last executing test programs: 4m14.199071199s ago: executing program 32 (id=1183): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) syz_emit_ethernet(0x66, &(0x7f0000001a40)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0xa0, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "277382", 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}}}}, 0x0) socket$kcm(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x74, r4, {0xfff2, 0x4}, {0x0, 0xfff1}, {0xfff2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x840) (async) r5 = accept4$packet(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240)=0x14, 0x80000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'geneve1\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) io_uring_setup(0x178b, &(0x7f00000000c0)={0x0, 0x52c1}) (async) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r7, 0xc03064b7, &(0x7f0000000380)={r8, 0x0, 0x0, 0x4479b399, 0x200, 0x5, 0x5, 0x0, 0x8, 0xa4, 0x7fff, 0x3}) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r7, 0xc03064b7, &(0x7f0000000040)={r8}) (async) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfd, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=0x0) bind$nfc_llcp(r6, &(0x7f0000000240)={0x27, r11, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abfe0055acc8ef039a5be42200000000000000000100", 0x38}, 0x60) (async) ppoll(&(0x7f0000000040)=[{r6, 0x4528}], 0x1, 0x0, 0x0, 0x0) 2m12.749219833s ago: executing program 33 (id=1609): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r3 = socket(0x11, 0x800000003, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x12, r4, {0x0, 0x300}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xd43}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3f0000}]}]}]}}]}, 0xac}, 0x1, 0x7a00}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cf0403000000000000fb5400000008000300", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2m9.741562527s ago: executing program 34 (id=1628): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYRES8=r0, @ANYRESDEC=r0, @ANYBLOB="5c6306c94398183fbcb22d4e670ccf55dd36e1e78c826656d8198ddf7368ff7c79b0ee9542c613bed6cd81c0583cee6dc61719fb0a3eab4d", @ANYRES32=r0, @ANYRES8=r0, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {0x0, 0x0, 0x8}, 0x0, 0x3f0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001400) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r3}, 0x10) prctl$PR_SET_THP_DISABLE(0x29, 0x0) 2m5.863107414s ago: executing program 35 (id=1657): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltuid}], [], 0x6b}}) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000300)={0x8, 0x1, 0xd, 0xf7d, 0x35, "0101000000001d00"}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) recvfrom$inet_nvme(r6, &(0x7f0000000100)=""/101, 0x65, 0x100, &(0x7f00000001c0)=@pppoe={0x18, 0x0, {0x2, @remote, 'team_slave_0\x00'}}, 0x80) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYRESHEX=r4]) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x53) 2m3.644924078s ago: executing program 36 (id=1674): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0xf) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) write$binfmt_elf32(r2, &(0x7f00000014c0)=ANY=[], 0x46b) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240), 0x32000, 0x0) bind$inet6(r4, &(0x7f0000000400)={0xa, 0x4e20, 0x2, @private0, 0x8}, 0x1c) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0xffffff49}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES16=r2, @ANYRES32, @ANYRES64=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8) prctl$PR_MCE_KILL_GET(0x22) fcntl$lock(r7, 0x5, &(0x7f00000002c0)={0x2, 0x2, 0x2, 0x5}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r7, 0x4068aea3, &(0x7f00000005c0)) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r2, 0x50009401, &(0x7f0000001400)={{r2}, "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x13, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000480)="66baf80cb8dea5cc85ef66bafc0c66ed66ba2000b090ee0f01cab9800000c00f3235000100000f30ea7d00000005000f01c30fc76900670fc77517b8fcf0ad820f23d00f21f835200000090f23f80f01f7", 0x51}], 0x1, 0x1, 0x0, 0x0) setresgid(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1m47.014884515s ago: executing program 37 (id=1737): munmap(&(0x7f0000ff6000/0x3000)=nil, 0x3000) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f075, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) r0 = syz_clone(0x3108000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000283d0020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f0000001500)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000080)={0x80, 0x2, 0xc8, 0x40}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r4, 0x4018f514, &(0x7f0000000400)={0x7f, 0x125a, 0x3}) socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = syz_open_pts(r5, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000240)) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(r7, &(0x7f00000002c0)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000540)=""/32, 0x20}}, 0x120) write$UHID_DESTROY(r7, &(0x7f0000000440)={0xa}, 0xffffff95) write$UHID_INPUT(r7, &(0x7f0000002800)={0x8, {"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", 0x1000}}, 0x1006) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0xa, &(0x7f0000000980), 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r8, 0x541b, &(0x7f0000000000)) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r9, &(0x7f0000001800)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) r10 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(r9, 0x29, 0x1c, &(0x7f0000000140)={@empty, 0x0}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@mpls_newroute={0xb8, 0x18, 0x100, 0x70bd27, 0x25dfdbfe, {0x1c, 0x10, 0x10, 0x80, 0x0, 0x1, 0xff, 0x0, 0xb00}, [@RTA_NEWDST={0x84, 0x13, [{0x2, 0x0, 0x1}, {0x2}, {0x3}, {0x6, 0x0, 0x1}, {0x6}, {0x8}, {0x6}, {0xffff9}, {0x81, 0x0, 0x1}, {0x7286}, {0x4}, {0x1}, {0xffff0}, {0x4}, {0x516f}, {0x2, 0x0, 0x1}, {0x3}, {0x9, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x2}, {0x5}, {0x2, 0x0, 0x1}, {0x1}, {0x2}, {0xffe01}, {0x7ff}, {0x7}, {0x401, 0x0, 0x1}, {0xd, 0x0, 0x1}, {0x1}, {0x6, 0x0, 0x1}, {0x5, 0x0, 0x1}]}, @RTA_MULTIPATH={0xc, 0x9, {0x804, 0x2, 0x5, r11}}, @RTA_MULTIPATH={0xc, 0x9, {0x6801, 0x10, 0x4}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x2}, 0x0) ioctl$TCSETS(r4, 0x89f2, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x0, "bb5dee00"}) 1m44.035421364s ago: executing program 8 (id=1803): openat$ptp0(0xffffffffffffff9c, 0x0, 0x80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x805, 0x0) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) stat(&(0x7f0000000100)='./file1\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1m43.92975342s ago: executing program 8 (id=1804): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(r3, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3b07, &(0x7f0000000380)={0x0, 0x5747, 0x3e00}, &(0x7f0000000000), 0x0) accept(r1, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c0000001f0a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1m43.261371654s ago: executing program 38 (id=1749): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xff, 0x0, 0x0, 0x7}, [@RTA_NH_ID={0x8, 0x1e, 0x9}]}, 0x24}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) read$FUSE(0xffffffffffffffff, &(0x7f0000001340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000003380)={0x50, 0x0, r3, {0x7, 0x29, 0x3, 0x8, 0xbf5, 0x4af, 0xff, 0xe, 0x0, 0x0, 0x4, 0x8}}, 0x50) ioctl$NBD_DO_IT(r0, 0xab03) r4 = socket(0x1000000000000010, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$incfs(r6, &(0x7f00000000c0)='.pending_reads\x00', 0x10080, 0x102) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r7, &(0x7f0000000340)="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", &(0x7f00000001c0)=""/129, 0x4}, 0x20) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@delchain={0x1c, 0x5f, 0xf31, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x3, 0xfffffffffffffffe}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000051}, 0x8000) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r8, 0x5414, &(0x7f0000000040)={0x1, 0x1, 0x10, 0x1ff}) ioctl$KDSETMODE(r8, 0x4b3a, 0x0) ioctl$VT_OPENQRY(r8, 0x5600, &(0x7f0000000080)) 1m42.891586727s ago: executing program 8 (id=1807): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0xf00, 0x0, 0xe2f6, 0x1, 0x0, 0x0, {0x0, 0xffdffff1}, {}, {}, {0x0, 0x80}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x4}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000640)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0xe}}, 0x18) 1m40.245914578s ago: executing program 39 (id=1736): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e07090908090000403247b893544e7d92e01651103d8a8f0e2ccef923f5ceef27fe04006a3153515cc4bb5a29f361d098a81403e9b72912899b5d731dcf3d7b9dce8ce928c25fe9ac05bd1953a83601a83759bd8d4ed7dc0a9662b5e1171b078069b4abec2557d84c61edd19d973c7f27a6bd4387f14265ee155b9250f221882d073b", @ANYRESOCT], 0xa) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002"], 0x44}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x65) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x20000000008) r6 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r6, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESTART(r7, 0x1274, 0x0) ioctl$SG_BLKTRACETEARDOWN(r7, 0x1276, 0x0) ioctl$BLKTRACESTOP(r7, 0x1275, 0x0) r8 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0xfd, 0x5, 0x1, 0x0, @loopback, @loopback={0x0, 0x460c6}, 0x7801, 0x0, 0x1}}) 1m28.741922107s ago: executing program 40 (id=1799): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x404}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x64f015fd58a9b8d5) r3 = syz_io_uring_setup(0x110, &(0x7f0000000340)={0x0, 0x6d89, 0x8, 0x40000, 0x100000f0}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000003d000900000000000000000001000000040000001c000180180010800c000f00090000000000000008000f00e0000001080002"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000440)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x348}, 0x0, 0x800, 0x1}) io_uring_enter(r3, 0x8aa, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) setsockopt$sock_int(r1, 0xffff, 0x0, 0x0, 0x59) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x2) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) pipe2$9p(&(0x7f0000000280), 0x4000) statx(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x6000, 0x400, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000640), 0x40, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="29d10a275d2c64000001f669643d000000000000", @ANYRESHEX=r9, @ANYRESDEC=r10, @ANYBLOB="43d2a8ff46adc522ce234caff2b8ca3e4c21c1705c2965e05751602060fd34a97dc6bc48d4091416d7e9a89ace55bb2852071411606d83d8bfb141dbaad7f3d248914ae8ab4b77bd44893a958d96", @ANYRESDEC=r9, @ANYBLOB="2c6673636f6e746578743d756e4d0d379a45232808ab42eec7", @ANYRES64=r1, @ANYRESDEC, @ANYRES16=r10, @ANYRES8=r1, @ANYRES64=r2]) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=r8, @ANYBLOB="00012dbd7000fddbdf25600000000c00990002000000150000000600b100730b00000600b100485000000600b10004000000"], 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x18000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000540)=0x9) 1m26.794103197s ago: executing program 41 (id=1807): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0xf00, 0x0, 0xe2f6, 0x1, 0x0, 0x0, {0x0, 0xffdffff1}, {}, {}, {0x0, 0x80}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x4}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000640)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0xe}}, 0x18) 1m12.860761836s ago: executing program 0 (id=1943): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70f) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x15, 0x0, 0x0) execve(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='kvm_dirty_ring_reset\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000001640)=0xc, 0x45) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r3) 1m12.611119679s ago: executing program 0 (id=1946): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x220000, 0x0) syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000004000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x18) sendmmsg$inet6(r2, &(0x7f0000003a00)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x3, @private1, 0x9}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000600)="11", 0x1}], 0x1}}], 0x1, 0x4c040) 1m10.827757139s ago: executing program 0 (id=1952): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="020300001000000000000000fdffffff05000600000000000a0000000000ff8000000000000000000000000000000001000000000000000002000100000000ffffff800c0200006005000500000000000a004e2200000000000000000000080000000000000000010000000000e0000002001300"], 0x80}, 0x1, 0x7}, 0x0) 1m10.695887057s ago: executing program 1 (id=1954): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000380)={0x0, 0x2}) 1m10.612328027s ago: executing program 0 (id=1955): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000072c0000001b0a01030000e6ff00000000020000000900010073797a3000000100090003"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1m10.553269327s ago: executing program 1 (id=1956): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70f) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x15, 0x0, 0x0) execve(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='kvm_dirty_ring_reset\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) ptrace(0x10, r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000001640)=0xc, 0x45) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r3) 1m10.424478408s ago: executing program 0 (id=1959): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) add_key(0x0, 0x0, &(0x7f0000000040)="305c065ae182087051667557c7", 0xd, 0xfffffffffffffffe) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1e0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac000000000300", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 1m10.238088902s ago: executing program 1 (id=1960): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc}) r2 = getpid() setreuid(0xee00, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x15340180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x6e) listen(r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02150000e578a6ed5bb9c26ed697944d4b06c19897", 0x29) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c0000001b0a01030000e6ff00000000020000000900010073797a3000000100090003"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000140)={'vxcan1\x00'}) 1m10.195436423s ago: executing program 0 (id=1961): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000001280)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001380)='/proc/sysvipc/shm\x00', 0x0, 0x0) preadv(r2, &(0x7f0000002480)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000001300), 0x0, 0x33c5c87c3d2f0243) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000000)={0xf030000, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0}) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000240)="f56ed761e9c8219d", 0x8, 0xfffffffffffffffe) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000180)={0x0, "44ee4dcf6df6b457eba45bc88153e9b5cbf7cc1af7b76983c2717759237e827d8b738dbbf41db40d00"}, 0x48, 0x0) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003700010324bd7002f9dbf52506"], 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) shutdown(r1, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r8}, 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r8, 0x4b69, &(0x7f00000012c0)=""/19) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000dc0)='rcu_utilization\x00', r9}, 0x5e) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(r0, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4085, 0xff5}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 1m10.051622045s ago: executing program 1 (id=1962): r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x8e9e5e0154f708bc, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}, {&(0x7f0000000500)="0b1b797ed80c0a792177bf1952405ba58faf0ebd5204553d5d892d1a176e9636a3fefcc7fd69c2656a5cdb935a88577f4ac6b0ffdf92e3fc6885cea1dfc3c86a6f0035f515f7f3", 0x47}], 0x3}}], 0x1, 0x4000000) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0xfffff95a}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000240)={r4, 0xa}, &(0x7f0000000280)=0x8) close(0xffffffffffffffff) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060063fa67721000b33c000000", @ANYRES32, @ANYRES64=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m9.624575344s ago: executing program 1 (id=1963): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040), 0x2) 1m9.140920414s ago: executing program 1 (id=1964): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x0, 0x80) lseek(r4, 0x1100, 0x1) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x9, 0x5b7f, 0xfffffffffffffffd, 0x3, 0x5, 0xf, 0xc, 0x3, 0x7fffffff}) fchown(r5, 0xee01, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r8, 0x4b3b, 0x4000000000001) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000640)={0x24, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x24}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) connect$inet6(r9, &(0x7f00000004c0)={0xa, 0x4e24, 0x2, @private0, 0x300000}, 0x1c) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x1c, 0x1a, 0x15b, &(0x7f0000000000)="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"}) syz_usb_connect$uac1(0x0, 0x9c, &(0x7f0000000d80)=ANY=[@ANYBLOB="12010000000000406b1d010140000102030109028a0003010000000904000000010100000a24010000000201020b240800000000822c81fb2d242404030444cdf81cd0090401000001020000090401010101020000090501090000000000072501000000000904020000010200000904020101010200000824020100030000072401000000000905820900020000000725010000000000000000"], 0x0) 58.697961297s ago: executing program 3 (id=2017): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x201, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000003a00e100575a09eb5cb73490d12f362158000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}}, 0x0) fcntl$setpipe(r0, 0x407, 0xffffffffffffff0f) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000000000003a0000000c0099000d00000042000000ab2a1a196fbb726f04005b00"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2b}}, @in6={0xa, 0x4e21, 0x6c29, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}], 0x3c) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000580)={0x41, 0xc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x7, 0x2}, 0xe) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETLINK(r9, 0x400454cd, 0x339) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) get_robust_list(0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000000040)='source', &(0x7f00000003c0)='//0\xc3p\xa7n\xb5\xad3\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b//\\\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0x0}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0xfffff95a}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000240)={r5, 0xa}, &(0x7f0000000280)=0x8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e26, 0x0, @mcast2, 0x1}, 0x1c) listen(r7, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060063fa67721000b33c000000", @ANYRES32=r8, @ANYRES64=r7], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x400, {0x0, 0x0, 0x0, r8, 0x0, 0x202}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x2}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000140), 0x4) 58.150328991s ago: executing program 3 (id=2022): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x1, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) socket$igmp6(0xa, 0x3, 0x2) 58.087652507s ago: executing program 3 (id=2023): r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x8e9e5e0154f708bc, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}, {&(0x7f0000000500)="0b1b797ed80c0a792177bf1952405ba58faf0ebd5204553d5d892d1a176e9636a3fefcc7fd69c2656a5cdb935a88577f4ac6b0ffdf92e3fc6885cea1dfc3c86a6f0035f515f7f3", 0x47}], 0x3}}], 0x1, 0x4000000) close(0xffffffffffffffff) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060063fa67721000b33c000000", @ANYRES32, @ANYRES64=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 57.606911518s ago: executing program 3 (id=2025): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001980)=ANY=[@ANYBLOB="060000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01040000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000030000000180a0101000b000000000000010000000900020073797a30000000000900010073797a300000000004000380140000001000010000000000000000000000000a"], 0xb8}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sigaltstack(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) 54.012587847s ago: executing program 42 (id=1961): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000001280)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001380)='/proc/sysvipc/shm\x00', 