last executing test programs: 2m13.125036889s ago: executing program 1 (id=567): r0 = socket$kcm(0xa, 0x2, 0x73) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x1f5) mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x101) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001007470726f7879000014000280080001400000000208000340000000100900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x40880) close_range(r0, 0xffffffffffffffff, 0x0) 2m12.276529244s ago: executing program 1 (id=571): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r0}) ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f00000000c0)={0xc, r0}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000240)={0x30}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getrandom(0x0, 0x0, 0x3) r2 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r6, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) sendto(r6, 0x0, 0x0, 0x20000800, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x1}, 0x80) recvfrom(r6, &(0x7f0000001680)=""/4121, 0x1019, 0x10001, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000180)=0x2) syz_genetlink_get_family_id$nl80211(0x0, r6) fcntl$setsig(r3, 0xa, 0x12) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) dup2(r3, r4) r7 = getpgid(r2) fcntl$setown(r3, 0x8, r7) tkill(r2, 0x11) r8 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r8, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) connect(r5, &(0x7f0000000340)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512\x00'}, 0x80) 2m11.896432085s ago: executing program 4 (id=575): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f00003f4000/0x2000)=nil, 0x2000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_open_procfs(0x0, &(0x7f0000001180)='net/if_inet6\x00') socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={&(0x7f00000011c0)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000500000001000000010000130400000002000008060000ff0f00000056b6bac091b18293622e2e000cf2160bb443e7baa486e7644f369316c43ed6640728b230e81769fc7af1fda2615a0a3b3de81e41b4a695c3f70db8997437f1c4db25305543db8b4795bef40128cf271f583596824b2ad4e8dc"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xd, 0x1000, &(0x7f0000002cc0)=""/4096, 0x40f00, 0x40, '\x00', 0x0, 0x0, r0, 0x19c00, 0x0, 0xfd7c, 0x10, &(0x7f0000000180)={0x0, 0x2, 0x5b, 0x9}, 0x10}, 0x94) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x42) open_by_handle_at(r1, &(0x7f0000000380)=ANY=[@ANYRES8=r1], 0x40000) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc04c565d, &(0x7f0000001100)=@multiplanar_fd={0xd130, 0x7, 0x4, 0x40, 0x7, {0x77359400}, {0x5, 0x2, 0x7, 0xb, 0x4, 0x3, "f6de8be8"}, 0xad14, 0x4, {0x0}, 0xfffffffe}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x88}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) read$nci(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(r3, 0x80045438, 0x0) r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x10, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffe, 0x2, 0xffd, 0x7ffe, 0x40003, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x7, 0x3, 0x9, 0x1fe, 0xe2df, 0xaa14, 0x1, 0x4, 0x8, 0x5, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x80000000}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, 0x0, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x4, {0x966, 0x1, 0x3, 0x9, 0x0, 0x4}}) write$nci(0xffffffffffffffff, &(0x7f0000001740)=ANY=[@ANYBLOB="500105010c0000000303000409056dac131b1126baa0c7c8a90c3a824b51746b39f2b0295b6999a3cee94bac3b6ad3a4472906319cbee76bb972143bf81dbf25e67a468298c2cd66ee042b490d38191a80eac4a0c3669195482e070fa2157afc927a66cf21fac07d1e662e320e134bd9cde6bc84"], 0x83) keyctl$read(0x2, 0x0, &(0x7f00000000c0)=""/4096, 0x1000) move_pages(0x0, 0x0, 0x0, &(0x7f0000001200), &(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000001900), &(0x7f0000000a80)={[&(0x7f00000018c0)='.^*%$\'-\\:\x00\xfb\x12#\x19\t\x99n\x1e\xef,NA\xf3)\xc8\xcd\x9bM\x83\x9d\v\x80\xcbU\xdcV\xe4\xff\xa8\xf1']}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 2m11.833731955s ago: executing program 3 (id=576): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="3c000e0080000000ffffffffffff0802110000007d5d697d41d500000000000000000000640001000301b9040605010300ff7f7107ff000000000361080026006c09000008000c006400000008000d0000"], 0x70}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) close(0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000380)={0x40, r6, 0xb97534d5fe9704cf, 0xf0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x6, 0x13, [{0x4, 0x1}, {0x60, 0x1}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) 2m10.56785509s ago: executing program 3 (id=577): syz_usb_connect(0x6, 0xfffffffffffffc8e, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x38, r4, 0x1, 0x0, 0x0, {0x54}, [{{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x38}}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = socket$kcm(0x10, 0x2, 0x0) open_by_handle_at(r7, &(0x7f00000006c0)=ANY=[@ANYBLOB="9000000024000000edcf00000001000000000000800089a9fa62a990e471a4757fd7716a05eebd81e9d85f5ad8eaa294d1bd61380e0b38374dcabb480ee956cf6351466ffdcaba817434712aef991f4c706e3a2513213883d2d8456a4795ce8e66181daf0488df7b737b33a63d581bd10c48917857649f79cdb083c776e3db4de203d70af5948b9bae83efa84afe5b8e7257c0d5c930000099987361a503e5836ebe11f9376f347ce3f6f6b3e838047c2e7328a8119e5756ff18062d647cb6f099fef1461aa37aba5a133f9e4ed93af10620a0f71c1619fe2a080bd786da1fdd977a7ba1bc688883a8f9add56247a08349895d037b3a8dbe16e0e9add2618ab0aace6a9a966ea1fe6d50fed71391fcaef1659cd1bd591941752c29460d3c31"], 0x3) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="1700000015006b05c84e21000ab16d6e230675f8020000", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'netdevsim0\x00', 'veth0_to_bond\x00'}, 0x0, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0080ff0000050000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r10 = dup(r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r10, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) open_by_handle_at(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="280000004e000010cc000000000000000180e127d6fb000000822d0cfc0000000000000000000000ff7fffffffffd70e8cb3974479ee000000000636b6428b85551445fd5b3dc47e68ade701be286e7aa4613038a31f386ac23e87fadc61"], 0x10000) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 2m4.340697312s ago: executing program 1 (id=587): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000003080)=[{{&(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/104, 0x68}, {&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f0000000040)=""/49, 0x31}], 0x3, &(0x7f0000000440)=""/177, 0xb1}, 0x401}, {{&(0x7f00000005c0)=@x25, 0x80, &(0x7f0000000700)=[{&(0x7f0000000640)=""/79, 0x4f}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/6, 0x6}], 0x3}, 0x8}, {{&(0x7f0000000740)=@hci, 0x80, &(0x7f0000001940)=[{&(0x7f00000007c0)=""/18, 0x12}, {&(0x7f0000000800)}, {&(0x7f0000000840)=""/72, 0x48}], 0x3, &(0x7f0000001980)=""/4096, 0x1000}, 0xe7d}, {{&(0x7f0000002980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002a00)=""/4, 0x4}, {&(0x7f0000002a40)=""/227, 0xe3}], 0x2}}, {{&(0x7f0000002b80)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002c00)=""/116, 0x74}, {&(0x7f0000002c80)=""/61, 0x3d}, {&(0x7f0000002cc0)=""/135, 0x87}, {&(0x7f0000002d80)=""/117, 0x75}, {&(0x7f0000002e00)=""/173, 0xad}, {&(0x7f0000002ec0)=""/58, 0x3a}], 0x6, &(0x7f0000002f80)=""/215, 0xd7}, 0x9}], 0x5, 0x23, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, {0x1fffe, 0x9, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, 0xff, 0x8, 0x0, "d20bddda92e75aec79ff0300d28001000b0000000000001000000900"}}) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r5, &(0x7f0000000400), 0xe) listen(r5, 0x0) (async) ioctl$sock_SIOCINQ(r5, 0x541b, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) 2m4.14423392s ago: executing program 4 (id=588): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa, 0x12}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x1000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 2m3.747899544s ago: executing program 3 (id=589): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r0, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f6, 0x100, 0x70bd2b, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4048090}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r3) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000003880)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000003980)={0x0, 0x0, &(0x7f0000003940)={&(0x7f00000038c0)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0xc5}, 0x10) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)={0x6c, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x440d5}, 0x4048840) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) close(r1) 2m3.487845924s ago: executing program 4 (id=590): r0 = socket$netlink(0x10, 0x3, 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xf, &(0x7f0000000840)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000800)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) syz_open_dev$sg(0x0, 0x0, 0x22c43) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6028d}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}, @IFLA_IPTUN_LINK={0x8, 0x1, r5}]}}}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_MPLS={0x4}, @AF_MPLS={0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2m0.813852877s ago: executing program 3 (id=593): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x924924924924c31, 0x3ec0) readv(r1, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/175, 0xaf}], 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x400, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x2b, 'devices'}]}, 0x9) 1m59.479987502s ago: executing program 0 (id=595): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x25dfdbfd, {0xa, 0x20, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x10}, [@FRA_DST={0x14, 0x1, @loopback}]}, 0x30}}, 0x0) (async) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="120110030200001825e7a0a44000010203010950000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407242a050905580c240c00000000a90c09000304240202042402000424"], 0x0) (async) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) (async) syz_usb_connect$cdc_ncm(0x4, 0xa8, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x2, 0x1, 0x9, 0x50, 0x10, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "c70d"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xe, 0x5, 0x5, 0x5}, {0x6, 0x24, 0x1a, 0x8001, 0x10}, [@obex={0x5, 0x24, 0x15, 0x323}, @mdlm={0x15, 0x24, 0x12, 0x3000}, @mdlm={0x15, 0x24, 0x12, 0x9}, @obex={0x5, 0x24, 0x15, 0x2}, @acm={0x4, 0x24, 0x2, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0x9, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x1, 0xf2}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xe, 0x5, 0x7f}}}}}}}]}}, &(0x7f0000000200)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x40, 0x9b, 0x5, 0xff, 0x2}, 0xad, &(0x7f0000000280)={0x5, 0xf, 0xad, 0x4, [@generic={0x6e, 0x10, 0xa, "f8f28a9826f82b5cf52e6165d49a62a7318680b37a02213e2be976d07093f5a9ef728ec8ede6b3437e650fdbfebd830d1a805084354d74e532f087a87b37add459f44229f3b6ae3a18fecf20007884ded503fe808cb8c8bed5959cac6874dc4fe75e922ca0654a5a3c25cd"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x1, 0x4, 0xa}, @generic={0x1b, 0x10, 0x3, "fa73ea6ca8c9258350b2881c6af10e70ee1bb348a2037d53"}, @ssp_cap={0x18, 0x10, 0xa, 0xa0, 0x3, 0x3, 0xf00, 0x6, [0xff000f, 0xff0000, 0xc030]}]}, 0x1, [{0xbe, &(0x7f0000000340)=@string={0xbe, 0x3, "b6836f2271e420d910195113ed819a82e5c9b9722e9aa91861a013bd8814e0eb36483e6522ec46381642307d4150e65c914a914c2f7e5e7e4e97a861bb5c6073052e664a7e53b03ea6f49027e0ffd4d264edb7dec8d73cf41b8b4bd5f7d2d7752222aaa19526d812103cb776af8d69e3f04b6d025e3ecdf3bb0fd46a1ad751f9a26134be88acec1fdf640e6bc18abe347d981a50cd07d8c62107a583c5867787f4a48949842b7a97e0c88293fd4238fca79c42eb0de0cb3fcc99605d"}}]}) 1m58.744304215s ago: executing program 2 (id=597): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002000)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendmsg$inet_sctp(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xffe0}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}], 0x58, 0x4855}, 0x24000052) 1m58.43184083s ago: executing program 1 (id=598): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f00003f4000/0x2000)=nil, 0x2000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_open_procfs(0x0, &(0x7f0000001180)='net/if_inet6\x00') socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={&(0x7f00000011c0)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000500000001000000010000130400000002000008060000ff0f00000056b6bac091b18293622e2e000cf2160bb443e7baa486e7644f369316c43ed6640728b230e81769fc7af1fda2615a0a3b3de81e41b4a695c3f70db8997437f1c4db25305543db8b4795bef40128cf271f583596824b2ad4e8dc"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xd, 0x1000, &(0x7f0000002cc0)=""/4096, 0x40f00, 0x40, '\x00', 0x0, 0x0, r0, 0x19c00, 0x0, 0xfd7c, 0x10, &(0x7f0000000180)={0x0, 0x2, 0x5b, 0x9}, 0x10}, 0x94) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x42) open_by_handle_at(r1, &(0x7f0000000380)=ANY=[@ANYRES8=r1], 0x40000) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc04c565d, &(0x7f0000001100)=@multiplanar_fd={0xd130, 0x7, 0x4, 0x40, 0x7, {0x77359400}, {0x5, 0x2, 0x7, 0xb, 0x4, 0x3, "f6de8be8"}, 0xad14, 0x4, {0x0}, 0xfffffffe}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x88}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) read$nci(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(r3, 0x80045438, 0x0) r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x10, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffe, 0x2, 0xffd, 0x7ffe, 0x40003, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x7, 0x3, 0x9, 0x1fe, 0xe2df, 0xaa14, 0x1, 0x4, 0x8, 0x5, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x80000000}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, 0x0, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x4, {0x966, 0x1, 0x3, 0x9, 0x0, 0x4}}) write$nci(0xffffffffffffffff, &(0x7f0000001740)=ANY=[@ANYBLOB="500105010c0000000303000409056dac131b1126baa0c7c8a90c3a824b51746b39f2b0295b6999a3cee94bac3b6ad3a4472906319cbee76bb972143bf81dbf25e67a468298c2cd66ee042b490d38191a80eac4a0c3669195482e070fa2157afc927a66cf21fac07d1e662e320e134bd9cde6bc84"], 0x83) keyctl$read(0x2, 0x0, &(0x7f00000000c0)=""/4096, 0x1000) move_pages(0x0, 0x0, 0x0, &(0x7f0000001200), &(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000001900), &(0x7f0000000a80)={[&(0x7f00000018c0)='.^*%$\'-\\:\x00\xfb\x12#\x19\t\x99n\x1e\xef,NA\xf3)\xc8\xcd\x9bM\x83\x9d\v\x80\xcbU\xdcV\xe4\xff\xa8\xf1']}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 1m57.73387041s ago: executing program 2 (id=599): shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) unshare(0x2a020400) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8009, 0x1000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) brk(0x689d80000000) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) getpgid(r2) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) r3 = epoll_create1(0x80000) epoll_pwait(r3, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000180), 0x8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x21e) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0xce) listen(r4, 0x3) fsopen(&(0x7f00000001c0)='sockfs\x00', 0x1) 1m57.581743917s ago: executing program 0 (id=600): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) epoll_create(0x10000e9) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200), 0x2) r2 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r2, 0x0, 0x0, 0x1000}) r3 = syz_io_uring_setup(0x111, &(0x7f00000007c0)={0x0, 0xf453, 0x80, 0x0, 0x2f}, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}}) io_uring_enter(r3, 0x47f6, 0x880e, 0x0, 0x0, 0x0) (fail_nth: 35) 1m57.572445679s ago: executing program 4 (id=601): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000011850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) 1m57.528984421s ago: executing program 3 (id=602): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002000)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendmsg$inet_sctp(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xffe0}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}], 0x58, 0x4855}, 0x24000052) 1m57.199895571s ago: executing program 2 (id=603): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002000)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendmsg$inet_sctp(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xffe0}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}], 0x58, 0x4855}, 0x24000052) 1m56.822598471s ago: executing program 1 (id=604): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) (async) futex_waitv(0x0, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@migrate={0x50, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x50}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x4000) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffec0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r9}, 0x10) socket$kcm(0x11, 0x200000000000003, 0x300) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="10010000", @ANYBLOB="c88845e7e05ae52d00009300000008001317"], 0x1c}}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) 1m56.804420133s ago: executing program 0 (id=605): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = syz_io_uring_setup(0xb7f, &(0x7f0000000180)={0x0, 0x38ab, 0x80, 0x0, 0x1e6}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000003c24d"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r6, 0x0, 0x0, 0x0, 0x322, 0x1, {0x1}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$UHID_CREATE(r0, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/15, 0xf, 0xa0, 0x6, 0x3, 0x5, 0x1635}}, 0x120) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040f30454070000000000010902"], 0x0) syz_usb_connect$cdc_ecm(0x1, 0x13f, &(0x7f0000000380)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12d, 0x1, 0x1, 0xff, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x8, {{0xb, 0x24, 0x6, 0x0, 0x0, "9725bfff06d0"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x2, 0xf, 0x81, 0xc5}, [@mdlm={0x15}, @mdlm={0x15, 0x24, 0x12, 0x2}, @mdlm_detail={0x9c, 0x24, 0x13, 0x1, "42cb466dcc4d5b3c8a5b90765651a36e1b6d1e2b4d621759c8a2428e0ce4f095e6107702067e7ccb94c2560a581f50f20385670417f5404fe9aefb702c4a52ec7174aec32e525e97378990bc841c2d5220e1fc6d918f91b27c95503422043078022a1d3ab449414474c403abf45b1fc28707372d702ce19e8a67808a8737223593fbe8d1d2b7842d85fb49974dc2f08fb4b4f77a0f230673"}, @mbim={0xc, 0x24, 0x1b, 0x200, 0xff71, 0x2, 0x1, 0x3}, @mbim={0xc, 0x24, 0x1b, 0x3, 0x5, 0x2, 0x1, 0x0, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x10}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0xd, 0x6, 0x4f}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0xd9, 0x2, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x81, 0xd8, 0x2}}}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x300, 0x8, 0x40, 0x81, 0x40, 0x3b}, 0x72, &(0x7f00000004c0)={0x5, 0xf, 0x72, 0x5, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "ef20470d6282fe5b2d514aa65208c11c"}, @generic={0x48, 0x10, 0x2, "d411f5ee1d0f35adc5b9bc1f9c5737e310f920b11e2362c48ee345e33114d74910b9f1c0cbcd9a748772165d6d96710ac37beffa3cca584786947eaa3f8a08240c2041f18a"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x0, 0x8, 0x3}, @ptm_cap={0x3}]}, 0x8, [{0xa, &(0x7f0000000300)=@string={0xa, 0x3, "82529a5515016ec2"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x3001}}, {0x31, &(0x7f0000000580)=@string={0x31, 0x3, "ec2a85aa52d7e5bdb7771edad129a101a4c59782f12afe8e54581694580a3e47acb3d0c3c6704bf5f9da8dcff2c86a"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0xfcff}}, {0x52, &(0x7f0000000640)=@string={0x52, 0x3, "ced6634d37818936c18103cba8954d9bc948a2ebdb3dacd4ca2fca2b113724a6ed733976a1c66d6b93bdb380fbbd12cacb5365cd101cba7bf3912efc48a6d9efde3b86568cea29ce49e8ea50f08ee24b"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x500a}}, {0x8, &(0x7f0000000700)=@string={0x8, 0x3, "276d234ae5c7"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x42a}}]}) write$UHID_INPUT(r0, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) 1m56.164069271s ago: executing program 4 (id=606): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="0015b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0xd8, &(0x7f0000000080)="000000d04fd59f11145cc49d5b0b8761eaa6b3d7217aa69e7f0955d2912d537711142c9787785a75b48f85397393e82973ba761b61e93327201680dcd157e0ecfc8f4c2a478cdac9fd1cda0d4bd80bcfe9328795bab870201cd93187d249be6f0bd00f9bf7c5de6c0e031fc85f4a4adcb1b759e34d83a971f66c18e5d505467f36c134ab6caba2805d218acc295d6e70cec4ec5a78d167e333bfa1c0be1de5e23fa2a8f94b877de4a197713cf24d4954216a82e64ac1114828df89284bc4c3e742230c03ab47998ec4ab559d3f0d0f312d081f3f08866cc1") 1m55.848920052s ago: executing program 2 (id=607): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x18, 0x800000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, 0x0) r5 = epoll_create1(0x80000) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, 0x0, 0x4000094) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r8 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r7, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x49084}, 0x4800) r9 = fcntl$dupfd(r6, 0x0, r6) ioctl$VHOST_SET_FEATURES(r9, 0x4008af00, &(0x7f0000000200)=0x8001100) close_range(r5, 0xffffffffffffffff, 0x0) 1m55.795711331s ago: executing program 1 (id=608): syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) getsockopt(0xffffffffffffffff, 0x2af, 0x9, &(0x7f0000001100)=""/216, &(0x7f0000001200)=0xd8) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x0, 0x0, &(0x7f0000000a80)}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r4, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000180000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000010c0)='net/protocols\x00') preadv(r6, &(0x7f0000003940)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x82, 0x3) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) 1m55.507541481s ago: executing program 3 (id=609): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x141842, 0x8) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="3b1c1b2098f0bc154c9778a9229a", 0xe) sched_setaffinity(0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\f\x00'/28], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x2d) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd2c, 0x10000018, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r9 = fanotify_init(0xf00, 0x1000) fanotify_mark(r9, 0x105, 