last executing test programs: 3m0.464094159s ago: executing program 1 (id=495): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a090400000000000300000200000044000480140001800c0001006e6f747261636b00040002802c0001800e000100696d6d656469617465000000180002800c00028005000100c400000008000140000000090900010073797a30000000000900020073797a32"], 0xb8}}, 0x0) 3m0.36055799s ago: executing program 1 (id=497): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd7000000000000460"], 0x328}}, 0x84) 3m0.136381363s ago: executing program 0 (id=500): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x34, r2, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_SEQ={0xd, 0xa, "0bb8cf43ff5d27627f"}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000086000000000000000000000000090300"/29], 0x48) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x84) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000005000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000010ac0100000001000000010902240001000000000904000001030000000921ffff0001220500090581"], 0x0) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000dae11c105e048402"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f046bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@can_newroute={0x34, 0x18, 0x1, 0x0, 0x25dfdbfe, {}, [@CGW_CS_XOR={0x8}, @CGW_MOD_AND={0x15, 0x1, {{{}, 0x1, 0x0, 0x0, 0x0, "ee1990a380ecab90"}, 0x5}}]}, 0x34}}, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x121103) socket$nl_generic(0x10, 0x3, 0x10) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) 2m59.887266604s ago: executing program 3 (id=501): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002040)=@newtaction={0xe78, 0x30, 0x25, 0x0, 0x0, {}, [{0xe64, 0x1, [@m_pedit={0xe60, 0x1, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x9f725529ae6b4bf9}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x7000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffc}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4f99}, {}, {0x0, 0x0, 0x0, 0x0, 0x4000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x400000}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {0x1}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x200000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xc}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x101}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe78}}, 0x0) 2m59.80357228s ago: executing program 3 (id=503): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f00000000c0)={0x40062}) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x18, 0x52, 0x1, 0x0, 0x4, {0xa}, [@typed={0x4, 0x2}]}, 0x18}}, 0x10) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@updsa={0x13c, 0x1a, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@empty}, {@in=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00', {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) ioctl$SG_GET_PACK_ID(r2, 0x2287, &(0x7f0000000000)) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000000c40)=ANY=[@ANYBLOB="14100000040000000400000007000000f30400"/28, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="020000000100"/28], 0x48) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b40)={0x50040, 0x108, 0x20}, 0x18) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000bc0), 0x50000, 0x0) mount_setattr(r6, &(0x7f0000000b80)='./file1\x00', 0x9100, &(0x7f0000000c00)={0x10008b, 0x19, 0xb0000, {r7}}, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x9, &(0x7f0000000000)=ANY=[@ANYBLOB="1804000020756c2f4429172500002020207b1af8ff00000000bfa100000000000007010000f8ffaa6db702000008000000b70300000000000085000000b800000095000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000000)={@private2, 0x0, r11}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="6c0000001000390400"/20, @ANYRES32=r11, @ANYBLOB="01"], 0x6c}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) r12 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r12, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) 2m59.316859799s ago: executing program 1 (id=504): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x3d}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) 2m59.168042534s ago: executing program 3 (id=505): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x3, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x30, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x200, 0x0, 0x0, {[@mss={0x2, 0x4, 0xa005}]}}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x3, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x30, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x200, 0x0, 0x0, {[@mss={0x2, 0x4, 0xa005}]}}}}}}}, 0x0) (async) 2m59.019875714s ago: executing program 1 (id=506): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c000000100001080000000200000000000000ff", @ANYRES32=r3, @ANYBLOB="0b000000000000001c002b80180002"], 0x3c}}, 0x0) 2m58.680509926s ago: executing program 3 (id=507): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0x3) eventfd(0x8) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000007c0)=@broute={'broute\x00', 0x20, 0x4, 0xfffffffffffffcce, [0x0, 0x711fcd04, 0xfffffffffffffffd, 0x0, 0x8000000000000000, 0x200000200300], 0x0, 0x0, &(0x7f0000019240)=ANY=[@ANYRES8=r0]}, 0x79) 2m58.622451186s ago: executing program 1 (id=508): syz_open_dev$sndctrl(0x0, 0x20000, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0xffcf, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2m58.235595487s ago: executing program 3 (id=510): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x6c}, @exit], &(0x7f00000001c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001f00010029bd7000fedbdf25fc000000000000000000000000000001000004d2020032000a0101020000000000000000000000001b090000000000800c0015"], 0x4c}, 0x1, 0x0, 0x0, 0x8800}, 0xc8) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001f00010029bd7000fedbdf25fc000000000000000000000000000001000004d2020032000a0101020000000000000000000000001b090000000000800c0015"], 0x4c}, 0x1, 0x0, 0x0, 0x8800}, 0xc8) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x6000) (async) ioprio_set$pid(0x2, 0x0, 0x6000) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000004c0)) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000004c0)) close(r4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4080}, 0x4008000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x90009427, &(0x7f0000000000)) (async) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x90009427, &(0x7f0000000000)) timerfd_gettime(0xffffffffffffffff, &(0x7f00000001c0)) (async) timerfd_gettime(0xffffffffffffffff, &(0x7f00000001c0)) sendfile(r5, r5, 0x0, 0x200000) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @remote, 0xb}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x100004, "628e0960f6d6d3f6ee6d6b84b345dccac643e7df3e526ff07833b291322d4a74", "882ed6741e7632daeaec0c95f2ad1cd6", {"8fb3d9fd3efe8e4ea8b5ec7448ddd6a3", "215990e1b896120966af96b22cf049f0"}}}}}}}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x7e, 0x8, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback={0x0, 0xffff888101827518}, 0x20, 0x8000, 0x5, 0xffffffff}}) 2m56.686943627s ago: executing program 0 (id=512): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = userfaultfd(0x3) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d05, 0x0, 0x9}]}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2m55.596541893s ago: executing program 1 (id=513): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rseq(&(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x1000, 0x100000001, 0x43c6}, 0x4}, 0x20, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f00000003c0)={0x0, 0x3}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) unlink(&(0x7f0000000000)='./file0\x00') bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="4000000010001fff000000000000070000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a005124deacb12e68d5b042fd94802e899d13e0374769b03ac3273b6ab1188023b587e473253682146a9f24b52e89b42d3c836c1702078fbba099e45a9ddb039922f65e59"], 0x40}}, 0x0) 2m55.479653302s ago: executing program 3 (id=514): syz_open_dev$vim2m(&(0x7f0000000000), 0x52cd, 0x2) r0 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x80380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000001200)=ANY=[@ANYBLOB="02180000180000000000000000000000030005000000000002000000e000000200000000000000000800120000000000000000000000000006000000000000000000000000000000ff010000000000000000000000000001fe8000000000000000000000000000aa030006003200000002000000ffffffff0000000000000000080019"], 0xc0}}, 0x0) 2m54.576713661s ago: executing program 0 (id=516): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x3d}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) 2m53.533071558s ago: executing program 0 (id=518): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79040000000000000000010000001400090000000000000601000000ffff0300000006000a004e210000050002000a"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) 2m52.339776869s ago: executing program 0 (id=520): syz_emit_ethernet(0x32, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000002400670000082190780a010101e00000014e224e2004c190784aee3686080c871a0000000000"], 0x0) socket$netlink(0x10, 0x3, 0x1) 2m52.20396535s ago: executing program 0 (id=521): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000300", @ANYRES32=0x0, @ANYBLOB="0000be281f000000200012800b00010067656e65766500001000028004000e0005000a"], 0x40}}, 0x0) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r3 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r3, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0xffffffffffffffff, r1) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r1) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000180), 0x10) 2m39.792424766s ago: executing program 32 (id=513): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rseq(&(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x1000, 0x100000001, 0x43c6}, 0x4}, 0x20, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f00000003c0)={0x0, 0x3}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) unlink(&(0x7f0000000000)='./file0\x00') bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="4000000010001fff000000000000070000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a005124deacb12e68d5b042fd94802e899d13e0374769b03ac3273b6ab1188023b587e473253682146a9f24b52e89b42d3c836c1702078fbba099e45a9ddb039922f65e59"], 0x40}}, 0x0) 2m39.71597359s ago: executing program 33 (id=514): syz_open_dev$vim2m(&(0x7f0000000000), 0x52cd, 0x2) r0 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x80380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000001200)=ANY=[@ANYBLOB="02180000180000000000000000000000030005000000000002000000e000000200000000000000000800120000000000000000000000000006000000000000000000000000000000ff010000000000000000000000000001fe8000000000000000000000000000aa030006003200000002000000ffffffff0000000000000000080019"], 0xc0}}, 0x0) 2m35.387669826s ago: executing program 34 (id=521): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000300", @ANYRES32=0x0, @ANYBLOB="0000be281f000000200012800b00010067656e65766500001000028004000e0005000a"], 0x40}}, 0x0) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r3 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r3, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0xffffffffffffffff, r1) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r1) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000180), 0x10) 1m19.615899861s ago: executing program 6 (id=690): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000300790001001dbd70f7fbdbdf25feffff2704001d00"], 0x18}}, 0x4040000) r1 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r1, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x90, 0x30, 0x1, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x34, 0x1, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0xfff}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f00000006c0)=0x1008009) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x7f, 0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000380)={0x39f093914a76bd9b, 0x78, 0x0, 0x400, 0xfffffffc, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x10000, 0x1ff, 0x3d, 0x5, 0xb, 0x56, 0x202, 0x1, 0xa}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff79, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[], 0x24}}, 0x0) 1m16.985534199s ago: executing program 6 (id=700): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rseq(&(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x1000, 0x100000001, 0x43c6}, 0x4}, 0x20, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f00000003c0)={0x0, 0x3}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) unlink(&(0x7f0000000000)='./file0\x00') bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="4000000010001fff000000000000100000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a005124deacb12e68d5b042fd94802e899d13e0374769b03ac3273b6ab1188023b587e473253682146a9f24b52e89b42d3c836c1702078fbba099e45a9ddb039922f65e59"], 0x40}}, 0x0) 1m11.243160183s ago: executing program 6 (id=718): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mknod$loop(0x0, 0x2000, 0x1) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2}, 0x18) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0xfffffffffffffffa}) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2000, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./control\x00') 1m9.759970359s ago: executing program 6 (id=721): socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05020000000000000000120000001800018014000200626f6e645f736c6176655f31000000000800080004000000"], 0x34}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$qrtr(0x2a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x560, @void, @value}, 0x94) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) (async) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) (async) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f00000009c0)={r6, 0x7fff}, 0x8) ptrace$PTRACE_SETSIGMASK(0x420b, r3, 0xfffffffffffffcf4, &(0x7f0000000000)={[0xbb88]}) (async) ptrace$PTRACE_SETSIGMASK(0x420b, r3, 0xfffffffffffffcf4, &(0x7f0000000000)={[0xbb88]}) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) socket$can_j1939(0x1d, 0x2, 0x7) (async) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) connect$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x0, {0x0, 0x0, 0x1}, 0xfe}, 0x18) (async) connect$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x0, {0x0, 0x0, 0x1}, 0xfe}, 0x18) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) socket$can_j1939(0x1d, 0x2, 0x7) (async) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000340)={0x1d, r10, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) (async) bind$can_j1939(r9, &(0x7f0000000340)={0x1d, r10, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) 1m7.676895924s ago: executing program 6 (id=729): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r1, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r3], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000640)={0x0, 0x7, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011005704000000000000000005000000", @ANYRES32=r5], 0x20}}, 0x0) 1m7.26055629s ago: executing program 6 (id=732): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) lseek(r4, 0x0, 0x4) sendmsg$nl_route(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipv6_getanyicast={0x14, 0x3e, 0x8, 0x70bd2a, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x41004) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x34008, &(0x7f0000000ec0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_client}, {@cache_loose}, {@uname={'uname', 0x3d, '--*\'(\\,\\})-'}}, {@afid={'afid', 0x3d, 0x4}}, {}, {@version_L}], [{@pcr={'pcr', 0x3d, 0x9}}]}}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x1f) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xda, &(0x7f0000000e00)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0088a800008100000086dd600b336c009c110000000000000000000000000000000000ff020000000000005a0000000000000100004e220247c46f131f0d726114cf660b3b84e2090000008f05ad6c1a7bb6972a31dfb96197f0bb1adfee8f574187e76b988c478c09ef0426ed085a0aaf0a6c3da1f830797028f2270b81a2b5937295ab0856de052397201fef99274087163e93483486d74757235b"], 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB="01000100ffffffffff4a"]) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f00000003c0)='veth1\x00', 0x3c) r11 = msgget(0x2, 0x3a8) msgrcv(r11, 0x0, 0x0, 0x3, 0x1000) msgrcv(r11, 0x0, 0x0, 0x3, 0x0) msgctl$IPC_RMID(r11, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 1m6.940961267s ago: executing program 35 (id=732): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) lseek(r4, 0x0, 0x4) sendmsg$nl_route(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipv6_getanyicast={0x14, 0x3e, 0x8, 0x70bd2a, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x41004) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x34008, &(0x7f0000000ec0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_client}, {@cache_loose}, {@uname={'uname', 0x3d, '--*\'(\\,\\})-'}}, {@afid={'afid', 0x3d, 0x4}}, {}, {@version_L}], [{@pcr={'pcr', 0x3d, 0x9}}]}}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x1f) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xda, &(0x7f0000000e00)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0088a800008100000086dd600b336c009c110000000000000000000000000000000000ff020000000000005a0000000000000100004e220247c46f131f0d726114cf660b3b84e2090000008f05ad6c1a7bb6972a31dfb96197f0bb1adfee8f574187e76b988c478c09ef0426ed085a0aaf0a6c3da1f830797028f2270b81a2b5937295ab0856de052397201fef99274087163e93483486d74757235b"], 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB="01000100ffffffffff4a"]) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f00000003c0)='veth1\x00', 0x3c) r11 = msgget(0x2, 0x3a8) msgrcv(r11, 0x0, 0x0, 0x3, 0x1000) msgrcv(r11, 0x0, 0x0, 0x3, 0x0) msgctl$IPC_RMID(r11, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 49.780172593s ago: executing program 2 (id=786): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe1000/0x18000)=nil, 0x0, 0x0, 0x34, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x7fffffffffffffff, 0x125000) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000580)={{0x7, 0x3, 0x10003, 0x200}, 0x0, 0x400, 0x20002, r0, 0x1, 0x4, 'syz0\x00', &(0x7f00000001c0)=['\n{%\x00'], 0x4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r5 = dup(r4) ioctl$PTP_PEROUT_REQUEST2(r5, 0x40383d0c, &(0x7f0000000280)={{0x898, 0x90}, {0xeb4, 0x673ec22f}, 0x1001, 0x5}) r6 = socket$inet6(0xa, 0x5, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0xd) socket$inet_mptcp(0x2, 0x1, 0x106) write$binfmt_aout(r7, &(0x7f0000000000)=ANY=[], 0xff2e) setsockopt$inet6_int(r6, 0x29, 0x50, &(0x7f0000000180)=0x1, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000002180)}, 0x20008000) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r8, 0xc) setsockopt$sock_timeval(r8, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10) accept(r8, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0x2, 0x0, 0x0) 48.835310642s ago: executing program 2 (id=788): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x13, 0x0, 0x0, 0x0, 0x649, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000000)={0x0, 0x7734, 0x80, 0x0, 0x377}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x0, 0xb03, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20040880) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x10, 0x803, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f0000000100)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="099e90f271051a138c5cab9ed090b795c5d3f21e2e23cf58ee47", 0x1a}, {&(0x7f00000003c0)="b0ac782f4bfe382b1e2e819ee769a997e92ea79ece80959e0c2e0a64df2651d4102257418b9076e7f470b28a1805a3faefc59a4c2f9a71ccfdabe167db37940055b645c411724fe3fd021ddd7fefa987ef895a06c304a8748aa4535f7c1793a3403692b4d670ea80b67ebf581b16c1fc663d3f1832e6e52a3a86c033ae05289db5f31827f90e06b6ba526741ec19568e0bb53d40cde36f6064d827533137", 0x9e}, {&(0x7f00000001c0)="1cf09600fc55c19d5854cdb34ee8da8fb17b4a", 0x13}, {&(0x7f0000000300)="d76c89be2c8f8026fe0de9e38ca14aae51b56f94596aa42269df9def819fcc8e48e63ece8d2a0c897c1d4df7c11d787a", 0x30}], 0x4, &(0x7f0000000480)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_retopts={{0x44, 0x0, 0x7, {[@generic={0x88, 0x3, 'Q'}, @noop, @ssrr={0x89, 0xf, 0xbd, [@remote, @local, @remote]}, @generic={0x88, 0x8, "c7e63c0cf332"}, @cipso={0x86, 0x17, 0x0, [{0x5, 0x8, "7de23d934e0d"}, {0x1, 0x9, "ee1c8c5a2df29d"}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_retopts={{0x50, 0x0, 0x7, {[@end, @cipso={0x86, 0x32, 0xffffffffffffffff, [{0x5, 0x10, "0341cf3a19058eb25af5231eccbf"}, {0x5, 0x2}, {0x2, 0x5, "64dcbe"}, {0x7, 0xe, "4646f5db7f5bb390846cfa88"}, {0x2, 0x7, "72fb98d786"}]}, @timestamp_addr={0x44, 0xc, 0x6, 0x1, 0x0, [{@empty, 0xffc00}]}]}}}, @ip_retopts={{0x150, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x7, [@broadcast]}, @ssrr={0x89, 0x1b, 0x10, [@local, @private=0xa010101, @multicast1, @multicast2, @private=0xa010101, @remote]}, @timestamp_prespec={0x44, 0x2c, 0x26, 0x3, 0x9, [{@multicast1, 0x7f}, {@multicast1, 0x6}, {@remote, 0x2}, {@empty, 0x7}, {@multicast1, 0x4}]}, @generic={0x7, 0x6, "f79dbacf"}, @cipso={0x86, 0x54, 0x0, [{0x1, 0x5, "3ae808"}, {0x1, 0x2}, {0x1, 0x9, "986921b8a9c897"}, {0x1, 0x11, "4b21c1c8070e082bef713ef5045476"}, {0x1, 0x2}, {0x2, 0x5, "59a605"}, {0x2, 0x5, "2cdf87"}, {0x7, 0xf, "beafc88fa9b096a61b2fa46d89"}, {0x0, 0x12, "1fb2821840f4fc8bbaedf1aa978e878a"}]}, @cipso={0x86, 0x1a, 0x1, [{0x6, 0x5, "10846b"}, {0x1, 0x4, "dd03"}, {0x1, 0xb, "7d8e9d3599e9e72822"}]}, @ssrr={0x89, 0x27, 0x7d, [@remote, @multicast2, @loopback, @private=0xa010101, @broadcast, @multicast2, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x18}, @empty]}, @timestamp={0x44, 0x20, 0x7d, 0x0, 0x2, [0x4, 0x3, 0x5, 0x4, 0x801, 0x0, 0x0]}, @generic={0x88, 0x8, "1a069a6ddb20"}, @timestamp_addr={0x44, 0x2c, 0xc5, 0x1, 0x1, [{@multicast2, 0xeb}, {@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffb}, {@multicast1, 0x8000}, {@multicast2, 0xad}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}], 0x278}}, {{&(0x7f0000000740)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000840), 0x0, &(0x7f0000000880)=[@ip_tos_int={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0x30}}, {{&(0x7f00000008c0)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000980)}], 0x1, &(0x7f0000000a40)=[@ip_retopts={{0x50, 0x0, 0x7, {[@generic={0x44, 0xc, "98c913f3f4eb969d9e31"}, @rr={0x7, 0x3, 0xfb}, @end, @rr={0x7, 0x17, 0xfb, [@empty, @multicast1, @multicast2, @multicast1, @remote]}, @rr={0x7, 0x3, 0xa}, @timestamp_prespec={0x44, 0x14, 0xb0, 0x3, 0xb, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9a}, {@remote, 0xff}]}]}}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@end, @noop, @noop, @generic={0x86, 0x10, "474da9d0c98c11ac480a9cd86373"}, @timestamp_prespec={0x44, 0x14, 0x80, 0x3, 0x7, [{@multicast2, 0x91}, {@multicast1, 0x8}]}, @lsrr={0x83, 0xb, 0x9d, [@loopback, @rand_addr=0x64010100]}, @lsrr={0x83, 0x3, 0x55}, @ra={0x94, 0x4, 0x1}]}}}], 0xa0}}], 0x3, 0x20000008) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newlink={0x40, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL={0x8, 0x7, @broadcast}]}}}]}, 0x40}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_destroy(0x0) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 48.134602094s ago: executing program 2 (id=790): r0 = syz_open_dev$video4linux(&(0x7f0000000280), 0x10004, 0x8000) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x80f0f000, 0x101, "9a555c14e123ff7fa85e8e47a0cba3a37f00", 0x0, 0x7ffffffffffffffb, 0x100000, 0x3, 0xe7ffffff, 0x4, 0x3, 0x0, [0x0, 0x0, 0x1001]}) 48.004664459s ago: executing program 2 (id=791): clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000001c0)={0x6, 0xfffffffffffff6dd, 0x28e, 0x4, 0x100000001, 0x1780, 0x5, 0x200}, &(0x7f0000000280)={0x4, 0x5a0f, 0x5b550004, 0x5, 0x1ff, 0xc71e, 0x6, 0x101}, &(0x7f0000000340)={0x8, 0xc01, 0x0, 0x2, 