0x0, 0x0) preadv(r2, &(0x7f0000002480)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000001300), 0x0, 0x33c5c87c3d2f0243) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000000)={0xf030000, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0}) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000240)="f56ed761e9c8219d", 0x8, 0xfffffffffffffffe) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000180)={0x0, "44ee4dcf6df6b457eba45bc88153e9b5cbf7cc1af7b76983c2717759237e827d8b738dbbf41db40d00"}, 0x48, 0x0) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003700010324bd7002f9dbf52506"], 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) shutdown(r1, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r8}, 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r8, 0x4b69, &(0x7f00000012c0)=""/19) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000dc0)='rcu_utilization\x00', r9}, 0x5e) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(r0, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4085, 0xff5}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 52.584295062s ago: executing program 43 (id=1964): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x0, 0x80) lseek(r4, 0x1100, 0x1) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x9, 0x5b7f, 0xfffffffffffffffd, 0x3, 0x5, 0xf, 0xc, 0x3, 0x7fffffff}) fchown(r5, 0xee01, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r8, 0x4b3b, 0x4000000000001) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000640)={0x24, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x24}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) connect$inet6(r9, &(0x7f00000004c0)={0xa, 0x4e24, 0x2, @private0, 0x300000}, 0x1c) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x1c, 0x1a, 0x15b, &(0x7f0000000000)="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"}) syz_usb_connect$uac1(0x0, 0x9c, &(0x7f0000000d80)=ANY=[@ANYBLOB="12010000000000406b1d010140000102030109028a0003010000000904000000010100000a24010000000201020b240800000000822c81fb2d242404030444cdf81cd0090401000001020000090401010101020000090501090000000000072501000000000904020000010200000904020101010200000824020100030000072401000000000905820900020000000725010000000000000000"], 0x0) 41.511310833s ago: executing program 44 (id=2025): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001980)=ANY=[@ANYBLOB="060000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01040000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000030000000180a0101000b000000000000010000000900020073797a30000000000900010073797a300000000004000380140000001000010000000000000000000000000a"], 0xb8}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sigaltstack(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) 40.592733436s ago: executing program 2 (id=2078): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200000004000000040000001200000000", @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000009cd9be200a111e59872801619b000000040000000000000000000000000000000000000070c83d1a4a6f"], 0x48) ioctl$VIDIOC_QUERYMENU(r1, 0xc008561c, &(0x7f0000000000)={0x980903, 0x3, @value=0xb}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x20000000}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x5}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x6, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x22, 0x0, 0x0, @empty}}}}}, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) 40.13139742s ago: executing program 2 (id=2079): r0 = syz_open_dev$radio(0x0, 0x1, 0x2) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, 0x0) syz_open_dev$video4linux(0x0, 0x200000000000, 0x80000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) socket$inet(0x2, 0x3, 0x2) syz_emit_ethernet(0x10c, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000340)={r5, 0x1, 0x6, @multicast}, 0x10) getresgid(0x0, &(0x7f0000000400), &(0x7f0000000440)) setresuid(0x0, 0xee00, 0xee01) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 39.121643189s ago: executing program 2 (id=2083): write$sndseq(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) 38.817334846s ago: executing program 2 (id=2085): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0600000004000000101000008900000000", @ANYRES32=0x0], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000001b40), 0x80, r0, 0x0, 0x7}, 0x38) 38.687561994s ago: executing program 2 (id=2086): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='reiserfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0xa0029, &(0x7f0000000340)=ANY=[@ANYBLOB='nr_inodes=35,size=', @ANYRESOCT, @ANYRESDEC=0x0]) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x2, 0x400100, 0x0, 0x80080}) socket(0x9, 0x803, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x40100) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r4, 0xc0bc5351, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0x1) io_uring_register$IORING_REGISTER_NAPI(r3, 0x1b, &(0x7f0000000040)={0x6, 0x1}, 0x1) write$sysctl(0xffffffffffffffff, 0x0, 0x0) 37.905321744s ago: executing program 2 (id=2089): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @broadcast}, 0x3, 0x3, 0x3, 0x3}}, 0x26) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5400208174fe003cb500000206010200000000000000000600000205000500020000000c000300686173683a69700073683a69702c707f72742c6970000900020073797a30000000000900020073797a30000000"], 0x54}}, 0x8000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) write(r1, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @private=0xa010101}, 0x0, 0x0, 0x4, 0x2}}, 0x80) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r6, 0x40186f40, 0x20000502) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x0, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x8}, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r7, &(0x7f0000000440)={0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="01ce03020090030000f793fdb080f16894587f34bb749b748d9a1b6f5580b9b2b255a861441953076828e5f4c5a7b892eaf7abd75b059c69ec97b5e2b0aa474e28f64d3512064fd2eb51e1e5679a310320c097313a5b6be4c2c3387991b9be9adfc103953f5365ac7a22068679efdfa0cb57f6ad2e503b80de93495622fc8095544f65882258f8ef20c0d365050cc000081b4d73711bd33355df4e4336cd24"], 0x0, 0x0, 0x0}, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r8, 0x800448d2, &(0x7f0000000040)) 22.735362501s ago: executing program 4 (id=2158): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x16) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r4 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0080bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x3b0}, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff56}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r7], 0x38}, 0x1, 0x0, 0x0, 0x40896}, 0x24000850) r8 = syz_open_procfs(0x0, &(0x7f0000000580)='net/ip_tables_targets\x00') preadv(r8, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/158, 0x9e}], 0x1, 0x2, 0x0) 21.728592765s ago: executing program 45 (id=2089): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @broadcast}, 0x3, 0x3, 0x3, 0x3}}, 0x26) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5400208174fe003cb500000206010200000000000000000600000205000500020000000c000300686173683a69700073683a69702c707f72742c6970000900020073797a30000000000900020073797a30000000"], 0x54}}, 0x8000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) write(r1, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @private=0xa010101}, 0x0, 0x0, 0x4, 0x2}}, 0x80) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r6, 0x40186f40, 0x20000502) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x0, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x8}, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r7, &(0x7f0000000440)={0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="01ce03020090030000f793fdb080f16894587f34bb749b748d9a1b6f5580b9b2b255a861441953076828e5f4c5a7b892eaf7abd75b059c69ec97b5e2b0aa474e28f64d3512064fd2eb51e1e5679a310320c097313a5b6be4c2c3387991b9be9adfc103953f5365ac7a22068679efdfa0cb57f6ad2e503b80de93495622fc8095544f65882258f8ef20c0d365050cc000081b4d73711bd33355df4e4336cd24"], 0x0, 0x0, 0x0}, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r8, 0x800448d2, &(0x7f0000000040)) 21.316763255s ago: executing program 4 (id=2169): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'xfrm0\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x3, "9b801fa626270b87991d2e37a13eaa000000000200093bb4c83e787f49659355", "446e0d0fb9079ae357c460edb46e57f20700e3b56ce16711e400d6fee1b700", "05d64ba2349278361a13fa5d0489397b90b4d3ffbdaf41f88896771a54be03db", "d44a9f35a6df85ebd4735712170907ee891d45a5ef00", "c249dbf490eb72bf5dce7d2225003e5dcc4907e997e2ec42fa0ab05b50be5b6b", "b768c92574b06339bb1ea332", 0x6, 0x0, 0xa, 0x3, 0x5d}}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="150000006567b326bb756e02f0395032303030"], 0x15) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x33}}) r4 = dup(r2) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000003440)={0x0, 0x0, &(0x7f0000003400)={&(0x7f0000002100)=ANY=[@ANYBLOB="fc0100001900010000000000ffdbdf25fe8000000000000000000000000000aaffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044010500ac1414aa000000000000000000000000000000003c00000000000000e0000002000000000000000000000000000000000000f8000000000000000000000000007f000001000000000000000000000000000000006c0000000a000000ffffffff0000000000000000000000000000000004000000000000000000000000000000ff02000000000000000000000000000100000000320000000a000000ff0100000000000000000000000000010000000000000000000000000000000000000000ac1414aa0000000000000000000000000000000033000000150000002001000000000000000000000000000100000000010000"], 0x1fc}}, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x21101f, 0x1000, 0x0, 0x3e}, 0x20) write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r4, &(0x7f00000000c0)={0x18}, 0x18) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000440), 0x10) listen(r7, 0xfff) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000180)={0x2}, 0x8) close(r8) write$FUSE_INIT(r4, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50) socket$alg(0x26, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000c80)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0600100089000000000000000000002100", @ANYRESHEX=0x0], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x80, r9, 0x0, 0x7}, 0x38) 21.148901236s ago: executing program 4 (id=2171): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='io_uring_cqe_overflow\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x5078, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000940), &(0x7f0000000000)) io_uring_enter(r2, 0xb15, 0x0, 0x0, 0x0, 0xfffffd45) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 20.99379916s ago: executing program 4 (id=2172): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 20.846239467s ago: executing program 4 (id=2174): prlimit64(0x0, 0xe, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) 20.572993046s ago: executing program 4 (id=2176): syz_open_dev$vcsn(&(0x7f0000000280), 0x1, 0x8182) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000006f00016300000300000000000000ff"], 0x1c}}, 0x0) socket$inet6(0xa, 0x4, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x240cc080, &(0x7f00000002c0)={0xa, 0x2e24, 0x26, @private0}, 0x1c) setsockopt$inet6_udp_int(r1, 0x88, 0x65, &(0x7f0000000080), 0x4) openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000100)={@any, 0x1}) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x905040}, 0xc, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="10010000100000022cbd7000ffdbdf256e68706f6c7931333035000000000000000000000000000000000000000000000000000000000000ba9ca5c40000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000200000000000000000000080001000500000008000100d6b600000800010002000000080001000900000008000100040000000800010001000100"], 0x110}, 0x1, 0x0, 0x0, 0x20004010}, 0x40884) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000fb007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e1a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080e71113610e10d858e8327edb1fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18c65ae1bd4f4390af9a9ceafd07ed00b0000002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a469398685211bbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72c7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9624d37c10223fdae7ed04935c3c9068000000bc8619d73415cda2130f5011e4845500a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b40000000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b60c2499d16d7d9158ffffffff00000000ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a9e90d7676074a0bde4471414c99d4894ee7f8139dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702cca54728acad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd20785f653b621491dc6aaee0d409731091f4fb94c06006e3c1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e1590bab105b0cb578af7dc7d5e87d48d376444e2de02f47c61e8e84ff828de453f34c2b08660b080efc707e676e1fb4d5865c0ca177a4c7fbb4e829ab0894a1062b445c00f576b2b5cc7f819abd0f885cc4806f47ffb966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d3676329bb8cda690d192a070886df42b2708398773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169cdfaa4252d4ea6b8f6216ff202b5b5a182cb5e8380100632d03a7ca6f6d0339f9953c30930804fdc3690d10ecb65dc5b47481edbf1eee2e8893e903054d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026def743f1213bf817becd9e5a225d67521d1128eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979030000007081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f324661351df747aa6a65872dfdcfa68f65bd06b4082d43e121861b5cc09b986bf56c747d9a1cc5b506892c3a16ff10feea20bdac89bfb758cf3500000000000000000000000000000098e6db5a96055e764a3bfd4ccb20d2e800994f4b602d25b2c076f21c7102687e054bb93b2d013be6227fd99902b074c0de00733128c81c48c5e140b17d71ac48f137d10798c4272826d2ba55bbda0059636528c132ed06759d880d1bc291beea56ed7ee8bcb392fdf886dbc74879ec4b831904d7c101ebbaef3c0ae6d0cf0000000000000000000000000000000011cb735f66a559ef0cdb5163a15c0bb986474bf5d9542e3e48805ce53127e4c076d69d868df543717aaaa07d7aca056f7f036c2bcba0795d1a64868a29ac5321b3cd6ef5b1a741afc7124e16b64a5d1d68b45fcfd7e531090ceae2f05536a4d5d6a4081e743827fb9c031d1fc9f195c2da189c49eaed6c30c71da0452e502ef393efeb02ebe82b1851cae5fa7c958ba23110b5e0e5b890803f28a356b2920e74564e0f8377b0ba515d4cc28d702287fed2882b4780a1bcb583f1cb1470003ef9b592b9461328cfc01ebfce0ecdcea714a517dc40000000000000000000000000006bd0561e1cc72880cc3ec1bdf35eb670a9040e3b53cd826b94ad8aeb014e74787fe89fb3247a87d8bfb6d400142369f88964708d1d4d"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00040000000000000000000000000000e9feec8c5a00010000800000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000630120000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x128, 0x111, 0x4b4, 0x128, 0xd4feffff, 0x220, 0x20a, 0x278, 0x220, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @loopback, [], [], 'bond_slave_1\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x5}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) 13.990315564s ago: executing program 7 (id=2204): r0 = syz_open_dev$radio(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, 0x0) syz_open_dev$video4linux(0x0, 0x200000000000, 0x80000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) socket$inet(0x2, 0x3, 0x2) syz_emit_ethernet(0x10c, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000340)={r5, 0x1, 0x6, @multicast}, 0x10) getresgid(0x0, &(0x7f0000000400), &(0x7f0000000440)) setresuid(0x0, 0xee00, 0xee01) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 13.01597237s ago: executing program 7 (id=2207): prlimit64(0x0, 0xe, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(0x0) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) 12.921398717s ago: executing program 7 (id=2208): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, 0x0, 0x0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 12.854739311s ago: executing program 7 (id=2209): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd2, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xa6, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000000040)=0x5, 0x4) bind$inet6(r2, &(0x7f0000f65000)={0xa, 0x4e20, 0x228, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x867b, 0x10100, 0x1, 0x3}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd_index=0x3, 0x1, 0x0, 0x0, 0x4, 0x0, {0x2}}) io_uring_enter(r3, 0x2df0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x6, 0x0, &(0x7f0000000080)) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095", @ANYRES32=r2, @ANYRES64], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r6}, 0x18) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c0000001b0a01030000e6ff00000000020000000900010073797a3000000100090003"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 12.758749538s ago: executing program 7 (id=2210): r0 = socket$alg(0x26, 0x5, 0x0) sendfile(r0, r0, 0x0, 0xb) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, 0x0) mknod(0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40080) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x24, 0x0, 0xb, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_REV={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r2], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, 0x0) ioctl$HIDIOCSFLAG(r4, 0x4004480f, &(0x7f0000000000)=0x3) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r5, 0x101, 0xa, &(0x7f0000000000), &(0x7f0000000100)=0x4) 12.14760367s ago: executing program 6 (id=2213): r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl(r0, 0x8b32, &(0x7f0000000040)) socket$caif_seqpacket(0x25, 0x5, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x8) close(r1) syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101b01) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000380)={0x1}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000380)={0x0, 0x2}) 11.208863785s ago: executing program 6 (id=2214): sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x800) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) socket(0x10, 0x6, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, @void, @value}, 0x90) 10.219467604s ago: executing program 6 (id=2217): r0 = syz_open_dev$radio(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, 0x0) syz_open_dev$video4linux(0x0, 0x200000000000, 0x80000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) socket$inet(0x2, 0x3, 0x2) syz_emit_ethernet(0x10c, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000340)={r5, 0x1, 0x6, @multicast}, 0x10) getresgid(0x0, &(0x7f0000000400), &(0x7f0000000440)) setresuid(0x0, 0xee00, 0xee01) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 9.156010428s ago: executing program 6 (id=2221): socket(0x10, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) (async) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000080), 0x10) (async) listen(r1, 0x2) (async, rerun: 64) socket$inet6(0xa, 0x3, 0x11) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (rerun: 64) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) (async) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)=r4}, 0x20) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r4}, 0x57) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) (async, rerun: 32) r6 = socket$inet(0x2, 0x3, 0x2) (rerun: 32) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000140)='veth0\x00', 0x10) (async) sendto$inet(r6, &(0x7f0000000280), 0xebff, 0x800, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) 9.098183538s ago: executing program 7 (id=2222): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000140)=@get={0x1, 0x0, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x12, r0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x7, 0x878}, {0x800, 0xc}]}) 8.991812958s ago: executing program 6 (id=2223): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x10, &(0x7f00000013c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000001b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000e000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff2, @void, @value}, 0x94) 8.955308214s ago: executing program 6 (id=2224): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newchain={0x24, 0x64, 0x8, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x10}, {0x8, 0xfff4}, {0xc, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4) mmap(&(0x7f00000d5000/0x1000)=nil, 0x1000, 0x100000d, 0x3032, 0xffffffffffffffff, 0xffffe000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0x9, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='dirsync\x00', 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) alarm(0x7) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) listen(r3, 0x20000005) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) r5 = accept4(r3, 0x0, 0x0, 0x800) recvmsg$unix(r5, 0x0, 