last executing test programs: 7m9.544538714s ago: executing program 4 (id=149): socket$netlink(0x10, 0x3, 0x0) r0 = accept$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000380)=0x1c) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = openat$cuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ppoll(&(0x7f0000000100)=[{r1, 0x40}], 0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$bt_hci(r3, 0x0, 0x1, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x14) poll(0x0, 0x0, 0x6) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x143022, 0x490e819ad9fe192f) syz_extract_tcp_res$synack(&(0x7f0000000180), 0x1, 0x0) open(0x0, 0xec902, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfecc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) 7m9.111665763s ago: executing program 4 (id=150): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x7a, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af9cc9e5ef6bda9df2c3af36effff9af2551ce935b0f327cb3f011a2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7511d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1525320e716660000000000b02b001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d3294000000000000000000000000000000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10738d3c9f7a98eccb26f7e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe977076ce7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d1a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1c77a211bfa02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc084075ad10727522934a87a4ddcdb112754ca5bdec0ead14b6c0f19a4b126bbe0c2b8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcb1a47a87baf63e4edf11c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c158ae8f44bfbfa7c2730302b66a99f66705b71e6205e7cbf36435e1eabb9a63fcd604d5cc27e1317ad94cf438d7187a2fe4e06fa6cbf84ef1efa82cb2c4af6bd1370616cdbe2b98fd89b79824ba089df1f81e6fcef073059f5f1d6a221d791839d7826ed1759c2153532c393fd1bd7be2e7f5abf2f0800000000ea46c07adee10d0f2bc85cf37182256e4fd8"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x1000000}, 0xffffffffffffffa5) r2 = epoll_create1(0x0) r3 = socket(0x1, 0x80802, 0x0) r4 = epoll_create1(0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x0, 0x2d, 0x0, 0x0, 0x7ff, 0x10000, @value}, 0x28) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e21, 0x2000, @ipv4={'\x00', '\xff\xff', @remote}, 0xffffffff}, 0x1c) sendmmsg$inet6(r9, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x4000300) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000200)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0xf8}}, 0x21) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r4, &(0x7f0000000180)=[{}], 0x1, 0x80000000, 0x0, 0x0) close(r4) shutdown(r3, 0x0) close(r2) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) 7m8.170100054s ago: executing program 4 (id=154): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x63, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sysinfo(&(0x7f0000000380)=""/95) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x8208204) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) ftruncate(r3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0) poll(&(0x7f0000000100)=[{r3, 0x2408}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x10}, {r1, 0xa022}, {r2, 0x5002}], 0x5, 0xca) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x3) 7m5.675976288s ago: executing program 4 (id=161): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4040880}, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000400)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r5, 0x89eb, &(0x7f0000000180)={0xba, 0x2, 0x1, 0x8, 0x7, 0x1d, 0x0, "5522e81100f5729bc4bddef05ac88ff041f2032e", "334c49ac166ddafd2fa007752d808ca5b8fc6a88"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000000)=0x4000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0)='jfs\x00', 0x0, &(0x7f0000000340)) stat(&(0x7f0000000040)='./file0\x00', 0x0) 7m3.336698905s ago: executing program 4 (id=167): r0 = creat(&(0x7f0000000800)='./file0\x00', 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x200000020000007d, 0x202001) dup2(0xffffffffffffffff, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) io_setup(0x2004, &(0x7f0000000680)) ioctl$PPPIOCGIDLE32(r0, 0x8008743f, &(0x7f0000000000)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff61a4f0ff000000002d040000000000003d400300000000006504000001ed000079130000000000006c440000000000007a0ab0fe000000007b13000000000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af05000000f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a715bc5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128c4e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e655400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d0800af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d390dd65be2467b373eafd9aa58f2077184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c5da18ec0ae564162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b93d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6ffc3a15d96c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7fe7cd86975023cb08cc7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c5538a294270a1ad10c80fef7c24c87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead35a655e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f05beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba5823a34a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d0a874c74b777df005c55fc30511d00000000c85265b2bd83d64a532869d708000000000000007baa5b6a682b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a56edbd287eba77f35c35d91f3c62a0ca74836a640224de85f2b4a5fee500bbc584328a6a7a4628c4378c9b71dff64075b74a6520adb187b40d2cccbcb08c0634ee74658d3e23bf511c8b0bf1b69d2b3782b3f481c314e7bd4615dbbf24c06ac95bd639e68d0e6aa7f0d07bf69a93365f803f0144af37236ea133c2255b0613bf8ba1d538e06c2411e8d70053b712084fd0e313de9bb19266e49a3a2190cb039c6f89610acd896319b9c8d1b8aac2eaa5a4f8be7419a09e3fb5be3be2fcdadd2299839cc40e684e6e2b4e1385fde7a0babcb0be672110268a34dad364fddee69e564119cebb6940c6356ff83ca527c573d700000000000000c6299263e6d9097f225de969485bce3d7dc471c0669bb6a467cf0de54dfcc1857048fe22a19dbb1b3cb9babaa839f1f6e817a62d95a5b971ff96a5c66c338c6f2a2da4644519f40761402e9c81013d76c7152c95ba5efa24ce1930f23a2277f057ffb6b0144f3b434a2adc456ef4d2fbdf7c6238c2bb00ffcf2d23d68cb9b027f3b225ec4e09b089f7956b66c5692b46ea03abb6a404c8ccceaa4ba4161409fcb54b86eaca26b2a0c4b81f7b71cbfcef"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='rxrpc_rx_packet\x00', r6, 0x0, 0x401}, 0x18) socket$can_j1939(0x1d, 0x2, 0x7) mount$tmpfs(0x0, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0), 0x1000080, &(0x7f0000000bc0)) 7m0.632547313s ago: executing program 4 (id=171): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x24000, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0x1, 0x1, 0x0, "adbdeec74e9e4aea00000000000000a902552f08cefca462dda36c7451f8e500"}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) listen(r0, 0xfff) syz_emit_ethernet(0x202, &(0x7f00000007c0)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x2, 0x6, "417d92", 0x1cc, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {[@srh={0x0, 0x6, 0x4, 0x3, 0x5, 0x40, 0x8, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2]}, @routing={0x87, 0x8, 0x0, 0x6, 0x0, [@loopback, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}]}, @fragment={0x5e, 0x0, 0x6, 0x1, 0x0, 0x3, 0x64}, @dstopts={0x2c, 0x13, '\x00', [@calipso={0x7, 0x28, {0x2, 0x8, 0x1, 0x2, [0x8, 0x4, 0x6, 0x9]}}, @enc_lim={0x4, 0x1, 0x7}, @generic={0x10, 0x55, "b729ff644103520616946835d87a8c1440133c93f079bd1e6870e57fbdee3391825c74a56433004eb8d002f9393a5210dedf28e72c1f424517f02007732c298b4adbb63636eda92a82d89534670d05e2d85f18afd6"}, @hao={0xc9, 0x10, @private1}, @ra={0x5, 0x2, 0x1ff}]}], {0x4e23, 0x4e21, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "452eab83824a2da4083231acd49d78ba5e21e98a132b57bd2cf56e9175c9141a", "6e897fe4b2aeaa80b8bd9358cf8190dd2cd02b4f0fc2f12a5c1eed23f0e1a2ed362cb3642904f376c1a590637e6f9955", "d18c83957930b9df2eb128a74710cc395510fcb5b2c95943d3127cb1", {"45c564ea8416ccf7834c76f90fc4177e", "b495e6add898d8ddb35e94b6cbf1782a"}}}}}}}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) 6m44.440757309s ago: executing program 32 (id=171): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x24000, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0x1, 0x1, 0x0, "adbdeec74e9e4aea00000000000000a902552f08cefca462dda36c7451f8e500"}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) listen(r0, 0xfff) syz_emit_ethernet(0x202, &(0x7f00000007c0)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x2, 0x6, "417d92", 0x1cc, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {[@srh={0x0, 0x6, 0x4, 0x3, 0x5, 0x40, 0x8, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2]}, @routing={0x87, 0x8, 0x0, 0x6, 0x0, [@loopback, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}]}, @fragment={0x5e, 0x0, 0x6, 0x1, 0x0, 0x3, 0x64}, @dstopts={0x2c, 0x13, '\x00', [@calipso={0x7, 0x28, {0x2, 0x8, 0x1, 0x2, [0x8, 0x4, 0x6, 0x9]}}, @enc_lim={0x4, 0x1, 0x7}, @generic={0x10, 0x55, "b729ff644103520616946835d87a8c1440133c93f079bd1e6870e57fbdee3391825c74a56433004eb8d002f9393a5210dedf28e72c1f424517f02007732c298b4adbb63636eda92a82d89534670d05e2d85f18afd6"}, @hao={0xc9, 0x10, @private1}, @ra={0x5, 0x2, 0x1ff}]}], {0x4e23, 0x4e21, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "452eab83824a2da4083231acd49d78ba5e21e98a132b57bd2cf56e9175c9141a", "6e897fe4b2aeaa80b8bd9358cf8190dd2cd02b4f0fc2f12a5c1eed23f0e1a2ed362cb3642904f376c1a590637e6f9955", "d18c83957930b9df2eb128a74710cc395510fcb5b2c95943d3127cb1", {"45c564ea8416ccf7834c76f90fc4177e", "b495e6add898d8ddb35e94b6cbf1782a"}}}}}}}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) 6m1.59592842s ago: executing program 5 (id=351): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000000)={0x0, 0x4002, &(0x7f0000000080)={&(0x7f0000000100)={0x34, r3, 0x1, 0xff1f0000, 0x0, {0x2}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}}, 0x0) 6m1.027312198s ago: executing program 5 (id=353): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x0, 0x20}, 0xc) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x30400}], 0x1}, 0x0) sendmmsg$sock(r0, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000800)="b4", 0x1}], 0x1}}], 0x1, 0x40080) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) userfaultfd(0x80001) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000240)=""/39, 0x27}, {&(0x7f0000000480)=""/182, 0xb6}, {&(0x7f0000000540)=""/75, 0x4b}, {&(0x7f0000000340)=""/28, 0x1c}, {&(0x7f0000000e00)=""/121, 0x79}, {0x0}], 0x6, &(0x7f00000006c0)=""/213, 0xd5}}, {{&(0x7f00000007c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000840)=""/8, 0x8}, {&(0x7f0000000880)=""/78, 0x4e}], 0x2, &(0x7f0000000a40)=""/186, 0xba}}, {{&(0x7f0000000940)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000b00)=""/39, 0x27}, {&(0x7f0000000b40)=""/158, 0x9e}], 0x2, &(0x7f0000000c40)=""/156, 0x9c}}], 0x4, 0x10002, 0x0) recvfrom$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 6m0.435769939s ago: executing program 5 (id=357): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x1, 0x70, 0x20000}, 0x20) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 6m0.110121908s ago: executing program 5 (id=359): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f00000000c0)=0x20003, 0x23) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) connect$inet(r0, &(0x7f0000000800)={0x2, 0x240, @local}, 0x10) 5m58.975365007s ago: executing program 5 (id=362): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file1\x00', 0x108c0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x88fb, @icmp={{0x5, 0x4, 0x0, 0x20, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @info_reply={0x10, 0x0, 0x0, 0x1843, 0x6}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 5m58.910579835s ago: executing program 5 (id=363): r0 = syz_open_dev$video4linux(&(0x7f0000000180), 0x7ffffffd, 0x2400) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000004c0)={0x0, 0x0, {0x7f, 0x10, 0x101b, 0x7, 0xe, 0x3, 0x0, 0x7}}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) shutdown(r1, 0x0) sendfile(r1, r2, 0x0, 0xdc) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x2, 0x0, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x4, 0x74, &(0x7f0000000600)=""/116, 0x41100, 0x1, '\x00', 0x0, @fallback, r2, 0x8, &(0x7f0000000680)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105842, 0x0) epoll_create1(0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="000000f0ffffff0000000000890010", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRES64=r3, @ANYBLOB=',\x00']) getsockopt$IP_VS_SO_GET_INFO(r6, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) mknodat$null(r2, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r7, {0xee01, 0xee01}}, './file0\x00'}) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000501, r8, &(0x7f0000000040)) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', &(0x7f0000000340), 0x1000000, &(0x7f0000001100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c679bd6090020009e0e", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 5m43.581027163s ago: executing program 33 (id=363): r0 = syz_open_dev$video4linux(&(0x7f0000000180), 0x7ffffffd, 0x2400) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000004c0)={0x0, 0x0, {0x7f, 0x10, 0x101b, 0x7, 0xe, 0x3, 0x0, 0x7}}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) shutdown(r1, 0x0) sendfile(r1, r2, 0x0, 0xdc) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x2, 0x0, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x4, 0x74, &(0x7f0000000600)=""/116, 0x41100, 0x1, '\x00', 0x0, @fallback, r2, 0x8, &(0x7f0000000680)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105842, 0x0) epoll_create1(0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="000000f0ffffff0000000000890010", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRES64=r3, @ANYBLOB=',\x00']) getsockopt$IP_VS_SO_GET_INFO(r6, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) mknodat$null(r2, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r7, {0xee01, 0xee01}}, './file0\x00'}) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000501, r8, &(0x7f0000000040)) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', &(0x7f0000000340), 0x1000000, &(0x7f0000001100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c679bd6090020009e0e", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 1m53.378461401s ago: executing program 2 (id=1257): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') sendto$unix(r0, &(0x7f0000000040)="3f994e58d0e47831219b8e88e1915c76a12b99db0447ff9ca0191b82bd070cd6", 0x20, 0x8000, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r1, 0x1}, 0x8) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='pagemap\x00') r3 = accept$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @broadcast}}, &(0x7f0000000240)=0x1c) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r2, 0x3b71, &(0x7f0000000300)={0x20, 0x3, &(0x7f0000000280)="a16a3c840d3d5a583226e703f70ea926a6ffe54f2e688efb9fbe3cde7c232a66745768e43ab307c0ebb4762f39ca8d03faa204d7fdf9f0fbe15c872051db3d94d61cb6e94b1ec4f5420e6d7b1bf122fce616e47c371db46f5eb66db90644cc8cc9ddd832b9db87942f12d03e175b69994b741882", 0x4, 0x7}) (async, rerun: 32) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000340)=0xa, 0x4) (async, rerun: 32) getdents(r2, &(0x7f0000000380)=""/8, 0x8) (async) socket$kcm(0x29, 0x2, 0x0) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000003c0)={r1, @in6={{0xa, 0x4e24, 0xa, @remote, 0xffffffff}}, 0x2f0b79e0, 0x1, 0x0, 0xd7, 0x4f, 0x9, 0x4}, 0x9c) mknod$loop(&(0x7f0000000480)='./file0\x00', 0x4, 0x0) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000004c0)={r1, 0x9}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000540)={r4, @in={{0x2, 0x4e24, @loopback}}, 0x7, 0x1, 0x4, 0x10, 0x30, 0x1, 0xb}, &(0x7f0000000600)=0x9c) (async, rerun: 64) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x10}, 0xc) (rerun: 64) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000016c0)={r5, &(0x7f0000000680)="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", &(0x7f0000001680)=""/4, 0x4}, 0x20) (async, rerun: 32) getsockopt$bt_hci(r2, 0x0, 0x1, &(0x7f0000001700)=""/4096, &(0x7f0000002700)=0x1000) (rerun: 32) prctl$PR_SET_THP_DISABLE(0x29, 0x1) r6 = openat$cgroup_pressure(r0, &(0x7f0000002740)='memory.pressure\x00', 0x2, 0x0) fcntl$getownex(r6, 0x10, &(0x7f0000002780)) (async) r7 = open(&(0x7f00000027c0)='./file0\x00', 0x280000, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r7, 0x8008f513, &(0x7f0000002800)) (async) r8 = syz_open_dev$vivid(&(0x7f0000002840), 0x1, 0x2) ioctl$VIDIOC_G_SELECTION(r8, 0xc040565e, &(0x7f0000002880)={0xb, 0x102, 0x0, {0xd, 0x5, 0x20, 0xb9f2}}) (async, rerun: 64) r9 = add_key$user(&(0x7f00000028c0), &(0x7f0000002900)={'syz', 0x2}, &(0x7f0000002940)="826f40cb1922a72b7091f3394b5b2cde1e24ef33032bac973e81b086a4cae28f8119eed02372b3e4a7f111fd254d3e9a8502fc7e59a01da0c0b4bc18301f667f9ab535bd143f741e5d", 0x49, 0xfffffffffffffffc) (async, rerun: 64) r10 = add_key$user(&(0x7f00000029c0), &(0x7f0000002a00)={'syz', 0x0}, &(0x7f0000002a40)="a75a0602ef077b1705bbc60d5b571a99efa0a6c26f3e0e5530fc4804f5c3b3979b656c921d41865d1accedc0e9c51b339eb7fd04a6a64019", 0x38, 0x0) (async) r11 = add_key$user(&(0x7f0000002a80), &(0x7f0000002ac0)={'syz', 0x0}, &(0x7f0000002b00)="e43e4d003d49cbc5888b1e20ec6dd3160888aa73cfd16f119400254ece16d40dbbc83b5d8f9bd6663310b90d229c8cc12f65d75683203564e4a5f65db9b818558bc28a69cc27a9cbd95dfe6b151e5c352e", 0x51, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000002b80)={r9, r10, r11}, &(0x7f0000002bc0)=""/4096, 0x1000, &(0x7f0000003c00)={&(0x7f0000003bc0)={'blake2s-160-arm\x00'}}) ioctl$sock_inet_SIOCSIFPFLAGS(r7, 0x8934, &(0x7f0000003c40)={'vxcan1\x00'}) 1m52.402259399s ago: executing program 2 (id=1262): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000040)={0x0, 0x134587ed}) r1 = add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)={0x1, 0x0, @a}, 0x48, 0xfffffffffffffffd) keyctl$describe(0x6, r1, &(0x7f0000000180)=""/104, 0x68) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000240)=0x1c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000300)=@nat={'nat\x00', 0x1b, 0x5, 0x640, 0x120, 0x0, 0xffffffff, 0x210, 0x348, 0x570, 0x570, 0xffffffff, 0x570, 0x570, 0x5, &(0x7f0000000280), {[{{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}, {0xff, 0xe, 0x4, 0x4, 0x5d63, 0x2, 0x1}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x12, @ipv6=@mcast2, @ipv6=@rand_addr=' \x01\x00', @icmp_id=0x67, @icmp_id=0x66}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x2, @ipv4=@multicast1, @ipv4=@loopback, @icmp_id=0x68, @gre_key}}}, {{@ipv6={@remote, @private2, [0xff0000ff, 0xff000000, 0xff24a5b45b478ffb, 0xff], [0xff, 0xffffffff], 'xfrm0\x00', 'wg2\x00', {}, {}, 0x16, 0x5, 0x3, 0x25}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x75, 0xaf83c9322e88b4e3, 0x1, [0x0, 0x1, 0x0, 0x7, 0xc, 0x8000, 0x7, 0x6, 0x7f, 0x5, 0x8, 0x2, 0x3f, 0x0, 0x8, 0x3d4d], 0x2}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x19, @ipv6=@dev={0xfe, 0x80, '\x00', 0x28}, @ipv6=@mcast2, @icmp_id=0x64, @port=0x4e22}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x1, [0x4, 0x33], 0x3, 0x20, 0x4, [@loopback, @empty, @dev={0xfe, 0x80, '\x00', 0x20}, @remote, @local, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @mcast2, @local, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @remote, @mcast1, @ipv4={'\x00', '\xff\xff', @remote}, @remote], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@loopback, @ipv4=@local, @icmp_id=0x65, @port=0x4e21}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{0x1, 0xffffffffffffffff}, &(0x7f0000000a00), &(0x7f0000000a40)}, 0x20) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000c80)=0xffffffffffffffff, 0x4) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d40)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3922, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e00)=@generic={&(0x7f0000000dc0)='./file0\x00'}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000e40)={0x1, 0xffffffffffffffff}, 0x4) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f40)={0x6, 0x18, &(0x7f0000000ac0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9b4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000b80)='syzkaller\x00', 0x4, 0x84, &(0x7f0000000bc0)=""/132, 0x40f00, 0x41, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000cc0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000d00)={0x4, 0x0, 0x5, 0x5}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000e80)=[r6, r7, r8], &(0x7f0000000ec0)=[{0x4, 0x3, 0x6, 0x1}, {0x0, 0x1, 0x9, 0x4}, {0x3, 0x5, 0x5, 0x8}, {0x0, 0x2, 0x0, 0x5}, {0x5, 0x4, 0xb, 0xa}, {0x0, 0x5, 0xa, 0x9}], 0x10, 0x4, @void, @value}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001040)=@generic={&(0x7f0000001000)='.