0x8, 0xd, 0x48, 0x4}, &(0x7f00000003c0)={r0, r1+10000000}, &(0x7f00000004c0)={&(0x7f0000000400)={[0x8]}, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000006112c40001000000c700000000000000dccb488fd2e5e5370e0e2448212d45ab66c73973e7e5070000000000000023e7472591c420"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace(0x10, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) prlimit64(0xffffffffffffffff, 0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x3) connect$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet(r2, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) pipe(&(0x7f00000001c0)) 47.607349426s ago: executing program 2 (id=793): r0 = socket$inet6(0x10, 0x3, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) open$dir(0x0, 0x1, 0x0) (async) r5 = socket(0xa, 0x1, 0x0) ioctl(r5, 0x8936, &(0x7f0000000000)) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x2b8}, 0x1, 0x0, 0x0, 0x48800}, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r10 = fanotify_init(0x200, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) fanotify_mark(r10, 0x1, 0x4800003e, r9, 0x0) dup2(r10, r9) (async) syz_open_procfs$userns(r6, &(0x7f0000000100)) 47.388020103s ago: executing program 2 (id=795): read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000002f40)=[{{&(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000480)="ef48c4f10b0ea5573808512520204d2641d50bc2b43d8f3f62f3e1c1f170f21ed699577e219f8342d6d573b01688d1c5d74ec04e6145889db5b7259e380ab8b25ead9e80efca2efb680d4a", 0x4b}], 0x1, &(0x7f0000003040)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32, @ANYBLOB="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", @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32, @ANYRES32=r3, @ANYBLOB="00c40000d32cc6ba000000040100000001f20000", @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x98, 0x240000d0}}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002740)="eafc251ca394be6347974ff541523e9543b28b8a88297e2fb8ffff7fabbe8982640ec92bfb87406ec656649b473f70eada97ba96655b60f92592cd7fca8938c870b5867320e6ec9238eacae0706e301e743c9e93b539007aefc95d719f39aa337094963bb2adb31819a3f0b8bd2fd5f9c39d7313cfe053bbc6fe35db70d487f94c4732e1258a93c44f0b9f01b139abed5743cd4db455ce1bd4f123d187eb6742e7104896d3b95711142e9b9d9bc38a31448f20e9577e557d7978f51d57caebbcfdc7a3d31a6a9a5603df33ab19dd366c252711e2dfb7559a1b6574e6c5f0895ad15eee4523b52684e59cc7", 0xeb}, {&(0x7f0000002840)="6b6866fdef32e4e4825e616a3084c8a3f59e16ac269ff9ead9d6fe086edf5338ca4fe3b435890ca7cc5acd202545373606cd801615e6c5e0abfa108f3a618d6529791c50b0d358379f2b5598d282ea00854d6ee81e816ffc13e6e2c601d961b07f0019e8192c8ca175843cef5b9a43cf598ea9199733643724e8aefb9c9a9b072f80f6f3a467f4e013dffb2b4de5de02efa92a28111ac21ce39e082fd97f5bae101fa93bda3eaa28d8062088b67cd0dc5306749b9cfc719cb5f1ad9364e0379422d71b5a8f32b2beda6ebc71e2449ed8e937", 0xd2}, {&(0x7f0000002940)="11fcd6067d8cf5f12da38739e3c1fa3a28ab15f4c446dea9f515ddc4ff30e7dcffd687b151687049d67d7a89545ba76f7d753f6fa9ca7abb2961ad0bc69b660c4ed8e4", 0x43}, {&(0x7f00000029c0)="cc8a2890d89bb5ad4f2b20a9d9c50f58124ab8225e12b5fbb3d0691534f5bbdf63b19c45cadb45257c", 0x29}, {&(0x7f0000002a00)="3f43bd35", 0x4}, {&(0x7f0000002a40)="517dade3bbe56c02fe82f776990fbb53dea3f648f5be1d6b2f3a9355879ebc981f579b6afc3f05bcc14b05bd1b8be59dec82649d4034a41f5ce367dce8ae7b4858248a938fc01e9fee344fd9355fc695fe276e4241e5be777622150931d5afa309947781d530affb2497bb11f0eb6826eb01fbc842122f52367116a4ba0a1ae2c8926cb19542df65d7f411ac2aa07473d1add577a313f15091cc7bc1d162022a81862bf3db60b33ed944cfe6df5b2fc1cb1c43fe349055a5a385428c42d1c2c5bd7164a43e4337cc5184d7661857ececde5056bc50640000", 0xd8}], 0x6}}, {{&(0x7f0000002bc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002cc0)=[{&(0x7f0000002c40)="9659cb38dc0c96af216ace11205449768dcf24aca313c2d1622bc3285afd11a1aabde513e1aa1750e681e059e0c99383f6d4420df41b5e16560810915ef57d10d0e9a77f1f32c811648ea5d2dd41d11cd3f350e5b4561b690008dd776c220f09ae829d", 0x63}], 0x1, &(0x7f0000002e40)=[@cred={{0x1c, 0x1, 0x2, {r2, r0}}}], 0x20, 0x10}}, {{0x0, 0x0, &(0x7f0000002e80), 0x0, &(0x7f0000002d00)=ANY=[@ANYBLOB="18000000000000000100004200010000005b82a2dc07cb289a8b8e4c0d22e46c565e8f29768414afe08d9dd5fd54e9966abd6a48428af0748658b954679911a15551cc51a44fe92391d9897839050300000000000000248d2785f39fc01ccf1fa6875dc8da7978f10f3e85c7ce84b353c80d124b8a1d3fc4a8cbf2a9a9abf18a4ae85afab0793f113dfb96e4141e5fb3214e14412caa062a991d01079a71deee1d2c731312f0de3edd34a48c55ba35e0c9aa52ee12cfd7f0f3aa4427235161dfeb6cd2a9d2e091a964dcf313fc8a835bb62b05542525af4aaf157415fd6fe3503f805544b1a945e5160b6639c1fba72125710c7e", @ANYRES32, @ANYRES32=r3, @ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYRES32], 0x38, 0x20008001}}], 0x4, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) syz_open_dev$radio(&(0x7f0000000380), 0x2, 0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, 0x0, 0x0) r6 = syz_io_uring_setup(0x10b, &(0x7f0000000580)={0x0, 0xf946, 0x80, 0x5, 0x1002}, &(0x7f0000000040), &(0x7f00000001c0)) r7 = eventfd2(0x58, 0x80000) io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000000000)=r7, 0x1) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0xfff1, 0xa}, {0xffed, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x5, '\x00', 0x0, 0x3, 0x9, 0x9}}}}]}, 0x48}}, 0x20044080) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xb}, {0x0, 0xa}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xc}}]}, 0x38}}, 0x4000) io_uring_enter(r6, 0x3516, 0x3e44, 0x8, 0x0, 0x0) r11 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r11, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0xc990, 0x3, 0x0, 0x0, 0xc07}}, 0x11c) readv(r11, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) 33.380721974s ago: executing program 7 (id=835): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpriority(0xcbe307a3ef027d9b, 0x0) socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x20, 0x12e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 33.062451325s ago: executing program 7 (id=836): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffffd8) socket$nl_netfilter(0x10, 0x3, 0xc) io_submit(0x0, 0x0, &(0x7f0000000180)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vim2m(&(0x7f0000000140), 0x800000001005, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERROR(r6, &(0x7f0000000240)={0xe, 0x7, 0x1, {0x5, '\xaa\xaa\xaa\xaa\xaa'}}, 0xe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010010000000ffdbdf2530000000", @ANYRES32=r8, @ANYBLOB="20000000000000001c0012800b0001006d616373656300000c00028005000f"], 0x3c}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) unshare(0x68060200) 32.137738894s ago: executing program 7 (id=837): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a090400000000000002000200000044000480140001800c0001006e6f747261636b00040002802c0001800e000100696d6d656469617465000000180002800c00028005000100c400000008000140000000090900010073797a30000000000900020073797a32"], 0xb8}}, 0x0) 32.093944176s ago: executing program 36 (id=795): read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000002f40)=[{{&(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000480)="ef48c4f10b0ea5573808512520204d2641d50bc2b43d8f3f62f3e1c1f170f21ed699577e219f8342d6d573b01688d1c5d74ec04e6145889db5b7259e380ab8b25ead9e80efca2efb680d4a", 0x4b}], 0x1, &(0x7f0000003040)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32, @ANYBLOB="50d24f952b0dac6481462468f0dbddec47e602186fb3bf6063cdff64e1a936c76eb7c84bfc0784e55347a0e10ee414319ad348aec0d52c4e7b81cf9fff8e853f2e888b3018fe8109347fdd96779d653bb6c0f40d2035428544a70cad147fe9d74869047cc5eae624d79a0a06c7c9ad7e9dbe70b316b63315b85b741d536f214648bcbeb48e1e73f68bba681f7b921fd30c04804b488afce86adb6c9f6ca57ccbad06e5dd736968e7c83d771d69abc1f1a523e8cf6d986a1b470f72283c63737c5f7492541aa3b733da32aa371ce962fd7af8977673a7d7c9a353fa649de417bfdd76f6f35f4e48f9040316669f7f2fd018037d08845c8a8b072cf4d5d226f49c589762224c6df4c57519052ff47bd77add85b7d407a6a18758742e962bc56f8f912cddf5a3d71b7555e6aca623ffcc7e023575b7f734bdd1c9a09a18e14cb9f48f8a8fc7ca9a80a2e3617cc51b7663eb66c833b29f4818f9bf75c9b4e39af5bced8170dd4b61cd247c700afb598f3ef18b789115ffe0220119e3b2f53db0cc9c3a5beb67273a85caf6daf67db8310808da003d7add01733cfe9a77ff4f05dcc547d9ad98ca839466c08bfd0abe4f3a59c2f697f7ad6dc1dfdad5caccf84dd0b2d836c79247339a6a93366fdbe5613e2ea876fc4c16052d94ab4efdb1782ca5a515e03a3934894ce40d9640413658ba21185dfdd2aa44eaabb1264a2bde8b40b307576ea49dd918c105ecdd9d164e9bdb418d49701595c345d7d1a0b98f2853492d2d59967fdf0c5318dd86990efc20a1bdd24149fc1aa9a5c6d684c616fb982f82185785c102f7c58ff82195ddc3f7931d18ba803df2f599b79d8e1bd5f7b9b4bdb55d5fbf4bac9a3fe4deb98fc0873da3ef9ae0900ac231f27bd4eba58f57ada854c38e1d84c57649bac4c1da51e1666f8209ab3d5488014cc579f50c3d703691653055785e0ba8bbdb30ef9cb54192853be6cecd0c08d90dcd38118aa72782c2c6725de294919979e4dc9195a6cc6d7048e9de487b4852c60754c24b07a886ea672b8b6a89fbb84e146d794398ffb2a9962b83c33172b6c07a36ade6b3246827fd3a713b132bb2e82844b3d79f7de5d7ef26db3d07f460d1771419008acafb4fd3e26313cdc99d778109bca3f226ce42c4a4cd3e57a9b0a71241247d25bbfe17b3c6a1984413ada8dd3d244646ccb1330021dce14c8dfef284cdf4bcd25f502b7f3b07ee31b86ab3bccc8296ad7296397589650661d3050f6d7a097eff4f186980e53db8ac8018179e21f7ea710e5ae21d0bbbc3db558f17e3d2a60d944671f1fe49d346bef66c62c88b956c6f28d7ffc417cf9d9157cb1d8490138992722e14f61831309b31844918c892a1c999b2fb54dc723d0496aa7c2cda1a42624206c85caf1118cd453e2dbc850df3530f828627e1088cdec6fa53c614bd7e205d478b562ef60658973242bd85f4fc200de65fbff5e8defdf20688b3f53d01a751551b9e826e0ed87187974053fa7b3eb873714c20f868416175ec743281e948973bae7dfed9578a3bb647e853787c3846d35b158671e583efc4d4f2081baf86f9d308a1a4beb5fa0d92eacf21e44357ada1de74f0509db1778f3c53765cabeaf79fc4930c094513b4ebe2960788059fa10debabcae157615146ef9b6538f383a190733aa3cdbdbaa0e5883879b06a05276489ac7f87c63b57ad09f0e4608d2523e68c5d23d71b492c97affb3d20d410cf151eaed7a93cf2cc24001e036e21f8774107bfe3f9f6037bdf6441edb46c24c9b289d207ec65a0cf9204a6b1914a648aa0e7b77d5a67978681d583b5b073c0b2e2827125fc020f31a5ff7bcf0f9b24a3d0add21cd77c70976bea65448be3cd15c29d057ccae9572a388feb029e0123c5a3da9dd78b8264faaf895aed7619e9fa40d1da00c10ac941fc317e953a2ca1a16ed19586c2841136d8ec18a6e0bb2c6bd1c32e7de1c5aa5bde0affe8226f0d52fd74c0d7041e664fee114510194ed1b83a6468604a60eec45bfe23ba85adc09db8c1b14c62266a0efa242cbfab7fbf34d490941684194ab9926a552d3682ca5652e3c5b36eb97ea60a6ad6737b0effbb5d5c15c32938ee4f3b052905bc202429399503ec8f55bc0be4c22216eedf3052595f137ba6d54c9392c337e8fb49b295bab1d3a54eaa5c0c315a8f3c1e01733b8a64ff871aebbf62a30666963f43e5eec7d99aa3559834947bbdc80d70d935d69e2489445adc131b1398c58087ed25d4dd1e4d1695982f9558f415f8f6f211a54ccbbba66369495e4d769d176c967630859700d1071aa2fc83b9b672925a3a88002dc77e64bf7617bf8be255a7870d828670459d8bba3732f21f5dfa64612781c44995b940457fdb3b6344c7f961e60d67b76242b8d49ca50b43529c37bdf494f8cd472332e6152ee3ed2c476f3179933c763452cc7f27dda4628b3a708d2f6b35c6d3165020300ee35de0321e65069f80f1681f093decda31d10cb10a5bc13114e460e543f0a703fa80275b0a7280c0c59402e0386175321bcb3de8520170161f67305a6c89020a16223ff0c9432559c8e788d6a2641757119f43876b4f13fa0c76b044df486558949ac1362f695076de5e07833b5e57f280558579ecabb7d85eb0263a7c3567c199ffa6a7435a7db18d0348150efbefca34d02b4e8a2c4959b2f6bcfcd3164b48fcff89c60eb6fe0a36d24a9ffbd457e20224d06d38759ccf1f8ced0f86e3e56fc2de21fcfc8726cb5b6220203ca4402f649650bae0e35c27df42b8234d811698d789d98cc9d85f62658e5409a7441cee1bfc930c029c9d4a566bf3161877da06e7a44baea97ee02de0f59ed734b76f1e1f296df981f01e4003e952b37ff80148d8558c915ecbf87af2c631c30baeffa127263fd3dacaa655505aab87f9831a089c70f9736a1c57c3fae41a9f14ea300c74ec95bafec9ff83b5deabb20f91b3535c3aa4ffa88f794c9010623f999c53491bb7b1b0165fbba9d6f1d9ae5888f1eab6b73e81c29e407289315574e5d942981c293bc4a9b69608168c8a6301cd5d92d09b676b92701b10324d9a129508aac705c40cf99f438d9d2ebf17a57b0eef6b7ac7a4585b5e4a7aee6da282a8b5783d63d8d717ef0d2c72961708848985038da502aebd505713e1bfe013bf3def7d99528dfc6ce703615f902d0db9c91e5cdb7afe513a940f1e24ba9b087fd04fa9cd25459faf0fd1ffa57675afdf1db392ab8163f0675b68fe85f7652b0a881c9e0c8b2bf1c34f5360f1483ae963a920dde38e546eaf04535de3cb85ad77072161bf6b28ab6a019a888c8acefa6bbf44f9146a551fb41f05697f741efdb4effb6ce52569ecaf5b6ac08d30f0f5a530419f4dc94312bb22971f813ed9d1120fcebb0cb5f49f918233b55fd9ba8bc2fee7e358ba5b190407ce105ff09f632dc719246f311422d2bba56a2886e392795afa603f61c7fb3c62efba6bfb36435304d3016fc0004190031236a82a14a71fb80f76123c097f1a726dbfb976de2c167f7850375ed15139ea9ab1c6d87cdce7d589377999db530b23e50d9732dbcc088d20015f004b6b8ab031df3eb0a8ab8f62b6bf6cab46429b36369c5b079795ec845de3f742d21dd14ab790dec8af89788b9eb4759665b7ba9bafb6c6809d4391a8c50ff8df2261714ba19db34fbf9cc5efe2274963b6d755e8e1c7688229a62e222e63183dd84ea1a53d456c68c7d17dacf043453ab1fa4b7b54e5b35361b400542fe3c7730916ec86c9ec70dbea61cb9529d7587dae670aaedaf7b044f4599fad2ff45845501518ce0652c63d9b5172bf7b6c81aad614cb6234f1fb38e9222b15ad437bf61378129b1e99915cd4e49cdcf5beb827fe81042f4484c0d980898df8faa8933b77cd28d10975d64600422de4dd0b21d3c63ce3a905aae314728e72ef80513d3ea5d5f34eb0833c57498148177d8b7c26a4a3c6e9faabcdab522a5344dbf32344835e32a963a933720f1b1e7287eb88faf0906e285e994fbedb6fc7670938070393d19fbefd0e46f38d560daf04a089f6315cf5816ac5584f583e6d1598af4d8e0265e626e8863edd3208c4e2b5dae57c2d40aa09a3c33cd294d15a994bfdcf702c744a9edb452ded3cc55d213112711be2b81a3fe3adb8f6896268ecf7e94280291869a43667817e3e5f18e4a6435ead6404341d3786c6e43a50416e2b6092ea96856f3523c121ec2d8e536db5fb0dbe08cf9ba9bba0d76a2ee6f46a970274acc7900438e5a45e7a65428874dc5363ee557cd5f7e1686575a92d0947094d3c35f599f788142d31c6a6ece86c50bfb2053ae237e2091c7e739a9d851c18ed4c7c6835a6d920a2d6e25372e363bbed2f2dc39ed09f691c1f129e259b97c3bf4a5a4b297a08da2572cb9bc345519f83d1e3579ef585cb944122c095e42db063a0d462bc0c2660a87600fbe7a123d4045b93d19e9c1dc3438ed5721e8c22c5ac1cb89afe8a6199818bec5c0c5df84ec0943528e710f954a1c5cb31cd6d22302af2947d5304bcdd97fc77924e514a14404cf8577e014a6b9eeaaa256d824747be8037fc06a97262a4ef8db6b7fd31b1709a43e5e100c31ad61583a02ee382507c6e16d5f55565952c7cc1cbf97c1d42ef802214d13ede2f95e852d404efb7693498b3036d4bdc49a7a501c71cec85b38af71349c1fb2c790f661ae9d20296b0ccb6c67d4c7e567b9a79535737797bdad1154bfe6d65eb5ee07c576ce06bde0b4e29a7fbec6fd9153f632054cc0a78a2e49210972ed280b3bd39e4590db2c5a2dcc277b84aeda60807eb8aa308ac61b92d8a457729a507d22e54c92b4e2c7c16f849def10347ffc7f6b69df09191130d4ea70c480827e9fbe93f665b2374663055c32706c7a50d089b9553213e7d72c3ba2123f073d46e8235e654b6ff63e9fa61ce4f5e3ea4ead1a97b1cb2e94f38222d3bae77a6104d359f76835f1151482f81e1c7b83080db0948c45248fd4f1495c29850cfef3439124d22052434e673068470a93b7d767446b01327b1ece996fac8e1fdb8388b8262108ce051088a18e546748e98b9f61eed9bfb94a93c3fb791be8bbe9519f53af65305a83a4ca2117d4e7ddcdb02a54a8fbc5be199f45547316e3d7e24d0e451417bb40d4e5d1313c5df1a88aa8fb6e7aee584dfd14279038555e1fc59ef2cf6c2877a86282825c54f05a9f37b1e02c5a9a911a83b0eb2e86a46250d7dc2a2b01ce70854c38b2854d358a8f236c311020e6db4da29a07414ea02381ac5fc4c70a149bd55e8056c2ed6648e83dffd9a3417f836e23c572338ee55f59fedfa5c672e5f7fee3b3e0b15e53ee5d5ad0208a9cfc08cd28fbc099f08c3b609aec929d47dcf13f51fb6207f3e875616a4d3ac12d00fc5b553757efab3537dc8273dc8e112305a3994343431547bffdd0461aaee26519e43984e3a3c8980895a6f987d10f5021e9cc28cbf8f3400d460b4ea7e8b667315d1a1b769e400fd7191ae19e1d5df780e2fe689abbe7cca2240ec6fad2df9e77d7c293be3c79dbdf26349a5bb30f715006eb2d3d82acf3b1b5f49d746a7913cdad2bda1a3ff966451a860e00960a625007d89a6ecbe3694ee20f9ec9bb8ef7f075c21cd04ca38656840200944c4bf47520ee8dc6617f0ac79f164b2a255788dd4615e9567255b61aa06ac84056c636cc1613168d43a303734e6a235fa245de4fd707fcc5219638c4b2eddd5eb03930e27e8f604233af5cbebbdd154d63270132234339d29e4395fab478978422e48b7647b", @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32, @ANYRES32=r3, @ANYBLOB="00c40000d32cc6ba000000040100000001f20000", @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x98, 0x240000d0}}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002740)="eafc251ca394be6347974ff541523e9543b28b8a88297e2fb8ffff7fabbe8982640ec92bfb87406ec656649b473f70eada97ba96655b60f92592cd7fca8938c870b5867320e6ec9238eacae0706e301e743c9e93b539007aefc95d719f39aa337094963bb2adb31819a3f0b8bd2fd5f9c39d7313cfe053bbc6fe35db70d487f94c4732e1258a93c44f0b9f01b139abed5743cd4db455ce1bd4f123d187eb6742e7104896d3b95711142e9b9d9bc38a31448f20e9577e557d7978f51d57caebbcfdc7a3d31a6a9a5603df33ab19dd366c252711e2dfb7559a1b6574e6c5f0895ad15eee4523b52684e59cc7", 0xeb}, {&(0x7f0000002840)="6b6866fdef32e4e4825e616a3084c8a3f59e16ac269ff9ead9d6fe086edf5338ca4fe3b435890ca7cc5acd202545373606cd801615e6c5e0abfa108f3a618d6529791c50b0d358379f2b5598d282ea00854d6ee81e816ffc13e6e2c601d961b07f0019e8192c8ca175843cef5b9a43cf598ea9199733643724e8aefb9c9a9b072f80f6f3a467f4e013dffb2b4de5de02efa92a28111ac21ce39e082fd97f5bae101fa93bda3eaa28d8062088b67cd0dc5306749b9cfc719cb5f1ad9364e0379422d71b5a8f32b2beda6ebc71e2449ed8e937", 0xd2}, {&(0x7f0000002940)="11fcd6067d8cf5f12da38739e3c1fa3a28ab15f4c446dea9f515ddc4ff30e7dcffd687b151687049d67d7a89545ba76f7d753f6fa9ca7abb2961ad0bc69b660c4ed8e4", 0x43}, {&(0x7f00000029c0)="cc8a2890d89bb5ad4f2b20a9d9c50f58124ab8225e12b5fbb3d0691534f5bbdf63b19c45cadb45257c", 0x29}, {&(0x7f0000002a00)="3f43bd35", 0x4}, {&(0x7f0000002a40)="517dade3bbe56c02fe82f776990fbb53dea3f648f5be1d6b2f3a9355879ebc981f579b6afc3f05bcc14b05bd1b8be59dec82649d4034a41f5ce367dce8ae7b4858248a938fc01e9fee344fd9355fc695fe276e4241e5be777622150931d5afa309947781d530affb2497bb11f0eb6826eb01fbc842122f52367116a4ba0a1ae2c8926cb19542df65d7f411ac2aa07473d1add577a313f15091cc7bc1d162022a81862bf3db60b33ed944cfe6df5b2fc1cb1c43fe349055a5a385428c42d1c2c5bd7164a43e4337cc5184d7661857ececde5056bc50640000", 0xd8}], 0x6}}, {{&(0x7f0000002bc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002cc0)=[{&(0x7f0000002c40)="9659cb38dc0c96af216ace11205449768dcf24aca313c2d1622bc3285afd11a1aabde513e1aa1750e681e059e0c99383f6d4420df41b5e16560810915ef57d10d0e9a77f1f32c811648ea5d2dd41d11cd3f350e5b4561b690008dd776c220f09ae829d", 0x63}], 0x1, &(0x7f0000002e40)=[@cred={{0x1c, 0x1, 0x2, {r2, r0}}}], 0x20, 0x10}}, {{0x0, 0x0, &(0x7f0000002e80), 0x0, &(0x7f0000002d00)=ANY=[@ANYBLOB="18000000000000000100004200010000005b82a2dc07cb289a8b8e4c0d22e46c565e8f29768414afe08d9dd5fd54e9966abd6a48428af0748658b954679911a15551cc51a44fe92391d9897839050300000000000000248d2785f39fc01ccf1fa6875dc8da7978f10f3e85c7ce84b353c80d124b8a1d3fc4a8cbf2a9a9abf18a4ae85afab0793f113dfb96e4141e5fb3214e14412caa062a991d01079a71deee1d2c731312f0de3edd34a48c55ba35e0c9aa52ee12cfd7f0f3aa4427235161dfeb6cd2a9d2e091a964dcf313fc8a835bb62b05542525af4aaf157415fd6fe3503f805544b1a945e5160b6639c1fba72125710c7e", @ANYRES32, @ANYRES32=r3, @ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYRES32], 0x38, 0x20008001}}], 0x4, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) syz_open_dev$radio(&(0x7f0000000380), 0x2, 0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, 0x0, 0x0) r6 = syz_io_uring_setup(0x10b, &(0x7f0000000580)={0x0, 0xf946, 0x80, 0x5, 0x1002}, &(0x7f0000000040), &(0x7f00000001c0)) r7 = eventfd2(0x58, 0x80000) io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000000000)=r7, 0x1) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0xfff1, 0xa}, {0xffed, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x5, '\x00', 0x0, 0x3, 0x9, 0x9}}}}]}, 0x48}}, 0x20044080) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xb}, {0x0, 0xa}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xc}}]}, 0x38}}, 0x4000) io_uring_enter(r6, 0x3516, 0x3e44, 0x8, 0x0, 0x0) r11 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r11, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0xc990, 0x3, 0x0, 0x0, 0xc07}}, 0x11c) readv(r11, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) 31.956581191s ago: executing program 7 (id=839): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xe) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000440)={0x20, 0x0, 0x2, "4d6fbf9537386a97edecc87126b87b320dda6c2434da7e75089ec2195b0657b7ca41745cd8e935e1f1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000500)=ANY=[@ANYRES8=r0, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="401371"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x40, 0xb, 0x6c, {0x6c, 0x31, "7ad18a5af3f3e8ce8612eb2086bc6da506ea4ce7b927a9b4425f655f50298dafdc21118f166f8a2fb7947fc0b1563af2816e5c774ba2bb3a2527c7f2be759ee187854c1a45c35d46a86caedbc486a7e73937d1553418d24e2e9b8ea6a433c6d39edabe72426846d28b74"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41f}}}, &(0x7f0000000480)={0x44, &(0x7f0000000140)={0x20, 0x17, 0x7f, "7c88d020a5a917c04805f6aff26bdccc08c614795f1f82c248bb30cd96bd7ff68d1d641e2dfd48b96259f59c413ee1c317bd20cd66fc8b6571ee4db2f57742dd6583145a73206fda5a68aa4c4ad368a7e850628c496fe1548c40eb1f66f8a1c9d9cf9c5138e26f827af520a24a7e9822cb4b19a43f0d18ea45bd29903f5a08"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0xa4}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000002c0)={0x20, 0x81, 0x3, 'bX}'}, &(0x7f0000000300)={0x20, 0x82, 0x1, ','}, &(0x7f00000003c0)={0x20, 0x83, 0x2, "f582"}, &(0x7f0000000400)={0x20, 0x84, 0x4, "45a0e59f"}, &(0x7f0000000440)={0x20, 0x85, 0x3, "a59a0b"}}) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1fd}, 0xe) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000002740)="1e", 0xfdef}], 0x33) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, 0x0, &(0x7f0000000040)) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) dup(r4) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = dup2(r5, r5) sendmsg$nl_route_sched(r6, &(0x7f0000006d00)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4081}, 0x805) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 31.699305733s ago: executing program 4 (id=841): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$I2C(0x0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect(r1, &(0x7f0000000200)=@ll={0x27, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100), &(0x7f00000002c0)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r2, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x23, &(0x7f0000000040), 0xcf) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10408, 0x4, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x20000000, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3966, 0x3, 0x1000, 0x0, r6, r7, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) r9 = syz_open_procfs$namespace(r8, &(0x7f0000000040)='ns/time_for_children\x00') ioctl$NS_GET_USERNS(r9, 0xb701, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000008d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 31.329678903s ago: executing program 4 (id=842): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @dev={0xfe, 0x80, '\x00', 0x26}, 0x1}}, 0x24) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0xff21) recvfrom$rxrpc(r2, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000140)='fib_table_lookup\x00', r1, 0x0, 0x417}, 0x18) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000fff850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ntfs3\x00', 0x2208004, 0x0) 30.343498492s ago: executing program 4 (id=843): r0 = syz_usb_connect$cdc_ncm(0x2, 0xb2, &(0x7f0000000280)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902a00002010000000904000001020d0000052406000105240000000d240f01000000007fb000000006241a00000008241c09000000101f241305c25ac8c0cb082bd803d39f486f0df27bf7c9280353d4329bae9ebf08240710000005001524120001a317a88b045e4f01a607c0ffcb7e392a090581034000fc00fe0904010000020d00000904010102020d00000905820240"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xe0bc0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r2) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000340)=ANY=[@ANYBLOB="3000000074d2a17b95ead496691906abff5ae4c30f634a26a3ad80be1336e29e45351d80b7e3770fa6be039a1d614a051c6931ee85dfca7df37864eebf0e2f8972d9c344814da5f97e783a26c9358924a922823f1190f5a2", @ANYRES16=r3, @ANYBLOB="010000000000ffdbdf250c0000001800018014000200776c616e30000000000000000000000004000380"], 0x30}}, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000040)=0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffffffffffd6c, &(0x7f00000002c0)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x200000003, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x6, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r2, 