fd18718199fb99300520c284ddc6a7fae3f6ef667dc3b2a6d8829df7550df3067d28d64c7f862b49625ffe4d20c4583331563a6ca936d5bb156b477c31a675a55c604a0cbfad0fda42c62b19f90cd43028e5db2044027d5ea8e1f0e193790fccff0590f83cebf751095868145b65fb4aae153b5ead79484e05bef4893416e1479965dbc83241cae227e6b1baf338baf1909159570fd554710b18ef50cc169f799b7f985463950680e43f1dd6f5f0db", 0xbc, 0x401, 0xc}, {&(0x7f0000001540)="e884042b3e13bea701bc53623fc7b1163fb91ba7f0ff0fee8a1f3dfd9aa38e72c33e1ea51761e311618bf6c72fa91a9ca0124280d05330d5", 0x38, 0x2, 0x1}, {&(0x7f0000001580)="8f4b978991", 0x5, 0xa6a, 0x6}], 0x80000) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000016c0)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000001700)={0x1d, r4}, 0x10) r5 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000001740)={0x1f, 0x0, @none}, &(0x7f0000001780)=0xe, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f00000017c0), &(0x7f0000001800)=0x6) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000001a00)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001880)={0x120, r1, 0x102, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x3}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}]}, 0x120}}, 0x4) r6 = accept4(r3, 0x0, &(0x7f0000001a40), 0x0) ioctl$sock_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000001a80)) pipe2$watch_queue(&(0x7f0000001ac0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) kexec_load(0x7, 0x2, &(0x7f0000001c00)=[{&(0x7f0000001b00)="9436872c0c187badf41276b669afc75325dd776e405e4f8603bd447127e25b63c64dc031780ccd5c7d71c565e9e5f64326709b37f7f58b02583717257680324f04f11f33", 0x44, 0x2eb, 0xd}, {&(0x7f0000001b80)="05d3bb16c4d22b248165286f4bc932e6a189fbda6242ef2782a50946a856d242047d80c2f35a3e3a6de8d32f64ecb2286ba211bec532846e4d9f8482ceb849932f2e05f4f300844ee62f5d878f0a71330100d7418c6a441f8996aa15d058b9c4f1fb1a4e3b85d514d75c88e49c2f42ef4ea236bb4b7195873993262ce0980c", 0x7f, 0xd9a, 0x3}], 0x80000) ioctl$SNDCTL_SEQ_CTRLRATE(r7, 0xc0045103, &(0x7f0000001c40)=0x27) ioctl$VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f0000001c80)={0x0, @sdr={0x56595559, 0x4}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001e80)={'sit0\x00', &(0x7f0000001d80)={'tunl0\x00', r4, 0x7800, 0x1, 0xfffffffe, 0x5, {{0x30, 0x4, 0x0, 0x7, 0xc0, 0x66, 0x0, 0x0, 0x2f, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x28, 0xcf, 0x0, 0x1, [0x9b07, 0xd, 0x62, 0x3, 0x0, 0x4, 0x9, 0x7, 0x3]}, @generic={0x88, 0x5, '\fj.'}, @generic={0x86, 0x3, '\x00'}, @timestamp_addr={0x44, 0x14, 0xf8, 0x1, 0x4, [{@local, 0xa}, {@local, 0x7}]}, @timestamp_addr={0x44, 0x14, 0x8b, 0x1, 0x8, [{@remote, 0xffffffdb}, {@private=0xa010101, 0x10}]}, @ra={0x94, 0x4}, @noop, @timestamp_prespec={0x44, 0x4c, 0xe2, 0x3, 0x0, [{@empty}, {@rand_addr=0x64010100, 0x5}, {@loopback, 0x3}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x85}, {@multicast1, 0x73a}, {@local, 0xe}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x7}, {@rand_addr=0x64010101, 0x81}, {@multicast2, 0x7ff}]}]}}}}}) bind$packet(r6, &(0x7f0000001ec0)={0x11, 0x7, r8, 0x1, 0x15, 0x6, @multicast}, 0x14) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001f00), 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r9, &(0x7f0000002000)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x20, r1, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x51}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000c020) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000002080)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000002180)={'syztnl2\x00', &(0x7f00000020c0)={'gretap0\x00', r4, 0x8000, 0x20, 0x12, 0x7c, {{0x25, 0x4, 0x0, 0x0, 0x94, 0x65, 0x0, 0x1d, 0x4, 0x0, @multicast2, @rand_addr=0x64010100, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0x46, 0x0, 0x4, [0xca47]}, @end, @cipso={0x86, 0x57, 0xffffffffffffffff, [{0x5, 0xe, "a46f6393b67aa0aa7b7c6496"}, {0x7, 0xc, "52ee6d8506085f1da029"}, {0x2, 0x8, "68727c888650"}, {0x1, 0x7, "9520f552fd"}, {0x6, 0x12, "298f833e3f92b147f6b269e012aa3fd7"}, {0x1, 0x8, "ce10f29a04a3"}, {0x6, 0x8, "0979e0fd80e0"}, {0x7, 0x6, "c9efca22"}]}, @timestamp_addr={0x44, 0xc, 0x24, 0x1, 0x9, [{@local, 0x5}]}, @timestamp_addr={0x44, 0xc, 0xc9, 0x1, 0x3, [{@empty, 0x7}]}, @noop]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000025c0)={&(0x7f0000002040), 0xc, &(0x7f0000002580)={&(0x7f00000021c0)={0x3c0, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r8}, {0xec, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xbdef}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r8}, {0x268, 0x2, 0x0, 0x1, [{0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x6, 0x9, 0x1, 0x8}, {0x7f, 0x4, 0x6e, 0x4}, {0x9, 0xff, 0x9, 0x18000000}, {0x1, 0x7f, 0x80, 0x8}, {0x3, 0x7f, 0xcb, 0x5f}, {0x9, 0xa, 0xf, 0x2}, {0x1ff, 0x6, 0x1, 0xfffffffd}, {0x8001, 0x7, 0xfd, 0x5}, {0x0, 0x1, 0x2, 0x2}, {0xba, 0x7, 0x1, 0x5}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xa99}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe77}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3e}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x44}, 0x45080) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002680)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r12, &(0x7f0000002740)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002700)={&(0x7f00000026c0)={0x28, r13, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000029c0)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002980)={&(0x7f0000002800)={0x144, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x80}, {0xc, 0x90, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0xf}, {0xc, 0x90, 0xff}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x401}, {0xc, 0x90, 0x80000000}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x400}, {0xc, 0x90, 0xfe01}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 91.027909ms ago: executing program 7 (id=242): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xeb4, 0x30, 0xb, 0x0, 0x0, {}, [{0xea0, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x1}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffc01}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x81}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb4}}, 0x0) (fail_nth: 5) 0s ago: executing program 8 (id=243): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0xa031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="090000000400000004000000f400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="020000000100"/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c000000040000000700000000000000f00e84c5da4b663d283d7de961684f020d4462e09accf4842d896842aeaa7b9865e74dfe35eab634e411566be54d92663bdc215497f47a558f15b980899e410688afa2109cae28980757459b28e56366ece24e7577f31ef167ef2aa280aec3184a0a1998fe64998fb81fa14cdb27426523a94c689d1041527e0a00cd44e4f076259d91b5b600"/163, @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000000200"/28], 0x48) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x4}) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x18) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}}) syz_io_uring_setup(0x46a8, &(0x7f0000000000)={0x0, 0x0, 0x4}, &(0x7f0000000100), &(0x7f0000000140)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{}, 0x0, 0x0}, 0x20) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setrlimit(0x8, 0x0) syz_open_dev$video4linux(0x0, 0x10000, 0xe8fc0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$unix(0x1, 0x5, 0x0) r6 = dup2(r5, r3) close_range(r6, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): .955023][ T6050] mkiss: ax0: crc mode is auto. [ 69.956059][ T6049] ? mark_lock+0xb5/0xc60 [ 69.965313][ T6049] ? tomoyo_realpath_from_path+0xad/0x720 [ 69.967147][ T5818] Buffer I/O error on dev nbd3, logical block 0, async page read [ 69.971036][ T6049] kfree+0x258/0x4b0 [ 69.971059][ T6049] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 69.971083][ T6049] tomoyo_realpath_from_path+0xad/0x720 [ 69.982575][ T5818] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 69.982645][ T6049] ? tomoyo_path_number_perm+0x232/0x590 [ 69.988252][ T5818] Buffer I/O error on dev nbd3, logical block 0, async page read [ 69.993766][ T6049] tomoyo_path_number_perm+0x245/0x590 [ 69.993785][ T6049] ? tomoyo_path_number_perm+0x232/0x590 [ 69.993806][ T6049] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 69.993845][ T6049] ? trace_lock_acquire+0x14a/0x1d0 [ 69.993873][ T6049] ? lock_acquire+0x2f/0xb0 [ 69.993889][ T6049] ? __fget_files+0x40/0x3f0 [ 70.047400][ T6049] ? __fget_files+0x244/0x3f0 [ 70.052073][ T6049] security_file_ioctl+0x9b/0x240 [ 70.057082][ T6049] __x64_sys_ioctl+0xbb/0x220 [ 70.061743][ T6049] do_syscall_64+0xcd/0x250 [ 70.066229][ T6049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.072107][ T6049] RIP: 0033:0x7f63f157e719 [ 70.076499][ T6049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.096091][ T6049] RSP: 002b:00007f63f22c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 70.104508][ T6049] RAX: ffffffffffffffda RBX: 00007f63f1736130 RCX: 00007f63f157e719 [ 70.112465][ T6049] RDX: 0000000020000180 RSI: 00000000c020aa00 RDI: 0000000000000009 [ 70.120419][ T6049] RBP: 00007f63f22c6090 R08: 0000000000000000 R09: 0000000000000000 [ 70.128373][ T6049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.136323][ T6049] R13: 0000000000000000 R14: 00007f63f1736130 R15: 00007ffdbfebb968 [ 70.144284][ T6049] [ 70.157287][ T2153] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 70.306445][ T5818] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 70.324850][ T5818] Buffer I/O error on dev nbd3, logical block 0, async page read [ 70.345197][ T5818] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 70.359014][ T2153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.374704][ T2153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.397882][ T5818] Buffer I/O error on dev nbd3, logical block 0, async page read [ 70.427549][ T2153] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 70.446503][ T5818] ldm_validate_partition_table(): Disk read failed. [ 70.469288][ T2153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.483615][ T5818] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 70.527411][ T2153] usb 1-1: config 0 descriptor?? [ 70.534589][ T5818] Buffer I/O error on dev nbd3, logical block 0, async page read [ 70.555047][ T5818] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 70.564315][ T5818] Buffer I/O error on dev nbd3, logical block 0, async page read [ 70.578649][ T5818] Dev nbd3: unable to read RDB block 0 [ 70.590964][ T5818] nbd3: unable to read partition table [ 70.596882][ T5818] nbd3: partition table beyond EOD, truncated [ 70.719388][ T5818] ldm_validate_partition_table(): Disk read failed. [ 70.770888][ T5818] Dev nbd3: unable to read RDB block 0 [ 70.790850][ T5818] nbd3: unable to read partition table [ 70.796619][ T5818] nbd3: partition table beyond EOD, truncated [ 71.088809][ T2153] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 71.122985][ T6069] binder: 6061:6069 ioctl 4018620d 0 returned -22 [ 71.297597][ T5873] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 71.303630][ T2153] hid-thrustmaster 0003:044F:B65D.0001: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 71.317417][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.317505][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.633271][ T2153] hid-thrustmaster 0003:044F:B65D.0001: Wrong number of endpoints? [ 71.651872][ C1] hid-thrustmaster 0003:044F:B65D.0001: Unknown packet type 0x0, unable to proceed further with wheel init [ 71.777266][ T6075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.823176][ T5873] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 71.840804][ T6075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.857343][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.038121][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 72.038158][ T29] audit: type=1400 audit(1731653210.111:231): avc: denied { write } for pid=6072 comm="syz.4.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 72.442832][ T5873] usb 4-1: config 0 descriptor?? [ 72.540566][ T29] audit: type=1400 audit(1731653210.111:232): avc: denied { nlmsg_read } for pid=6072 comm="syz.4.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 72.761378][ T29] audit: type=1400 audit(1731653210.751:233): avc: denied { append } for pid=6078 comm="syz.2.38" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 72.921882][ T6044] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.012852][ T6084] netlink: 'syz.2.38': attribute type 1 has an invalid length. [ 77.100835][ T5873] usb 4-1: Cannot set autoneg [ 77.105646][ T5873] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 77.127212][ T5873] usb 4-1: USB disconnect, device number 5 [ 77.390442][ T44] cfg80211: failed to load regulatory.db [ 77.472785][ T29] audit: type=1400 audit(1731653215.541:234): avc: denied { create } for pid=6091 comm="syz.3.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 77.719924][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 77.750195][ T5010] usb 1-1: USB disconnect, device number 4 [ 77.788349][ T29] audit: type=1400 audit(1731653215.921:235): avc: denied { ioctl } for pid=6102 comm="syz.0.43" path="socket:[8553]" dev="sockfs" ino=8553 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 78.000504][ T29] audit: type=1400 audit(1731653215.921:236): avc: denied { getopt } for pid=6102 comm="syz.0.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 78.010478][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 78.253362][ T29] audit: type=1400 audit(1731653215.921:237): avc: denied { create } for pid=6102 comm="syz.0.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 78.641982][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 78.650540][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 79.226191][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 19 [ 79.316639][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 79.325794][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 79.333874][ T9] usb 2-1: SerialNumber: syz [ 79.380667][ T6115] nbd4: detected capacity change from 0 to 22 [ 79.398746][ T6101] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 79.489064][ T5873] libceph: connect (1)[c::]:6789 error -101 [ 79.497787][ T5873] libceph: mon0 (1)[c::]:6789 connect error [ 79.545053][ T44] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 79.723304][ T6128] ceph: No mds server is up or the cluster is laggy [ 79.731516][ T6101] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 79.764032][ T5010] libceph: connect (1)[c::]:6789 error -101 [ 79.776039][ T5010] libceph: mon0 (1)[c::]:6789 connect error [ 80.291739][ T5873] libceph: connect (1)[c::]:6789 error -101 [ 80.300651][ T44] usb 5-1: config 0 has no interfaces? [ 80.306210][ T44] usb 5-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 80.316970][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.344093][ T44] usb 5-1: config 0 descriptor?? [ 80.406958][ T5873] libceph: mon0 (1)[c::]:6789 connect error [ 80.503315][ T9] cdc_ether 2-1:1.0 eth1: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 80.585348][ T29] audit: type=1400 audit(1731653218.721:238): avc: denied { create } for pid=6113 comm="syz.4.