\x00', 0x0, 0x8}, 0x18) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000001080)=r8, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000010c0)=r9, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000001100), 0x404002, 0x0) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r10, 0xc0505350, &(0x7f0000001180)={{0x2}, {0x7f, 0x9}, 0x0, 0x6, 0x2}) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000001200)={0x0, 0x0, 0x0}, &(0x7f0000001240)=0xc) lstat(&(0x7f0000001280)='./file1\x00', &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r11, r12) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000001380)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)=@ipv4_newaddr={0x38, 0x14, 0x100, 0x70bd2c, 0x25dfdbfd, {0x2, 0x1f, 0x14, 0xff, r13}, [@IFA_LOCAL={0x8, 0x2, @empty}, @IFA_ADDRESS={0x8, 0x1, @remote}, @IFA_FLAGS={0x8, 0x8, 0x5}, @IFA_RT_PRIORITY={0x8, 0x9, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x44004) syz_open_dev$vim2m(&(0x7f0000001480), 0x1000, 0x2) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r10, 0x84, 0x1b, &(0x7f00000014c0)={0x0, 0x19, "28f40f3a8be0fe9c2e8ec769349cdae94a6ad629580a8f736b"}, &(0x7f0000001500)=0x21) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r10, 0x84, 0x18, &(0x7f0000001540)={r14, 0x5}, &(0x7f0000001580)=0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000015c0)={'wlan0\x00'}) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0xaea7) 1m51.726354638s ago: executing program 2 (id=1264): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f000002c000/0x2000)=nil, 0x2000, 0x200000b, 0x11, 0xffffffffffffffff, 0x0) r6 = socket(0x28, 0x5, 0x0) listen(0xffffffffffffffff, 0x0) connect$vsock_stream(r6, 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xcd}, @SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x2f}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x5]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8051) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c00078018000180"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) 1m50.619043278s ago: executing program 2 (id=1269): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x7a, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x1000000}, 0xffffffffffffffa5) r2 = epoll_create1(0x0) r3 = socket(0x1, 0x80802, 0x0) r4 = epoll_create1(0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100100000001000000005000000040003000000001105000000010000000000302e00"], 0x0, 0x2d, 0x0, 0x0, 0x7ff, 0x10000, @value}, 0x28) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e21, 0x2000, @ipv4={'\x00', '\xff\xff', @remote}, 0xffffffff}, 0x1c) sendmmsg$inet6(r9, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x4000300) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000200)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0xf8}}, 0x21) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r4, &(0x7f0000000180)=[{}], 0x1, 0x80000000, 0x0, 0x0) close(r4) shutdown(r3, 0x0) close(r2) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) 1m49.419591915s ago: executing program 2 (id=1272): bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="20010000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400000008000d0000000000a2000f00019c"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) 1m47.490673868s ago: executing program 2 (id=1276): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) timer_gettime(0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000340)=@usbdevfs_connect) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000180)=@urb_type_control={0x2, {0x8, 0x1}, 0x9, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x9, 0x4, 0x0}) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r5, 0x701, 0x70bd2b, 0x1000000, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) 1m31.95165045s ago: executing program 34 (id=1276): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) timer_gettime(0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000340)=@usbdevfs_connect) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000180)=@urb_type_control={0x2, {0x8, 0x1}, 0x9, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x9, 0x4, 0x0}) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r5, 0x701, 0x70bd2b, 0x1000000, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) 1m28.773961026s ago: executing program 0 (id=1335): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000100001000000000000000000000000affc5e1d25d90aca897c01dcb4e8571bbafd1df40400000000007e000002000000200004801c0001800a00010006000020000000008008000140000000000900010073797a3000000073797a320000000014000000110001000000000000000000"], 0x74}}, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x30, 0x4, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "29ac6d", 0x0, 0x0, 0x0, @private1, @empty}}}}}}}, 0x0) r2 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580)='X', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000180)={r2, r3, r3}, 0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={'rmd160\x00'}}) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000100001000000000000000000000000affc5e1d25d90aca897c01dcb4e8571bbafd1df40400000000007e000002000000200004801c0001800a00010006000020000000008008000140000000000900010073797a3000000073797a320000000014000000110001000000000000000000"], 0x74}}, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x30, 0x4, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "29ac6d", 0x0, 0x0, 0x0, @private1, @empty}}}}}}}, 0x0) (async) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580)='X', 0x1, 0xfffffffffffffffe) (async) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) (async) keyctl$dh_compute(0x17, &(0x7f0000000180)={r2, r3, r3}, 0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={'rmd160\x00'}}) (async) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, 0x0, 0x0) (async) 1m28.409905097s ago: executing program 0 (id=1336): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000500)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0x0, @private0}}}, 0x108) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000180)={0x2a, 0xffffffff, 0x4001}, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xb, 0x40}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7528e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x7fe4, 0x1, 0x40168, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000140)={0x7, @vbi={0x4, 0x3, 0x9, 0x32344d59, [0x4, 0x40], [0x3, 0x10001], 0x1}}) 1m27.212185499s ago: executing program 0 (id=1340): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x24000, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0x1, 0x1, 0x0, "adbdeec74e9e4aea00000000000000a902552f08cefca462dda36c7451f8e500"}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) listen(r0, 0xfff) syz_emit_ethernet(0x202, &(0x7f00000007c0)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x2, 0x6, "417d92", 0x1cc, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {[@srh={0x0, 0x6, 0x4, 0x3, 0x5, 0x40, 0x8, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2]}, @routing={0x87, 0x8, 0x0, 0x6, 0x0, [@loopback, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}]}, @fragment={0x5e, 0x0, 0x6, 0x1, 0x0, 0x3, 0x64}, @dstopts={0x2c, 0x13, '\x00', [@calipso={0x7, 0x28, {0x2, 0x8, 0x1, 0x2, [0x8, 0x4, 0x6, 0x9]}}, @enc_lim={0x4, 0x1, 0x7}, @generic={0x10, 0x55, "b729ff644103520616946835d87a8c1440133c93f079bd1e6870e57fbdee3391825c74a56433004eb8d002f9393a5210dedf28e72c1f424517f02007732c298b4adbb63636eda92a82d89534670d05e2d85f18afd6"}, @hao={0xc9, 0x10, @private1}, @ra={0x5, 0x2, 0x1ff}]}], {0x4e23, 0x4e21, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "452eab83824a2da4083231acd49d78ba5e21e98a132b57bd2cf56e9175c9141a", "6e897fe4b2aeaa80b8bd9358cf8190dd2cd02b4f0fc2f12a5c1eed23f0e1a2ed362cb3642904f376c1a590637e6f9955", "d18c83957930b9df2eb128a74710cc395510fcb5b2c95943d3127cb1", {"45c564ea8416ccf7834c76f90fc4177e", "b495e6add898d8ddb35e94b6cbf1782a"}}}}}}}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) 1m26.702185923s ago: executing program 0 (id=1341): r0 = syz_create_resource$binfmt(&(0x7f0000000e40)='./file0\x00') r1 = openat$binfmt(0xffffff9c, r0, 0x41, 0x1ff) write$binfmt_script(r1, &(0x7f0000002380)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x100b) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) syz_io_uring_setup(0x237, &(0x7f0000000300)={0x0, 0x200000, 0x10100, 0x3}, 0x0, &(0x7f00000001c0)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x4}, 0x1c) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}, 0x4}}, 0x26) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)={0x20, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf7}]}]}, 0x20}}, 0x0) 1m26.003339017s ago: executing program 0 (id=1344): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m25.57310707s ago: executing program 0 (id=1346): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[], 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r4 = accept4$unix(r2, 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/67, 0x40000}], 0x1}, 0x10122) r5 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0x80045505, 0x0) 1m22.161279444s ago: executing program 1 (id=1351): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x7a, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x1000000}, 0xffffffffffffffa5) r2 = epoll_create1(0x0) r3 = socket(0x1, 0x80802, 0x0) r4 = epoll_create1(0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100100000001000000005000000040003000000001105000000010000000000302e00"], 0x0, 0x2d, 0x0, 0x0, 0x7ff, 0x10000, @value}, 0x28) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e21, 0x2000, @ipv4={'\x00', '\xff\xff', @remote}, 0xffffffff}, 0x1c) sendmmsg$inet6(r9, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x4000300) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000200)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0xf8}}, 0x21) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r4, 0x0, 0x0, 0x80000000, 0x0, 0x0) close(r4) shutdown(r3, 0x0) close(r2) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) 1m21.230510542s ago: executing program 1 (id=1354): getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x71}, &(0x7f00000001c0)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r4) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000480)={0x0, 0xffffffffffffff0f, &(0x7f0000000440)={&(0x7f00000006c0)={0x114, r5, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x114}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000480)={0x0, 0xffffffffffffff0f, &(0x7f0000000440)={&(0x7f00000006c0)={0x114, 0x0, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback={0x200000000000000}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x114}}, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, &(0x7f0000000040), &(0x7f00000079c0)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000540)={r0, 0xee00, 0xee01}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580000000c000780050015e7070000000500010006100000050005000200000005000400000000000900020073797a300000000011000300686173683a69702c706f727400"/88], 0x58}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) get_robust_list(r0, &(0x7f00000004c0)=&(0x7f0000000400)={&(0x7f0000000280), 0x0, &(0x7f00000003c0)={&(0x7f0000000380)}}, &(0x7f0000000500)=0x18) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) 1m20.286437006s ago: executing program 1 (id=1356): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x17, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x781}]}, 0x34}}, 0x0) (fail_nth: 7) 1m19.901208207s ago: executing program 1 (id=1358): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0xffffffffffffffb6) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/stat\x00') getdents64(r6, &(0x7f00000000c0)=""/44, 0x2c) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) getdents(r6, &(0x7f0000000040)=""/44, 0x2c) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)={0x1c, r1, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x700}, 0x0) 1m18.954008874s ago: executing program 1 (id=1359): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYBLOB="8000a2000a0002"], 0x28}}, 0x0) 1m18.811572206s ago: executing program 1 (id=1361): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) getpid() inotify_init1(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x101000, 0x278) ioctl$SG_GET_KEEP_ORPHAN(r4, 0x2288, &(0x7f0000000180)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_emit_ethernet(0xc8, &(0x7f0000000640)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "6af955", 0x92, 0x0, 0xff, @loopback, @mcast2, {[@fragment={0x0, 0x0, 0x5, 0x0, 0x0, 0x1e, 0x66}, @dstopts={0x2e, 0xd, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x1, 0x2, 0xfa, 0x3, [0x1]}}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @calipso={0x7, 0x28, {0x1, 0x8, 0x4, 0x3, [0x49b, 0x5, 0xc3, 0x4]}}, @pad1, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @enc_lim={0x4, 0x1, 0xc}]}], "f462a9fdae8cd69651b2ca075a3e7775af08"}}}}}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a17006000000002000020"]) ioctl$USBDEVFS_REAPURBNDELAY(r5, 0x4004550d, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r8, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB="31475ebbcace41473d00cd0ba7bbb62774b863c0fb7e251b96c89ff6fdc4b9cc81436f65d5f24ce5d2dd41"]) lsetxattr$trusted_overlay_redirect(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 1m10.122622783s ago: executing program 35 (id=1346): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[], 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r4 = accept4$unix(r2, 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/67, 0x40000}], 0x1}, 0x10122) r5 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0x80045505, 0x0) 1m3.718707925s ago: executing program 36 (id=1361): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) getpid() inotify_init1(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x101000, 0x278) ioctl$SG_GET_KEEP_ORPHAN(r4, 0x2288, &(0x7f0000000180)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_emit_ethernet(0xc8, &(0x7f0000000640)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "6af955", 0x92, 0x0, 0xff, @loopback, @mcast2, {[@fragment={0x0, 0x0, 0x5, 0x0, 0x0, 0x1e, 0x66}, @dstopts={0x2e, 0xd, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x1, 0x2, 0xfa, 0x3, [0x1]}}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @calipso={0x7, 0x28, {0x1, 0x8, 0x4, 0x3, [0x49b, 0x5, 0xc3, 0x4]}}, @pad1, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @enc_lim={0x4, 0x1, 0xc}]}], "f462a9fdae8cd69651b2ca075a3e7775af08"}}}}}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a17006000000002000020"]) ioctl$USBDEVFS_REAPURBNDELAY(r5, 0x4004550d, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r8, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB="31475ebbcace41473d00cd0ba7bbb62774b863c0fb7e251b96c89ff6fdc4b9cc81436f65d5f24ce5d2dd41"]) lsetxattr$trusted_overlay_redirect(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 10.045401702s ago: executing program 9 (id=1612): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000100)=0x6e, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x20, 0x0, @fd_index, 0x0, 0x20000000, 0x36a3, 0x0, 0x0, {0x1}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5393, &(0x7f0000000280)) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'virt_wifi0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000ddb200000300000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fcntl$notify(r2, 0x402, 0x29) 9.494583634s ago: executing program 9 (id=1613): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000001c0)) lchown(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) r7 = socket$kcm(0x2, 0xf, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'bridge_slave_1\x00', @link_local}) write$tun(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd090032000300300000006000000001002f0081e949b93897bc3b000000"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x548, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f00000000c0)={0x400000000000008, 0xf000, 0x0, 0xffffffffffffffff, 0x3}) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x0, 0x11, 0x148, 0x1d8, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@broadcast, [0xff, 0xff, 0x0, 0xff], @ipv6=@mcast2, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x27}, [0xffffffff, 0x0, 0x0, 0xff000000], @ipv4=@multicast2, [0x0, 0x0, 0x0, 0xffffff00], 0x6, 0x6, 0x0, 0x4e23, 0x4e24, 0x4e22, 0x4e23, 0x81}, 0x0, 0x480, 0x0, 0x0, 0x0, 0x4e20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) syz_usb_connect$cdc_ecm(0x2, 0x53, &(0x7f0000000280)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x41, 0x1, 0x1, 0x4, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x2, 0x6, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x0, "2476e887cf3a"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x98ba, 0x1, 0xffff, 0x5}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0xf, 0x0, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x7, 0xb6, 0x5}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x200, 0x88, 0x10, 0xe, 0xff}, 0x115, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x401}}]}) 7.995010585s ago: executing program 6 (id=1621): getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x71}, &(0x7f00000001c0)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000480)={0x0, 0xffffffffffffff0f, &(0x7f0000000440)={&(0x7f00000006c0)={0x114, r4, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x114}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r5) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000480)={0x0, 0xffffffffffffff0f, &(0x7f0000000440)={&(0x7f00000006c0)={0x114, r6, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback={0x200000000000000}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x114}}, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, &(0x7f0000000040), &(0x7f00000079c0)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000540)={r0, 0xee00, 0xee01}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580000000c000780050015e7070000000500010006100000050005000200000005000400000000000900020073797a300000000011000300686173683a69702c706f727400"/88], 0x58}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) get_robust_list(r0, &(0x7f00000004c0)=&(0x7f0000000400)={&(0x7f0000000280), 0x0, &(0x7f00000003c0)={&(0x7f0000000380)}}, &(0x7f0000000500)=0x18) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) 7.341971833s ago: executing program 8 (id=1623): open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x4a, &(0x7f0000001980)={@empty, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "9a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 7.209840979s ago: executing program 8 (id=1624): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000480)={0x0, 0xffffffffffffff0f, &(0x7f0000000440)={&(0x7f00000006c0)={0x114, r4, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x114}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r5) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000480)={0x0, 0xffffffffffffff0f, &(0x7f0000000440)={&(0x7f00000006c0)={0x114, r6, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback={0x200000000000000}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x114}}, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r7, 0x10c, 0x0, &(0x7f0000000040), &(0x7f00000079c0)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000540)={r0, 0xee00, 0xee01}, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580000000c000780050015e7070000000500010006100000050005000200000005000400000000000900020073797a300000000011000300686173683a69702c706f727400"/88], 0x58}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) get_robust_list(r0, &(0x7f00000004c0)=&(0x7f0000000400)={&(0x7f0000000280), 0x0, &(0x7f00000003c0)={&(0x7f0000000380)}}, &(0x7f0000000500)=0x18) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) 7.141752877s ago: executing program 6 (id=1625): sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x30008080}, 0x20048104) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x21, 0x2, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00004093'], 0x2a, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="00000000000000eaffffff000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000010c0)=ANY=[@ANYBLOB="f40100001d00000128bd7000fcdbdf250a00100000000000000000000c000f000400000000000000810012006d6f7275733132383000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80100006000000000489f4e8592c8d87fe76eb7abc1979b5c3c6385ba61fd7d5b9a6f28acd4526cb2ab8f1cb835dbe78ab49bc982b885835924026c67000000e4000600fe88000000000000000000000000000100000000000000000000ffff000000004e2001ff4e2000040200202084000000", @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d33c00000000000000000000000000ffffac1e01010600000000000000ffffffffffffffff56750000000000001000000000000000020000000000000009000000000000000400000000000000090000000000000000000000000000080400000000000000ff03000000000000000000000000000001000000000000000e00000025bd7000ff34000002000405600000000000000008000b00080000005a0002007863686163686132302d67656e6572696300000000"], 