0xf517, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_BT_POWER(r5, 0x112, 0x4, 0x0, &(0x7f0000000200)) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x920000002404c0c1) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv2(r6, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/139, 0x8b}], 0x1, 0x867, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'none\x00', 0x1, 0x4, 0x27}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'lc\x00', 0xb, 0x80000000, 0x25}, {@rand_addr=0x64010102, 0x4e23, 0x10000, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x401, 0xad, &(0x7f0000000080)) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r8 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r8}, 0x8) 28.949433359s ago: executing program 7 (id=846): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x1d, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xae}}, @snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, @void, @value}, 0x94) prctl$PR_SET_IO_FLUSHER(0x41, 0x3) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x1, 0x0, @ioapic={0x3000, 0x6, 0x8, 0x9, 0x0, [{0x0, 0xfb, 0x4, '\x00', 0x2}, {0xe, 0x8, 0xa, '\x00', 0x8}, {0x27, 0x7a, 0xe8, '\x00', 0x5}, {0xa0, 0x8, 0xb3, '\x00', 0x9}, {0x4, 0x6, 0xc, '\x00', 0x4}, {0x4, 0x8, 0x1, '\x00', 0x3}, {0x40, 0x9, 0x5, '\x00', 0xd9}, {0x5, 0xc, 0xa6, '\x00', 0x1}, {0x9, 0x4, 0x5, '\x00', 0x5}, {0x7, 0x8, 0x6, '\x00', 0x14}, {0x8, 0x5, 0x5, '\x00', 0x7}, {0x3, 0xab, 0x53, '\x00', 0x3}, {0x5, 0x98, 0x6, '\x00', 0x2}, {0x7, 0xb7, 0xf9, '\x00', 0xff}, {0x6, 0x11, 0x0, '\x00', 0x4}, {0xa8, 0x0, 0x9, '\x00', 0x8}, {0x6, 0xb3, 0x9, '\x00', 0x40}, {0x25, 0x3, 0x4}, {0xf, 0xdf, 0x2, '\x00', 0x7}, {0x9, 0x6, 0x9, '\x00', 0x6}, {0x8, 0x7, 0x8, '\x00', 0x5}, {0x7, 0x2, 0x6, '\x00', 0x9}, {0xf9, 0x6, 0xbf, '\x00', 0xf}, {0xb8, 0xa, 0x7, '\x00', 0x7}]}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff3}, {0x8, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) pwritev(r4, &(0x7f0000000500)=[{&(0x7f0000000480)="739d9e91e901c580bfc177fdfed251a312013170fa40ee093464fa9d7347b5bc4bb3d605a4e95174f42a6d189a56a8a8", 0x30}, {&(0x7f00000004c0)="06f917f06b6ad1b27cc20a19df5f6fced3bed68a4b6fab66ae2f80c17dc068250c1ea60bdcdd2d092313b70edc919e584390da624152c88e00ae4f", 0x3b}], 0x2, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipmr_newroute={0x40, 0x18, 0x4, 0x70bd2d, 0x25dfdbfb, {0x80, 0x20, 0x20, 0x3, 0x2, 0x4, 0xfd, 0x6, 0xe39ecc320b066bd6}, [@RTA_MULTIPATH={0xc, 0x9, {0xfff, 0xa, 0xfd, r8}}, @RTA_OIF={0x8, 0x4, r9}, @RTA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x22}}, @RTA_DPORT={0x6, 0x1d, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x6, 0x0, 0x5, 0x0, 0x0, 0x6b, 0x0, 0x8000000000000, 0x80000000000000, 0x0, 0x9, 0x0, 0xfffffffffffffffe, 0x0, 0x8001], 0x1, 0x345210}) bpf$MAP_CREATE(0x2000000000000015, &(0x7f0000000140)=@base={0x19, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$KVM_RUN(r5, 0xae80, 0x0) 28.863997996s ago: executing program 7 (id=847): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000900)=ANY=[@ANYBLOB="0c0200001e000100000000000000000007"], 0x20c}}, 0x4040010) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0xb, 0x11}}) landlock_create_ruleset(&(0x7f0000000000)={0x8, 0x4, 0x3}, 0x18, 0x3) 27.208654742s ago: executing program 4 (id=848): r0 = socket$nl_rdma(0x10, 0x3, 0x14) recvmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x40}], 0x1, 0x2000, 0x0) r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) close_range(r1, r1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000e14012508003c0005000000080001"], 0x28}, 0x1, 0x0, 0x0, 0x844}, 0x4000000) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0xe, 0x180000) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000140)=0x8, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000e870f2cfd7200900000000000000000000000000009d7a51c2840590f26a00000000000000"], 0xe) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1fd}, 0xe) socket$inet6_udplite(0xa, 0x2, 0x88) writev(r3, &(0x7f0000000240), 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20000004) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r5, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r5}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f0000000280), &(0x7f0000000100)=@tcp=r5, 0x1}, 0x20) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 27.115228048s ago: executing program 4 (id=850): syz_open_dev$vim2m(&(0x7f0000000000), 0x52cd, 0x2) r0 = socket$key(0xf, 0x3, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x80380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000001200)=ANY=[@ANYBLOB="02180000180000000000000000000000030005000000000002000000e000000200000000000000000800120000000000000000000000000006000000000000000000000000000000ff010000000000000000000000000001fe8000000000000000000000000000aa030006003200000002000000ffffffff0000000000000000080019"], 0xc0}}, 0x0) 26.19157954s ago: executing program 5 (id=851): close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="310300000000000000000800000008000300", @ANYRES32=r0, @ANYBLOB="bbbd0600", @ANYRES32=r1, @ANYBLOB], 0x24}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@dev}}, &(0x7f0000000140)=0xe8) quotactl_fd$Q_GETINFO(r5, 0xffffffff80000501, r7, 0x0) quotactl_fd$Q_GETNEXTQUOTA(r4, 0xffffffff80000902, r7, &(0x7f00000003c0)) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$admmidi(0x0, 0x20, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r9 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r9, 0x0, 0x14) close_range(r8, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 26.051932321s ago: executing program 4 (id=852): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x40, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x300}, 0x0) 25.240655326s ago: executing program 5 (id=853): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYRES32=r1], 0x34}, 0x1, 0x0, 0x0, 0x20040801}, 0x800) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0x6, &(0x7f00000007c0)={0x2, 0xfffffffffffffffc}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) preadv(r3, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/30, 0x1e}], 0x1, 0x80000001, 0x3) ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000000140)={0xffff}) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000000)=0x74000000) prctl$PR_SET_SECCOMP(0x4a, 0x2, &(0x7f0000000180)={0x0, 0x0}) write$dsp(r5, &(0x7f0000002000)='`', 0x88020) 22.257037002s ago: executing program 5 (id=854): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x1003, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x1e) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c2402"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 19.215025308s ago: executing program 5 (id=855): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@xino_on}]}) chdir(&(0x7f0000000140)='./bus\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x0) splice(r2, 0x0, r1, 0x0, 0x7f, 0xe) write(r0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f00000007c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000540)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='contention_end\x00', r5}, 0x18) r6 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x27b8, 0x1ed, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\"\b'], 0x0}, 0x0) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="01"], 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0x4, &(0x7f0000000300)={0x800000000006, 0x85}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000480)=0x7) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) 16.090822155s ago: executing program 5 (id=856): socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_emit_ethernet(0x7e, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c20000000000000000088100200086dd6000040000442f00fe800000000000000000000000000000fe8000000000000000000000000000aa042065580000000000000800000086dd890288be00000000100000000100000000000000080022eb000000"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x3) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/rpc\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0x10d}], 0x1, 0x4b5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000600)={[{@gid}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) readv(r4, &(0x7f00000038c0)=[{&(0x7f0000004980)=""/4096, 0x1000}], 0x1) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f00000003c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000000c1400022abd7000fddbdf250800030003000088610008000100000000000800030002000000080001000200"], 0x30}, 0x1, 0x0, 0x0, 0x48011}, 0x40000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000440)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r7 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sendto$inet6(r6, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sigaltstack(&(0x7f0000000040)={&(0x7f0000000540)=""/109, 0x0, 0x6d}, &(0x7f00000001c0)={&(0x7f00000005c0)=""/172, 0x0, 0xac}) 15.167410135s ago: executing program 5 (id=857): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000300000000000000000a0101000000005e1affd5020000000900010700797a300000000008000240000000032c000000617fab520000e6ff00000c00020000000900010073797a30000000000900030073797a3200000000140000001100012ebed0f74db7f7fa78b9851674374ebe37186abf9a43c55bf8fb6a8d84a2e5a44c5fe730315dbec768859874a693c1933c"], 0x7c}}, 0x0) (async) unshare(0x6a040000) (async) unshare(0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x3501) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x60, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x17, 0x1, 0x2}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) r2 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) accept4(r2, 0x0, 0x0, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 64) syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x7590, 0x2, 0x3}, &(0x7f0000000000), &(0x7f00000001c0)) (async, rerun: 64) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3, 0x0, 0x2}, 0x18) (async) r4 = fanotify_init(0x10, 0x0) fanotify_mark(r4, 0x455, 0x40001000, 0xffffffffffffffff, 0x0) (async) fanotify_mark(r4, 0x80, 0x22, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 64) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) listen(r6, 0xa1) (async, rerun: 64) shutdown(r6, 0x1) (async, rerun: 64) epoll_create1(0x0) (async) r7 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000100)) 13.520848524s ago: executing program 37 (id=847): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000900)=ANY=[@ANYBLOB="0c0200001e000100000000000000000007"], 0x20c}}, 0x4040010) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0xb, 0x11}}) landlock_create_ruleset(&(0x7f0000000000)={0x8, 0x4, 0x3}, 0x18, 0x3) 11.018413463s ago: executing program 38 (id=852): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x40, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x300}, 0x0) 0s ago: executing program 39 (id=857): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000300000000000000000a0101000000005e1affd5020000000900010700797a300000000008000240000000032c000000617fab520000e6ff00000c00020000000900010073797a30000000000900030073797a3200000000140000001100012ebed0f74db7f7fa78b9851674374ebe37186abf9a43c55bf8fb6a8d84a2e5a44c5fe730315dbec768859874a693c1933c"], 0x7c}}, 0x0) (async) unshare(0x6a040000) (async) unshare(0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x3501) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x60, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x17, 0x1, 0x2}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) r2 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) accept4(r2, 0x0, 0x0, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 64) syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x7590, 0x2, 0x3}, &(0x7f0000000000), &(0x7f00000001c0)) (async, rerun: 64) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3, 0x0, 0x2}, 0x18) (async) r4 = fanotify_init(0x10, 0x0) fanotify_mark(r4, 0x455, 0x40001000, 0xffffffffffffffff, 0x0) (async) fanotify_mark(r4, 0x80, 0x22, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 64) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) listen(r6, 0xa1) (async, rerun: 64) shutdown(r6, 0x1) (async, rerun: 64) epoll_create1(0x0) (async) r7 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000100)) kernel console output (not intermixed with test programs): 8.473000][ T7567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.482864][ T30] audit: type=1400 audit(1745176858.012:390): avc: denied { setattr } for pid=7563 comm="syz.4.446" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 198.548754][ T7569] FAULT_INJECTION: forcing a failure. [ 198.548754][ T7569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.595175][ T7569] CPU: 0 UID: 0 PID: 7569 Comm: syz.0.448 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 198.595200][ T7569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 198.595210][ T7569] Call Trace: [ 198.595216][ T7569] [ 198.595222][ T7569] dump_stack_lvl+0x16c/0x1f0 [ 198.595249][ T7569] should_fail_ex+0x512/0x640 [ 198.595271][ T7569] _copy_from_user+0x2e/0xd0 [ 198.595292][ T7569] bpf_test_init.isra.0+0xe2/0x140 [ 198.595315][ T7569] bpf_prog_test_run_xdp+0x4f0/0x1540 [ 198.595346][ T7569] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 198.595369][ T7569] ? __might_fault+0x70/0x190 [ 198.595391][ T7569] ? fput+0x70/0xf0 [ 198.595411][ T7569] ? __bpf_prog_get+0xa0/0x290 [ 198.595429][ T7569] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 198.595450][ T7569] __sys_bpf+0x1485/0x4d80 [ 198.595475][ T7569] ? __pfx___sys_bpf+0x10/0x10 [ 198.595496][ T7569] ? ksys_write+0x190/0x240 [ 198.595514][ T7569] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 198.595552][ T7569] ? fput+0x70/0xf0 [ 198.595570][ T7569] ? ksys_write+0x1b9/0x240 [ 198.595583][ T7569] ? __pfx_ksys_write+0x10/0x10 [ 198.595596][ T7569] ? rcu_is_watching+0x12/0xc0 [ 198.595621][ T7569] __x64_sys_bpf+0x78/0xc0 [ 198.595642][ T7569] ? lockdep_hardirqs_on+0x7c/0x110 [ 198.595663][ T7569] do_syscall_64+0xcd/0x260 [ 198.595688][ T7569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.595704][ T7569] RIP: 0033:0x7f929b98e169 [ 198.595718][ T7569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.595734][ T7569] RSP: 002b:00007f929c7b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 198.595750][ T7569] RAX: ffffffffffffffda RBX: 00007f929bbb5fa0 RCX: 00007f929b98e169 [ 198.595760][ T7569] RDX: 000000000000001e RSI: 0000200000000000 RDI: 000000000000000a [ 198.595770][ T7569] RBP: 00007f929c7b9090 R08: 0000000000000000 R09: 0000000000000000 [ 198.595779][ T7569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.595789][ T7569] R13: 0000000000000000 R14: 00007f929bbb5fa0 R15: 00007ffdaddf99b8 [ 198.595811][ T7569] [ 198.894235][ T7574] xt_CT: You must specify a L4 protocol and not use inversions on it [ 199.334089][ T5904] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 199.505811][ T7578] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 199.517573][ T5904] usb 1-1: Using ep0 maxpacket: 16 [ 199.528659][ T5904] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.596183][ T5904] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 199.664343][ T5904] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 199.673411][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.710585][ T5904] usb 1-1: Product: syz [ 199.722054][ T5904] usb 1-1: Manufacturer: syz [ 199.734122][ T5904] usb 1-1: SerialNumber: syz [ 199.774224][ T30] audit: type=1400 audit(1745176859.312:391): avc: denied { connect } for pid=7579 comm="syz.2.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 199.852863][ T30] audit: type=1400 audit(1745176859.362:392): avc: denied { write } for pid=7579 comm="syz.2.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 199.916113][ T30] audit: type=1400 audit(1745176859.362:393): avc: denied { read } for pid=7579 comm="syz.2.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 200.152521][ T5904] usb 1-1: 0:2 : does not exist [ 200.264581][ T5904] usb 1-1: unit 6 not found! [ 200.305034][ T5904] usb 1-1: USB disconnect, device number 15 [ 200.367374][ T7594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.454'. [ 200.521189][ T6664] udevd[6664]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 200.612029][ T7598] netlink: 68 bytes leftover after parsing attributes in process `syz.3.458'. [ 200.646330][ T7600] netlink: 'syz.4.456': attribute type 5 has an invalid length. [ 200.694431][ T5874] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 200.884995][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.912018][ T5874] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 200.922618][ T5904] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 200.942311][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.979335][ T5874] usb 2-1: config 0 descriptor?? [ 201.130596][ T5928] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 201.148997][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.160983][ T5904] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 201.324962][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.437181][ T5904] usb 5-1: config 0 descriptor?? [ 201.448603][ T7615] netlink: 20 bytes leftover after parsing attributes in process `syz.2.457'. [ 201.543622][ T5904] xbox_remote_probe: Unexpected endpoint_in [ 201.556419][ T5904] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 201.616059][ T5928] usb 4-1: Invalid ep0 maxpacket: 9 [ 201.763977][ T5928] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 201.943925][ T5928] usb 4-1: Invalid ep0 maxpacket: 9 [ 201.949573][ T5928] usb usb4-port1: attempt power cycle [ 202.128806][ T5874] usbhid 2-1:0.0: can't add hid device: -71 [ 202.141214][ T5874] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 202.160801][ T5874] usb 2-1: USB disconnect, device number 19 [ 202.294235][ T5928] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 202.327168][ T5928] usb 4-1: Invalid ep0 maxpacket: 9 [ 202.464639][ T2933] wlan1: Trigger new scan to find an IBSS to join [ 202.474523][ T5928] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 202.512387][ T5928] usb 4-1: Invalid ep0 maxpacket: 9 [ 202.523274][ T5928] usb usb4-port1: unable to enumerate USB device [ 203.494758][ T30] audit: type=1400 audit(1745176863.022:394): avc: denied { mount } for pid=7628 comm="syz.0.466" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 203.552537][ T30] audit: type=1400 audit(1745176863.032:395): avc: denied { read write } for pid=7628 comm="syz.0.466" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 203.653930][ T5928] usb 5-1: USB disconnect, device number 27 [ 203.671628][ T30] audit: type=1400 audit(1745176863.032:396): avc: denied { open } for pid=7628 comm="syz.0.466" path="/106/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 203.733466][ T7637] netlink: 'syz.4.469': attribute type 10 has an invalid length. [ 203.741955][ T30] audit: type=1800 audit(1745176863.062:397): pid=7629 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.466" name="/" dev="9p" ino=2 res=0 errno=0 [ 203.825434][ T30] audit: type=1400 audit(1745176863.212:398): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 204.134093][ T7637] syz_tun: entered promiscuous mode [ 204.156475][ T7637] : (slave syz_tun): Enslaving as an active interface with an up link [ 204.607621][ T7650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.472'. [ 205.348867][ T30] audit: type=1400 audit(1745176864.862:399): avc: denied { module_request } for pid=7648 comm="syz.1.473" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 206.480503][ T36] wlan1: Trigger new scan to find an IBSS to join [ 206.603336][ T7658] netlink: 'syz.1.475': attribute type 1 has an invalid length. [ 206.820047][ T7660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.475'. [ 206.916687][ T7667] bond2 (unregistering): Released all slaves [ 207.103589][ T30] audit: type=1400 audit(1745176866.612:400): avc: denied { write } for pid=7661 comm="syz.3.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 207.511734][ T30] audit: type=1400 audit(1745176867.052:401): avc: denied { mount } for pid=7677 comm="syz.3.480" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 207.546974][ T5874] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 207.590509][ T7684] affs: No valid root block on device nullb0 [ 207.590913][ T30] audit: type=1400 audit(1745176867.132:402): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 208.229734][ T5939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.241563][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.253517][ T5874] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 208.264112][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.280315][ T7692] FAULT_INJECTION: forcing a failure. [ 208.280315][ T7692] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.314499][ T5874] usb 3-1: config 0 descriptor?? [ 208.320184][ T7689] wireguard0: entered promiscuous mode [ 208.325935][ T7689] wireguard0: entered allmulticast mode [ 208.372517][ T7692] CPU: 1 UID: 0 PID: 7692 Comm: syz.3.482 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 208.372542][ T7692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 208.372552][ T7692] Call Trace: [ 208.372558][ T7692] [ 208.372564][ T7692] dump_stack_lvl+0x16c/0x1f0 [ 208.372590][ T7692] should_fail_ex+0x512/0x640 [ 208.372612][ T7692] _copy_from_user+0x2e/0xd0 [ 208.372633][ T7692] copy_msghdr_from_user+0x98/0x160 [ 208.372654][ T7692] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 208.372677][ T7692] ? kfree+0x252/0x4d0 [ 208.372699][ T7692] ? __pfx__kstrtoull+0x10/0x10 [ 208.372728][ T7692] ___sys_sendmsg+0xfe/0x1d0 [ 208.372749][ T7692] ? __pfx____sys_sendmsg+0x10/0x10 [ 208.372791][ T7692] ? __pfx___might_resched+0x10/0x10 [ 208.372816][ T7692] __sys_sendmmsg+0x200/0x420 [ 208.372839][ T7692] ? __pfx___sys_sendmmsg+0x10/0x10 [ 208.372867][ T7692] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 208.372901][ T7692] ? fput+0x70/0xf0 [ 208.372919][ T7692] ? ksys_write+0x1b9/0x240 [ 208.372933][ T7692] ? __pfx_ksys_write+0x10/0x10 [ 208.372945][ T7692] ? rcu_is_watching+0x12/0xc0 [ 208.372968][ T7692] __x64_sys_sendmmsg+0x9c/0x100 [ 208.372985][ T7692] ? lockdep_hardirqs_on+0x7c/0x110 [ 208.373006][ T7692] do_syscall_64+0xcd/0x260 [ 208.373030][ T7692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.373052][ T7692] RIP: 0033:0x7f2a7ef8e169 [ 208.373065][ T7692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.373082][ T7692] RSP: 002b:00007f2a7fde2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 208.373098][ T7692] RAX: ffffffffffffffda RBX: 00007f2a7f1b5fa0 RCX: 00007f2a7ef8e169 [ 208.373109][ T7692] RDX: 000000000400008a RSI: 0000200000000180 RDI: 0000000000000003 [ 208.373118][ T7692] RBP: 00007f2a7fde2090 R08: 0000000000000000 R09: 0000000000000000 [ 208.373128][ T7692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 208.373138][ T7692] R13: 0000000000000000 R14: 00007f2a7f1b5fa0 R15: 00007ffdef1005d8 [ 208.373160][ T7692] [ 208.707142][ T7695] syz.1.484: attempt to access beyond end of device [ 208.707142][ T7695] loop1: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 208.721505][ T7695] hfsplus: unable to find HFS+ superblock [ 210.117659][ T80] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 210.184116][ T5905] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 210.268965][ T7709] netlink: 'syz.1.489': attribute type 10 has an invalid length. [ 210.315060][ T7709] dummy0: entered promiscuous mode [ 210.332850][ T7709] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 210.566219][ T80] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.583330][ T80] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 210.605014][ T80] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.636196][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 4 [ 210.659370][ T5905] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 210.677895][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.690961][ T80] usb 1-1: config 0 descriptor?? [ 210.720272][ T5905] usb 4-1: config 0 descriptor?? [ 210.737061][ T5874] usbhid 3-1:0.0: can't add hid device: -71 [ 210.743131][ T5874] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 210.773202][ T5874] usb 3-1: USB disconnect, device number 23 [ 211.700345][ T7720] netlink: 20 bytes leftover after parsing attributes in process `syz.1.491'. [ 212.162642][ T80] usbhid 1-1:0.0: can't add hid device: -71 [ 212.182831][ T80] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 212.220160][ T80] usb 1-1: USB disconnect, device number 16 [ 212.320730][ T7728] netlink: 20 bytes leftover after parsing attributes in process `syz.4.493'. [ 212.623506][ T7739] netlink: 40 bytes leftover after parsing attributes in process `syz.2.498'. [ 212.725014][ T80] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 212.775989][ T7747] netlink: 'syz.0.500': attribute type 5 has an invalid length. [ 212.798665][ T7748] netlink: 788 bytes leftover after parsing attributes in process `syz.1.497'. [ 212.971589][ T5904] usb 4-1: USB disconnect, device number 20 [ 213.058239][ T80] usb 5-1: Using ep0 maxpacket: 16 [ 213.074743][ T80] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 213.092930][ T80] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 213.111839][ T30] audit: type=1400 audit(1745176872.652:403): avc: denied { ioctl } for pid=7751 comm="syz.3.503" path="socket:[15187]" dev="sockfs" ino=15187 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 213.138727][ T80] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 213.149909][ T80] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 213.152125][ T7754] netlink: 'syz.2.502': attribute type 5 has an invalid length. [ 213.163898][ T80] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 213.167169][ T5874] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 213.183911][ T80] usb 5-1: SerialNumber: syz [ 213.227338][ T7735] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 213.258371][ T7752] netlink: 76 bytes leftover after parsing attributes in process `syz.3.503'. [ 213.357250][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.371976][ T5874] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 213.398889][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.418357][ T5874] usb 1-1: config 0 descriptor?? [ 213.435548][ T5874] xbox_remote_probe: Unexpected endpoint_in [ 213.450925][ T5874] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 213.455563][ T80] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 213.474047][ T5905] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 213.507446][ T80] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 213.538993][ T80] usb 5-1: USB disconnect, device number 28 [ 213.667478][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.682870][ T5905] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 213.707834][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.080257][ T5905] usb 3-1: config 0 descriptor?? [ 214.177732][ T7769] netlink: 'syz.1.506': attribute type 2 has an invalid length. [ 214.258076][ T5905] xbox_remote_probe: Unexpected endpoint_in [ 214.492791][ T5905] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 214.949926][ T7779] netlink: 28 bytes leftover after parsing attributes in process `syz.4.509'. [ 214.952185][ T30] audit: type=1400 audit(1745176874.472:404): avc: denied { nlmsg_read } for pid=7776 comm="syz.3.