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 80.639776][ T6123] block nbd4: shutting down sockets [ 80.646146][ T6144] netlink: 'syz.3.52': attribute type 16 has an invalid length. [ 80.653978][ T6144] __nla_validate_parse: 1 callbacks suppressed [ 80.654003][ T6144] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.52'. [ 80.729329][ C0] blk_print_req_error: 25 callbacks suppressed [ 80.729348][ C0] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 80.744726][ C0] buffer_io_error: 25 callbacks suppressed [ 80.744738][ C0] Buffer I/O error on dev nbd4, logical block 0, async page read [ 80.759571][ T5818] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 80.776239][ T5818] Buffer I/O error on dev nbd4, logical block 0, async page read [ 80.801262][ T5818] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 80.818557][ T5818] Buffer I/O error on dev nbd4, logical block 0, async page read [ 80.835465][ T5818] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 80.836383][ T6144] netlink: 48 bytes leftover after parsing attributes in process `syz.3.52'. [ 80.855104][ T6144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.52'. [ 80.858080][ T5818] Buffer I/O error on dev nbd4, logical block 0, async page read [ 80.912493][ T5818] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 80.948612][ T5818] Buffer I/O error on dev nbd4, logical block 0, async page read [ 80.958266][ T6152] syz_tun: entered promiscuous mode [ 80.958470][ T5818] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 80.978400][ T5818] Buffer I/O error on dev nbd4, logical block 0, async page read [ 80.988018][ T5818] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 80.997756][ T5818] Buffer I/O error on dev nbd4, logical block 0, async page read [ 81.007727][ T5818] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 81.018244][ T5818] Buffer I/O error on dev nbd4, logical block 0, async page read [ 81.026743][ T5818] ldm_validate_partition_table(): Disk read failed. [ 81.035221][ T5818] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 81.046321][ T5818] Buffer I/O error on dev nbd4, logical block 0, async page read [ 81.058885][ T5818] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 81.059190][ T29] audit: type=1400 audit(1731653219.191:239): avc: denied { mounton } for pid=6151 comm="syz.0.53" path="/8/file0" dev="tmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 81.069298][ T5818] Buffer I/O error on dev nbd4, logical block 0, async page read [ 81.134407][ T5818] Dev nbd4: unable to read RDB block 0 [ 81.143686][ T6152] batadv_slave_0: entered promiscuous mode [ 81.149186][ T5818] nbd4: unable to read partition table [ 81.168356][ T5818] nbd4: partition table beyond EOD, truncated [ 81.175067][ T6152] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 81.194669][ T6152] Cannot create hsr debugfs directory [ 81.212865][ T29] audit: type=1400 audit(1731653219.351:240): avc: denied { mounton } for pid=6127 comm="syz.2.50" path="/proc/49/task" dev="proc" ino=8675 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 81.240460][ T5818] ldm_validate_partition_table(): Disk read failed. [ 81.255921][ T5818] Dev nbd4: unable to read RDB block 0 [ 81.267557][ T5818] nbd4: unable to read partition table [ 81.276125][ T5818] nbd4: partition table beyond EOD, truncated [ 81.466637][ T6166] netlink: 40 bytes leftover after parsing attributes in process `syz.0.54'. [ 82.269313][ T6178] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.278417][ T6178] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.288031][ T6178] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.296850][ T6178] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.308623][ T6178] Zero length message leads to an empty skb [ 82.337610][ T9] usb 2-1: USB disconnect, device number 4 [ 82.370317][ T9] cdc_ether 2-1:1.0 eth1: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 82.456848][ T5873] usb 5-1: USB disconnect, device number 2 [ 82.519200][ T29] audit: type=1400 audit(1731653220.651:241): avc: denied { block_suspend } for pid=6184 comm="syz.1.58" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 82.588874][ T29] audit: type=1400 audit(1731653220.721:242): avc: denied { read } for pid=6181 comm="syz.2.57" name="usbmon0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 83.043036][ T29] audit: type=1400 audit(1731653220.721:243): avc: denied { open } for pid=6181 comm="syz.2.57" path="/dev/usbmon0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 83.131535][ T29] audit: type=1400 audit(1731653221.211:244): avc: denied { create } for pid=6193 comm="syz.0.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 83.381911][ T29] audit: type=1400 audit(1731653221.521:245): avc: denied { ioctl } for pid=6206 comm="syz.1.62" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 83.467999][ T29] audit: type=1400 audit(1731653221.541:246): avc: denied { create } for pid=6206 comm="syz.1.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 83.585143][ T29] audit: type=1400 audit(1731653221.631:247): avc: denied { getopt } for pid=6206 comm="syz.1.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 83.591461][ T6214] warning: `syz.2.64' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 83.644436][ T29] audit: type=1400 audit(1731653221.661:248): avc: denied { write } for pid=6206 comm="syz.1.62" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 83.741998][ T6219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.64'. [ 83.790448][ T29] audit: type=1400 audit(1731653221.661:249): avc: denied { ioctl } for pid=6206 comm="syz.1.62" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 83.938197][ T29] audit: type=1400 audit(1731653221.711:250): avc: denied { execute } for pid=6206 comm="syz.1.62" path="/10/cpu.stat" dev="tmpfs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 83.960633][ C1] vkms_vblank_simulate: vblank timer overrun [ 84.454908][ T5872] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 84.685114][ T5872] usb 2-1: Using ep0 maxpacket: 16 [ 84.704071][ T5872] usb 2-1: config 0 has an invalid interface number: 68 but max is 0 [ 84.749543][ T5872] usb 2-1: config 0 has no interface number 0 [ 84.771156][ T5873] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 84.778910][ T5872] usb 2-1: config 0 interface 68 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 84.794370][ T5872] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 84.803767][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.818950][ T5872] usb 2-1: Product: syz [ 84.824910][ T5872] usb 2-1: Manufacturer: syz [ 84.835044][ T5872] usb 2-1: SerialNumber: syz [ 84.890498][ T5872] usb 2-1: config 0 descriptor?? [ 84.896064][ T6225] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 84.939828][ T5872] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 84.942919][ T5873] usb 3-1: Using ep0 maxpacket: 16 [ 84.994890][ T5873] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=46.8b [ 85.004399][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.008094][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.012616][ T5873] usb 3-1: Product: syz [ 85.027285][ T5873] usb 3-1: Manufacturer: syz [ 85.032079][ T5873] usb 3-1: SerialNumber: syz [ 85.039264][ T5873] usb 3-1: config 0 descriptor?? [ 85.050916][ T25] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 85.225448][ T25] usb 5-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 85.243661][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.273500][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.312045][ T25] usb 5-1: Product: syz [ 85.339511][ T25] usb 5-1: Manufacturer: syz [ 85.363017][ T25] usb 5-1: SerialNumber: syz [ 85.406375][ T25] usb 5-1: config 0 descriptor?? [ 85.418158][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.564848][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.671874][ T25] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=1] err=-32 [ 85.708308][ T25] peak_usb 5-1:0.0: unable to read PCAN-Chip USB firmware info (err -32) [ 85.804597][ T25] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -32 [ 85.879673][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.899098][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.909305][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.918506][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.928505][ T5838] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 85.938416][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.003710][ T11] bridge_slave_1: left allmulticast mode [ 86.017276][ T11] bridge_slave_1: left promiscuous mode [ 86.023797][ T184] usb 2-1: Failed to submit usb control message: -110 [ 86.023843][ T184] usb 2-1: unable to send the bmi data to the device: -110 [ 86.023863][ T184] usb 2-1: unable to get target info from device [ 86.023878][ T184] usb 2-1: could not get target info (-110) [ 86.024092][ T184] usb 2-1: could not probe fw (-110) [ 86.156859][ T6253] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 86.167137][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.184889][ T5831] block nbd4: Receive control failed (result -107) [ 86.194387][ T11] bridge_slave_0: left allmulticast mode [ 86.201337][ T11] bridge_slave_0: left promiscuous mode [ 86.208275][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.250474][ T6251] nbd4: detected capacity change from 0 to 11778 [ 86.297146][ T5997] block nbd4: Dead connection, failed to find a fallback [ 86.380333][ T5997] block nbd4: shutting down sockets [ 86.404750][ T5872] usb 3-1: USB disconnect, device number 4 [ 86.411182][ T5872] f81534a_ctrl 3-1:0.0: failed to set register 0x116: -19 [ 86.418337][ T5872] f81534a_ctrl 3-1:0.0: failed to enable ports: -19 [ 86.425168][ T5997] blk_print_req_error: 25 callbacks suppressed [ 86.425181][ T5997] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 86.452447][ T5997] buffer_io_error: 25 callbacks suppressed [ 86.452463][ T5997] Buffer I/O error on dev nbd4, logical block 0, async page read [ 86.466464][ T5997] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 86.475710][ T5997] Buffer I/O error on dev nbd4, logical block 0, async page read [ 86.486991][ T5997] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 86.497382][ T5997] Buffer I/O error on dev nbd4, logical block 0, async page read [ 86.517408][ T5997] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 86.536112][ T5997] Buffer I/O error on dev nbd4, logical block 0, async page read [ 86.546842][ T5997] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 86.558216][ T5997] Buffer I/O error on dev nbd4, logical block 0, async page read [ 86.568961][ T5997] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 86.578566][ T5997] Buffer I/O error on dev nbd4, logical block 0, async page read [ 86.586934][ T5997] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 86.596454][ T5997] Buffer I/O error on dev nbd4, logical block 0, async page read [ 86.605447][ T5997] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 86.626042][ T5997] Buffer I/O error on dev nbd4, logical block 0, async page read [ 86.635956][ T5997] ldm_validate_partition_table(): Disk read failed. [ 86.647078][ T5997] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 86.657595][ T5997] Buffer I/O error on dev nbd4, logical block 0, async page read [ 86.679138][ T5997] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 86.800653][ T5997] Buffer I/O error on dev nbd4, logical block 0, async page read [ 86.808838][ T5997] Dev nbd4: unable to read RDB block 0 [ 86.815492][ T5997] nbd4: unable to read partition table [ 87.380079][ T5872] usb 2-1: USB disconnect, device number 5 [ 87.429156][ T5997] ldm_validate_partition_table(): Disk read failed. [ 87.463780][ T5997] Dev nbd4: unable to read RDB block 0 [ 87.491809][ T5997] nbd4: unable to read partition table [ 87.501737][ T6251] ldm_validate_partition_table(): Disk read failed. [ 87.508592][ T6251] Dev nbd4: unable to read RDB block 0 [ 87.515028][ T6251] nbd4: unable to read partition table [ 87.603507][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.619242][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.638038][ T11] bond0 (unregistering): Released all slaves [ 88.021413][ T5831] Bluetooth: hci4: command tx timeout [ 88.109429][ T6249] chnl_net:caif_netlink_parms(): no params data found [ 88.122743][ T5903] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 88.170863][ T44] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 88.215253][ T11] hsr_slave_0: left promiscuous mode [ 88.223713][ T11] hsr_slave_1: left promiscuous mode [ 88.229766][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.239513][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.271713][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.286697][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.294474][ T5903] usb 3-1: Using ep0 maxpacket: 16 [ 88.325335][ T5903] usb 3-1: config 0 has no interfaces? [ 88.332772][ T11] veth1_macvtap: left promiscuous mode [ 88.348978][ T5903] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 88.357401][ T11] veth0_macvtap: left promiscuous mode [ 88.363650][ T5903] usb 3-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 88.376913][ T5903] usb 3-1: Product: syz [ 88.380551][ T11] veth1_vlan: left promiscuous mode [ 88.381123][ T5903] usb 3-1: Manufacturer: syz [ 88.398958][ T5903] usb 3-1: config 0 descriptor?? [ 88.404166][ T11] veth0_vlan: left promiscuous mode [ 88.404881][ T44] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 88.428147][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.436694][ T44] usb 1-1: Product: syz [ 88.441061][ T44] usb 1-1: Manufacturer: syz [ 88.446077][ T44] usb 1-1: SerialNumber: syz [ 88.462251][ T44] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 88.489839][ T25] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 88.643352][ T5873] usb 5-1: USB disconnect, device number 3 [ 88.654407][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 88.654423][ T29] audit: type=1400 audit(1731653226.791:261): avc: denied { setopt } for pid=6267 comm="syz.2.73" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.751378][ T29] audit: type=1400 audit(1731653226.881:262): avc: denied { map } for pid=6290 comm="syz.4.76" path="socket:[8942]" dev="sockfs" ino=8942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 88.776522][ T29] audit: type=1400 audit(1731653226.891:263): avc: denied { set_context_mgr } for pid=6290 comm="syz.4.