0x1f4}}, 0x80) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000001b000012000000004b28c962170b7020000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff01000000110000000000000086dd6361696630000000000000000000000076657468315f746f5f7465616d00000073797a6b616c6c65723100000000000076657468315f746f5f7465616d000000aaaaaaaaaabb0000000000000180c2000000000000000099ecb525000000e80000001801000069703600000100000000000009000000000300000000000000000000000000005000000000000000fe80000000000000000000000000000000000000000000000000ffffac1e00707154f51b8b0980f73a0f35ca6a4100000000000000000000004000000000000000000080000000000000010000000000063e004904004a194dc2f70d04a5000000000000000000000008000000000004000000"]}, 0x213) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 7.12353059s ago: executing program 7 (id=1626): r0 = socket(0x10, 0x3, 0x0) setsockopt$MRT6_PIM(r0, 0x29, 0xcf, &(0x7f0000000100)=0x1, 0x4) r1 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x1) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r6 = accept$alg(r5, 0x0, 0x0) write$binfmt_script(r6, &(0x7f0000000600), 0xfec8) ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000002c0)={0x0, 0x4, 0xff, 0x28, 0x2, 0x8, 0x3, 0xffff, {0x0, @in6={{0xa, 0x4e24, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}}, 0x7fff, 0x800, 0x6, 0x5}}, &(0x7f0000000240)=0xb0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000080)={r8, 0x2c, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0x5, @mcast2, 0xa2}, @in={0x2, 0x4e20, @rand_addr=0x64010100}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x54}}, 0x0) dup2(r10, r9) close_range(r1, 0xffffffffffffffff, 0x0) 5.997641986s ago: executing program 8 (id=1627): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000780)=0x8001) syz_emit_ethernet(0x3a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0008004900002c0000000000119078000000000000000044100e70000000070000005b0000000f00004e210008907881d239b45c6cee825b3444935c3e616f910e6e330c9008506a6b6802ee65b2257cc918c07a52a495d352a637d99b340259bf671135449d1224d6"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000500)={0x0, "af469867fac301ffe137479590922f5d"}) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='sysv\x00', 0x1005b, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000001500)={{r0}, 0x0, 0xc, @unused=[0x9, 0xd91, 0x9, 0x2182], @devid=r3}) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000140)) semget$private(0x0, 0x4, 0x22c) accept4$unix(r0, &(0x7f0000000180), &(0x7f0000000080)=0x6e, 0x800) 5.873100619s ago: executing program 9 (id=1628): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000780)=0x8001) syz_emit_ethernet(0x3a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0008004900002c0000000000119078000000000000000044100e70000000070000005b0000000f00004e210008907881d239b45c6cee825b3444935c3e616f910e6e330c9008506a6b6802ee65b2257cc918c07a52a495d352a637d99b340259bf671135449d1224d6"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000500)={0x0, "af469867fac301ffe137479590922f5d"}) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='sysv\x00', 0x1005b, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000001500)={{r0}, 0x0, 0xc, @unused=[0x9, 0xd91, 0x9, 0x2182], @devid=r3}) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000140)) semget$private(0x0, 0x4, 0x22c) accept4$unix(r0, &(0x7f0000000180), &(0x7f0000000080)=0x6e, 0x800) 5.870070078s ago: executing program 7 (id=1629): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x240000c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d"], 0x0) ppoll(&(0x7f0000000d40)=[{r3}], 0x25, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1b, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'veth1\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400003900120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff00", 0x50}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 5.170245381s ago: executing program 6 (id=1630): prctl$PR_SET_MM(0x41555856, 0x20000000, &(0x7f0000ffd000/0x2000)=nil) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000021000000", @ANYRES32=r2, @ANYBLOB="08009e"], 0x24}}, 0x0) 5.153078066s ago: executing program 3 (id=1631): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x0, 0x20}, 0xc) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x30400}], 0x1}, 0x0) sendmmsg$sock(r0, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000800)="b4", 0x1}], 0x1}}], 0x1, 0x40080) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000d00)=[{{0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffe4e}}, {{&(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)=""/39}, {&(0x7f0000000480)=""/182}, {&(0x7f0000000540)=""/75}, {&(0x7f0000000340)=""/28}, {&(0x7f0000000e00)=""/121}, {&(0x7f00000018c0)=""/4096}], 0x0, &(0x7f00000006c0)=""/213}}, {{&(0x7f00000007c0)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000900)=[{&(0x7f0000000840)=""/8}, {&(0x7f0000000880)=""/78}], 0x0, &(0x7f0000000a40)=""/186}}, {{&(0x7f0000000940)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b00)=""/39}, {&(0x7f0000000b40)=""/158}], 0x0, &(0x7f0000000c40)=""/156}}], 0xf000, 0x10002, 0x0) recvfrom$packet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) setxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=ANY=[]) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 5.053720952s ago: executing program 9 (id=1632): syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x6d, 0x38, 0xa, 0x8, 0x1bcf, 0xb40, 0x12fe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x9, 0xb, 0x80, 0x9, [{{0x9, 0x4, 0x14, 0x5, 0x1, 0xe, 0x1, 0x0, 0xfa, [], [{{0x9, 0x5, 0x6, 0x12, 0x468, 0x1, 0x4, 0x3}}]}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x42b}}]}) syz_clone3(0x0, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x70}}, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r2, 0x0, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSET={0x80, 0xb, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_SET_ID={0x8}, @NFTA_SET_EXPR={0x64, 0x11, 0x0, 0x1, @masq={{0x9}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0xc7c1ac111e037533}, @NFTA_MASQ_REG_PROTO_MIN={0x8}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x28}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x42}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x55}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x20}]}}}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_ID={0x8}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x10c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000000) 5.023239211s ago: executing program 8 (id=1633): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x0, 0x20}, 0xc) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x30400}], 0x1}, 0x0) sendmmsg$sock(r0, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000800)="b4", 0x1}], 0x1}}], 0x1, 0x40080) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000d00)=[{{0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffe4e}}, {{&(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)=""/39}, {&(0x7f0000000480)=""/182}, {&(0x7f0000000540)=""/75}, {&(0x7f0000000340)=""/28}, {&(0x7f0000000e00)=""/121}, {&(0x7f00000018c0)=""/4096}], 0x0, &(0x7f00000006c0)=""/213}}, {{&(0x7f00000007c0)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000900)=[{&(0x7f0000000840)=""/8}, {&(0x7f0000000880)=""/78}], 0x0, &(0x7f0000000a40)=""/186}}, {{&(0x7f0000000940)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b00)=""/39}, {&(0x7f0000000b40)=""/158}], 0x0, &(0x7f0000000c40)=""/156}}], 0xf000, 0x10002, 0x0) recvfrom$packet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) setxattr$security_ima(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=ANY=[]) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 4.989432986s ago: executing program 6 (id=1634): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) iopl(0x3) clock_getres(0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x40, 0x15, 0x42, 0x20, 0x5a9, 0x1550, 0xe4bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8e, 0xc4, 0x6f}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0x8d}, {0xa, [{@any, 0x6, 0x6, "d8b1a1", 0x10}, {@none, 0x3, 0x0, "349f69", 0x0, 0x2}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1, "b85591", 0x4284, 0x3}, {@none, 0x20, 0x0, "aa71e4", 0x4d34, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x2, "2703be", 0x8f9e, 0x9}, {@any, 0x4, 0x7, "e96614", 0x6, 0x8}, {@any, 0xe, 0x1, "4ff5e0", 0x7, 0x2}, {@any, 0x29, 0x97, "c03cef", 0x1, 0x20}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x5, 0xff, "f4b3a1", 0xfff9, 0x1}, {@any, 0x81, 0x5, "83248d", 0x2, 0x3}]}}}, 0x90) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0xb089) syz_usb_control_io(r3, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000a80)=ANY=[@ANYBLOB="00b219"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) 4.193947501s ago: executing program 7 (id=1635): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000500)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0x0, @private0}}}, 0x108) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000180)={0x2a, 0xffffffff, 0x4001}, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xb, 0x40}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7528e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000140)={0x7, @vbi={0x4, 0x3, 0x9, 0x32344d59, [0x4, 0x40], [0x3, 0x10001], 0x1}}) write(r1, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) 4.193121559s ago: executing program 3 (id=1636): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="01000000000000000000070000000800040006000000"], 0x1c}}, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000340)="a0", 0x1}], 0x1}}], 0x1, 0x24000081) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000007000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000300fffe0900010073797a300000000028000000000a010800000000000000000a00fffd08000240000000010900010073797a300000000028000000000a030000000000000000000a00000008000240000000000900010073797a30"], 0x2d8}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) waitid(0x2, 0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$FUSE(r4, &(0x7f0000004180)={0x2020}, 0xffffffffffffff45) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000000)="240000001e005f80024000000000000002000000010000000000080008000100000000ff", 0x24) ioctl$IMGETCOUNT(r5, 0x80044943, &(0x7f0000000100)) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000080)=0x40) 4.108182823s ago: executing program 3 (id=1637): ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000000)) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0xf400000000000000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) 3.950775424s ago: executing program 8 (id=1638): getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000480)={0x0, 0xffffffffffffff0f, &(0x7f0000000440)={&(0x7f00000006c0)={0x114, r4, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x114}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r5) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000480)={0x0, 0xffffffffffffff0f, &(0x7f0000000440)={&(0x7f00000006c0)={0x114, r6, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback={0x200000000000000}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x114}}, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r7, 0x10c, 0x0, &(0x7f0000000040), &(0x7f00000079c0)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000540)={r0, 0xee00, 0xee01}, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580000000c000780050015e7070000000500010006100000050005000200000005000400000000000900020073797a300000000011000300686173683a69702c706f727400"/88], 0x58}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) get_robust_list(r0, &(0x7f00000004c0)=&(0x7f0000000400)={&(0x7f0000000280), 0x0, &(0x7f00000003c0)={&(0x7f0000000380)}}, &(0x7f0000000500)=0x18) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) 3.25484654s ago: executing program 7 (id=1639): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0xd0, 0x11, 0x148, 0x0, 0x0, 0x1a8, 0x2a8, 0x2a8, 0x1a8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x3, 0x1, 0x4], 0x0, 0x7}, {0xfffd, [0x0, 0x0, 0x0, 0x4, 0x6]}}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'ip_vti0\x00', 'geneve0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00', {0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xffffffffffffff5d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f00000002c0)={0xf0f044}) poll(&(0x7f0000000140)=[{r6, 0x19f23}], 0x1, 0x20) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000020000000c00000000140000", @ANYRES32, @ANYBLOB="0000000000200000000000000000000000000000f1ed194e9f66fe6e351454e919a115d386a37f8e318e089d9a6f3b7fc686ae0d8eaffe91986f0e41cfc858c5611485a70583336bb937a85d850d52e10c33b7349698bf4221ca9be1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="185d1de400e4c5d1424ebdb700000000900008000000000000000018e300008f42501bc4694593da608825e344520e72536bb0c7ad3681585616cae81f62eb7e5b298630e1bf5fcacab0ebe571474a561425639fcf5204f7d93c7731d8b2e020252f4fbd790f2c681c9b687398a0c04256482b3c53a52d764497a6bbcf468917b9cc6ca507627c83e09883006a728b13bfd0e5d10701a93a9c9383270e6f291375e89c7871bdfec1825ccf8cb5c918e5d4bc8fa8aac0525cd3fbc0f292b40ace6ca70302e6fd896d0e0ae7afb5638ad15c792521dadc7b7ccd69efbb81c8364c30664872a87ff6c09d416d21628f9a8ac6127f90cde2c372a73884a07b2795d1751d3749095377dcc14017938fd11b1df5ed9c8cfb85706b6b6db5a71d8e49975a16bf2f8b6d5442fc2727bdfcb77c7c5406fc925917aed537ccf4261847a697863c6f917a509ddac5f2fcb46515987317d592b65c5d23814df4de99b103245fc975c90c248ee859ca933e1a23f7129d7e2188ac13a957b8508e26f2d44bcc37a5aa1dfa1b5db0280caed4c8317d5df2ba5f8e609fd62a46a109809569e66176", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x1c9800, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.5504184s ago: executing program 8 (id=1640): syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x2f, 0x0, @mcast1, @private1, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="0404"], 0xd) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) pipe(0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x40842, 0x0) syz_io_uring_setup(0x231, 0x0, &(0x7f0000000000), 0x0) r4 = io_uring_setup(0x79bb, &(0x7f0000000400)) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, &(0x7f0000000080), 0x10) listen(r3, 0x100854f) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000000000)=ANY=[], 0x14}], 0x1}, 0x0) r6 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r6, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"]) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f0000000100)={0x51, 0xfffe, 0x0, {}, {}, @period={0x5d, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffc}, 0x0, 0x0}}) 1.949878408s ago: executing program 3 (id=1641): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) (fail_nth: 7) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r6 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_enter(r6, 0x5b44, 0x0, 0x1b, 0x0, 0x0) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x8}}, 0x50) umount2(&(0x7f0000000140)='./file0\x00', 0xc) syz_emit_ethernet(0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaae8ffffffffff0800450000280000000000069078ac1414bbac1414aa00004e2249cf9246319f37fea9c126", @ANYRES32=0x41424344, @ANYBLOB="cf4a4485a2e2578f7aba711eb8dfab2c72e471accb555d7f2fc5ec1f0b6a6da23a72258e8a884164a9975943277ce9626f2e6654a86467d48c1c4a475267d1cf3e02cccc6fa74dbc0303c9a22fa775d66a6e938312efbb577f90487f357851c9c051c4a22522246838c8b83009847fd87d50df7d3dab7002dab31f5322", @ANYBLOB="48dd991a871a52f078b9"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) 1.104999285s ago: executing program 7 (id=1642): getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x71}, &(0x7f00000001c0)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r4) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000480)={0x0, 0xffffffffffffff0f, &(0x7f0000000440)={&(0x7f00000006c0)={0x114, r5, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x114}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r6) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000480)={0x0, 0xffffffffffffff0f, &(0x7f0000000440)={&(0x7f00000006c0)={0x114, r7, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback={0x200000000000000}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x114}}, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, &(0x7f0000000040), &(0x7f00000079c0)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000540)={r0, 0xee00, 0xee01}, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580000000c000780050015e7070000000500010006100000050005000200000005000400000000000900020073797a300000000011000300686173683a69702c706f727400"/88], 0x58}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) get_robust_list(r0, &(0x7f00000004c0)=&(0x7f0000000400)={&(0x7f0000000280), 0x0, &(0x7f00000003c0)={&(0x7f0000000380)}}, &(0x7f0000000500)=0x18) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) 1.061512265s ago: executing program 6 (id=1643): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000780)=0x8001) syz_emit_ethernet(0x3a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0008004900002c0000000000119078000000000000000044100e70000000070000005b0000000f00004e210008907881d239b45c6cee825b3444935c3e616f910e6e330c9008506a6b6802ee65b2257cc918c07a52a495d352a637d99b340259bf671135449d1224d6"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000500)={0x0, "af469867fac301ffe137479590922f5d"}) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='sysv\x00', 0x1005b, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000001500)={{r0}, 0x0, 0xc, @unused=[0x9, 0xd91, 0x9, 0x2182], @devid=r3}) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000140)) semget$private(0x0, 0x4, 0x22c) accept4$unix(r0, &(0x7f0000000180), &(0x7f0000000080)=0x6e, 0x800) 959.158954ms ago: executing program 3 (id=1644): r0 = open(&(0x7f00000005c0)='./bus\x00', 0x84003, 0xa0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) futex_waitv(&(0x7f0000002180)=[{0xfffffffffffff225, 0x0, 0x82}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000100)) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='sysv\x00', 0x1005b, 0x0) chdir(&(0x7f0000000080)='./bus\x00') 887.886718ms ago: executing program 3 (id=1645): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @empty, 0xfffffffd}, 0x1c) syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) r2 = mq_open(&(0x7f00005a1ffb)='e\xeeQ\x92o', 0x42, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = syz_open_dev$media(&(0x7f00000006c0), 0x2c25, 0x28004) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0x7c80, 0x0) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000240)=0xe, 0x4) r6 = dup2(r2, r2) mq_notify(r6, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) eventfd(0x0) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0xff, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x3e36}, &(0x7f0000000040)={0x0, 0x3938700}, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x208) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) ftruncate(r8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_connect(0x0, 0x57, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) openat$binfmt_register(0xffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$SIOCRSGL2CALL(r6, 0x89e5, &(0x7f0000000180)=@null) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 208.087103ms ago: executing program 9 (id=1646): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000300)={0x0, 0x0}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000003c0)={{0x80, 0x61}, 'port0\x00', 0x0, 0x400, 0x7, 0x4000, 0x2, 0x0, 0x103, 0x0, 0x0, 0x3}) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25ADDUID(r2, 0x89e1, &(0x7f00000001c0)={0x3, @bcast, r4}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r3) 110.777356ms ago: executing program 7 (id=1647): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x240) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x80010) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x20000000001, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@overlay={0x3, 0x1, 0x4, 0x0, 0x7, {}, {0x1, 0x2, 0x7, 0x10, 0xa, 0x1, "1d4e93c5"}, 0x7fff, 0x3, {}, 0xfffffffa, 0x0, r0}) r2 = syz_pidfd_open(0x0, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000003c0)) setns(r0, 0x80) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000340)=@mmap={0x0, 0x2, 0x4, 0xffffff7f, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "186856f3"}}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f000024e000/0x3000)=nil, 0x3000, 0x800000, 0x4, &(0x7f0000130000/0x800000)=nil) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r0, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @connect={{0x81, 0x4}, {0x5, 0x4}}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {}, @time=@tick=0x1000}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0x8}, {}, @quote={{0xbe, 0x5}, 0x5, &(0x7f00000005c0)={0x9, 0x5, 0x2, 0x2b, @tick=0x5, {0x40, 0x2}, {0x1, 0x2a}, @control={0xfe, 0x9, 