0x5000003a, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000007c0)=r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r9, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x3, &(0x7f0000000300), &(0x7f0000000500)=[0x0, 0x0, 0x0], 0x0, 0x26, &(0x7f0000000580), 0x28, 0x10, &(0x7f00000005c0), &(0x7f0000000040), 0x8, 0x92, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) 1m55.003843361s ago: executing program 0 (id=610): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r0, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f6, 0x100, 0x70bd2b, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4048090}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r3) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000003880)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000003980)={0x0, 0x0, &(0x7f0000003940)={&(0x7f00000038c0)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0xc5}, 0x10) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)={0x6c, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x440d5}, 0x4048840) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) close(r1) 1m54.833710593s ago: executing program 2 (id=611): prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001340), 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b5000000000400000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x3, 0x0, 0x0) sendmmsg(r1, 0x0, 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x101000000, 0x12) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000001300)=0xd, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffff8, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000140)={'pcm3724\x00', [0x0, 0x3, 0x80802, 0x1, 0x2f, 0x81, 0xcc70, 0x5, 0xffe, 0x1, 0x4, 0x1, 0x3, 0x7, 0xffff, 0x10002, 0x7, 0x7ffffffd, 0x1ff, 0x401, 0xbd, 0x0, 0x7fff, 0x2, 0x746f, 0x8, 0x5, 0x3, 0x1, 0x3, 0x8049]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000380800"]) 1m50.369206386s ago: executing program 2 (id=612): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x18, 0x800000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, 0x0) epoll_create1(0x80000) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0) 1m49.830791614s ago: executing program 0 (id=613): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x3, @empty, 0x9}, 0x1c) r1 = openat$6lowpan_control(0xffffff9c, &(0x7f0000002540), 0x2, 0x0) preadv(r1, &(0x7f0000002c00)=[{&(0x7f0000002a40)=""/166, 0xa6}], 0x1, 0x3, 0x10001) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) socket$netlink(0x10, 0x3, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x104}}, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x30a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000100009"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x10) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000013004f0a000200"/20, @ANYRES32=r7, @ANYBLOB="00000000000000000800cfffecc507006c001a8054000a801400"], 0x94}}, 0x20008841) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x8001, 0xd) gettid() timer_create(0x1, 0x0, &(0x7f0000000300)=0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r6) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="4400000047e78ed3208290020d84baf071ebc98394524242981067bf2bd64670086b8fb0305fe8e14c370bf7e312816256fd6bb4d38c05c6ce6f1283d42e0cd67e6f61a37a279e8ce840c1ab256ec82c6449c9393611235893876a5555617ccd73505b4032f4d97939204463fbe8f645c50ff7f10f65c7cb06f44eda6f2dd96a9f1cba94887ce2bd20f0bd7cabb05d73c7a2cfb1eaee8fdbe92d68e8376d6186a6", @ANYRES16=r9, @ANYBLOB="000426bd7000fedbdf250200000008006a000100000008006200ff00000008006100070000000800400007000000050059000400000008000a01b1040000"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4010) r10 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x10000005, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r10, 0xc0905664, &(0x7f00000005c0)={0x0, 0x0, '\x00', @raw_data=[0x8001, 0x8eef, 0x1, 0x9, 0xc8000000, 0x7, 0x0, 0xbf8, 0x26, 0x8, 0xacf, 0x3, 0x1, 0xcd7, 0x253b, 0x8, 0x80000001, 0x0, 0x4, 0x7, 0x80000001, 0xc14, 0xd, 0xf38, 0x8, 0x7, 0xc, 0x6, 0xd5e, 0x9, 0x6d, 0x8]}) timer_settime(r8, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) sendmsg$inet6(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002\x00'/32, @ANYRES32=0x0, @ANYBLOB="c9e86eb9"], 0x28}, 0x4000000) 1m49.829883858s ago: executing program 4 (id=614): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f00003f4000/0x2000)=nil, 0x2000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_open_procfs(0x0, &(0x7f0000001180)='net/if_inet6\x00') socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={&(0x7f00000011c0)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000500000001000000010000130400000002000008060000ff0f00000056b6bac091b18293622e2e000cf2160bb443e7baa486e7644f369316c43ed6640728b230e81769fc7af1fda2615a0a3b3de81e41b4a695c3f70db8997437f1c4db25305543db8b4795bef40128cf271f583596824b2ad4e8dc"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xd, 0x1000, &(0x7f0000002cc0)=""/4096, 0x40f00, 0x40, '\x00', 0x0, 0x0, r0, 0x19c00, 0x0, 0xfd7c, 0x10, &(0x7f0000000180)={0x0, 0x2, 0x5b, 0x9}, 0x10}, 0x94) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x42) open_by_handle_at(r1, &(0x7f0000000380)=ANY=[@ANYRES8=r1], 0x40000) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc04c565d, &(0x7f0000001100)=@multiplanar_fd={0xd130, 0x7, 0x4, 0x40, 0x7, {0x77359400}, {0x5, 0x2, 0x7, 0xb, 0x4, 0x3, "f6de8be8"}, 0xad14, 0x4, {0x0}, 0xfffffffe}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x88}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) read$nci(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(r3, 0x80045438, 0x0) r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x10, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffe, 0x2, 0xffd, 0x7ffe, 0x40003, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x7, 0x3, 0x9, 0x1fe, 0xe2df, 0xaa14, 0x1, 0x4, 0x8, 0x5, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x80000000}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, 0x0, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x4, {0x966, 0x1, 0x3, 0x9, 0x0, 0x4}}) write$nci(0xffffffffffffffff, &(0x7f0000001740)=ANY=[@ANYBLOB="500105010c0000000303000409056dac131b1126baa0c7c8a90c3a824b51746b39f2b0295b6999a3cee94bac3b6ad3a4472906319cbee76bb972143bf81dbf25e67a468298c2cd66ee042b490d38191a80eac4a0c3669195482e070fa2157afc927a66cf21fac07d1e662e320e134bd9cde6bc84"], 0x83) keyctl$read(0x2, 0x0, &(0x7f00000000c0)=""/4096, 0x1000) move_pages(0x0, 0x0, 0x0, &(0x7f0000001200), &(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000001900), &(0x7f0000000a80)={[&(0x7f00000018c0)='.^*%$\'-\\:\x00\xfb\x12#\x19\t\x99n\x1e\xef,NA\xf3)\xc8\xcd\x9bM\x83\x9d\v\x80\xcbU\xdcV\xe4\xff\xa8\xf1']}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 1m49.183789936s ago: executing program 0 (id=615): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, 0x0, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0x34, &(0x7f000000cf3d)=""/195, 0x0, 0x4000, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x432402, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.memory_pressure\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0x42, 0x4, 0x260, 0xffffffff, 0x0, 0x158, 0x0, 0xffffffff, 0xffffffff, 0x1f0, 0x1f0, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x0, 'veth0_to_bridge\x00', 'veth1_to_bond\x00', {}, {}, 0x6, 0x0, 0x40}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'pimreg0\x00', 'netpci0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) r4 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r4, 0x6a, 0x3, 0x20000000, 0x4) 1m23.319054995s ago: executing program 32 (id=615): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, 0x0, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0x34, &(0x7f000000cf3d)=""/195, 0x0, 0x4000, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x432402, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.memory_pressure\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0x42, 0x4, 0x260, 0xffffffff, 0x0, 0x158, 0x0, 0xffffffff, 0xffffffff, 0x1f0, 0x1f0, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x0, 'veth0_to_bridge\x00', 'veth1_to_bond\x00', {}, {}, 0x6, 0x0, 0x40}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'pimreg0\x00', 'netpci0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) r4 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r4, 0x6a, 0x3, 0x20000000, 0x4) 1m16.222326474s ago: executing program 33 (id=608): syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) getsockopt(0xffffffffffffffff, 0x2af, 0x9, &(0x7f0000001100)=""/216, &(0x7f0000001200)=0xd8) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x0, 0x0, &(0x7f0000000a80)}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r4, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000180000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000010c0)='net/protocols\x00') preadv(r6, &(0x7f0000003940)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x82, 0x3) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) 1m14.689156096s ago: executing program 34 (id=612): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x18, 0x800000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, 0x0) epoll_create1(0x80000) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0) 1m14.300003997s ago: executing program 35 (id=609): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x141842, 0x8) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="3b1c1b2098f0bc154c9778a9229a", 0xe) sched_setaffinity(0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\f\x00'/28], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x2d) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd2c, 0x10000018, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r9 = fanotify_init(0xf00, 0x1000) fanotify_mark(r9, 0x105, 0x5000003a, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000007c0)=r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r9, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x3, &(0x7f0000000300), &(0x7f0000000500)=[0x0, 0x0, 0x0], 0x0, 0x26, &(0x7f0000000580), 0x28, 0x10, &(0x7f00000005c0), &(0x7f0000000040), 0x8, 0x92, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) 1m14.141659897s ago: executing program 36 (id=614): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f00003f4000/0x2000)=nil, 0x2000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_open_procfs(0x0, &(0x7f0000001180)='net/if_inet6\x00') socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={&(0x7f00000011c0)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000500000001000000010000130400000002000008060000ff0f00000056b6bac091b18293622e2e000cf2160bb443e7baa486e7644f369316c43ed6640728b230e81769fc7af1fda2615a0a3b3de81e41b4a695c3f70db8997437f1c4db25305543db8b4795bef40128cf271f583596824b2ad4e8dc"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xd, 0x1000, &(0x7f0000002cc0)=""/4096, 0x40f00, 0x40, '\x00', 0x0, 0x0, r0, 0x19c00, 0x0, 0xfd7c, 0x10, &(0x7f0000000180)={0x0, 0x2, 0x5b, 0x9}, 0x10}, 0x94) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x42) open_by_handle_at(r1, &(0x7f0000000380)=ANY=[@ANYRES8=r1], 0x40000) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc04c565d, &(0x7f0000001100)=@multiplanar_fd={0xd130, 0x7, 0x4, 0x40, 0x7, {0x77359400}, {0x5, 0x2, 0x7, 0xb, 0x4, 0x3, "f6de8be8"}, 0xad14, 0x4, {0x0}, 0xfffffffe}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x88}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) read$nci(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(r3, 0x80045438, 0x0) r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x10, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffe, 0x2, 0xffd, 0x7ffe, 0x40003, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x7, 0x3, 0x9, 0x1fe, 0xe2df, 0xaa14, 0x1, 0x4, 0x8, 0x5, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x80000000}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, 0x0, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x4, {0x966, 0x1, 0x3, 0x9, 0x0, 0x4}}) write$nci(0xffffffffffffffff, &(0x7f0000001740)=ANY=[@ANYBLOB="500105010c0000000303000409056dac131b1126baa0c7c8a90c3a824b51746b39f2b0295b6999a3cee94bac3b6ad3a4472906319cbee76bb972143bf81dbf25e67a468298c2cd66ee042b490d38191a80eac4a0c3669195482e070fa2157afc927a66cf21fac07d1e662e320e134bd9cde6bc84"], 0x83) keyctl$read(0x2, 0x0, &(0x7f00000000c0)=""/4096, 0x1000) move_pages(0x0, 0x0, 0x0, &(0x7f0000001200), &(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000001900), &(0x7f0000000a80)={[&(0x7f00000018c0)='.^*%$\'-\\:\x00\xfb\x12#\x19\t\x99n\x1e\xef,NA\xf3)\xc8\xcd\x9bM\x83\x9d\v\x80\xcbU\xdcV\xe4\xff\xa8\xf1']}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 10.128088402s ago: executing program 9 (id=832): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b80b000000050104000000000000000003081080540201"], 0xbb8}, 0x1, 0x0, 0x0, 0x2000}, 0x4004040) 9.88779392s ago: executing program 9 (id=835): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x4001) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000240)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000040)={0x5, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000002ac0)=[0x0], 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000009001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r4}, 0x18) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, 0x0, 0xfffffffffffffe7c) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r8, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x1000, 0x0, 0x8, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x5}, {0x9, 0x0, 0x0, 0x20000000000000}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d4, 0x6c}, 0x2, @in=@broadcast, 0x10000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) 8.188021574s ago: executing program 9 (id=836): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xd8, &(0x7f0000000080)="000000d04fd59f11145cc49d5b0b8761eaa6b3d7217aa69e7f0955d2912d537711142c9787785a75b48f85397393e82973ba761b61e93327201680dcd157e0ecfc8f4c2a478cdac9fd1cda0d4bd80bcfe9328795bab870201cd93187d249be6f0bd00f9bf7c5de6c0e031fc85f4a4adcb1b759e34d83a971f66c18e5d505467f36c134ab6caba2805d218acc295d6e70cec4ec5a78d167e333bfa1c0be1de5e23fa2a8f94b877de4a197713cf24d4954216a82e64ac1114828df89284bc4c3e742230c03ab47998ec4ab559d3f0d0f312d081f3f08866cc1") 7.367891903s ago: executing program 6 (id=841): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="8785"]) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002640)=@newtaction={0xe80, 0x30, 0x3f, 0x0, 0x0, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x0, 0x0, 0x2}, 0x2}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffc, 0x0, 0x0, 0x0, 0x100, 0x81}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x5943}, {0x0, 0x800000, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x83580000}, {0x0, 0xa2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x1cbe}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x1}, {}, {}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0xfffffffe, 0x400000}, {0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xffffff6a}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x100000}, {}, {0xfffffffd, 0x0, 0x0, 0x0, 0x100}, {}, {0xfffffffe}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x800000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10000000, 0x0, 0x0, 0x8}, {0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x4, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x27a}, {0x0, 0x0, 0xffffffff}, {}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffd}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0xa, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0xc}, {}, {0x0, 0x4000, 0x2b7f}, {0x3ff, 0x0, 0xe36, 0x0, 0x8}, {0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0xcfc, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x4}, {0x0, 0x3}, {0x0, 0x0, 0xfffffffc, 0x0, 0x800}, {0xfffffffd, 0x0, 0x0, 0x0, 0xa92}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x1}, {}, {0x0, 0x9}, {}, {}, {}, {}, {0x0, 0x40000000, 0x1, 0x0, 0x10001}, {0x0, 0x0, 0x20}, {}, {0x7ffff, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0xfffffffc}, {}, {}, {}, {0x0, 0xa, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x40, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {0x3}, {}, {}, {}, {0x3}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {0x2}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {0x7, 0x1}, {}, {}, {0x5, 0x1}, {}, {0x1}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe80}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000b403c2fd20000000300200001000000000000"]) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) gettid() openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = syz_io_uring_setup(0x3bd4, 0x0, &(0x7f0000000100), &(0x7f0000000200)) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r3, 0xc, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'pim6reg1\x00', @link_local}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETS2(r6, 0x802c542a, &(0x7f0000000080)) 6.778826312s ago: executing program 6 (id=842): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r2, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x5}, 0x1c) syz_emit_ethernet(0x50, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "f93e20000000"}}}}}}}, 0x0) 6.6344431s ago: executing program 6 (id=844): r0 = memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x4c092, r0, 0x200000000000000) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) (async) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) (async) landlock_restrict_self(r1, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) 6.493809181s ago: executing program 5 (id=846): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, 0x0, 0x404c080) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x5752c1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x87}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket(0x200000000000011, 0x4000000000080002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="0100"], 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd0000003f0000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r3, 0x0, 0x0}, 0x10) 6.349058588s ago: executing program 5 (id=847): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sysinfo(0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, &(0x7f0000000000)=""/57, 0x8e, 0x39, 0x1, 0xa}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r1, 0x0, 0x0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) fcntl$getown(r2, 0x9) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000240)) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x2, 0x0, 0x0, @void, @value=0xf9ff}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000004c0)={0x7, {{0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x80000000}}, {{0xa, 0x4e22, 0x4, @loopback, 0x10001}}}, 0x108) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r6, r6, &(0x7f0000000000)=0x2eb4, 0x2000007ff) sendto$inet6(r6, &(0x7f00000002c0)='E', 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x7e9, @loopback, 0xffffffff}, 0x1c) 6.299873905s ago: executing program 6 (id=848): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000338874620"], 0x0) ioctl$EVIOCRMFF(r2, 0x5501, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000000008d82, 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0xcb9f, 0x10, 0x3, 0x10d}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x1, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfef4, &(0x7f0000000340)=[{&(0x7f0000000380)="035d7566fe3d0d7610be9e3b5001bccc212e933f2e60e953d89d97cc6efd847f277bb6502ce77be1718b1f300c0f98cea34a5a5cf2a253d6e4522905fc0ac50b4ab63c9ada7f53f197f113f5fe4e1639fc35de3fcba496f013d2b618f021af3eaefbe85ef98def68e957632a7c9687360da37913a3ed7cee96f0bac99af39914f4e17705ec1adeb056c0a99fc1ede2e32bb3d2378cc28d0fafcd2722147d94b8b1dc66c9876c", 0xa6}, {&(0x7f0000000700)="6d608a6a745f622e00a2e539f4d9b3fb1110a41ce33d9cbdaede03ab4825488a42bf1a9a48c13394c9b331dddbed8b8cd08a735ae7161afd2af846abead7bf63a195e83b2a75e2985016a562805f4d7fd4a82112a44f4212ec1377ca3c37626299fb93ac29dea22e336bf8fed24c5c444a222dc574b001000000a251ab7377c64ec91242ae2fa528e0593692ada30056f19061b1625cbc360f675e147a770f0b2350843804c79a700c08e9348887e916860c2388660a8a67ba8c6881460a7618e607448f641bc1a20cf86ec17d725f3cc8b3ccb8d2816dd4c3658675cba7f69474ca8019814c99a2d276aa342ef2eb3c16f9887d34", 0xf5}, {&(0x7f0000000440)="ea7211a072f0176dbb0ade65481344a832f42c092fd76835d45852b227803125c660e623003bf346f5643d79a0bb54a19ef8cef589a05ae30ae541c3b196a5566a7a419f5d16a73c4da65f68f4015c64d4ae100f3dbb02ff500124283e69c9f1757bd1654f184a205612ef2bf66d69092758e8ff771ac54b5a74d45b746627c99ba517c0fdff77a1571f9ceedfba625fd6a5ac3eb97184f790b4b76935f29576d9bd37ed69ce7d4684638f0ac62655830058e7af75f6e5b9d173f813c36c2eafc6ec496fff8bf12d831346de07240fd70b46f6aa98468852d60ddf5488391da7e8ec51d51ea70ee45404c80e8b9778f339df", 0xf2}], 0x3, 0x0, 0x0, 0x1f000801}, 0x4409c) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) pread64(r8, &(0x7f00000024c0)=""/209, 0xfd36, 0x698) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r10, 0x6, &(0x7f0000002000)={0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r10, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) fcntl$lock(r10, 0x6, &(0x7f0000000000)) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[], 0x0) 5.016775773s ago: executing program 8 (id=851): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0xe8bc, 0x4, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) (fail_nth: 44) 4.992798829s ago: executing program 9 (id=852): setresuid(0xee01, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r2, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 4.848083903s ago: executing program 5 (id=853): socketpair$unix(0x1, 0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="0200000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000880000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x10c) 4.765213183s ago: executing program 5 (id=854): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x12) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000000000073000040"]) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0xa5, 0xf4, 0x3, 0x8, 0x1a0a, 0x102, 0x930, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x17, 0x0, 0xe0, 0x8, [{{0x9, 0x4, 0x47, 0x0, 0x0, 0x77, 0x92, 0x3d}}]}}]}}, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socket$inet(0x2, 0x80001, 0x84) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001b700)=""/102392, 0x18ff8) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETAF(r5, 0x5408, &(0x7f0000002100)={0x3, 0x0, 0x9, 0x1, 