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 88.782180][ T44] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 88.990593][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 88.999580][ T44] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.013712][ T44] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 89.042710][ T44] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 89.052385][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.061335][ T44] usb 2-1: Product: syz [ 89.065879][ T29] audit: type=1400 audit(1731653227.201:264): avc: denied { rename } for pid=5184 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 89.067213][ T44] usb 2-1: Manufacturer: syz [ 89.094057][ T29] audit: type=1400 audit(1731653227.201:265): avc: denied { unlink } for pid=5184 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 89.117048][ T44] usb 2-1: SerialNumber: syz [ 89.126042][ T29] audit: type=1400 audit(1731653227.201:266): avc: denied { create } for pid=5184 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 89.150478][ T5873] usb 1-1: USB disconnect, device number 5 [ 89.369558][ T6288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.388252][ T6288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.406135][ T11] team0 (unregistering): Port device team_slave_1 removed [ 89.420229][ T44] usb 2-1: 0:2 : does not exist [ 89.478169][ T44] usb 2-1: USB disconnect, device number 6 [ 89.537052][ T11] team0 (unregistering): Port device team_slave_0 removed [ 89.704350][ T5997] udevd[5997]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 89.926790][ T29] audit: type=1400 audit(1731653228.071:267): avc: denied { mounton } for pid=6311 comm="syz.0.82" path="/17/file0" dev="tmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 89.950178][ T25] usb 1-1: Service connection timeout for: 256 [ 89.958360][ T25] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 89.974630][ T29] audit: type=1400 audit(1731653228.101:268): avc: denied { write } for pid=44 comm="kworker/1:1" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8969 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 90.007413][ T25] ath9k_htc: Failed to initialize the device [ 90.014576][ T5873] usb 1-1: ath9k_htc: USB layer deinitialized [ 90.160688][ T5831] Bluetooth: hci4: command tx timeout [ 90.226795][ T29] audit: type=1400 audit(1731653228.351:269): avc: denied { setopt } for pid=6317 comm="syz.1.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 90.508053][ T29] audit: type=1400 audit(1731653228.641:270): avc: denied { setopt } for pid=6317 comm="syz.1.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 90.534842][ T6292] syz_tun: entered allmulticast mode [ 90.655147][ T25] usb 3-1: USB disconnect, device number 5 [ 90.657639][ T6249] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.679636][ T6249] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.694112][ T6249] bridge_slave_0: entered allmulticast mode [ 90.725933][ T6249] bridge_slave_0: entered promiscuous mode [ 90.740285][ T6249] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.760797][ T6249] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.767968][ T6249] bridge_slave_1: entered allmulticast mode [ 90.775103][ T6249] bridge_slave_1: entered promiscuous mode [ 90.781851][ T6267] syz_tun: left allmulticast mode [ 90.812690][ T6249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.825728][ T6249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.841920][ T44] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 90.897853][ T6249] team0: Port device team_slave_0 added [ 90.917787][ T6249] team0: Port device team_slave_1 added [ 90.977332][ T6249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.995955][ T6249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.027831][ T6249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.034180][ T44] usb 5-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 91.053020][ T6249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.067537][ T6249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.067843][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.101680][ T6249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.125271][ T44] usb 5-1: Product: syz [ 91.129467][ T44] usb 5-1: Manufacturer: syz [ 91.142704][ T44] usb 5-1: SerialNumber: syz [ 91.159877][ T44] usb 5-1: config 0 descriptor?? [ 91.207303][ T6249] hsr_slave_0: entered promiscuous mode [ 91.228968][ T6249] hsr_slave_1: entered promiscuous mode [ 91.246759][ T6249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.266053][ T6249] Cannot create hsr debugfs directory [ 91.468773][ T44] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=1] err=-32 [ 91.477271][ T44] peak_usb 5-1:0.0: unable to read PCAN-Chip USB firmware info (err -32) [ 92.460442][ T5831] Bluetooth: hci4: command tx timeout [ 92.629986][ T5831] block nbd4: Receive control failed (result -107) [ 92.748673][ T6356] nbd4: detected capacity change from 0 to 11778 [ 92.843078][ T5818] block nbd4: Dead connection, failed to find a fallback [ 92.850156][ T5818] block nbd4: shutting down sockets [ 92.876200][ T5818] blk_print_req_error: 40 callbacks suppressed [ 92.876215][ T5818] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 92.990540][ T5818] buffer_io_error: 39 callbacks suppressed [ 92.990555][ T5818] Buffer I/O error on dev nbd4, logical block 0, async page read [ 93.004642][ T5818] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.014454][ T44] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -32 [ 93.054214][ T5818] Buffer I/O error on dev nbd4, logical block 0, async page read [ 93.075597][ T5818] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.102706][ T5818] Buffer I/O error on dev nbd4, logical block 0, async page read [ 93.134888][ T5818] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.168782][ T5818] Buffer I/O error on dev nbd4, logical block 0, async page read [ 93.199276][ T5818] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.233354][ T6249] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 93.241195][ T5818] Buffer I/O error on dev nbd4, logical block 0, async page read [ 93.249091][ T5818] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.278502][ T5818] Buffer I/O error on dev nbd4, logical block 0, async page read [ 93.295037][ T5818] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.310406][ T5818] Buffer I/O error on dev nbd4, logical block 0, async page read [ 93.318269][ T5818] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.341178][ T6372] ISOFS: Unable to identify CD-ROM format. [ 93.352864][ T5818] Buffer I/O error on dev nbd4, logical block 0, async page read [ 93.360743][ T5818] ldm_validate_partition_table(): Disk read failed. [ 93.368190][ T5818] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.377281][ T5818] Buffer I/O error on dev nbd4, logical block 0, async page read [ 93.385194][ T5818] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.394356][ T5818] Buffer I/O error on dev nbd4, logical block 0, async page read [ 93.402378][ T5818] Dev nbd4: unable to read RDB block 0 [ 93.409639][ T5818] nbd4: unable to read partition table [ 93.712627][ T5818] ldm_validate_partition_table(): Disk read failed. [ 93.722773][ T5818] Dev nbd4: unable to read RDB block 0 [ 93.754647][ T6249] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 93.767788][ T5818] nbd4: unable to read partition table [ 93.782054][ T6249] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 93.790660][ T6249] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 93.811504][ T5818] ldm_validate_partition_table(): Disk read failed. [ 93.820944][ T5818] Dev nbd4: unable to read RDB block 0 [ 93.826781][ T5818] nbd4: unable to read partition table [ 93.927070][ T6249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.943132][ T6249] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.972843][ T6249] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 93.983698][ T6249] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.058310][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.065759][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.075265][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.082396][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.363519][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 94.363557][ T29] audit: type=1400 audit(1731653232.441:278): avc: denied { sys_module } for pid=6249 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 94.549644][ T5831] Bluetooth: hci4: command tx timeout [ 94.823612][ T44] usb 5-1: USB disconnect, device number 4 [ 94.965965][ T6391] nbd0: detected capacity change from 0 to 22 [ 94.974475][ T6249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.682754][ T29] audit: type=1400 audit(1731653233.421:279): avc: denied { getopt } for pid=6403 comm="syz.4.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 95.702929][ C0] vkms_vblank_simulate: vblank timer overrun [ 96.309795][ T6435] serio: Serial port ptm0 [ 96.711658][ T6391] block nbd0: shutting down sockets [ 96.715278][ T6249] veth0_vlan: entered promiscuous mode [ 96.723392][ T5997] ldm_validate_partition_table(): Disk read failed. [ 96.775674][ T6249] veth1_vlan: entered promiscuous mode [ 96.782984][ T5997] Dev nbd0: unable to read RDB block 0 [ 96.793326][ T5997] nbd0: unable to read partition table [ 96.805927][ T5997] nbd0: partition table beyond EOD, truncated [ 96.942185][ T6249] veth0_macvtap: entered promiscuous mode [ 96.964132][ T6249] veth1_macvtap: entered promiscuous mode [ 96.977612][ T5997] ldm_validate_partition_table(): Disk read failed. [ 97.004355][ T5997] Dev nbd0: unable to read RDB block 0 [ 97.006446][ T6249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.020557][ T6249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.026499][ T5997] nbd0: unable to read partition table [ 97.031197][ T6249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.515508][ T5997] nbd0: partition table beyond EOD, truncated [ 97.617320][ T6249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.643320][ T6249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.654159][ T6249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.670394][ T6249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.681046][ T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 97.694649][ T6249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.716795][ T29] audit: type=1400 audit(1731653235.851:280): avc: denied { mount } for pid=6440 comm="syz.1.102" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 97.744117][ T6249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.759943][ T6249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.773487][ T6249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.784196][ T6249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.794981][ T6249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.805830][ T6249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.816990][ T6249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.828268][ T6249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.839635][ T6249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.853935][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 97.883784][ T8] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 97.903095][ T6249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.921063][ T8] usb 2-1: config 0 has no interface number 0 [ 97.972215][ T8] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 97.999796][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.043691][ T8] usb 2-1: Product: syz [ 98.049030][ T8] usb 2-1: Manufacturer: syz [ 98.064332][ T6249] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.076877][ T8] usb 2-1: SerialNumber: syz [ 98.085008][ T8] usb 2-1: config 0 descriptor?? [ 98.091320][ T6249] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.104083][ T6249] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.114739][ T8] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 98.124456][ T6249] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.231580][ T5872] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 98.259133][ T62] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.332469][ T6443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.341198][ T6443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.351943][ T29] audit: type=1400 audit(1731653236.471:281): avc: denied { write } for pid=6440 comm="syz.1.102" name="sg0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 98.443942][ T62] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.472327][ T5872] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 98.496289][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.506221][ T5872] usb 1-1: Product: syz [ 98.520560][ T5872] usb 1-1: Manufacturer: syz [ 98.525347][ T5872] usb 1-1: SerialNumber: syz [ 98.544101][ T5872] usb 1-1: config 0 descriptor?? [ 98.584817][ T62] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.706097][ T62] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.772380][ T5872] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=1] err=-32 [ 98.804157][ T5872] peak_usb 1-1:0.0: unable to read PCAN-Chip USB firmware info (err -32) [ 98.816767][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.853532][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.924163][ T5872] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -32 [ 98.935976][ T3562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.958304][ T3562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.020795][ T29] audit: type=1400 audit(1731653237.131:282): avc: denied { mounton } for pid=6249 comm="syz-executor" path="/root/syzkaller.uqNOLQ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 99.109670][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.127667][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.156036][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.164632][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.792295][ T5838] block nbd0: Receive control failed (result -107) [ 99.801280][ T5838] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 99.893133][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.907937][ T8] usb 2-1: qt2_attach - failed to power on unit: -71 [ 99.924753][ T8] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71 [ 99.938241][ T8] usb 2-1: USB disconnect, device number 7 [ 100.053749][ T62] bridge_slave_1: left allmulticast mode [ 100.059431][ T62] bridge_slave_1: left promiscuous mode [ 100.062747][ T6481] nbd0: detected capacity change from 0 to 11778 [ 100.066349][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.083731][ T62] bridge_slave_0: left allmulticast mode [ 100.089427][ T62] bridge_slave_0: left promiscuous mode [ 100.095423][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.114226][ T5818] block nbd0: Dead connection, failed to find a fallback [ 100.127671][ T5818] block nbd0: shutting down sockets [ 100.149869][ T5818] blk_print_req_error: 77 callbacks suppressed [ 100.149885][ T5818] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.223137][ T5818] buffer_io_error: 75 callbacks suppressed [ 100.223153][ T5818] Buffer I/O error on dev nbd0, logical block 0, async page read [ 100.240535][ T5872] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 100.275607][ T29] audit: type=1400 audit(1731653238.401:283): avc: denied { getopt } for pid=6496 comm="syz.5.