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 215.704171][ T5874] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 215.886237][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 4 [ 215.923889][ T5874] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 215.962086][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.008195][ T5874] usb 5-1: config 0 descriptor?? [ 216.165289][ T5874] usb 1-1: USB disconnect, device number 17 [ 217.402517][ T5875] usb 3-1: USB disconnect, device number 24 [ 218.593124][ T5875] usb 5-1: USB disconnect, device number 29 [ 220.838008][ T30] audit: type=1400 audit(1745176880.382:405): avc: denied { connect } for pid=7823 comm="syz.0.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 223.603855][ C1] sched: DL replenish lagged too much [ 224.304859][ T7797] wireguard0: entered promiscuous mode [ 224.318676][ T7797] wireguard0: entered allmulticast mode [ 251.878896][ T5139] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 251.889327][ T5139] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 251.896918][ T5139] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 251.904738][ T5139] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 251.913889][ T5139] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 251.940780][ T30] audit: type=1400 audit(1745176911.472:406): avc: denied { mounton } for pid=7856 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 251.990400][ T5139] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 252.005192][ T5139] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 252.018905][ T5139] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 252.030087][ T5139] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 252.058946][ T5139] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 252.136940][ T30] audit: type=1400 audit(1745176911.652:407): avc: denied { ioctl } for pid=7862 comm="syz.4.531" path="socket:[16573]" dev="sockfs" ino=16573 ioctlcmd=0x4946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 252.165499][ T30] audit: type=1400 audit(1745176911.652:408): avc: denied { setopt } for pid=7862 comm="syz.4.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 252.684479][ T30] audit: type=1400 audit(1745176911.652:409): avc: denied { read } for pid=7862 comm="syz.4.531" path="socket:[16566]" dev="sockfs" ino=16566 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 252.817353][ T7868] netlink: 68 bytes leftover after parsing attributes in process `syz.2.532'. [ 253.153354][ T5839] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 254.093069][ T54] Bluetooth: hci5: command tx timeout [ 254.175023][ T54] Bluetooth: hci4: command tx timeout [ 254.313042][ T5839] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 254.384174][ T5824] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 255.184807][ T5824] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 255.193807][ T5824] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 255.294334][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.233894][ T5139] Bluetooth: hci5: command tx timeout [ 256.303934][ T5139] Bluetooth: hci4: command tx timeout [ 257.264121][ T5139] Bluetooth: hci6: command tx timeout [ 257.434007][ T7856] lo speed is unknown, defaulting to 1000 [ 257.501022][ T5939] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.545193][ T7870] lo speed is unknown, defaulting to 1000 [ 257.565456][ T7858] lo speed is unknown, defaulting to 1000 [ 258.106300][ T7797] bond0: (slave syz_tun): Releasing backup interface [ 258.311359][ T5139] Bluetooth: hci5: command tx timeout [ 258.333080][ T5939] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.434407][ T5139] Bluetooth: hci4: command tx timeout [ 258.850677][ T7858] chnl_net:caif_netlink_parms(): no params data found [ 258.860460][ T7884] netlink: 32 bytes leftover after parsing attributes in process `syz.4.536'. [ 258.878721][ T7856] chnl_net:caif_netlink_parms(): no params data found [ 258.919156][ T5939] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.969040][ T7870] chnl_net:caif_netlink_parms(): no params data found [ 259.121143][ T5939] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.341913][ T7858] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.352333][ T7858] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.359546][ T5139] Bluetooth: hci6: command tx timeout [ 259.370276][ T7858] bridge_slave_0: entered allmulticast mode [ 259.377879][ T7858] bridge_slave_0: entered promiscuous mode [ 259.406891][ T5928] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 259.458154][ T7858] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.465378][ T7858] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.472492][ T7858] bridge_slave_1: entered allmulticast mode [ 259.480139][ T7858] bridge_slave_1: entered promiscuous mode [ 259.487992][ T7870] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.502676][ T7870] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.510870][ T7870] bridge_slave_0: entered allmulticast mode [ 259.579787][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.686649][ T7870] bridge_slave_0: entered promiscuous mode [ 259.715039][ T5928] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 259.752077][ T7870] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.825108][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.852498][ T7870] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.882102][ T7870] bridge_slave_1: entered allmulticast mode [ 259.889375][ T7870] bridge_slave_1: entered promiscuous mode [ 259.916567][ T5928] usb 3-1: config 0 descriptor?? [ 259.922506][ T7856] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.928005][ T5928] xbox_remote_probe: Unexpected endpoint_in [ 259.929909][ T7856] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.940071][ T5928] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 259.943001][ T7856] bridge_slave_0: entered allmulticast mode [ 259.961625][ T7856] bridge_slave_0: entered promiscuous mode [ 259.983806][ T7912] tipc: Started in network mode [ 259.989084][ T7912] tipc: Node identity 4, cluster identity 4711 [ 259.996047][ T7912] tipc: Node number set to 4 [ 260.025603][ T7870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.036899][ T7870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.047028][ T7856] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.054531][ T7856] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.061680][ T7856] bridge_slave_1: entered allmulticast mode [ 260.069810][ T7856] bridge_slave_1: entered promiscuous mode [ 260.140036][ T5875] usb 3-1: USB disconnect, device number 25 [ 260.157980][ T7856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.172677][ T7858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.185277][ T7858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.399839][ T5139] Bluetooth: hci5: command tx timeout [ 260.507733][ T7856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.544031][ T5139] Bluetooth: hci4: command tx timeout [ 260.562290][ T7870] team0: Port device team_slave_0 added [ 260.637859][ T7858] team0: Port device team_slave_0 added [ 260.794927][ T7870] team0: Port device team_slave_1 added [ 260.805272][ T7856] team0: Port device team_slave_0 added [ 260.855812][ T7858] team0: Port device team_slave_1 added [ 260.890766][ T7919] netlink: 'syz.2.540': attribute type 1 has an invalid length. [ 260.920695][ T7919] netlink: 216 bytes leftover after parsing attributes in process `syz.2.540'. [ 260.951109][ T7856] team0: Port device team_slave_1 added [ 261.341888][ T7870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.349996][ T7870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.474275][ T5139] Bluetooth: hci6: command tx timeout [ 261.485480][ T7870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.498124][ T7870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.505330][ T7870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.531750][ T7870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.579372][ T7924] netlink: 128 bytes leftover after parsing attributes in process `syz.4.541'. [ 261.950094][ T5939] bridge_slave_1: left allmulticast mode [ 261.956050][ T5939] bridge_slave_1: left promiscuous mode [ 261.962567][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.972811][ T5939] bridge_slave_0: left allmulticast mode [ 261.979258][ T5939] bridge_slave_0: left promiscuous mode [ 261.987696][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.365348][ T5939] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.376239][ T5939] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.390898][ T5939] bond0 (unregistering): Released all slaves [ 262.690865][ T7856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.698407][ T7856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.728314][ T7856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.740403][ T7858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.750029][ T7858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.777720][ T7858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.844725][ T5939] tipc: Left network mode [ 262.892559][ T30] audit: type=1400 audit(1745176922.432:410): avc: denied { read } for pid=7930 comm="syz.4.543" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 262.920231][ T30] audit: type=1400 audit(1745176922.432:411): avc: denied { open } for pid=7930 comm="syz.4.543" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 262.947754][ T7856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.960007][ T30] audit: type=1400 audit(1745176922.442:412): avc: denied { ioctl } for pid=7930 comm="syz.4.543" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d0f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 262.985335][ T7856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.008757][ T30] audit: type=1107 audit(1745176922.442:413): pid=7930 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='¤g¸'j‹NšJ0„ç pªúyEG)¬ÔÌ袵 [ 263.008757][ T30] q”¾Bœ¾ÑÓœÛùφҭ½$2(P.€)sõ|B¹Ÿ´h÷ç==\‹t˱dŽ…}9pµàsÕܤèp¯68Ï|Ùn„85_#Vûyù׋·ZãUª”ï¤ÕÏ:¸ƒ¶@2©rÍÐÖ î…ŸTg¾çXQ,6¢4ÇáÁ)’3&ÙT $±Æ’lË=ògT¸ÆŒà»Là1%lƒlÝTHË$ hѲ‘¨˜v2€ Èöìâ÷y&>®_›éĦŠZ:ʽM„l~#µÍÁɺFN‹=ä¯ÒI䶈Â}ü”XmÆ"¿qåR(Æ5¯ì/žëaà=ç]Ý8å÷å9ˆÖ¤' [ 263.053584][ T7937] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=7937 comm=syz.4.543 [ 263.067031][ T7856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.087108][ T7858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.094073][ T7858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.120378][ T7858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.170790][ T7870] hsr_slave_0: entered promiscuous mode [ 263.181083][ T7870] hsr_slave_1: entered promiscuous mode [ 263.199578][ T7870] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.208509][ T7870] Cannot create hsr debugfs directory [ 263.241560][ T5923] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 263.366417][ T7856] hsr_slave_0: entered promiscuous mode [ 263.372776][ T7856] hsr_slave_1: entered promiscuous mode [ 263.379466][ T7856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.388898][ T7856] Cannot create hsr debugfs directory [ 263.408699][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.421854][ T7858] hsr_slave_0: entered promiscuous mode [ 263.428310][ T5923] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 263.437716][ T7858] hsr_slave_1: entered promiscuous mode [ 263.446870][ T7858] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.459007][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.467350][ T7858] Cannot create hsr debugfs directory [ 263.475198][ T5923] usb 3-1: config 0 descriptor?? [ 263.514226][ T5139] Bluetooth: hci6: command tx timeout [ 263.632574][ T5939] hsr_slave_0: left promiscuous mode [ 263.645729][ T5939] hsr_slave_1: left promiscuous mode [ 263.651500][ T5939] batman_adv: batadv0: Interface deactivated: dummy0 [ 263.658599][ T5939] batman_adv: batadv0: Removing interface: dummy0 [ 263.668019][ T5939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.675605][ T5939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.683402][ T5939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.691139][ T5939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.706709][ T5939] veth1_macvtap: left promiscuous mode [ 263.712433][ T5939] veth0_macvtap: left promiscuous mode [ 263.718371][ T5939] veth1_vlan: left promiscuous mode [ 263.723735][ T5939] veth0_vlan: left promiscuous mode [ 263.903790][ T5923] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 263.922616][ T5923] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000B/input/input23 [ 264.027241][ T5923] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 264.070262][ T5939] team0 (unregistering): Port device team_slave_1 removed [ 264.180562][ T5939] team0 (unregistering): Port device team_slave_0 removed [ 264.347019][ T5904] usb 3-1: USB disconnect, device number 26 [ 264.888252][ T7870] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 264.924562][ T7870] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 264.963988][ T7870] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 265.008275][ T7870] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 265.336954][ T5939] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.368224][ T7856] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 265.697856][ T30] audit: type=1400 audit(1745176925.172:414): avc: denied { ioctl } for pid=7972 comm="syz.4.547" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 265.759499][ T5939] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.778645][ T7856] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 266.039266][ T7856] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 266.096722][ T7856] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 266.526848][ T5939] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.715321][ T5939] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.743183][ T7858] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 266.768598][ T7858] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 266.821976][ T7858] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 266.885992][ T7858] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 266.949215][ T7870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.043283][ T7870] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.103184][ T7870] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 267.118411][ T7870] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 267.418275][ T2977] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.425422][ T2977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.435360][ T2977] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.442452][ T2977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.612298][ T5939] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.678528][ T7856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.736174][ T5939] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.773778][ T7856] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.789864][ T7870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.867216][ T5939] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.914388][ T5876] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 267.952200][ T2945] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.959351][ T2945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.226300][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.241044][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.248167][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.260090][ T5876] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 268.288282][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.320946][ T5876] usb 3-1: config 0 descriptor?? [ 268.336408][ T5939] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.448633][ T7858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.519217][ T7858] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.621975][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.629126][ T1083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.081976][ T5876] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor [ 269.125983][ T5876] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000C/input/input24 [ 269.167548][ T2933] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.174709][ T2933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.395392][ T5876] keytouch 0003:0926:3333.000C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 269.444068][ T8042] netlink: 'syz.4.557': attribute type 2 has an invalid length. [ 269.667879][ T5939] bridge_slave_1: left allmulticast mode [ 269.681093][ T5939] bridge_slave_1: left promiscuous mode [ 269.694903][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.793277][ T5939] bridge_slave_0: left allmulticast mode [ 269.823906][ T5939] bridge_slave_0: left promiscuous mode [ 269.829665][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.381505][ T5939] bridge_slave_1: left allmulticast mode [ 270.394036][ T5939] bridge_slave_1: left promiscuous mode [ 270.399755][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.418410][ T5939] bridge_slave_0: left allmulticast mode [ 270.427306][ T5939] bridge_slave_0: left promiscuous mode [ 270.433009][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.449200][ T5947] usb 3-1: USB disconnect, device number 27 [ 270.586235][ T5939] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 271.003296][ T8063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.561'. [ 271.734675][ T5939] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.748366][ T5939] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.757713][ T5939] bond0 (unregistering): Released all slaves [ 271.826143][ T5939] bond1 (unregistering): Released all slaves [ 271.894680][ T5939] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.903593][ T5939] bond_slave_0: left promiscuous mode [ 271.920605][ T5939] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.932816][ T5939] bond_slave_1: left promiscuous mode [ 271.945864][ T5939] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 271.956834][ T30] audit: type=1400 audit(1745176931.502:415): avc: denied { allowed } for pid=8070 comm="syz.2.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 271.977755][ T5939] dummy0: left promiscuous mode [ 271.984086][ T30] audit: type=1400 audit(1745176931.522:416): avc: denied { getopt } for pid=8070 comm="syz.2.