0x10002) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r0, @ANYRES64=0x0, @ANYBLOB="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"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r6}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={r6, &(0x7f0000000a80), &(0x7f0000000b40)=""/31}, 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="022100000000000014000300766c616e30000000000000000000000008000a00", @ANYBLOB="14001680100001"], 0x50}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 6.772460184s ago: executing program 9 (id=2230): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 6.715276223s ago: executing program 9 (id=2231): r0 = syz_open_dev$radio(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, 0x0) syz_open_dev$video4linux(0x0, 0x200000000000, 0x80000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) socket$inet(0x2, 0x3, 0x2) syz_emit_ethernet(0x10c, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000340)={r5, 0x1, 0x6, @multicast}, 0x10) getresgid(0x0, &(0x7f0000000400), &(0x7f0000000440)) setresuid(0x0, 0xee00, 0xee01) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 5.68347219s ago: executing program 9 (id=2233): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) add_key(0x0, 0x0, &(0x7f0000000040)="305c065ae182087051667557c7", 0xd, 0xfffffffffffffffe) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1e0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000100", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 5.626632721s ago: executing program 9 (id=2234): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xa}, {0xe}}}, 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xfffffffffffffddf, &(0x7f0000000200)=ANY=[]) syz_usb_control_io(r3, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x210}, @TCA_TBF_PARMS={0x28, 0x1, {{0xe, 0x1, 0x7, 0x2, 0x5, 0xb0f}, {0x2a, 0x2, 0x5, 0x2, 0x5, 0x3f6cd63f}, 0x3, 0x1, 0x22ae}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004040}, 0x44080) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0xd4, 0x12, 0x1, 0x70bd2a, 0x25dfdbfd, {0x23, 0x7, 0xc, 0x0, {0x4e21, 0x4e21, [0x1, 0xac2, 0x7, 0x7], [0x5, 0x6, 0x9, 0x6], r6, [0x7563, 0x8001]}, 0x504e, 0x9}, [@INET_DIAG_REQ_BYTECODE={0x4d, 0x1, "b759cbd290a279523e26384ae41a5c5d435ac354c15af0beed61390c574bf8f51caed34ab6fb0eb964b2c061ad3dd052b858dd71901bae3130fbf16db91f5f38b967976371e4d5b29f"}, @INET_DIAG_REQ_BYTECODE={0x36, 0x1, "4fb11c31158ebd635801bf7f67388218a83fb8f105ded321e8dba96706c16e12339186ea0eff6c275cbd037c4fd735781b11"}]}, 0xd4}, 0x1, 0x0, 0x0, 0x44801}, 0x80) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r7}, 0x10) rt_sigprocmask(0x2, &(0x7f0000000940)={[0xfffffffffffffffa]}, 0x0, 0x8) getrusage(0x1, &(0x7f0000000300)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a"], 0x2c}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r8, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r9, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f00000001c0)={0x7, 'vlan0\x00', {0xd}, 0xa6}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f00000001c0)={0xed, 0x0, 0xc0a}) 4.110582342s ago: executing program 46 (id=2176): syz_open_dev$vcsn(&(0x7f0000000280), 0x1, 0x8182) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000006f00016300000300000000000000ff"], 0x1c}}, 0x0) socket$inet6(0xa, 0x4, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x240cc080, &(0x7f00000002c0)={0xa, 0x2e24, 0x26, @private0}, 0x1c) setsockopt$inet6_udp_int(r1, 0x88, 0x65, &(0x7f0000000080), 0x4) openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000100)={@any, 0x1}) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x905040}, 0xc, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="10010000100000022cbd7000ffdbdf256e68706f6c7931333035000000000000000000000000000000000000000000000000000000000000ba9ca5c40000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000200000000000000000000080001000500000008000100d6b600000800010002000000080001000900000008000100040000000800010001000100"], 0x110}, 0x1, 0x0, 0x0, 0x20004010}, 0x40884) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b7020000c54a4530bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b706000008ffffffcf6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a1a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895c679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2dff0f000000000000bf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c048d46362ea0d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d120ea257bba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112008b16b0ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337dbcf3456ff6cd0d6b98a258e3509a7d15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d4816201ad1737798635b0a3ebd3aed120e4500c16e6c9dc729f2cb4ff5106419291d4222980b49ddb9527ce785822d8f4e2bc30a96767f500b9e26e3b12854da63083320d8bfe49d85e0842803dc59d6375bce2b8a93caf39c0ba767880b9bf9407e6a6c0f9a43d1ab51dabf9423b482e848fbe1653ff0c6161fa43543546ce17a42e6cddadaf0767d84407478ffe2d0b567d81201efc81e800d4c0874235ff5cd7f5f0ee71cc2b0193bfc9290627ceaeb0b02931a817688f3a51fa2861e70cbab50a5d434ed8d8841694dba46f3d5a95ae86e4d471684ccf427b2ba53a157b2a7cf7a4c10051bb77822190a14c2ab1f271a7cf9c240b99"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00040000000000000000000000000000e9feec8c5a00010000800000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000630120000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x128, 0x111, 0x4b4, 0x128, 0xd4feffff, 0x220, 0x20a, 0x278, 0x220, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @loopback, [], [], 'bond_slave_1\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x5}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) 3.594190637s ago: executing program 9 (id=2236): r0 = socket$packet(0x11, 0x3, 0x300) r1 = accept(r0, &(0x7f0000000280)=@l2tp6={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x80) r2 = signalfd4(r1, &(0x7f0000000300)={[0x8]}, 0x8, 0x80800) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r3 = socket(0xa, 0x6, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000cc0)={'ip6gre0\x00', &(0x7f0000000c40)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x4d, 0x8, 0xbb, @local, @mcast1, 0x700, 0x700, 0x4, 0xfffff486}}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() r7 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x10000000000, 0x8010002}) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f00000001c0)=0x1e) syz_emit_ethernet(0x82, &(0x7f0000000d00)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1e86dd65d15cdc004c2ffffc0200000083d4da310f96a859000001fe8000000000000000000000000000aa00000400050000000c2022eb0000000309000800090086dd080088be00000000100025030100000000100005080022eb000000012505fa06020000000000000700038a1d0800655800000004"], 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000580)=@security={'security\x00', 0xe, 0x4, 0x2e0, 0xffffffff, 0xe8, 0x0, 0x1a0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff000000, 'vlan1\x00', 'nr0\x00', {0xff}, {0xff}, 0x6, 0x2}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0xc}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@broadcast, @remote, 0xffffffff, 0xffffff00, 'ip6_vti0\x00', 'dvmrp0\x00', {}, {0xff}, 0x88, 0x2, 0x1}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0xc, {0x8}}}}, {{@ip={@loopback, @local, 0xff000000, 0xffffff00, 'batadv_slave_0\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x33, 0x3, 0x3}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0xf, 0xe, [0x36, 0x2, 0x2a, 0x1b, 0x11, 0x9, 0x40, 0x9, 0x1e, 0x32, 0x25, 0xe, 0x8, 0x13, 0x29, 0x3c], 0x3, 0x36, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) sendto$inet6(r0, 0x0, 0x0, 0x800, 0x0, 0x0) 2.57703675s ago: executing program 9 (id=2238): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r2, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7f, 0xfffffffb, 0x0, 0x7ffffffb}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) syz_open_dev$dri(&(0x7f0000000240), 0x80000001, 0x40001) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_INVAL_INODE(r5, &(0x7f0000000180)={0x28, 0x2, 0x0, {0x1, 0xffffffffffffe167, 0x6}}, 0x28) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000"], 0x1c}, 0x1, 0x0, 0x0, 0x44840}, 0x4000) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) r7 = socket(0x11, 0x80a, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) 1.688115948s ago: executing program 5 (id=2239): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70f) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x15, 0x0, 0x0) ptrace(0x10, r0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x5ff, 0x2000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 1.587927127s ago: executing program 5 (id=2240): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FD={0x8, 0x6, r0}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.449487189s ago: executing program 5 (id=2241): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, 0x0}, 0x0) 1.365687537s ago: executing program 5 (id=2242): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70f) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x15, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='kvm_dirty_ring_reset\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={0x0, 0xfffffffffffffd8c}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000001640)=0xc, 0x45) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r3) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x5ff, 0x2000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 1.074653898s ago: executing program 8 (id=2235): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x10000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0xe0}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) listen(r0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000180)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), r4, 0x3}}, 0x18) setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2c) 997.551834ms ago: executing program 5 (id=2243): r0 = syz_open_dev$radio(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, 0x0) syz_open_dev$video4linux(0x0, 0x200000000000, 0x80000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) socket$inet(0x2, 0x3, 0x2) syz_emit_ethernet(0x10c, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000340)={r5, 0x1, 0x6, @multicast}, 0x10) getresgid(0x0, &(0x7f0000000400), &(0x7f0000000440)) setresuid(0x0, 0xee00, 0xee01) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 907.645629ms ago: executing program 8 (id=2244): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="ac0100001000330600000f0000000000fc000000000000000000000000000000bfffffff00ffffffff00000000ffff000000400000008009000020000000000d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000000000000000010000000032000000e000000200000000001c00000000000023030000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000029bd7000000000000a000200000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00200000004e2200000000ac1414bb0000000000000000000000001c00040002004e2100000000fc00000000000000000000000000000108000c000400000008000b"], 0x1ac}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 857.092482ms ago: executing program 8 (id=2245): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0a56cdc7471f0949fe1533615f8e99b0240000002000010300000000432f4e115d24c4c2265e5048fe78931b5597f68ec1b689a97b4f2b81ef8da45d0cb8e8db40909ca85f7ebe1bfff58a50909d3386e117af5a546fc35f7fafd1571f84e9fc9b547d5c1b6095dcd2e362c5b17d9b27acac27fdd7d4126c77e8bd400c62d627a5ed578618ee8b337709e62b6035a4dbcc57bd501a451a915483ed4cc44162fac5c5466ea5abc27f00b3809139a9b858a8c78929780a8da4d7e4e5ac1c780746e21738e4165dcf96f8718832fab7f8f19f4057ace0bbbcd8dbd1d44bd32aadc3e190e44e894573b0d3014996"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4044004) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) r2 = syz_open_dev$vcsn(0x0, 0x406, 0x434680) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000480)) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) getsockopt$ax25_int(r3, 0x101, 0x1, &(0x7f0000002b00), &(0x7f0000002b40)=0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1000}) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000000)={0x4000000}) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/193, 0xc1}, {&(0x7f0000000880)=""/275, 0x113}], 0x2) r4 = memfd_create(&(0x7f0000002180)='\xa3\xcb\x04=\x827\xe7\x81S\bD\xd8K| \x8b\xdb\xb1\x03\xd0\x9d2\x9es\x19_=#n_\xeb\xbdR\xfd`U\xa7k\xd0\xd8\xd2\xc0\x91\xc1\x98#\r\xa7\x16\xfd@\xd7V*^\xcf\x9f\b1\xce3\vN\xa6\x01\xb5\xb5\xba\xdc\xc8\xda\xd2\apY\vu\x80\xa9\x14X\xcf!\xd3W\'\xb44#\xf6\x7fHS\xa6l\x17\x97\x80\xea\xc5+T\xe3\"\xda\x14\xfe,\xf3\\\xeb\x1cp\xd6\xc1\b\xec\xe1\x94\xdf\xdb\xa1\xf7=B\xb2\x94o\xd5{\xd2_\x93\xa1)\xdem\'H\\e\x8bu\xbcVw\xaeb\xa1b\xb1\xc1\f\x9f0\x93\x0f\x16,\xeb!Z\xa9\\\xf7B\xf8L\x05\xc7\xf7q\x9d_\xb4\xbb3i[t\xb6\xbc\x824\x7f\xd7\xb7 \xd4\x7fUE\xcb7\xe3\xb4\xb6\xa0\xd8\x1b\a8\xfe$\xa1\x12&\xb2\xfc\xfb\x12U\xb9u\xb4=\xa5\x9e\x1f`\x05q5\xee\xde\xdf\xba\xc4\xc5q\x8bk\xf1\x9c\xc3\xa4w\xf9!^#\x8c', 0x4) ftruncate(r4, 0x200000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1a42, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r7, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r6, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r7) close(0x4) socket(0x9, 0x3, 0x8) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x389a82, 0x0) write$cgroup_int(r9, 0x0, 0x0) 0s ago: executing program 5 (id=2246): r0 = socket$alg(0x26, 0x5, 0x0) sendfile(r0, r0, 0x0, 0xb) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, 0x0) mknod(0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40080) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x24, 0x0, 0xb, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_REV={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r2], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, 0x0) ioctl$HIDIOCSFLAG(r4, 0x4004480f, &(0x7f0000000000)=0x3) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r5, 0x101, 0xa, &(0x7f0000000000), &(0x7f0000000100)=0x4) kernel console output (not intermixed with test programs): LAN 0 to HW filter on device batadv0 [ 533.963866][ T5871] usb 3-1: config 0 has no interfaces? [ 533.979149][ T5871] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 533.979191][ T5871] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 533.979210][ T5871] usb 3-1: Manufacturer: syz [ 533.984635][ T5871] usb 3-1: config 0 descriptor?? [ 534.150807][ T5132] Bluetooth: hci15: command tx timeout [ 534.235250][T12741] chnl_net:caif_netlink_parms(): no params data found [ 534.426098][T12741] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.426171][T12741] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.426462][T12741] bridge_slave_0: entered allmulticast mode [ 534.427300][T12741] bridge_slave_0: entered promiscuous mode [ 534.435038][T12741] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.435843][T12741] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.436290][T12741] bridge_slave_1: entered allmulticast mode [ 534.438380][T12741] bridge_slave_1: entered promiscuous mode [ 534.484330][T12741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.488088][T12741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 534.552622][T12741] team0: Port device team_slave_0 added [ 534.556341][T12741] team0: Port device team_slave_1 added [ 534.608177][T12741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 534.608197][T12741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 534.608215][T12741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.616302][T12741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.616325][T12741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 534.616347][T12741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 534.683766][T12741] hsr_slave_0: entered promiscuous mode [ 534.684592][T12741] hsr_slave_1: entered promiscuous mode [ 534.685487][T12741] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 534.685501][T12741] Cannot create hsr debugfs directory [ 534.913914][T12741] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.951403][T12741] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.954457][T12760] FAULT_INJECTION: forcing a failure. [ 534.954457][T12760] name failslab, interval 1, probability 0, space 0, times 0 [ 534.954493][T12760] CPU: 0 UID: 0 PID: 12760 Comm: syz.4.2044 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 534.954515][T12760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 534.954526][T12760] Call Trace: [ 534.954532][T12760] [ 534.954540][T12760] dump_stack_lvl+0x16c/0x1f0 [ 534.954567][T12760] should_fail_ex+0x50a/0x650 [ 534.954598][T12760] ? fs_reclaim_acquire+0xae/0x150 [ 534.954626][T12760] ? tomoyo_realpath_from_path+0xb9/0x720 [ 534.954653][T12760] should_failslab+0xc2/0x120 [ 534.954673][T12760] __kmalloc_noprof+0xcb/0x510 [ 534.954691][T12760] tomoyo_realpath_from_path+0xb9/0x720 [ 534.954713][T12760] ? tomoyo_path_number_perm+0x235/0x590 [ 534.954732][T12760] ? tomoyo_path_number_perm+0x235/0x590 [ 534.954752][T12760] tomoyo_path_number_perm+0x248/0x590 [ 534.954769][T12760] ? tomoyo_path_number_perm+0x235/0x590 [ 534.954787][T12760] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 534.954806][T12760] ? rcu_is_watching+0x12/0xc0 [ 534.954829][T12760] ? preempt_count_add+0x76/0x150 [ 534.954856][T12760] ? __pfx_lock_release+0x10/0x10 [ 534.954880][T12760] ? trace_lock_acquire+0x14e/0x1f0 [ 534.954898][T12760] ? __fget_files+0x40/0x3a0 [ 534.954914][T12760] ? lock_acquire+0x2f/0xb0 [ 534.954934][T12760] ? __fget_files+0x40/0x3a0 [ 534.954950][T12760] ? __fget_files+0x206/0x3a0 [ 534.954965][T12760] security_file_ioctl+0x9b/0x240 [ 534.954990][T12760] __x64_sys_ioctl+0xb7/0x200 [ 534.955015][T12760] do_syscall_64+0xcd/0x250 [ 534.955034][T12760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.955059][T12760] RIP: 0033:0x7fe25ef8cda9 [ 534.955072][T12760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 534.955089][T12760] RSP: 002b:00007fe25fd41038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 534.955109][T12760] RAX: ffffffffffffffda RBX: 00007fe25f1a5fa0 RCX: 00007fe25ef8cda9 [ 534.955120][T12760] RDX: 0000000000000000 RSI: 0000000080045510 RDI: 0000000000000003 [ 534.955129][T12760] RBP: 00007fe25fd41090 R08: 0000000000000000 R09: 0000000000000000 [ 534.955138][T12760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.955148][T12760] R13: 0000000000000000 R14: 00007fe25f1a5fa0 R15: 00007ffe58b3f428 [ 534.955163][T12760] [ 534.955170][T12760] ERROR: Out of memory at tomoyo_realpath_from_path. [ 534.990999][T12741] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.043267][T12741] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.151527][T12741] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 535.157424][T12741] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 535.162480][T12741] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 535.170942][T12741] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 535.268989][T12741] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.269053][T12741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.269167][T12741] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.269221][T12741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.349120][T12091] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.349596][T12091] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.381384][T12741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.384399][T12719] veth0_vlan: entered promiscuous mode [ 535.399612][T12719] veth1_vlan: entered promiscuous mode [ 535.409913][T12741] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.423713][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.423771][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.430746][T11273] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.430800][T11273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.481214][T12719] veth0_macvtap: entered promiscuous mode [ 535.491314][T12719] veth1_macvtap: entered promiscuous mode [ 