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.295630][ T5818] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.305097][ T5818] Buffer I/O error on dev nbd0, logical block 0, async page read [ 100.313066][ T5818] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.322402][ T5818] Buffer I/O error on dev nbd0, logical block 0, async page read [ 100.330599][ T5818] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.339657][ T5818] Buffer I/O error on dev nbd0, logical block 0, async page read [ 100.348593][ T5818] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.358555][ T5818] Buffer I/O error on dev nbd0, logical block 0, async page read [ 100.368447][ T5818] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.377781][ T5818] Buffer I/O error on dev nbd0, logical block 0, async page read [ 100.386009][ T5818] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.395394][ T5818] Buffer I/O error on dev nbd0, logical block 0, async page read [ 100.403656][ T5818] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.412970][ T5818] Buffer I/O error on dev nbd0, logical block 0, async page read [ 100.421241][ T5818] ldm_validate_partition_table(): Disk read failed. [ 100.423694][ T5872] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 100.427912][ T5818] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.447661][ T5818] Buffer I/O error on dev nbd0, logical block 0, async page read [ 100.449212][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.455793][ T5818] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.473110][ T5818] Buffer I/O error on dev nbd0, logical block 0, async page read [ 100.481435][ T5818] Dev nbd0: unable to read RDB block 0 [ 100.488889][ T5818] nbd0: unable to read partition table [ 100.498748][ T5818] ldm_validate_partition_table(): Disk read failed. [ 100.505920][ T5818] Dev nbd0: unable to read RDB block 0 [ 100.511981][ T5818] nbd0: unable to read partition table [ 100.523144][ T5872] usb 5-1: config 0 descriptor?? [ 100.592712][ T44] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 100.751280][ T5872] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 100.760192][ T5872] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 100.768123][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 100.784297][ T44] usb 2-1: config 64 has an invalid interface number: 23 but max is 1 [ 100.806099][ T44] usb 2-1: config 64 has an invalid interface number: 83 but max is 1 [ 100.817175][ T44] usb 2-1: config 64 has no interface number 0 [ 100.817433][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.827761][ T5872] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 100.841875][ T44] usb 2-1: config 64 has no interface number 1 [ 100.849366][ T5872] [drm] Initialized udl on minor 2 [ 100.849549][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.855640][ T44] usb 2-1: config 64 interface 23 has no altsetting 0 [ 100.873553][ T44] usb 2-1: config 64 interface 83 has no altsetting 0 [ 100.874315][ T62] bond0 (unregistering): Released all slaves [ 100.883219][ T44] usb 2-1: New USB device found, idVendor=04c8, idProduct=0720, bcdDevice=3e.66 [ 100.930678][ T44] usb 2-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 100.938762][ T44] usb 2-1: Product: syz [ 100.960547][ T44] usb 2-1: Manufacturer: syz [ 100.965211][ T44] usb 2-1: SerialNumber: syz [ 100.985944][ T5872] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 101.005170][ T5872] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 101.037981][ T25] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 101.048915][ T25] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 101.084362][ T5872] usb 5-1: USB disconnect, device number 5 [ 101.166752][ T9] usb 1-1: USB disconnect, device number 6 [ 101.386807][ T6505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.402152][ T6505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.431102][ T6476] chnl_net:caif_netlink_parms(): no params data found [ 101.917769][ T29] audit: type=1400 audit(1731653240.051:284): avc: denied { setopt } for pid=6504 comm="syz.1.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 101.970026][ T62] hsr_slave_0: left promiscuous mode [ 101.977412][ T29] audit: type=1400 audit(1731653240.111:285): avc: denied { search } for pid=5184 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.007515][ T29] audit: type=1400 audit(1731653240.141:286): avc: denied { bind } for pid=6504 comm="syz.1.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 102.046390][ T6521] FAULT_INJECTION: forcing a failure. [ 102.046390][ T6521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.051489][ T29] audit: type=1400 audit(1731653240.181:287): avc: denied { ioctl } for pid=6518 comm="syz.5.114" path="socket:[11490]" dev="sockfs" ino=11490 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 102.070003][ T62] hsr_slave_1: left promiscuous mode [ 102.099097][ T6521] CPU: 1 UID: 0 PID: 6521 Comm: syz.4.115 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 102.104591][ T5838] Bluetooth: hci2: command tx timeout [ 102.109705][ T6521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 102.109718][ T6521] Call Trace: [ 102.128488][ T6521] [ 102.131422][ T6521] dump_stack_lvl+0x16c/0x1f0 [ 102.136090][ T6521] should_fail_ex+0x497/0x5b0 [ 102.140753][ T6521] _copy_from_iter+0x2a1/0x1560 [ 102.145612][ T6521] ? __pfx__copy_from_iter+0x10/0x10 [ 102.150888][ T6521] ? __virt_addr_valid+0x1a4/0x590 [ 102.156009][ T6521] ? __virt_addr_valid+0x5e/0x590 [ 102.161054][ T6521] ? __phys_addr_symbol+0x30/0x80 [ 102.166094][ T6521] ? __check_object_size+0x488/0x710 [ 102.171400][ T6521] netlink_sendmsg+0x813/0xd70 [ 102.176187][ T6521] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.181508][ T6521] ____sys_sendmsg+0xaaf/0xc90 [ 102.186294][ T6521] ? copy_msghdr_from_user+0x10b/0x160 [ 102.191834][ T6521] ? __pfx_____sys_sendmsg+0x10/0x10 [ 102.197150][ T6521] ? __pfx___lock_acquire+0x10/0x10 [ 102.202362][ T6521] ___sys_sendmsg+0x135/0x1e0 [ 102.207059][ T6521] ? __pfx____sys_sendmsg+0x10/0x10 [ 102.212287][ T6521] ? lock_acquire+0x2f/0xb0 [ 102.216847][ T6521] ? __fget_files+0x40/0x3f0 [ 102.221090][ T29] audit: type=1400 audit(1731653240.361:288): avc: denied { write } for pid=6518 comm="syz.5.114" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 102.221472][ T6521] ? fdget+0x176/0x210 [ 102.244370][ T6521] __sys_sendmsg+0x117/0x1f0 [ 102.248975][ T6521] ? __pfx___sys_sendmsg+0x10/0x10 [ 102.254079][ T6521] ? __fget_files+0x244/0x3f0 [ 102.258757][ T6521] do_syscall_64+0xcd/0x250 [ 102.263257][ T6521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.269168][ T6521] RIP: 0033:0x7f63f157e719 [ 102.273587][ T6521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.293197][ T6521] RSP: 002b:00007f63f2308038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.301599][ T6521] RAX: ffffffffffffffda RBX: 00007f63f1735f80 RCX: 00007f63f157e719 [ 102.309581][ T6521] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 102.317551][ T6521] RBP: 00007f63f2308090 R08: 0000000000000000 R09: 0000000000000000 [ 102.325526][ T6521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.333488][ T6521] R13: 0000000000000000 R14: 00007f63f1735f80 R15: 00007ffdbfebb968 [ 102.341467][ T6521] [ 102.344594][ C1] vkms_vblank_simulate: vblank timer overrun [ 102.357460][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.368633][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.631193][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.747610][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.599012][ T62] veth1_macvtap: left promiscuous mode [ 103.614282][ T62] veth0_macvtap: left promiscuous mode [ 103.625199][ T62] veth1_vlan: left promiscuous mode [ 103.634765][ T62] veth0_vlan: left promiscuous mode [ 103.840725][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 104.023166][ T29] audit: type=1400 audit(1731653242.161:289): avc: denied { ioctl } for pid=6533 comm="syz.5.118" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 104.181414][ T5838] Bluetooth: hci2: command tx timeout [ 104.413973][ T8] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 104.506987][ T62] team0 (unregistering): Port device team_slave_1 removed [ 104.549478][ T62] team0 (unregistering): Port device team_slave_0 removed [ 104.598653][ T8] usb 5-1: unable to get BOS descriptor or descriptor too short [ 104.612982][ T8] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 104.626529][ T8] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 19 [ 104.643387][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 104.652949][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 104.661675][ T8] usb 5-1: SerialNumber: syz [ 104.680530][ T6545] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 104.907728][ T6545] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 105.062713][ T6543] netlink: 28 bytes leftover after parsing attributes in process `syz.5.119'. [ 105.165048][ T44] usb 2-1: USB disconnect, device number 8 [ 105.332880][ T8] cdc_ether 5-1:1.0 eth9: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 105.418204][ T6554] use of bytesused == 0 is deprecated and will be removed in the future, [ 105.455541][ T6554] use the actual size instead. [ 106.062552][ T6476] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.115603][ T6476] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.149757][ T6476] bridge_slave_0: entered allmulticast mode [ 106.251567][ T6476] bridge_slave_0: entered promiscuous mode [ 106.271450][ T5838] Bluetooth: hci2: command tx timeout [ 106.273492][ T6476] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.410906][ T6476] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.421133][ T6476] bridge_slave_1: entered allmulticast mode [ 106.481007][ T6476] bridge_slave_1: entered promiscuous mode [ 106.644951][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 107.379339][ T8] usb 5-1: USB disconnect, device number 6 [ 107.386389][ T8] cdc_ether 5-1:1.0 eth9: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 107.476596][ T6476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.661778][ T5010] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 107.969321][ T5010] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 107.980952][ T5010] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.985568][ T29] audit: type=1400 audit(1731653245.791:290): avc: denied { setopt } for pid=6564 comm="syz.1.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 108.200641][ T5010] usb 6-1: config 0 descriptor?? [ 108.341952][ T5838] Bluetooth: hci2: command tx timeout [ 109.232273][ T6476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.558602][ T6476] team0: Port device team_slave_0 added [ 109.709634][ T6476] team0: Port device team_slave_1 added [ 109.905243][ T5010] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 109.919637][ T5010] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 109.953769][ T5010] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 109.961324][ T5010] [drm] Initialized udl on minor 2 [ 110.086918][ T6476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.141500][ T5872] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 110.159954][ T5010] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 110.169699][ T5010] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 110.173716][ T6476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.178016][ T8] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 110.202212][ C1] vkms_vblank_simulate: vblank timer overrun [ 110.273291][ T5010] usb 6-1: USB disconnect, device number 2 [ 110.282996][ T8] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 110.672197][ T29] audit: type=1400 audit(1731653248.801:291): avc: denied { write } for pid=6614 comm="syz.4.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 110.700053][ T6620] ISOFS: Unable to identify CD-ROM format. [ 110.719953][ T5872] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 110.727840][ T8] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 110.729025][ T5872] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 110.744327][ T6476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.749271][ T29] audit: type=1400 audit(1731653248.861:292): avc: denied { getopt } for pid=6614 comm="syz.4.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 110.755456][ T5872] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.789512][ T6476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.796549][ T6476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.822680][ T5872] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 110.831980][ T6476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.842743][ T5872] usb 2-1: config 1 has no interface number 0 [ 110.848891][ T5872] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 110.860284][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.946645][ T5872] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 111.022873][ T6476] hsr_slave_0: entered promiscuous mode [ 111.099258][ T6476] hsr_slave_1: entered promiscuous mode [ 111.112425][ T5872] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 111.123101][ T5872] snd_usb_pod 2-1:1.1: invalid control EP [ 111.128851][ T5872] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 111.158136][ T6476] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.174513][ T6476] Cannot create hsr debugfs directory [ 111.183736][ T5872] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 112.166891][ T5872] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 113.005636][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 113.260474][ T1199] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 113.517784][ T1199] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.530089][ T1199] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.541959][ T1199] usb 1-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 113.634646][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 114.126046][ T1199] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.145378][ T1199] usb 1-1: config 0 descriptor?? [ 114.162002][ T29] audit: type=1400 audit(1731653252.291:293): avc: denied { mount } for pid=6655 comm="syz.5.140" name="/" dev="ramfs" ino=11675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 114.222371][ T29] audit: type=1400 audit(1731653252.361:294): avc: denied { setopt } for pid=6655 comm="syz.5.