0x14, "888da7a91c04792a"}) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r6, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000802, 0x0, &(0x7f0000000040)={0x3ff, 0x9, 0x2, 0x1, 0x5, 0x6, 0x2, 0x1000, 0x8}) sendmmsg$inet6(r6, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x17fd147c801ae9ab, 0x0) 4.616645854s ago: executing program 8 (id=855): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x100001, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x3c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x2}, @TCA_FQ_PLIMIT={0x8, 0x1, 0xd5}]}}]}, 0x40}, 0x1, 0x1000000, 0x0, 0x20000040}, 0x20040040) 4.407802206s ago: executing program 8 (id=856): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000040)={0x0, 0x4c9, 0x3, '\x00', &(0x7f0000000000)=0x1}) (async) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) (async) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) (async, rerun: 32) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) (rerun: 32) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000100)=@mmap={0xd8, 0xb, 0x4, 0x1, 0x80, {0x0, 0x2710}, {0x0, 0x0, 0x5, 0x8, 0x1, 0x3, "fa6e79ea"}, 0x0, 0x1, {}, 0x4, 0x0, r2}) (async) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f00000001c0)=@overlay={0x1ff, 0x4, 0x4, 0x4000, 0x7, {0x77359400}, {0x4, 0x1, 0x4, 0x1, 0x4, 0x40, "46fdf284"}, 0x4e7, 0x3, {}, 0x8, 0x0, r3}) (async, rerun: 32) r5 = syz_open_dev$evdev(&(0x7f0000000240), 0x8001, 0x400000) (rerun: 32) ioctl$EVIOCGABS20(r5, 0x80184560, &(0x7f0000000280)=""/78) (async, rerun: 32) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000300)={0x1, 'veth0_macvtap\x00'}) (rerun: 32) ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, &(0x7f0000000340)={0x855, "639b0cf1623603649c461c8c9a4a4ad18eb0cced8ad54242772dac2343063245", 0x400, 0x8000, 0x16, 0x10, 0x1}) (async) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000400)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r6, &(0x7f0000000480)={0x8, 0x120, 0xfa00, {0x3, {0x96f, 0x7f, "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", 0x5, 0x1, 0x8, 0x65, 0x8, 0xc, 0x5}, r7}}, 0x128) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) tkill(r8, 0x3a) r9 = socket(0x11, 0xe, 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000002600)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r9, &(0x7f0000002740)={&(0x7f0000002640)={0x1d, r10}, 0x10, &(0x7f0000002700)={&(0x7f0000002680)={0x4, 0x400, 0x9, {0x0, 0x2710}, {0x0, 0x2710}, {0x2}, 0x1, @canfd={{0x1, 0x1}, 0x1a, 0x0, 0x0, 0x0, "f4d6defa095350d9b57972fc61327694fbcb47e7d3e94188649eb1a609834e08fa13fb680b62b0c0377baa03b9e1c62c3ab7e71111aab90fceea1b95b104cc2d"}}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) (async, rerun: 32) r11 = openat(0xffffffffffffff9c, &(0x7f0000002780)='./file0\x00', 0x101880, 0x170) (rerun: 32) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r11, 0x7) (async) r12 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_TPR_ACCESS_REPORTING(r12, 0xc028ae92, &(0x7f00000027c0)={0xfffffffb, 0x40}) ioctl$SNDCTL_DSP_SPEED(r11, 0xc0045002, &(0x7f0000002800)=0x8001) (async) ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000002840)) (async) setsockopt$inet_int(r11, 0x0, 0x6, &(0x7f0000002880)=0x800, 0x4) (async) sendmsg$key(r11, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002900)={&(0x7f00000028c0)={0x2, 0x2, 0x1, 0x9, 0x4, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_ident={0x2, 0xa, 0x8, 0x0, 0xb47c}]}, 0x20}}, 0x10040005) (async, rerun: 64) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r11, 0xc004ae0a, &(0x7f0000002980)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async, rerun: 64) ioctl$EVIOCGSW(r5, 0x8040451b, &(0x7f00000029c0)=""/185) 4.274297164s ago: executing program 8 (id=858): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x4) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100), 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000000)={0x1d, r3, 0x2, {0x0, 0xf0}, 0xfe}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000006c0)={'erspan0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x20, 0x7800, 0x0, 0x7, {{0x31, 0x4, 0x1, 0x2d, 0xc4, 0x66, 0x0, 0x4, 0x4, 0x0, @remote, @loopback, {[@end, @generic={0x82, 0x10, "6ed36a886e321b3348fb6fb1f2ec"}, @rr={0x7, 0x1f, 0xf4, [@multicast1, @dev={0xac, 0x14, 0x14, 0xc}, @private=0xa010102, @remote, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @rr={0x7, 0x17, 0x2a, [@empty, @private=0xa010102, @empty, @rand_addr=0x64010102, @multicast1]}, @lsrr={0x83, 0x13, 0x42, [@remote, @multicast1, @private=0xa010102, @broadcast]}, @timestamp_prespec={0x44, 0x54, 0x45, 0x3, 0x2, [{@local, 0xd6}, {@loopback, 0x10000000}, {@broadcast, 0x8}, {@rand_addr=0x64010100, 0x8}, {@rand_addr=0x64010100, 0xfffffff2}, {@broadcast, 0x6}, {@loopback, 0xadcf}, {@multicast1}, {@rand_addr=0x64010101, 0x1}, {@private=0xa010101, 0x2}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'gre0\x00', &(0x7f0000000700)={'gretap0\x00', 0x0, 0x700, 0x7800, 0x7, 0x1, {{0x6, 0x4, 0x1, 0x3f, 0x18, 0x68, 0x0, 0x7, 0x4, 0x0, @rand_addr=0x64010100, @private=0xa010100, {[@noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000008c0)={'syztnl1\x00', &(0x7f0000000840)={'syztnl1\x00', 0x0, 0x20, 0x8000, 0x8, 0x80000001, {{0x18, 0x4, 0x0, 0x1b, 0x60, 0x68, 0x0, 0x0, 0x4, 0x0, @local, @private=0xa010101, {[@timestamp={0x44, 0xc, 0x37, 0x0, 0xd, [0x0, 0x0]}, @end, @lsrr={0x83, 0x13, 0xe6, [@private=0xa010101, @loopback, @multicast2, @rand_addr=0x64010102]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x1a, 0x4891bd0e3895551e, [{0x2, 0xb, "56b48301d218e987c2"}, {0x5, 0x9, "ad9bf5d5c4e12f"}]}, @timestamp_prespec={0x44, 0xc, 0xaf, 0x3, 0x6, [{@private=0xa010101, 0xb}]}]}}}}}) r12 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r12, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/93, 0x22e000, 0x800, 0x0, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r12, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r13 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r12, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r12, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r12, &(0x7f0000000100)={0x2c, 0x0, r14}, 0x10) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000140)={'xfrm0\x00', 0x0}) sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3104, 0x1b400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r16}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000900)={0x0, @empty, @multicast1}, &(0x7f0000000940)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001480)={&(0x7f0000000980)={0xac8, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [{{0x8}, {0x1f0, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3f91}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9324}}, {0x8}}}]}}, {{0x8}, {0x1ec, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x137}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x17b}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x17c, 0x2, 0x0, 0x1, [{0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x8, 0x7, 0x9, 0x1}, {0x10, 0x6d, 0x5, 0x1}, {0x3, 0x80, 0xf4, 0x7f}, {0x8, 0xe, 0xe0, 0x80000000}, {0x6, 0xa, 0x10, 0x5}, {0x2, 0x40, 0x45, 0x5}, {0x9, 0x7, 0x9, 0x5}, {0x101, 0x39, 0x1, 0x10}, {0x3, 0x9, 0x1, 0x7}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xda7d}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0xff4a, 0x80, 0xe, 0x1}, {0x5, 0x7, 0x5a, 0x2}, {0x8, 0x2, 0x5, 0x1}]}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x657}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x58ef6592}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r9}, {0x94, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xc6, 0x2, 0x1, 0x3}, {0x1ff, 0xfc, 0x88, 0x73}, {0x2594, 0xfd, 0x0, 0x5}, {0x5e78, 0x2, 0x0, 0x1}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x250, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r14}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0xf, 0x7, 0x5, 0x4}, {0x9, 0x81, 0x8, 0x3027}, {0x401, 0x8, 0x7, 0x313}, {0x593, 0x4, 0x8, 0x9}, {0x4, 0x9b, 0x4, 0xfffffff7}, {0x9, 0x5, 0x3, 0x9}, {0x4, 0xe4, 0x2, 0x4}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}]}}]}, 0xac8}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) 3.77182587s ago: executing program 8 (id=859): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x47f}]}, 0x3c}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_clone3(0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x29}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x60040014, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000100), 0x4) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000400)="8d8ade225093be72b52c563e53ad4aa877ed583ff732b59391a11e8fac2ae746502e764ed4531111e2ae3fba95257d0619ad8085f47734ffc3a5863cd3a64d1708b5c4f8720d1116bc152f191a67970bf3217b389341e59f28a39f541f67cb80c231ae1f060935c4cf35b46de28f11", 0x6f}], 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20044014) r6 = socket(0x1d, 0x2, 0x6) socket(0x10, 0x803, 0x2) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4b}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c010}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003041b0000000000120000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) 3.727646992s ago: executing program 7 (id=860): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') write$cgroup_subtree(r1, 0x0, 0x0) 3.226937824s ago: executing program 6 (id=861): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00'}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x40149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0xffffffff}, 0x50) (async) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000000200)={0x8}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="40000500200025a727bd7000fddbdf250a0010cdff000001020001000800060000000000140002000000000000000000000000000000000108000e00060000006a05cbfa648df1c327a027bd653728017efd7c2ec61fb911f6815ccb71266653074ae28d36"], 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x4000000) (async) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1e) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x2, 0x0, 0x5000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1a) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x4c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}, @CTA_TUPLE_REPLY={0x4}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x9a7}]}, @CTA_LABELS_MASK={0x8, 0x17, [0x9]}]}, 0x4c}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x100000000200001) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendto$inet6(r6, 0x0, 0x0, 0x40, &(0x7f0000000080)={0xa, 0x4e21, 0x2, @remote, 0x1ff}, 0x1c) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x23, &(0x7f0000000040)=0x7, 0x4) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0x1ff, 0x7f, 0xfff, 0x9, 0x800100068], 0x2000, 0x80cd4}) syz_usb_connect(0x0, 0x46, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0xc0, 0xe7, 0x9f, 0x10, 0x1199, 0x6859, 0xfd7d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0xf, 0x8, 0x60, 0x5, [{{0x9, 0x4, 0xae, 0x1, 0x3, 0xf7, 0x34, 0x51, 0x0, [], [{{0x9, 0x5, 0x8, 0xa, 0x20, 0x2, 0x2}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x53, 0x6, 0x12, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x88}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x24, 0xac, 0x2}}]}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000000140)=@string={0x2}}]}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r8, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x5100a216}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.110473283s ago: executing program 7 (id=862): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x4001) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000240)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000040)={0x5, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000002ac0)=[0x0], 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000009501000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r4}, 0x18) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, 0x0, 0xfffffffffffffe7c) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r8, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x1000, 0x0, 0x8, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x5}, {0x9, 0x0, 0x0, 0x20000000000000}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d4, 0x6c}, 0x2, @in=@broadcast, 0x10000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) 2.100107638s ago: executing program 7 (id=863): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="11072abd7000fcdbdf250400"], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x1010) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0) 1.94058337s ago: executing program 7 (id=864): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000d00000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94) 1.450530364s ago: executing program 9 (id=865): socket$inet6(0xa, 0x80002, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x1, 0x2, 0x2, 0x4}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000200)=@sack_info={0x0, 0x0, 0x2}, 0xc) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='udf\x00', 0x208000, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="090000000700000000800000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f00000002c0), 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r5 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r5, &(0x7f0000000300)='asymmetric\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) open(&(0x7f0000000240)='./file0\x00', 0x606701, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 1.38836982s ago: executing program 7 (id=866): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000040000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1e}, 0x94) 1.344340566s ago: executing program 5 (id=867): r0 = socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000640), 0x800001, &(0x7f0000000780)={[{@huge_always}, {@mode={'mode', 0x3d, 0x9}}, {}]}) ioctl$I2C_TIMEOUT(r1, 0x702, 0x66a0) r2 = syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000540)={0x0, 0x2, 0x4, {0x1, @win={{0x5, 0x6, 0x7}, 0x8, 0x7, &(0x7f0000000280)={{0x2, 0x10001, 0x6e, 0xa04}, &(0x7f0000000240)={{0xa001, 0xfffffff8, 0x8, 0x1}, &(0x7f0000000200)={{0x0, 0x1, 0x7, 0x3}}}}, 0xfffffffe, &(0x7f0000000440)="baebf2019ccba9015e1d6327a9d6085605cfd2f9d3fa8fb8f330a56e6cf50d1e328295cf69cd53c32622c68c58cbb4f2481998adc21404fd5c56876a834df0ace59ed6ea474a6914a04d123935379ab88cbc1e73845fc59dd87bd13fe4b2f4ca7641a8f981cc89082d7605dfae48ce61152522115a710febab71dbcaaa01ba4c4e9f2dede5216a836e051a268c8a1e2b4321fdb1236dfcb3fd054b92464db8f047ed7164ab26cdfd261aa26cf3426ef42c2b96b9f6a642605c3c903b9e812f7cbd3ef9", 0x8}}, 0x8}) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) close(0x3) capset(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(xts-serpent-avx,wp384-generic)\x00'}, 0x58) r6 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[], 0x1198}, 0x1, 0x0, 0x0, 0x40}, 0x880) recvmmsg$unix(r6, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000880)=""/100, 0x64}, {&(0x7f0000000940)=""/136, 0x88}], 0x2}}], 0x1, 0x42, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) 534.909422ms ago: executing program 7 (id=868): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x3f00, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4811}, 0x0) 187.94779ms ago: executing program 9 (id=869): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x18, 0x800000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, 0x0, 0x4000094) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) mmap(&(0x7f000082b000/0x2000)=nil, 0x2000, 0x200000b, 0x12, 0xffffffffffffffff, 0xd848c000) r5 = fcntl$dupfd(r4, 0x0, r4) symlink(0x0, &(0x7f0000000000)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000200)=0x8001100) 128.311021ms ago: executing program 6 (id=870): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @loopback, 0x6df79d1}, 0x1c) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) connect$netlink(r0, &(0x7f00000000c0)=@unspec, 0xc) syz_emit_ethernet(0x42, &(0x7f0000000340)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0xc, 0x11, 0x0, @local, @mcast2, {[], {0x4e1d, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0x9, 0x0, @void}}}}}}}}, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'das16m1\x00', [0x4f27, 0x1f, 0x10000, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0xfffffffe, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x400089, 0xcaa3, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x4088, 0x0, 0xfffffff8]}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0xb00, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0xe) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff}, 0x78) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$EVIOCGPROP(r8, 0x40047438, &(0x7f0000000180)=""/246) ioctl$EXT4_IOC_MIGRATE(r7, 0x6609) 106.608865ms ago: executing program 8 (id=871): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x12a, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x11, 0xdd, 0xa, 0xff, 0x3f0, 0x211d, 0xc21b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x118, 0x2, 0x7, 0x7, 0xa0, 0x80, [{{0x9, 0x4, 0xe0, 0xc8, 0x1, 0xe6, 0x35, 0x77, 0x7, [@hid_hid={0x9, 0x21, 0x7, 0x4, 0x1, {0x22, 0x1f7}}], [{{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x40, 0x7, 0xba, [@generic={0x27, 0xe, "f13d21a291605c986fd0866c8302d761d647a66040fd1fc8a3554f35dadd028c3bb1b2e5ed"}]}}]}}, {{0x9, 0x4, 0xa6, 0x3, 0x1, 0x69, 0x69, 0x9f, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x5f28, 0x3}, [@selector_unit={0x9, 0x24, 0x5, 0x6, 0x5, "f70c5248"}]}, @hid_hid={0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x7bc}}], [{{0x9, 0x5, 0x1, 0x8, 0x40, 0x3, 0x2, 0x2, [@generic={0xa0, 0x8, "f8a7eba888f37add6e74ec086cb513069de841f3e6c870713725faa294ca0957955cc09d92f3b2b4ab2f5d5f717567f5904d76b92b36ec90982190252559ca0a3b61be39f3f8dca2cefbffc458e842ee7c9e65b1b6a6698e665837d8f2c9b5e40719af3c8eec69c56313d0a0456f92c80093c9f1bc5f305d9869d4ab9889f58bf67ac88a872a336bb9d2ab96c7a490887baa9a7e364ad949c6dbe53204ca"}]}}]}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x1e, 0x30, 0x4, 0x20, 0x3}, 0xa2, &(0x7f0000000180)={0x5, 0xf, 0xa2, 0x5, [@ssp_cap={0x1c, 0x10, 0xa, 0xb2, 0x4, 0x4, 0xf000, 0x2, [0xc00f, 0x6030, 0x3fc0, 0xf]}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "51827d499039dac43dea019e26bc6ddb"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x6, 0x8, 0x1000}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "ce7fb0894e9f553be6d72924bbd15c4c"}, @generic={0x52, 0x10, 0xb, "25d4d22b8fc32b29a7682952f993c6a080da6d4603c41fbc093e0fa2229513e5a87581d314c6a63212dc868a53d7be8e60f01c5a08f01c02bd76f36f3771cd00bffea0c18d4ca3d751afe9122aeba5"}]}, 0x1, [{0xc4, &(0x7f0000000240)=@string={0xc4, 0x3, "5706aea9f5f0af5cd5384e5ce4cd70fa3d59b3a794f97d822e1ddc658af714830fbd08b8b8a22a570c49a45a6eab5789d3e8b7c1b7de9f823f6fae478b90a55d22cb33a8e95bab15afc61b3e3e71ff6114fb6a6aa64bcf878dd2d307c3d81edf4d167818dc8eaef7c438f495aabcd397726b0e05f7498ed09187359254391f89ee2e92afbd74bb0ef4293ce80483a503ac23348af74e36d91610850233cd99862ed4f409dfc5fb5a78fe5b11b0de7f14cc43c4d62a959bdf05d53547b8c2bd141f76"}}]}) syz_usb_control_io(r1, &(0x7f00000005c0)={0x2c, &(0x7f0000000380)={0x0, 0x0, 0x12, {0x12, 0xe, "b7d171b46e6c01940a7bda38c3f78d40"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x200a}}, &(0x7f0000000400)={0x0, 0xf, 0x126, {0x5, 0xf, 0x126, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "e8f8a58b71f23490590fee3c9c067244"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "b09cf35b34e6f3176f590380fc1ba7e1"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x0, 0x6, 0x5}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x1ff, 0xf00f, 0x81, [0xffc0cf, 0x3f, 0x3f00, 0xff00f0, 0x0, 0xffff00]}, @generic={0xc8, 0x10, 0xa, "6711d6c5ff411ff3a17b8ba8c7e1c0848580e31d29179adb4f3932521b1f3c33c1482417b459b7e0731559a7de2b19df9a7232ba61e4d08c51d4d34b043f545da79f847711e7e27f0c26058615fb5a3afeb70ff93471c08cbfcb1173344cb605b41660c1c00dacf0480f1f9888da7268427fe4c1672cca9d6e99768f0a01b4b1bc35351ee3f61f54a3fc567efb261610004f56a6b77400922ccbc08bb7b62aec5506c20dda79cd2a99a6b116e1ac48bbd4ae3384abe33eace18440f38fe4715a10d0440462"}]}}, &(0x7f0000000540)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x1, 0x2, 0x8, "143d0714", "59972d47"}}, &(0x7f0000000580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x4, 0x0, 0x5, 0x2f, 0x1, 0xf}}}, &(0x7f0000000ac0)={0x84, &(0x7f0000000600)={0x40, 0x12ce56efed630d87, 0xf6, "133d8a5e47c75b2f54b3948b495802fc762d13f32cc8e04ae05830c86c05f8ae26c5c6e66b5ee77770b34f72eeac51435013633c0e488e5af8699146ac22297bbe0b170904743c602b0bdf3d3184a87f6346b5959e900dcdac4b121664f5e0d68c5170c772a4ba778eb0a8b0fb41a2d586a25539097804b3008e1281b54c6d4cc78cd72514b1c4ebfcbb218bdb88199e45b4fd24ef75bea2672e5a75eea214e86f74b5233f322308153da2cbc3ebcf8b1d2731b9473c48147b0026b5c16c386097d98659b2fa437fcbcf0aae9a2eef2dff92faebd641a05a43d052574a189e249ec32f893fbf68533b5b8ee5fca308c6f6e86914fc7f"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x80, 0x10}}, &(0x7f0000000800)={0x40, 0x7, 0x2, 0xe3}, &(0x7f0000000840)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000880)={0x40, 0xb, 0x2, "a74d"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000900)={0x40, 0x13, 0x6}, &(0x7f0000000940)={0x40, 0x17, 0x6}, &(0x7f0000000980)={0x40, 0x19, 0x2, "a21c"}, &(0x7f00000009c0)={0x40, 0x1a, 0x2, 0x1ff}, &(0x7f0000000a00)={0x40, 0x1c, 0x1}, &(0x7f0000000a40)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a80)={0x40, 0x21, 0x1, 0xf9}}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 0s ago: executing program 5 (id=872): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') write$cgroup_subtree(r1, 0x0, 0x0) kernel console output (not intermixed with test programs): 1/0x210 [ 167.497582][ T7161] ? rw_verify_area+0xcf/0x6c0 [ 167.497610][ T7161] ? __pfx_evdev_write+0x10/0x10 [ 167.497626][ T7161] vfs_write+0x2a0/0x11d0 [ 167.497649][ T7161] ? __pfx_vfs_write+0x10/0x10 [ 167.497664][ T7161] ? find_held_lock+0x2b/0x80 [ 167.497685][ T7161] ? __fget_files+0x204/0x3c0 [ 167.497710][ T7161] ? __fget_files+0x20e/0x3c0 [ 167.497735][ T7161] ksys_write+0x1f8/0x250 [ 167.497752][ T7161] ? __pfx_ksys_write+0x10/0x10 [ 167.497776][ T7161] ? syscall_user_dispatch+0x78/0x140 [ 167.497802][ T7161] do_syscall_64+0xcd/0x4e0 [ 167.497827][ T7161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.497845][ T7161] RIP: 0033:0x7f417218eec9 [ 167.497859][ T7161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.497875][ T7161] RSP: 002b:00007f41730a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 