535.527427][T12719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.527462][T12719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.527478][T12719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.527491][T12719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.527500][T12719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.527511][T12719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.527522][T12719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.527533][T12719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.527544][T12719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.527594][T12719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.527639][T12719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.527649][T12719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.527673][T12719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.527684][T12719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.527705][T12719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.527716][T12719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.527738][T12719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.527749][T12719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.527772][T12719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.527783][T12719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.527806][T12719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.527815][T12719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.527837][T12719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.527846][T12719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.527866][T12719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.527876][T12719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.527895][T12719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.527904][T12719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.527924][T12719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.527933][T12719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.529087][T12719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.544931][T12719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.544948][T12719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.544954][T12719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.544960][T12719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.544965][T12719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.544971][T12719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.544976][T12719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.544982][T12719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.544991][T12719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.544997][T12719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.545004][T12719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.545010][T12719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.545016][T12719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.545021][T12719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.545027][T12719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.545033][T12719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.545038][T12719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.545044][T12719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.545051][T12719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.545058][T12719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.545064][T12719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.545070][T12719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.545075][T12719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.545081][T12719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.545087][T12719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.545093][T12719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.545100][T12719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.545106][T12719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.546931][T12719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.560299][T12719] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.560324][T12719] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.560338][T12719] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.560350][T12719] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.639972][T12719] ieee80211 phy36: Selected rate control algorithm 'minstrel_ht' [ 535.669104][T12091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.669129][T12091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.673681][T12719] ieee80211 phy37: Selected rate control algorithm 'minstrel_ht' [ 535.703105][T11273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.703130][T11273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.953220][ T5132] Bluetooth: hci16: command tx timeout [ 536.232422][T12741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 536.546245][ T5132] Bluetooth: hci15: command tx timeout [ 536.684926][T12125] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 536.744205][ T5869] usb 3-1: USB disconnect, device number 68 [ 536.849241][T12125] usb 7-1: config 0 has no interfaces? [ 536.852019][T12125] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 536.852052][T12125] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 536.852095][T12125] usb 7-1: Manufacturer: syz [ 536.861456][T12125] usb 7-1: config 0 descriptor?? [ 537.103075][T12777] tipc: Started in network mode [ 537.103101][T12777] tipc: Node identity 2, cluster identity 4711 [ 537.103113][T12777] tipc: Node number set to 2 [ 537.148151][ T5869] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 537.344240][ T5869] usb 3-1: config 0 has no interfaces? [ 537.347025][ T5869] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 537.347058][ T5869] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 537.347077][ T5869] usb 3-1: Manufacturer: syz [ 537.355054][ T5869] usb 3-1: config 0 descriptor?? [ 537.549281][T12741] veth0_vlan: entered promiscuous mode [ 537.558150][T12741] veth1_vlan: entered promiscuous mode [ 537.588127][T12741] veth0_macvtap: entered promiscuous mode [ 537.595254][T12741] veth1_macvtap: entered promiscuous mode [ 537.617081][T12741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.617109][T12741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.617116][T12741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.617127][T12741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.617136][T12741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.617147][T12741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.617157][T12741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.617174][T12741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.617183][T12741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.617194][T12741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.617206][T12741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.617217][T12741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.617227][T12741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.617238][T12741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.617248][T12741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.617259][T12741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.617269][T12741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.617279][T12741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.617289][T12741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.617299][T12741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.617310][T12741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.617321][T12741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.617331][T12741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.617340][T12741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.617351][T12741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.617363][T12741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.617373][T12741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.617384][T12741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.617395][T12741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.617405][T12741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.617416][T12741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.617425][T12741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.617996][T12741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.627796][T12125] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 537.632656][T12741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.632680][T12741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.632689][T12741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.632700][T12741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.632707][T12741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.632718][T12741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.632726][T12741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.632736][T12741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.632748][T12741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.632758][T12741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.632767][T12741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.632778][T12741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.632787][T12741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.632797][T12741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.632806][T12741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.632816][T12741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.632825][T12741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.632835][T12741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.632844][T12741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.632854][T12741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.632864][T12741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.632874][T12741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.632884][T12741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.632895][T12741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.632904][T12741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.632915][T12741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.632924][T12741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.632935][T12741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.632945][T12741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.632967][T12741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.633786][T12741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.643668][T12741] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.643707][T12741] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.643731][T12741] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.643753][T12741] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.672403][ T117] usb 3-1: USB disconnect, device number 69 [ 537.695011][T12741] ieee80211 phy38: Selected rate control algorithm 'minstrel_ht' [ 537.710147][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.710170][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.715880][T12741] ieee80211 phy39: Selected rate control algorithm 'minstrel_ht' [ 537.729761][T12091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.729787][T12091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.765674][T12125] usb 5-1: device descriptor read/64, error -71 [ 538.044656][T12125] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 538.181190][ T5132] Bluetooth: hci16: command tx timeout [ 538.437849][T12125] usb 5-1: device descriptor read/64, error -71 [ 538.556404][T12125] usb usb5-port1: attempt power cycle [ 538.641137][ T8] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 538.770026][ T5132] Bluetooth: hci15: command tx timeout [ 538.830191][ T8] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 538.830227][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 538.830250][ T8] usb 3-1: config 1 has no interface number 0 [ 538.830280][ T8] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 538.843929][ T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 538.843967][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.843987][ T8] usb 3-1: Product: syz [ 538.844000][ T8] usb 3-1: Manufacturer: syz [ 538.844011][ T8] usb 3-1: SerialNumber: syz [ 538.850435][ T8] usb 3-1: selecting invalid altsetting 1 [ 538.856816][ T29] kauditd_printk_skb: 544 callbacks suppressed [ 538.856839][ T29] audit: type=1400 audit(1738391377.860:23943): avc: denied { ioctl } for pid=12784 comm="syz.4.2048" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 538.856874][ T29] audit: type=1400 audit(1738391377.860:23944): avc: denied { egress } for pid=16 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 538.857503][ T29] audit: type=1400 audit(1738391377.860:23945): avc: denied { sendto } for pid=16 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 538.883038][ T29] audit: type=1400 audit(1738391377.879:23946): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.148 dest=42466 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 538.884788][ T29] audit: type=1400 audit(1738391377.879:23947): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.148 dest=42466 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 538.888065][ T29] audit: type=1400 audit(1738391377.888:23948): avc: denied { recv } for pid=12798 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.148 dest=42466 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 538.896626][ T29] audit: type=1400 audit(1738391377.888:23949): avc: denied { read write } for pid=12798 comm="syz.7.2050" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 538.897157][ T29] audit: type=1400 audit(1738391377.888:23950): avc: denied { read write open } for pid=12798 comm="syz.7.2050" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 538.901234][ T29] audit: type=1400 audit(1738391377.897:23951): avc: denied { mounton } for pid=12798 comm="syz.7.2050" path="/1/file0" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 538.901271][ T29] audit: type=1400 audit(1738391377.897:23952): avc: denied { mount } for pid=12798 comm="syz.7.2050" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 538.919037][T12125] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 538.942710][T12125] usb 5-1: device descriptor read/8, error -71 [ 539.101695][ T8] cdc_ncm 3-1:1.1: bind() failure [ 539.106251][ T8] usb 3-1: USB disconnect, device number 70 [ 539.198330][T12125] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 539.220202][T12125] usb 5-1: device descriptor read/8, error -71 [ 539.336708][T12125] usb usb5-port1: unable to enumerate USB device [ 539.534758][T12125] usb 7-1: USB disconnect, device number 3 [ 539.635840][T12241] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 539.795480][T12241] usb 8-1: Using ep0 maxpacket: 8 [ 539.801412][T12241] usb 8-1: config 0 has an invalid interface number: 151 but max is 1 [ 539.801452][T12241] usb 8-1: config 0 has no interface number 1 [ 539.801481][T12241] usb 8-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 539.801502][T12241] usb 8-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 539.801528][T12241] usb 8-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 539.801547][T12241] usb 8-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 539.801565][T12241] usb 8-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 539.801601][T12241] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 539.801622][T12241] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 30768, setting to 1024 [ 539.801644][T12241] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024 [ 539.805939][T12241] usb 8-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 539.805971][T12241] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.806116][T12241] usb 8-1: Product: syz [ 539.806131][T12241] usb 8-1: Manufacturer: syz [ 539.806143][T12241] usb 8-1: SerialNumber: syz [ 539.809392][T12241] usb 8-1: config 0 descriptor?? [ 539.811312][T12807] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 539.813175][T12241] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 539.814274][T12241] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 539.967308][ T5871] usb 3-1: new low-speed USB device number 71 using dummy_hcd [ 539.968226][T12125] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 540.133186][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 540.133226][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.133259][ T5871] usb 3-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 540.133283][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.135145][T12125] usb 7-1: config 0 has no interfaces? [ 540.137070][ T5871] usb 3-1: config 0 descriptor?? [ 540.141454][T12125] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 540.141483][T12125] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 540.141502][T12125] usb 7-1: Manufacturer: syz [ 540.144119][T12125] usb 7-1: config 0 descriptor?? [ 540.394675][ T5132] Bluetooth: hci16: command tx timeout [ 541.240454][ T5132] Bluetooth: hci15: command tx timeout [ 541.280838][T12241] usb 8-1: USB disconnect, device number 2 [ 541.504657][T12825] netlink: 116 bytes leftover after parsing attributes in process `syz.7.2057'. [ 541.695803][T12834] FAULT_INJECTION: forcing a failure. [ 541.695803][T12834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 541.695838][T12834] CPU: 1 UID: 0 PID: 12834 Comm: syz.7.2059 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 541.695864][T12834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 541.695875][T12834] Call Trace: [ 541.695882][T12834] [ 541.695890][T12834] dump_stack_lvl+0x16c/0x1f0 [ 541.695923][T12834] should_fail_ex+0x50a/0x650 [ 541.695953][T12834] _copy_from_user+0x2e/0xd0 [ 541.695981][T12834] kstrtouint_from_user+0xd7/0x1c0 [ 541.696002][T12834] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 541.696021][T12834] ? __pfx___might_resched+0x10/0x10 [ 541.696051][T12834] ? inode_security+0x101/0x130 [ 541.696076][T12834] proc_fail_nth_write+0x84/0x250 [ 541.696103][T12834] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 541.696124][T12834] ? ksys_write+0x12b/0x250 [ 541.696150][T12834] ? lock_acquire+0x2f/0xb0 [ 541.696172][T12834] ? ksys_write+0x12b/0x250 [ 541.696196][T12834] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 541.696217][T12834] vfs_write+0x24c/0x1150 [ 541.696239][T12834] ? __fget_files+0x1fc/0x3a0 [ 541.696253][T12834] ? __pfx___mutex_lock+0x10/0x10 [ 541.696271][T12834] ? __pfx_vfs_write+0x10/0x10 [ 541.696293][T12834] ? __fget_files+0x206/0x3a0 [ 541.696308][T12834] ksys_write+0x12b/0x250 [ 541.696330][T12834] ? __pfx_ksys_write+0x10/0x10 [ 541.696350][T12834] ? rcu_is_watching+0x12/0xc0 [ 541.696367][T12834] ? rcu_is_watching+0x12/0xc0 [ 541.696383][T12834] do_syscall_64+0xcd/0x250 [ 541.696400][T12834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.696431][T12834] RIP: 0033:0x7fed0d38b85f [ 541.696445][T12834] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 541.696463][T12834] RSP: 002b:00007fed0e23d030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 541.696481][T12834] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fed0d38b85f [ 541.696492][T12834] RDX: 0000000000000001 RSI: 00007fed0e23d0a0 RDI: 0000000000000004 [ 541.696501][T12834] RBP: 00007fed0e23d090 R08: 0000000000000000 R09: 0000000000000000 [ 541.696510][T12834] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 541.696518][T12834] R13: 0000000000000001 R14: 00007fed0d5a6080 R15: 00007ffca5101118 [ 541.696532][T12834] [ 542.618551][ T5132] Bluetooth: hci16: command tx timeout [ 542.792633][T12846] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2062'. [ 542.806453][T12846] bond1: entered promiscuous mode [ 542.806668][T12846] 8021q: adding VLAN 0 to HW filter on device bond1 [ 542.860700][ T25] usb 7-1: USB disconnect, device number 4 [ 542.928166][ T5871] usbhid 3-1:0.0: can't add hid device: -71 [ 542.928264][ T5871] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 542.936507][ T5871] usb 3-1: USB disconnect, device number 71 [ 543.044358][T12851] IPv6: sit1: Disabled Multicast RS [ 543.045158][T12851] sit1: entered allmulticast mode [ 543.204825][T12849] xt_bpf: check failed: parse error [ 543.474518][T12862] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 543.686873][T12125] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 543.804469][ T25] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 543.890210][T12241] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 543.943528][ T25] usb 7-1: device descriptor read/64, error -71 [ 543.989803][ T5833] Bluetooth: hci14: command tx timeout [ 544.120388][T12241] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 544.120423][T12241] usb 5-1: config 0 has no interface number 0 [ 544.120454][T12241] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 544.120478][T12241] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 544.128571][T12241] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 544.128607][T12241] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.128625][T12241] usb 5-1: Product: syz [ 544.128639][T12241] usb 5-1: Manufacturer: syz [ 544.128653][T12241] usb 5-1: SerialNumber: syz [ 544.131102][T12241] usb 5-1: config 0 descriptor?? [ 544.133615][T12869] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 544.135376][T12241] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 544.138439][T12241] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 544.200095][ T25] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 544.256401][ T29] kauditd_printk_skb: 547 callbacks suppressed [ 544.256428][ T29] audit: type=1400 audit(1738391382.911:24498): avc: denied { recv } for pid=11963 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.148 dest=42466 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 