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 272.011667][ T5939] bond0 (unregistering): Released all slaves [ 272.029966][ T5939] bond1 (unregistering): Released all slaves [ 272.047190][ T7856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.098684][ T7870] veth0_vlan: entered promiscuous mode [ 272.159868][ T7870] veth1_vlan: entered promiscuous mode [ 272.212453][ T5939] tipc: Left network mode [ 272.227994][ T7858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.249649][ T5939] tipc: Left network mode [ 272.269398][ T5939] IPVS: stopping backup sync thread 6655 ... [ 272.965538][ T7870] veth0_macvtap: entered promiscuous mode [ 272.976956][ T30] audit: type=1400 audit(1745176932.522:417): avc: denied { append } for pid=8070 comm="syz.2.563" name="event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 272.987902][ T7870] veth1_macvtap: entered promiscuous mode [ 273.192128][ T7870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.203551][ T7870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.344809][ T7870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.594322][ T30] audit: type=1400 audit(1745176933.132:418): avc: denied { ioctl } for pid=8100 comm="syz.4.566" path="socket:[18124]" dev="sockfs" ino=18124 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 273.625071][ T7856] veth0_vlan: entered promiscuous mode [ 273.637031][ T7870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.662784][ T7870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.676682][ T7870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.689658][ T7870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.702602][ T7870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.721309][ T7870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.733763][ T7870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.819889][ T7856] veth1_vlan: entered promiscuous mode [ 274.832857][ T7870] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.842222][ T7870] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.852210][ T7870] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.861158][ T7870] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.611485][ T7858] veth0_vlan: entered promiscuous mode [ 275.837915][ T8132] batman_adv: batadv0: Adding interface: dummy0 [ 275.847646][ T8132] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.880177][ T8132] batman_adv: batadv0: Interface activated: dummy0 [ 275.917772][ T8133] net_ratelimit: 11 callbacks suppressed [ 275.917785][ T8133] batadv0: mtu less than device minimum [ 275.931314][ T8133] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 275.942581][ T8133] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 275.953951][ T8133] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 275.965285][ T8133] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 275.974243][ T8132] IPv6: addrconf: prefix option has invalid lifetime [ 275.976441][ T8133] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 275.993561][ T8133] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 276.004903][ T8133] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 276.016224][ T8133] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 276.134736][ T7858] veth1_vlan: entered promiscuous mode [ 276.165508][ T7856] veth0_macvtap: entered promiscuous mode [ 276.210844][ T7856] veth1_macvtap: entered promiscuous mode [ 276.357480][ T8139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.573'. [ 276.366421][ T8139] netlink: 16 bytes leftover after parsing attributes in process `syz.4.573'. [ 276.450432][ T30] audit: type=1400 audit(1745176935.932:419): avc: denied { execute } for pid=8134 comm="syz.4.573" path=2F6D656D66643A3984DFA37B2E58537C4607A94EB825202864656C6574656429 dev="hugetlbfs" ino=18287 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 276.727160][ T7858] veth0_macvtap: entered promiscuous mode [ 276.757807][ T2933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.768569][ T7856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.784677][ T2933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.794267][ T7856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.804439][ T7856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.823318][ T7856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.843606][ T7856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.862038][ T5939] hsr_slave_0: left promiscuous mode [ 276.869729][ T5939] hsr_slave_1: left promiscuous mode [ 276.879489][ T5939] hsr_slave_0: left promiscuous mode [ 276.888362][ T5939] hsr_slave_1: left promiscuous mode [ 276.895140][ T5939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.902666][ T5939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.942416][ T5939] veth1_macvtap: left promiscuous mode [ 276.948301][ T5939] veth0_macvtap: left promiscuous mode [ 276.993911][ T5939] veth1_vlan: left promiscuous mode [ 277.008053][ T5939] veth0_vlan: left promiscuous mode [ 278.145122][ T8152] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 278.237150][ T30] audit: type=1400 audit(1745176937.782:420): avc: denied { map } for pid=8150 comm="syz.4.578" path="/dev/video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 278.313712][ T5939] veth1_macvtap: left promiscuous mode [ 278.332527][ T5939] veth0_macvtap: left promiscuous mode [ 278.353145][ T5939] veth1_vlan: left promiscuous mode [ 278.367405][ T5939] veth0_vlan: left promiscuous mode [ 278.987003][ T8163] ntfs3(nullb0): Primary boot signature is not NTFS. [ 278.994065][ T8163] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 279.427351][ T5939] team0 (unregistering): Port device team_slave_1 removed [ 279.458896][ T5939] team0 (unregistering): Port device team_slave_0 removed [ 279.793921][ T30] audit: type=1400 audit(1745176939.242:421): avc: denied { read write } for pid=8164 comm="syz.4.581" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 279.849674][ T30] audit: type=1400 audit(1745176939.242:422): avc: denied { open } for pid=8164 comm="syz.4.581" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 279.946210][ T30] audit: type=1400 audit(1745176939.472:423): avc: denied { write } for pid=5180 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 280.015053][ T30] audit: type=1400 audit(1745176939.472:424): avc: denied { remove_name } for pid=5180 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 280.039248][ T30] audit: type=1400 audit(1745176939.472:425): avc: denied { add_name } for pid=5180 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 281.289818][ T5939] team0 (unregistering): Port device team_slave_1 removed [ 281.320091][ T5939] team0 (unregistering): Port device team_slave_0 removed [ 281.616579][ T7858] veth1_macvtap: entered promiscuous mode [ 281.738612][ T7856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.764001][ T7856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.783997][ T7856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.800522][ T7856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.811340][ T7856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.832314][ T7856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.894695][ T7856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.921392][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.930108][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.048609][ T8184] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 282.063324][ T7856] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.077784][ T7856] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.086692][ T7856] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.109542][ T7856] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.247059][ T8190] netlink: 12 bytes leftover after parsing attributes in process `syz.4.587'. [ 282.544539][ T7858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.561404][ T7858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.573375][ T7858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.587039][ T7858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.596906][ T7858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.611716][ T7858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.622560][ T7858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.669061][ T7858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.699936][ T7858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.726632][ T7858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.768913][ T7858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.778997][ T7858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.805832][ T7858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.818632][ T7858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.830655][ T7858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.862334][ T7858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.280401][ T8208] netlink: 68 bytes leftover after parsing attributes in process `syz.7.527'. [ 283.410608][ T8202] Cannot find del_set index 4 as target [ 283.550768][ T7858] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.615859][ T7858] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.624738][ T7858] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.633445][ T7858] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.743981][ T5947] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 283.802722][ T2945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.847401][ T2945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.899393][ T5947] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 283.912261][ T5947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.955557][ T6783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.965251][ T5947] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 283.986459][ T6783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.005823][ T5947] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 284.015351][ T5947] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 284.044142][ T5947] usb 3-1: Manufacturer: syz [ 284.057087][ T5947] usb 3-1: config 0 descriptor?? [ 284.094804][ T6783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.123678][ T6783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.308482][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.366234][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.688469][ T5947] appleir 0003:05AC:8243.000D: unknown main item tag 0x0 [ 284.759008][ T5947] appleir 0003:05AC:8243.000D: No inputs registered, leaving [ 284.777302][ T5947] appleir 0003:05AC:8243.000D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 284.794115][ T30] audit: type=1400 audit(1745176944.322:426): avc: denied { sys_chroot } for pid=8229 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 285.287750][ T30] audit: type=1400 audit(1745176944.322:427): avc: denied { setgid } for pid=8229 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 285.448614][ T30] audit: type=1400 audit(1745176944.322:428): avc: denied { setrlimit } for pid=8229 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 285.532284][ T30] audit: type=1400 audit(1745176944.932:429): avc: denied { append } for pid=8200 comm="syz.2.589" name="hiddev0" dev="devtmpfs" ino=3007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 285.642638][ T8242] fuse: Unknown parameter 'r' [ 285.841001][ T5947] Process accounting resumed [ 285.851537][ T5923] usb 3-1: USB disconnect, device number 28 [ 286.083408][ T8252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.592'. [ 287.208462][ T30] audit: type=1400 audit(1745176946.752:430): avc: denied { ioctl } for pid=8267 comm="syz.2.597" path="socket:[20916]" dev="sockfs" ino=20916 ioctlcmd=0x64b9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 287.834022][ T5877] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 288.137873][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.157394][ T5877] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 288.168578][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.212986][ T5877] usb 3-1: config 0 descriptor?? [ 288.485562][ T5923] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 288.666782][ T5877] keytouch 0003:0926:3333.000E: fixing up Keytouch IEC report descriptor [ 288.667390][ T8317] 8021q: adding VLAN 0 to HW filter on device bond1 [ 288.686541][ T5877] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000E/input/input26 [ 288.689525][ T5923] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 288.737573][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.766053][ T8317] bond0: (slave bond1): Enslaving as an active interface with an up link [ 288.790295][ T5923] usb 6-1: config 0 descriptor?? [ 288.904355][ T5877] keytouch 0003:0926:3333.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 289.075465][ T8306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.096996][ T8306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.245540][ T30] audit: type=1400 audit(1745176948.772:431): avc: denied { bind } for pid=8305 comm="syz.5.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 289.743986][ T30] audit: type=1400 audit(1745176948.772:432): avc: denied { node_bind } for pid=8305 comm="syz.5.608" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 289.913053][ T5923] ath6kl: Failed to submit usb control message: -110 [ 289.929340][ T30] audit: type=1400 audit(1745176948.772:433): avc: denied { read } for pid=8305 comm="syz.5.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 289.950844][ T5923] ath6kl: unable to send the bmi data to the device: -110 [ 290.004007][ T5923] ath6kl: Unable to send get target info: -110 [ 290.022564][ T8347] netlink: 8 bytes leftover after parsing attributes in process `syz.6.613'. [ 290.032009][ T5923] ath6kl: Failed to init ath6kl core: -110 [ 290.059523][ T5923] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 290.799536][ T5923] usb 6-1: USB disconnect, device number 2 [ 291.374497][ T5923] usb 3-1: USB disconnect, device number 29 [ 291.586829][ T30] audit: type=1400 audit(1745176951.132:434): avc: denied { getopt } for pid=8365 comm="syz.5.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 292.183472][ T8391] hub 6-0:1.0: USB hub found [ 292.188615][ T8391] hub 6-0:1.0: 1 port detected [ 292.519969][ T30] audit: type=1400 audit(1745176952.062:435): avc: denied { setopt } for pid=8394 comm="syz.4.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 292.625493][ T8398] Driver unsupported XDP return value 0 on prog (id 79) dev N/A, expect packet loss! [ 292.656854][ T30] audit: type=1400 audit(1745176952.102:436): avc: denied { setopt } for pid=8397 comm="syz.2.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 292.757334][ T30] audit: type=1326 audit(1745176952.302:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8406 comm="syz.6.628" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f48d4f8e169 code=0x0 [ 292.963874][ T24] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 293.903879][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 293.904848][ T30] audit: type=1400 audit(1745176952.552:438): avc: denied { append } for pid=8406 comm="syz.6.628" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 294.237610][ T8427] xt_CT: You must specify a L4 protocol and not use inversions on it [ 294.797761][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.827099][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 294.918017][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 294.932362][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.324886][ T24] usb 3-1: Product: syz [ 295.329081][ T24] usb 3-1: Manufacturer: syz [ 295.334663][ T24] usb 3-1: SerialNumber: syz [ 296.546710][ T8448] FAULT_INJECTION: forcing a failure. [ 296.546710][ T8448] name failslab, interval 1, probability 0, space 0, times 0 [ 296.684324][ T8448] CPU: 1 UID: 0 PID: 8448 Comm: syz.4.637 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 296.684350][ T8448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 296.684360][ T8448] Call Trace: [ 296.684365][ T8448] [ 296.684371][ T8448] dump_stack_lvl+0x16c/0x1f0 [ 296.684398][ T8448] should_fail_ex+0x512/0x640 [ 296.684419][ T8448] should_failslab+0xc2/0x120 [ 296.684438][ T8448] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 296.684456][ T8448] ? skb_clone+0x190/0x3f0 [ 296.684477][ T8448] skb_clone+0x190/0x3f0 [ 296.684497][ T8448] netlink_deliver_tap+0xabd/0xd30 [ 296.684522][ T8448] netlink_unicast+0x5df/0x7f0 [ 296.684547][ T8448] ? __pfx_netlink_unicast+0x10/0x10 [ 296.684576][ T8448] netlink_sendmsg+0x8d1/0xdd0 [ 296.684604][ T8448] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.684635][ T8448] ____sys_sendmsg+0xa95/0xc70 [ 296.684661][ T8448] ? copy_msghdr_from_user+0x10a/0x160 [ 296.684680][ T8448] ? __pfx_____sys_sendmsg+0x10/0x10 [ 296.684715][ T8448] ___sys_sendmsg+0x134/0x1d0 [ 296.684735][ T8448] ? __pfx____sys_sendmsg+0x10/0x10 [ 296.684785][ T8448] __sys_sendmsg+0x16d/0x220 [ 296.684806][ T8448] ? __pfx___sys_sendmsg+0x10/0x10 [ 296.684832][ T8448] ? rcu_is_watching+0x12/0xc0 [ 296.684858][ T8448] do_syscall_64+0xcd/0x260 [ 296.684882][ T8448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.684899][ T8448] RIP: 0033:0x7f325638e169 [ 296.684912][ T8448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.684933][ T8448] RSP: 002b:00007f3257202038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 296.684950][ T8448] RAX: ffffffffffffffda RBX: 00007f32565b5fa0 RCX: 00007f325638e169 [ 296.684960][ T8448] RDX: 0000000020008000 RSI: 00002000000001c0 RDI: 0000000000000006 [ 296.684970][ T8448] RBP: 00007f3257202090 R08: 0000000000000000 R09: 0000000000000000 [ 296.684980][ T8448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.684990][ T8448] R13: 0000000000000000 R14: 00007f32565b5fa0 R15: 00007ffd0b3efbd8 [ 296.685013][ T8448] [ 296.918270][ T24] usb 3-1: 0:2 : does not exist [ 296.923195][ T24] usb 3-1: unit 6 not found! [ 297.079527][ T8457] overlay: ./file0 is not a directory [ 297.131556][ T24] usb 3-1: USB disconnect, device number 30 [ 297.607637][ T8449] infiniband s: RDMA CMA: cma_listen_on_dev, error -98 [ 297.628381][ T30] audit: type=1400 audit(1745176957.142:439): avc: denied { bind } for pid=8444 comm="syz.5.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 297.864854][ T8336] udevd[8336]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 298.484054][ T5923] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 298.691599][ T5923] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 4 [ 298.710988][ T5923] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 298.721757][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.740251][ T5923] usb 6-1: config 0 descriptor?? [ 298.774457][ T5945] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 298.995646][ T5945] usb 5-1: Using ep0 maxpacket: 16 [ 299.006598][ T5945] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.025502][ T5945] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 299.087505][ T5945] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 299.119326][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.267132][ T5945] usb 5-1: Product: syz [ 299.275352][ T5945] usb 5-1: Manufacturer: syz [ 299.280615][ T5945] usb 5-1: SerialNumber: syz [ 299.380267][ T8500] xt_CT: You must specify a L4 protocol and not use inversions on it [ 299.758963][ T5945] usb 5-1: 0:2 : does not exist [ 299.780448][ T5945] usb 5-1: unit 6 not found! [ 299.815120][ T5945] usb 5-1: USB disconnect, device number 30 [ 300.145479][ T8509] netlink: 'syz.7.649': attribute type 1 has an invalid length. [ 300.197395][ T8511] netlink: 8 bytes leftover after parsing attributes in process `syz.7.649'. [ 300.235107][ T8336] udevd[8336]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 300.359304][ T8509] hsr_slave_0: left promiscuous mode [ 300.409467][ T8509] hsr_slave_1: left promiscuous mode [ 301.126435][ T8526] wireguard0: entered promiscuous mode [ 301.132025][ T8526] wireguard0: entered allmulticast mode [ 301.145927][ T30] audit: type=1400 audit(1745176960.692:440): avc: denied { create } for pid=8527 comm="syz.7.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 301.197213][ T8532] usb 6-1: USB disconnect, device number 3 [ 301.226800][ T8532] hub 6-0:1.0: USB hub found [ 301.231804][ T8532] hub 6-0:1.0: 1 port detected [ 301.400666][ T1776] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 302.665819][ T8552] netlink: 'syz.7.657': attribute type 2 has an invalid length. [ 302.992363][ T5947] IPVS: starting estimator thread 0... [ 303.088505][ T8571] netlink: 4 bytes leftover after parsing attributes in process `syz.6.661'. [ 303.119557][ T8568] IPVS: using max 75 ests per chain, 180000 per kthread [ 304.941775][ T8599] ======================================================= [ 304.941775][ T8599] WARNING: The mand mount option has been deprecated and [ 304.941775][ T8599] and is ignored by this kernel. Remove the mand [ 304.941775][ T8599] option from the mount to silence this warning. [ 304.941775][ T8599] ======================================================= [ 305.347750][ T30] audit: type=1400 audit(1745176964.892:441): avc: denied { mount } for pid=8598 comm="syz.6.665" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 305.397839][ T8599] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 305.417354][ T30] audit: type=1400 audit(1745176964.922:442): avc: denied { mounton } for pid=8598 comm="syz.6.665" path="/20/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 305.439380][ T8599] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 305.477604][ T8607] netlink: 8 bytes leftover after parsing attributes in process `syz.7.668'. [ 305.525793][ T30] audit: type=1400 audit(1745176964.932:443): avc: denied { create } for pid=8598 comm="syz.6.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 305.545943][ C0] vkms_vblank_simulate: vblank timer overrun [ 305.605454][ T30] audit: type=1400 audit(1745176964.942:444): avc: denied { unmount } for pid=8604 comm="syz.5.667" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 305.625094][ T5945] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 305.708176][ T30] audit: type=1400 audit(1745176965.202:445): avc: denied { write } for pid=8614 comm="syz.7.671" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 305.730944][ C0] vkms_vblank_simulate: vblank timer overrun [ 306.116664][ T5945] usb 5-1: Using ep0 maxpacket: 16 [ 306.134772][ T30] audit: type=1400 audit(1745176965.202:446): avc: denied { unmount } for pid=7856 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 306.166550][ T5945] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 306.199281][ T5945] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 306.203889][ T30] audit: type=1400 audit(1745176965.672:447): avc: denied { getopt } for pid=8619 comm="syz.2.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 306.263874][ T5945] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 306.295785][ T5945] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 306.319330][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.356727][ T5945] usb 5-1: Product: syz [ 306.374305][ T5945] usb 5-1: Manufacturer: syz [ 306.382312][ T5945] usb 5-1: SerialNumber: syz [ 306.641994][ T8603] net_ratelimit: 11 callbacks suppressed [ 306.642012][ T8603] openvswitch: netlink: Flow key attribute not present in set flow. [ 306.713723][ T30] audit: type=1400 audit(1745176966.252:448): avc: denied { name_bind } for pid=8614 comm="syz.7.671" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 306.738284][ T30] audit: type=1400 audit(1745176966.252:449): avc: denied { setopt } for pid=8614 comm="syz.7.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 306.847409][ T8636] netlink: 'syz.2.675': attribute type 1 has an invalid length. [ 306.873951][ T8636] netlink: 216 bytes leftover after parsing attributes in process `syz.2.675'. [ 306.937106][ T5945] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 307.323478][ T8644] netlink: 'syz.5.676': attribute type 1 has an invalid length. [ 307.372259][ T8644] netlink: 216 bytes leftover after parsing attributes in process `syz.5.676'. [ 308.382721][ T8603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.404166][ T8603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.843172][ T5945] usb 5-1: 2:1: cannot get freq at ep 0x82 [ 308.886165][ T5945] usb 5-1: USB disconnect, device number 31 [ 308.987448][ T30] audit: type=1400 audit(1745176968.522:450): avc: denied { bind } for pid=8663 comm="syz.2.