0xa}}}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0xf40}, {0x0, 0x3}, {0x0, 0x2}, @connect={{0x0, 0x1}, {0x0, 0x5}}}], 0x70) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mremap(&(0x7f00003a2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000271000/0x3000)=nil) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r5, 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r9 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000140)={0x1d, r8}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0xffffffffffffff9e, 0x11, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000240)={'ip_vti0\x00', r10, 0x40, 0x700, 0x200, 0xff, {{0x6, 0x4, 0x2, 0x8, 0x18, 0x64, 0x0, 0xb7, 0x4, 0x0, @local, @broadcast, {[@end]}}}}}) sendmsg$can_raw(r9, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r10}, 0x10, &(0x7f0000000440)={&(0x7f0000000600)=@can={{0x4, 0x1, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, "183de4e76a5526b4"}, 0x10}, 0x1, 0x0, 0x0, 0x4000880}, 0x10) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0xb8aa]}) 39.000876ms ago: executing program 9 (id=1648): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x1d, 0x16, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_val={0x18, 0xb, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @alu={0x4, 0x0, 0xc, 0x66ea0efd6b58e045, 0x8, 0x4, 0x8}, @ldst={0x3, 0x1, 0x0, 0x7, 0x86f733c685e59a26, 0x8, 0x10}, @ldst={0x1, 0x2, 0x6, 0x5, 0xb, 0x20, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x8, 0x11, &(0x7f0000000280)=""/17, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f00000006c0)=[{0x4, 0x2, 0x4, 0xc}, {0x0, 0x1, 0xa, 0x3}, {0x2, 0x3, 0x1, 0x6}, {0x1, 0x3, 0xa, 0xb}, {0x2, 0x3, 0xb, 0x2}, {0x0, 0x4, 0xd, 0x3}], 0x10, 0x7, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000040)=0x3) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) (async) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="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", 0x2000, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000028c0)=ANY=[@ANYBLOB="4c0000003a0009000000010000000000010000001800b3800c000200657468746f6f6c0008000800", @ANYRES32=0x0, @ANYBLOB="0c00030000"], 0x4c}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') (async) r9 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) mmap(&(0x7f000001a000/0x3000)=nil, 0x3000, 0xf, 0x11012, r9, 0x0) (async) pread64(r8, &(0x7f000001a240)=""/102400, 0x19000, 0x0) syz_clone(0x81088000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0e05403, &(0x7f0000000000)={{0xffffffffffffffff, 0x2, 0xffffffff, 0x3, 0x6}, 0xf3e, 0x3, 'id1\x00', 'timer1\x00', 0x0, 0x10000, 0x1, 0x400, 0x77c1907b}) 0s ago: executing program 6 (id=1649): getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x71}, &(0x7f00000001c0)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r4) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000480)={0x0, 0xffffffffffffff0f, &(0x7f0000000440)={&(0x7f00000006c0)={0x114, r5, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x114}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r6) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000480)={0x0, 0xffffffffffffff0f, &(0x7f0000000440)={&(0x7f00000006c0)={0x114, r7, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback={0x200000000000000}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x114}}, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, &(0x7f0000000040), &(0x7f00000079c0)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000540)={r0, 0xee00, 0xee01}, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580000000c000780050015e7070000000500010006100000050005000200000005000400000000000900020073797a300000000011000300686173683a69702c706f727400"/88], 0x58}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) get_robust_list(r0, &(0x7f00000004c0)=&(0x7f0000000400)={&(0x7f0000000280), 0x0, &(0x7f00000003c0)={&(0x7f0000000380)}}, &(0x7f0000000500)=0x18) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) kernel console output (not intermixed with test programs): e [ 373.060475][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 373.086338][ T5874] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 373.113318][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.121922][ T5874] usb 1-1: Product: syz [ 373.126144][ T5874] usb 1-1: Manufacturer: syz [ 373.131076][ T5874] usb 1-1: SerialNumber: syz [ 373.149606][ T5874] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 373.306310][ T51] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 373.775301][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 374.089306][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 374.742496][ T51] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 374.750005][ T51] ath9k_htc: Failed to initialize the device [ 375.129360][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 376.169408][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 376.365891][T10849] xt_recent: Unsupported userspace flags (00000076) [ 376.426123][ T2141] usb 1-1: USB disconnect, device number 22 [ 376.529473][ T5836] Bluetooth: hci0: Malformed LE Event: 0x0d [ 376.552073][ T2141] usb 1-1: ath9k_htc: USB layer deinitialized [ 376.607301][ T29] audit: type=1400 audit(1731791343.716:1002): avc: denied { getopt } for pid=10848 comm="syz.1.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 376.946365][T10864] trusted_key: encrypted_key: key user:syz not found [ 377.219338][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 377.445066][T10865] No buffer was provided with the request [ 377.549379][ T5873] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 377.755601][ T5873] usb 2-1: Using ep0 maxpacket: 8 [ 377.775706][ T5873] usb 2-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=22.1b [ 377.787059][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.796183][ T5873] usb 2-1: Product: syz [ 377.802513][ T5873] usb 2-1: Manufacturer: syz [ 377.807423][ T5873] usb 2-1: SerialNumber: syz [ 377.809508][ T2141] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 377.820728][ T5873] usb 2-1: config 0 descriptor?? [ 377.836573][ T5873] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 377.970860][ T2141] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 8192, setting to 1024 [ 377.982047][ T2141] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1024 [ 378.006980][ T2141] usb 1-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice=56.12 [ 378.055150][ T5873] usb 2-1: USB disconnect, device number 32 [ 378.063204][ T2141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.109859][ T2141] usb 1-1: config 0 descriptor?? [ 378.117646][ T2141] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 378.171780][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.178092][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.249299][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 378.547662][ T2141] usb 1-1: USB disconnect, device number 23 [ 379.289322][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 379.469317][T10887] VFS: unable to find oldfs superblock on device nullb0 [ 380.329344][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 381.025034][ T5836] Bluetooth: hci1: Malformed LE Event: 0x0d [ 381.369349][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 381.378321][ T29] audit: type=1804 audit(1731791348.236:1003): pid=10904 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1059" name="/newroot/233/file0/bus" dev="ramfs" ino=26701 res=1 errno=0 [ 381.447426][ T29] audit: type=1800 audit(1731791348.546:1004): pid=10904 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1059" name="bus" dev="ramfs" ino=26701 res=0 errno=0 [ 381.522881][T10913] x_tables: ip_tables: osf match: only valid for protocol 6 [ 381.554828][ T29] audit: type=1400 audit(1731791348.606:1005): avc: denied { read } for pid=10909 comm="syz.0.1065" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 381.579722][ T29] audit: type=1400 audit(1731791348.606:1006): avc: denied { open } for pid=10909 comm="syz.0.1065" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 381.739819][ T8] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 381.919459][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 381.930779][ T8] usb 1-1: config 3 has an invalid interface number: 178 but max is 2 [ 382.409407][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 382.580567][ T8] usb 1-1: config 3 has an invalid interface number: 116 but max is 2 [ 382.590900][ T8] usb 1-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 382.612683][ T8] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 382.623280][ T8] usb 1-1: config 3 has no interface number 1 [ 382.629816][ T8] usb 1-1: config 3 has no interface number 2 [ 382.636321][ T8] usb 1-1: config 3 interface 178 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 382.654726][ T8] usb 1-1: config 3 interface 178 altsetting 14 endpoint 0xE has invalid maxpacket 592, setting to 64 [ 382.666927][ T8] usb 1-1: config 3 interface 178 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 382.758389][ T8] usb 1-1: config 3 interface 178 altsetting 14 has a duplicate endpoint with address 0xD, skipping [ 383.251306][ T8] usb 1-1: config 3 interface 178 altsetting 14 has a duplicate endpoint with address 0x5, skipping [ 383.262325][ T8] usb 1-1: config 3 interface 178 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 383.274483][ T8] usb 1-1: config 3 interface 116 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 383.287697][ T8] usb 1-1: config 3 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 383.300700][ T8] usb 1-1: config 3 interface 178 has no altsetting 0 [ 383.307445][ T8] usb 1-1: config 3 interface 116 has no altsetting 0 [ 383.314366][ T8] usb 1-1: config 3 interface 0 has no altsetting 0 [ 383.330836][ T8] usb 1-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=b7.5f [ 383.362271][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.390374][ T8] usb 1-1: Product: ጠ[ 383.394894][ T8] usb 1-1: Manufacturer: ᧵㊡âºå¤²ç¼²é˜Ë›å»–栅䮚侈绉腾᱿î¬áƒœï½–戳ë½â¨¹à¬·á¦‡ïè¿á…¯íœ¯à»šì•“綩廡䘈箌⫩ꆯᓱრب跧줱ë£î°ˆë—Ფ趖⧡໻Ԕ⢌ä¤ì¿ªÞ„ﲻ䷎郱懋Ά槖î±é‘Ÿî¨—䷎觉å§ê Šá…¿ã»‡ [ 383.417373][ T8] usb 1-1: SerialNumber: Ñ [ 383.449334][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 383.648482][ T8] keyspan 1-1:3.178: Keyspan - (without firmware) converter detected [ 383.669134][ T8] usb 1-1: Direct firmware load for keyspan/usa28xb.fw failed with error -2 [ 383.698333][ T8] usb 1-1: Falling back to sysfs fallback for: keyspan/usa28xb.fw [ 384.489359][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 385.040989][T10964] VFS: unable to find oldfs superblock on device nullb0 [ 385.529373][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 386.569317][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 386.735035][ T29] audit: type=1400 audit(1731791353.846:1007): avc: denied { write } for pid=10997 comm="syz.6.1095" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 386.800230][ T5836] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 386.814602][ T29] audit: type=1400 audit(1731791353.846:1008): avc: denied { open } for pid=10997 comm="syz.6.1095" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 386.832966][T11003] capability: warning: `syz.1.1097' uses deprecated v2 capabilities in a way that may be insecure [ 386.897527][ T29] audit: type=1400 audit(1731791354.006:1009): avc: denied { name_bind } for pid=11002 comm="syz.1.1097" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 387.609345][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 388.649393][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 389.389984][ T29] audit: type=1400 audit(1731791356.496:1010): avc: denied { module_request } for pid=11036 comm="syz.1.1109" kmod="crypto-hmac(sha512)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 389.699327][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 390.260519][ T29] audit: type=1400 audit(1731791357.366:1011): avc: denied { create } for pid=11031 comm="syz.6.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 390.729329][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 391.029020][ T29] audit: type=1400 audit(1731791357.376:1012): avc: denied { accept } for pid=11031 comm="syz.6.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 391.097208][ T29] audit: type=1804 audit(1731791357.556:1013): pid=11091 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1112" name="/newroot/229/file0/bus" dev="ramfs" ino=27168 res=1 errno=0 [ 391.163053][ T29] audit: type=1804 audit(1731791357.916:1014): pid=11095 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1113" name="/newroot/216/file0/bus" dev="ramfs" ino=27176 res=1 errno=0 [ 391.327125][ T29] audit: type=1800 audit(1731791358.236:1015): pid=11091 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1112" name="bus" dev="ramfs" ino=27168 res=0 errno=0 [ 391.501187][ T29] audit: type=1800 audit(1731791358.396:1016): pid=11095 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1113" name="bus" dev="ramfs" ino=27176 res=0 errno=0 [ 391.779318][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 392.819308][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 393.849334][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 394.509590][T11149] xt_NFQUEUE: number of queues (1280) out of range (got 65792) [ 394.512338][ T29] audit: type=1400 audit(1731791361.616:1017): avc: denied { create } for pid=11145 comm="syz.3.1130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 394.530768][T11147] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1130'. [ 394.555289][T11147] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1130'. [ 394.589641][ T29] audit: type=1400 audit(1731791361.616:1018): avc: denied { read } for pid=11146 comm="syz.6.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 394.631412][T11152] No buffer was provided with the request [ 394.889310][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 394.905260][ T29] audit: type=1400 audit(1731791361.866:1019): avc: denied { ioctl } for pid=11154 comm="syz.3.1133" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 394.962499][T11160] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1135'. [ 395.069358][ T5873] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 395.720022][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 8192, setting to 1024 [ 395.731999][ T5873] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1024 [ 395.752382][ T5873] usb 2-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice=56.12 [ 395.772186][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.786861][ T5873] usb 2-1: config 0 descriptor?? [ 395.804621][ T5873] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 395.939321][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 396.070821][ T5873] usb 2-1: USB disconnect, device number 33 [ 396.929600][T11182] trusted_key: encrypted_key: key user:syz not found [ 396.969293][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 397.910574][ T5816] udevd[5816]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 398.009304][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 398.009509][T11199] trusted_key: encrypted_key: key user:syz not found [ 398.485162][T11203] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1146'. [ 399.049291][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 399.556162][ T5836] Bluetooth: hci4: Malformed LE Event: 0x0d [ 399.653338][ T29] audit: type=1804 audit(1731791366.746:1020): pid=11223 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1147" name="/newroot/254/file0/bus" dev="ramfs" ino=27365 res=1 errno=0 [ 399.715653][T11222] xt_SECMARK: invalid mode: 2 [ 399.789395][ T29] audit: type=1800 audit(1731791366.886:1021): pid=11223 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1147" name="bus" dev="ramfs" ino=27365 res=0 errno=0 [ 400.089328][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 400.182232][T11235] No buffer was provided with the request [ 400.190237][ T5836] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 401.082425][T11251] trusted_key: encrypted_key: key user:syz not found [ 401.099419][ T2141] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 401.129329][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 401.355338][ T2141] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 8192, setting to 1024 [ 401.416501][ T2141] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1024 [ 401.548813][ T2141] usb 4-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice=56.12 [ 401.555460][ T5836] Bluetooth: hci0: Malformed LE Event: 0x0d [ 401.623287][ T2141] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.647711][ T2141] usb 4-1: config 0 descriptor?? [ 401.676307][ T2141] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 401.887911][T10877] usb 4-1: USB disconnect, device number 14 [ 402.169312][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 402.714687][T11283] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1170'. [ 402.729358][T11283] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1170'. [ 403.209326][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 403.869702][T11299] trusted_key: encrypted_key: key user:syz not found [ 404.249323][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 404.731933][ T2141] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 404.739683][ T2141] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 404.786236][ T2141] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 405.289365][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 406.339310][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 407.301314][T11321] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 407.307850][T11321] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 407.319070][T11321] vhci_hcd vhci_hcd.0: Device attached [ 407.328183][T11330] vhci_hcd: connection closed [ 407.328361][ T12] vhci_hcd: stop threads [ 407.369348][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 407.398164][ T12] vhci_hcd: release socket [ 407.405368][ T12] vhci_hcd: disconnect device [ 408.419295][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 408.466528][ T29] audit: type=1400 audit(1731791375.576:1022): avc: denied { cmd } for pid=11345 comm="syz.3.1190" path="socket:[27625]" dev="sockfs" ino=27625 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 408.489886][ T5836] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 408.533464][T11341] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 408.637584][T11349] No buffer was provided with the request [ 408.696709][T11351] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 408.711040][T11351] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1192'. [ 408.724256][T11351] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 409.197238][ T2141] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 409.449393][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 409.767522][T11368] No control pipe specified [ 409.881664][ T2141] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 8192, setting to 1024 [ 409.892921][ T2141] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1024 [ 409.903149][ T2141] usb 4-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice=56.12 [ 409.912915][ T2141] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.922643][ T2141] usb 4-1: config 0 descriptor?? [ 409.931268][ T2141] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 410.073352][T11373] ISOFS: Unable to identify CD-ROM format. [ 410.113329][ T29] audit: type=1400 audit(1731791377.216:1023): avc: denied { name_bind } for pid=11370 comm="syz.1.1198" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 410.489302][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 410.579806][ T5873] usb 4-1: USB disconnect, device number 15 [ 411.529352][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 412.569322][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 412.850408][ T5836] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 413.122114][ T29] audit: type=1326 audit(1731791380.236:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11390 comm="syz.3.1204" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f561c17e719 code=0x0 [ 413.609444][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 414.649342][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 415.689289][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 415.790770][T11428] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1214'. [ 416.669453][T11428] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1214'. [ 416.729298][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 416.812571][T11428] bridge0: port 3(syz_tun) entered blocking state [ 416.840300][ T29] audit: type=1400 audit(1731791383.756:1025): avc: denied { shutdown } for pid=11429 comm="syz.1.