544.257555][ T29] audit: type=1400 audit(1738391382.911:24499): avc: denied { recv } for pid=11963 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.148 dest=42466 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 544.262093][ T29] audit: type=1400 audit(1738391382.911:24500): avc: denied { recv } for pid=12196 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.148 dest=42466 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 544.275773][ T29] audit: type=1400 audit(1738391382.930:24501): avc: denied { ioctl } for pid=12856 comm="syz.6.2066" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 544.283200][ T29] audit: type=1400 audit(1738391382.930:24502): avc: denied { recv } for pid=11963 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.148 dest=42466 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 544.289496][ T29] audit: type=1400 audit(1738391382.939:24503): avc: denied { read write } for pid=11963 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 544.291432][ T29] audit: type=1400 audit(1738391382.939:24504): avc: denied { read write open } for pid=11963 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 544.292162][ T29] audit: type=1400 audit(1738391382.939:24505): avc: denied { ioctl } for pid=11963 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 544.346337][ T25] usb 7-1: device descriptor read/64, error -71 [ 544.353824][ T29] audit: type=1400 audit(1738391382.995:24506): avc: denied { execmem } for pid=12876 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 544.385047][ T29] audit: type=1400 audit(1738391383.023:24507): avc: denied { ioctl } for pid=12868 comm="syz.4.2070" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 544.385217][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 544.458349][ T25] usb usb7-port1: attempt power cycle [ 544.600124][T12241] usb 5-1: USB disconnect, device number 64 [ 544.603196][T12241] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 544.603455][T12241] cyberjack 5-1:0.69: device disconnected [ 544.716802][ T5833] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 544.717387][ T5833] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 544.717539][ T5833] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 544.717931][ T5833] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 544.718634][ T5833] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 544.718802][ T5833] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 544.794454][T12887] wg1 speed is unknown, defaulting to 1000 [ 544.795491][T12887] lo speed is unknown, defaulting to 1000 [ 544.820068][ T25] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 544.843460][ T25] usb 7-1: device descriptor read/8, error -71 [ 545.070298][T12887] chnl_net:caif_netlink_parms(): no params data found [ 545.099002][ T25] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 545.121605][ T25] usb 7-1: device descriptor read/8, error -71 [ 545.173004][T12887] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.173090][T12887] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.173646][T12887] bridge_slave_0: entered allmulticast mode [ 545.174708][T12887] bridge_slave_0: entered promiscuous mode [ 545.178566][T12887] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.178612][T12887] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.181338][T12887] bridge_slave_1: entered allmulticast mode [ 545.183962][T12887] bridge_slave_1: entered promiscuous mode [ 545.239954][ T25] usb usb7-port1: unable to enumerate USB device [ 545.243723][T12887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 545.248326][T12887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 545.317345][T12887] team0: Port device team_slave_0 added [ 545.330950][T12887] team0: Port device team_slave_1 added [ 545.361505][T12887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 545.361525][T12887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.361546][T12887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 545.364809][T12887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 545.364828][T12887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.364847][T12887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.401286][T12887] hsr_slave_0: entered promiscuous mode [ 545.401921][T12887] hsr_slave_1: entered promiscuous mode [ 545.402654][T12887] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 545.402670][T12887] Cannot create hsr debugfs directory [ 545.796236][T12887] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.851488][T12887] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.238425][T12887] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.323133][T12887] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.414422][T12887] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 546.418606][T12887] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 546.423987][T12887] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 546.441793][T12887] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 546.450590][T12125] usb 8-1: unable to get BOS descriptor or descriptor too short [ 546.453245][T12125] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 546.453281][T12125] usb 8-1: can't read configurations, error -71 [ 546.782092][T12241] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 546.897492][ T5132] Bluetooth: hci17: command tx timeout [ 546.997316][T12887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.010878][T12241] usb 5-1: config 0 has no interfaces? [ 547.021872][T12241] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 547.021908][T12241] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 547.021927][T12241] usb 5-1: Manufacturer: syz [ 547.026332][T12241] usb 5-1: config 0 descriptor?? [ 547.035928][T12887] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.047576][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.047634][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.060416][ T3577] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.060493][ T3577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.293799][T12241] usb 5-1: USB disconnect, device number 65 [ 547.396620][T12125] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 547.557120][T12125] usb 8-1: Using ep0 maxpacket: 32 [ 547.573919][T12125] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 547.573965][T12125] usb 8-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 547.573989][T12125] usb 8-1: config 0 interface 0 has no altsetting 0 [ 547.574013][T12125] usb 8-1: New USB device found, idVendor=05ac, idProduct=024f, bcdDevice= 0.00 [ 547.574030][T12125] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.582155][T12125] usb 8-1: config 0 descriptor?? [ 547.586720][T12125] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 548.581924][T12949] ubi0: attaching mtd0 [ 548.585462][T12949] ubi0: scanning is finished [ 548.585514][T12949] ubi0: empty MTD device detected [ 548.710682][T12887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.822598][T12949] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 548.822628][T12949] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 548.822642][T12949] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 548.822655][T12949] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 548.822669][T12949] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 548.822681][T12949] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 548.822694][T12949] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 399884030 [ 548.822710][T12949] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 548.825038][T12956] ubi0: background thread "ubi_bgt0d" started, PID 12956 [ 548.936519][ T117] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 549.104797][ T117] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.104851][ T117] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 549.104877][ T117] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.108461][ T117] usb 3-1: config 0 descriptor?? [ 549.117761][ T5132] Bluetooth: hci17: command tx timeout [ 549.320913][ T25] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 549.470516][ T25] usb 7-1: device descriptor read/64, error -71 [ 549.653237][ T29] kauditd_printk_skb: 497 callbacks suppressed [ 549.653284][ T29] audit: type=1400 audit(1738391387.887:25005): avc: denied { execmem } for pid=12963 comm="syz.4.2093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 549.653327][ T29] audit: type=1400 audit(1738391387.897:25006): avc: denied { ioctl } for pid=12948 comm="syz.6.2091" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 549.653367][ T29] audit: type=1400 audit(1738391387.897:25007): avc: denied { ioctl } for pid=12948 comm="syz.6.2091" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 549.653398][ T29] audit: type=1400 audit(1738391387.915:25008): avc: denied { ioctl } for pid=12938 comm="syz.2.2089" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 549.653444][ T29] audit: type=1400 audit(1738391387.915:25009): avc: denied { ioctl } for pid=12938 comm="syz.2.2089" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 549.653480][ T29] audit: type=1400 audit(1738391387.915:25010): avc: denied { recv } for pid=12962 comm="modprobe" saddr=10.128.0.169 src=30006 daddr=10.128.1.148 dest=42466 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 549.664147][ T29] audit: type=1400 audit(1738391387.962:25011): avc: denied { ioctl } for pid=12948 comm="syz.6.2091" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 549.718730][ T29] audit: type=1400 audit(1738391388.018:25012): avc: denied { module_request } for pid=12887 comm="syz-executor" kmod="netdev-netdevsim9" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 550.122976][ T29] audit: type=1400 audit(1738391388.112:25013): avc: denied { create } for pid=12963 comm="syz.4.2093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 550.123030][ T29] audit: type=1400 audit(1738391388.224:25014): avc: denied { read } for pid=12938 comm="syz.2.2089" dev="nsfs" ino=4026535324 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 550.158137][ T25] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 550.205596][ T7344] usb 8-1: USB disconnect, device number 4 [ 550.306666][ T25] usb 7-1: device descriptor read/64, error -71 [ 550.426892][ T25] usb usb7-port1: attempt power cycle [ 550.547627][T12887] veth0_vlan: entered promiscuous mode [ 550.567191][T12887] veth1_vlan: entered promiscuous mode [ 550.646394][T12887] veth0_macvtap: entered promiscuous mode [ 550.653266][T12887] veth1_macvtap: entered promiscuous mode [ 550.675943][T12887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.675968][T12887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.675977][T12887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.675987][T12887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.675995][T12887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.676005][T12887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.676014][T12887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.676025][T12887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.676035][T12887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.676046][T12887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.676060][T12887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.676071][T12887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.676083][T12887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.676102][T12887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.676112][T12887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.676123][T12887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.676132][T12887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.676143][T12887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.676154][T12887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.676166][T12887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.676177][T12887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.676187][T12887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.676198][T12887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.676209][T12887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.676219][T12887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.676230][T12887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.676240][T12887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.676251][T12887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.676261][T12887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.676272][T12887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.676283][T12887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.676294][T12887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.676305][T12887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.676316][T12887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.677063][T12887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 550.685152][T12887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.685177][T12887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.685187][T12887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.685199][T12887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.685208][T12887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.685220][T12887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.685229][T12887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.685241][T12887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.685254][T12887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.685264][T12887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.685276][T12887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.685288][T12887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.685299][T12887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.685309][T12887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.685319][T12887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.685330][T12887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.685340][T12887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.685349][T12887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.685359][T12887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.685370][T12887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.685379][T12887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.685388][T12887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.685397][T12887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.685408][T12887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.685418][T12887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.685428][T12887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.685438][T12887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.685448][T12887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.685458][T12887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.685469][T12887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.685479][T12887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.685490][T12887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.686186][T12887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 550.702255][T12887] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.702294][T12887] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.702333][T12887] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.702362][T12887] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.779385][T12887] ieee80211 phy40: Selected rate control algorithm 'minstrel_ht' [ 550.793167][ T25] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 550.812464][ T25] usb 7-1: device descriptor read/8, error -71 [ 550.827870][ T3577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.827897][ T3577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.829134][T12981] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 550.841728][T12887] ieee80211 phy41: Selected rate control algorithm 'minstrel_ht' [ 550.897645][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.897673][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.914381][T12125] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 551.055171][T12985] block nbd7: shutting down sockets [ 551.063365][ T25] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 551.083332][T12125] usb 5-1: config 0 has no interfaces? [ 551.086547][ T25] usb 7-1: device descriptor read/8, error -71 [ 551.094507][T12125] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 551.094541][T12125] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 551.094563][T12125] usb 5-1: Manufacturer: syz [ 551.100489][T12125] usb 5-1: config 0 descriptor?? [ 551.203525][ T25] usb usb7-port1: unable to enumerate USB device [ 551.334964][T12125] usb 5-1: USB disconnect, device number 66 [ 551.341512][ T5132] Bluetooth: hci17: command tx timeout [ 552.009682][T13010] netlink: 'syz.4.2109': attribute type 29 has an invalid length. [ 552.011435][T13010] netlink: 'syz.4.2109': attribute type 29 has an invalid length. [ 552.015226][T13010] netlink: 508 bytes leftover after parsing attributes in process `syz.4.2109'. [ 552.025207][T13011] FAULT_INJECTION: forcing a failure. [ 552.025207][T13011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 552.025250][T13011] CPU: 0 UID: 0 PID: 13011 Comm: syz.7.2110 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 552.025271][T13011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 552.025281][T13011] Call Trace: [ 552.025289][T13011] [ 552.025300][T13011] dump_stack_lvl+0x16c/0x1f0 [ 552.025329][T13011] should_fail_ex+0x50a/0x650 [ 552.025356][T13011] _copy_from_user+0x2e/0xd0 [ 552.025379][T13011] copy_msghdr_from_user+0x99/0x160 [ 552.025404][T13011] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 552.025421][T13011] ? rcu_is_watching+0x12/0xc0 [ 552.025441][T13011] ? lock_release+0x4e2/0x6f0 [ 552.025463][T13011] ? get_pid_task+0xfc/0x250 [ 552.025483][T13011] ___sys_sendmsg+0xff/0x1e0 [ 552.025498][T13011] ? get_pid_task+0x35/0x250 [ 552.025514][T13011] ? __pfx____sys_sendmsg+0x10/0x10 [ 552.025529][T13011] ? lock_release+0x4e2/0x6f0 [ 552.025548][T13011] ? __pfx_lock_release+0x10/0x10 [ 552.025566][T13011] ? trace_lock_acquire+0x14e/0x1f0 [ 552.025585][T13011] ? __fget_files+0x206/0x3a0 [ 552.025606][T13011] __sys_sendmsg+0x16e/0x220 [ 552.025622][T13011] ? __pfx___sys_sendmsg+0x10/0x10 [ 552.025640][T13011] ? rcu_is_watching+0x12/0xc0 [ 552.025654][T13011] ? rcu_is_watching+0x12/0xc0 [ 552.025667][T13011] do_syscall_64+0xcd/0x250 [ 552.025687][T13011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.025710][T13011] RIP: 0033:0x7fed0d38cda9 [ 552.025725][T13011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 552.025742][T13011] RSP: 002b:00007fed0e25e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 552.025762][T13011] RAX: ffffffffffffffda RBX: 00007fed0d5a5fa0 RCX: 00007fed0d38cda9 [ 552.025773][T13011] RDX: 0000000000000000 RSI: 00000000200012c0 RDI: 0000000000000004 [ 552.025783][T13011] RBP: 00007fed0e25e090 R08: 0000000000000000 R09: 0000000000000000 [ 552.025794][T13011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.025804][T13011] R13: 0000000000000000 R14: 00007fed0d5a5fa0 R15: 00007ffca5101118 [ 552.025818][T13011] [ 552.174982][ T25] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 552.355241][ T25] usb 7-1: config 0 has no interfaces? [ 552.361368][ T25] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 552.361402][ T25] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 552.361459][ T25] usb 7-1: Manufacturer: syz [ 552.367196][ T25] usb 7-1: config 0 descriptor?? [ 552.934343][ T5900] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 553.094785][ T5900] usb 8-1: device descriptor read/64, error -71 [ 553.312716][ T8] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 553.468862][ T5900] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 553.566543][ T5132] Bluetooth: hci17: command tx timeout [ 553.605936][ T8] usb 10-1: config 0 has no interfaces? [ 553.615825][ T8] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 553.615859][ T8] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 553.615879][ T8] usb 10-1: Manufacturer: syz [ 553.618646][ T5900] usb 8-1: device descriptor read/64, error -71 [ 553.619511][ T8] usb 10-1: config 0 descriptor?? [ 553.737342][ T5900] usb usb8-port1: attempt power cycle [ 553.856740][T13034] ebtables: ebtables: counters copy to user failed while replacing table [ 553.909907][T13038] ebtables: ebtables: counters copy to user failed while replacing table [ 553.922853][ T8] usb 10-1: USB disconnect, device number 2 [ 554.099987][ T5900] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 554.129027][ T5900] usb 8-1: device descriptor read/8, error -71 [ 554.388593][ T5900] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 554.413005][ T5900] usb 8-1: device descriptor