167.497893][ T7161] RAX: ffffffffffffffda RBX: 00007f41723e6090 RCX: 00007f417218eec9 [ 167.497905][ T7161] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000005 [ 167.497915][ T7161] RBP: 00007f41730a2090 R08: 0000000000000000 R09: 0000000000000000 [ 167.497925][ T7161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 167.497934][ T7161] R13: 00007f41723e6128 R14: 00007f41723e6090 R15: 00007ffec607fb08 [ 167.497958][ T7161] [ 167.728079][ T5931] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 167.784036][ T30] audit: type=1400 audit(1758987626.911:415): avc: denied { read } for pid=7133 comm="syz.1.352" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 167.848185][ T7143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.885819][ T7143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.914456][ T7166] syzkaller1: entered promiscuous mode [ 167.940526][ T7166] syzkaller1: entered allmulticast mode [ 167.951189][ T5931] usb 3-1: device descriptor read/64, error -71 [ 167.979950][ T5909] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 167.998693][ T5909] command write [95] error -22 [ 168.049977][ T5909] usb 2-1: USB disconnect, device number 15 [ 168.192248][ T5931] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 168.248040][ T7180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.258022][ T7178] tipc: Enabled bearer , priority 0 [ 168.277045][ T7178] syzkaller0: entered promiscuous mode [ 168.293227][ T7180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.311334][ T7178] syzkaller0: entered allmulticast mode [ 168.331110][ T5931] usb 3-1: device descriptor read/64, error -71 [ 168.338405][ T7180] SQUASHFS error: Failed to read block 0x0: -5 [ 168.344754][ T7180] unable to read squashfs_super_block [ 168.387042][ T7176] tipc: Resetting bearer [ 168.407337][ T7176] tipc: Disabling bearer [ 168.473743][ T5931] usb usb3-port1: attempt power cycle [ 168.481301][ T5958] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 168.527112][ T7184] ceph: No mds server is up or the cluster is laggy [ 168.582135][ T30] audit: type=1400 audit(1758987627.751:416): avc: denied { wake_alarm } for pid=7183 comm="syz.1.364" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 168.636793][ T5958] usb 1-1: device descriptor read/64, error -71 [ 168.851720][ T5931] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 168.860084][ T10] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 168.883031][ T5931] usb 3-1: device descriptor read/8, error -71 [ 168.963566][ T5958] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 169.101157][ T5958] usb 1-1: device descriptor read/64, error -71 [ 169.259311][ T5931] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 169.261731][ T5958] usb usb1-port1: attempt power cycle [ 169.301784][ T5931] usb 3-1: device descriptor read/8, error -71 [ 169.481684][ T5931] usb usb3-port1: unable to enumerate USB device [ 169.654651][ T5958] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 169.844433][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 169.868398][ T5958] usb 1-1: device descriptor read/8, error -71 [ 169.870726][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 169.931022][ T10] usb 2-1: can't read configurations, error -71 [ 170.295609][ T5958] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 170.333884][ T5958] usb 1-1: device descriptor read/8, error -71 [ 170.458218][ T5958] usb usb1-port1: unable to enumerate USB device [ 170.621040][ T5931] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 170.840726][ T7230] hfsplus: unable to find HFS+ superblock [ 171.081435][ T7232] tmpfs: Bad value for 'mpol' [ 172.158693][ T7244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.382'. [ 172.527673][ T7247] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.383'. [ 172.591772][ T7250] netlink: 'syz.2.384': attribute type 9 has an invalid length. [ 173.066164][ T5931] usb 4-1: unable to get BOS descriptor or descriptor too short [ 173.133642][ T5931] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 173.152611][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 173.164840][ T5931] usb 4-1: can't read configurations, error -71 [ 173.229038][ T7260] vcan0: tx drop: invalid da for name 0x000000fd00000000 [ 173.257916][ T30] audit: type=1400 audit(1758987632.441:417): avc: denied { write } for pid=7261 comm="syz.2.389" name="sg0" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 173.388387][ T7263] cgroup: fork rejected by pids controller in /syz3 [ 173.426143][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 173.858660][ T30] audit: type=1400 audit(1758987632.711:418): avc: denied { setopt } for pid=7261 comm="syz.2.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 173.879811][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.890854][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.900671][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 173.933350][ T10] usb 2-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 173.947766][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.991823][ T10] usb 2-1: config 0 descriptor?? [ 174.326810][ T7373] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 174.333953][ T7373] overlayfs: failed to set xattr on upper [ 174.339830][ T7373] overlayfs: ...falling back to redirect_dir=nofollow. [ 174.346867][ T7373] overlayfs: ...falling back to index=off. [ 174.352745][ T7373] overlayfs: ...falling back to uuid=null. [ 174.399715][ T7374] fuse: Bad value for 'fd' [ 174.416721][ T7374] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 174.477186][ C1] vcan0: j1939_tp_rxtimer: 0xffff888036401400: rx timeout, send abort [ 174.491016][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888036401400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 174.501685][ T30] audit: type=1400 audit(1758987633.681:419): avc: denied { read } for pid=5202 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 174.601290][ T30] audit: type=1400 audit(1758987633.681:420): avc: denied { search } for pid=5202 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.628092][ T10] elecom 0003:056E:00FE.000F: item fetching failed at offset 6/70 [ 174.638798][ T30] audit: type=1400 audit(1758987633.681:421): avc: denied { search } for pid=5202 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.652658][ T10] elecom 0003:056E:00FE.000F: probe with driver elecom failed with error -22 [ 174.670680][ T30] audit: type=1400 audit(1758987633.681:422): avc: denied { add_name } for pid=5202 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.733767][ T30] audit: type=1400 audit(1758987633.681:423): avc: denied { create } for pid=5202 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 174.755684][ T30] audit: type=1400 audit(1758987633.681:424): avc: denied { append open } for pid=5202 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 174.784628][ T30] audit: type=1400 audit(1758987633.681:425): avc: denied { getattr } for pid=5202 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 174.811805][ T30] audit: type=1400 audit(1758987633.781:426): avc: denied { setopt } for pid=7251 comm="syz.1.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 175.188347][ T7252] netlink: 'syz.1.385': attribute type 23 has an invalid length. [ 175.197831][ T5958] usb 2-1: USB disconnect, device number 18 [ 175.237434][ T54] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.313015][ T54] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.375583][ T54] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.306015][ T54] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.522292][ T5171] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 176.531205][ T5171] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 176.543987][ T5171] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 176.555195][ T5171] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 176.569270][ T5171] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 176.660018][ T54] bridge_slave_1: left allmulticast mode [ 176.683130][ T54] bridge_slave_1: left promiscuous mode [ 176.690751][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.720061][ T54] bridge_slave_0: left allmulticast mode [ 176.740258][ T54] bridge_slave_0: left promiscuous mode [ 176.749924][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.059313][ T7416] nfs: Unknown parameter 'mºœ¶bz#hÁ5[W"' [ 177.724382][ T5909] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 177.772774][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.787571][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.799288][ T54] bond0 (unregistering): Released all slaves [ 177.894245][ T5909] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 177.911219][ T5909] usb 3-1: config 0 has no interface number 0 [ 177.927419][ T5909] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 177.951642][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.973587][ T5909] usb 3-1: Product: syz [ 177.977829][ T5909] usb 3-1: Manufacturer: syz [ 177.982951][ T5909] usb 3-1: SerialNumber: syz [ 177.990664][ T7415] tipc: Enabling of bearer rejected, failed to enable media [ 177.993184][ T5909] usb 3-1: config 0 descriptor?? [ 178.272071][ T54] tipc: Left network mode [ 178.286378][ T5909] usb 3-1: Found UVC 0.08 device syz (046d:0823) [ 178.303577][ T5909] usb 3-1: No valid video chain found. [ 178.335111][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 178.335127][ T30] audit: type=1400 audit(1758987637.511:431): avc: denied { create } for pid=7438 comm="syz.4.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 178.375839][ T5909] usb 3-1: USB disconnect, device number 23 [ 178.410004][ T30] audit: type=1400 audit(1758987637.511:432): avc: denied { connect } for pid=7438 comm="syz.4.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 178.515500][ T7398] chnl_net:caif_netlink_parms(): no params data found [ 178.584081][ T7448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.411'. [ 178.621500][ T5853] Bluetooth: hci4: command tx timeout [ 178.755822][ T30] audit: type=1400 audit(1758987637.931:433): avc: denied { add_name } for pid=7436 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.829287][ T30] audit: type=1400 audit(1758987637.971:434): avc: denied { create } for pid=7436 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 178.898053][ T30] audit: type=1400 audit(1758987637.971:435): avc: denied { write } for pid=7436 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=3394 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 178.931216][ T30] audit: type=1400 audit(1758987637.971:436): avc: denied { append } for pid=7436 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" dev="tmpfs" ino=3394 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 179.016594][ T54] hsr_slave_0: left promiscuous mode [ 179.157441][ T30] audit: type=1400 audit(1758987638.341:437): avc: denied { remove_name } for pid=7467 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=3394 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.196125][ T54] hsr_slave_1: left promiscuous mode [ 179.213611][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.240458][ T54] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.258383][ T30] audit: type=1400 audit(1758987638.371:438): avc: denied { unlink } for pid=7467 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=3394 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 179.287859][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.310346][ T54] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.375075][ T54] veth1_macvtap: left promiscuous mode [ 179.380952][ T54] veth0_macvtap: left promiscuous mode [ 179.390988][ T54] veth1_vlan: left promiscuous mode [ 179.397115][ T54] veth0_vlan: left promiscuous mode [ 179.472664][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 179.636239][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 179.649645][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 179.666774][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 179.676534][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 179.689109][ T10] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 179.698938][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.707018][ T10] usb 2-1: Product: syz [ 179.711288][ T10] usb 2-1: Manufacturer: syz [ 179.715893][ T10] usb 2-1: SerialNumber: syz [ 179.729252][ T10] usb 2-1: config 0 descriptor?? [ 179.775660][ T54] team0 (unregistering): Port device team_slave_1 removed [ 179.802991][ T54] team0 (unregistering): Port device team_slave_0 removed [ 179.816454][ T7465] orangefs_mount: mount request failed with -4 [ 179.951938][ T10] usb 2-1: USB disconnect, device number 19 [ 180.188920][ T7484] tipc: Enabling of bearer rejected, failed to enable media [ 180.288429][ T7398] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.295894][ T7398] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.306059][ T7398] bridge_slave_0: entered allmulticast mode [ 180.315054][ T7398] bridge_slave_0: entered promiscuous mode [ 180.348355][ T7398] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.369818][ T7398] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.387947][ T7398] bridge_slave_1: entered allmulticast mode [ 180.395852][ T7398] bridge_slave_1: entered promiscuous mode [ 180.663926][ T7500] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 180.701137][ T5853] Bluetooth: hci4: command tx timeout [ 180.724489][ T7398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.754869][ T7398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.899227][ T7398] team0: Port device team_slave_0 added [ 180.913312][ T7398] team0: Port device team_slave_1 added [ 181.035375][ T7510] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 181.042439][ T7510] overlayfs: failed to set xattr on upper [ 181.048176][ T7510] overlayfs: ...falling back to redirect_dir=nofollow. [ 181.055173][ T7510] overlayfs: ...falling back to index=off. [ 181.061033][ T7510] overlayfs: ...falling back to uuid=null. [ 181.276591][ T7511] fuse: Bad value for 'fd' [ 181.304771][ T7511] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 181.512843][ T7398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.569662][ T7398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.675587][ T7398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.708363][ T7522] tunl0: entered promiscuous mode [ 181.727676][ T7522] tunl0: entered allmulticast mode [ 181.756360][ T7525] netlink: 16 bytes leftover after parsing attributes in process `syz.1.428'. [ 181.835068][ T7398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.870987][ T7398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.942365][ T7519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.426'. [ 181.971376][ T7398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.702924][ T7545] FAULT_INJECTION: forcing a failure. [ 182.702924][ T7545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.851051][ T5853] Bluetooth: hci4: command tx timeout [ 182.881135][ T7545] CPU: 0 UID: 0 PID: 7545 Comm: syz.4.431 Not tainted syzkaller #0 PREEMPT(full) [ 182.881154][ T7545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 182.881164][ T7545] Call Trace: [ 182.881168][ T7545] [ 182.881172][ T7545] dump_stack_lvl+0x16c/0x1f0 [ 182.881191][ T7545] should_fail_ex+0x512/0x640 [ 182.881207][ T7545] _copy_from_user+0x2e/0xd0 [ 182.881224][ T7545] input_event_from_user+0x133/0x3b0 [ 182.881236][ T7545] ? __pfx_input_event_from_user+0x10/0x10 [ 182.881247][ T7545] ? __pfx___might_resched+0x10/0x10 [ 182.881260][ T7545] ? input_inject_event+0x1c0/0x3b0 [ 182.881271][ T7545] evdev_write+0x37b/0x750 [ 182.881284][ T7545] ? __pfx_evdev_write+0x10/0x10 [ 182.881294][ T7545] ? bpf_lsm_file_permission+0x9/0x10 [ 182.881308][ T7545] ? security_file_permission+0x71/0x210 [ 182.881324][ T7545] ? rw_verify_area+0xcf/0x6c0 [ 182.881341][ T7545] ? __pfx_evdev_write+0x10/0x10 [ 182.881350][ T7545] vfs_write+0x2a0/0x11d0 [ 182.881364][ T7545] ? __pfx_vfs_write+0x10/0x10 [ 182.881373][ T7545] ? find_held_lock+0x2b/0x80 [ 182.881386][ T7545] ? __fget_files+0x204/0x3c0 [ 182.881400][ T7545] ? __fget_files+0x20e/0x3c0 [ 182.881415][ T7545] ksys_write+0x1f8/0x250 [ 182.881426][ T7545] ? __pfx_ksys_write+0x10/0x10 [ 182.881435][ T7545] ? syscall_user_dispatch+0x78/0x140 [ 182.881451][ T7545] do_syscall_64+0xcd/0x4e0 [ 182.881467][ T7545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.881478][ T7545] RIP: 0033:0x7f679318eec9 [ 182.881486][ T7545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.881497][ T7545] RSP: 002b:00007f6793fce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 182.881507][ T7545] RAX: ffffffffffffffda RBX: 00007f67933e5fa0 RCX: 00007f679318eec9 [ 182.881513][ T7545] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000006 [ 182.881519][ T7545] RBP: 00007f6793fce090 R08: 0000000000000000 R09: 0000000000000000 [ 182.881525][ T7545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 182.881531][ T7545] R13: 00007f67933e6038 R14: 00007f67933e5fa0 R15: 00007fffa7a22678 [ 182.881544][ T7545] [ 183.272503][ T7398] hsr_slave_0: entered promiscuous mode [ 183.358839][ T7398] hsr_slave_1: entered promiscuous mode [ 183.380537][ T7398] debugfs: 'hsr0' already exists in 'hsr' [ 183.390124][ T7398] Cannot create hsr debugfs directory [ 183.441990][ T5909] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 183.602173][ T5909] usb 2-1: Using ep0 maxpacket: 8 [ 183.619351][ T5909] usb 2-1: config 5 has an invalid interface number: 126 but max is 0 [ 183.628746][ T5909] usb 2-1: config 5 has no interface number 0 [ 183.637758][ T7557] FAULT_INJECTION: forcing a failure. [ 183.637758][ T7557] name failslab, interval 1, probability 0, space 0, times 0 [ 183.655632][ T5909] usb 2-1: config 5 interface 126 has no altsetting 0 [ 183.671224][ T7557] CPU: 0 UID: 0 PID: 7557 Comm: syz.4.435 Not tainted syzkaller #0 PREEMPT(full) [ 183.671250][ T7557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 183.671260][ T7557] Call Trace: [ 183.671266][ T7557] [ 183.671273][ T7557] dump_stack_lvl+0x16c/0x1f0 [ 183.671302][ T7557] should_fail_ex+0x512/0x640 [ 183.671323][ T7557] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 183.671345][ T7557] should_failslab+0xc2/0x120 [ 183.671365][ T7557] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 183.671384][ T7557] ? __kernfs_new_node+0xd2/0x8e0 [ 183.671411][ T7557] __kernfs_new_node+0xd2/0x8e0 [ 183.671438][ T7557] ? __pfx___kernfs_new_node+0x10/0x10 [ 183.671467][ T7557] ? find_held_lock+0x2b/0x80 [ 183.671489][ T7557] ? kernfs_root+0xee/0x2a0 [ 183.671517][ T7557] kernfs_new_node+0x13c/0x1e0 [ 183.671547][ T7557] __kernfs_create_file+0x53/0x350 [ 183.671569][ T7557] sysfs_add_file_mode_ns+0x207/0x3c0 [ 183.671598][ T7557] internal_create_group+0x578/0xf30 [ 183.671653][ T7557] ? __pfx_internal_create_group+0x10/0x10 [ 183.671682][ T7557] ? kernfs_create_link+0x1bd/0x240 [ 183.671705][ T7557] internal_create_groups+0x9d/0x150 [ 183.671732][ T7557] device_add+0x6d1/0x1aa0 [ 183.671762][ T7557] ? __pfx_device_add+0x10/0x10 [ 183.671785][ T7557] ? lockdep_init_map_type+0x5c/0x280 [ 183.671803][ T7557] ? __init_waitqueue_head+0xca/0x150 [ 183.671830][ T7557] netdev_register_kobject+0x1a9/0x3d0 [ 183.671860][ T7557] register_netdevice+0x13dc/0x2270 [ 183.671889][ T7557] ? __pfx_register_netdevice+0x10/0x10 [ 183.671913][ T7557] ? dev_addr_mod+0x316/0x540 [ 183.671935][ T7557] ip6gre_newlink_common.constprop.0+0x14e/0x340 [ 183.671956][ T7557] ? __pfx_ip6gre_newlink_common.constprop.0+0x10/0x10 [ 183.671978][ T7557] ? lockdep_rtnl_is_held+0x26/0x40 [ 183.671995][ T7557] ? ip6gre_tunnel_find+0x36c/0x430 [ 183.672016][ T7557] ip6gre_newlink+0x17d/0x400 [ 183.672034][ T7557] ? __pfx_ip6gre_newlink+0x10/0x10 [ 183.672053][ T7557] rtnl_newlink+0xc45/0x2000 [ 183.672087][ T7557] ? __pfx_rtnl_newlink+0x10/0x10 [ 183.672107][ T7557] ? find_held_lock+0x2b/0x80 [ 183.672128][ T7557] ? avc_has_perm_noaudit+0x117/0x3b0 [ 183.672152][ T7557] ? avc_has_perm_noaudit+0x149/0x3b0 [ 183.672200][ T7557] ? find_held_lock+0x2b/0x80 [ 183.672219][ T7557] ? __pfx_rtnl_newlink+0x10/0x10 [ 183.672239][ T7557] ? __pfx_rtnl_newlink+0x10/0x10 [ 183.672259][ T7557] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 183.672280][ T7557] ? __pfx_rtnl_newlink+0x10/0x10 [ 183.672300][ T7557] rtnetlink_rcv_msg+0x95e/0xe90 [ 183.672323][ T7557] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 183.672352][ T7557] ? ref_tracker_free+0x37c/0x830 [ 183.672379][ T7557] netlink_rcv_skb+0x155/0x420 [ 183.672402][ T7557] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 183.672426][ T7557] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 183.672460][ T7557] ? netlink_deliver_tap+0x1ae/0xd30 [ 183.672487][ T7557] netlink_unicast+0x5aa/0x870 [ 183.672514][ T7557] ? __pfx_netlink_unicast+0x10/0x10 [ 183.672537][ T7557] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 183.672568][ T7557] netlink_sendmsg+0x8d1/0xdd0 [ 183.672596][ T7557] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.672636][ T7557] ____sys_sendmsg+0xa98/0xc70 [ 183.672663][ T7557] ? copy_msghdr_from_user+0x10a/0x160 [ 183.672684][ T7557] ? __pfx_____sys_sendmsg+0x10/0x10 [ 183.672724][ T7557] ___sys_sendmsg+0x134/0x1d0 [ 183.672746][ T7557] ? __pfx____sys_sendmsg+0x10/0x10 [ 183.672804][ T7557] __sys_sendmsg+0x16d/0x220 [ 183.672824][ T7557] ? __pfx___sys_sendmsg+0x10/0x10 [ 183.672867][ T7557] do_syscall_64+0xcd/0x4e0 [ 183.672891][ T7557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.672908][ T7557] RIP: 0033:0x7f679318eec9 [ 183.672923][ T7557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.672939][ T7557] RSP: 002b:00007f6793fce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.672955][ T7557] RAX: ffffffffffffffda RBX: 00007f67933e5fa0 RCX: 00007f679318eec9 [ 183.672965][ T7557] RDX: 0000000020040040 RSI: 0000200000000000 RDI: 0000000000000003 [ 183.672975][ T7557] RBP: 00007f6793fce090 R08: 0000000000000000 R09: 0000000000000000 [ 183.672984][ T7557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 183.672994][ T7557] R13: 00007f67933e6038 R14: 00007f67933e5fa0 R15: 00007fffa7a22678 [ 183.673015][ T7557] [ 183.679628][ T5909] usb 2-1: New USB device found, idVendor=0ac8, idProduct=3410, bcdDevice=86.9e [ 184.345668][ T978] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 184.347452][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.361678][ T5909] usb 2-1: Product: syz [ 184.365837][ T5909] usb 2-1: Manufacturer: syz [ 184.386974][ T5909] usb 2-1: SerialNumber: syz [ 184.521419][ T978] usb 5-1: Using ep0 maxpacket: 32 [ 184.537050][ T978] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 184.561181][ T978] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 184.585671][ T978] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 184.596192][ T30] audit: type=1400 audit(1758987643.761:439): avc: denied { write } for pid=7584 comm="syz.0.