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 416.891089][T11428] bridge0: port 3(syz_tun) entered disabled state [ 416.897894][T11428] syz_tun: entered allmulticast mode [ 416.933602][T11428] syz_tun: entered promiscuous mode [ 417.162211][T11445] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1218'. [ 417.769280][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 418.072737][ T29] audit: type=1400 audit(1731791384.266:1026): avc: denied { read } for pid=11437 comm="syz.3.1217" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 418.250149][ T29] audit: type=1400 audit(1731791384.266:1027): avc: denied { open } for pid=11437 comm="syz.3.1217" path="/268/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 418.734839][T11439] block device autoloading is deprecated and will be removed. [ 418.809334][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 419.849432][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 420.637356][T11474] No control pipe specified [ 420.889339][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 421.819443][ T29] audit: type=1804 audit(1731791388.876:1028): pid=11477 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.1228" name="/newroot/144/file0/bus" dev="ramfs" ino=28117 res=1 errno=0 [ 421.842656][ T29] audit: type=1800 audit(1731791388.926:1029): pid=11477 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.1228" name="bus" dev="ramfs" ino=28117 res=0 errno=0 [ 421.929298][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 422.915483][ T29] audit: type=1400 audit(1731791389.956:1030): avc: denied { setopt } for pid=11495 comm="syz.2.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 422.969363][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 423.239281][ T5828] Bluetooth: hci4: Malformed LE Event: 0x0d [ 423.508746][T11511] block device autoloading is deprecated and will be removed. [ 423.666506][ T5828] Bluetooth: hci4: Malformed LE Event: 0x0d [ 424.009320][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 425.049329][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 425.829466][ T5874] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 425.837542][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 426.099296][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 426.149399][ T5874] usb 2-1: device descriptor read/64, error -32 [ 426.919081][ T5874] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 427.106359][ T5828] Bluetooth: hci3: command 0x0406 tx timeout [ 427.139298][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 427.571732][ T5828] Bluetooth: hci4: Malformed LE Event: 0x0d [ 427.619729][ T29] audit: type=1800 audit(1731791394.736:1031): pid=11620 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1251" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 428.169281][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 428.394859][ T29] audit: type=1400 audit(1731791395.466:1032): avc: denied { write } for pid=11628 comm="syz.6.1256" path="socket:[28319]" dev="sockfs" ino=28319 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 428.739195][ T29] audit: type=1400 audit(1731791395.476:1033): avc: denied { nlmsg_read } for pid=11628 comm="syz.6.1256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 429.209307][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 429.467846][ T29] audit: type=1400 audit(1731791396.576:1034): avc: denied { ioctl } for pid=11660 comm="syz.2.1264" path="socket:[28484]" dev="sockfs" ino=28484 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 429.492664][ C1] vkms_vblank_simulate: vblank timer overrun [ 430.186446][T11666] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1264'. [ 430.249373][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 430.616905][ T5828] Bluetooth: hci2: Malformed LE Event: 0x0d [ 431.289376][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 431.746583][T11688] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 431.758290][T11689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1271'. [ 432.329317][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 433.369299][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 433.669461][ T5874] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 433.683505][ T29] audit: type=1400 audit(1731791400.796:1035): avc: denied { setopt } for pid=11703 comm="syz.2.1276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 433.849407][ T5828] Bluetooth: hci2: command 0x0406 tx timeout [ 433.849623][ T5874] usb 4-1: Using ep0 maxpacket: 8 [ 434.066862][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 434.409349][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 434.691531][T11711] syz.6.1278 (11711) used greatest stack depth: 20960 bytes left [ 435.175800][ T5874] usb 4-1: device descriptor read/all, error -71 [ 435.449317][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 435.512905][T11730] trusted_key: encrypted_key: key user:syz not found [ 436.489317][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 436.592026][T11745] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1288'. [ 436.602080][T11745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1288'. [ 437.184669][T11755] VFS: unable to find oldfs superblock on device nullb0 [ 437.529293][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 437.675833][T11759] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 438.579285][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 439.393903][ T5874] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 439.620974][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 439.647457][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.654089][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.107359][ T5828] Bluetooth: hci2: command 0x0406 tx timeout [ 440.456102][T11787] trusted_key: encrypted_key: key user:syz not found [ 440.649359][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 441.432994][T11802] overlayfs: missing 'workdir' [ 441.699347][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 442.355622][T11804] pimreg4: entered allmulticast mode [ 442.729321][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 443.769387][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 444.316235][T11811] FAULT_INJECTION: forcing a failure. [ 444.316235][T11811] name failslab, interval 1, probability 0, space 0, times 0 [ 444.359417][T11811] CPU: 1 UID: 0 PID: 11811 Comm: syz.6.1305 Not tainted 6.12.0-rc7-syzkaller-00189-ge8bdb3c8be08 #0 [ 444.370231][T11811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 444.380324][T11811] Call Trace: [ 444.383609][T11811] [ 444.386538][T11811] dump_stack_lvl+0x16c/0x1f0 [ 444.391247][T11811] should_fail_ex+0x497/0x5b0 [ 444.395901][T11811] ? fs_reclaim_acquire+0xae/0x150 [ 444.401001][T11811] should_failslab+0xc2/0x120 [ 444.405657][T11811] kmem_cache_alloc_node_noprof+0x71/0x310 [ 444.411440][T11811] ? alloc_vmap_area+0x636/0x2a70 [ 444.416437][T11811] alloc_vmap_area+0x636/0x2a70 [ 444.421264][T11811] ? __pfx_alloc_vmap_area+0x10/0x10 [ 444.426522][T11811] __get_vm_area_node+0x17e/0x2d0 [ 444.431520][T11811] __vmalloc_node_range_noprof+0x26a/0x15a0 [ 444.437390][T11811] ? kernel_clone+0xfd/0x960 [ 444.441971][T11811] ? lockdep_hardirqs_on+0x7c/0x110 [ 444.447154][T11811] ? kernel_clone+0xfd/0x960 [ 444.451721][T11811] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 444.458022][T11811] ? rcu_is_watching+0x12/0xc0 [ 444.462760][T11811] ? trace_kmem_cache_alloc+0x2d/0xe0 [ 444.468117][T11811] ? kmem_cache_alloc_node_noprof+0x1a2/0x310 [ 444.474156][T11811] ? kernel_clone+0xfd/0x960 [ 444.478720][T11811] copy_process+0x3076/0x8cb0 [ 444.483382][T11811] ? kernel_clone+0xfd/0x960 [ 444.487954][T11811] ? __pfx___lock_acquire+0x10/0x10 [ 444.493131][T11811] ? __pfx_copy_process+0x10/0x10 [ 444.498139][T11811] ? get_pid_task+0xfc/0x250 [ 444.502714][T11811] ? __pfx_lock_release+0x10/0x10 [ 444.507715][T11811] ? trace_lock_acquire+0x14a/0x1d0 [ 444.512896][T11811] ? find_held_lock+0x2d/0x110 [ 444.517638][T11811] ? find_held_lock+0x2d/0x110 [ 444.522377][T11811] kernel_clone+0xfd/0x960 [ 444.526768][T11811] ? __pfx_kernel_clone+0x10/0x10 [ 444.531768][T11811] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 444.537719][T11811] __do_sys_clone+0xba/0x100 [ 444.542282][T11811] ? __pfx___do_sys_clone+0x10/0x10 [ 444.547461][T11811] do_syscall_64+0xcd/0x250 [ 444.551936][T11811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.557805][T11811] RIP: 0033:0x7fb6df17e719 [ 444.562203][T11811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.581783][T11811] RSP: 002b:00007fb6dffdffe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 444.590181][T11811] RAX: ffffffffffffffda RBX: 00007fb6df335f80 RCX: 00007fb6df17e719 [ 444.598142][T11811] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000 [ 444.606085][T11811] RBP: 00007fb6dffe0090 R08: 0000000000000000 R09: 0000000000000000 [ 444.614032][T11811] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 444.621974][T11811] R13: 0000000000000000 R14: 00007fb6df335f80 R15: 00007ffd965a8348 [ 444.629923][T11811] [ 444.809304][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 444.963337][T11811] syz.6.1305: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 445.042165][ T8] usb 1-1: ezusb_ihex_firmware_download - request "keyspan/usa28xb.fw" failed [ 445.084532][ T8] usb 1-1: failed to load firmware "keyspan/usa28xb.fw" [ 445.091924][ T8] keyspan 1-1:3.178: probe with driver keyspan failed with error -2 [ 445.120005][ T8] keyspan 1-1:3.116: Keyspan - (without firmware) converter detected [ 445.131583][ T8] usb 1-1: Direct firmware load for keyspan/usa28xb.fw failed with error -2 [ 445.140451][ T8] usb 1-1: Falling back to sysfs fallback for: keyspan/usa28xb.fw [ 445.205447][T11811] [ 445.474992][T11811] CPU: 1 UID: 0 PID: 11811 Comm: syz.6.1305 Not tainted 6.12.0-rc7-syzkaller-00189-ge8bdb3c8be08 #0 [ 445.485807][T11811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 445.495868][T11811] Call Trace: [ 445.499152][T11811] [ 445.502088][T11811] dump_stack_lvl+0x16c/0x1f0 [ 445.505233][T11819] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1307'. [ 445.506761][T11811] warn_alloc+0x24d/0x3a0 [ 445.516061][T11819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1307'. [ 445.519968][T11811] ? __pfx_warn_alloc+0x10/0x10 [ 445.520000][T11811] ? __get_vm_area_node+0x1bc/0x2d0 [ 445.520022][T11811] __vmalloc_node_range_noprof+0xd27/0x15a0 [ 445.520046][T11811] ? lockdep_hardirqs_on+0x7c/0x110 [ 445.520070][T11811] ? kernel_clone+0xfd/0x960 [ 445.520095][T11811] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 445.520117][T11811] ? rcu_is_watching+0x12/0xc0 [ 445.520136][T11811] ? trace_kmem_cache_alloc+0x2d/0xe0 [ 445.520158][T11811] ? kmem_cache_alloc_node_noprof+0x1a2/0x310 [ 445.520179][T11811] ? kernel_clone+0xfd/0x960 [ 445.520199][T11811] copy_process+0x3076/0x8cb0 [ 445.520219][T11811] ? kernel_clone+0xfd/0x960 [ 445.520241][T11811] ? __pfx___lock_acquire+0x10/0x10 [ 445.520268][T11811] ? __pfx_copy_process+0x10/0x10 [ 445.520286][T11811] ? get_pid_task+0xfc/0x250 [ 445.520308][T11811] ? __pfx_lock_release+0x10/0x10 [ 445.520323][T11811] ? trace_lock_acquire+0x14a/0x1d0 [ 445.520349][T11811] ? find_held_lock+0x2d/0x110 [ 445.520376][T11811] ? find_held_lock+0x2d/0x110 [ 445.625605][T11811] kernel_clone+0xfd/0x960 [ 445.630037][T11811] ? __pfx_kernel_clone+0x10/0x10 [ 445.635080][T11811] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 445.641073][T11811] __do_sys_clone+0xba/0x100 [ 445.645674][T11811] ? __pfx___do_sys_clone+0x10/0x10 [ 445.650901][T11811] do_syscall_64+0xcd/0x250 [ 445.655415][T11811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.661323][T11811] RIP: 0033:0x7fb6df17e719 [ 445.665738][T11811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.685351][T11811] RSP: 002b:00007fb6dffdffe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 445.693741][T11811] RAX: ffffffffffffffda RBX: 00007fb6df335f80 RCX: 00007fb6df17e719 [ 445.701711][T11811] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000 [ 445.709654][T11811] RBP: 00007fb6dffe0090 R08: 0000000000000000 R09: 0000000000000000 [ 445.717620][T11811] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 445.725620][T11811] R13: 0000000000000000 R14: 00007fb6df335f80 R15: 00007ffd965a8348 [ 445.733611][T11811] [ 445.800605][T11811] Mem-Info: [ 445.803759][T11811] active_anon:9673 inactive_anon:0 isolated_anon:0 [ 445.803759][T11811] active_file:16161 inactive_file:39132 isolated_file:0 [ 445.803759][T11811] unevictable:768 dirty:408 writeback:0 [ 445.803759][T11811] slab_reclaimable:8616 slab_unreclaimable:103513 [ 445.803759][T11811] mapped:22566 shmem:4325 pagetables:1023 [ 445.803759][T11811] sec_pagetables:0 bounce:0 [ 445.803759][T11811] kernel_misc_reclaimable:0 [ 445.803759][T11811] free:1329207 free_pcp:255 free_cma:0 [ 445.849383][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 445.882282][T11811] Node 0 active_anon:38892kB inactive_anon:0kB active_file:64644kB inactive_file:156456kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:90364kB dirty:1632kB writeback:0kB shmem:15764kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12464kB pagetables:4292kB sec_pagetables:0kB all_unreclaimable? no [ 445.927402][T11811] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 445.973030][T11811] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 446.016423][T11811] lowmem_reserve[]: 0 2461 2461 0 0 [ 446.021785][T11811] Node 0 DMA32 free:1402464kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:38860kB inactive_anon:0kB active_file:64644kB inactive_file:156140kB unevictable:1536kB writepending:1632kB present:3129332kB managed:2549168kB mlocked:0kB bounce:0kB free_pcp:1316kB local_pcp:168kB free_cma:0kB [ 446.079303][T11811] lowmem_reserve[]: 0 0 0 0 0 [ 446.084096][T11811] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:32kB inactive_anon:0kB active_file:0kB inactive_file:316kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:12kB free_cma:0kB [ 446.111055][T11811] lowmem_reserve[]: 0 0 0 0 0 [ 446.113618][T11832] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 446.115762][T11811] Node 1 Normal free:3901360kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 446.240636][T11811] lowmem_reserve[]: 0 0 0 0 0 [ 446.247592][T11811] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 446.276359][T11811] Node 0 DMA32: 47*4kB (UE) 407*8kB (UME) 372*16kB (UME) 574*32kB (UME) 504*64kB (UME) 228*128kB (UME) 142*256kB (UME) 80*512kB (UME) 36*1024kB (UME) 18*2048kB (UME) 280*4096kB (UM) = 1387124kB [ 446.305423][T11811] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 446.320520][T11811] Node 1 Normal: 190*4kB (UE) 35*8kB (UME) 32*16kB (UME) 209*32kB (UME) 78*64kB (UME) 44*128kB (UME) 14*256kB (UME) 10*512kB (UME) 3*1024kB (UME) 4*2048kB (U) 943*4096kB (M) = 3901360kB [ 446.343041][T11811] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 446.460376][T11811] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 446.618805][T11811] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 446.779640][T11811] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 446.849514][ T5874] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 446.879386][T11811] 62491 total pagecache pages [ 446.884303][T11811] 0 pages in swap cache [ 446.888520][T11811] Free swap = 124676kB [ 446.892825][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 446.900124][T11811] Total swap = 124996kB [ 446.904326][T11811] 2097051 pages RAM [ 446.908585][T11811] 0 pages HighMem/MovableOnly [ 446.917374][T11811] 428037 pages reserved [ 446.924590][T11811] 0 pages cma reserved [ 447.227863][T11844] trusted_key: encrypted_key: key user:syz not found [ 447.658645][ T29] audit: type=1400 audit(1731791414.756:1036): avc: denied { watch watch_reads } for pid=11837 comm="syz.6.1314" path="/proc/557" dev="proc" ino=29591 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 447.731209][T11846] overlayfs: failed to resolve './file1': -2 [ 447.929377][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 447.943271][ T29] audit: type=1400 audit(1731791414.866:1037): avc: denied { mounton } for pid=11837 comm="syz.6.1314" path="/168/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 448.100914][ T29] audit: type=1400 audit(1731791415.216:1038): avc: denied { unmount } for pid=8020 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 448.311248][ T5828] Bluetooth: hci2: command 0x0406 tx timeout [ 448.969357][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 448.979240][ C1] hrtimer: interrupt took 38220 ns [ 449.293090][T11884] No buffer was provided with the request [ 449.305155][ T29] audit: type=1400 audit(1731791416.416:1039): avc: denied { read } for pid=11850 comm="syz.1.1319" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 449.691717][ T5874] usb 4-1: device descriptor read/64, error -71 [ 449.835898][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 449.844787][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 449.852966][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 449.862325][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 449.870188][ T5836] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 449.878718][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 450.009296][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 450.208025][ T5874] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 450.494490][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 8192, setting to 1024 [ 450.527759][ T5874] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1024 [ 450.619087][ T5874] usb 4-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice=56.12 [ 450.631734][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.647878][ T5874] usb 4-1: config 0 descriptor?? [ 450.657641][ T5874] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 450.744207][T11932] bridge0: port 4(gretap0) entered blocking state [ 450.759427][T11932] bridge0: port 4(gretap0) entered disabled state [ 450.775551][T11932] gretap0: entered allmulticast mode [ 450.786376][T11932] gretap0: entered promiscuous mode [ 450.878123][T11918] chnl_net:caif_netlink_parms(): no params data found [ 450.965926][T11936] trusted_key: encrypted_key: key user:syz not found [ 451.049276][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 451.500987][T11918] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.547737][T11918] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.619972][T11918] bridge_slave_0: entered allmulticast mode [ 451.633454][T11918] bridge_slave_0: entered promiscuous mode [ 451.669295][T11918] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.676926][T11918] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.746508][T11918] bridge_slave_1: entered allmulticast mode [ 451.943471][T11918] bridge_slave_1: entered promiscuous mode [ 451.961796][ T5828] Bluetooth: hci5: command tx timeout [ 452.089321][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 452.126672][T11918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.143043][ T29] audit: type=1400 audit(1731791419.256:1040): avc: denied { mount } for pid=11947 comm="syz.0.1331" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 452.151313][T11918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.273189][T11918] team0: Port device team_slave_0 added [ 452.292919][T11918] team0: Port device team_slave_1 added [ 452.337905][T11918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.355620][T11918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.379382][ T29] audit: type=1400 audit(1731791419.486:1041): avc: denied { getopt } for pid=11957 comm="syz.0.