read/8, error -71 [ 554.528758][ T5900] usb usb8-port1: unable to enumerate USB device [ 554.626643][T13045] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 555.019921][ T117] usbhid 3-1:0.0: can't add hid device: -32 [ 555.019996][ T117] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 555.113353][ T25] usb 7-1: USB disconnect, device number 13 [ 555.118194][ T29] kauditd_printk_skb: 2610 callbacks suppressed [ 555.118214][ T29] audit: type=1400 audit(1738391393.070:26965): avc: denied { unmount } for pid=12719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 555.129955][ T29] audit: type=1400 audit(1738391393.079:26966): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.148 dest=42466 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 555.135719][ T29] audit: type=1400 audit(1738391393.079:26967): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.148 dest=42466 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 555.221343][ T29] audit: type=1400 audit(1738391393.154:26968): avc: denied { read write } for pid=12719 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 555.222215][ T29] audit: type=1400 audit(1738391393.154:26969): avc: denied { read write open } for pid=12719 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 555.223118][ T29] audit: type=1400 audit(1738391393.163:26970): avc: denied { ioctl } for pid=12719 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 555.307009][ T29] audit: type=1400 audit(1738391393.238:26971): avc: denied { read write } for pid=13051 comm="syz.6.2123" name="radio5" dev="devtmpfs" ino=982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 555.310678][ T29] audit: type=1400 audit(1738391393.247:26972): avc: denied { read write open } for pid=13051 comm="syz.6.2123" path="/dev/radio5" dev="devtmpfs" ino=982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 555.330065][ T29] audit: type=1400 audit(1738391393.266:26973): avc: denied { ioctl } for pid=13051 comm="syz.6.2123" path="/dev/radio5" dev="devtmpfs" ino=982 ioctlcmd=0x5604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 555.334309][ T29] audit: type=1400 audit(1738391393.266:26974): avc: denied { prog_load } for pid=13051 comm="syz.6.2123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 555.771441][T13046] caif:caif_disconnect_client(): nothing to disconnect [ 555.772361][T13046] base_sock_release(ffff888077446000) sk=ffff88805b66a000 [ 556.004377][T13058] FAULT_INJECTION: forcing a failure. [ 556.004377][T13058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 556.004417][T13058] CPU: 1 UID: 0 PID: 13058 Comm: syz.9.2125 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 556.004439][T13058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 556.004450][T13058] Call Trace: [ 556.004456][T13058] [ 556.004463][T13058] dump_stack_lvl+0x16c/0x1f0 [ 556.004494][T13058] should_fail_ex+0x50a/0x650 [ 556.004525][T13058] strncpy_from_user+0x3b/0x2d0 [ 556.004549][T13058] getname_flags.part.0+0x8f/0x550 [ 556.004576][T13058] getname_flags+0x93/0xf0 [ 556.004600][T13058] user_path_at+0x24/0x60 [ 556.004624][T13058] __x64_sys_mount+0x1fd/0x310 [ 556.004644][T13058] ? __pfx___x64_sys_mount+0x10/0x10 [ 556.004661][T13058] ? rcu_is_watching+0x12/0xc0 [ 556.004682][T13058] ? rcu_is_watching+0x12/0xc0 [ 556.004699][T13058] do_syscall_64+0xcd/0x250 [ 556.004719][T13058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.004743][T13058] RIP: 0033:0x7f0422f8cda9 [ 556.004758][T13058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.004775][T13058] RSP: 002b:00007f0423d9b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 556.004793][T13058] RAX: ffffffffffffffda RBX: 00007f04231a5fa0 RCX: 00007f0422f8cda9 [ 556.004803][T13058] RDX: 0000000020000080 RSI: 0000000020000180 RDI: 0000000000000000 [ 556.004812][T13058] RBP: 00007f0423d9b090 R08: 0000000000000000 R09: 0000000000000000 [ 556.004821][T13058] R10: 0000000001214040 R11: 0000000000000246 R12: 0000000000000001 [ 556.004830][T13058] R13: 0000000000000000 R14: 00007f04231a5fa0 R15: 00007ffefc9d4b68 [ 556.004845][T13058] [ 556.086904][T13060] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 556.088306][T13060] cramfs: wrong magic [ 556.266420][T13062] netlink: 'syz.9.2126': attribute type 32 has an invalid length. [ 556.266440][T13062] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2126'. [ 556.639456][T13072] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3446 sclass=netlink_route_socket pid=13072 comm=syz.4.2130 [ 557.201576][ T7344] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 557.459123][ T7344] usb 8-1: config 0 has no interfaces? [ 557.466352][ T7344] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 557.466386][ T7344] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 557.466404][ T7344] usb 8-1: Manufacturer: syz [ 557.471122][ T7344] usb 8-1: config 0 descriptor?? [ 557.509974][ T5900] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 557.659491][ T5900] usb 5-1: device descriptor read/64, error -71 [ 557.708519][T13080] tipc: Started in network mode [ 557.708540][T13080] tipc: Node identity 2, cluster identity 4711 [ 557.708547][T13080] tipc: Node number set to 2 [ 557.942047][ T5900] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 558.004074][T13093] veth0_to_team: entered promiscuous mode [ 558.004100][T13093] veth0_to_team: entered allmulticast mode [ 558.097830][ T5900] usb 5-1: device descriptor read/64, error -71 [ 558.216345][ T5900] usb usb5-port1: attempt power cycle [ 558.286802][T13086] caif:caif_disconnect_client(): nothing to disconnect [ 558.286937][T13086] base_sock_release(ffff888079eb4e00) sk=ffff88808e74c000 [ 558.771256][ T5900] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 558.804717][ T5900] usb 5-1: device descriptor read/8, error -71 [ 559.070896][ T5900] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 559.104313][ T5900] usb 5-1: device descriptor read/8, error -71 [ 559.145500][ T117] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 559.231361][ T5900] usb usb5-port1: unable to enumerate USB device [ 559.310764][ T117] usb 10-1: config 0 has an invalid descriptor of length 140, skipping remainder of the config [ 559.310803][ T117] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 559.310837][ T117] usb 10-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 559.310859][ T117] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.312795][ T117] usb 10-1: config 0 descriptor?? [ 559.551871][ T46] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 559.718919][ T46] usb 7-1: config 0 has an invalid interface number: 69 but max is 0 [ 559.718985][ T46] usb 7-1: config 0 has no interface number 0 [ 559.719017][ T46] usb 7-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 559.719049][ T46] usb 7-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 559.727610][ T46] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 559.727651][ T46] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.727669][ T46] usb 7-1: Product: syz [ 559.727683][ T46] usb 7-1: Manufacturer: syz [ 559.727696][ T46] usb 7-1: SerialNumber: syz [ 559.730501][ T46] usb 7-1: config 0 descriptor?? [ 559.732443][T13103] raw-gadget.5 gadget.6: fail, usb_ep_enable returned -22 [ 559.736203][ T46] cyberjack 7-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 559.738587][ T46] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 559.750118][ T117] usb 10-1: string descriptor 0 read error: -71 [ 559.751196][ T117] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 559.751995][ T117] usb 10-1: USB disconnect, device number 3 [ 559.970337][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 560.115691][ T117] usb 8-1: USB disconnect, device number 9 [ 560.186846][T12242] usb 7-1: USB disconnect, device number 14 [ 560.190826][T12242] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 560.191081][T12242] cyberjack 7-1:0.69: device disconnected [ 560.475129][ T29] kauditd_printk_skb: 1630 callbacks suppressed [ 560.475151][ T29] audit: type=1400 audit(1738391398.074:28605): avc: denied { sys_module } for pid=13109 comm="syz.7.2142" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 560.475814][ T29] audit: type=1400 audit(1738391398.074:28606): avc: denied { module_request } for pid=13109 comm="syz.7.2142" kmod="syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 560.482262][ T29] audit: type=1400 audit(1738391398.083:28607): avc: denied { map_create } for pid=13115 comm="syz.9.2144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 560.509280][ T29] audit: type=1400 audit(1738391398.102:28608): avc: denied { create } for pid=13118 comm="syz.4.2145" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 560.511462][ T29] audit: type=1400 audit(1738391398.102:28609): avc: denied { ioctl } for pid=13118 comm="syz.4.2145" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=43624 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 560.512186][ T29] audit: type=1400 audit(1738391398.102:28610): avc: denied { ioctl } for pid=13118 comm="syz.4.2145" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=43624 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 560.514486][ T29] audit: type=1400 audit(1738391398.121:28611): avc: denied { read } for pid=13118 comm="syz.4.2145" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0" [ 560.515216][ T29] audit: type=1400 audit(1738391398.121:28612): avc: denied { read open } for pid=13118 comm="syz.4.2145" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0" [ 560.516402][ T29] audit: type=1400 audit(1738391398.121:28613): avc: denied { ioctl } for pid=13118 comm="syz.4.2145" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0" [ 560.533262][ T29] audit: type=1400 audit(1738391398.130:28614): avc: denied { create } for pid=13118 comm="syz.4.2145" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 561.347465][T13126] block device autoloading is deprecated and will be removed. [ 561.348076][T13126] PM: Image not found (code -22) [ 561.660276][T13129] netlink: 452 bytes leftover after parsing attributes in process `syz.9.2148'. [ 562.969714][T13148] netlink: 'syz.9.2154': attribute type 32 has an invalid length. [ 562.969743][T13148] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2154'. [ 563.047876][ T25] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 563.186704][ T25] usb 8-1: device descriptor read/64, error -71 [ 563.453754][ T25] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 563.502692][T13160] netlink: 'syz.4.2158': attribute type 4 has an invalid length. [ 563.502718][T13160] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2158'. [ 563.516806][T13160] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 563.516845][T13160] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 563.668324][T13166] overlayfs: missing 'lowerdir' [ 563.688974][ T25] usb 8-1: device descriptor read/64, error -71 [ 563.807626][ T25] usb usb8-port1: attempt power cycle [ 563.848967][T13172] loop9: detected capacity change from 0 to 7 [ 563.849688][T13172] Dev loop9: unable to read RDB block 7 [ 563.849722][T13172] loop9: unable to read partition table [ 563.849837][T13172] loop9: partition table beyond EOD, truncated [ 563.849854][T13172] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 564.468571][ T25] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 564.481399][ T25] usb 8-1: device descriptor read/8, error -71 [ 564.710690][ T5132] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 564.711762][ T5132] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 564.711940][ T5132] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 564.712321][ T5132] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 564.712572][ T5132] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 564.712754][ T5132] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 564.736769][ T25] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 564.759440][ T25] usb 8-1: device descriptor read/8, error -71 [ 564.828553][T13184] wg1 speed is unknown, defaulting to 1000 [ 564.829040][T13184] lo speed is unknown, defaulting to 1000 [ 564.877863][ T25] usb usb8-port1: unable to enumerate USB device [ 565.097051][T13196] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3446 sclass=netlink_route_socket pid=13196 comm=syz.9.2173 [ 565.167108][T13198] overlayfs: missing 'workdir' [ 565.173095][T13184] chnl_net:caif_netlink_parms(): no params data found [ 565.332806][T13202] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2175'. [ 565.343155][T13184] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.343248][T13184] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.343441][T13184] bridge_slave_0: entered allmulticast mode [ 565.344233][T13184] bridge_slave_0: entered promiscuous mode [ 565.360498][T13184] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.360571][T13184] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.361016][T13184] bridge_slave_1: entered allmulticast mode [ 565.361840][T13184] bridge_slave_1: entered promiscuous mode [ 565.431230][T13184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 565.674863][T13214] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=111 sclass=netlink_route_socket pid=13214 comm=syz.4.2176 [ 565.683373][T13184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.731233][ T25] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 565.820134][T13184] team0: Port device team_slave_0 added [ 565.823276][T13184] team0: Port device team_slave_1 added [ 565.829331][ T29] kauditd_printk_skb: 2110 callbacks suppressed [ 565.829353][ T29] audit: type=1400 audit(1738391403.088:30704): avc: denied { create } for pid=13210 comm="syz.4.2176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 565.834788][ T29] audit: type=1400 audit(1738391403.088:30705): avc: denied { module_request } for pid=13205 comm="syz.9.2177" kmod="ebt_statistic" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 565.854419][ T29] audit: type=1400 audit(1738391403.106:30706): avc: denied { read } for pid=13210 comm="syz.4.2176" dev="nsfs" ino=4026535989 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 566.046257][ T29] audit: type=1400 audit(1738391403.172:30707): avc: denied { prog_load } for pid=13205 comm="syz.9.2177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 566.046317][ T29] audit: type=1400 audit(1738391403.172:30708): avc: denied { bpf } for pid=13205 comm="syz.9.2177" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 566.046345][ T29] audit: type=1400 audit(1738391403.172:30709): avc: denied { perfmon } for pid=13205 comm="syz.9.2177" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 566.046380][ T29] audit: type=1400 audit(1738391403.172:30710): avc: denied { perfmon } for pid=13205 comm="syz.9.2177" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 566.046417][ T29] audit: type=1400 audit(1738391403.172:30711): avc: denied { perfmon } for pid=13205 comm="syz.9.2177" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 566.046451][ T29] audit: type=1400 audit(1738391403.172:30712): avc: denied { perfmon } for pid=13205 comm="syz.9.2177" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 566.046486][ T29] audit: type=1400 audit(1738391403.172:30713): avc: denied { bpf } for pid=13205 comm="syz.9.2177" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 566.083640][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.083677][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.083712][ T25] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 566.083734][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.087225][ T25] usb 8-1: config 0 descriptor?? [ 566.092198][ T25] usbhid 8-1:0.0: can't add hid device: -22 [ 566.092301][ T25] usbhid 8-1:0.0: probe with driver usbhid failed with error -22 [ 566.162950][T13184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.162973][T13184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.162992][T13184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.190118][T13184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.190139][T13184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.190157][T13184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.281000][T13208] ebtables: ebtables: counters copy to user failed while replacing table [ 566.362281][T13206] ebtables: ebtables: counters copy to user failed while replacing table [ 566.372798][T13221] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 566.409687][T13218] xt_TCPMSS: Only works on TCP SYN packets [ 566.462909][T13184] hsr_slave_0: entered promiscuous mode [ 566.463573][T13184] hsr_slave_1: entered promiscuous mode [ 566.464216][T13184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 566.464237][T13184] Cannot create hsr debugfs directory [ 566.892817][T13184] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.921572][ T5132] Bluetooth: hci18: command tx timeout [ 566.971804][T13184] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.024479][T13184] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.078182][T13184] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.526463][T13184] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 567.531178][T13184] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 567.536739][T13184] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 567.540821][T13184] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 567.711598][T13184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 567.743282][T13184] 8021q: adding VLAN 0 to HW filter on device team0 [ 567.753491][ T6334] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.753553][ T6334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 567.768761][ T3577] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.768819][ T3577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 568.463530][T13236] caif:caif_disconnect_client(): nothing to disconnect [ 568.464943][T12125] usb 8-1: USB disconnect, device number 14 [ 568.468363][T13236] base_sock_release(ffff88805a960c00) sk=ffff8880345cc000 [ 568.649879][ T25] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 568.687234][T13253] overlayfs: missing 'workdir' [ 568.698472][T13252] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.2186'. [ 568.698553][T13252] netlink: zone id is out of range [ 568.698579][T13252] netlink: zone id is out of range [ 568.698590][T13252] netlink: zone id is out of range [ 568.698596][T13252] netlink: zone id is out of range [ 568.698602][T13252] netlink: zone id is out of range [ 568.698608][T13252] netlink: zone id is out of range [ 568.698613][T13252] netlink: zone id is out of range [ 568.698619][T13252] netlink: zone id is out of range [ 568.769412][T13184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 568.788486][ T25] usb 10-1: device descriptor read/64, error -71 [ 568.846209][T13260] netlink: 'syz.7.2188': attribute type 21 has an invalid length. [ 568.846318][T13260] netlink: 156 bytes leftover after parsing attributes in process `syz.7.2188'. [ 569.045039][ T25] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 569.088010][T12242] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 569.136953][ T5132] Bluetooth: hci18: command tx timeout [ 569.184315][ T25] usb 10-1: device descriptor read/64, error -71 [ 569.317013][ T25] usb usb10-port1: attempt power cycle [ 569.337848][T12242] usb 7-1: config 0 has no interfaces? [ 569.340584][T12242] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 569.340608][T12242] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 569.340619][T12242] usb 7-1: Manufacturer: syz [ 569.342511][T12242] usb 7-1: config 0 descriptor?? [ 569.676418][ T25] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 569.698994][ T25] usb 10-1: device descriptor read/8, error -71 [ 570.275223][ T25] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 570.296893][ T25] usb 10-1: device descriptor read/8, error -71 [ 570.322899][T13184] veth0_vlan: entered promiscuous mode [ 570.333722][T13184] veth1_vlan: entered promiscuous mode [ 570.367338][T13184] veth0_macvtap: entered promiscuous mode [ 570.371823][T13184] veth1_macvtap: entered promiscuous mode [ 