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 184.603686][ T978] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 184.650729][ T978] usb 5-1: config 0 interface 0 has no altsetting 0 [ 184.657839][ T5909] uvcvideo 2-1:5.126: probe with driver uvcvideo failed with error -22 [ 184.660244][ T978] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 184.678876][ T978] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 184.687691][ T5909] usb 2-1: USB disconnect, device number 20 [ 184.693046][ T978] usb 5-1: Product: syz [ 184.713941][ T978] usb 5-1: Manufacturer: syz [ 184.719713][ T978] usb 5-1: SerialNumber: syz [ 184.733630][ T978] usb 5-1: config 0 descriptor?? [ 184.759988][ T978] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 184.836391][ T978] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 184.861016][ T5853] Bluetooth: hci4: command tx timeout [ 185.263091][ T7398] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 185.552924][ T30] audit: type=1400 audit(1758987644.621:440): avc: denied { connect } for pid=7597 comm="syz.1.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 185.594958][ T7398] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 185.622519][ T7398] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 185.687226][ T7398] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 185.804663][ T978] usb 5-1: USB disconnect, device number 22 [ 185.814610][ T978] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 185.910492][ T7398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.969535][ T7398] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.016609][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.023792][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.083143][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.090291][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.268260][ T7632] netlink: 'syz.2.449': attribute type 2 has an invalid length. [ 186.276230][ T30] audit: type=1400 audit(1758987645.451:441): avc: denied { append } for pid=7630 comm="syz.2.449" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 187.504106][ T7650] tipc: Enabling of bearer rejected, failed to enable media [ 188.495188][ T7398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.776131][ T7398] veth0_vlan: entered promiscuous mode [ 189.824907][ T7398] veth1_vlan: entered promiscuous mode [ 189.961420][ T7398] veth0_macvtap: entered promiscuous mode [ 189.979229][ T7398] veth1_macvtap: entered promiscuous mode [ 190.028275][ T7694] tmpfs: Bad value for 'mpol' [ 190.136375][ T7398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.359282][ T7398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.391368][ T978] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 190.398045][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.413384][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.428975][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.450533][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.533091][ T978] usb 3-1: device descriptor read/64, error -71 [ 190.577487][ T7705] evm: overlay not supported [ 190.696686][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.711961][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.800992][ T978] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 190.874056][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.921085][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.942398][ T978] usb 3-1: device descriptor read/64, error -71 [ 190.995502][ T30] audit: type=1400 audit(1758987650.181:442): avc: denied { mounton } for pid=7398 comm="syz-executor" path="/root/syzkaller.bRxHRR/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 191.067247][ T7716] tipc: Enabling of bearer rejected, failed to enable media [ 191.081485][ T978] usb usb3-port1: attempt power cycle [ 191.099579][ T30] audit: type=1400 audit(1758987650.241:443): avc: denied { mount } for pid=7398 comm="syz-executor" name="/" dev="gadgetfs" ino=7268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 191.501126][ T978] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 191.510997][ T5917] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 191.524668][ T978] usb 3-1: device descriptor read/8, error -71 [ 191.672572][ T5917] usb 4-1: Using ep0 maxpacket: 16 [ 191.679651][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.711454][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.730345][ T5917] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 191.754374][ T5917] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 191.764009][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.772147][ T978] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 191.783710][ T5917] usb 4-1: config 0 descriptor?? [ 191.801042][ T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 191.917852][ T978] usb 3-1: device descriptor read/8, error -71 [ 192.551365][ T978] usb usb3-port1: unable to enumerate USB device [ 192.571092][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 192.650992][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 192.665377][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 192.699248][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 192.736237][ T5917] HID 045e:07da: Invalid code 65791 type 1 [ 192.767375][ T10] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 192.803023][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.811499][ T5917] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0010/input/input17 [ 192.830423][ T10] usb 5-1: Product: syz [ 192.850630][ T10] usb 5-1: Manufacturer: syz [ 192.877131][ T5917] microsoft 0003:045E:07DA.0010: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 192.889620][ T10] usb 5-1: SerialNumber: syz [ 192.901938][ T10] usb 5-1: config 0 descriptor?? [ 192.988312][ T30] audit: type=1326 audit(1758987652.171:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7689 comm="syz.2.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5c98eec9 code=0x7fc00000 [ 193.015992][ T7722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.093053][ T7764] nfs: Unknown parameter 'mºœ¶bz#hÁ5[W"' [ 193.486718][ T7722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.500616][ T5958] usb 5-1: USB disconnect, device number 23 [ 193.520991][ T5909] usb 4-1: USB disconnect, device number 18 [ 193.648570][ T7761] fido_id[7761]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 193.832706][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.839028][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.101143][ T5909] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 194.176567][ T7782] tipc: Started in network mode [ 194.199034][ T7782] tipc: Node identity e68cb928665c, cluster identity 4711 [ 194.231248][ T7782] tipc: Enabled bearer , priority 0 [ 194.257926][ T7787] syzkaller0: entered promiscuous mode [ 194.308712][ T7787] syzkaller0: entered allmulticast mode [ 195.475825][ T43] tipc: Node number set to 2161162536 [ 195.742391][ T7780] tipc: Resetting bearer [ 195.904076][ T5851] Bluetooth: hci2: command 0x0406 tx timeout [ 195.910491][ T5851] Bluetooth: hci1: command 0x0406 tx timeout [ 195.916616][ T5851] Bluetooth: hci3: command 0x0406 tx timeout [ 196.111911][ T7780] tipc: Disabling bearer [ 196.116425][ T7806] vcan0: tx drop: invalid da for name 0x000000fe00000000 [ 196.587475][ T7818] netlink: 'syz.3.487': attribute type 10 has an invalid length. [ 196.609259][ T7818] team0: Device ipvlan1 failed to register rx_handler [ 196.986107][ T30] audit: type=1400 audit(1758987656.171:445): avc: denied { connect } for pid=7791 comm="syz.1.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 197.010213][ T30] audit: type=1400 audit(1758987656.191:446): avc: denied { read } for pid=7791 comm="syz.1.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 197.224652][ T5909] usb 3-1: unable to get BOS descriptor or descriptor too short [ 197.236228][ T5909] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 197.244265][ T5909] usb 3-1: can't read configurations, error -71 [ 197.365754][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056e4dc00: rx timeout, send abort [ 197.374289][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056e4dc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 197.740451][ T30] audit: type=1400 audit(1758987656.921:447): avc: denied { write } for pid=7833 comm="syz.1.493" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 198.367549][ T5909] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 198.531783][ T5909] usb 3-1: Using ep0 maxpacket: 32 [ 198.549596][ T5909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 198.578457][ T5909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 198.610629][ T5909] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 198.779880][ T5909] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 198.790003][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.827866][ T5909] usb 3-1: Product: syz [ 198.832121][ T5909] usb 3-1: Manufacturer: syz [ 198.836721][ T5909] usb 3-1: SerialNumber: syz [ 198.885561][ T5909] usb 3-1: config 0 descriptor?? [ 199.111142][ T7865] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 199.191317][ T5908] usb 3-1: USB disconnect, device number 29 [ 199.276974][ T7855] tunl0: left promiscuous mode [ 199.285393][ T7855] tunl0: left allmulticast mode [ 199.294458][ T7855] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 199.332456][ T5171] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 199.653845][ T7880] netlink: 60 bytes leftover after parsing attributes in process `syz.3.504'. [ 199.670086][ T30] audit: type=1400 audit(1758987658.851:448): avc: denied { ioctl } for pid=7878 comm="syz.1.506" path="socket:[15668]" dev="sockfs" ino=15668 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 199.768835][ T30] audit: type=1400 audit(1758987658.881:449): avc: denied { read } for pid=7871 comm="syz.3.504" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 200.139076][ T30] audit: type=1400 audit(1758987658.891:450): avc: denied { open } for pid=7871 comm="syz.3.504" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 200.236507][ T7892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.510'. [ 200.343338][ T7890] tipc: Started in network mode [ 200.348251][ T7890] tipc: Node identity 7acd73bf316a, cluster identity 4711 [ 200.417131][ T7896] afs: Unknown parameter 's' [ 200.424231][ T7890] tipc: Enabled bearer , priority 0 [ 200.470459][ T7890] syzkaller0: entered promiscuous mode [ 200.509998][ T7890] syzkaller0: entered allmulticast mode [ 200.542285][ T5909] hid-generic 00A0:0006:0003.0011: unknown main item tag 0x0 [ 200.550704][ T5909] hid-generic 00A0:0006:0003.0011: unknown main item tag 0x0 [ 200.559651][ T5909] hid-generic 00A0:0006:0003.0011: unknown main item tag 0x0 [ 200.583853][ T5909] hid-generic 00A0:0006:0003.0011: unknown main item tag 0x0 [ 200.592160][ T5909] hid-generic 00A0:0006:0003.0011: unknown main item tag 0x0 [ 200.600005][ T5909] hid-generic 00A0:0006:0003.0011: unknown main item tag 0x0 [ 200.671163][ T5909] hid-generic 00A0:0006:0003.0011: unknown main item tag 0x0 [ 200.678912][ T5909] hid-generic 00A0:0006:0003.0011: unknown main item tag 0x0 [ 200.688671][ T5909] hid-generic 00A0:0006:0003.0011: unknown main item tag 0x0 [ 200.696910][ T5909] hid-generic 00A0:0006:0003.0011: unknown main item tag 0x0 [ 200.788486][ T5909] hid-generic 00A0:0006:0003.0011: hidraw0: HID v0.05 Device [syz1] on syz0 [ 200.811140][ T5908] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 200.963620][ T7889] tipc: Resetting bearer [ 200.972458][ T5908] usb 3-1: config 0 has no interfaces? [ 200.978161][ T5908] usb 3-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 200.978929][ T7889] tipc: Disabling bearer [ 201.006365][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.044625][ T5908] usb 3-1: config 0 descriptor?? [ 201.132052][ T7914] netlink: 16 bytes leftover after parsing attributes in process `syz.3.516'. [ 203.103332][ T7934] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 203.357091][ T5171] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 203.366941][ T5171] Bluetooth: hci1: Injecting HCI hardware error event [ 203.376648][ T5171] Bluetooth: hci1: hardware error 0x00 [ 203.765446][ T5908] usb 3-1: USB disconnect, device number 30 [ 204.899450][ T7956] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 204.907752][ T7956] macsec1: entered promiscuous mode [ 205.192809][ T7956] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 205.367392][ T7968] tipc: Enabled bearer , priority 0 [ 205.389589][ T7968] syzkaller0: entered promiscuous mode [ 205.435948][ T7968] syzkaller0: entered allmulticast mode [ 205.626181][ T7978] tipc: Enabled bearer , priority 0 [ 205.651763][ T7978] syzkaller0: entered promiscuous mode [ 205.663018][ T7978] syzkaller0: entered allmulticast mode [ 205.685486][ T7978] tipc: Resetting bearer [ 205.692036][ T7978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.705738][ T7977] tipc: Resetting bearer [ 205.816357][ T7977] tipc: Disabling bearer [ 205.905558][ T7982] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 205.913050][ T7982] overlayfs: failed to set xattr on upper [ 205.918794][ T7982] overlayfs: ...falling back to redirect_dir=nofollow. [ 205.926073][ T7982] overlayfs: ...falling back to index=off. [ 205.932537][ T7982] overlayfs: ...falling back to uuid=null. [ 205.976079][ T7983] fuse: Bad value for 'fd' [ 205.996239][ T7983] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 206.226707][ T7960] tipc: Resetting bearer [ 206.318800][ T7960] tipc: Disabling bearer [ 206.372233][ T5908] tipc: Node number set to 287875821 [ 206.512952][ T5171] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 206.918557][ T7991] tipc: Enabling of bearer rejected, failed to enable media [ 207.338943][ T8006] nfs: Unknown parameter 'mºœ¶bz#hÁ5[W"' [ 207.867910][ T8011] netlink: 24 bytes leftover after parsing attributes in process `syz.1.537'. [ 208.066985][ T30] audit: type=1400 audit(1758987667.251:451): avc: denied { create } for pid=7939 comm="syz.3.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 208.150027][ T30] audit: type=1400 audit(1758987667.291:452): avc: denied { write } for pid=7939 comm="syz.3.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 208.210694][ T30] audit: type=1400 audit(1758987667.301:453): avc: denied { getopt } for pid=7939 comm="syz.3.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 208.297239][ T8021] tipc: Enabling of bearer rejected, failed to enable media [ 208.838017][ T8030] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 208.845132][ T8030] overlayfs: failed to set xattr on upper [ 208.850871][ T8030] overlayfs: ...falling back to redirect_dir=nofollow. [ 208.857851][ T8030] overlayfs: ...falling back to index=off. [ 208.863707][ T8030] overlayfs: ...falling back to uuid=null. [ 208.907847][ T8031] fuse: Bad value for 'fd' [ 208.923437][ T8031] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 209.291026][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 209.313315][ T30] audit: type=1326 audit(1758987668.501:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8032 comm="syz.1.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485a58eec9 code=0x7ffc0000 [ 209.357473][ T30] audit: type=1326 audit(1758987668.501:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8032 comm="syz.1.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f485a58eec9 code=0x7ffc0000 [ 209.385740][ T30] audit: type=1326 audit(1758987668.501:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8032 comm="syz.1.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485a58eec9 code=0x7ffc0000 [ 209.411559][ T30] audit: type=1326 audit(1758987668.521:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8032 comm="syz.1.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f485a58eec9 code=0x7ffc0000 [ 209.490685][ T30] audit: type=1326 audit(1758987668.521:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8032 comm="syz.1.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485a58eec9 code=0x7ffc0000 [ 209.515317][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 209.524070][ T30] audit: type=1326 audit(1758987668.521:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8032 comm="syz.1.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f485a58d710 code=0x7ffc0000 [ 209.547780][ T10] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 209.556528][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 209.567754][ T10] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 209.581119][ T30] audit: type=1326 audit(1758987668.521:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8032 comm="syz.1.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f485a58eacb code=0x7ffc0000 [ 209.605919][ T10] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 209.619259][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 209.634431][ T10] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 209.643684][ T10] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 209.652144][ T10] usb 4-1: Product: syz [ 209.656377][ T10] usb 4-1: Manufacturer: syz [ 209.661151][ T10] usb 4-1: SerialNumber: syz [ 209.680255][ T10] usb 4-1: config 0 descriptor?? [ 209.695100][ T10] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 209.722395][ T10] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 209.723599][ T8037] tipc: Enabling of bearer rejected, failed to enable media [ 209.914758][ T8039] tipc: Enabled bearer , priority 0 [ 209.927242][ T8039] syzkaller0: entered promiscuous mode [ 209.934534][ T8039] syzkaller0: entered allmulticast mode [ 209.945626][ T8038] tipc: Resetting bearer [ 209.957317][ T8038] tipc: Disabling bearer [ 210.161627][ T10] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 210.254426][ T8045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.266080][ T8045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.323349][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 210.334382][ T10] usb 3-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 210.343612][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.354100][ T10] usb 3-1: config 0 descriptor?? [ 210.360388][ T8041] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 210.478912][ T43] usb 4-1: USB disconnect, device number 19 [ 210.490067][ T43] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 210.774298][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 210.780363][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 210.795114][ T10] usb 3-1: USB disconnect, device number 31 [ 211.128203][ T8055] nfs: Unknown parameter 'mºœ¶bz#hÁ5[W"' [ 211.610985][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 211.762737][ T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 211.778515][ T10] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 211.815368][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 211.863541][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 211.961020][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 211.973807][ T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 211.984028][ T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 211.992091][ T10] usb 4-1: Product: syz [ 211.996342][ T10] usb 4-1: Manufacturer: syz [ 212.017420][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 212.026123][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 212.034410][ T10] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 212.084230][ T10] cdc_wdm 4-1:1.0: Unknown control protocol [ 212.517186][ T8079] netlink: 'syz.1.561': attribute type 23 has an invalid length. [ 212.704508][ T8080] FAULT_INJECTION: forcing a failure. [ 212.704508][ T8080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.782060][ T8080] CPU: 1 UID: 0 PID: 8080 Comm: syz.3.555 Not tainted syzkaller #0 PREEMPT(full) [ 212.782087][ T8080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 212.782097][ T8080] Call Trace: [ 212.782103][ T8080] [ 212.782110][ T8080] dump_stack_lvl+0x16c/0x1f0 [ 212.782138][ T8080] should_fail_ex+0x512/0x640 [ 212.782164][ T8080] _copy_to_user+0x32/0xd0 [ 212.782192][ T8080] wdm_read+0x69e/0xab0 [ 212.782222][ T8080] ? __pfx_wdm_read+0x10/0x10 [ 212.782242][ T8080] ? __import_iovec+0x1dd/0x650 [ 212.782266][ T8080] ? avc_policy_seqno+0x9/0x20 [ 212.782285][ T8080] ? selinux_file_permission+0x126/0x660 [ 212.782310][ T8080] ? __pfx_autoremove_wake_function+0x10/0x10 [ 212.782336][ T8080] ? bpf_lsm_file_permission+0x9/0x10 [ 212.782359][ T8080] ? security_file_permission+0x71/0x210 [ 212.782385][ T8080] ? rw_verify_area+0xcf/0x6c0 [ 212.782412][ T8080] ? __pfx_wdm_read+0x10/0x10 [ 212.782433][ T8080] vfs_readv+0x5c1/0x8b0 [ 212.782455][ T8080] ? __pfx_vfs_readv+0x10/0x10 [ 212.782490][ T8080] ? __fget_files+0x20e/0x3c0 [ 212.782507][ T8080] ? __fget_files+0x120/0x3c0 [ 212.782533][ T8080] ? do_readv+0x132/0x340 [ 212.782546][ T8080] do_readv+0x132/0x340 [ 212.782561][ T8080] ? __pfx_do_readv+0x10/0x10 [ 212.782585][ T8080] do_syscall_64+0xcd/0x4e0 [ 212.782610][ T8080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.782628][ T8080] RIP: 0033:0x7f2a7518eec9 [ 212.782642][ T8080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.782659][ T8080] RSP: 002b:00007f2a76046038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 212.782676][ T8080] RAX: ffffffffffffffda RBX: 00007f2a753e6090 RCX: 00007f2a7518eec9 [ 212.782686][ T8080] RDX: 10000000000000d9 RSI: 0000200000000480 RDI: 0000000000000004 [ 212.782702][ T8080] RBP: 00007f2a76046090 R08: 0000000000000000 R09: 0000000000000000 [ 212.782712][ T8080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.782722][ T8080] R13: 00007f2a753e6128 R14: 00007f2a753e6090 R15: 00007ffc8bf81208 [ 212.782746][ T8080] [ 213.007788][ T43] usb 4-1: USB disconnect, device number 20 [ 213.287089][ T8083] tipc: Enabled bearer , priority 0 [ 213.304801][ T8083] syzkaller0: entered promiscuous mode [ 213.344093][ T8083] syzkaller0: entered allmulticast mode [ 213.405139][ T8082] tipc: Resetting bearer [ 213.538212][ T8082] tipc: Disabling bearer [ 213.652654][ T8086] 0ªX¹¦À: left allmulticast mode [ 213.657638][ T8086] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 214.618733][ T8102] tmpfs: Bad value for 'mpol' [ 214.782937][ T8105] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.570'. [ 214.996822][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 214.996839][ T30] audit: type=1400 audit(1758987674.161:501): avc: denied { read } for pid=8108 comm="syz.1.