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 452.456619][T11963] VFS: unable to find oldfs superblock on device nullb0 [ 452.605178][T11918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.843395][T11918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.958070][T11918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.966223][ T5873] usb 4-1: USB disconnect, device number 20 [ 453.016333][T11918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.129280][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 453.609123][ T29] audit: type=1400 audit(1731791420.706:1042): avc: denied { getopt } for pid=11970 comm="syz.6.1338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 453.787771][T11918] hsr_slave_0: entered promiscuous mode [ 453.794889][T11918] hsr_slave_1: entered promiscuous mode [ 453.815607][T11918] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 453.833834][T11918] Cannot create hsr debugfs directory [ 454.069493][ T5828] Bluetooth: hci5: command tx timeout [ 454.169352][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 454.348557][T11918] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 454.551297][T11984] tipc: Started in network mode [ 454.556886][T11984] tipc: Node identity f7, cluster identity 4711 [ 454.609639][T11984] tipc: Node number set to 247 [ 454.650599][T11918] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 454.674443][T11918] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 454.744525][T11918] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 454.989965][T11991] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1342'. [ 455.013507][T11991] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.022295][T11991] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.031035][T11991] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.040127][T11991] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.049166][T11991] vxlan0: entered promiscuous mode [ 455.183518][T11918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.209273][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 455.525134][T11918] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.558904][ T5966] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.566085][ T5966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.595669][ T6069] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.602849][ T6069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.819456][ T29] audit: type=1400 audit(1731791422.786:1043): avc: denied { bind } for pid=11996 comm="syz.0.1346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 455.921764][ T29] audit: type=1400 audit(1731791422.786:1044): avc: denied { listen } for pid=11996 comm="syz.0.1346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 455.963797][T11918] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 455.974247][T11918] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 455.984660][ T29] audit: type=1400 audit(1731791422.796:1045): avc: denied { accept } for pid=11996 comm="syz.0.1346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 456.009623][ T29] audit: type=1400 audit(1731791422.816:1046): avc: denied { read } for pid=11996 comm="syz.0.1346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 456.108629][ T5828] Bluetooth: hci5: command tx timeout [ 456.175208][ T29] audit: type=1400 audit(1731791423.286:1047): avc: denied { append } for pid=11994 comm="syz.3.1345" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 456.249430][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 456.451514][T12012] VFS: unable to find oldfs superblock on device nullb0 [ 456.468748][T12012] ax25_connect(): syz.6.1348 uses autobind, please contact jreuter@yaina.de [ 457.136244][T11918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.289277][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 458.179493][ T5828] Bluetooth: hci5: command tx timeout [ 458.266603][T11918] veth0_vlan: entered promiscuous mode [ 458.329302][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 458.812516][T11918] veth1_vlan: entered promiscuous mode [ 458.884450][T11918] veth0_macvtap: entered promiscuous mode [ 458.894390][T11918] veth1_macvtap: entered promiscuous mode [ 458.908810][T11918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.940510][T11918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.000006][T11918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.011893][T11918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.102606][T11918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.113493][T11918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.123467][T11918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.134245][T11918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.144617][T11918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.155119][T11918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.166773][T11918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.369279][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 459.602039][T11918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.615781][T11918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.634537][T11918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.645408][T11918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.655492][T11918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.666411][T11918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.676410][T11918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.687006][T11918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.696911][T11918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.707374][T11918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.720733][T11918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.730796][T11918] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.739523][T11918] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.748326][T11918] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.757853][T11918] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.898131][T12038] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1353'. [ 459.986449][ T5973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.004351][ T5973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.068172][ T5973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.087104][ T5973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.108200][ T29] audit: type=1400 audit(1731791427.216:1048): avc: denied { mounton } for pid=11918 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 460.409321][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 460.883238][T12050] FAULT_INJECTION: forcing a failure. [ 460.883238][T12050] name failslab, interval 1, probability 0, space 0, times 0 [ 460.919497][T12050] CPU: 1 UID: 0 PID: 12050 Comm: syz.1.1356 Not tainted 6.12.0-rc7-syzkaller-00189-ge8bdb3c8be08 #0 [ 460.930302][T12050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 460.940362][T12050] Call Trace: [ 460.943642][T12050] [ 460.946573][T12050] dump_stack_lvl+0x16c/0x1f0 [ 460.951260][T12050] should_fail_ex+0x497/0x5b0 [ 460.955942][T12050] ? fs_reclaim_acquire+0xae/0x150 [ 460.961056][T12050] should_failslab+0xc2/0x120 [ 460.965742][T12050] kmem_cache_alloc_node_noprof+0x71/0x310 [ 460.971555][T12050] ? __alloc_skb+0x2b1/0x380 [ 460.976152][T12050] __alloc_skb+0x2b1/0x380 [ 460.980581][T12050] ? __pfx___alloc_skb+0x10/0x10 [ 460.985528][T12050] ? rtnetlink_rcv_msg+0x3e6/0xea0 [ 460.990655][T12050] netlink_ack+0x164/0xb90 [ 460.995081][T12050] netlink_rcv_skb+0x348/0x440 [ 460.999849][T12050] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 461.005313][T12050] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 461.010615][T12050] ? netlink_deliver_tap+0x1ae/0xd90 [ 461.015915][T12050] netlink_unicast+0x53c/0x7f0 [ 461.020674][T12050] ? __pfx_netlink_unicast+0x10/0x10 [ 461.025950][T12050] netlink_sendmsg+0x8b8/0xd70 [ 461.030700][T12050] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.035979][T12050] ____sys_sendmsg+0xaaf/0xc90 [ 461.040735][T12050] ? copy_msghdr_from_user+0x10b/0x160 [ 461.046179][T12050] ? __pfx_____sys_sendmsg+0x10/0x10 [ 461.051460][T12050] ? __pfx___lock_acquire+0x10/0x10 [ 461.056647][T12050] ___sys_sendmsg+0x135/0x1e0 [ 461.061311][T12050] ? __pfx____sys_sendmsg+0x10/0x10 [ 461.066507][T12050] ? lock_acquire+0x2f/0xb0 [ 461.070997][T12050] ? __fget_files+0x40/0x3f0 [ 461.075585][T12050] ? fdget+0x176/0x210 [ 461.079648][T12050] __sys_sendmsg+0x117/0x1f0 [ 461.084226][T12050] ? __pfx___sys_sendmsg+0x10/0x10 [ 461.089333][T12050] ? __fget_files+0x244/0x3f0 [ 461.094027][T12050] do_syscall_64+0xcd/0x250 [ 461.098520][T12050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.104406][T12050] RIP: 0033:0x7f877bb7e719 [ 461.108821][T12050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.128437][T12050] RSP: 002b:00007f877c932038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 461.136847][T12050] RAX: ffffffffffffffda RBX: 00007f877bd35f80 RCX: 00007f877bb7e719 [ 461.144809][T12050] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 461.152769][T12050] RBP: 00007f877c932090 R08: 0000000000000000 R09: 0000000000000000 [ 461.160725][T12050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.168679][T12050] R13: 0000000000000000 R14: 00007f877bd35f80 R15: 00007ffdd47efc28 [ 461.176645][T12050] [ 461.459321][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 462.260002][T12063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1359'. [ 462.499293][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 463.284465][T12073] 9pnet_fd: Insufficient options for proto=fd [ 463.529273][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 464.569479][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 465.609290][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 465.986866][T12111] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1371'. [ 466.376113][T12139] VFS: unable to find oldfs superblock on device nullb0 [ 466.659282][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 466.997824][ T29] audit: type=1326 audit(1731791434.106:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12115 comm="syz.7.1372" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b1ab7e719 code=0x0 [ 467.212866][T12146] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 467.579321][ T29] audit: type=1400 audit(1731791434.676:1050): avc: denied { write } for pid=12147 comm="syz.7.1375" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 467.699275][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 468.059406][ T29] audit: type=1400 audit(1731791435.166:1051): avc: denied { ioctl } for pid=12151 comm="syz.3.1376" path="socket:[30324]" dev="sockfs" ino=30324 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 468.079535][ T5828] Bluetooth: hci2: unexpected event 0x01 length: 4 > 1 [ 468.150696][T12156] xt_connbytes: Forcing CT accounting to be enabled [ 468.232408][T12156] Cannot find del_set index 1 as target [ 468.729287][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 469.187961][ T29] audit: type=1400 audit(1731791436.296:1052): avc: denied { getopt } for pid=12163 comm="syz.6.1380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 469.445975][ T29] audit: type=1400 audit(1731791436.556:1053): avc: denied { setopt } for pid=12174 comm="syz.3.1384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 469.769276][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 469.828831][T12182] loop9: detected capacity change from 0 to 6 [ 469.984029][T12182] Dev loop9: unable to read RDB block 6 [ 469.991256][T12182] loop9: unable to read partition table [ 470.001187][T12182] loop9: partition table beyond EOD, truncated [ 470.008002][T12182] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 470.008002][T12182] ) failed (rc=-5) [ 470.809280][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 471.055456][T12187] FAULT_INJECTION: forcing a failure. [ 471.055456][T12187] name failslab, interval 1, probability 0, space 0, times 0 [ 471.068498][T12187] CPU: 0 UID: 0 PID: 12187 Comm: syz.3.1387 Not tainted 6.12.0-rc7-syzkaller-00189-ge8bdb3c8be08 #0 [ 471.079269][T12187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 471.089331][T12187] Call Trace: [ 471.092611][T12187] [ 471.095541][T12187] dump_stack_lvl+0x16c/0x1f0 [ 471.100228][T12187] should_fail_ex+0x497/0x5b0 [ 471.104912][T12187] should_failslab+0xc2/0x120 [ 471.109597][T12187] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 471.114970][T12187] ? dev_queue_xmit_nit+0x43/0xba0 [ 471.120085][T12187] ? skb_clone+0x190/0x3f0 [ 471.124511][T12187] skb_clone+0x190/0x3f0 [ 471.128762][T12187] dev_queue_xmit_nit+0x38f/0xba0 [ 471.133796][T12187] dev_hard_start_xmit+0x56/0x790 [ 471.138827][T12187] ? __dev_queue_xmit+0x252/0x4350 [ 471.143948][T12187] __dev_queue_xmit+0x7c7/0x4350 [ 471.148906][T12187] ? __pfx___dev_queue_xmit+0x10/0x10 [ 471.154316][T12187] ? __asan_memcpy+0x3c/0x60 [ 471.158906][T12187] ? __asan_memcpy+0x3c/0x60 [ 471.163497][T12187] ? __skb_clone+0x570/0x760 [ 471.168096][T12187] netlink_deliver_tap+0xa7d/0xd90 [ 471.173221][T12187] netlink_unicast+0x6b4/0x7f0 [ 471.177995][T12187] ? __pfx_netlink_unicast+0x10/0x10 [ 471.183284][T12187] ? genl_rcv_msg+0x4bd/0x800 [ 471.187971][T12187] netlink_ack+0x6a8/0xb90 [ 471.192399][T12187] netlink_rcv_skb+0x348/0x440 [ 471.197171][T12187] ? __pfx_genl_rcv_msg+0x10/0x10 [ 471.202205][T12187] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 471.207503][T12187] ? down_read+0xc9/0x330 [ 471.211837][T12187] ? __pfx_down_read+0x10/0x10 [ 471.216608][T12187] ? netlink_deliver_tap+0x1ae/0xd90 [ 471.221910][T12187] genl_rcv+0x28/0x40 [ 471.225891][T12187] netlink_unicast+0x53c/0x7f0 [ 471.230661][T12187] ? __pfx_netlink_unicast+0x10/0x10 [ 471.235962][T12187] netlink_sendmsg+0x8b8/0xd70 [ 471.240744][T12187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.246047][T12187] ____sys_sendmsg+0xaaf/0xc90 [ 471.250822][T12187] ? copy_msghdr_from_user+0x10b/0x160 [ 471.256288][T12187] ? __pfx_____sys_sendmsg+0x10/0x10 [ 471.261591][T12187] ? __pfx___lock_acquire+0x10/0x10 [ 471.266800][T12187] ___sys_sendmsg+0x135/0x1e0 [ 471.271486][T12187] ? __pfx____sys_sendmsg+0x10/0x10 [ 471.276701][T12187] ? lock_acquire+0x2f/0xb0 [ 471.281202][T12187] ? __fget_files+0x40/0x3f0 [ 471.285792][T12187] ? fdget+0x176/0x210 [ 471.289852][T12187] __sys_sendmsg+0x117/0x1f0 [ 471.294427][T12187] ? __pfx___sys_sendmsg+0x10/0x10 [ 471.299526][T12187] ? __fget_files+0x244/0x3f0 [ 471.304210][T12187] do_syscall_64+0xcd/0x250 [ 471.308695][T12187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.314581][T12187] RIP: 0033:0x7f561c17e719 [ 471.318989][T12187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.338580][T12187] RSP: 002b:00007f561d052038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 471.346975][T12187] RAX: ffffffffffffffda RBX: 00007f561c335f80 RCX: 00007f561c17e719 [ 471.354930][T12187] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 471.362883][T12187] RBP: 00007f561d052090 R08: 0000000000000000 R09: 0000000000000000 [ 471.370836][T12187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 471.378786][T12187] R13: 0000000000000000 R14: 00007f561c335f80 R15: 00007ffd573eb5a8 [ 471.386749][T12187] [ 471.466330][T12192] x_tables: duplicate underflow at hook 1 [ 471.489774][ T29] audit: type=1400 audit(1731791438.506:1054): avc: denied { write } for pid=12185 comm="syz.6.1388" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 471.635561][ T5836] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 471.833602][ T5832] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 471.841473][ T5832] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 471.849282][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 472.739902][T12199] trusted_key: encrypted_key: key user:syz not found [ 472.900810][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 473.638951][ T5832] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 473.723871][T12205] VFS: unable to find oldfs superblock on device nullb0 [ 473.929296][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 474.268500][ T5836] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 474.390610][ T5836] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 474.979285][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 475.368453][ T29] audit: type=1400 audit(1731791442.476:1055): avc: denied { listen } for pid=12217 comm="syz.6.1395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 475.409516][ T29] audit: type=1400 audit(1731791442.506:1056): avc: denied { shutdown } for pid=12211 comm="syz.7.1394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 476.019271][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 476.394235][T12194] chnl_net:caif_netlink_parms(): no params data found [ 476.642937][T12194] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.651407][T12194] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.658636][T12194] bridge_slave_0: entered allmulticast mode [ 476.665439][T12194] bridge_slave_0: entered promiscuous mode [ 476.666361][ T5836] Bluetooth: hci6: command tx timeout [ 476.674528][T12194] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.687799][T12194] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.702545][T12194] bridge_slave_1: entered allmulticast mode [ 476.710526][T12194] bridge_slave_1: entered promiscuous mode [ 477.059284][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 477.237951][T12194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.249918][T12194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.288806][T12194] team0: Port device team_slave_0 added [ 477.300356][T12194] team0: Port device team_slave_1 added [ 477.338321][T12194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.345466][T12194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.383014][T12194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.421559][T12194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.428530][T12194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.455061][T12194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.548317][T12194] hsr_slave_0: entered promiscuous mode [ 477.568315][T12194] hsr_slave_1: entered promiscuous mode [ 477.601362][T12194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 477.622041][T12194] Cannot create hsr debugfs directory [ 477.627593][T12247] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=12247 comm=syz.6.1400 [ 477.902325][ T5828] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 477.914720][ T5828] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 477.922769][ T5828] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 477.943603][ T5828] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 477.952060][T12194] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 477.960815][ T5828] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 478.025537][T12257] trusted_key: encrypted_key: key user:syz not found [ 478.089293][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 478.181256][ T5828] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 478.205872][T12194] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 478.469576][T12194] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 478.493247][T12194] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 478.745137][T12194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.759284][ T5828] Bluetooth: hci6: command tx timeout [ 478.797843][T12194] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.846002][ T5966] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.853171][ T5966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.868576][ T5966] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.875737][ T5966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.887309][T12253] chnl_net:caif_netlink_parms(): no params data found [ 479.038183][T12253] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.062742][T12253] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.072050][T12253] bridge_slave_0: entered allmulticast mode [ 479.081708][T12253] bridge_slave_0: entered promiscuous mode [ 479.107101][T12253] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.126133][T12253] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.133265][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 479.147835][T12253] bridge_slave_1: entered allmulticast mode [ 479.156546][T12253] bridge_slave_1: entered promiscuous mode [ 479.230002][T12253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.260871][T12253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.356604][T12253] team0: Port device team_slave_0 added [ 479.378376][T12253] team0: Port device team_slave_1 added [ 479.446255][T12253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.470506][T12253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.549497][T12253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.573661][T12253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.587600][T12253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.728440][T12253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.807258][T12194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.169326][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 480.255296][T12253] hsr_slave_0: entered promiscuous mode [ 480.261719][T12253] hsr_slave_1: entered promiscuous mode [ 480.268456][T12253] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 480.276468][T12253] Cannot create hsr debugfs directory [ 480.329504][ T5828] Bluetooth: hci7: command tx timeout [ 480.622719][T12253] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 480.664445][T12253] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 480.706756][T12253] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 480.735972][T12253] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 480.768960][T12194] veth0_vlan: entered promiscuous mode [ 480.792767][T12194] veth1_vlan: entered promiscuous mode [ 480.809908][ T5828] Bluetooth: hci6: command tx timeout [ 480.925445][T12253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.947235][T12194] veth0_macvtap: entered promiscuous mode [ 480.970297][T12194] veth1_macvtap: entered promiscuous mode [ 