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 309.753965][ T8672] netlink: 'syz.6.681': attribute type 1 has an invalid length. [ 309.789487][ T8672] 8021q: adding VLAN 0 to HW filter on device bond3 [ 309.860244][ T8672] ip6erspan0: entered promiscuous mode [ 309.867486][ T8672] bond3: (slave ip6erspan0): making interface the new active one [ 309.876724][ T8672] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 309.997646][ T8672] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 310.137818][ T8686] 9pnet_fd: Insufficient options for proto=fd [ 311.753069][ T30] audit: type=1400 audit(1745176971.292:451): avc: denied { write } for pid=8705 comm="syz.7.687" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 311.984595][ T5947] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 312.036811][ T8703] wireguard0: entered promiscuous mode [ 312.216945][ T5947] usb 8-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 312.228751][ T8703] wireguard0: entered allmulticast mode [ 312.255399][ T5947] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.294261][ T5947] usb 8-1: Product: syz [ 312.313899][ T5947] usb 8-1: Manufacturer: syz [ 312.342943][ T5947] usb 8-1: SerialNumber: syz [ 312.384798][ T5947] usb 8-1: config 0 descriptor?? [ 312.457887][ T30] audit: type=1400 audit(1745176972.002:452): avc: denied { append } for pid=8709 comm="syz.6.686" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 312.537622][ T30] audit: type=1400 audit(1745176972.082:453): avc: denied { map } for pid=8709 comm="syz.6.686" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 312.599673][ T5947] cx82310_eth 8-1:0.0: probe with driver cx82310_eth failed with error -22 [ 312.879939][ T8720] netlink: 'syz.4.689': attribute type 1 has an invalid length. [ 312.894252][ T8720] netlink: 216 bytes leftover after parsing attributes in process `syz.4.689'. [ 313.015397][ T5947] cxacru 8-1:0.0: usbatm_usb_probe: bind failed: -19! [ 313.611394][ T8734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.632200][ T8735] netlink: 788 bytes leftover after parsing attributes in process `syz.2.688'. [ 313.677246][ T8734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.831547][ T8738] netlink: 'syz.5.691': attribute type 2 has an invalid length. [ 313.851305][ T30] audit: type=1400 audit(1745176973.382:454): avc: denied { name_bind } for pid=8727 comm="syz.6.690" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 315.008859][ T8773] program syz.2.698 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 315.157327][ T5947] usb 8-1: USB disconnect, device number 2 [ 315.714894][ T8779] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.722794][ T8779] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.755337][ T8779] bridge0: entered allmulticast mode [ 315.848519][ T8779] bridge_slave_1: left allmulticast mode [ 315.874095][ T8779] bridge_slave_1: left promiscuous mode [ 315.914932][ T8779] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.318369][ T8779] bridge_slave_0: left allmulticast mode [ 316.328288][ T8779] bridge_slave_0: left promiscuous mode [ 316.335466][ T8779] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.710636][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.023173][ T8787] netlink: 'syz.4.702': attribute type 1 has an invalid length. [ 317.057054][ T8787] netlink: 216 bytes leftover after parsing attributes in process `syz.4.702'. [ 317.356729][ T8789] veth0_vlan: entered allmulticast mode [ 317.369997][ T8790] veth0_vlan: left promiscuous mode [ 317.376400][ T8790] veth0_vlan: entered promiscuous mode [ 317.395186][ T8791] lo speed is unknown, defaulting to 1000 [ 318.797775][ T8793] wireguard0: entered promiscuous mode [ 318.803330][ T8793] wireguard0: entered allmulticast mode [ 319.459893][ T8813] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=8813 comm=syz.5.705 [ 319.472533][ T8813] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=8813 comm=syz.5.705 [ 319.508138][ T8813] netlink: 'syz.5.705': attribute type 10 has an invalid length. [ 319.515913][ T5945] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 319.548078][ T8813] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.555368][ T8813] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.579443][ T30] audit: type=1400 audit(1745176979.052:455): avc: denied { listen } for pid=8808 comm="syz.5.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 319.628117][ T8813] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.635330][ T8813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.643598][ T8813] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.650675][ T8813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.706796][ T5945] usb 3-1: no configurations [ 319.716740][ T5945] usb 3-1: can't read configurations, error -22 [ 319.749305][ T8813] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 319.874077][ T5945] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 319.874773][ T8817] netlink: 'syz.4.708': attribute type 5 has an invalid length. [ 320.084666][ T5945] usb 3-1: no configurations [ 320.108283][ T5945] usb 3-1: can't read configurations, error -22 [ 320.241789][ T8833] netlink: 8 bytes leftover after parsing attributes in process `syz.7.710'. [ 320.250649][ T8833] netlink: 4 bytes leftover after parsing attributes in process `syz.7.710'. [ 320.259814][ T8833] netlink: 'syz.7.710': attribute type 7 has an invalid length. [ 320.358785][ T80] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 320.366876][ T30] audit: type=1400 audit(1745176979.762:456): avc: denied { create } for pid=8828 comm="syz.7.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 320.846139][ T5945] usb usb3-port1: attempt power cycle [ 320.968448][ T30] audit: type=1400 audit(1745176979.772:457): avc: denied { write } for pid=8828 comm="syz.7.710" path="socket:[22579]" dev="sockfs" ino=22579 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 321.078225][ T80] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.090281][ T80] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 321.100306][ T30] audit: type=1400 audit(1745176979.772:458): avc: denied { nlmsg_write } for pid=8828 comm="syz.7.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 321.131556][ T80] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.270480][ T5945] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 321.404866][ T80] usb 5-1: config 0 descriptor?? [ 321.453312][ T80] xbox_remote_probe: Unexpected endpoint_in [ 321.454733][ T5945] usb 3-1: no configurations [ 321.551236][ T5945] usb 3-1: can't read configurations, error -22 [ 321.564552][ T8848] netlink: 12 bytes leftover after parsing attributes in process `syz.5.716'. [ 321.632279][ T80] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 321.661104][ T8850] netlink: 4 bytes leftover after parsing attributes in process `syz.7.717'. [ 321.690955][ T80] usb 5-1: USB disconnect, device number 32 [ 321.691871][ T8850] netlink: 12 bytes leftover after parsing attributes in process `syz.7.717'. [ 321.706071][ T5945] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 321.754400][ T5945] usb 3-1: no configurations [ 321.759158][ T5945] usb 3-1: can't read configurations, error -22 [ 321.984047][ T5945] usb usb3-port1: unable to enumerate USB device [ 322.023899][ T5904] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 322.193888][ T5904] usb 6-1: Using ep0 maxpacket: 32 [ 322.207978][ T5904] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 322.222366][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.245260][ T5904] usb 6-1: Product: syz [ 322.253861][ T5904] usb 6-1: Manufacturer: syz [ 322.270063][ T5904] usb 6-1: SerialNumber: syz [ 322.286765][ T5904] usb 6-1: config 0 descriptor?? [ 322.377120][ T80] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 322.407755][ T5904] usb 6-1: no audio or video endpoints found [ 322.407885][ T8870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.720'. [ 322.892788][ T8873] FAULT_INJECTION: forcing a failure. [ 322.892788][ T8873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.908408][ T8873] CPU: 0 UID: 0 PID: 8873 Comm: syz.2.720 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 322.908424][ T8873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 322.908430][ T8873] Call Trace: [ 322.908434][ T8873] [ 322.908437][ T8873] dump_stack_lvl+0x16c/0x1f0 [ 322.908456][ T8873] should_fail_ex+0x512/0x640 [ 322.908469][ T8873] _copy_from_user+0x2e/0xd0 [ 322.908482][ T8873] copy_msghdr_from_user+0x98/0x160 [ 322.908496][ T8873] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 322.908514][ T8873] ___sys_sendmsg+0xfe/0x1d0 [ 322.908527][ T8873] ? __pfx____sys_sendmsg+0x10/0x10 [ 322.908554][ T8873] __sys_sendmsg+0x16d/0x220 [ 322.908567][ T8873] ? __pfx___sys_sendmsg+0x10/0x10 [ 322.908583][ T8873] ? rcu_is_watching+0x12/0xc0 [ 322.908600][ T8873] do_syscall_64+0xcd/0x260 [ 322.908616][ T8873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.908626][ T8873] RIP: 0033:0x7fc90818e169 [ 322.908635][ T8873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.908645][ T8873] RSP: 002b:00007fc908f78038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.908654][ T8873] RAX: ffffffffffffffda RBX: 00007fc9083b6080 RCX: 00007fc90818e169 [ 322.908661][ T8873] RDX: 0000000000000010 RSI: 0000200000001300 RDI: 0000000000000003 [ 322.908667][ T8873] RBP: 00007fc908f78090 R08: 0000000000000000 R09: 0000000000000000 [ 322.908673][ T8873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.908679][ T8873] R13: 0000000000000000 R14: 00007fc9083b6080 R15: 00007ffc03453948 [ 322.908691][ T8873] [ 323.122105][ T7410] usb 6-1: USB disconnect, device number 5 [ 323.210053][ T30] audit: type=1400 audit(1745176982.752:459): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 323.230203][ T80] usb 8-1: Using ep0 maxpacket: 32 [ 323.285453][ T80] usb 8-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 323.313923][ T80] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.371191][ T30] audit: type=1400 audit(1745176982.902:460): avc: denied { bind } for pid=8875 comm="syz.6.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 323.385102][ T8886] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 323.404147][ T80] usb 8-1: Product: syz [ 323.408380][ T80] usb 8-1: Manufacturer: syz [ 323.413300][ T80] usb 8-1: SerialNumber: syz [ 323.434969][ T30] audit: type=1400 audit(1745176982.902:461): avc: denied { bind } for pid=8875 comm="syz.6.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 323.485547][ T80] usb 8-1: config 0 descriptor?? [ 323.570162][ T80] usb 8-1: no audio or video endpoints found [ 323.613618][ T30] audit: type=1400 audit(1745176982.912:462): avc: denied { setopt } for pid=8875 comm="syz.6.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 323.817843][ T24] usb 8-1: USB disconnect, device number 3 [ 324.128893][ T8900] netdevsim netdevsim4 ªªªªª»: renamed from netdevsim0 (while UP) [ 324.214310][ T8902] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 324.223102][ T8902] overlayfs: missing 'lowerdir' [ 324.615141][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033009000: rx timeout, send abort [ 324.706949][ T8892] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 324.876774][ T8892] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 324.955993][ T8892] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 324.963496][ T8892] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 325.109225][ T8892] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 325.116464][ T8892] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 325.124507][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033009000: abort rx timeout. Force session deactivation [ 325.190380][ T8892] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 325.224762][ T5945] hid-generic C990:0003:0000.000F: unknown main item tag 0x0 [ 325.233980][ T8892] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 325.262669][ T5945] hid-generic C990:0003:0000.000F: unknown main item tag 0x0 [ 325.272486][ T8892] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 325.279582][ T8892] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 325.301368][ T5945] hid-generic C990:0003:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 325.667644][ T2945] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.743897][ T5945] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 325.818657][ T8933] netlink: 16 bytes leftover after parsing attributes in process `syz.5.731'. [ 325.836652][ T2945] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.948009][ T5945] usb 8-1: no configurations [ 325.973891][ T5945] usb 8-1: can't read configurations, error -22 [ 326.001725][ T2945] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.008655][ T8940] netlink: 12 bytes leftover after parsing attributes in process `syz.4.734'. [ 326.103918][ T80] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 326.165829][ T5945] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 326.344191][ T80] usb 6-1: Using ep0 maxpacket: 16 [ 326.407365][ T80] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 326.437780][ T80] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 25959, setting to 1024 [ 326.452907][ T2945] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.499352][ T80] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 326.519839][ T8950] netlink: 'syz.2.736': attribute type 5 has an invalid length. [ 326.524040][ T80] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.553868][ T80] usb 6-1: Product: syz [ 326.558053][ T80] usb 6-1: Manufacturer: syz [ 326.559938][ T5945] usb 8-1: no configurations [ 326.574031][ T5945] usb 8-1: can't read configurations, error -22 [ 326.583953][ T80] usb 6-1: SerialNumber: syz [ 326.590960][ T5945] usb usb8-port1: attempt power cycle [ 326.592635][ T80] usb 6-1: config 0 descriptor?? [ 326.635622][ T80] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 326.673887][ T80] em28xx 6-1:0.0: DVB interface 0 found: isoc [ 326.684267][ T5923] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 326.738452][ T2945] bridge_slave_1: left allmulticast mode [ 326.746376][ T2945] bridge_slave_1: left promiscuous mode [ 326.752129][ T2945] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.768505][ T7410] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 326.788139][ T2945] bridge_slave_0: left allmulticast mode [ 326.797280][ T2945] bridge_slave_0: left promiscuous mode [ 326.805826][ T2945] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.263995][ T5923] usb 5-1: Using ep0 maxpacket: 32 [ 327.273117][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 327.287857][ T5824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 327.296288][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 327.306029][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 327.313103][ T5923] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 327.322268][ T5945] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 327.333537][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.342452][ T5824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 327.352518][ T5923] usb 5-1: Product: syz [ 327.352613][ T7410] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.369042][ T5923] usb 5-1: Manufacturer: syz [ 327.370575][ T5139] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 327.373672][ T5923] usb 5-1: SerialNumber: syz [ 327.382468][ T5139] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 327.386641][ T7410] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 327.394307][ T5139] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 327.402654][ T5945] usb 8-1: no configurations [ 327.411525][ T5139] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 327.414778][ T7410] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.423493][ T5139] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 327.428745][ T5945] usb 8-1: can't read configurations, error -22 [ 327.442658][ T5923] usb 5-1: config 0 descriptor?? [ 327.491902][ T2945] bond3 (unregistering): (slave ip6erspan0): Releasing active interface [ 327.495179][ T5923] usb 5-1: no audio or video endpoints found [ 327.514667][ T7410] usb 3-1: config 0 descriptor?? [ 327.525981][ T7410] xbox_remote_probe: Unexpected endpoint_in [ 327.532373][ T7410] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 327.643978][ T5945] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 327.676941][ T5945] usb 8-1: no configurations [ 327.695241][ T5945] usb 8-1: can't read configurations, error -22 [ 327.701769][ T5945] usb usb8-port1: unable to enumerate USB device [ 327.777870][ T2945] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.792452][ T2945] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.802164][ T2945] bond0 (unregistering): (slave bond1): Releasing backup interface [ 327.804222][ T80] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 327.816713][ T2945] bond0 (unregistering): Released all slaves [ 327.889580][ T2945] bond1 (unregistering): Released all slaves [ 327.904899][ T2945] bond2 (unregistering): Released all slaves [ 327.907433][ T80] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 327.929129][ T80] em28xx 6-1:0.0: board has no eeprom [ 327.980468][ T2945] bond3 (unregistering): Released all slaves [ 327.994314][ T5905] usb 5-1: USB disconnect, device number 33 [ 327.997660][ T5945] usb 3-1: USB disconnect, device number 35 [ 328.006248][ T80] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 328.021382][ T80] em28xx 6-1:0.0: dvb set to isoc mode. [ 328.027941][ T5877] em28xx 6-1:0.0: Binding DVB extension [ 328.068415][ T8959] lo speed is unknown, defaulting to 1000 [ 328.172252][ T5877] em28xx 6-1:0.0: Registering input extension [ 328.330126][ T2945] hsr_slave_0: left promiscuous mode [ 328.337705][ T2945] hsr_slave_1: left promiscuous mode [ 328.343527][ T2945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.350969][ T2945] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.360265][ T2945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.367713][ T2945] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.387917][ T2945] veth1_macvtap: left promiscuous mode [ 328.393445][ T2945] veth0_macvtap: left promiscuous mode [ 328.400081][ T2945] veth1_vlan: left promiscuous mode [ 328.406716][ T2945] veth0_vlan: left promiscuous mode [ 328.625217][ T5877] usb 6-1: USB disconnect, device number 6 [ 328.640974][ T5877] em28xx 6-1:0.0: Disconnecting em28xx [ 328.713987][ T5877] em28xx 6-1:0.0: Closing input extension [ 328.958306][ T5877] em28xx 6-1:0.0: Freeing device [ 329.154599][ T8993] ntfs3(nullb0): Primary boot signature is not NTFS. [ 329.161397][ T8993] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 329.636426][ T5824] Bluetooth: hci0: command tx timeout [ 330.078754][ T2945] team0 (unregistering): Port device team_slave_1 removed [ 330.109166][ T2945] team0 (unregistering): Port device team_slave_0 removed [ 330.164873][ T7410] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 330.324217][ T7410] usb 3-1: Using ep0 maxpacket: 32 [ 330.343702][ T7410] usb 3-1: config 0 interface 0 has no altsetting 0 [ 330.357202][ T7410] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 330.366584][ T7410] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.383197][ T7410] usb 3-1: Product: syz [ 330.388338][ T7410] usb 3-1: Manufacturer: syz [ 330.397377][ T7410] usb 3-1: SerialNumber: syz [ 330.412720][ T7410] usb 3-1: config 0 descriptor?? [ 330.560641][ T8994] tipc: Started in network mode [ 330.565548][ T8994] tipc: Node identity 4, cluster identity 4711 [ 330.571685][ T8994] tipc: Node number set to 4 [ 330.768559][ T30] audit: type=1400 audit(1745176990.312:463): avc: denied { bind } for pid=9011 comm="syz.7.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 330.800624][ T9005] wireguard0: entered promiscuous mode [ 330.813042][ T9005] wireguard0: entered allmulticast mode [ 330.821438][ T30] audit: type=1400 audit(1745176990.362:464): avc: denied { listen } for pid=9011 comm="syz.7.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 330.824336][ T9012] netlink: 84 bytes leftover after parsing attributes in process `syz.7.745'. [ 330.841488][ T30] audit: type=1400 audit(1745176990.362:465): avc: denied { ioctl } for pid=9011 comm="syz.7.745" path="socket:[22310]" dev="sockfs" ino=22310 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 330.884569][ T7410] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 331.004156][ T5945] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 331.133534][ T8959] chnl_net:caif_netlink_parms(): no params data found [ 331.174038][ T5945] usb 6-1: Using ep0 maxpacket: 32 [ 331.181847][ T5945] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 331.191409][ T5945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.206362][ T5945] usb 6-1: config 0 descriptor?? [ 331.285501][ T7410] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 331.548927][ T5945] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 331.581408][ T5945] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 331.611605][ T5945] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 331.665125][ T5945] usb 6-1: media controller created [ 331.729492][ T5945] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 331.744335][ T5824] Bluetooth: hci0: command tx timeout [ 331.832824][ T2945] IPVS: stop unused estimator thread 0... [ 331.857898][ T24] usb 3-1: USB disconnect, device number 36 [ 332.617086][ T9040] netlink: 12 bytes leftover after parsing attributes in process `syz.4.747'. [ 332.632922][ T8959] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.644157][ T8959] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.651369][ T8959] bridge_slave_0: entered allmulticast mode [ 332.658654][ T8959] bridge_slave_0: entered promiscuous mode [ 332.674091][ T8959] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.683381][ T8959] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.691014][ T8959] bridge_slave_1: entered allmulticast mode [ 332.698191][ T8959] bridge_slave_1: entered promiscuous mode [ 332.748581][ T8959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.760147][ T8959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.796106][ T8959] team0: Port device team_slave_0 added [ 332.804814][ T8959] team0: Port device team_slave_1 added [ 332.829995][ T8959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.837548][ T8959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.863722][ T8959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.877094][ T8959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.884732][ T8959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.911611][ T8959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.964255][ T5877] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 332.983004][ T8959] hsr_slave_0: entered promiscuous mode [ 332.989794][ T8959] hsr_slave_1: entered promiscuous mode [ 332.998707][ T8959] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 333.006301][ T8959] Cannot create hsr debugfs directory [ 333.074426][ T5945] az6027: usb out operation failed. (-71) [ 333.083319][ T5945] stb0899_attach: Driver disabled by Kconfig [ 333.108481][ T5945] az6027: no front-end attached [ 333.108481][ T5945] [ 333.134428][ T5877] usb 5-1: Using ep0 maxpacket: 32 [ 333.134566][ T5945] az6027: usb out operation failed. (-71) [ 333.148078][ T5877] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 333.158368][ T5945] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 333.166263][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.176214][ T5945] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input29 [ 333.187389][ T5877] usb 5-1: Product: syz [ 333.187406][ T5877] usb 5-1: Manufacturer: syz [ 333.205739][ T5877] usb 5-1: SerialNumber: syz [ 333.210392][ T5945] dvb-usb: schedule remote query interval to 400 msecs. [ 333.212737][ T5877] usb 5-1: config 0 descriptor?? [ 333.232469][ T5877] usb 5-1: no audio or video endpoints found [ 333.244116][ T5945] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 333.295411][ T5945] usb 6-1: USB disconnect, device number 7 [ 333.469218][ T5945] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 333.485236][ T5877] usb 5-1: USB disconnect, device number 34 [ 333.749298][ T9058] veth0_vlan: entered allmulticast mode [ 333.806004][ T9058] veth0_vlan: left promiscuous mode [ 333.817653][ T9058] veth0_vlan: entered promiscuous mode [ 333.946944][ T9058] lo speed is unknown, defaulting to 1000 [ 334.093400][ T5824] Bluetooth: hci0: command tx timeout [ 334.101901][ T8959] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 334.237434][ T8959] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 334.270333][ T8959] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 334.294559][ T8959] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 334.512249][ T30] audit: type=1400 audit(1745176994.052:466): avc: denied { getopt } for pid=9067 comm="syz.2.