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 215.052983][ T30] audit: type=1400 audit(1758987674.241:502): avc: denied { connect } for pid=8108 comm="syz.1.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 216.072558][ T5908] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 216.449651][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 216.508297][ T5908] usb 3-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 216.567895][ T8132] tipc: Enabling of bearer rejected, failed to enable media [ 216.587277][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.769317][ T5908] usb 3-1: config 0 descriptor?? [ 216.901601][ T8107] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 217.303679][ T30] audit: type=1400 audit(1758987676.451:503): avc: denied { map } for pid=8129 comm="syz.3.577" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 218.847151][ T5908] usbhid 3-1:0.0: can't add hid device: -71 [ 218.984930][ T5908] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 219.807430][ T5908] usb 3-1: USB disconnect, device number 32 [ 222.271990][ T8159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.584'. [ 222.825384][ T30] audit: type=1400 audit(1758987681.961:504): avc: denied { append } for pid=8153 comm="syz.2.584" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 223.267201][ T8171] tipc: Enabled bearer , priority 0 [ 223.347914][ T8173] syzkaller0: entered promiscuous mode [ 223.384573][ T8173] syzkaller0: entered allmulticast mode [ 223.448787][ T8169] tipc: Resetting bearer [ 223.561468][ T8169] tipc: Disabling bearer [ 226.097649][ T8185] overlayfs: failed to clone upperpath [ 226.150323][ T8186] fuse: Bad value for 'fd' [ 226.161435][ T8186] overlayfs: failed to clone upperpath [ 227.657405][ T8192] tipc: Enabled bearer , priority 0 [ 227.734557][ T8193] syzkaller0: entered promiscuous mode [ 227.756713][ T8193] syzkaller0: entered allmulticast mode [ 228.191533][ T8187] tipc: Resetting bearer [ 228.448614][ T8187] tipc: Disabling bearer [ 230.868942][ T30] audit: type=1400 audit(1758987689.971:505): avc: denied { read } for pid=8225 comm="syz.0.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 231.144939][ T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 231.724911][ T10] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 231.735220][ T10] usb 5-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 231.748033][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 231.759092][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 231.780421][ T10] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 231.829310][ T10] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 232.237651][ T10] usb 5-1: Product: syz [ 232.266344][ T10] usb 5-1: Manufacturer: syz [ 232.299315][ T8250] tipc: Enabling of bearer rejected, failed to enable media [ 232.320022][ T10] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 236.883405][ T10] usb 5-1: USB disconnect, device number 24 [ 253.276353][ C1] sched: DL replenish lagged too much [ 259.291486][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 259.320957][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 273.355121][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.579600][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 273.591617][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 273.600833][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 273.611668][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 273.619948][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 273.768388][ T5171] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 273.797245][ T5171] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 273.814848][ T5171] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 273.820098][ T7803] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 273.832416][ T5171] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 273.839714][ T5171] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 273.846918][ T7803] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 273.855140][ T5171] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 273.872230][ T5171] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 273.880333][ T5171] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 273.916405][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 273.917588][ T5853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 273.933356][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 273.933420][ T5853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 273.947544][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 273.955465][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 273.965243][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 273.965311][ T5853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 273.981620][ T5853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 273.983304][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 274.073270][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.178353][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.296993][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.660012][ T8279] chnl_net:caif_netlink_parms(): no params data found [ 274.694932][ T8278] chnl_net:caif_netlink_parms(): no params data found [ 274.769476][ T8276] chnl_net:caif_netlink_parms(): no params data found [ 274.796479][ T13] bridge_slave_1: left allmulticast mode [ 274.804078][ T13] bridge_slave_1: left promiscuous mode [ 274.809810][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.825722][ T13] bridge_slave_0: left allmulticast mode [ 274.831524][ T13] bridge_slave_0: left promiscuous mode [ 274.837170][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.075793][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.086076][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.095596][ T13] bond0 (unregistering): Released all slaves [ 275.325385][ T8283] chnl_net:caif_netlink_parms(): no params data found [ 275.397572][ T8285] chnl_net:caif_netlink_parms(): no params data found [ 275.464636][ T8279] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.476976][ T8279] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.486510][ T8279] bridge_slave_0: entered allmulticast mode [ 275.498436][ T8279] bridge_slave_0: entered promiscuous mode [ 275.568276][ T8278] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.575720][ T8278] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.583333][ T8278] bridge_slave_0: entered allmulticast mode [ 275.592072][ T8278] bridge_slave_0: entered promiscuous mode [ 275.598696][ T8279] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.606836][ T8279] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.614822][ T8279] bridge_slave_1: entered allmulticast mode [ 275.623966][ T8279] bridge_slave_1: entered promiscuous mode [ 275.661086][ T5853] Bluetooth: hci0: command tx timeout [ 275.669545][ T8276] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.676776][ T8276] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.684019][ T8276] bridge_slave_0: entered allmulticast mode [ 275.690615][ T8276] bridge_slave_0: entered promiscuous mode [ 275.697932][ T8278] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.705428][ T8278] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.712841][ T8278] bridge_slave_1: entered allmulticast mode [ 275.720664][ T8278] bridge_slave_1: entered promiscuous mode [ 275.767841][ T8276] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.775543][ T8276] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.783384][ T8276] bridge_slave_1: entered allmulticast mode [ 275.790038][ T8276] bridge_slave_1: entered promiscuous mode [ 275.815779][ T8279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.827521][ T8279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.888366][ T8278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.902285][ T5853] Bluetooth: hci1: command tx timeout [ 275.940064][ T13] hsr_slave_0: left promiscuous mode [ 275.946214][ T13] hsr_slave_1: left promiscuous mode [ 275.952813][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.960167][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.971277][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.978653][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.985873][ T5853] Bluetooth: hci2: command tx timeout [ 275.998244][ T13] veth1_macvtap: left promiscuous mode [ 276.003852][ T13] veth0_macvtap: left promiscuous mode [ 276.010171][ T13] veth1_vlan: left promiscuous mode [ 276.015495][ T13] veth0_vlan: left promiscuous mode [ 276.061309][ T5853] Bluetooth: hci4: command tx timeout [ 276.061315][ T5171] Bluetooth: hci5: command tx timeout [ 276.274789][ T13] team0 (unregistering): Port device team_slave_1 removed [ 276.300746][ T13] team0 (unregistering): Port device team_slave_0 removed [ 276.551787][ T8276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.568315][ T8278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.585907][ T8285] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.597200][ T8285] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.606814][ T8285] bridge_slave_0: entered allmulticast mode [ 276.615218][ T8285] bridge_slave_0: entered promiscuous mode [ 276.623753][ T8279] team0: Port device team_slave_0 added [ 276.629610][ T8285] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.637098][ T8285] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.644488][ T8285] bridge_slave_1: entered allmulticast mode [ 276.653425][ T8285] bridge_slave_1: entered promiscuous mode [ 276.660129][ T8283] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.667508][ T8283] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.675177][ T8283] bridge_slave_0: entered allmulticast mode [ 276.681980][ T8283] bridge_slave_0: entered promiscuous mode [ 276.690763][ T8276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.725115][ T8279] team0: Port device team_slave_1 added [ 276.754055][ T8283] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.761837][ T8283] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.769828][ T8283] bridge_slave_1: entered allmulticast mode [ 276.777624][ T8283] bridge_slave_1: entered promiscuous mode [ 276.801802][ T8278] team0: Port device team_slave_0 added [ 276.810454][ T8276] team0: Port device team_slave_0 added [ 276.825756][ T8285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.859020][ T8283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.872468][ T8278] team0: Port device team_slave_1 added [ 276.879241][ T8276] team0: Port device team_slave_1 added [ 276.897015][ T8279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.904110][ T8279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.930819][ T8279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.944832][ T8285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.971943][ T8283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.015782][ T8279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.022803][ T8279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.048883][ T8279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.095039][ T8278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.102698][ T8278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.128962][ T8278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.140700][ T8276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.147989][ T8276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.174328][ T8276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.191213][ T8285] team0: Port device team_slave_0 added [ 277.206168][ T8278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.213377][ T8278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.239563][ T8278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.256028][ T8276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.264510][ T8276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.292101][ T8276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.311797][ T8285] team0: Port device team_slave_1 added [ 277.327034][ T8283] team0: Port device team_slave_0 added [ 277.335032][ T8283] team0: Port device team_slave_1 added [ 277.411842][ T8279] hsr_slave_0: entered promiscuous mode [ 277.417860][ T8279] hsr_slave_1: entered promiscuous mode [ 277.425393][ T8279] debugfs: 'hsr0' already exists in 'hsr' [ 277.431268][ T8279] Cannot create hsr debugfs directory [ 277.437335][ T8285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.444949][ T8285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.471034][ T8285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.483498][ T8285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.490703][ T8285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.516847][ T8285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.540425][ T8283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.548077][ T8283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.579044][ T8283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.597051][ T8283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.604092][ T8283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.630389][ T8283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.669775][ T8278] hsr_slave_0: entered promiscuous mode [ 277.679110][ T8278] hsr_slave_1: entered promiscuous mode [ 277.685650][ T8278] debugfs: 'hsr0' already exists in 'hsr' [ 277.696991][ T8278] Cannot create hsr debugfs directory [ 277.741354][ T5171] Bluetooth: hci0: command tx timeout [ 277.773360][ T8276] hsr_slave_0: entered promiscuous mode [ 277.779741][ T8276] hsr_slave_1: entered promiscuous mode [ 277.786539][ T8276] debugfs: 'hsr0' already exists in 'hsr' [ 277.795950][ T8276] Cannot create hsr debugfs directory [ 277.908363][ T8285] hsr_slave_0: entered promiscuous mode [ 277.914821][ T8285] hsr_slave_1: entered promiscuous mode [ 277.922071][ T8285] debugfs: 'hsr0' already exists in 'hsr' [ 277.927798][ T8285] Cannot create hsr debugfs directory [ 277.981457][ T5171] Bluetooth: hci1: command tx timeout [ 277.988331][ T8283] hsr_slave_0: entered promiscuous mode [ 277.999064][ T8283] hsr_slave_1: entered promiscuous mode [ 278.007865][ T8283] debugfs: 'hsr0' already exists in 'hsr' [ 278.014485][ T8283] Cannot create hsr debugfs directory [ 278.061008][ T5171] Bluetooth: hci2: command tx timeout [ 278.118002][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.141113][ T5171] Bluetooth: hci5: command tx timeout [ 278.146501][ T5171] Bluetooth: hci4: command tx timeout [ 278.241973][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.303881][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.412288][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 278.448341][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.714104][ T8278] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 278.732131][ T8278] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 278.747604][ T8278] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 278.783031][ T8278] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 278.906464][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.933006][ T8279] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 278.957504][ T8279] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 278.967413][ T8279] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 278.984554][ T8279] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 279.010595][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.096456][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.139146][ T8276] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 279.209742][ T8276] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 279.219969][ T8276] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 279.245717][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.288157][ T8276] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 279.389219][ T8278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.467861][ T8283] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 279.488964][ T8278] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.539292][ T8283] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 279.550687][ T8283] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 279.578861][ T8283] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 279.623638][ T8279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.677936][ T8285] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 279.697638][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.704759][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.729858][ T8279] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.739658][ T8285] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 279.761269][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.768404][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.800292][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.819445][ T8285] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 279.821289][ T5171] Bluetooth: hci0: command tx timeout [ 279.837199][ T8285] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 279.869864][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.876953][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.887286][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.894379][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.943430][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.035798][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.061700][ T5171] Bluetooth: hci1: command tx timeout [ 280.117315][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.141243][ T5171] Bluetooth: hci2: command tx timeout [ 280.226126][ T5171] Bluetooth: hci4: command tx timeout [ 280.233140][ T5853] Bluetooth: hci5: command tx timeout [ 280.237745][ T8276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.405154][ T8276] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.486731][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.493970][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.558287][ T8285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.593534][ T8283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.621149][ T13] bridge_slave_1: left allmulticast mode [ 280.626801][ T13] bridge_slave_1: left promiscuous mode [ 280.641794][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.656063][ T13] bridge_slave_0: left allmulticast mode [ 280.665107][ T13] bridge_slave_0: left promiscuous mode [ 280.675874][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.688638][ T13] bridge_slave_1: left allmulticast mode [ 280.700496][ T13] bridge_slave_1: left promiscuous mode [ 280.707945][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.725120][ T13] bridge_slave_0: left allmulticast mode [ 280.730787][ T13] bridge_slave_0: left promiscuous mode [ 280.736842][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.748285][ T13] bridge_slave_1: left allmulticast mode [ 280.754861][ T13] bridge_slave_1: left promiscuous mode [ 280.760590][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.770047][ T13] bridge_slave_0: left allmulticast mode [ 280.775841][ T13] bridge_slave_0: left promiscuous mode [ 280.782264][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.802757][ T13] bond_slave_0: left promiscuous mode [ 280.808285][ T13] bond_slave_1: left promiscuous mode [ 281.063494][ T13] bond1 (unregistering): (slave macvlan3): Removing an active aggregator [ 281.073983][ T13] bond1 (unregistering): (slave macvlan3): Releasing backup interface [ 281.087178][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.097488][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.108003][ T13] bond0 (unregistering): Released all slaves [ 281.170746][ T13] bond1 (unregistering): Released all slaves [ 281.402586][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.414742][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.425082][ T13] bond0 (unregistering): Released all slaves [ 281.608769][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.622786][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.632781][ T13] bond0 (unregistering): Released all slaves [ 281.647252][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.654390][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.679368][ T8283] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.703213][ T8279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.716888][ T8285] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.749066][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.756261][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.777979][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.785141][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.827514][ T13] tipc: Left network mode [ 281.848046][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.855208][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.883828][ T13] tipc: Left network mode [ 281.889126][ T8278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.904972][ T5171] Bluetooth: hci0: command tx timeout [ 281.935818][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.942953][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.990335][ T8276] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 282.006868][ T8276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 282.035865][ T13] tipc: Left network mode [ 282.141297][ T5171] Bluetooth: hci1: command tx timeout [ 282.223226][ T5171] Bluetooth: hci2: command tx timeout [ 282.299078][ T8285] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 282.312227][ T5171] Bluetooth: hci4: command tx timeout [ 282.316810][ T5853] Bluetooth: hci5: command tx timeout [ 282.330323][ T8285] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 282.583077][ T8279] veth0_vlan: entered promiscuous mode [ 282.699486][ T8279] veth1_vlan: entered promiscuous mode [ 282.722600][ T8276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.736700][ T8283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.894776][ T8285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.996248][ T8278] veth0_vlan: entered promiscuous mode [ 283.047137][ T8278] veth1_vlan: entered promiscuous mode [ 283.227728][ T8279] veth0_macvtap: entered