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 114.270506][ T29] audit: type=1400 audit(1731653252.381:295): avc: denied { write } for pid=6655 comm="syz.5.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 114.467634][ T6476] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 114.474067][ T29] audit: type=1400 audit(1731653252.611:296): avc: denied { unmount } for pid=6249 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 114.555140][ T6476] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 114.587102][ T6476] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 114.648699][ T6476] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 114.735485][ T6476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.753967][ T6476] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.773240][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.780835][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.912390][ T1199] hid (null): report_id 64478 is invalid [ 114.920502][ T1199] hid (null): global environment stack underflow [ 114.930161][ T1199] redragon 0003:0C45:760B.0002: report_id 64478 is invalid [ 114.954170][ T3562] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.954365][ T1199] redragon 0003:0C45:760B.0002: item 0 2 1 8 parsing failed [ 114.961309][ T3562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.986645][ T6665] netlink: 'syz.5.142': attribute type 1 has an invalid length. [ 114.993543][ T1199] redragon 0003:0C45:760B.0002: probe with driver redragon failed with error -22 [ 116.449664][ T1199] usb 1-1: USB disconnect, device number 7 [ 116.681489][ T6605] kexec: Could not allocate control_code_buffer [ 116.696077][ T6476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.836787][ T5872] usb 2-1: USB disconnect, device number 9 [ 116.875824][ T6690] ISOFS: Unable to identify CD-ROM format. [ 119.384664][ T62] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.564937][ T62] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.727251][ T62] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.858417][ T6730] netlink: 'syz.0.154': attribute type 1 has an invalid length. [ 120.341812][ T8] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 121.759400][ T62] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.833242][ T6734] netlink: 64 bytes leftover after parsing attributes in process `syz.0.157'. [ 121.843140][ T6476] veth0_vlan: entered promiscuous mode [ 121.963283][ T6736] netlink: 'syz.4.156': attribute type 16 has an invalid length. [ 121.972301][ T6736] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.156'. [ 122.026969][ T8] usb 6-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 122.031460][ T6476] veth1_vlan: entered promiscuous mode [ 122.132885][ T8] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 122.230168][ T6736] netlink: 48 bytes leftover after parsing attributes in process `syz.4.156'. [ 122.244636][ T6736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.156'. [ 122.353985][ T6476] veth0_macvtap: entered promiscuous mode [ 122.355191][ T8] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 122.384408][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 122.392335][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 122.409398][ T8] usb 6-1: SerialNumber: syz [ 122.415249][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 122.425394][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 122.456067][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 122.464221][ T5831] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 122.471720][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 122.481154][ T6738] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 122.720229][ T6476] veth1_macvtap: entered promiscuous mode [ 123.478957][ T62] bridge_slave_1: left allmulticast mode [ 123.486092][ T62] bridge_slave_1: left promiscuous mode [ 123.496798][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.522304][ T62] bridge_slave_0: left allmulticast mode [ 123.529547][ T62] bridge_slave_0: left promiscuous mode [ 123.538482][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.708329][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 123.723410][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 123.739078][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 123.765822][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 123.775976][ T5010] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 123.787971][ T5831] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 123.806695][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 123.934304][ T5010] usb 5-1: Using ep0 maxpacket: 32 [ 123.946799][ T5010] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.957080][ T5010] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.968212][ T5010] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.978760][ T5010] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 123.992995][ T5010] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 124.002439][ T5010] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.012587][ T5010] usb 5-1: config 0 descriptor?? [ 124.093395][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.106161][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.116869][ T62] bond0 (unregistering): Released all slaves [ 124.131218][ T6476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.144390][ T6476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.154899][ T6476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.166607][ T6476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.176566][ T6476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.187107][ T6476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.198108][ T6476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.208713][ T6476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.220313][ T6476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.263588][ T29] audit: type=1326 audit(1731653262.401:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f157e719 code=0x7ffc0000 [ 124.287032][ T5832] syz_tun (unregistering): left promiscuous mode [ 124.287255][ T29] audit: type=1326 audit(1731653262.401:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f157e719 code=0x7ffc0000 [ 124.323856][ T29] audit: type=1326 audit(1731653262.401:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f63f157e719 code=0x7ffc0000 [ 124.347398][ T29] audit: type=1326 audit(1731653262.401:300): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f157e719 code=0x7ffc0000 [ 124.375657][ T29] audit: type=1326 audit(1731653262.401:301): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f157e719 code=0x7ffc0000 [ 124.405029][ T29] audit: type=1326 audit(1731653262.401:302): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f63f157e719 code=0x7ffc0000 [ 124.429356][ T29] audit: type=1326 audit(1731653262.401:303): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f157e719 code=0x7ffc0000 [ 124.453421][ T29] audit: type=1326 audit(1731653262.401:304): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f63f157e31b code=0x7ffc0000 [ 124.479678][ T5010] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 124.486832][ T5010] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 124.498850][ T5010] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 124.506076][ T29] audit: type=1326 audit(1731653262.401:305): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f63f157e31b code=0x7ffc0000 [ 124.535507][ T5010] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 124.542604][ T5010] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 124.558065][ T29] audit: type=1326 audit(1731653262.401:306): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f63f15b0805 code=0x7ffc0000 [ 124.584557][ T5010] ntrig 0003:1B96:000A.0003: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.4-1/input0 [ 124.638754][ T6476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.658690][ T6476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.668730][ T6476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.686030][ T6750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.695433][ T6476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.710098][ T6750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.716664][ T6476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.728819][ T6476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.740192][ T6476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.743849][ T6750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.767588][ T6476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.777750][ T6750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.791553][ T6476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.814470][ T5010] ntrig 0003:1B96:000A.0003: Firmware version: 0.12.5.13.0 (b020 a8b1) [ 124.824015][ T8] usb 6-1: can't set config #1, error -71 [ 124.831623][ T8] usb 6-1: USB disconnect, device number 3 [ 124.897277][ T6476] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.919063][ T6476] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.936594][ T6476] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.985339][ T6476] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.016771][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 125.025679][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 125.057512][ T2153] usb 5-1: USB disconnect, device number 7 [ 125.067634][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 125.075503][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 125.083329][ T5831] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 125.090784][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 125.365878][ T6763] mkiss: ax0: crc mode is auto. [ 125.680112][ T62] hsr_slave_0: left promiscuous mode [ 125.690200][ T62] hsr_slave_1: left promiscuous mode [ 125.694496][ T6766] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 125.708675][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.716714][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.727225][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.734978][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.749202][ T62] veth1_macvtap: left promiscuous mode [ 125.754862][ T62] veth0_macvtap: left promiscuous mode [ 125.760503][ T62] veth1_vlan: left promiscuous mode [ 125.784159][ T62] veth0_vlan: left promiscuous mode [ 125.861616][ T5831] Bluetooth: hci1: command tx timeout [ 126.179482][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 126.729673][ T62] team0 (unregistering): Port device team_slave_1 removed [ 126.786719][ T62] team0 (unregistering): Port device team_slave_0 removed [ 127.009667][ T5831] Bluetooth: unknown link type 115 [ 127.015134][ T5831] Bluetooth: hci0: connection err: -111 [ 127.140890][ T5831] Bluetooth: hci3: command tx timeout [ 127.542499][ T6753] chnl_net:caif_netlink_parms(): no params data found [ 127.551089][ T3624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.563055][ T3624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.940887][ T5831] Bluetooth: hci1: command tx timeout [ 128.094778][ T6759] chnl_net:caif_netlink_parms(): no params data found [ 128.119349][ T6753] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.129754][ T6753] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.139085][ T6753] bridge_slave_0: entered allmulticast mode [ 128.155176][ T6753] bridge_slave_0: entered promiscuous mode [ 128.194364][ T6753] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.202273][ T6753] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.209573][ T6753] bridge_slave_1: entered allmulticast mode [ 128.216662][ T6753] bridge_slave_1: entered promiscuous mode [ 128.251656][ T3624] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.282880][ T3624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.322662][ T6753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.343259][ T6753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.512524][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.706757][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.916405][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.974628][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.028916][ T6759] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.036363][ T6759] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.049841][ T6759] bridge_slave_0: entered allmulticast mode [ 129.062103][ T6759] bridge_slave_0: entered promiscuous mode [ 129.138036][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.278591][ T5831] Bluetooth: hci3: command tx timeout [ 129.296101][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.314316][ T6759] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.321609][ T6759] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.328797][ T6759] bridge_slave_1: entered allmulticast mode [ 129.335677][ T6759] bridge_slave_1: entered promiscuous mode [ 129.948628][ T6753] team0: Port device team_slave_0 added [ 129.998113][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.017196][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.040502][ T5831] Bluetooth: hci1: command tx timeout [ 130.083365][ T6753] team0: Port device team_slave_1 added [ 130.092430][ T6759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.133307][ T6753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.142625][ T6753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.168574][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.179476][ T6753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.213187][ T6759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.279693][ T6753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.291636][ T6753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.317595][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.329236][ T6753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.418323][ T6759] team0: Port device team_slave_0 added [ 130.490891][ T6759] team0: Port device team_slave_1 added [ 130.643323][ T6819] netlink: 'syz.4.174': attribute type 1 has an invalid length. [ 131.300760][ T5831] Bluetooth: hci3: command tx timeout [ 131.372443][ T6759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.379438][ T6759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.405495][ C1] vkms_vblank_simulate: vblank timer overrun [ 131.464774][ T6759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.483856][ T62] bridge_slave_1: left allmulticast mode [ 131.491487][ T62] bridge_slave_1: left promiscuous mode [ 131.497198][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.507093][ T62] bridge_slave_0: left allmulticast mode [ 131.513893][ T62] bridge_slave_0: left promiscuous mode [ 131.520476][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.738300][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 131.752545][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 131.762989][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 131.776239][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 131.786755][ T5838] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 131.796147][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 131.871748][ T8] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 131.955987][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.966923][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.978759][ T62] bond0 (unregistering): Released all slaves [ 131.993857][ T6759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.001125][ T6759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.035024][ T6759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.066548][ T8] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 132.092867][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.101331][ T5838] Bluetooth: hci1: command tx timeout [ 132.108771][ T8] usb 5-1: config 0 descriptor?? [ 132.116145][ T8] gspca_main: spca508-2.14.0 probing 8086:0110 [ 132.131268][ T6753] hsr_slave_0: entered promiscuous mode [ 132.137993][ T6753] hsr_slave_1: entered promiscuous mode [ 132.145241][ T6753] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.181774][ T6753] Cannot create hsr debugfs directory [ 132.280605][ T6830] netlink: 'syz.5.179': attribute type 16 has an invalid length. [ 132.288499][ T6830] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.179'. [ 132.631433][ T8] gspca_spca508: reg_read err -110 [ 132.636935][ T6829] netlink: 48 bytes leftover after parsing attributes in process `syz.5.179'. [ 132.645935][ T6829] netlink: 8 bytes leftover after parsing attributes in process `syz.5.179'. [ 132.663093][ T8] gspca_spca508: reg_read err -32 [ 132.680625][ T8] gspca_spca508: reg_read err -32 [ 132.696756][ T6759] hsr_slave_0: entered promiscuous mode [ 132.699515][ T8] gspca_spca508: reg_read err -32 [ 132.713693][ T6759] hsr_slave_1: entered promiscuous mode [ 132.715240][ T8] gspca_spca508: reg_read err -32 [ 132.725299][ T6759] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.733204][ T8] gspca_spca508: reg write: error -32 [ 132.738955][ T8] spca508 5-1:0.0: probe with driver spca508 failed with error -32 [ 132.748974][ T6759] Cannot create hsr debugfs directory [ 132.766351][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.773062][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.380793][ T5838] Bluetooth: hci3: command tx timeout [ 133.746161][ T62] batadv_slave_0: left promiscuous mode [ 133.769302][ T62] hsr_slave_0: left promiscuous mode [ 133.780236][ T62] hsr_slave_1: left promiscuous mode [ 133.794209][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.806472][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.818612][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.826757][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.849341][ T62] veth1_macvtap: left promiscuous mode [ 133.855295][ T62] veth0_macvtap: left promiscuous mode [ 133.861103][ T5838] Bluetooth: hci2: command tx timeout [ 133.878748][ T62] veth1_vlan: left promiscuous mode [ 133.886911][ T62] veth0_vlan: left promiscuous mode [ 134.236434][ T62] team0 (unregistering): Port device team_slave_1 removed [ 134.276224][ T62] team0 (unregistering): Port device team_slave_0 removed [ 134.597157][ T25] usb 5-1: USB disconnect, device number 8 [ 135.385213][ T6753] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 135.411189][ T6826] chnl_net:caif_netlink_parms(): no params data found [ 135.430101][ T6753] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 135.446050][ T6753] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 135.567957][ T6753] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 135.674449][ T6753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.710296][ T6753] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.730860][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 135.730876][ T29] audit: type=1400 audit(1731653273.821:342): avc: denied { map } for pid=6852 comm="syz.4.186" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 135.796996][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 135.803345][ T6759] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 135.831745][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 135.839640][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 135.858536][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 135.868505][ T5831] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 135.869230][ T6826] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.876270][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 135.900919][ T6826] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.919448][ T6826] bridge_slave_0: entered allmulticast mode [ 135.926338][ T6826] bridge_slave_0: entered promiscuous mode [ 135.937951][ T3624] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.945050][ T3624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.953359][ T5831] Bluetooth: hci2: command tx timeout [ 135.954770][ T3624] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.965815][ T3624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.977707][ T6759] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 135.989022][ T6826] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.998642][ T6826] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.005990][ T6826] bridge_slave_1: entered allmulticast mode [ 136.013397][ T6826] bridge_slave_1: entered promiscuous mode [ 136.040839][ T6759] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 136.065819][ T6826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.075800][ T6759] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 136.104930][ T62] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.126444][ T6826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.160626][ T1199] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 136.174179][ T6826] team0: Port device team_slave_0 added [ 136.200119][ T62] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.226689][ T6826] team0: Port device team_slave_1 added [ 136.258913][ T6826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.266160][ T6826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.292924][ T6826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.327531][ T62] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.335922][ T1199] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 136.351032][ T1199] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.351680][ T6826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.366135][ T6826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.393616][ T6826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.398720][ T1199] usb 5-1: config 0 descriptor?? [ 136.448940][ T62] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.530126][ T6826] hsr_slave_0: entered promiscuous mode [ 136.541938][ T6826] hsr_slave_1: entered promiscuous mode [ 136.548056][ T6826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.556061][ T6826] Cannot create hsr debugfs directory [ 136.622270][ T1199] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 136.640227][ T1199] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 136.659867][ T1199] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 136.667197][ T1199] [drm] Initialized udl on minor 2 [ 136.685115][ T6856] chnl_net:caif_netlink_parms(): no params data found [ 136.795155][ T6753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.813882][ T6856] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.831443][ T6856] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.839737][ T6856] bridge_slave_0: entered allmulticast mode [ 136.848643][ T6856] bridge_slave_0: entered promiscuous mode [ 136.862374][ T1199] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 136.875362][ T6856] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.882683][ T1199] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 136.891380][ T6856] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.891737][ T9] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 136.898589][ T6856] bridge_slave_1: entered allmulticast mode [ 136.909013][ T1199] usb 5-1: USB disconnect, device number 9 [ 136.918766][ T9] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 136.925676][ T6856] bridge_slave_1: entered promiscuous mode [ 136.927454][ T9] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 136.982411][ T62] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.062409][ T6856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.087408][ T62] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.108570][ T6856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.172621][ T62] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.190676][ T6759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.203778][ T6856] team0: Port device team_slave_0 added [ 137.227130][ T6856] team0: Port device team_slave_1 added [ 137.259762][ T62] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.284738][ T6856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.291951][ T6856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.318031][ C1] vkms_vblank_simulate: vblank timer overrun [ 137.325840][ T6856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.338566][ T6856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.345633][ T6856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.372652][ T6856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.403112][ T6759] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.419412][ T6826] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 137.462423][ T6753] veth0_vlan: entered promiscuous mode [ 137.472276][ T6753] veth1_vlan: entered promiscuous mode [ 137.479811][ T6826] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 137.490087][ T6826] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 137.503564][ T3624] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.510711][ T3624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.519663][ T3624] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.527034][ T3624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.555374][ T6826] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 137.575540][ T6856] hsr_slave_0: entered promiscuous mode [ 137.581667][ T6856] hsr_slave_1: entered promiscuous mode [ 137.587724][ T6856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.596482][ T6856] Cannot create hsr debugfs directory [ 137.682938][ T62] bridge_slave_1: left allmulticast mode [ 137.688695][ T62] bridge_slave_1: left promiscuous mode [ 137.695450][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.705552][ T62] bridge_slave_0: left allmulticast mode [ 137.713789][ T62] bridge_slave_0: left promiscuous mode [ 137.719440][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.727795][ T25] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 137.738176][ T62] bridge_slave_1: left allmulticast mode [ 137.744194][ T62] bridge_slave_1: left promiscuous mode [ 137.749843][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.758193][ T62] bridge_slave_0: left allmulticast mode [ 137.764327][ T62] bridge_slave_0: left promiscuous mode [ 137.770062][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.914185][ T25] usb 5-1: unable to get BOS descriptor or descriptor too short [ 137.924600][ T25] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 137.934689][ T25] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 19 [ 137.947938][ T5831] Bluetooth: hci4: command tx timeout [ 137.955404][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 137.964669][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 137.972775][ T25] usb 5-1: SerialNumber: syz [ 137.983074][ T6881] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 138.026209][ T5831] Bluetooth: hci2: command tx timeout [ 138.198072][ T6881] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 138.346375][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.357950][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.368478][ T62] bond0 (unregistering): Released all slaves [ 138.470065][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.482238][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.493383][ T62] bond0 (unregistering): Released all slaves [ 138.517855][ T6753] veth0_macvtap: entered promiscuous mode [ 138.580937][ T6753] veth1_macvtap: entered promiscuous mode [ 138.604599][ T6759] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 138.669152][ T25] cdc_ether 5-1:1.0 eth25: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 138.819296][ T6753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.838883][ T6753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.849411][ T6753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.866449][ T6753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.877910][ T6753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.888834][ T6753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.899727][ T6753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.976996][ T6826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.018045][ T6753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.029696][ T6753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.047319][ T6753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.057781][ T6753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.067730][ T6753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.078201][ T6753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.089133][ T6753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.141266][ T6753] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.150181][ T6753] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.160482][ T6753] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.169443][ T6753] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.184273][ T6826] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.269139][ T3624] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.276325][ T3624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.296683][ T62] hsr_slave_0: left promiscuous mode [ 139.304638][ T62] hsr_slave_1: left promiscuous mode [ 139.311154][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.318603][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.327025][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.335038][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.347921][ T62] hsr_slave_0: left promiscuous mode [ 139.353776][ T62] hsr_slave_1: left promiscuous mode [ 139.359834][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.367424][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.375446][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.383768][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.408994][ T62] veth1_macvtap: left promiscuous mode [ 139.415412][ T62] veth0_macvtap: left promiscuous mode [ 139.421251][ T62] veth1_vlan: left promiscuous mode [ 139.426507][ T62] veth0_vlan: left promiscuous mode [ 139.432846][ T62] veth1_macvtap: left promiscuous mode [ 139.438331][ T62] veth0_macvtap: left promiscuous mode [ 139.443981][ T62] veth1_vlan: left promiscuous mode [ 139.449768][ T62] veth0_vlan: left promiscuous mode [ 139.856119][ T62] team0 (unregistering): Port device team_slave_1 removed [ 139.903733][ T62] team0 (unregistering): Port device team_slave_0 removed [ 140.021044][ T5831] Bluetooth: hci4: command tx timeout [ 140.104045][ T5831] Bluetooth: hci2: command tx timeout [ 140.500130][ T25] usb 5-1: USB disconnect, device number 10 [ 140.508067][ T25] cdc_ether 5-1:1.0 eth25: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 140.587022][ T62] team0 (unregistering): Port device team_slave_1 removed [ 140.705169][ T6891] netlink: 'syz.4.189': attribute type 16 has an invalid length. [ 140.713185][ T6891] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.189'. [ 140.821583][ T6891] netlink: 48 bytes leftover after parsing attributes in process `syz.4.189'. [ 140.832991][ T6891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.189'. [ 141.025421][ T62] team0 (unregistering): Port device team_slave_0 removed [ 142.055940][ T3437] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.063072][ T3437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.107237][ T5831] Bluetooth: hci4: command tx timeout [ 142.170196][ T6759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.236211][ T3437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.242997][ T6826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 142.279122][ T3437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.469870][ T184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.488188][ T184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.601926][ T6908] netlink: 'syz.4.191': attribute type 4 has an invalid length. [ 143.043163][ T6856] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 143.106561][ T6856] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 143.143999][ T6856] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 143.186531][ T6856] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 143.367831][ T6919] ISOFS: Unable to identify CD-ROM format. [ 143.665263][ T6856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.890991][ T6856] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.917969][ T3496] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.925140][ T3496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.960790][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.967912][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.028388][ T6759] veth0_vlan: entered promiscuous mode [ 144.058125][ T6826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.079991][ T6759] veth1_vlan: entered promiscuous mode [ 144.170277][ T6759] veth0_macvtap: entered promiscuous mode [ 144.186867][ T5831] Bluetooth: hci4: command tx timeout [ 144.193722][ T6759] veth1_macvtap: entered promiscuous mode [ 144.823812][ T6759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.834375][ T6759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.851108][ T6759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.861797][ T6759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.874369][ T6759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.883584][ T6759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.894217][ T6759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.904406][ T6759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.915128][ T6759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.927874][ T6759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.938269][ T6759] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.947214][ T6759] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.955950][ T6759] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.964713][ T6759] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.693016][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.702780][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.907241][ T184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.917372][ T184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.921511][ T6856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.997921][ T6826] veth0_vlan: entered promiscuous mode [ 146.554429][ T6944] mkiss: ax0: crc mode is auto. [ 146.650016][ T6826] veth1_vlan: entered promiscuous mode [ 146.759520][ T6856] veth0_vlan: entered promiscuous mode [ 146.780957][ T6856] veth1_vlan: entered promiscuous mode [ 146.924191][ T6953] ISOFS: Unable to identify CD-ROM format. [ 147.273903][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 147.652387][ T6826] veth0_macvtap: entered promiscuous mode [ 147.736590][ T6856] veth0_macvtap: entered promiscuous mode [ 147.762512][ T6826] veth1_macvtap: entered promiscuous mode [ 147.813031][ T6856] veth1_macvtap: entered promiscuous mode [ 148.015558][ T6826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.026325][ T6826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.036356][ T6826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.047958][ T6826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.256442][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 149.040551][ T6826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.060782][ T6826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.213385][ T6826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.236193][ T6856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.262266][ T6856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.491578][ T6856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.618380][ T6856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.629027][ T6856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.639770][ T6856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.649688][ T6856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.660316][ T6856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.672478][ T6856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.801878][ T6826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.888020][ T6826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.810686][ T6826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.840425][ T6826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.855823][ T6826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.880945][ T6826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.899211][ T6826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.922206][ T6856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.946090][ T6856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.016162][ T6856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.027940][ T6856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.040530][ T6856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.060534][ T6856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.213384][ T6856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.625796][ T6856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.637593][ T6856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.661797][ T6986] mkiss: ax0: crc mode is auto. [ 151.692755][ T6826] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.706188][ T6826] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.714985][ T6826] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.723972][ T6826] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.736454][ T6856] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.770197][ T6856] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.779232][ T6856] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.790229][ T6856] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.847062][ T6994] netlink: 'syz.7.203': attribute type 16 has an invalid length. [ 151.856431][ T6994] netlink: 64138 bytes leftover after parsing attributes in process `syz.7.203'. [ 152.030639][ T6994] netlink: 48 bytes leftover after parsing attributes in process `syz.7.203'. [ 152.039695][ T6994] netlink: 8 bytes leftover after parsing attributes in process `syz.7.203'. [ 152.314244][ T3624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.330701][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.338582][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.338620][ T3624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.401351][ T6898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.409202][ T6898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.419116][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.434811][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.515124][ T6996] could not allocate digest TFM handle nhpoly1305-neon [ 152.594680][ T29] audit: type=1400 audit(1731653290.731:343): avc: denied { write } for pid=6995 comm="syz.8.204" name="usbmon4" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 152.617915][ C1] vkms_vblank_simulate: vblank timer overrun [ 152.698557][ T29] audit: type=1400 audit(1731653290.771:344): avc: denied { map } for pid=6995 comm="syz.8.204" path="/dev/usbmon4" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 152.722152][ C1] vkms_vblank_simulate: vblank timer overrun [ 153.105932][ T7017] ISOFS: Unable to identify CD-ROM format. [ 153.122078][ T29] audit: type=1400 audit(1731653290.831:345): avc: denied { bind } for pid=7014 comm="syz.7.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 153.157329][ T29] audit: type=1400 audit(1731653290.831:346): avc: denied { node_bind } for pid=7014 comm="syz.7.208" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 153.180687][ T29] audit: type=1400 audit(1731653290.831:347): avc: denied { connect } for pid=7014 comm="syz.7.208" laddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 153.203249][ T29] audit: type=1400 audit(1731653291.251:348): avc: denied { create } for pid=7012 comm="syz.9.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 153.223112][ T29] audit: type=1400 audit(1731653291.251:349): avc: denied { write } for pid=7012 comm="syz.9.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 153.272089][ T29] audit: type=1400 audit(1731653291.411:350): avc: denied { getopt } for pid=7010 comm="syz.3.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 153.299452][ T7018] netlink: 16 bytes leftover after parsing attributes in process `syz.9.176'. [ 154.176675][ T29] audit: type=1400 audit(1731653292.311:351): avc: denied { connect } for pid=7025 comm="syz.8.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 154.196008][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.210823][ T29] audit: type=1400 audit(1731653292.311:352): avc: denied { write } for pid=7025 comm="syz.8.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 154.270947][ T25] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 154.288186][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.407263][ T7046] FAULT_INJECTION: forcing a failure. [ 154.407263][ T7046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.411095][ T25] usb 4-1: device descriptor read/64, error -71 [ 154.425686][ T7046] CPU: 0 UID: 0 PID: 7046 Comm: syz.4.216 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 154.437300][ T7046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 154.447344][ T7046] Call Trace: [ 154.450603][ T7046] [ 154.453534][ T7046] dump_stack_lvl+0x16c/0x1f0 [ 154.458223][ T7046] should_fail_ex+0x497/0x5b0 [ 154.462906][ T7046] _copy_from_user+0x2e/0xd0 [ 154.467497][ T7046] userfaultfd_ioctl+0x28b/0x3830 [ 154.472513][ T7046] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 154.477973][ T7046] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 154.484463][ T7046] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 154.491037][ T7046] ? trace_lock_acquire+0x14a/0x1d0 [ 154.496222][ T7046] ? selinux_file_ioctl+0x180/0x270 [ 154.501410][ T7046] ? selinux_file_ioctl+0xb4/0x270 [ 154.506512][ T7046] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 154.511957][ T7046] ? __x64_sys_ioctl+0x18f/0x220 [ 154.516873][ T7046] __x64_sys_ioctl+0x18f/0x220 [ 154.521619][ T7046] do_syscall_64+0xcd/0x250 [ 154.526100][ T7046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.531977][ T7046] RIP: 0033:0x7f63f157e719 [ 154.536378][ T7046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.555964][ T7046] RSP: 002b:00007f63f2308038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.564358][ T7046] RAX: ffffffffffffffda RBX: 00007f63f1735f80 RCX: 00007f63f157e719 [ 154.572312][ T7046] RDX: 0000000020000040 RSI: 00000000c028aa05 RDI: 0000000000000003 [ 154.580290][ T7046] RBP: 00007f63f2308090 R08: 0000000000000000 R09: 0000000000000000 [ 154.588240][ T7046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.596191][ T7046] R13: 0000000000000000 R14: 00007f63f1735f80 R15: 00007ffdbfebb968 [ 154.604164][ T7046] [ 154.622814][ T7049] netlink: 'syz.8.215': attribute type 16 has an invalid length. [ 154.632486][ T7049] netlink: 64138 bytes leftover after parsing attributes in process `syz.8.215'. [ 154.865470][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 154.896455][ T25] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 155.041249][ T25] usb 4-1: device descriptor read/64, error -71 [ 155.153094][ T25] usb usb4-port1: attempt power cycle [ 155.462254][ T7055] ubi0: attaching mtd0 [ 155.480475][ T7055] ubi0: scanning is finished [ 155.485231][ T7055] ubi0: empty MTD device detected [ 155.553577][ T7049] netlink: 48 bytes leftover after parsing attributes in process `syz.8.215'. [ 155.562924][ T7049] netlink: 8 bytes leftover after parsing attributes in process `syz.8.215'. [ 155.823927][ T7055] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 155.971157][ T25] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 156.000894][ T25] usb 4-1: device descriptor read/8, error -71 [ 156.108319][ T7065] SELinux: policydb magic number 0x15 does not match expected magic number 0xf97cff8c [ 156.118698][ T7065] SELinux: failed to load policy [ 156.260899][ T25] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 156.505333][ T25] usb 4-1: device descriptor read/8, error -71 [ 156.597477][ T7073] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.220'. [ 156.661147][ T25] usb usb4-port1: unable to enumerate USB device [ 157.704949][ T5833] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 158.305981][ T7100] mkiss: ax0: crc mode is auto. [ 158.682128][ T5833] usb 10-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 158.692221][ T5833] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.705567][ T5833] usb 10-1: Product: syz [ 158.709817][ T5833] usb 10-1: Manufacturer: syz [ 158.715410][ T5833] usb 10-1: SerialNumber: syz [ 158.728240][ T5833] usb 10-1: config 0 descriptor?? [ 158.861818][ T7107] netlink: 'syz.3.230': attribute type 16 has an invalid length. [ 158.869750][ T7107] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.230'. [ 158.929294][ T7107] netlink: 48 bytes leftover after parsing attributes in process `syz.3.230'. [ 158.938479][ T7107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.230'. [ 159.466820][ T5833] usb-storage 10-1:0.0: USB Mass Storage device detected [ 159.474248][ T25] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 159.516771][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 159.516787][ T29] audit: type=1400 audit(1731653297.651:357): avc: denied { unlink } for pid=7112 comm="syz.3.233" name="#1" dev="tmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 159.546379][ T29] audit: type=1400 audit(1731653297.661:358): avc: denied { mount } for pid=7112 comm="syz.3.233" name="/" dev="overlay" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 159.576053][ T29] audit: type=1800 audit(1731653297.711:359): pid=7117 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.233" name="file1" dev="overlay" ino=50 res=0 errno=0 [ 159.578607][ T5833] usb 10-1: USB disconnect, device number 2 [ 159.642138][ T25] usb 5-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 159.652749][ T25] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 159.668254][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 159.678023][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 159.686640][ T25] usb 5-1: SerialNumber: syz [ 159.698677][ T25] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 159.789129][ T29] audit: type=1400 audit(1731653297.921:360): avc: denied { sqpoll } for pid=7121 comm="syz.9.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 159.980835][ T5010] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 160.093501][ T44] usb 5-1: USB disconnect, device number 11 [ 160.172559][ T5010] usb 8-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 160.187901][ T5010] usb 8-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid wMaxPacketSize 0 [ 160.197996][ T5010] usb 8-1: config 0 interface 0 has no altsetting 0 [ 160.299232][ T5010] usb 8-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 160.313644][ T5010] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.341123][ T5010] usb 8-1: Product: syz [ 160.345504][ T5833] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 160.357770][ T5010] usb 8-1: Manufacturer: syz [ 160.366685][ T5010] usb 8-1: SerialNumber: syz [ 160.374777][ T5010] usb 8-1: config 0 descriptor?? [ 160.382352][ T5010] keyspan 8-1:0.0: Keyspan 2 port adapter converter detected [ 160.389894][ T5010] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 7 [ 160.398510][ T5010] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 81 [ 160.406256][ T5010] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 1 [ 160.413974][ T5010] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 2 [ 160.475957][ T5833] usb 10-1: device descriptor read/64, error -71 [ 160.720611][ T5833] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 160.948868][ T5010] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 85 [ 160.957373][ T5010] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 5 [ 160.991555][ T5010] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 161.017316][ T5010] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 83 [ 161.108241][ T5010] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 3 [ 161.120445][ T5010] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 4 [ 161.128062][ T5010] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 86 [ 161.145458][ T5010] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 6 [ 161.168474][ T29] audit: type=1400 audit(1731653299.301:361): avc: denied { accept } for pid=7140 comm="syz.4.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 161.200309][ T5010] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 161.221270][ T7143] FAULT_INJECTION: forcing a failure. [ 161.221270][ T7143] name failslab, interval 1, probability 0, space 0, times 0 [ 161.229619][ T5833] usb 10-1: device descriptor read/64, error -71 [ 161.245576][ T5010] usb 8-1: USB disconnect, device number 2 [ 161.248470][ T7143] CPU: 1 UID: 0 PID: 7143 Comm: syz.7.242 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 161.259818][ T5010] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 161.261956][ T7143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 161.261971][ T7143] Call Trace: [ 161.261978][ T7143] [ 161.261987][ T7143] dump_stack_lvl+0x16c/0x1f0 [ 161.273585][ T5010] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 161.281376][ T7143] should_fail_ex+0x497/0x5b0 [ 161.281410][ T7143] should_failslab+0xc2/0x120 [ 161.285339][ T5010] keyspan 8-1:0.0: device disconnected [ 161.287589][ T7143] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 161.321724][ T7143] ? skb_clone+0x190/0x3f0 [ 161.326140][ T7143] skb_clone+0x190/0x3f0 [ 161.330394][ T7143] netlink_deliver_tap+0xab3/0xd90 [ 161.335497][ T7143] netlink_unicast+0x5e1/0x7f0 [ 161.340248][ T7143] ? __pfx_netlink_unicast+0x10/0x10 [ 161.345532][ T7143] netlink_sendmsg+0x8b8/0xd70 [ 161.350304][ T7143] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.355601][ T7143] ____sys_sendmsg+0xaaf/0xc90 [ 161.360373][ T7143] ? copy_msghdr_from_user+0x10b/0x160 [ 161.365839][ T7143] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.371132][ T7143] ? __pfx___lock_acquire+0x10/0x10 [ 161.376335][ T7143] ___sys_sendmsg+0x135/0x1e0 [ 161.381015][ T7143] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.386222][ T7143] ? lock_acquire+0x2f/0xb0 [ 161.390717][ T7143] ? __fget_files+0x40/0x3f0 [ 161.395315][ T7143] ? fdget+0x176/0x210 [ 161.399385][ T7143] __sys_sendmsg+0x117/0x1f0 [ 161.403981][ T7143] ? __pfx___sys_sendmsg+0x10/0x10 [ 161.409087][ T7143] ? __fget_files+0x244/0x3f0 [ 161.413780][ T7143] do_syscall_64+0xcd/0x250 [ 161.418285][ T7143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.424181][ T7143] RIP: 0033:0x7f58cf57e719 [ 161.428588][ T7143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.448188][ T7143] RSP: 002b:00007f58d02e2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.456597][ T7143] RAX: ffffffffffffffda RBX: 00007f58cf735f80 RCX: 00007f58cf57e719 [ 161.464560][ T7143] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 161.472525][ T7143] RBP: 00007f58d02e2090 R08: 0000000000000000 R09: 0000000000000000 [ 161.480490][ T7143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.488474][ T7143] R13: 0000000000000000 R14: 00007f58cf735f80 R15: 00007fff3a3481d8 [ 161.496453][ T7143] [ 161.499568][ C1] vkms_vblank_simulate: vblank timer overrun [ 161.503245][ T7147] ------------[ cut here ]------------ [ 161.511461][ T7147] platform vkms: [drm] vblank wait timed out on crtc 0 [ 161.519244][ T7147] WARNING: CPU: 0 PID: 7147 at drivers/gpu/drm/drm_vblank.c:1307 drm_wait_one_vblank+0x334/0x550 [ 161.529986][ T7147] Modules linked in: [ 161.534001][ T7147] CPU: 0 UID: 0 PID: 7147 Comm: syz.3.240 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 161.544791][ T7147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 161.555169][ T7147] RIP: 0010:drm_wait_one_vblank+0x334/0x550 [ 161.561289][ T7147] Code: 85 ed 0f 84 54 01 00 00 e8 09 4c 61 fc 4c 89 e7 e8 41 fa 86 00 89 e9 4c 89 ea 48 c7 c7 80 6b e7 8b 48 89 c6 e8 6d 3d 22 fc 90 <0f> 0b 90 90 e9 0d fe ff ff e8 de 4b 61 fc 90 48 8d 7b 08 48 b8 00 [ 161.583521][ T7147] RSP: 0018:ffffc9000346fb28 EFLAGS: 00010286 [ 161.589675][ T7147] RAX: 0000000000000000 RBX: ffff8880256f0000 RCX: ffffc9000e049000 [ 161.597801][ T7147] RDX: 0000000000040000 RSI: ffffffff814e6e86 RDI: 0000000000000001 [ 161.605863][ T7147] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 161.613912][ T7147] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888142f27010 [ 161.622033][ T7147] R13: ffff8880233b0d80 R14: 1ffff9200068df67 R15: 0000000000002448 [ 161.630080][ T7147] FS: 00007fe815b2a6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 161.639559][ T7147] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 161.646301][ T7147] CR2: 00007fe815b09d58 CR3: 0000000053a00000 CR4: 00000000003526f0 [ 161.654410][ T7147] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 161.662469][ T7147] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 161.672780][ T7147] Call Trace: [ 161.676110][ T7147] [ 161.679072][ T7147] ? __warn+0xea/0x3d0 [ 161.683234][ T7147] ? drm_wait_one_vblank+0x334/0x550 [ 161.688582][ T7147] ? report_bug+0x3c0/0x580 [ 161.693173][ T7147] ? handle_bug+0x54/0xa0 [ 161.697575][ T7147] ? exc_invalid_op+0x17/0x50 [ 161.702633][ T7147] ? asm_exc_invalid_op+0x1a/0x20 [ 161.707729][ T7147] ? __warn_printk+0x1a6/0x350 [ 161.712595][ T7147] ? drm_wait_one_vblank+0x334/0x550 [ 161.717963][ T7147] ? drm_wait_one_vblank+0x333/0x550 [ 161.723407][ T7147] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 161.729101][ T7147] ? mark_held_locks+0x9f/0xe0 [ 161.734001][ T7147] ? __pfx_autoremove_wake_function+0x10/0x10 [ 161.740135][ T7147] ? lockdep_hardirqs_on+0x7c/0x110 [ 161.745434][ T7147] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 161.751374][ T7147] ? drm_vblank_get+0x150/0x280 [ 161.756283][ T7147] drm_fb_helper_ioctl+0x156/0x1a0 [ 161.761482][ T7147] ? __pfx_drm_fb_helper_ioctl+0x10/0x10 [ 161.767182][ T7147] do_fb_ioctl+0x3d4/0x7d0 [ 161.773675][ T7147] ? __pfx_do_fb_ioctl+0x10/0x10 [ 161.778683][ T7147] ? do_vfs_ioctl+0x513/0x1990 [ 161.783725][ T7147] ? selinux_file_ioctl+0x180/0x270 [ 161.788990][ T7147] fb_ioctl+0xe5/0x150 [ 161.793194][ T7147] ? __pfx_fb_ioctl+0x10/0x10 [ 161.797920][ T7147] __x64_sys_ioctl+0x18f/0x220 [ 161.802776][ T7147] do_syscall_64+0xcd/0x250 [ 161.807324][ T7147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.813314][ T7147] RIP: 0033:0x7fe814d7e719 [ 161.817794][ T7147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.837530][ T7147] RSP: 002b:00007fe815b2a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 161.846094][ T7147] RAX: ffffffffffffffda RBX: 00007fe814f36130 RCX: 00007fe814d7e719 [ 161.854338][ T7147] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000006 [ 161.862406][ T7147] RBP: 00007fe814df175e R08: 0000000000000000 R09: 0000000000000000 [ 161.870517][ T7147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.880731][ T7147] R13: 0000000000000000 R14: 00007fe814f36130 R15: 00007ffeaaa9db78 [ 161.888804][ T7147] [ 161.891989][ T7147] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 161.899270][ T7147] CPU: 0 UID: 0 PID: 7147 Comm: syz.3.240 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 161.909860][ T7147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 161.919921][ T7147] Call Trace: [ 161.923207][ T7147] [ 161.926136][ T7147] dump_stack_lvl+0x3d/0x1f0 [ 161.930733][ T7147] panic+0x71d/0x800 [ 161.934639][ T7147] ? __pfx_panic+0x10/0x10 [ 161.939063][ T7147] ? show_trace_log_lvl+0x29d/0x3d0 [ 161.944275][ T7147] ? drm_wait_one_vblank+0x334/0x550 [ 161.949568][ T7147] check_panic_on_warn+0xab/0xb0 [ 161.954521][ T7147] __warn+0xf6/0x3d0 [ 161.958424][ T7147] ? drm_wait_one_vblank+0x334/0x550 [ 161.963716][ T7147] report_bug+0x3c0/0x580 [ 161.968048][ T7147] handle_bug+0x54/0xa0 [ 161.972207][ T7147] exc_invalid_op+0x17/0x50 [ 161.976719][ T7147] asm_exc_invalid_op+0x1a/0x20 [ 161.981582][ T7147] RIP: 0010:drm_wait_one_vblank+0x334/0x550 [ 161.987484][ T7147] Code: 85 ed 0f 84 54 01 00 00 e8 09 4c 61 fc 4c 89 e7 e8 41 fa 86 00 89 e9 4c 89 ea 48 c7 c7 80 6b e7 8b 48 89 c6 e8 6d 3d 22 fc 90 <0f> 0b 90 90 e9 0d fe ff ff e8 de 4b 61 fc 90 48 8d 7b 08 48 b8 00 [ 162.007097][ T7147] RSP: 0018:ffffc9000346fb28 EFLAGS: 00010286 [ 162.013169][ T7147] RAX: 0000000000000000 RBX: ffff8880256f0000 RCX: ffffc9000e049000 [ 162.021140][ T7147] RDX: 0000000000040000 RSI: ffffffff814e6e86 RDI: 0000000000000001 [ 162.029107][ T7147] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 162.037074][ T7147] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888142f27010 [ 162.045041][ T7147] R13: ffff8880233b0d80 R14: 1ffff9200068df67 R15: 0000000000002448 [ 162.053024][ T7147] ? __warn_printk+0x1a6/0x350 [ 162.057807][ T7147] ? drm_wait_one_vblank+0x333/0x550 [ 162.063104][ T7147] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 162.068746][ T7147] ? mark_held_locks+0x9f/0xe0 [ 162.073528][ T7147] ? __pfx_autoremove_wake_function+0x10/0x10 [ 162.079609][ T7147] ? lockdep_hardirqs_on+0x7c/0x110 [ 162.084824][ T7147] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 162.090646][ T7147] ? drm_vblank_get+0x150/0x280 [ 162.095512][ T7147] drm_fb_helper_ioctl+0x156/0x1a0 [ 162.100632][ T7147] ? __pfx_drm_fb_helper_ioctl+0x10/0x10 [ 162.106271][ T7147] do_fb_ioctl+0x3d4/0x7d0 [ 162.110692][ T7147] ? __pfx_do_fb_ioctl+0x10/0x10 [ 162.115635][ T7147] ? do_vfs_ioctl+0x513/0x1990 [ 162.120449][ T7147] ? selinux_file_ioctl+0x180/0x270 [ 162.125667][ T7147] fb_ioctl+0xe5/0x150 [ 162.129742][ T7147] ? __pfx_fb_ioctl+0x10/0x10 [ 162.134418][ T7147] __x64_sys_ioctl+0x18f/0x220 [ 162.139194][ T7147] do_syscall_64+0xcd/0x250 [ 162.143703][ T7147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.149605][ T7147] RIP: 0033:0x7fe814d7e719 [ 162.154021][ T7147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.173633][ T7147] RSP: 002b:00007fe815b2a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 162.182057][ T7147] RAX: ffffffffffffffda RBX: 00007fe814f36130 RCX: 00007fe814d7e719 [ 162.190028][ T7147] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000006 [ 162.197997][ T7147] RBP: 00007fe814df175e R08: 0000000000000000 R09: 0000000000000000 [ 162.205967][ T7147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.213939][ T7147] R13: 0000000000000000 R14: 00007fe814f36130 R15: 00007ffeaaa9db78 [ 162.221930][ T7147] [ 162.225171][ T7147] Kernel Offset: disabled [ 162.229574][ T7147] Rebooting in 86400 seconds..