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 334.646574][ T9073] block device autoloading is deprecated and will be removed. [ 334.678230][ T9070] md: md2 stopped. [ 334.682123][ T30] audit: type=1400 audit(1745176994.102:467): avc: denied { map } for pid=9065 comm="syz.5.754" path="socket:[23594]" dev="sockfs" ino=23594 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 334.838436][ T30] audit: type=1400 audit(1745176994.102:468): avc: denied { read } for pid=9065 comm="syz.5.754" path="socket:[23594]" dev="sockfs" ino=23594 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 334.863706][ T30] audit: type=1400 audit(1745176994.132:469): avc: denied { read } for pid=9067 comm="syz.2.755" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 334.885792][ T30] audit: type=1400 audit(1745176994.132:470): avc: denied { open } for pid=9067 comm="syz.2.755" path="/152/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 334.909308][ T30] audit: type=1400 audit(1745176994.222:471): avc: denied { ioctl } for pid=9067 comm="syz.2.755" path="/152/file0/file0" dev="fuse" ino=64 ioctlcmd=0x932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 334.978980][ T9082] ntfs3(nullb0): Primary boot signature is not NTFS. [ 334.986183][ T9082] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 335.481476][ T8959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.522094][ T9089] FAULT_INJECTION: forcing a failure. [ 335.522094][ T9089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.552116][ T9089] CPU: 0 UID: 0 PID: 9089 Comm: syz.2.757 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 335.552141][ T9089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 335.552151][ T9089] Call Trace: [ 335.552157][ T9089] [ 335.552164][ T9089] dump_stack_lvl+0x16c/0x1f0 [ 335.552191][ T9089] should_fail_ex+0x512/0x640 [ 335.552213][ T9089] _copy_to_user+0x32/0xd0 [ 335.552235][ T9089] simple_read_from_buffer+0xcb/0x170 [ 335.552264][ T9089] proc_fail_nth_read+0x197/0x270 [ 335.552290][ T9089] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 335.552317][ T9089] ? rw_verify_area+0xcf/0x680 [ 335.552339][ T9089] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 335.552365][ T9089] vfs_read+0x1de/0xc70 [ 335.552393][ T9089] ? __pfx___mutex_lock+0x10/0x10 [ 335.552415][ T9089] ? __pfx_vfs_read+0x10/0x10 [ 335.552446][ T9089] ? __fget_files+0x20e/0x3c0 [ 335.552469][ T9089] ksys_read+0x12a/0x240 [ 335.552484][ T9089] ? __pfx_ksys_read+0x10/0x10 [ 335.552506][ T9089] ? rcu_is_watching+0x12/0xc0 [ 335.552534][ T9089] do_syscall_64+0xcd/0x260 [ 335.552559][ T9089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.552576][ T9089] RIP: 0033:0x7fc90818cb7c [ 335.552590][ T9089] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 335.552606][ T9089] RSP: 002b:00007fc908f99030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 335.552621][ T9089] RAX: ffffffffffffffda RBX: 00007fc9083b5fa0 RCX: 00007fc90818cb7c [ 335.552632][ T9089] RDX: 000000000000000f RSI: 00007fc908f990a0 RDI: 0000000000000003 [ 335.552642][ T9089] RBP: 00007fc908f99090 R08: 0000000000000000 R09: 0000000000000000 [ 335.552652][ T9089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.552661][ T9089] R13: 0000000000000000 R14: 00007fc9083b5fa0 R15: 00007ffc03453948 [ 335.552683][ T9089] [ 335.656043][ T8959] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.658083][ C0] vkms_vblank_simulate: vblank timer overrun [ 335.751460][ C0] vkms_vblank_simulate: vblank timer overrun [ 335.757423][ C0] hrtimer: interrupt took 203617048 ns [ 335.789733][ T8959] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 335.800139][ T8959] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 335.857441][ C0] vkms_vblank_simulate: vblank timer overrun [ 335.873796][ T2945] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.880926][ T2945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.891215][ T2945] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.898329][ T2945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.066897][ T9105] ptrace attach of "./syz-executor exec"[5826] was attempted by "./syz-executor exec"[9105] [ 336.090926][ T9105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.761'. [ 336.254042][ T5824] Bluetooth: hci0: command tx timeout [ 336.730115][ T8959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.801076][ T9114] Cannot find del_set index 4 as target [ 336.883185][ T9122] netlink: 4 bytes leftover after parsing attributes in process `syz.7.765'. [ 336.914900][ T9122] netlink: 12 bytes leftover after parsing attributes in process `syz.7.765'. [ 337.082855][ T30] audit: type=1400 audit(1745176996.622:472): avc: denied { bind } for pid=9132 comm="syz.5.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 337.102368][ C0] vkms_vblank_simulate: vblank timer overrun [ 337.203623][ T30] audit: type=1400 audit(1745176996.652:473): avc: denied { listen } for pid=9132 comm="syz.5.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 337.224319][ T30] audit: type=1400 audit(1745176996.662:474): avc: denied { accept } for pid=9132 comm="syz.5.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 337.244549][ T24] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 337.280719][ T30] audit: type=1400 audit(1745176996.662:475): avc: denied { nlmsg_read } for pid=9132 comm="syz.5.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 337.301175][ T8959] veth0_vlan: entered promiscuous mode [ 337.301341][ C0] vkms_vblank_simulate: vblank timer overrun [ 337.351397][ T8959] veth1_vlan: entered promiscuous mode [ 337.437496][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 337.509943][ T24] usb 8-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 337.587379][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.687493][ T8959] veth0_macvtap: entered promiscuous mode [ 337.704333][ T24] usb 8-1: Product: syz [ 337.708673][ T24] usb 8-1: Manufacturer: syz [ 337.713705][ T24] usb 8-1: SerialNumber: syz [ 337.786322][ T9145] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 338.299963][ T8959] veth1_macvtap: entered promiscuous mode [ 338.496993][ T8959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.466403][ T8959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.476285][ T8959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.489937][ T8959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.502519][ T8959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.687252][ T8959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.698291][ T8959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.735614][ T8959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.813375][ T8959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.833361][ T8959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.846991][ T8959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.856882][ T8959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.880482][ T8959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.902022][ T8959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.923842][ T8959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.944793][ T8959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.963698][ T8959] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.098553][ T8959] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.168144][ T8959] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.179340][ T8959] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.366520][ T5945] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 340.435008][ T5904] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 340.462518][ T2933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.476277][ T2933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.513468][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.527844][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.548304][ T5945] usb 5-1: Using ep0 maxpacket: 32 [ 340.560662][ T5945] usb 5-1: config 0 interface 0 has no altsetting 0 [ 340.568868][ T5945] usb 5-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 340.578313][ T5945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.606262][ T5904] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.620589][ T5904] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 340.629947][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.945337][ T30] audit: type=1400 audit(1745177001.302:476): avc: denied { shutdown } for pid=9209 comm="syz.2.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 341.967130][ C0] vkms_vblank_simulate: vblank timer overrun [ 342.064200][ T9215] netlink: 'syz.2.780': attribute type 29 has an invalid length. [ 342.955811][ T9245] netlink: 4 bytes leftover after parsing attributes in process `syz.5.785'. [ 342.968226][ T9245] netlink: 12 bytes leftover after parsing attributes in process `syz.5.785'. [ 343.614969][ T30] audit: type=1400 audit(1745177003.072:477): avc: denied { listen } for pid=9254 comm="syz.2.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 343.747041][ T30] audit: type=1400 audit(1745177003.072:478): avc: denied { setopt } for pid=9254 comm="syz.2.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 343.773861][ T30] audit: type=1400 audit(1745177003.072:479): avc: denied { accept } for pid=9254 comm="syz.2.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 344.289055][ T30] audit: type=1400 audit(1745177003.832:480): avc: denied { wake_alarm } for pid=9276 comm="syz.7.789" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 344.654125][ T30] audit: type=1400 audit(1745177004.152:481): avc: denied { mounton } for pid=9276 comm="syz.7.789" path="/proc/139/cgroup" dev="proc" ino=24088 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 344.916204][ T9294] ptrace attach of "./syz-executor exec"[5826] was attempted by "./syz-executor exec"[9294] [ 344.961578][ T9294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.791'. [ 345.351584][ T9299] netlink: 96 bytes leftover after parsing attributes in process `syz.2.793'. [ 345.533608][ T9312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.588309][ T9312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.624363][ T5928] hid-generic C990:0003:0000.0010: unknown main item tag 0x0 [ 345.632514][ T5928] hid-generic C990:0003:0000.0010: unknown main item tag 0x0 [ 345.731412][ T9322] lo speed is unknown, defaulting to 1000 [ 346.204473][ T9322] /dev/nullb0: Can't open blockdev [ 346.211998][ T9322] /dev/sg0: Can't lookup blockdev [ 346.528392][ T9351] af_packet: tpacket_rcv: packet too big, clamped from 126 to 4294967286. macoff=82 [ 346.587447][ T9351] kvm: apic: phys broadcast and lowest prio [ 347.044996][ T9360] netlink: 'syz.7.803': attribute type 1 has an invalid length. [ 347.052670][ T9360] netlink: 216 bytes leftover after parsing attributes in process `syz.7.803'. [ 349.213178][ T9422] netlink: 4 bytes leftover after parsing attributes in process `syz.7.808'. [ 349.260061][ T9422] netlink: 12 bytes leftover after parsing attributes in process `syz.7.808'. [ 349.629388][ T9430] wireguard0: entered promiscuous mode [ 349.727671][ T9430] wireguard0: entered allmulticast mode [ 350.034166][ T9439] tipc: Enabled bearer , priority 0 [ 350.130401][ T9442] syzkaller0: entered promiscuous mode [ 350.138830][ T9442] syzkaller0: entered allmulticast mode [ 350.154383][ T9442] tipc: Resetting bearer [ 350.436485][ T9431] tipc: Resetting bearer [ 351.268135][ T9468] netlink: 'syz.5.814': attribute type 1 has an invalid length. [ 351.280475][ T9468] netlink: 216 bytes leftover after parsing attributes in process `syz.5.814'. [ 351.915604][ T9431] tipc: Disabling bearer [ 353.421733][ T9538] ptrace attach of "./syz-executor exec"[5821] was attempted by "./syz-executor exec"[9538] [ 353.467737][ T9538] netlink: 12 bytes leftover after parsing attributes in process `syz.4.822'. [ 353.907652][ T30] audit: type=1326 audit(1745177013.452:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9548 comm="syz.4.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325638e169 code=0x7ffc0000 [ 353.931041][ T30] audit: type=1326 audit(1745177013.452:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9548 comm="syz.4.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325638e169 code=0x7ffc0000 [ 353.954280][ T30] audit: type=1326 audit(1745177013.452:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9548 comm="syz.4.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f325638cc1f code=0x7ffc0000 [ 353.981763][ T30] audit: type=1326 audit(1745177013.452:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9548 comm="syz.4.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325638e169 code=0x7ffc0000 [ 354.007951][ T30] audit: type=1326 audit(1745177013.452:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9548 comm="syz.4.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325638e169 code=0x7ffc0000 [ 354.031243][ T30] audit: type=1326 audit(1745177013.452:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9548 comm="syz.4.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f325638e169 code=0x7ffc0000 [ 354.054457][ T30] audit: type=1326 audit(1745177013.452:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9548 comm="syz.4.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325638e169 code=0x7ffc0000 [ 354.078202][ T30] audit: type=1326 audit(1745177013.452:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9548 comm="syz.4.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f325638e169 code=0x7ffc0000 [ 354.101536][ T30] audit: type=1326 audit(1745177013.452:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9548 comm="syz.4.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325638e169 code=0x7ffc0000 [ 354.126448][ T30] audit: type=1326 audit(1745177013.452:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9548 comm="syz.4.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f325638e169 code=0x7ffc0000 [ 355.329596][ T9558] netlink: 4 bytes leftover after parsing attributes in process `syz.7.827'. [ 355.340536][ T9558] netlink: 12 bytes leftover after parsing attributes in process `syz.7.827'. [ 359.184056][ T5824] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 359.201308][ T9574] sp0: Synchronizing with TNC [ 359.961015][ T9634] veth1_macvtap: left promiscuous mode [ 360.036472][ T9634] veth0_vlan: left promiscuous mode [ 360.046321][ T9634] veth0_vlan: entered promiscuous mode [ 360.154592][ T9634] lo speed is unknown, defaulting to 1000 [ 361.152201][ T5824] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 361.160856][ T5824] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 361.170975][ T5824] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 361.179492][ T5824] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 361.187146][ T5824] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 361.581603][ T9668] lo speed is unknown, defaulting to 1000 [ 361.803647][ T9668] chnl_net:caif_netlink_parms(): no params data found [ 361.902839][ T9688] ntfs3(nullb0): Primary boot signature is not NTFS. [ 361.910093][ T9688] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 362.341619][ T9668] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.348893][ T9668] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.356263][ T9668] bridge_slave_0: entered allmulticast mode [ 362.363547][ T9668] bridge_slave_0: entered promiscuous mode [ 362.376636][ T9668] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.384238][ T9668] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.391429][ T9668] bridge_slave_1: entered allmulticast mode [ 362.398835][ T9668] bridge_slave_1: entered promiscuous mode [ 362.446820][ T9668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.462985][ T9668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.621181][ T9668] team0: Port device team_slave_0 added [ 362.650948][ T9668] team0: Port device team_slave_1 added [ 362.690950][ T9668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.698203][ T9668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.728942][ T9668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.741143][ T9668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.753730][ T9668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.783073][ T9668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.849365][ T9668] hsr_slave_0: entered promiscuous mode [ 362.859840][ T9668] hsr_slave_1: entered promiscuous mode [ 362.869420][ T9668] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 362.878617][ T9668] Cannot create hsr debugfs directory [ 363.265250][ T5139] Bluetooth: hci2: command tx timeout [ 365.344119][ T5139] Bluetooth: hci2: command tx timeout [ 365.633462][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 365.633477][ T30] audit: type=1400 audit(1745177025.172:537): avc: denied { read } for pid=9729 comm="syz.4.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 365.687026][ T9731] netlink: 16 bytes leftover after parsing attributes in process `syz.4.848'. [ 365.698824][ T9730] netlink: 16 bytes leftover after parsing attributes in process `syz.4.848'. [ 365.718414][ T30] audit: type=1400 audit(1745177025.262:538): avc: denied { name_bind } for pid=9729 comm="syz.4.848" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 366.107285][ T9733] serio: Serial port ptm0 [ 366.656783][ T30] audit: type=1400 audit(1745177026.202:539): avc: denied { unmount } for pid=7858 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 367.424059][ T5139] Bluetooth: hci2: command tx timeout [ 369.503907][ T5139] Bluetooth: hci2: command tx timeout [ 378.156586][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.486765][ T5824] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 379.496472][ T5824] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 379.506169][ T5824] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 379.514400][ T5824] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 379.522485][ T5824] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 381.584348][ T5139] Bluetooth: hci5: command tx timeout [ 381.980609][ T5824] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 381.989345][ T5824] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 381.998321][ T5824] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 382.006144][ T5824] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 382.015763][ T5824] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 383.664921][ T5139] Bluetooth: hci5: command tx timeout [ 384.063898][ T5139] Bluetooth: hci7: command tx timeout [ 385.744473][ T5139] Bluetooth: hci5: command tx timeout [ 386.153890][ T5139] Bluetooth: hci7: command tx timeout [ 386.994586][ T5824] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 387.002629][ T5824] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 387.010239][ T5824] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 387.018342][ T5824] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 387.028740][ T5824] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 387.824033][ T5139] Bluetooth: hci5: command tx timeout [ 388.223875][ T5139] Bluetooth: hci7: command tx timeout [ 389.104022][ T5139] Bluetooth: hci8: command tx timeout [ 390.304340][ T5139] Bluetooth: hci7: command tx timeout [ 391.194001][ T5139] Bluetooth: hci8: command tx timeout [ 393.017678][ T5824] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 393.027760][ T5824] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 393.035377][ T5824] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 393.043726][ T5824] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 393.052038][ T5824] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 393.264118][ T5139] Bluetooth: hci8: command tx timeout [ 395.104074][ T5139] Bluetooth: hci9: command tx timeout [ 395.344100][ T5139] Bluetooth: hci8: command tx timeout [ 397.184264][ T5139] Bluetooth: hci9: command tx timeout [ 399.264651][ T5139] Bluetooth: hci9: command tx timeout [ 401.354046][ T5139] Bluetooth: hci9: command tx timeout [ 421.653888][ T5824] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 421.662211][ T5824] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 421.669970][ T5824] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 421.678751][ T5824] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 421.687907][ T5824] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 423.744008][ T5139] Bluetooth: hci10: command tx timeout [ 425.823916][ T5139] Bluetooth: hci10: command tx timeout [ 427.913865][ T5139] Bluetooth: hci10: command tx timeout [ 429.983947][ T5139] Bluetooth: hci10: command tx timeout [ 439.596799][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.631730][ T5824] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 439.639848][ T5824] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 439.648603][ T5824] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 439.656442][ T5824] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 439.666738][ T5824] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 441.744653][ T5139] Bluetooth: hci11: command tx timeout [ 442.558072][ T5824] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 442.566052][ T5824] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 442.573633][ T5824] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 442.582942][ T5824] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 442.590485][ T5824] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 443.823914][ T5139] Bluetooth: hci11: command tx timeout [ 444.623891][ T5139] Bluetooth: hci12: command tx timeout [ 445.903972][ T5139] Bluetooth: hci11: command tx timeout [ 446.704050][ T5139] Bluetooth: hci12: command tx timeout [ 447.064082][ T5824] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 447.073823][ T5824] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 447.081476][ T5824] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 447.090416][ T5824] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 447.097967][ T5824] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 447.983986][ T5139] Bluetooth: hci11: command tx timeout [ 448.783865][ T5139] Bluetooth: hci12: command tx timeout [ 449.184027][ T5139] Bluetooth: hci13: command tx timeout [ 450.864003][ T5139] Bluetooth: hci12: command tx timeout [ 451.263981][ T5139] Bluetooth: hci13: command tx timeout [ 451.906694][ T5139] Bluetooth: hci0: command 0x0406 tx timeout [ 453.073471][ T5139] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 453.083751][ T5139] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 453.091542][ T5139] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 453.099487][ T5139] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 453.107510][ T5139] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 453.344080][ T5824] Bluetooth: hci13: command tx timeout [ 455.184036][ T5824] Bluetooth: hci14: command tx timeout [ 455.434395][ T5824] Bluetooth: hci13: command tx timeout [ 457.263910][ T5824] Bluetooth: hci14: command tx timeout [ 459.344204][ T5824] Bluetooth: hci14: command tx timeout [ 461.424110][ T5824] Bluetooth: hci14: command tx timeout [ 482.250705][ T5139] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 482.260876][ T5139] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 482.269554][ T5139] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 482.277682][ T5139] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 482.285530][ T5139] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 484.303924][ T5824] Bluetooth: hci15: command tx timeout [ 484.389776][ T31] INFO: task kworker/1:0:24 blocked for more than 143 seconds. [ 484.398972][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 484.406788][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 484.415583][ T31] task:kworker/1:0 state:D stack:22408 pid:24 tgid:24 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 484.427691][ T31] Workqueue: usb_hub_wq hub_event [ 484.432721][ T31] Call Trace: [ 484.436020][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 484.438950][ T31] __schedule+0x116f/0x5de0 [ 484.443464][ T31] ? __pfx___schedule+0x10/0x10 [ 484.448394][ T31] ? find_held_lock+0x2b/0x80 [ 484.453081][ T31] ? schedule+0x2d7/0x3a0 [ 484.457441][ T31] schedule+0xe7/0x3a0 [ 484.461513][ T31] schedule_timeout+0x257/0x290 [ 484.491499][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 484.500245][ T31] ? mark_held_locks+0x49/0x80 [ 484.505136][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 