480.978600][T12253] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.993572][T12194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.004903][T12194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.015289][T12194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.027401][T12194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.037754][T12194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.050546][T12194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.060682][T12194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.071744][T12194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.081891][T12194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.093029][T12194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.105819][T12194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.118638][T12194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.140224][T12194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.153216][T12194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.164210][T12194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.178537][T12194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.189523][T12194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.200300][T12194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.211001][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 481.300430][T12194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.316730][T12194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.329090][T12194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.340721][T12194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.351360][T12194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.361798][T12194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.372711][T12194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.388378][T12194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.528642][ T5982] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.535791][ T5982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.635748][T12194] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.655369][T12194] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.749827][T12194] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.758626][T12194] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.806811][ T6069] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.814043][ T6069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.886521][T12253] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 481.897199][T12253] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 482.249278][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 482.410825][ T5828] Bluetooth: hci7: command tx timeout [ 482.459475][ T5873] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 482.602156][ T5982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.618321][ T5982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.643777][T12253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.652973][ T29] audit: type=1400 audit(1731791449.766:1057): avc: denied { create } for pid=12324 comm="syz.3.1414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 482.674796][ T5977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.676604][ T29] audit: type=1400 audit(1731791449.786:1058): avc: denied { write } for pid=12324 comm="syz.3.1414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 482.703657][ T5977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.814603][T12332] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 482.893137][ T5828] Bluetooth: hci6: command tx timeout [ 483.289363][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 483.547618][T12253] veth0_vlan: entered promiscuous mode [ 483.820618][T12253] veth1_vlan: entered promiscuous mode [ 484.218585][ T5828] Bluetooth: hci5: command tx timeout [ 484.266249][T12253] veth0_macvtap: entered promiscuous mode [ 484.303428][T12253] veth1_macvtap: entered promiscuous mode [ 484.329469][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 484.360014][T12253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.370628][T12253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.380583][T12253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.391108][T12253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.401002][T12253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.411675][T12253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.421565][T12253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.432424][T12253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.442653][T12253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.453313][T12253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.463179][T12253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.473666][T12253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.483562][T12253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.494862][T12253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.499820][ T5828] Bluetooth: hci7: command tx timeout [ 484.507907][T12253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.519097][T12253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.530065][T12253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.540499][T12253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.551135][T12253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.561047][T12253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.571618][T12253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.581495][T12253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.592041][T12253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.602064][T12253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.612625][T12253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.628094][T12253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.639025][T12253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.649342][T12253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.660107][T12253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.672559][T12253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.802921][T12253] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.812072][T12253] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.820891][T12253] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.829721][T12253] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.369282][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 485.571206][T12362] tipc: Started in network mode [ 485.588634][T12362] tipc: Node identity 7ff, cluster identity 4711 [ 485.609307][T12362] tipc: Node number set to 2047 [ 485.678430][T12370] No buffer was provided with the request [ 485.745679][ T5828] Bluetooth: hci2: Malformed LE Event: 0x0d [ 486.199554][ T51] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 486.268772][ T5973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.285774][ T5973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.319382][ T5990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.327466][ T5990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.409283][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 486.476047][ T51] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 8192, setting to 1024 [ 486.487448][ T51] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1024 [ 486.498550][ T51] usb 9-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice=56.12 [ 486.507657][ T51] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.522192][ T51] usb 9-1: config 0 descriptor?? [ 486.531277][ T51] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 486.574145][ T5828] Bluetooth: hci7: command tx timeout [ 486.739698][ T51] usb 9-1: USB disconnect, device number 2 [ 487.449399][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 488.433859][T12414] trusted_key: encrypted_key: key user:syz not found [ 488.499254][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 488.910327][T12418] binder: BINDER_SET_CONTEXT_MGR already set [ 488.916352][T12418] binder: 12416:12418 ioctl 40046207 0 returned -16 [ 488.982538][T12418] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 488.990028][T12418] IPv6: NLM_F_CREATE should be set when creating new route [ 488.997220][T12418] IPv6: NLM_F_CREATE should be set when creating new route [ 489.301260][T12428] bridge0: port 4(gretap0) entered disabled state [ 489.529584][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 490.107119][T12428] bridge0: port 3(syz_tun) entered disabled state [ 490.165616][ T29] audit: type=1400 audit(1731791457.256:1059): avc: denied { listen } for pid=12430 comm="syz.7.1436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 490.249431][ T51] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 490.336469][ T29] audit: type=1400 audit(1731791457.426:1060): avc: denied { read } for pid=12430 comm="syz.7.1436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 490.344408][T12428] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.473817][T12428] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.474471][ T51] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 490.493717][ T51] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.537812][ T29] audit: type=1400 audit(1731791457.636:1061): avc: denied { mount } for pid=12438 comm="syz.6.1437" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 490.543748][ T51] usb 9-1: config 0 descriptor?? [ 490.569274][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 491.036569][ T51] usb 9-1: string descriptor 0 read error: -71 [ 491.047286][ T51] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 491.056760][ T51] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 491.069963][ T51] [drm:udl_init] *ERROR* Selecting channel failed [ 491.096816][ T51] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 2 [ 491.116637][ T51] [drm] Initialized udl on minor 2 [ 491.133729][ T51] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 491.149518][ T51] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 491.160659][ T5874] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 491.172690][T12449] netlink: 'syz.9.1440': attribute type 5 has an invalid length. [ 491.178094][ T5874] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 491.193032][ T51] usb 9-1: USB disconnect, device number 3 [ 491.194897][ T7460] udevd[7460]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 491.289371][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 491.508371][T12453] tmpfs: Bad value for 'mpol' [ 491.619291][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 492.359302][ T5874] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 492.555965][ T2141] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 492.584379][ T29] audit: type=1400 audit(1731791459.676:1062): avc: denied { ioctl } for pid=12462 comm="syz.8.1445" path="socket:[33688]" dev="sockfs" ino=33688 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 492.638863][T12467] bridge0: port 3(gretap0) entered blocking state [ 492.645647][T12467] bridge0: port 3(gretap0) entered disabled state [ 492.652470][T12467] gretap0: entered allmulticast mode [ 492.658290][T12467] gretap0: entered promiscuous mode [ 492.659267][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 492.663889][T12467] bridge0: port 3(gretap0) entered blocking state [ 492.676834][T12467] bridge0: port 3(gretap0) entered forwarding state [ 492.684076][ T5874] usb 10-1: Using ep0 maxpacket: 16 [ 492.691059][ T5874] usb 10-1: config index 0 descriptor too short (expected 256, got 18) [ 492.699472][ T5874] usb 10-1: config 0 has an invalid descriptor of length 70, skipping remainder of the config [ 492.715996][ T5874] usb 10-1: config 0 has no interfaces? [ 492.755064][ T5874] usb 10-1: New USB device found, idVendor=14aa, idProduct=0301, bcdDevice=ec.51 [ 492.766784][ T5874] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.777726][ T2141] usb 8-1: Using ep0 maxpacket: 16 [ 492.795466][ T5874] usb 10-1: Product: syz [ 492.804748][ T5874] usb 10-1: Manufacturer: syz [ 492.811597][ T5874] usb 10-1: SerialNumber: syz [ 492.811698][ T2141] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 492.827747][ T2141] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.845633][ T2141] usb 8-1: Product: syz [ 492.850604][ T5874] usb 10-1: config 0 descriptor?? [ 492.857723][ T2141] usb 8-1: Manufacturer: syz [ 492.866821][ T2141] usb 8-1: SerialNumber: syz [ 492.881192][ T2141] r8152-cfgselector 8-1: Unknown version 0x0000 [ 492.887456][ T2141] r8152-cfgselector 8-1: config 0 descriptor?? [ 493.107602][ T5874] usb 10-1: USB disconnect, device number 2 [ 493.115286][ T29] audit: type=1400 audit(1731791460.226:1063): avc: denied { bind } for pid=12456 comm="syz.7.1443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 493.203189][ T29] audit: type=1400 audit(1731791460.316:1064): avc: denied { unmount } for pid=8020 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 493.264151][ T5836] Bluetooth: hci4: unexpected event for opcode 0x0c05 [ 493.298648][T12473] netlink: 'syz.3.1448': attribute type 1 has an invalid length. [ 493.306880][T12473] netlink: 9352 bytes leftover after parsing attributes in process `syz.3.1448'. [ 493.316360][T12473] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1448'. [ 493.416485][ T9] r8152-cfgselector 8-1: USB disconnect, device number 3 [ 493.423009][T12476] FAULT_INJECTION: forcing a failure. [ 493.423009][T12476] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.699289][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 494.062902][T12476] CPU: 1 UID: 0 PID: 12476 Comm: syz.3.1449 Not tainted 6.12.0-rc7-syzkaller-00189-ge8bdb3c8be08 #0 [ 494.073689][T12476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 494.083739][T12476] Call Trace: [ 494.086994][T12476] [ 494.089899][T12476] dump_stack_lvl+0x16c/0x1f0 [ 494.094549][T12476] should_fail_ex+0x497/0x5b0 [ 494.099214][T12476] _copy_to_user+0x32/0xd0 [ 494.103625][T12476] simple_read_from_buffer+0xd0/0x160 [ 494.108981][T12476] proc_fail_nth_read+0x198/0x270 [ 494.113988][T12476] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 494.119516][T12476] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 494.125066][T12476] vfs_read+0x1df/0xbe0 [ 494.129286][T12476] ? __pfx_vfs_read+0x10/0x10 [ 494.133995][T12476] ? do_sys_openat2+0xb1/0x1e0 [ 494.138766][T12476] ? __pfx_do_sys_openat2+0x10/0x10 [ 494.143995][T12476] ksys_read+0x12f/0x260 [ 494.148256][T12476] ? __pfx_ksys_read+0x10/0x10 [ 494.153037][T12476] do_syscall_64+0xcd/0x250 [ 494.157556][T12476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.163461][T12476] RIP: 0033:0x7f561c17d15c [ 494.167881][T12476] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 494.187502][T12476] RSP: 002b:00007f561d052030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 494.195931][T12476] RAX: ffffffffffffffda RBX: 00007f561c335f80 RCX: 00007f561c17d15c [ 494.203908][T12476] RDX: 000000000000000f RSI: 00007f561d0520a0 RDI: 0000000000000006 [ 494.211879][T12476] RBP: 00007f561d052090 R08: 0000000000000000 R09: 0000000000000000 [ 494.219851][T12476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.227823][T12476] R13: 0000000000000000 R14: 00007f561c335f80 R15: 00007ffd573eb5a8 [ 494.235793][T12476] [ 494.515187][T12498] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1456'. [ 494.615211][T12501] VFS: unable to find oldfs superblock on device nullb0 [ 494.729277][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 495.087395][T12506] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 495.779278][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 496.799435][ T5873] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 496.809261][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 497.835839][T12539] netlink: 256 bytes leftover after parsing attributes in process `syz.8.1466'. [ 497.849653][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 497.910057][ T5873] usb 8-1: Using ep0 maxpacket: 8 [ 498.086317][ T29] audit: type=1400 audit(1731791465.106:1065): avc: denied { map } for pid=12526 comm="syz.6.1464" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 498.456894][ T5873] usb 8-1: unable to get BOS descriptor or descriptor too short [ 498.467718][ T5873] usb 8-1: config 9 has an invalid interface number: 20 but max is 0 [ 498.481615][ T5873] usb 8-1: config 9 has no interface number 0 [ 498.487717][ T5873] usb 8-1: config 9 interface 20 altsetting 5 endpoint 0x6 has invalid maxpacket 1128, setting to 1024 [ 498.500280][ T5873] usb 8-1: config 9 interface 20 altsetting 5 bulk endpoint 0x6 has invalid maxpacket 1024 [ 498.510679][ T5873] usb 8-1: config 9 interface 20 has no altsetting 0 [ 498.524186][T12545] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1467'. [ 498.563714][ T5873] usb 8-1: string descriptor 0 read error: -22 [ 498.603976][ T5873] usb 8-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=12.fe [ 498.685579][ T5873] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.695293][ T29] audit: type=1400 audit(1731791465.806:1066): avc: denied { audit_read } for pid=12548 comm="syz.3.1469" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 498.703804][T12552] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 498.889277][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 499.546867][ T5873] usb 8-1: can't set config #9, error -71 [ 499.555804][ T5873] usb 8-1: USB disconnect, device number 4 [ 499.929320][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 500.202723][T12581] VFS: unable to find oldfs superblock on device nullb0 [ 500.809567][ T5836] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 500.969263][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 501.052155][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.060117][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.103781][T12600] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 501.759338][ T29] audit: type=1400 audit(1731791468.426:1067): avc: denied { write } for pid=12599 comm="syz.3.1483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 502.009286][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 502.633350][ T5873] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 503.059395][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 504.084319][ T5872] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 504.091913][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 504.339242][ T5872] usb 8-1: Using ep0 maxpacket: 8 [ 504.359561][ T5836] Bluetooth: hci7: command tx timeout [ 504.694601][T12633] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 504.954493][ T29] audit: type=1804 audit(1731791471.926:1068): pid=12635 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.1494" name="/newroot/215/file0/bus" dev="ramfs" ino=35168 res=1 errno=0 [ 504.954522][ T29] audit: type=1800 audit(1731791472.066:1069): pid=12635 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.1494" name="bus" dev="ramfs" ino=35168 res=0 errno=0 [ 505.011846][ C1] vkms_vblank_simulate: vblank timer overrun [ 505.062410][ T5836] Bluetooth: hci5: command tx timeout [ 505.129249][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 505.201351][T12647] vhost-12645: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 505.311215][T12647] CPU: 1 UID: 0 PID: 12647 Comm: vhost-12645 Not tainted 6.12.0-rc7-syzkaller-00189-ge8bdb3c8be08 #0 [ 505.322113][T12647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 505.332154][T12647] Call Trace: [ 505.335429][T12647] [ 505.338351][T12647] dump_stack_lvl+0x16c/0x1f0 [ 505.343022][T12647] warn_alloc+0x24d/0x3a0 [ 505.347340][T12647] ? __pfx_warn_alloc+0x10/0x10 [ 505.352195][T12647] ? __get_vm_area_node+0x190/0x2d0 [ 505.357368][T12647] ? __get_vm_area_node+0x1bc/0x2d0 [ 505.362552][T12647] __vmalloc_node_range_noprof+0x114a/0x15a0 [ 505.368531][T12647] ? finish_task_switch.isra.0+0x217/0xcc0 [ 505.374328][T12647] ? __pfx___lock_acquire+0x10/0x10 [ 505.379510][T12647] ? kcov_remote_start+0x501/0x6e0 [ 505.384606][T12647] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 505.390923][T12647] ? kcov_remote_start+0x4dc/0x6e0 [ 505.396020][T12647] ? do_raw_spin_lock+0x12d/0x2c0 [ 505.401026][T12647] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 505.406395][T12647] ? kcov_remote_start+0x501/0x6e0 [ 505.411487][T12647] vmalloc_noprof+0x6b/0x90 [ 505.415966][T12647] ? kcov_remote_start+0x501/0x6e0 [ 505.421054][T12647] kcov_remote_start+0x501/0x6e0 [ 505.425973][T12647] vhost_run_work_list+0x163/0x210 [ 505.431066][T12647] ? __pfx_vhost_run_work_list+0x10/0x10 [ 505.436701][T12647] vhost_task_fn+0x158/0x420 [ 505.441290][T12647] ? __pfx_vhost_task_fn+0x10/0x10 [ 505.446397][T12647] ? ret_from_fork+0x23/0x80 [ 505.450968][T12647] ? __pfx_lock_release+0x10/0x10 [ 505.455983][T12647] ? cgroup_freezing+0x155/0x3d0 [ 505.460928][T12647] ? __pfx_vhost_task_fn+0x10/0x10 [ 505.466050][T12647] ? __pfx_vhost_task_fn+0x10/0x10 [ 505.471153][T12647] ret_from_fork+0x45/0x80 [ 505.475549][T12647] ? __pfx_vhost_task_fn+0x10/0x10 [ 505.480657][T12647] ret_from_fork_asm+0x1a/0x30 [ 505.485408][T12647] [ 505.488479][ C1] vkms_vblank_simulate: vblank timer overrun [ 505.514731][T12647] Mem-Info: [ 505.517984][T12647] active_anon:13106 inactive_anon:0 isolated_anon:0 [ 