promiscuous mode [ 283.254237][ T8279] veth1_macvtap: entered promiscuous mode [ 283.368491][ T13] hsr_slave_0: left promiscuous mode [ 283.385254][ T13] hsr_slave_1: left promiscuous mode [ 283.394215][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.401783][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.409359][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.416898][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.430013][ T13] hsr_slave_0: left promiscuous mode [ 283.435974][ T13] hsr_slave_1: left promiscuous mode [ 283.442122][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.449484][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.457262][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.464737][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.477187][ T13] hsr_slave_0: left promiscuous mode [ 283.482986][ T13] hsr_slave_1: left promiscuous mode [ 283.488592][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.496407][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.504897][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.512617][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.542590][ T13] veth1_macvtap: left promiscuous mode [ 283.548125][ T13] veth0_macvtap: left promiscuous mode [ 283.553833][ T13] veth1_vlan: left promiscuous mode [ 283.559077][ T13] veth0_vlan: left promiscuous mode [ 283.565192][ T13] veth1_macvtap: left promiscuous mode [ 283.570656][ T13] veth0_macvtap: left promiscuous mode [ 283.576299][ T13] veth1_vlan: left promiscuous mode [ 283.583200][ T13] veth0_vlan: left promiscuous mode [ 283.589664][ T13] veth1_macvtap: left promiscuous mode [ 283.595505][ T13] veth0_macvtap: left promiscuous mode [ 283.601337][ T13] veth1_vlan: left promiscuous mode [ 283.606565][ T13] veth0_vlan: left promiscuous mode [ 283.977974][ T13] team0 (unregistering): Port device team_slave_1 removed [ 284.005634][ T13] team0 (unregistering): Port device team_slave_0 removed [ 284.450407][ T13] team0 (unregistering): Port device team_slave_1 removed [ 284.483548][ T13] team0 (unregistering): Port device team_slave_0 removed [ 284.934578][ T13] team0 (unregistering): Port device team_slave_1 removed [ 284.964791][ T13] team0 (unregistering): Port device team_slave_0 removed [ 285.244810][ T8279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.276848][ T8278] veth0_macvtap: entered promiscuous mode [ 285.288919][ T8278] veth1_macvtap: entered promiscuous mode [ 285.309176][ T8279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.418959][ T36] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.436968][ T8276] veth0_vlan: entered promiscuous mode [ 285.452929][ T8283] veth0_vlan: entered promiscuous mode [ 285.464768][ T8285] veth0_vlan: entered promiscuous mode [ 285.474190][ T8278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.496785][ T36] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.507792][ T36] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.532749][ T8283] veth1_vlan: entered promiscuous mode [ 285.559940][ T8278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.578709][ T36] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.637253][ T8276] veth1_vlan: entered promiscuous mode [ 285.645454][ T8285] veth1_vlan: entered promiscuous mode [ 285.660881][ T1112] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.690356][ T1112] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.703328][ T1112] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.778862][ T1112] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.831767][ T8283] veth0_macvtap: entered promiscuous mode [ 285.879190][ T8285] veth0_macvtap: entered promiscuous mode [ 285.918906][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.929814][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.945154][ T8285] veth1_macvtap: entered promiscuous mode [ 285.964073][ T8283] veth1_macvtap: entered promiscuous mode [ 286.019359][ T8276] veth0_macvtap: entered promiscuous mode [ 286.052109][ T8285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.078022][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.082301][ T8285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.096617][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.105488][ T8276] veth1_macvtap: entered promiscuous mode [ 286.134913][ T8283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.147148][ T8283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.158185][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.174952][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.186883][ T1112] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.205940][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.214021][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.230790][ T8276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.275435][ T1112] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.303365][ T1112] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.340036][ T8276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.378587][ T1112] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.409195][ T1112] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.499150][ T78] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.523132][ T78] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.579583][ T78] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.608200][ T78] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.636930][ T1150] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.083460][ T8523] fuse: Bad value for 'fd' [ 287.090432][ T8523] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 287.541360][ T1150] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.556399][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.567105][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.585584][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.788527][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.810508][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.823946][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.836070][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.017082][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.041844][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.383968][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.392939][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.400749][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.421628][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.525389][ T8534] tipc: Started in network mode [ 288.530322][ T8534] tipc: Node identity 5e22fb0cb339, cluster identity 4711 [ 288.537796][ T8534] tipc: Enabled bearer , priority 0 [ 288.679590][ T8533] tipc: Disabling bearer [ 288.812083][ T8546] tipc: Started in network mode [ 288.825139][ T8546] tipc: Node identity 4a894a84caf5, cluster identity 4711 [ 288.832740][ T8546] tipc: Enabled bearer , priority 0 [ 288.840594][ T8546] syzkaller0: entered promiscuous mode [ 288.857647][ T8546] syzkaller0: entered allmulticast mode [ 288.903000][ T8554] nfs: Unknown parameter 'mºœ¶bz#hÁ5[W"' [ 289.530954][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.545783][ T8560] vlan2: entered allmulticast mode [ 289.551182][ T8560] bridge0: entered allmulticast mode [ 289.671267][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.693742][ T8544] tipc: Resetting bearer [ 289.750134][ T8544] tipc: Disabling bearer [ 289.760941][ T5924] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 290.061737][ T5924] usb 7-1: Using ep0 maxpacket: 32 [ 290.070787][ T5924] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 290.534862][ T5924] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 290.571514][ T5924] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 290.583202][ T5924] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 290.697477][ T5924] usb 7-1: config 0 interface 0 has no altsetting 0 [ 290.851446][ T5924] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 290.940050][ T5924] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 290.973917][ T5924] usb 7-1: Product: syz [ 290.978199][ T5924] usb 7-1: Manufacturer: syz [ 291.013969][ T5924] usb 7-1: SerialNumber: syz [ 291.052332][ T5924] usb 7-1: config 0 descriptor?? [ 291.071741][ T5924] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 291.115855][ T5924] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 292.680336][ T8622] nfs: Unknown parameter 'mºœ¶bz#hÁ5[W"' [ 292.785166][ T8623] nfs: Unknown parameter 'mºœ¶bz#hÁ5[W"' [ 292.911188][ T43] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 293.294818][ T43] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 293.383003][ T43] usb 10-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 293.420606][ T43] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 293.456816][ T43] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 293.475950][ T43] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 293.476506][ T8631] ipvlan1: entered promiscuous mode [ 293.488621][ T43] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 293.510883][ T43] usb 10-1: Product: syz [ 293.515150][ T43] usb 10-1: Manufacturer: syz [ 293.547055][ T43] cdc_wdm 10-1:1.0: skipping garbage [ 293.578930][ T43] cdc_wdm 10-1:1.0: skipping garbage [ 293.601126][ T8631] ipvlan1: entered allmulticast mode [ 293.617991][ T8631] veth0_vlan: entered allmulticast mode [ 293.627793][ T43] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22 [ 294.177829][ T8642] FAULT_INJECTION: forcing a failure. [ 294.177829][ T8642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.192780][ T8642] CPU: 0 UID: 0 PID: 8642 Comm: syz.7.640 Not tainted syzkaller #0 PREEMPT(full) [ 294.192803][ T8642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 294.192814][ T8642] Call Trace: [ 294.192823][ T8642] [ 294.192830][ T8642] dump_stack_lvl+0x16c/0x1f0 [ 294.192859][ T8642] should_fail_ex+0x512/0x640 [ 294.192884][ T8642] _copy_from_user+0x2e/0xd0 [ 294.192909][ T8642] input_event_from_user+0x133/0x3b0 [ 294.192927][ T8642] ? __pfx_input_event_from_user+0x10/0x10 [ 294.192944][ T8642] ? __pfx___might_resched+0x10/0x10 [ 294.192965][ T8642] ? input_inject_event+0x1c0/0x3b0 [ 294.192985][ T8642] evdev_write+0x37b/0x750 [ 294.193005][ T8642] ? __pfx_evdev_write+0x10/0x10 [ 294.193023][ T8642] ? bpf_lsm_file_permission+0x9/0x10 [ 294.193045][ T8642] ? security_file_permission+0x71/0x210 [ 294.193072][ T8642] ? rw_verify_area+0xcf/0x6c0 [ 294.193100][ T8642] ? __pfx_evdev_write+0x10/0x10 [ 294.193115][ T8642] vfs_write+0x2a0/0x11d0 [ 294.193144][ T8642] ? __pfx_vfs_write+0x10/0x10 [ 294.193159][ T8642] ? find_held_lock+0x2b/0x80 [ 294.193181][ T8642] ? __fget_files+0x204/0x3c0 [ 294.193204][ T8642] ? __fget_files+0x20e/0x3c0 [ 294.193232][ T8642] ksys_write+0x1f8/0x250 [ 294.193250][ T8642] ? __pfx_ksys_write+0x10/0x10 [ 294.193266][ T8642] ? syscall_user_dispatch+0x78/0x140 [ 294.193295][ T8642] do_syscall_64+0xcd/0x4e0 [ 294.193325][ T8642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.193343][ T8642] RIP: 0033:0x7f98b3b8eec9 [ 294.193357][ T8642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.193373][ T8642] RSP: 002b:00007f98b49ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 294.193390][ T8642] RAX: ffffffffffffffda RBX: 00007f98b3de5fa0 RCX: 00007f98b3b8eec9 [ 294.193401][ T8642] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000006 [ 294.193411][ T8642] RBP: 00007f98b49ef090 R08: 0000000000000000 R09: 0000000000000000 [ 294.193421][ T8642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 294.193430][ T8642] R13: 00007f98b3de6038 R14: 00007f98b3de5fa0 R15: 00007ffc7e915268 [ 294.193453][ T8642] [ 294.806831][ T43] usb 7-1: USB disconnect, device number 2 [ 295.137519][ T43] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 295.448616][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.6.644'. [ 295.464536][ T8663] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 295.531224][ T8663] macvlan2: entered allmulticast mode [ 295.544985][ T8663] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 295.682400][ T978] usb 10-1: USB disconnect, device number 2 [ 296.039077][ T8683] fuse: Bad value for 'fd' [ 296.045823][ T8683] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 296.786306][ T8699] fuse: Bad value for 'fd' [ 296.806664][ T8699] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 297.942318][ T8704] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 297.949713][ T8704] overlayfs: failed to set xattr on upper [ 297.954197][ T8705] fuse: Bad value for 'fd' [ 297.955518][ T8704] overlayfs: ...falling back to redirect_dir=nofollow. [ 297.963316][ T8705] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 297.967637][ T8704] overlayfs: ...falling back to index=off. [ 297.987389][ T8704] overlayfs: ...falling back to uuid=null. [ 298.748025][ T8716] fuse: Bad value for 'fd' [ 298.767674][ T8716] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 299.349484][ T30] audit: type=1400 audit(1758987758.531:506): avc: denied { read } for pid=8719 comm="syz.5.656" path="socket:[22230]" dev="sockfs" ino=22230 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 300.250305][ T8740] syzkaller1: entered promiscuous mode [ 300.255905][ T8740] syzkaller1: entered allmulticast mode [ 300.496974][ T8738] nfs: Unknown parameter 'mºœ¶bz#hÁ5[W"' [ 301.222095][ T8769] misc userio: Invalid payload size [ 301.669389][ T8771] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 301.676466][ T8771] overlayfs: failed to set xattr on upper [ 301.682275][ T8771] overlayfs: ...falling back to redirect_dir=nofollow. [ 301.689149][ T8771] overlayfs: ...falling back to index=off. [ 301.694985][ T8771] overlayfs: ...falling back to uuid=null. [ 301.741929][ T8772] fuse: Bad value for 'fd' [ 301.765066][ T8772] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 303.681066][ T8803] nfs: Unknown parameter 'mºœ¶bz#hÁ5[W"' [ 304.284327][ T8816] netlink: 68 bytes leftover after parsing attributes in process `syz.7.674'. [ 304.299652][ T30] audit: type=1400 audit(1758987763.481:507): avc: denied { ioctl } for pid=8810 comm="syz.5.675" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x7201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 304.571373][ T8753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.635692][ T8825] nfs: Unknown parameter 'mºœ¶bz#hÁ5[W"' [ 306.558298][ T8864] nfs: Unknown parameter 'mºœ¶bz#hÁ5[W"' [ 306.863787][ T5917] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 307.024384][ T5917] usb 7-1: Using ep0 maxpacket: 8 [ 307.045356][ T5917] usb 7-1: unable to get BOS descriptor or descriptor too short [ 307.074669][ T5917] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.120940][ T5917] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 307.174123][ T5917] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 307.217013][ T5917] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 307.236373][ T5917] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.266811][ T5917] usb 7-1: Product: syz [ 307.276920][ T5917] usb 7-1: Manufacturer: syz [ 307.361826][ T5917] usb 7-1: SerialNumber: syz [ 308.229957][ T5917] cdc_ncm 7-1:1.0: bind() failure [ 308.252640][ T5917] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 308.263784][ T5917] cdc_ncm 7-1:1.1: bind() failure [ 308.291316][ T5917] usb 7-1: USB disconnect, device number 3 [ 308.416358][ T8901] nfs: Unknown parameter 'mºœ¶bz#hÁ5[W"' [ 308.619940][ T8905] netlink: 20 bytes leftover after parsing attributes in process `syz.7.694'. [ 308.838032][ T8912] netlink: 20 bytes leftover after parsing attributes in process `syz.8.697'. [ 308.949157][ T30] audit: type=1400 audit(1758987768.051:508): avc: denied { append } for pid=8909 comm="syz.6.695" name="sg0" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 308.967494][ T8917] vlan2: entered allmulticast mode [ 308.982891][ T8917] bridge0: entered allmulticast mode [ 309.398768][ T30] audit: type=1400 audit(1758987768.321:509): avc: denied { connect } for pid=8909 comm="syz.6.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 309.722197][ T8927] netlink: 20 bytes leftover after parsing attributes in process `syz.5.700'. [ 309.917251][ T8936] mac80211_hwsim hwsim20 wlan0: entered promiscuous mode [ 309.923730][ T30] audit: type=1400 audit(1758987769.111:510): avc: denied { write } for pid=8934 comm="syz.5.705" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 309.978200][ T8936] macsec1: entered promiscuous mode [ 309.994256][ T8936] macsec1: entered allmulticast mode [ 310.018815][ T8936] mac80211_hwsim hwsim20 wlan0: entered allmulticast mode [ 310.225204][ T8949] fuse: Bad value for 'fd' [ 310.232074][ T8949] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 310.369163][ T5853] Bluetooth: hci5: unexpected event 0x03 length: 1 < 11 [ 310.921109][ T5909] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 311.023204][ T8975] tmpfs: Bad value for 'mpol' [ 311.205366][ T5909] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 311.215067][ T5909] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.230722][ T5909] usb 7-1: Product: syz [ 311.235166][ T5909] usb 7-1: Manufacturer: syz [ 311.239766][ T5909] usb 7-1: SerialNumber: syz [ 311.420527][ T5909] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 311.477713][ T8970] netlink: 24 bytes leftover after parsing attributes in process `syz.8.710'. [ 311.496399][ T43] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 311.860752][ T8986] netlink: 2384 bytes leftover after parsing attributes in process `syz.5.714'. [ 312.210483][ T5909] usb 7-1: USB disconnect, device number 4 [ 312.541384][ T43] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 312.744315][ T43] ath9k_htc: Failed to initialize the device [ 312.754807][ T5909] usb 7-1: ath9k_htc: USB layer deinitialized [ 312.812276][ T9000] erofs (device nullb0): cannot find valid erofs superblock [ 312.873774][ T30] audit: type=1400 audit(1758987772.051:511): avc: denied { block_suspend } for pid=8998 comm="syz.5.717" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 313.028392][ T9005] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.458894][ T9019] netlink: 4388 bytes leftover after parsing attributes in process `syz.5.722'. [ 314.313339][ T30] audit: type=1400 audit(1758987773.481:512): avc: denied { bind } for pid=9010 comm="syz.6.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 315.564544][ T9042] binder: 9040:9042 ioctl c0306201 2000000002c0 returned -14 [ 316.712371][ T30] audit: type=1400 audit(1758987775.901:513): avc: denied { audit_write } for pid=9067 comm="syz.5.734" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 316.715744][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.733340][ C1] vkms_vblank_simulate: vblank timer overrun [ 316.749481][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.894319][ T9070] ubi31: attaching mtd0 [ 316.927715][ T9070] ubi31: scanning is finished [ 316.932601][ T9070] ubi31: empty MTD device detected [ 317.182511][ T9069] netlink: 12 bytes leftover after parsing attributes in process `syz.7.733'. [ 317.555810][ T9070] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 317.646995][ T9070] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 317.692653][ T9070] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 317.768298][ T9070] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 317.788127][ T9070] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 317.808317][ T9070] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 317.952683][ T9070] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 524591336 [ 317.979408][ T9070] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 318.070706][ T9087] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 318.077814][ T9087] overlayfs: failed to set xattr on upper [ 318.083611][ T9087] overlayfs: ...falling back to redirect_dir=nofollow. [ 318.090482][ T9087] overlayfs: ...falling back to index=off. [ 318.096318][ T9087] overlayfs: ...falling back to uuid=null. [ 318.140955][ T9088] fuse: Bad value for 'fd' [ 318.157531][ T9088] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 318.386568][ T9075] ubi31: background thread "ubi_bgt31d" started, PID 9075 [ 319.038948][ T9100] tmpfs: Bad value for 'mpol' [ 319.211557][ T9110] netlink: 48 bytes leftover after parsing attributes in process `syz.5.743'. [ 320.792417][ T9142] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 320.799578][ T9142] overlayfs: failed to set xattr on upper [ 320.806211][ T9142] overlayfs: ...falling back to redirect_dir=nofollow. [ 320.813154][ T9142] overlayfs: ...falling back to index=off. [ 320.818990][ T9142] overlayfs: ...falling back to uuid=null. [ 320.889340][ T9143] fuse: Bad value for 'fd' [ 320.916987][ T9143] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 321.220171][ T9144] syzkaller1: entered promiscuous mode [ 321.232408][ T9144] syzkaller1: entered allmulticast mode [ 321.711414][ T30] audit: type=1326 audit(1758987780.521:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9140 comm="syz.8.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5bd78eec9 code=0x7ffc0000 [ 321.754415][ T30] audit: type=1326 audit(1758987780.521:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9140 comm="syz.8.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5bd78eec9 code=0x7ffc0000 [ 321.905681][ T30] audit: type=1326 audit(1758987780.531:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9140 comm="syz.8.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb5bd78eec9 code=0x7ffc0000 [ 321.957305][ T30] audit: type=1326 audit(1758987780.531:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9140 comm="syz.8.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5bd78eec9 code=0x7ffc0000 [ 322.052705][ T30] audit: type=1326 audit(1758987780.531:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9140 comm="syz.8.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5bd78eec9 code=0x7ffc0000 [ 322.150638][ T9165] netlink: 2384 bytes leftover after parsing attributes in process `syz.7.756'. [ 322.165484][ T30] audit: type=1326 audit(1758987780.541:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9140 comm="syz.8.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb5bd78eec9 code=0x7ffc0000 [ 322.182480][ T9169] tipc: Enabling of bearer rejected, failed to enable media [ 322.256234][ T30] audit: type=1326 audit(1758987780.541:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9140 comm="syz.8.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5bd78eec9 code=0x7ffc0000 [ 322.256553][ T30] audit: type=1326 audit(1758987780.541:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9140 comm="syz.8.