484.510336][ T31] __wait_for_common+0x2fc/0x4e0 [ 484.524153][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 484.529550][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 484.535046][ T31] devtmpfs_submit_req+0xa8/0x100 [ 484.540071][ T31] devtmpfs_create_node+0x18a/0x230 [ 484.545671][ T31] ? __pfx_devtmpfs_create_node+0x10/0x10 [ 484.551392][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 484.556590][ T31] ? kernfs_put+0x35/0x60 [ 484.560894][ T31] ? sysfs_do_create_link_sd+0xbb/0x140 [ 484.566669][ T31] device_add+0x10bd/0x1a70 [ 484.571167][ T31] ? __pfx_device_add+0x10/0x10 [ 484.576041][ T31] usb_new_device+0xd07/0x1a20 [ 484.580810][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 484.586042][ T31] hub_event+0x2eb7/0x4fa0 [ 484.590458][ T31] ? __pfx_hub_event+0x10/0x10 [ 484.595224][ T31] ? debug_object_deactivate+0x1ec/0x3a0 [ 484.600856][ T31] ? rcu_is_watching+0x12/0xc0 [ 484.605629][ T31] process_one_work+0x9cc/0x1b70 [ 484.610561][ T31] ? __pfx_hcd_resume_work+0x10/0x10 [ 484.615839][ T31] ? __pfx_process_one_work+0x10/0x10 [ 484.621188][ T31] ? assign_work+0x1a0/0x250 [ 484.625791][ T31] worker_thread+0x6c8/0xf10 [ 484.630375][ T31] ? __pfx_worker_thread+0x10/0x10 [ 484.635472][ T31] kthread+0x3c2/0x780 [ 484.639516][ T31] ? __pfx_kthread+0x10/0x10 [ 484.644123][ T31] ? __pfx_kthread+0x10/0x10 [ 484.648723][ T31] ? __pfx_kthread+0x10/0x10 [ 484.653288][ T31] ? __pfx_kthread+0x10/0x10 [ 484.657892][ T31] ? rcu_is_watching+0x12/0xc0 [ 484.662656][ T31] ? __pfx_kthread+0x10/0x10 [ 484.667495][ T31] ret_from_fork+0x45/0x80 [ 484.671929][ T31] ? __pfx_kthread+0x10/0x10 [ 484.676524][ T31] ret_from_fork_asm+0x1a/0x30 [ 484.681272][ T31] [ 484.685113][ T31] INFO: task kworker/1:6:5877 blocked for more than 143 seconds. [ 484.692819][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 484.700552][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 484.709400][ T31] task:kworker/1:6 state:D stack:22824 pid:5877 tgid:5877 ppid:2 task_flags:0x4288060 flags:0x00004000 [ 484.721399][ T31] Workqueue: md_misc mddev_delayed_delete [ 484.727115][ T31] Call Trace: [ 484.730369][ T31] [ 484.733286][ T31] __schedule+0x116f/0x5de0 [ 484.737788][ T31] ? __pfx___schedule+0x10/0x10 [ 484.742613][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 484.747992][ T31] ? find_held_lock+0x2b/0x80 [ 484.752652][ T31] ? schedule+0x2d7/0x3a0 [ 484.756980][ T31] schedule+0xe7/0x3a0 [ 484.761026][ T31] schedule_timeout+0x257/0x290 [ 484.765886][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 484.771476][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 484.776896][ T31] __wait_for_common+0x2fc/0x4e0 [ 484.781832][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 484.787238][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 484.792696][ T31] devtmpfs_submit_req+0xa8/0x100 [ 484.797742][ T31] devtmpfs_delete_node+0xf6/0x160 [ 484.802851][ T31] ? __pfx_devtmpfs_delete_node+0x10/0x10 [ 484.808568][ T31] ? __call_rcu_common.constprop.0+0x3e5/0x9f0 [ 484.814741][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 484.819946][ T31] ? kernfs_put+0x4e/0x60 [ 484.824279][ T31] ? sysfs_remove_group+0xc6/0x180 [ 484.829383][ T31] device_del+0x734/0x9f0 [ 484.833692][ T31] ? __pfx_device_del+0x10/0x10 [ 484.838534][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 484.843707][ T31] ? _raw_spin_unlock_irq+0x2e/0x50 [ 484.848901][ T31] del_gendisk+0x486/0xc40 [ 484.853292][ T31] ? __pfx_del_gendisk+0x10/0x10 [ 484.858217][ T31] ? kernfs_put.part.0+0x18b/0x630 [ 484.863304][ T31] md_kobj_release+0xb2/0x100 [ 484.868041][ T31] kobject_put+0x1e4/0x5a0 [ 484.872845][ T31] process_one_work+0x9cc/0x1b70 [ 484.877810][ T31] ? __pfx_process_one_work+0x10/0x10 [ 484.883161][ T31] ? assign_work+0x1a0/0x250 [ 484.887744][ T31] worker_thread+0x6c8/0xf10 [ 484.892312][ T31] ? __kthread_parkme+0x19e/0x250 [ 484.897349][ T31] ? __pfx_worker_thread+0x10/0x10 [ 484.902462][ T31] kthread+0x3c2/0x780 [ 484.906588][ T31] ? __pfx_kthread+0x10/0x10 [ 484.911170][ T31] ? __pfx_kthread+0x10/0x10 [ 484.915745][ T31] ? __pfx_kthread+0x10/0x10 [ 484.920307][ T31] ? __pfx_kthread+0x10/0x10 [ 484.924910][ T31] ? rcu_is_watching+0x12/0xc0 [ 484.929665][ T31] ? __pfx_kthread+0x10/0x10 [ 484.934249][ T31] ret_from_fork+0x45/0x80 [ 484.938651][ T31] ? __pfx_kthread+0x10/0x10 [ 484.943211][ T31] ret_from_fork_asm+0x1a/0x30 [ 484.947977][ T31] [ 484.950978][ T31] INFO: task kworker/0:5:5904 blocked for more than 143 seconds. [ 484.958738][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 484.966384][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 484.975246][ T31] task:kworker/0:5 state:D stack:21864 pid:5904 tgid:5904 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 484.987273][ T31] Workqueue: usb_hub_wq hub_event [ 484.992280][ T31] Call Trace: [ 484.995549][ T31] [ 484.998459][ T31] __schedule+0x116f/0x5de0 [ 485.002940][ T31] ? number+0x9aa/0xc70 [ 485.007095][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 485.012014][ T31] ? __pfx___schedule+0x10/0x10 [ 485.016885][ T31] ? find_held_lock+0x2b/0x80 [ 485.021559][ T31] ? schedule+0x2d7/0x3a0 [ 485.026068][ T31] schedule+0xe7/0x3a0 [ 485.030146][ T31] schedule_timeout+0x257/0x290 [ 485.035021][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 485.040389][ T31] ? mark_held_locks+0x49/0x80 [ 485.045211][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 485.050418][ T31] __wait_for_common+0x2fc/0x4e0 [ 485.055350][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 485.060703][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 485.066171][ T31] ? devtmpfs_submit_req+0x94/0x100 [ 485.071353][ T31] devtmpfs_submit_req+0xa8/0x100 [ 485.076657][ T31] devtmpfs_create_node+0x18a/0x230 [ 485.081859][ T31] ? __pfx_devtmpfs_create_node+0x10/0x10 [ 485.087614][ T31] ? up_write+0x1b2/0x520 [ 485.091940][ T31] ? kernfs_create_link+0x1bd/0x240 [ 485.097137][ T31] ? kernfs_put+0x35/0x60 [ 485.101438][ T31] ? sysfs_do_create_link_sd+0xbb/0x140 [ 485.107211][ T31] device_add+0x10bd/0x1a70 [ 485.111701][ T31] ? __pfx_device_add+0x10/0x10 [ 485.116543][ T31] ? usb_detect_static_quirks+0x335/0x3e0 [ 485.122242][ T31] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 485.128135][ T31] usb_new_device+0xd07/0x1a20 [ 485.132888][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 485.137925][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 485.143121][ T31] ? mark_held_locks+0x49/0x80 [ 485.147922][ T31] hub_event+0x2eb7/0x4fa0 [ 485.152339][ T31] ? __pfx_hub_event+0x10/0x10 [ 485.157085][ T31] ? debug_object_deactivate+0x1ec/0x3a0 [ 485.162700][ T31] ? rcu_is_watching+0x12/0xc0 [ 485.167462][ T31] process_one_work+0x9cc/0x1b70 [ 485.172376][ T31] ? __pfx_hcd_resume_work+0x10/0x10 [ 485.177653][ T31] ? __pfx_process_one_work+0x10/0x10 [ 485.183155][ T31] ? assign_work+0x1a0/0x250 [ 485.187760][ T31] worker_thread+0x6c8/0xf10 [ 485.192330][ T31] ? __kthread_parkme+0x19e/0x250 [ 485.197351][ T31] ? __pfx_worker_thread+0x10/0x10 [ 485.202435][ T31] kthread+0x3c2/0x780 [ 485.206497][ T31] ? __pfx_kthread+0x10/0x10 [ 485.211059][ T31] ? __pfx_kthread+0x10/0x10 [ 485.215633][ T31] ? __pfx_kthread+0x10/0x10 [ 485.220194][ T31] ? __pfx_kthread+0x10/0x10 [ 485.224794][ T31] ? rcu_is_watching+0x12/0xc0 [ 485.229548][ T31] ? __pfx_kthread+0x10/0x10 [ 485.234164][ T31] ret_from_fork+0x45/0x80 [ 485.238581][ T31] ? __pfx_kthread+0x10/0x10 [ 485.243145][ T31] ret_from_fork_asm+0x1a/0x30 [ 485.247916][ T31] [ 485.250921][ T31] INFO: task kworker/0:7:5945 blocked for more than 144 seconds. [ 485.261558][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 485.269199][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 485.277857][ T31] task:kworker/0:7 state:D stack:22008 pid:5945 tgid:5945 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 485.289990][ T31] Workqueue: usb_hub_wq hub_event [ 485.295047][ T31] Call Trace: [ 485.298332][ T31] [ 485.301241][ T31] __schedule+0x116f/0x5de0 [ 485.305763][ T31] ? number+0x9aa/0xc70 [ 485.309918][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 485.314847][ T31] ? __pfx___schedule+0x10/0x10 [ 485.319690][ T31] ? find_held_lock+0x2b/0x80 [ 485.324387][ T31] ? schedule+0x2d7/0x3a0 [ 485.328708][ T31] schedule+0xe7/0x3a0 [ 485.332756][ T31] schedule_timeout+0x257/0x290 [ 485.337595][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 485.342945][ T31] ? mark_held_locks+0x49/0x80 [ 485.347783][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 485.352978][ T31] __wait_for_common+0x2fc/0x4e0 [ 485.357907][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 485.363257][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 485.368745][ T31] ? devtmpfs_submit_req+0x94/0x100 [ 485.373981][ T31] devtmpfs_submit_req+0xa8/0x100 [ 485.379009][ T31] devtmpfs_create_node+0x18a/0x230 [ 485.384478][ T31] ? __pfx_devtmpfs_create_node+0x10/0x10 [ 485.390200][ T31] ? up_write+0x1b2/0x520 [ 485.394542][ T31] ? kernfs_create_link+0x1bd/0x240 [ 485.399736][ T31] ? kernfs_put+0x35/0x60 [ 485.404086][ T31] ? sysfs_do_create_link_sd+0xbb/0x140 [ 485.409621][ T31] device_add+0x10bd/0x1a70 [ 485.414164][ T31] ? __pfx_device_add+0x10/0x10 [ 485.419003][ T31] ? usb_detect_static_quirks+0x335/0x3e0 [ 485.424786][ T31] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 485.430673][ T31] usb_new_device+0xd07/0x1a20 [ 485.435442][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 485.440441][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 485.445649][ T31] ? mark_held_locks+0x49/0x80 [ 485.450400][ T31] hub_event+0x2eb7/0x4fa0 [ 485.454849][ T31] ? __pfx_hub_event+0x10/0x10 [ 485.459600][ T31] ? debug_object_deactivate+0x1ec/0x3a0 [ 485.465257][ T31] ? rcu_is_watching+0x12/0xc0 [ 485.470013][ T31] process_one_work+0x9cc/0x1b70 [ 485.474959][ T31] ? __pfx_hcd_resume_work+0x10/0x10 [ 485.480240][ T31] ? __pfx_process_one_work+0x10/0x10 [ 485.485642][ T31] ? assign_work+0x1a0/0x250 [ 485.490396][ T31] worker_thread+0x6c8/0xf10 [ 485.495008][ T31] ? __kthread_parkme+0x19e/0x250 [ 485.500017][ T31] ? __pfx_worker_thread+0x10/0x10 [ 485.505138][ T31] kthread+0x3c2/0x780 [ 485.509200][ T31] ? __pfx_kthread+0x10/0x10 [ 485.513788][ T31] ? __pfx_kthread+0x10/0x10 [ 485.518373][ T31] ? __pfx_kthread+0x10/0x10 [ 485.522958][ T31] ? __pfx_kthread+0x10/0x10 [ 485.527575][ T31] ? rcu_is_watching+0x12/0xc0 [ 485.532339][ T31] ? __pfx_kthread+0x10/0x10 [ 485.536918][ T31] ret_from_fork+0x45/0x80 [ 485.541322][ T31] ? __pfx_kthread+0x10/0x10 [ 485.545924][ T31] ret_from_fork_asm+0x1a/0x30 [ 485.550691][ T31] [ 485.553711][ T31] INFO: task syz-executor:8959 blocked for more than 144 seconds. [ 485.561538][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 485.569163][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 485.577816][ T31] task:syz-executor state:D stack:24024 pid:8959 tgid:8959 ppid:1 task_flags:0x400140 flags:0x00000004 [ 485.590045][ T31] Call Trace: [ 485.593408][ T31] [ 485.596364][ T31] __schedule+0x116f/0x5de0 [ 485.600863][ T31] ? register_lock_class+0x41/0x4c0 [ 485.606055][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 485.610966][ T31] ? __pfx___schedule+0x10/0x10 [ 485.615816][ T31] ? find_held_lock+0x2b/0x80 [ 485.620468][ T31] ? schedule+0x2d7/0x3a0 [ 485.624806][ T31] schedule+0xe7/0x3a0 [ 485.628875][ T31] schedule_preempt_disabled+0x13/0x30 [ 485.634348][ T31] rwsem_down_write_slowpath+0x524/0x1310 [ 485.640066][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 485.646222][ T31] ? __pfx___might_resched+0x10/0x10 [ 485.651487][ T31] down_write_nested+0x1da/0x210 [ 485.656418][ T31] ? __pfx_down_write_nested+0x10/0x10 [ 485.661847][ T31] ? mnt_get_write_access+0x20c/0x300 [ 485.668376][ T31] ? mnt_want_write+0x161/0x450 [ 485.673223][ T31] filename_create+0x1bb/0x4a0 [ 485.677984][ T31] ? __pfx_filename_create+0x10/0x10 [ 485.683246][ T31] ? find_held_lock+0x2b/0x80 [ 485.687916][ T31] do_mkdirat+0xaa/0x3e0 [ 485.692368][ T31] ? __pfx_do_mkdirat+0x10/0x10 [ 485.697236][ T31] ? getname_flags.part.0+0x1c5/0x550 [ 485.702582][ T31] ? __pfx___x64_sys_umount+0x10/0x10 [ 485.707945][ T31] __x64_sys_mkdirat+0x83/0xb0 [ 485.712691][ T31] do_syscall_64+0xcd/0x260 [ 485.717186][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.723050][ T31] RIP: 0033:0x7fcf1a98c9d7 [ 485.727458][ T31] RSP: 002b:00007ffec33d04a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 485.735862][ T31] RAX: ffffffffffffffda RBX: 00007fcf1aa110fa RCX: 00007fcf1a98c9d7 [ 485.743925][ T31] RDX: 00000000000001ff RSI: 00007fcf1aa110fa RDI: 00000000ffffff9c [ 485.752025][ T31] RBP: 00007fcf1aa11074 R08: 0000000000000000 R09: 00007fcf1abb6738 [ 485.760029][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcf1a9ec1a8 [ 485.768032][ T31] R13: 00007fcf1a9ec180 R14: 0000000000000009 R15: 0000000000000000 [ 485.776061][ T31] [ 485.779101][ T31] [ 485.779101][ T31] Showing all locks held in the system: [ 485.786856][ T31] 3 locks held by kworker/1:0/24: [ 485.791865][ T31] #0: ffff888021af5948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 485.802796][ T31] #1: ffffc900001e7d18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 485.814060][ T31] #2: ffff88802902e198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 485.822935][ T31] 2 locks held by kdevtmpfs/26: [ 485.827809][ T31] #0: ffff88801c6d8950 (&type->i_mutex_dir_key/1){+.+.}-{4:4}, at: __kern_path_locked+0x132/0x2a0 [ 485.838546][ T31] #1: ffffffff8eef4368 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x25/0x1a0 [ 485.848017][ T31] 1 lock held by khungtaskd/31: [ 485.852834][ T31] #0: ffffffff8e3bf5c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 485.862664][ T31] 3 locks held by kworker/u8:4/81: [ 485.867765][ T31] #0: ffff88801b481148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 485.878921][ T31] #1: ffffc9000213fd18 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 485.889303][ T31] #2: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 485.898623][ T31] 3 locks held by kworker/u8:5/1083: [ 485.903968][ T31] #0: ffff88814d87a148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 485.915163][ T31] #1: ffffc90003e2fd18 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 485.928236][ T31] #2: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 485.937741][ T31] 4 locks held by udevd/5198: [ 485.942388][ T31] #0: ffff888031c9e540 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12c0 [ 485.951254][ T31] #1: ffff88804c7e4c88 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4d/0x240 [ 485.960647][ T31] #2: ffff88804009e2d8 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x71/0x240 [ 485.970036][ T31] #3: ffff888055cd5a20 (&dev->mutex){....}-{4:4}, at: uevent_show+0x187/0x3b0 [ 485.978993][ T31] 1 lock held by dhcpcd/5492: [ 485.983636][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newroute+0xfa/0x210 [ 485.992944][ T31] 2 locks held by getty/5584: [ 485.997633][ T31] #0: ffff88803650a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 486.007629][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 486.017752][ T31] 2 locks held by kworker/1:6/5877: [ 486.022914][ T31] #0: ffff888021af6548 ((wq_completion)md_misc){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 486.033418][ T31] #1: ffffc9000445fd18 ((work_completion)(&mddev->del_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 486.044977][ T31] 3 locks held by kworker/0:5/5904: [ 486.050141][ T31] #0: ffff888021af5948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 486.060911][ T31] #1: ffffc9000449fd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 486.072119][ T31] #2: ffff888028eb6198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 486.080982][ T31] 4 locks held by kworker/1:8/5928: [ 486.086179][ T31] #0: ffff88801b478d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 486.096623][ T31] #1: ffffc9000492fd18 ((work_completion)(&uhid->worker)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 486.108076][ T31] #2: ffff888055cd5a20 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 486.117344][ T31] #3: ffffffff8fe7f230 (minors_rwsem){+.+.}-{4:4}, at: hidraw_connect+0x75/0x440 [ 486.126589][ T31] 3 locks held by kworker/0:7/5945: [ 486.131752][ T31] #0: ffff888021af5948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 486.142531][ T31] #1: ffffc9000497fd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 486.153924][ T31] #2: ffff888028e57198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 486.162939][ T31] 3 locks held by kworker/0:9/7410: [ 486.168129][ T31] #0: ffff88801b479d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 486.179947][ T31] #1: ffffc90003ecfd18 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 486.190370][ T31] #2: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x83/0x1170 [ 486.200021][ T31] 2 locks held by syz-executor/8959: [ 486.205499][ T31] #0: ffff88814128e420 (sb_writers){.+.+}-{0:0}, at: filename_create+0x10e/0x4a0 [ 486.214762][ T31] #1: ffff88801c6d8950 (&type->i_mutex_dir_key/1){+.+.}-{4:4}, at: filename_create+0x1bb/0x4a0 [ 486.225250][ T31] 2 locks held by syz-executor/9668: [ 486.230514][ T31] #0: ffffffff90868640 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 486.240073][ T31] #1: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 486.249115][ T31] 1 lock held by syz.7.847/9726: [ 486.254065][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x371/0xe90 [ 486.263479][ T31] 1 lock held by syz.7.847/9727: [ 486.268439][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x1a1/0x10e0 [ 486.277257][ T31] 2 locks held by syz.4.852/9746: [ 486.282253][ T31] #0: ffffffff901ccf10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 486.290458][ T31] #1: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: ethnl_default_set_doit+0x2f5/0xb10 [ 486.300291][ T31] 2 locks held by syz.5.857/9765: [ 486.305644][ T31] #0: ffffffff90114fd0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 486.315093][ T31] #1: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x23/0xb0 [ 486.325545][ T31] 1 lock held by syz-executor/9769: [ 486.330709][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 486.340098][ T31] 1 lock held by syz-executor/9772: [ 486.345280][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 486.354677][ T31] 1 lock held by syz-executor/9775: [ 486.359854][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 486.369238][ T31] 1 lock held by syz-executor/9778: [ 486.374439][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 486.383969][ T31] 1 lock held by syz-executor/9781: [ 486.389156][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 486.392356][ T5824] Bluetooth: hci15: command tx timeout [ 486.398582][ T31] 1 lock held by syz-executor/9784: [ 486.398596][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 486.398646][ T31] 1 lock held by syz-executor/9787: [ 486.398655][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 486.398702][ T31] 1 lock held by syz-executor/9790: [ 486.398711][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 486.448097][ T31] 1 lock held by syz-executor/9793: [ 486.453276][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 486.462663][ T31] 1 lock held by syz-executor/9796: [ 486.467847][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 486.477240][ T31] [ 486.479548][ T31] ============================================= [ 486.479548][ T31] [ 486.487960][ T31] NMI backtrace for cpu 1 [ 486.487972][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 486.487991][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 486.488001][ T31] Call Trace: [ 486.488007][ T31] [ 486.488013][ T31] dump_stack_lvl+0x116/0x1f0 [ 486.488039][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 486.488057][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 486.488077][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 486.488096][ T31] watchdog+0xf70/0x12c0 [ 486.488119][ T31] ? __pfx_watchdog+0x10/0x10 [ 486.488134][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 486.488156][ T31] ? __kthread_parkme+0x19e/0x250 [ 486.488182][ T31] ? __pfx_watchdog+0x10/0x10 [ 486.488199][ T31] kthread+0x3c2/0x780 [ 486.488217][ T31] ? __pfx_kthread+0x10/0x10 [ 486.488232][ T31] ? __pfx_kthread+0x10/0x10 [ 486.488246][ T31] ? __pfx_kthread+0x10/0x10 [ 486.488261][ T31] ? __pfx_kthread+0x10/0x10 [ 486.488276][ T31] ? rcu_is_watching+0x12/0xc0 [ 486.488297][ T31] ? __pfx_kthread+0x10/0x10 [ 486.488313][ T31] ret_from_fork+0x45/0x80 [ 486.488330][ T31] ? __pfx_kthread+0x10/0x10 [ 486.488346][ T31] ret_from_fork_asm+0x1a/0x30 [ 486.488381][ T31] [ 486.488386][ T31] Sending NMI from CPU 1 to CPUs 0: [ 486.619752][ C0] NMI backtrace for cpu 0 [ 486.619766][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 486.619782][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 486.619789][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 486.619809][ C0] Code: 35 5d 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 4a 17 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 486.619821][ C0] RSP: 0018:ffffffff8e007e10 EFLAGS: 000002c6 [ 486.619833][ C0] RAX: 000000000125c3c3 RBX: 0000000000000000 RCX: ffffffff8b72a419 [ 486.619841][ C0] RDX: 0000000000000000 RSI: ffffffff8dbef846 RDI: ffffffff8bf46540 [ 486.619849][ C0] RBP: fffffbfff1c12ee8 R08: 0000000000000001 R09: ffffed10170865bd [ 486.619857][ C0] R10: ffff8880b8432deb R11: 0000000000000000 R12: 0000000000000000 [ 486.619864][ C0] R13: ffffffff8e097740 R14: ffffffff90864910 R15: 0000000000000000 [ 486.619872][ C0] FS: 0000000000000000(0000) GS:ffff8881249b2000(0000) knlGS:0000000000000000 [ 486.619886][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 486.619894][ C0] CR2: 000055a9bd0b40a8 CR3: 000000003105a000 CR4: 00000000003526f0 [ 486.619902][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 486.619909][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 486.619916][ C0] Call Trace: [ 486.619920][ C0] [ 486.619925][ C0] default_idle+0x13/0x20 [ 486.619942][ C0] default_idle_call+0x6d/0xb0 [ 486.619959][ C0] do_idle+0x391/0x510 [ 486.619976][ C0] ? __pfx_do_idle+0x10/0x10 [ 486.619991][ C0] ? trace_sched_exit_tp+0x31/0x130 [ 486.620010][ C0] cpu_startup_entry+0x4f/0x60 [ 486.620025][ C0] rest_init+0x16b/0x2b0 [ 486.620036][ C0] ? acpi_subsystem_init+0x133/0x180 [ 486.620051][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 486.620069][ C0] start_kernel+0x3e9/0x4d0 [ 486.620086][ C0] x86_64_start_reservations+0x18/0x30 [ 486.620103][ C0] x86_64_start_kernel+0xb0/0xc0 [ 486.620119][ C0] common_startup_64+0x13e/0x148 [ 486.620140][ C0] [ 486.620820][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 486.834977][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 486.846760][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 486.856794][ T31] Call Trace: [ 486.860051][ T31] [ 486.862963][ T31] dump_stack_lvl+0x3d/0x1f0 [ 486.867545][ T31] panic+0x71c/0x800 [ 486.871420][ T31] ? __pfx_panic+0x10/0x10 [ 486.875813][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 486.881166][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 486.887124][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 486.892474][ T31] ? watchdog+0xdda/0x12c0 [ 486.896873][ T31] ? watchdog+0xdcd/0x12c0 [ 486.901268][ T31] watchdog+0xdeb/0x12c0 [ 486.905496][ T31] ? __pfx_watchdog+0x10/0x10 [ 486.910151][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 486.915333][ T31] ? __kthread_parkme+0x19e/0x250 [ 486.920348][ T31] ? __pfx_watchdog+0x10/0x10 [ 486.925010][ T31] kthread+0x3c2/0x780 [ 486.929061][ T31] ? __pfx_kthread+0x10/0x10 [ 486.933630][ T31] ? __pfx_kthread+0x10/0x10 [ 486.938201][ T31] ? __pfx_kthread+0x10/0x10 [ 486.942767][ T31] ? __pfx_kthread+0x10/0x10 [ 486.947338][ T31] ? rcu_is_watching+0x12/0xc0 [ 486.952083][ T31] ? __pfx_kthread+0x10/0x10 [ 486.956653][ T31] ret_from_fork+0x45/0x80 [ 486.961064][ T31] ? __pfx_kthread+0x10/0x10 [ 486.966428][ T31] ret_from_fork_asm+0x1a/0x30 [ 486.971200][ T31] [ 486.974397][ T31] Kernel Offset: disabled [ 486.978701][ T31] Rebooting in 86400 seconds..