570.385568][T13184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.385589][T13184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.385595][T13184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.385602][T13184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.385606][T13184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.385612][T13184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.385618][T13184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.385625][T13184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.385632][T13184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.385638][T13184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.385647][T13184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.385653][T13184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.385660][T13184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.385665][T13184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.385672][T13184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.385678][T13184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.385685][T13184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.385691][T13184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.385697][T13184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.385703][T13184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.385710][T13184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.385716][T13184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.385723][T13184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.385728][T13184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.385735][T13184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.385741][T13184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.385749][T13184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.385755][T13184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.385762][T13184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.385768][T13184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.385776][T13184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.385783][T13184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.385789][T13184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.385796][T13184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.385803][T13184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.385809][T13184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.386439][T13184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 570.391292][T13184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 570.391310][T13184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.391316][T13184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 570.391322][T13184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.391328][T13184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 570.391335][T13184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.391340][T13184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 570.391346][T13184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.391357][T13184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 570.391362][T13184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.391369][T13184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 570.391375][T13184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.391382][T13184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 570.391388][T13184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.391404][T13184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 570.391410][T13184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.391417][T13184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 570.391423][T13184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.391430][T13184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 570.391435][T13184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.391442][T13184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 570.391448][T13184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.391454][T13184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 570.391489][T13184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.391496][T13184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 570.391502][T13184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.391509][T13184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 570.391514][T13184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.391521][T13184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 570.391527][T13184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.391534][T13184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 570.391540][T13184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.391546][T13184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 570.391552][T13184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.395069][T13184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 570.400813][T13184] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.400837][T13184] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.400851][T13184] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.400874][T13184] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.414344][ T25] usb usb10-port1: unable to enumerate USB device [ 570.442123][T13184] ieee80211 phy42: Selected rate control algorithm 'minstrel_ht' [ 570.460564][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.460589][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.463448][T13184] ieee80211 phy43: Selected rate control algorithm 'minstrel_ht' [ 570.481166][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.481191][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.910392][T13288] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 570.910425][T13288] overlayfs: missing 'lowerdir' [ 571.028679][T13291] overlayfs: missing 'workdir' [ 571.123338][T13293] tipc: Started in network mode [ 571.123353][T13293] tipc: Node identity 2, cluster identity 4711 [ 571.123359][T13293] tipc: Node number set to 2 [ 571.231110][ T29] kauditd_printk_skb: 575 callbacks suppressed [ 571.231129][ T29] audit: type=1400 audit(1738391408.139:31289): avc: denied { write } for pid=13294 comm="syz.5.2198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 571.288692][ T29] audit: type=1400 audit(1738391408.186:31290): avc: denied { prog_load } for pid=13294 comm="syz.5.2198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 571.289142][ T29] audit: type=1400 audit(1738391408.186:31291): avc: denied { bpf } for pid=13294 comm="syz.5.2198" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 571.289537][ T29] audit: type=1400 audit(1738391408.186:31292): avc: denied { perfmon } for pid=13294 comm="syz.5.2198" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 571.293126][ T29] audit: type=1400 audit(1738391408.195:31293): avc: denied { create } for pid=13294 comm="syz.5.2198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 571.294785][ T29] audit: type=1400 audit(1738391408.195:31294): avc: denied { write } for pid=13294 comm="syz.5.2198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 571.296188][ T29] audit: type=1400 audit(1738391408.195:31295): avc: denied { ioctl } for pid=13294 comm="syz.5.2198" path="socket:[45325]" dev="sockfs" ino=45325 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 571.297672][T13297] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2198'. [ 571.333285][ T29] audit: type=1400 audit(1738391408.232:31296): avc: denied { recv } for pid=12887 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.148 dest=42466 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 571.334725][ T29] audit: type=1400 audit(1738391408.232:31297): avc: denied { recv } for pid=12887 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.148 dest=42466 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 571.339872][ T29] audit: type=1400 audit(1738391408.232:31298): avc: denied { read write } for pid=12887 comm="syz-executor" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 571.355815][ T5132] Bluetooth: hci18: command tx timeout [ 571.526042][ T5132] Bluetooth: hci16: command tx timeout [ 571.603995][T13305] (syz.9.2202,13305,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 571.604018][T13305] (syz.9.2202,13305,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 571.658928][T13283] caif:caif_disconnect_client(): nothing to disconnect [ 571.659062][T13283] base_sock_release(ffff88809bc74200) sk=ffff88808e0c9000 [ 571.905506][ T5869] usb 10-1: new low-speed USB device number 8 using dummy_hcd [ 572.055142][ T5869] usb 10-1: device descriptor read/64, error -71 [ 572.287856][T12241] usb 7-1: USB disconnect, device number 15 [ 572.307930][ T5869] usb 10-1: new low-speed USB device number 9 using dummy_hcd [ 572.444714][ T5869] usb 10-1: device descriptor read/64, error -71 [ 572.564626][ T5869] usb usb10-port1: attempt power cycle [ 572.827304][T13319] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 572.872706][ T7344] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 572.958181][ T5869] usb 10-1: new low-speed USB device number 10 using dummy_hcd [ 572.987287][ T5869] usb 10-1: device descriptor read/8, error -71 [ 573.011252][ T7344] usb 6-1: device descriptor read/64, error -71 [ 573.283171][ T7344] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 573.297474][ T5869] usb 10-1: new low-speed USB device number 11 using dummy_hcd [ 573.346489][ T5869] usb 10-1: device descriptor read/8, error -71 [ 573.394975][T13328] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 573.428229][ T7344] usb 6-1: device descriptor read/64, error -71 [ 573.473045][ T5869] usb usb10-port1: unable to enumerate USB device [ 573.550373][ T7344] usb usb6-port1: attempt power cycle [ 573.578008][ T5132] Bluetooth: hci18: command tx timeout [ 573.610013][ T25] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 573.750004][ T25] usb 8-1: device descriptor read/64, error -71 [ 573.909261][ T7344] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 573.931797][ T7344] usb 6-1: device descriptor read/8, error -71 [ 574.010095][ T25] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 574.146636][ T25] usb 8-1: device descriptor read/64, error -71 [ 574.187355][ T7344] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 574.210717][ T7344] usb 6-1: device descriptor read/8, error -71 [ 574.263588][ T25] usb usb8-port1: attempt power cycle [ 574.327164][ T7344] usb usb6-port1: unable to enumerate USB device [ 574.570641][T13332] caif:caif_disconnect_client(): nothing to disconnect [ 574.570799][T13332] base_sock_release(ffff888077440600) sk=ffff888083736000 [ 574.626421][ T25] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 574.723080][ T25] usb 8-1: device descriptor read/8, error -71 [ 575.313677][ T25] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 575.332999][ T25] usb 8-1: device descriptor read/8, error -71 [ 575.449534][ T25] usb usb8-port1: unable to enumerate USB device [ 575.706936][ T8] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 576.170290][ T8] usb 10-1: config 0 has no interfaces? [ 576.172301][ T8] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 576.172323][ T8] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 576.172333][ T8] usb 10-1: Manufacturer: syz [ 576.174621][ T8] usb 10-1: config 0 descriptor?? [ 576.642132][ T29] kauditd_printk_skb: 897 callbacks suppressed [ 576.642151][ T29] audit: type=1400 audit(1738391413.190:31842): avc: denied { recv } for pid=3577 comm="kworker/u8:8" saddr=10.128.0.169 src=30006 daddr=10.128.1.148 dest=42466 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 576.642173][ T29] audit: type=1400 audit(1738391413.199:31843): avc: denied { recv } for pid=66 comm="kworker/u8:4" saddr=10.128.0.169 src=30006 daddr=10.128.1.148 dest=42466 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 576.667426][ T29] audit: type=1400 audit(1738391413.209:31844): avc: denied { read write } for pid=12719 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 576.667482][ T29] audit: type=1400 audit(1738391413.209:31845): avc: denied { read write open } for pid=12719 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 576.667509][ T29] audit: type=1400 audit(1738391413.209:31846): avc: denied { ioctl } for pid=12719 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 576.667536][ T29] audit: type=1400 audit(1738391413.218:31847): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.148 dest=42466 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 576.671639][ T29] audit: type=1400 audit(1738391413.227:31848): avc: denied { create } for pid=13345 comm="syz.9.2216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 576.681629][ T29] audit: type=1400 audit(1738391413.237:31849): avc: denied { create } for pid=13345 comm="syz.9.2216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 576.682428][ T29] audit: type=1400 audit(1738391413.237:31850): avc: denied { create } for pid=13345 comm="syz.9.2216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 576.683524][ T29] audit: type=1400 audit(1738391413.237:31851): avc: denied { write } for pid=13345 comm="syz.9.2216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 576.700798][T13346] tipc: Started in network mode [ 576.700822][T13346] tipc: Node identity 2, cluster identity 4711 [ 576.700833][T13346] tipc: Node number set to 2 [ 577.145927][T13374] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2224'. [ 577.150259][T13374] vlan0: entered promiscuous mode [ 577.156389][T13374] net_ratelimit: 8 callbacks suppressed [ 577.156428][T13374] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 577.472198][T13379] PM: Image not found (code -22) [ 578.710732][ T5869] usb 10-1: USB disconnect, device number 12 [ 580.141352][T13404] loop9: detected capacity change from 0 to 7 [ 580.142040][T13404] Dev loop9: unable to read RDB block 7 [ 580.142075][T13404] loop9: unable to read partition table [ 580.142200][T13404] loop9: partition table beyond EOD, truncated [ 580.142216][T13404] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 580.261509][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 580.261555][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 580.356308][ T5869] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 580.462629][ T8] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 580.505672][ T5869] usb 6-1: device descriptor read/64, error -71 [ 580.633740][ T8] usb 10-1: Using ep0 maxpacket: 32 [ 580.639474][ T8] usb 10-1: config index 0 descriptor too short (expected 35577, got 27) [ 580.639508][ T8] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 580.639528][ T8] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 580.639546][ T8] usb 10-1: config 1 has no interface number 0 [ 580.639573][ T8] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 580.639596][ T8] usb 10-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 580.639631][ T8] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 580.639649][ T8] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.645499][ T8] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found [ 580.783299][ T5869] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 580.936508][ T5869] usb 6-1: device descriptor read/64, error -71 [ 581.067743][ T5869] usb usb6-port1: attempt power cycle [ 581.257118][ T8] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now attached [ 581.437819][ T5869] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 581.458318][ T5869] usb 6-1: device descriptor read/8, error -71 [ 581.487552][T13406] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 581.489941][T13406] netlink: 152 bytes leftover after parsing attributes in process `syz.9.2234'. [ 581.526196][T13406] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2234'. [ 581.573679][ T8] usb 10-1: USB disconnect, device number 13 [ 581.574073][ T8] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected [ 581.713313][ T5869] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 581.759459][ T5869] usb 6-1: device descriptor read/8, error -71 [ 581.850805][ T5833] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 581.851300][ T5833] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 581.851451][ T5833] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 581.852018][ T5833] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 581.852518][ T5833] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 581.852679][ T5833] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 581.874387][ T5869] usb usb6-port1: unable to enumerate USB device [ 581.880513][T13409] wg1 speed is unknown, defaulting to 1000 [ 581.880785][T13409] lo speed is unknown, defaulting to 1000 [ 582.009279][T13409] chnl_net:caif_netlink_parms(): no params data found [ 582.041659][T13409] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.041716][T13409] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.041824][T13409] bridge_slave_0: entered allmulticast mode [ 582.042269][T13409] bridge_slave_0: entered promiscuous mode [ 582.044021][T13409] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.044061][T13409] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.044152][T13409] bridge_slave_1: entered allmulticast mode [ 582.044575][T13409] bridge_slave_1: entered promiscuous mode [ 582.060984][T13409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 582.063261][T13409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 582.076189][T13409] team0: Port device team_slave_0 added [ 582.078363][T13409] team0: Port device team_slave_1 added [ 582.087984][T13409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 582.088004][T13409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.088023][T13409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 582.090404][T13409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 582.090418][T13409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.090437][T13409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.108284][T13409] hsr_slave_0: entered promiscuous mode [ 582.108850][T13409] hsr_slave_1: entered promiscuous mode [ 582.109469][T13409] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 582.109484][T13409] Cannot create hsr debugfs directory [ 582.169581][ T29] kauditd_printk_skb: 325 callbacks suppressed [ 582.169603][ T29] audit: type=1400 audit(1738391418.363:32177): avc: denied { recv } for pid=13405 comm="syz.9.2234" saddr=10.128.0.169 src=30006 daddr=10.128.1.148 dest=42466 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 582.172658][T13409] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.183918][ T29] audit: type=1400 audit(1738391418.372:32178): avc: denied { recv } for pid=11 comm="kworker/u8:0" saddr=10.128.0.169 src=30006 daddr=10.128.1.148 dest=42466 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 582.183972][ T29] audit: type=1400 audit(1738391418.372:32179): avc: denied { recv } for pid=11 comm="kworker/u8:0" saddr=10.128.0.169 src=30006 daddr=10.128.1.148 dest=42466 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 582.184001][ T29] audit: type=1400 audit(1738391418.372:32180): avc: denied { recv } for pid=11 comm="kworker/u8:0" saddr=10.128.0.169 src=30006 daddr=10.128.1.148 dest=42466 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 582.184030][ T29] audit: type=1400 audit(1738391418.372:32181): avc: denied { recv } for pid=11 comm="kworker/u8:0" saddr=10.128.0.169 src=30006 daddr=10.128.1.148 dest=42466 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 582.184063][ T29] audit: type=1400 audit(1738391418.391:32182): avc: denied { recv } for pid=11 comm="kworker/u8:0" saddr=10.128.0.169 src=30006 daddr=10.128.1.148 dest=42466 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 582.185360][ T29] audit: type=1400 audit(1738391418.391:32183): avc: denied { recv } for pid=11 comm="kworker/u8:0" saddr=10.128.0.169 src=30006 daddr=10.128.1.148 dest=42466 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 582.186772][ T29] audit: type=1400 audit(1738391418.391:32184): avc: denied { recv } for pid=11 comm="kworker/u8:0" saddr=10.128.0.169 src=30006 daddr=10.128.1.148 dest=42466 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 582.188217][ T29] audit: type=1400 audit(1738391418.391:32185): avc: denied { recv } for pid=11 comm="kworker/u8:0" saddr=10.128.0.169 src=30006 daddr=10.128.1.148 dest=42466 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 582.189557][ T29] audit: type=1400 audit(1738391418.391:32186): avc: denied { recv } for pid=11 comm="kworker/u8:0" saddr=10.128.0.169 src=30006 daddr=10.128.1.148 dest=42466 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 582.242239][T13409] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.278348][T13409] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.358688][T13409] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.710929][T13409] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 582.714075][T13409] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 582.716557][T13409] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 582.721309][T13409] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 582.747994][T13409] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.748032][T13409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 582.748104][T13409] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.748127][T13409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 582.801235][T13409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 582.811412][ T1090] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.811882][ T1090] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.821707][T13409] 