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5bd78eec9 code=0x7ffc0000 [ 322.256926][ T30] audit: type=1326 audit(1758987780.541:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9140 comm="syz.8.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fb5bd78eec9 code=0x7ffc0000 [ 322.257245][ T30] audit: type=1326 audit(1758987780.551:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9140 comm="syz.8.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5bd78eec9 code=0x7ffc0000 [ 322.377071][ T9169] Illegal XDP return value 4294967282 on prog (id 172) dev N/A, expect packet loss! [ 323.411038][ T5924] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 323.440987][ T978] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 323.548831][ T9208] misc userio: Invalid payload size [ 323.640914][ T5924] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 323.649997][ T5924] usb 7-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 323.671395][ T978] usb 10-1: Using ep0 maxpacket: 8 [ 323.680652][ T5924] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 323.753692][ T978] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.777580][ T5924] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 323.862347][ T978] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 323.918724][ T5924] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 324.030960][ T978] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.041203][ T5924] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 324.055937][ T978] usb 10-1: config 0 descriptor?? [ 324.061947][ T5924] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 324.136277][ T9213] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 324.143563][ T9213] overlayfs: failed to set xattr on upper [ 324.149308][ T9213] overlayfs: ...falling back to redirect_dir=nofollow. [ 324.156658][ T9213] overlayfs: ...falling back to index=off. [ 324.162512][ T9213] overlayfs: ...falling back to uuid=null. [ 324.193442][ T9213] fuse: Bad value for 'fd' [ 324.207100][ T9213] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 324.326556][ T9214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.444778][ T5924] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 324.454798][ T978] iowarrior 10-1:0.0: no interrupt-in endpoint found [ 324.462370][ T5924] usb 7-1: Product: syz [ 324.466540][ T5924] usb 7-1: Manufacturer: syz [ 324.477299][ T5924] cdc_wdm 7-1:1.0: skipping garbage [ 324.490010][ T5924] cdc_wdm 7-1:1.0: skipping garbage [ 324.495426][ T5924] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 324.702593][ T9222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.773044][ T9222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.840349][ T5924] usb 10-1: USB disconnect, device number 3 [ 325.282152][ T9236] vlan2: entered allmulticast mode [ 326.201264][ T5924] usb 7-1: USB disconnect, device number 5 [ 326.852412][ T9259] netlink: 2384 bytes leftover after parsing attributes in process `syz.9.780'. [ 326.877197][ T9256] syzkaller1: entered promiscuous mode [ 326.905769][ T9256] syzkaller1: entered allmulticast mode [ 327.142015][ T9264] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 327.149819][ T9264] overlayfs: failed to set xattr on upper [ 327.156237][ T9264] overlayfs: ...falling back to redirect_dir=nofollow. [ 327.163131][ T9264] overlayfs: ...falling back to index=off. [ 327.168951][ T9264] overlayfs: ...falling back to uuid=null. [ 327.212883][ T9265] fuse: Bad value for 'fd' [ 327.230787][ T9265] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 327.504738][ T9266] vcan0: tx drop: invalid da for name 0x0000fdff00000000 [ 328.716540][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880578be000: rx timeout, send abort [ 328.731080][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880578be000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 329.078628][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 329.078646][ T30] audit: type=1800 audit(1758987788.261:557): pid=9303 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.787" name="bus" dev="ramfs" ino=25211 res=0 errno=0 [ 329.291471][ T9303] Lens A: ================= START STATUS ================= [ 329.298853][ T9303] Lens A: Focus, Absolute: 0 [ 329.359061][ T9303] Lens A: ================== END STATUS ================== [ 329.591448][ T9317] misc userio: Invalid payload size [ 330.186347][ T30] audit: type=1400 audit(1758987789.371:558): avc: denied { mount } for pid=9340 comm="syz.8.798" name="/" dev="hugetlbfs" ino=25251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 330.270994][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 330.330166][ T43] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 330.905741][ T24] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 330.951044][ T43] usb 10-1: device descriptor read/64, error -71 [ 330.958675][ T24] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 331.211036][ T43] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 331.265694][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 331.285146][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 331.307510][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 331.343225][ T9351] netlink: 20 bytes leftover after parsing attributes in process `syz.7.801'. [ 331.373379][ T24] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 331.397955][ T24] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 331.416379][ T24] usb 6-1: Product: syz [ 331.421605][ T43] usb 10-1: device descriptor read/64, error -71 [ 331.429373][ T24] usb 6-1: Manufacturer: syz [ 331.449063][ T24] cdc_wdm 6-1:1.0: skipping garbage [ 331.456574][ T24] cdc_wdm 6-1:1.0: skipping garbage [ 331.480328][ T24] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 331.495408][ T24] cdc_wdm 6-1:1.0: Unknown control protocol [ 331.531333][ T43] usb usb10-port1: attempt power cycle [ 331.606306][ T9360] usb usb8: usbfs: process 9360 (syz.6.803) did not claim interface 0 before use [ 331.664719][ T9360] syzkaller0: entered promiscuous mode [ 331.693565][ T9360] syzkaller0: entered allmulticast mode [ 331.836121][ T9373] syzkaller1: entered promiscuous mode [ 331.842380][ T9373] syzkaller1: entered allmulticast mode [ 331.854836][ T30] audit: type=1400 audit(1758987791.041:559): avc: denied { write } for pid=9374 comm="syz.7.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 332.027178][ T9382] Bluetooth: MGMT ver 1.23 [ 332.043868][ T9375] syzkaller1: entered promiscuous mode [ 332.049353][ T9375] syzkaller1: entered allmulticast mode [ 332.080926][ T43] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 332.101359][ T43] usb 10-1: device descriptor read/8, error -71 [ 332.278377][ T978] usb 6-1: USB disconnect, device number 2 [ 332.351053][ T43] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 332.491300][ T43] usb 10-1: device descriptor read/8, error -71 [ 332.698501][ T43] usb usb10-port1: unable to enumerate USB device [ 332.845638][ T9402] netlink: 20 bytes leftover after parsing attributes in process `syz.6.813'. [ 333.298113][ T9419] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.958617][ T43] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 334.248048][ T30] audit: type=1400 audit(1758987793.321:560): avc: denied { create } for pid=9422 comm="syz.7.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 334.276112][ T30] audit: type=1400 audit(1758987793.461:561): avc: denied { ioctl } for pid=9422 comm="syz.7.819" path="socket:[24284]" dev="sockfs" ino=24284 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 334.366899][ T43] usb 10-1: Using ep0 maxpacket: 8 [ 334.384118][ T43] usb 10-1: config index 0 descriptor too short (expected 6427, got 27) [ 334.460976][ T43] usb 10-1: config 0 has an invalid interface number: 21 but max is 0 [ 334.499100][ T43] usb 10-1: config 0 has no interface number 0 [ 334.610051][ T43] usb 10-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 334.622519][ T43] usb 10-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 334.634873][ T43] usb 10-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 334.691459][ T43] usb 10-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 335.173445][ T43] usb 10-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 335.181806][ T43] usb 10-1: Product: syz [ 335.198827][ T43] usb 10-1: config 0 descriptor?? [ 335.207616][ T9408] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 335.658240][ T30] audit: type=1400 audit(1758987794.841:562): avc: denied { map } for pid=9406 comm="syz.9.814" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 335.704339][ T43] usb 10-1: USB disconnect, device number 8 [ 335.835369][ T9464] block nbd6: shutting down sockets [ 336.060356][ T30] audit: type=1400 audit(1758987795.241:563): avc: denied { load_policy } for pid=9468 comm="syz.8.828" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 336.591298][ T9469] SELinux: failed to load policy [ 336.760384][ T9490] netlink: 2384 bytes leftover after parsing attributes in process `syz.9.832'. [ 338.386444][ T9503] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 338.393416][ T9503] overlayfs: failed to set xattr on upper [ 338.399105][ T9503] overlayfs: ...falling back to redirect_dir=nofollow. [ 338.405972][ T9503] overlayfs: ...falling back to index=off. [ 338.411762][ T9503] overlayfs: ...falling back to uuid=null. [ 338.458572][ T9504] fuse: Bad value for 'fd' [ 338.481154][ T9504] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 339.061022][ T978] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 339.272213][ T978] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 339.286540][ T978] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 339.372108][ T978] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 339.410312][ T978] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 339.487364][ T978] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 339.528016][ T978] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 339.529114][ T24] hid_parser_main: 5 callbacks suppressed [ 339.529129][ T24] hid-generic 00A0:0006:0003.0012: unknown main item tag 0x0 [ 339.545168][ T978] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 339.569271][ T9534] fuse: Bad value for 'group_id' [ 339.576774][ T978] usb 10-1: Product: syz [ 339.584680][ T9534] fuse: Bad value for 'group_id' [ 339.586024][ T24] hid-generic 00A0:0006:0003.0012: unknown main item tag 0x0 [ 339.590289][ T978] usb 10-1: Manufacturer: syz [ 339.612828][ T24] hid-generic 00A0:0006:0003.0012: unknown main item tag 0x0 [ 339.631563][ T24] hid-generic 00A0:0006:0003.0012: unknown main item tag 0x0 [ 339.640338][ T24] hid-generic 00A0:0006:0003.0012: unknown main item tag 0x0 [ 339.654763][ T24] hid-generic 00A0:0006:0003.0012: unknown main item tag 0x0 [ 339.671380][ T24] hid-generic 00A0:0006:0003.0012: unknown main item tag 0x0 [ 339.680124][ T24] hid-generic 00A0:0006:0003.0012: unknown main item tag 0x0 [ 339.959034][ T24] hid-generic 00A0:0006:0003.0012: unknown main item tag 0x0 [ 340.029871][ T24] hid-generic 00A0:0006:0003.0012: unknown main item tag 0x0 [ 340.064003][ T978] cdc_wdm 10-1:1.0: skipping garbage [ 340.073662][ T24] hid-generic 00A0:0006:0003.0012: hidraw0: HID v0.05 Device [syz1] on syz0 [ 340.092397][ T978] cdc_wdm 10-1:1.0: skipping garbage [ 340.099103][ T978] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 340.119719][ T978] cdc_wdm 10-1:1.0: Unknown control protocol [ 341.310890][ T8486] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 341.769170][ T30] audit: type=1400 audit(1758987800.945:564): avc: denied { append } for pid=9581 comm="syz.7.850" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 341.848509][ T43] usb 10-1: USB disconnect, device number 9 [ 341.912883][ T30] audit: type=1400 audit(1758987801.045:565): avc: denied { lock } for pid=9560 comm="syz.6.848" path="socket:[24487]" dev="sockfs" ino=24487 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 341.968652][ T9586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.993442][ T9586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.203984][ T30] audit: type=1400 audit(1758987801.385:566): avc: denied { create } for pid=9588 comm="syz.9.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 342.298304][ T9601] netlink: 20 bytes leftover after parsing attributes in process `syz.8.855'. [ 342.356634][ T30] audit: type=1400 audit(1758987801.535:567): avc: denied { sys_admin } for pid=9588 comm="syz.9.852" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 342.661275][ T978] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 342.951233][ T30] audit: type=1400 audit(1758987801.745:568): avc: denied { ioctl } for pid=9607 comm="syz.8.856" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x5609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 343.290430][ T30] audit: type=1400 audit(1758987802.465:569): avc: denied { connect } for pid=9598 comm="syz.5.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 343.707477][ T9627] vlan2: entered allmulticast mode [ 343.713223][ T9627] bridge0: entered allmulticast mode [ 343.723475][ T8486] usb 7-1: unable to get BOS descriptor or descriptor too short [ 343.743941][ T8486] usb 7-1: no configurations [ 343.800903][ T8486] usb 7-1: can't read configurations, error -22 [ 344.221556][ T8486] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 344.820893][ T8486] usb 7-1: Using ep0 maxpacket: 16 [ 344.827872][ T8486] usb 7-1: unable to get BOS descriptor or descriptor too short [ 344.838621][ T8486] usb 7-1: config 15 has an invalid interface number: 174 but max is 0 [ 344.859656][ T8486] usb 7-1: config 15 has no interface number 0 [ 344.894051][ T8486] usb 7-1: config 15 interface 174 altsetting 1 bulk endpoint 0x8 has invalid maxpacket 32 [ 344.974295][ T8486] usb 7-1: config 15 interface 174 altsetting 1 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 345.290966][ T8486] usb 7-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 345.334883][ T8486] usb 7-1: config 15 interface 174 has no altsetting 0 [ 345.385497][ T8486] usb 7-1: language id specifier not provided by device, defaulting to English [ 345.434312][ T978] usb 6-1: unable to get BOS descriptor or descriptor too short [ 345.449890][ T8486] usb 7-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d [ 345.451386][ T978] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 345.488082][ T8486] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.548661][ T8486] usb 7-1: Product: syz [ 345.568866][ T978] usb 6-1: can't read configurations, error -71 [ 345.575820][ T8486] usb 7-1: Manufacturer: syz [ 345.575841][ T8486] usb 7-1: SerialNumber: syz [ 345.592554][ T9629] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 345.951676][ T8486] sierra 7-1:15.174: Sierra USB modem converter detected [ 345.969971][ T8486] usb 7-1: Sierra USB modem converter now attached to ttyUSB0 [ 346.202192][ T8486] usb 7-1: USB disconnect, device number 7 [ 346.350590][ T8486] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 346.611961][ T30] audit: type=1400 audit(1758987805.605:570): avc: denied { module_request } for pid=9652 comm="syz.5.867" kmod="crypto-gcm_base(xts-serpent-avx,wp384-generic)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 346.656675][ T8486] sierra 7-1:15.174: device disconnected [ 346.926360][ T9672] ================================================================== [ 346.934448][ T9672] BUG: KASAN: global-out-of-bounds in kernfs_root+0x290/0x2a0 [ 346.941926][ T9672] Read of size 8 at addr ffffffff9ae7ba50 by task syz.6.870/9672 [ 346.949640][ T9672] [ 346.951970][ T9672] CPU: 0 UID: 0 PID: 9672 Comm: syz.6.870 Not tainted syzkaller #0 PREEMPT(full) [ 346.951996][ T9672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 346.952008][ T9672] Call Trace: [ 346.952014][ T9672] [ 346.952021][ T9672] dump_stack_lvl+0x116/0x1f0 [ 346.952052][ T9672] print_report+0xcd/0x630 [ 346.952075][ T9672] ? __virt_addr_valid+0x81/0x610 [ 346.952101][ T9672] ? __phys_addr+0xe8/0x180 [ 346.952127][ T9672] ? kernfs_root+0x290/0x2a0 [ 346.952150][ T9672] kasan_report+0xe0/0x110 [ 346.952171][ T9672] ? kernfs_root+0x290/0x2a0 [ 346.952199][ T9672] kernfs_root+0x290/0x2a0 [ 346.952224][ T9672] kernfs_remove_by_name_ns+0x2e/0x110 [ 346.952243][ T9672] driver_remove_file+0x4a/0x60 [ 346.952269][ T9672] bus_remove_driver+0x224/0x2c0 [ 346.952290][ T9672] driver_unregister+0x76/0xb0 [ 346.952315][ T9672] comedi_device_detach_locked+0x12f/0xa50 [ 346.952342][ T9672] do_devconfig_ioctl+0x555/0x710 [ 346.952370][ T9672] ? __mutex_lock+0x1c5/0x1060 [ 346.952395][ T9672] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 346.952430][ T9672] ? find_held_lock+0x2b/0x80 [ 346.952454][ T9672] comedi_unlocked_ioctl+0x165d/0x2f00 [ 346.952477][ T9672] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 346.952499][ T9672] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 346.952520][ T9672] ? do_vfs_ioctl+0x128/0x14f0 [ 346.952557][ T9672] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 346.952586][ T9672] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 346.952621][ T9672] ? hook_file_ioctl_common+0x145/0x410 [ 346.952645][ T9672] ? selinux_file_ioctl+0x180/0x270 [ 346.952671][ T9672] ? selinux_file_ioctl+0xb4/0x270 [ 346.952699][ T9672] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 346.952720][ T9672] __x64_sys_ioctl+0x18e/0x210 [ 346.952748][ T9672] do_syscall_64+0xcd/0x4e0 [ 346.952773][ T9672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.952790][ T9672] RIP: 0033:0x7f76a558eec9 [ 346.952805][ T9672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.952823][ T9672] RSP: 002b:00007f76a640f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 346.952841][ T9672] RAX: ffffffffffffffda RBX: 00007f76a57e5fa0 RCX: 00007f76a558eec9 [ 346.952852][ T9672] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000006 [ 346.952863][ T9672] RBP: 00007f76a5611f91 R08: 0000000000000000 R09: 0000000000000000 [ 346.952873][ T9672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.952884][ T9672] R13: 00007f76a57e6038 R14: 00007f76a57e5fa0 R15: 00007ffe6bac1048 [ 346.952901][ T9672] [ 346.952907][ T9672] [ 347.207927][ T9672] The buggy address belongs to the variable: [ 347.213878][ T9672] __key.1+0x30/0x40 [ 347.217759][ T9672] [ 347.220065][ T9672] The buggy address belongs to the physical page: [ 347.226476][ T9672] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1ae7b [ 347.235229][ T9672] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 347.243120][ T9672] raw: 00fff00000002000 ffffea00006b9ec8 ffffea00006b9ec8 0000000000000000 [ 347.251681][ T9672] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 347.260238][ T9672] page dumped because: kasan: bad access detected [ 347.266624][ T9672] page_owner info is not present (never set?) [ 347.272660][ T9672] [ 347.274959][ T9672] Memory state around the buggy address: [ 347.280562][ T9672] ffffffff9ae7b900: f9 f9 f9 f9 04 f9 f9 f9 f9 f9 f9 f9 00 00 00 00 [ 347.288610][ T9672] ffffffff9ae7b980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f9 f9 [ 347.296662][ T9672] >ffffffff9ae7ba00: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 [ 347.304705][ T9672] ^ [ 347.311359][ T9672] ffffffff9ae7ba80: f9 f9 f9 f9 00 00 00 00 00 00 00 00 00 00 00 00 [ 347.319422][ T9672] ffffffff9ae7bb00: 00 00 00 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 347.327556][ T9672] ================================================================== [ 347.380994][ T9672] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 347.388227][ T9672] CPU: 1 UID: 0 PID: 9672 Comm: syz.6.870 Not tainted syzkaller #0 PREEMPT(full) [ 347.397426][ T9672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 347.407482][ T9672] Call Trace: [ 347.410762][ T9672] [ 347.413696][ T9672] dump_stack_lvl+0x3d/0x1f0 [ 347.418297][ T9672] vpanic+0x6e8/0x7a0 [ 347.422272][ T9672] ? __pfx_vpanic+0x10/0x10 [ 347.426771][ T9672] ? kernfs_root+0x290/0x2a0 [ 347.431362][ T9672] panic+0xca/0xd0 [ 347.435074][ T9672] ? __pfx_panic+0x10/0x10 [ 347.439481][ T9672] ? kernfs_root+0x290/0x2a0 [ 347.444071][ T9672] ? preempt_schedule_common+0x44/0xc0 [ 347.449536][ T9672] ? preempt_schedule_thunk+0x16/0x30 [ 347.454916][ T9672] check_panic_on_warn+0xab/0xb0 [ 347.459858][ T9672] end_report+0x107/0x170 [ 347.464184][ T9672] kasan_report+0xee/0x110 [ 347.468604][ T9672] ? kernfs_root+0x290/0x2a0 [ 347.473235][ T9672] kernfs_root+0x290/0x2a0 [ 347.477660][ T9672] kernfs_remove_by_name_ns+0x2e/0x110 [ 347.483109][ T9672] driver_remove_file+0x4a/0x60 [ 347.487970][ T9672] bus_remove_driver+0x224/0x2c0 [ 347.492903][ T9672] driver_unregister+0x76/0xb0 [ 347.497658][ T9672] comedi_device_detach_locked+0x12f/0xa50 [ 347.503453][ T9672] do_devconfig_ioctl+0x555/0x710 [ 347.508466][ T9672] ? __mutex_lock+0x1c5/0x1060 [ 347.513216][ T9672] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 347.518755][ T9672] ? find_held_lock+0x2b/0x80 [ 347.523415][ T9672] comedi_unlocked_ioctl+0x165d/0x2f00 [ 347.528854][ T9672] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 347.534646][ T9672] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 347.540519][ T9672] ? do_vfs_ioctl+0x128/0x14f0 [ 347.545270][ T9672] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 347.550286][ T9672] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 347.557122][ T9672] ? hook_file_ioctl_common+0x145/0x410 [ 347.562648][ T9672] ? selinux_file_ioctl+0x180/0x270 [ 347.567834][ T9672] ? selinux_file_ioctl+0xb4/0x270 [ 347.572928][ T9672] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 347.578714][ T9672] __x64_sys_ioctl+0x18e/0x210 [ 347.583466][ T9672] do_syscall_64+0xcd/0x4e0 [ 347.587954][ T9672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.593824][ T9672] RIP: 0033:0x7f76a558eec9 [ 347.598219][ T9672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.617804][ T9672] RSP: 002b:00007f76a640f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 347.626196][ T9672] RAX: ffffffffffffffda RBX: 00007f76a57e5fa0 RCX: 00007f76a558eec9 [ 347.634147][ T9672] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000006 [ 347.642099][ T9672] RBP: 00007f76a5611f91 R08: 0000000000000000 R09: 0000000000000000 [ 347.650047][ T9672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.657994][ T9672] R13: 00007f76a57e6038 R14: 00007f76a57e5fa0 R15: 00007ffe6bac1048 [ 347.665947][ T9672] [ 347.669133][ T9672] Kernel Offset: disabled [ 347.673430][ T9672] Rebooting in 86400 seconds..