8021q: adding VLAN 0 to HW filter on device team0 [ 582.828248][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.828305][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 582.832708][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.832773][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 583.462352][T13409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 583.562990][ T8] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 583.743717][ T8] usb 10-1: config 0 has no interfaces? [ 583.747722][ T8] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 583.747757][ T8] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 583.747778][ T8] usb 10-1: Manufacturer: syz [ 583.751676][ T8] usb 10-1: config 0 descriptor?? [ 584.013655][ T5132] Bluetooth: hci19: command tx timeout [ 584.034361][T13409] veth0_vlan: entered promiscuous mode [ 584.051129][T13409] veth1_vlan: entered promiscuous mode [ 584.120345][T13409] veth0_macvtap: entered promiscuous mode [ 584.126900][T13409] veth1_macvtap: entered promiscuous mode [ 584.148471][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.148495][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.148501][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.148507][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.148513][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.148519][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.148525][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.148531][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.148537][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.148543][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.148552][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.148558][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.148565][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.148571][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.148578][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.148584][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.148591][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.148596][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.148603][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.148609][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.148616][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.148622][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.148629][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.148634][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.148641][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.148647][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.148654][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.148659][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.148667][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.148672][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.148680][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.148686][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.148693][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.148699][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.148705][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.148710][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.148717][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.148723][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.149462][T13409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 584.161158][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.161185][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.161196][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.161208][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.161216][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.161228][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.161238][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.161249][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.161276][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.161287][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.161297][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.161309][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.162976][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.162996][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.163014][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.163025][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.163042][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.163052][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.163068][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.163079][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.163095][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.163106][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.163125][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.163136][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.163159][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.163171][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.163186][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.163197][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.163214][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.163225][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.163241][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.163252][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.163267][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.163289][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.163305][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.163316][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.164318][T13409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 584.174574][T13409] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.174612][T13409] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.174633][T13409] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.174653][T13409] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.250295][T13409] ieee80211 phy44: Selected rate control algorithm 'minstrel_ht' [ 584.285356][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.285382][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.289176][T13409] ieee80211 phy45: Selected rate control algorithm 'minstrel_ht' [ 584.306324][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.306347][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.917356][T13454] netlink: 'syz.8.2244': attribute type 32 has an invalid length. [ 584.917383][T13454] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2244'. [ 585.350764][ T66] syzkaller0: tun_net_xmit 76 [ 585.351426][ T66] syzkaller0: tun_net_xmit 48 [ 585.367561][T13457] syzkaller0: create flow: hash 823737638 index 1 [ 585.375985][T13456] syzkaller0: delete flow: hash 823737638 index 1 [ 586.246255][T13460] Bluetooth: hci19: command tx timeout [ 586.299926][ T8] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 586.409180][ T30] INFO: task kworker/0:3:5828 blocked for more than 143 seconds. [ 586.409214][ T30] Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 586.409225][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 586.409234][ T30] task:kworker/0:3 state:D stack:21488 pid:5828 tgid:5828 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 586.409293][ T30] Workqueue: events vc_SAK [ 586.409330][ T30] Call Trace: [ 586.409337][ T30] [ 586.409347][ T30] __schedule+0xf43/0x5890 [ 586.409397][ T30] ? __pfx___schedule+0x10/0x10 [ 586.409425][ T30] ? __pfx___schedule+0x10/0x10 [ 586.409449][ T30] ? lock_release+0x4e2/0x6f0 [ 586.409474][ T30] ? schedule+0x298/0x350 [ 586.409498][ T30] ? __pfx_lock_release+0x10/0x10 [ 586.409522][ T30] schedule+0xe7/0x350 [ 586.409543][ T30] schedule_preempt_disabled+0x13/0x30 [ 586.409563][ T30] __mutex_lock+0x6bd/0xb10 [ 586.409578][ T30] ? tty_buffer_flush+0x72/0x310 [ 586.409595][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 586.409608][ T30] ? rcu_is_watching+0x12/0xc0 [ 586.409626][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 586.409645][ T30] ? tty_ldisc_flush+0x1c/0xe0 [ 586.409670][ T30] ? tty_buffer_flush+0x72/0x310 [ 586.409684][ T30] tty_buffer_flush+0x72/0x310 [ 586.409703][ T30] tty_ldisc_flush+0x64/0xe0 [ 586.409730][ T30] __do_SAK+0x6a7/0x800 [ 586.409749][ T30] ? lock_acquire+0x2f/0xb0 [ 586.409770][ T30] ? vc_SAK+0x13/0x310 [ 586.409794][ T30] vc_SAK+0x7f/0x310 [ 586.409818][ T30] process_one_work+0x9c5/0x1ba0 [ 586.410015][ T30] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 586.410067][ T30] ? __pfx_process_one_work+0x10/0x10 [ 586.410093][ T30] ? assign_work+0x1a0/0x250 [ 586.410116][ T30] worker_thread+0x6c8/0xf00 [ 586.410147][ T30] ? __kthread_parkme+0x148/0x220 [ 586.410167][ T30] ? __pfx_worker_thread+0x10/0x10 [ 586.410190][ T30] kthread+0x3af/0x750 [ 586.410210][ T30] ? __pfx_kthread+0x10/0x10 [ 586.410247][ T30] ? lock_acquire+0x2f/0xb0 [ 586.410270][ T30] ? __pfx_kthread+0x10/0x10 [ 586.410291][ T30] ret_from_fork+0x45/0x80 [ 586.410318][ T30] ? __pfx_kthread+0x10/0x10 [ 586.410337][ T30] ret_from_fork_asm+0x1a/0x30 [ 586.410364][ T30] [ 586.410391][ T30] INFO: task kworker/0:5:5872 blocked for more than 143 seconds. [ 586.410403][ T30] Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 586.410412][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 586.410420][ T30] task:kworker/0:5 state:D stack:21408 pid:5872 tgid:5872 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 586.410467][ T30] Workqueue: events console_callback [ 586.410488][ T30] Call Trace: [ 586.410494][ T30] [ 586.410501][ T30] __schedule+0xf43/0x5890 [ 586.410525][ T30] ? __pfx_mark_lock+0x10/0x10 [ 586.410547][ T30] ? mark_lock+0xb5/0xc60 [ 586.410569][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 586.410592][ T30] ? find_held_lock+0x2d/0x110 [ 586.410611][ T30] ? __pfx___schedule+0x10/0x10 [ 586.410636][ T30] ? schedule+0x298/0x350 [ 586.410657][ T30] ? __pfx_lock_release+0x10/0x10 [ 586.410678][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 586.410700][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 586.410726][ T30] schedule+0xe7/0x350 [ 586.410746][ T30] schedule_timeout+0x244/0x280 [ 586.410767][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 586.410791][ T30] ? mark_held_locks+0x9f/0xe0 [ 586.410813][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 586.410838][ T30] ___down_common+0x2d7/0x460 [ 586.410858][ T30] ? __pfx____down_common+0x10/0x10 [ 586.410877][ T30] ? lock_acquire+0x2f/0xb0 [ 586.410898][ T30] ? rcu_is_watching+0x12/0xc0 [ 586.410917][ T30] __down+0x20/0x30 [ 586.410934][ T30] down+0x74/0xa0 [ 586.410950][ T30] console_lock+0x5b/0xa0 [ 586.410978][ T30] console_callback+0x63/0x4c0 [ 586.410999][ T30] ? __pfx_console_callback+0x10/0x10 [ 586.411018][ T30] ? lock_acquire+0x2f/0xb0 [ 586.411040][ T30] ? process_one_work+0x921/0x1ba0 [ 586.411064][ T30] process_one_work+0x9c5/0x1ba0 [ 586.411088][ T30] ? __pfx_console_callback+0x10/0x10 [ 586.411108][ T30] ? __pfx_process_one_work+0x10/0x10 [ 586.411138][ T30] ? assign_work+0x1a0/0x250 [ 586.411159][ T30] worker_thread+0x6c8/0xf00 [ 586.411183][ T30] ? __kthread_parkme+0x148/0x220 [ 586.411199][ T30] ? __pfx_worker_thread+0x10/0x10 [ 586.411220][ T30] kthread+0x3af/0x750 [ 586.411239][ T30] ? __pfx_kthread+0x10/0x10 [ 586.411257][ T30] ? lock_acquire+0x2f/0xb0 [ 586.411281][ T30] ? __pfx_kthread+0x10/0x10 [ 586.411301][ T30] ret_from_fork+0x45/0x80 [ 586.411323][ T30] ? __pfx_kthread+0x10/0x10 [ 586.411342][ T30] ret_from_fork_asm+0x1a/0x30 [ 586.411365][ T30] [ 586.411383][ T30] INFO: task kworker/u8:11:7186 blocked for more than 143 seconds. [ 586.411394][ T30] Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 586.411402][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 586.411409][ T30] task:kworker/u8:11 state:D stack:24112 pid:7186 tgid:7186 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 586.411461][ T30] Workqueue: events_unbound flush_to_ldisc [ 586.411480][ T30] Call Trace: [ 586.411486][ T30] [ 586.411495][ T30] __schedule+0xf43/0x5890 [ 586.411518][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 586.411540][ T30] ? mark_lock+0xb5/0xc60 [ 586.411561][ T30] ? psi_task_change+0x1a2/0x2d0 [ 586.411586][ T30] ? __pfx___schedule+0x10/0x10 [ 586.411610][ T30] ? schedule+0x298/0x350 [ 586.411633][ T30] ? __pfx_lock_release+0x10/0x10 [ 586.411656][ T30] ? lock_acquire+0x2f/0xb0 [ 586.411678][ T30] ? schedule+0x1fd/0x350 [ 586.411702][ T30] schedule+0xe7/0x350 [ 586.411726][ T30] schedule_timeout+0x244/0x280 [ 586.411747][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 586.411771][ T30] ? mark_held_locks+0x9f/0xe0 [ 586.411794][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 586.411818][ T30] ___down_common+0x2d7/0x460 [ 586.411837][ T30] ? __pfx____down_common+0x10/0x10 [ 586.411856][ T30] ? lock_acquire+0x2f/0xb0 [ 586.411878][ T30] ? rcu_is_watching+0x12/0xc0 [ 586.411894][ T30] __down+0x20/0x30 [ 586.411909][ T30] down+0x74/0xa0 [ 586.411923][ T30] console_lock+0x5b/0xa0 [ 586.411945][ T30] do_con_write+0x154/0x7bb0 [ 586.411967][ T30] ? __pfx_do_con_write+0x10/0x10 [ 586.411983][ T30] ? __pfx___mutex_trylock_common+0x10/0x10 [ 586.412004][ T30] ? n_tty_receive_buf_common+0x9e3/0x1980 [ 586.412027][ T30] ? __pfx_con_put_char+0x10/0x10 [ 586.412041][ T30] con_put_char+0x74/0xa0 [ 586.412057][ T30] ? __pfx_con_put_char+0x10/0x10 [ 586.412073][ T30] ? __mutex_lock+0x15a/0xb10 [ 586.412086][ T30] ? n_tty_receive_char+0x1b9/0x600 [ 586.412104][ T30] tty_put_char+0xbc/0x160 [ 586.412134][ T30] ? __pfx_tty_put_char+0x10/0x10 [ 586.412153][ T30] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 586.412179][ T30] __process_echoes+0x80a/0xb40 [ 586.412199][ T30] n_tty_receive_buf_common+0xa2a/0x1980 [ 586.412219][ T30] ? lock_acquire+0x2f/0xb0 [ 586.412239][ T30] ? __pfx_n_tty_receive_buf2+0x10/0x10 [ 586.412258][ T30] tty_ldisc_receive_buf+0xa2/0x190 [ 586.412273][ T30] tty_port_default_receive_buf+0x70/0xb0 [ 586.412290][ T30] flush_to_ldisc+0x264/0x780 [ 586.412306][ T30] ? lock_acquire+0x2f/0xb0 [ 586.412324][ T30] ? process_one_work+0x921/0x1ba0 [ 586.412344][ T30] process_one_work+0x9c5/0x1ba0 [ 586.412367][ T30] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 586.412386][ T30] ? __pfx_process_one_work+0x10/0x10 [ 586.412406][ T30] ? assign_work+0x1a0/0x250 [ 586.412423][ T30] worker_thread+0x6c8/0xf00 [ 586.412445][ T30] ? __kthread_parkme+0x148/0x220 [ 586.412462][ T30] ? __pfx_worker_thread+0x10/0x10 [ 586.412483][ T30] kthread+0x3af/0x750 [ 586.412503][ T30] ? __pfx_kthread+0x10/0x10 [ 586.412520][ T30] ? lock_acquire+0x2f/0xb0 [ 586.412543][ T30] ? __pfx_kthread+0x10/0x10 [ 586.412562][ T30] ret_from_fork+0x45/0x80 [ 586.412585][ T30] ? __pfx_kthread+0x10/0x10 [ 586.412603][ T30] ret_from_fork_asm+0x1a/0x30 [ 586.412625][ T30] [ 586.412754][ T30] INFO: lockdep is turned off. [ 586.412785][ T30] NMI backtrace for cpu 1 [ 586.412796][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 586.412814][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 586.412825][ T30] Call Trace: [ 586.412831][ T30] [ 586.412838][ T30] dump_stack_lvl+0x116/0x1f0 [ 586.412858][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 586.412880][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 586.412905][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 586.412928][ T30] watchdog+0xf62/0x12b0 [ 586.412955][ T30] ? __pfx_watchdog+0x10/0x10 [ 586.412977][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 586.413003][ T30] ? __kthread_parkme+0x148/0x220 [ 586.413020][ T30] ? __pfx_watchdog+0x10/0x10 [ 586.413043][ T30] kthread+0x3af/0x750 [ 586.413059][ T30] ? __pfx_kthread+0x10/0x10 [ 586.413077][ T30] ? __pfx_kthread+0x10/0x10 [ 586.413093][ T30] ret_from_fork+0x45/0x80 [ 586.413111][ T30] ? __pfx_kthread+0x10/0x10 [ 586.413135][ T30] ret_from_fork_asm+0x1a/0x30 [ 586.413155][ T30] [ 586.413161][ T30] Sending NMI from CPU 1 to CPUs 0: [ 586.413211][ C0] NMI backtrace for cpu 0 [ 586.413223][ C0] CPU: 0 UID: 0 PID: 3577 Comm: kworker/u8:8 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 586.413239][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 586.413247][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 586.413269][ C0] RIP: 0010:fib6_walk_continue+0x109/0x8d0 [ 586.413292][ C0] Code: 7c 25 00 e8 59 8e b3 f7 41 0f b6 07 84 c0 74 08 3c 03 0f 8e 0d 06 00 00 8b 7d 28 48 c7 c6 00 1c af 8c 49 89 fe e8 97 89 b3 f7 <41> 83 fe 02 0f 84 a8 01 00 00 0f 87 86 00 00 00 45 85 f6 0f 84 01 [ 586.413307][ C0] RSP: 0018:ffffc9000d877858 EFLAGS: 00000246 [ 586.413319][ C0] RAX: 0000000000000000 RBX: ffff88809503af00 RCX: ffffffff8a062069 [ 586.413328][ C0] RDX: ffff888032ae8000 RSI: 0000000000000004 RDI: 0000000000000005 [ 586.413337][ C0] RBP: ffffc9000d877928 R08: 0000000000000005 R09: 0000000000000004 [ 586.413345][ C0] R10: 0000000000000002 R11: 0000000000002ba2 R12: dffffc0000000000 [ 586.413355][ C0] R13: 1ffff92001b0ef2a R14: 0000000000000002 R15: fffff52001b0ef2a [ 586.413364][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 586.413379][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 586.413388][ C0] CR2: 00007fec18799fe0 CR3: 00000000a3f58000 CR4: 00000000003526f0 [ 586.413397][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 586.413405][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 586.413414][ C0] Call Trace: [ 586.413419][ C0] [ 586.413424][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 586.413442][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 586.413458][ C0] ? nmi_handle+0x1ac/0x5d0 [ 586.413479][ C0] ? fib6_walk_continue+0x109/0x8d0 [ 586.413495][ C0] ? default_do_nmi+0x6a/0x160 [ 586.413511][ C0] ? exc_nmi+0x170/0x1e0 [ 586.413526][ C0] ? end_repeat_nmi+0xf/0x53 [ 586.413551][ C0] ? fib6_walk_continue+0x109/0x8d0 [ 586.413567][ C0] ? fib6_walk_continue+0x109/0x8d0 [ 586.413582][ C0] ? fib6_walk_continue+0x109/0x8d0 [ 586.413597][ C0] ? fib6_walk_continue+0x109/0x8d0 [ 586.413612][ C0] [ 586.413616][ C0] [ 586.413622][ C0] fib6_walk+0x182/0x370 [ 586.413639][ C0] fib6_clean_tree+0xd7/0x120 [ 586.413655][ C0] ? __pfx_fib6_clean_tree+0x10/0x10 [ 586.413670][ C0] ? rcu_is_watching+0x12/0xc0 [ 586.413684][ C0] ? __pfx_fib6_clean_node+0x10/0x10 [ 586.413702][ C0] ? lock_acquire+0x2f/0xb0 [ 586.413718][ C0] ? __fib6_clean_all+0xe5/0x2d0 [ 586.413734][ C0] __fib6_clean_all+0x100/0x2d0 [ 586.413751][ C0] ? __pfx_fib6_flush_trees+0x10/0x10 [ 586.413768][ C0] addrconf_dad_completed+0x8a5/0x1060 [ 586.413781][ C0] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 586.413802][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 586.413815][ C0] ? rcu_is_watching+0x12/0xc0 [ 586.413828][ C0] ? addrconf_dad_work+0x84e/0x14e0 [ 586.413840][ C0] addrconf_dad_work+0x84e/0x14e0 [ 586.413853][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 586.413866][ C0] ? process_one_work+0x921/0x1ba0 [ 586.413887][ C0] ? lock_acquire+0x2f/0xb0 [ 586.413902][ C0] ? process_one_work+0x921/0x1ba0 [ 586.413918][ C0] process_one_work+0x9c5/0x1ba0 [ 586.413936][ C0] ? __pfx_batadv_dat_purge+0x10/0x10 [ 586.413954][ C0] ? __pfx_process_one_work+0x10/0x10 [ 586.413971][ C0] ? assign_work+0x1a0/0x250 [ 586.413986][ C0] worker_thread+0x6c8/0xf00 [ 586.414004][ C0] ? __pfx_worker_thread+0x10/0x10 [ 586.414020][ C0] kthread+0x3af/0x750 [ 586.414034][ C0] ? __pfx_kthread+0x10/0x10 [ 586.414047][ C0] ? lock_acquire+0x2f/0xb0 [ 586.414064][ C0] ? __pfx_kthread+0x10/0x10 [ 586.414078][ C0] ret_from_fork+0x45/0x80 [ 586.414093][ C0] ? __pfx_kthread+0x10/0x10 [ 586.414107][ C0] ret_from_fork_asm+0x1a/0x30 [ 586.414123][ C0] [ 586.414188][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 586.414197][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 586.414213][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 586.414221][ T30] Call Trace: [ 586.414226][ T30] [ 586.414231][ T30] dump_stack_lvl+0x3d/0x1f0 [ 586.414248][ T30] panic+0x71d/0x800 [ 586.414267][ T30] ? __pfx_panic+0x10/0x10 [ 586.414283][ T30] ? __pfx__printk+0x10/0x10 [ 586.414305][ T30] ? ret_from_fork_asm+0x1a/0x30 [ 586.414323][ T30] ? irq_work_claim+0x76/0xa0 [ 586.414348][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 586.414369][ T30] ? irq_work_queue+0x2a/0x80 [ 586.414390][ T30] ? watchdog+0xdcc/0x12b0 [ 586.414413][ T30] ? watchdog+0xdbf/0x12b0 [ 586.414436][ T30] watchdog+0xddd/0x12b0 [ 586.414458][ T30] ? __pfx_watchdog+0x10/0x10 [ 586.414479][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 586.414503][ T30] ? __kthread_parkme+0x148/0x220 [ 586.414519][ T30] ? __pfx_watchdog+0x10/0x10 [ 586.414543][ T30] kthread+0x3af/0x750 [ 586.414561][ T30] ? __pfx_kthread+0x10/0x10 [ 586.414581][ T30] ? __pfx_kthread+0x10/0x10 [ 586.414599][ T30] ret_from_fork+0x45/0x80 [ 586.414620][ T30] ? __pfx_kthread+0x10/0x10 [ 586.414639][ T30] ret_from_fork_asm+0x1a/0x30 [ 586.414660][ T30] [ 586.414942][ T30] Kernel Offset: disabled