505.517984][T12647] active_file:17089 inactive_file:39161 isolated_file:0 [ 505.517984][T12647] unevictable:768 dirty:393 writeback:0 [ 505.517984][T12647] slab_reclaimable:8665 slab_unreclaimable:113333 [ 505.517984][T12647] mapped:41121 shmem:7170 pagetables:1100 [ 505.517984][T12647] sec_pagetables:0 bounce:0 [ 505.517984][T12647] kernel_misc_reclaimable:0 [ 505.517984][T12647] free:1284750 free_pcp:379 free_cma:0 [ 505.563252][ C1] vkms_vblank_simulate: vblank timer overrun [ 505.579369][T12647] Node 0 active_anon:52924kB inactive_anon:0kB active_file:68356kB inactive_file:156572kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:165084kB dirty:1572kB writeback:0kB shmem:27744kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13288kB pagetables:4500kB sec_pagetables:0kB all_unreclaimable? no [ 505.651586][T12647] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 505.694617][T12647] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 505.743929][T12647] lowmem_reserve[]: 0 2461 2461 0 0 [ 505.752996][T12647] Node 0 DMA32 free:1202560kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:63892kB inactive_anon:0kB active_file:68356kB inactive_file:156256kB unevictable:1536kB writepending:1572kB present:3129332kB managed:2549168kB mlocked:0kB bounce:0kB free_pcp:8728kB local_pcp:248kB free_cma:0kB [ 505.799812][ T2141] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 505.807516][T12647] lowmem_reserve[]: 0 0 0 0 0 [ 505.812935][T12647] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:32kB inactive_anon:0kB active_file:0kB inactive_file:316kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:12kB free_cma:0kB [ 506.170459][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 506.366189][ T8] usb 1-1: ezusb_ihex_firmware_download - request "keyspan/usa28xb.fw" failed [ 506.375239][ T8] usb 1-1: failed to load firmware "keyspan/usa28xb.fw" [ 506.383192][ T8] keyspan 1-1:3.116: probe with driver keyspan failed with error -2 [ 506.395388][T12647] lowmem_reserve[]: 0 0 0 0 0 [ 506.412595][T12647] Node 1 Normal free:3901340kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 506.441444][T12647] lowmem_reserve[]: 0 0 0 0 0 [ 506.446830][T12647] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 506.458430][T12657] No buffer was provided with the request [ 506.460290][T12647] Node 0 DMA32: 31*4kB (UM) 74*8kB (ME) 885*16kB (UME) 476*32kB (UME) 71*64kB (UME) 45*128kB (UME) 45*256kB (UME) 19*512kB (UME) 10*1024kB (UME) 9*2048kB (UME) 277*4096kB (UM) = 1224924kB [ 506.484034][T12647] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 506.495541][T12647] Node 1 Normal: 185*4kB (UE) 35*8kB (UME) 32*16kB (UME) 209*32kB (UME) 78*64kB (UME) 44*128kB (UME) 14*256kB (UME) 10*512kB (UME) 3*1024kB (UME) 4*2048kB (U) 943*4096kB (M) = 3901340kB [ 506.513916][T12647] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 506.523465][T12647] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 506.532762][T12647] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 506.542327][T12647] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 506.551931][T12647] 60554 total pagecache pages [ 506.557025][T12647] 0 pages in swap cache [ 506.561228][T12647] Free swap = 124668kB [ 506.565438][T12647] Total swap = 124996kB [ 506.569933][T12647] 2097051 pages RAM [ 506.573729][T12647] 0 pages HighMem/MovableOnly [ 506.578521][T12647] 428037 pages reserved [ 506.582773][T12647] 0 pages cma reserved [ 506.592686][ T5872] usb 8-1: device descriptor read/all, error -71 [ 506.600895][ T8] keyspan 1-1:3.0: Keyspan - (without firmware) converter detected [ 506.609522][ T8] usb 1-1: Direct firmware load for keyspan/usa28xb.fw failed with error -2 [ 506.618203][ T8] usb 1-1: Falling back to sysfs fallback for: keyspan/usa28xb.fw [ 506.659521][ T2141] usb 9-1: Using ep0 maxpacket: 8 [ 507.163045][T12664] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1501'. [ 507.209316][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 508.249348][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 508.370546][T12682] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 508.910628][T12685] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 509.224074][ T2141] usb 9-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=18.37 [ 509.227418][T12689] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1509'. [ 509.233173][ T2141] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.252678][ T2141] usb 9-1: Product: syz [ 509.289254][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 509.322673][ T2141] usb 9-1: can't set config #128, error -71 [ 509.323268][T12698] overlayfs: missing 'lowerdir' [ 509.344912][ T2141] usb 9-1: USB disconnect, device number 4 [ 509.424163][T12706] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1513'. [ 510.290770][T12721] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1517'. [ 510.329272][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 510.436244][T12724] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 511.369251][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 512.409262][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 512.780981][T12747] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1523'. [ 512.790033][T12747] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1523'. [ 513.164233][ T29] audit: type=1400 audit(1731791479.876:1070): avc: denied { setopt } for pid=12736 comm="syz.3.1523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 513.449406][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 513.463587][ T29] audit: type=1326 audit(1731791480.576:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12762 comm="syz.6.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6df17e719 code=0x7ffc0000 [ 513.527645][ T29] audit: type=1326 audit(1731791480.636:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12762 comm="syz.6.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6df17e719 code=0x7ffc0000 [ 513.551351][ T29] audit: type=1326 audit(1731791480.636:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12762 comm="syz.6.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb6df180637 code=0x7ffc0000 [ 513.574900][ T29] audit: type=1326 audit(1731791480.636:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12762 comm="syz.6.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb6df1805ac code=0x7ffc0000 [ 513.598326][ T29] audit: type=1326 audit(1731791480.636:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12762 comm="syz.6.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb6df1804e4 code=0x7ffc0000 [ 513.622399][ T29] audit: type=1326 audit(1731791480.636:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12762 comm="syz.6.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb6df1804e4 code=0x7ffc0000 [ 513.646896][ T29] audit: type=1326 audit(1731791480.636:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12762 comm="syz.6.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb6df17d3aa code=0x7ffc0000 [ 513.683355][ T29] audit: type=1326 audit(1731791480.636:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12762 comm="syz.6.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6df17e719 code=0x7ffc0000 [ 513.707820][ T29] audit: type=1326 audit(1731791480.636:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12762 comm="syz.6.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6df17e719 code=0x7ffc0000 [ 514.287852][T12776] netlink: 'syz.3.1526': attribute type 3 has an invalid length. [ 514.333216][T12776] netlink: 'syz.3.1526': attribute type 3 has an invalid length. [ 514.466137][T12780] No buffer was provided with the request [ 514.468531][T12776] netlink: 'syz.3.1526': attribute type 3 has an invalid length. [ 514.489606][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 515.529267][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 516.365231][T12812] overlay: filesystem on ./bus not supported as upperdir [ 516.579275][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 516.786287][T12832] VFS: unable to find oldfs superblock on device nullb0 [ 517.413019][T12830] syzkaller0: entered promiscuous mode [ 517.418645][T12830] syzkaller0: entered allmulticast mode [ 517.458117][ T5836] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 517.609379][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 518.649382][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 519.254896][T12870] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1551'. [ 519.437416][ T5973] Bluetooth: (null): Invalid header checksum [ 519.445378][ T5973] Bluetooth: (null): Invalid header checksum [ 519.541756][ T5973] Bluetooth: (null): Invalid header checksum [ 519.689309][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 519.999316][ T5872] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 520.057279][ C0] Unknown status report in ack skb [ 520.170788][ T5872] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.196874][T12875] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1555'. [ 520.216241][ T5872] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.234856][ T5872] usb 10-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 520.244355][ T5872] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.264448][ T5872] usb 10-1: config 0 descriptor?? [ 520.729600][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 521.769252][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 521.774038][T12896] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 521.795794][ T5872] usbhid 10-1:0.0: can't add hid device: -71 [ 521.802021][ T5872] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 521.829603][ T5872] usb 10-1: USB disconnect, device number 4 [ 521.988551][T12904] bridge0: port 3(gretap0) entered blocking state [ 521.999367][T12904] bridge0: port 3(gretap0) entered disabled state [ 522.006734][T12904] gretap0: entered allmulticast mode [ 522.019158][T12904] gretap0: entered promiscuous mode [ 522.025995][T12904] bridge0: port 3(gretap0) entered blocking state [ 522.032487][T12904] bridge0: port 3(gretap0) entered forwarding state [ 522.809389][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 523.010584][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 523.010596][ T29] audit: type=1400 audit(1731791490.126:1124): avc: denied { write } for pid=12913 comm="syz.3.1567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 523.235478][ T29] audit: type=1400 audit(1731791490.346:1125): avc: denied { read } for pid=12915 comm="syz.9.1566" laddr=fe80::13 lport=44398 faddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 523.258599][ C0] vkms_vblank_simulate: vblank timer overrun [ 523.745205][ T29] audit: type=1400 audit(1731791490.856:1126): avc: denied { setopt } for pid=12925 comm="syz.7.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 523.745459][T12928] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1570'. [ 523.791995][ T29] audit: type=1400 audit(1731791490.896:1127): avc: denied { bind } for pid=12925 comm="syz.7.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 523.859245][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 524.899269][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 525.507808][ T29] audit: type=1400 audit(1731791492.416:1128): avc: denied { write } for pid=12934 comm="syz.3.1573" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 525.929335][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 526.069571][T12950] netlink: 'syz.7.1577': attribute type 1 has an invalid length. [ 526.077507][T12950] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1577'. [ 526.100175][T12950] netlink: 256 bytes leftover after parsing attributes in process `syz.7.1577'. [ 526.138440][T12953] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1579'. [ 526.157794][T12954] netlink: 76 bytes leftover after parsing attributes in process `syz.8.1578'. [ 526.226494][T12954] bridge0: port 4(syz_tun) entered blocking state [ 526.233328][T12954] bridge0: port 4(syz_tun) entered disabled state [ 526.265204][ T29] audit: type=1326 audit(1731791493.376:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12957 comm="syz.3.1581" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f561c17e719 code=0x0 [ 526.347301][T12954] syz_tun: entered allmulticast mode [ 526.407290][T12954] syz_tun: entered promiscuous mode [ 526.422460][T12954] bridge0: port 4(syz_tun) entered blocking state [ 526.429014][T12954] bridge0: port 4(syz_tun) entered forwarding state [ 526.448878][T12966] tipc: Started in network mode [ 526.542713][T12966] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 526.969267][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 527.336150][T12966] tipc: New replicast peer: fe80:0090:0700:0000:0000:0000:0000:00bb [ 527.344774][T12966] tipc: Enabled bearer , priority 10 [ 528.009269][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 528.060049][ T29] audit: type=1400 audit(1731791495.176:1130): avc: denied { bind } for pid=13001 comm="syz.7.1593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 528.211239][T13005] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1595'. [ 528.244732][T13005] bridge0: port 4(syz_tun) entered blocking state [ 528.269959][T12384] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 528.286110][T13005] bridge0: port 4(syz_tun) entered disabled state [ 528.293978][T13005] syz_tun: entered allmulticast mode [ 528.310147][T13005] syz_tun: entered promiscuous mode [ 528.316027][T13005] bridge0: port 4(syz_tun) entered blocking state [ 528.322549][T13005] bridge0: port 4(syz_tun) entered forwarding state [ 528.349972][ T5872] tipc: Node number set to 1 [ 528.429472][T12384] usb 10-1: Using ep0 maxpacket: 8 [ 528.441891][T10877] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 528.450469][T12384] usb 10-1: unable to get BOS descriptor or descriptor too short [ 528.636230][T12384] usb 10-1: config 9 has an invalid interface number: 20 but max is 0 [ 528.644659][T12384] usb 10-1: config 9 has no interface number 0 [ 528.658490][T12384] usb 10-1: config 9 interface 20 altsetting 5 endpoint 0x6 has invalid maxpacket 1128, setting to 1024 [ 528.678327][T12384] usb 10-1: config 9 interface 20 altsetting 5 bulk endpoint 0x6 has invalid maxpacket 1024 [ 528.809225][T12384] usb 10-1: config 9 interface 20 has no altsetting 0 [ 528.851109][T12384] usb 10-1: string descriptor 0 read error: -22 [ 528.858301][T12384] usb 10-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=12.fe [ 528.877016][T12384] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.890254][T12996] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 528.916158][T12384] usb 10-1: Found UVC 0.00 device (1bcf:0b40) [ 528.927178][T12384] usb 10-1: Forcing UVC version to 1.0a [ 528.956136][T12384] usb 10-1: No valid video chain found. [ 528.968275][T10877] usb 9-1: Using ep0 maxpacket: 32 [ 528.975447][T10877] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.986545][T10877] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.996436][T10877] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 529.005605][T10877] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.016779][T10877] usb 9-1: config 0 descriptor?? [ 529.023576][T10877] hub 9-1:0.0: USB hub found [ 529.049289][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 529.237852][T10877] hub 9-1:0.0: 1 port detected [ 529.708782][T13038] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1601'. [ 529.749382][ T2141] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 529.798999][T13044] FAULT_INJECTION: forcing a failure. [ 529.798999][T13044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 529.824389][T13044] CPU: 0 UID: 0 PID: 13044 Comm: syz.6.1605 Not tainted 6.12.0-rc7-syzkaller-00189-ge8bdb3c8be08 #0 [ 529.835206][T13044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 529.845272][T13044] Call Trace: [ 529.848557][T13044] [ 529.851493][T13044] dump_stack_lvl+0x16c/0x1f0 [ 529.856185][T13044] should_fail_ex+0x497/0x5b0 [ 529.856596][T10877] hub 9-1:0.0: activate --> -90 [ 529.860859][T13044] _copy_from_user+0x2e/0xd0 [ 529.860884][T13044] do_sock_getsockopt+0x5f6/0x800 [ 529.860912][T13044] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 529.860934][T13044] ? __fget_files+0x244/0x3f0 [ 529.860964][T13044] __sys_getsockopt+0x1a1/0x270 [ 529.890621][T13044] ? __pfx___sys_getsockopt+0x10/0x10 [ 529.896015][T13044] ? fput+0x30/0x390 [ 529.899927][T13044] ? ksys_write+0x1ad/0x260 [ 529.904442][T13044] ? __pfx_ksys_write+0x10/0x10 [ 529.909310][T13044] __x64_sys_getsockopt+0xbd/0x160 [ 529.914434][T13044] ? do_syscall_64+0x91/0x250 [ 529.919128][T13044] ? lockdep_hardirqs_on+0x7c/0x110 [ 529.919333][ T2141] usb 4-1: Using ep0 maxpacket: 8 [ 529.924332][T13044] do_syscall_64+0xcd/0x250 [ 529.924359][T13044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.924384][T13044] RIP: 0033:0x7fb6df17e719 [ 529.924400][T13044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.924417][T13044] RSP: 002b:00007fb6dffe0038 EFLAGS: 00000246 [ 529.943998][ T2141] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 529.944149][T13044] ORIG_RAX: 0000000000000037 [ 529.944161][T13044] RAX: ffffffffffffffda RBX: 00007fb6df335f80 RCX: 00007fb6df17e719 [ 529.944174][T13044] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 529.964317][ T2141] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 529.969799][T13044] RBP: 00007fb6dffe0090 R08: 0000000020000080 R09: 0000000000000000 [ 529.969816][T13044] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.969828][T13044] R13: 0000000000000000 R14: 00007fb6df335f80 R15: 00007ffd965a8348 [ 529.969850][T13044] [ 530.040418][ T2141] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 530.057818][ T2141] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 530.068787][ T2141] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 530.082059][T10877] hub 9-1:0.0: hub_ext_port_status failed (err = 0) [ 530.089604][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 530.094670][ T2141] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 530.106906][ T2141] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.325693][ T2141] usb 4-1: usb_control_msg returned -32 [ 530.331950][ T2141] usbtmc 4-1:16.0: can't read capabilities [ 530.399597][T10877] usb 9-1: USB disconnect, device number 5 [ 530.546025][ T5968] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 530.693098][T13057] usbtmc 4-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 530.700227][ T5968] usb 8-1: Using ep0 maxpacket: 8 [ 530.710869][ T5968] usb 8-1: unable to get BOS descriptor or descriptor too short [ 530.724176][ T5968] usb 8-1: config 9 has an invalid interface number: 20 but max is 0 [ 530.732306][ T5968] usb 8-1: config 9 has no interface number 0 [ 530.738374][ T5968] usb 8-1: config 9 interface 20 altsetting 5 endpoint 0x6 has invalid maxpacket 1128, setting to 1024 [ 530.749657][ T5968] usb 8-1: config 9 interface 20 altsetting 5 bulk endpoint 0x6 has invalid maxpacket 1024 [ 530.759804][ T5968] usb 8-1: config 9 interface 20 has no altsetting 0 [ 530.768731][ T5968] usb 8-1: string descriptor 0 read error: -22 [ 530.775029][ T5968] usb 8-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=12.fe [ 530.784116][ T5968] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.804630][T13056] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 530.829905][ T5968] usb 8-1: Found UVC 0.00 device (1bcf:0b40) [ 530.836812][ T5968] usb 8-1: Forcing UVC version to 1.0a [ 530.847026][ T5968] usb 8-1: No valid video chain found. [ 530.899930][ T5872] usb 4-1: USB disconnect, device number 21 [ 531.020261][ T9] usb 10-1: USB disconnect, device number 5 [ 531.129327][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 532.020069][T13078] xt_CT: You must specify a L4 protocol and not use inversions on it [ 532.179246][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 532.389425][ T5872] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 532.539333][ T5872] usb 10-1: device descriptor read/64, error -71 [ 532.546566][T13080] syz.8.1616: attempt to access beyond end of device [ 532.546566][T13080] nbd8: rw=0, sector=2, nr_sectors = 2 limit=0 [ 532.564840][T13080] syz.8.1616: attempt to access beyond end of device [ 532.564840][T13080] nbd8: rw=0, sector=0, nr_sectors = 2 limit=0 [ 532.589351][T13080] syz.8.1616: attempt to access beyond end of device [ 532.589351][T13080] nbd8: rw=0, sector=0, nr_sectors = 2 limit=0 [ 532.603300][T13080] syz.8.1616: attempt to access beyond end of device [ 532.603300][T13080] nbd8: rw=0, sector=18, nr_sectors = 2 limit=0 [ 532.616948][T13080] syz.8.1616: attempt to access beyond end of device [ 532.616948][T13080] nbd8: rw=0, sector=30, nr_sectors = 2 limit=0 [ 532.630282][T13080] syz.8.1616: attempt to access beyond end of device [ 532.630282][T13080] nbd8: rw=0, sector=36, nr_sectors = 2 limit=0 [ 532.643660][T13080] VFS: unable to find oldfs superblock on device nbd8 [ 532.722593][ T29] audit: type=1400 audit(1731791499.836:1131): avc: denied { shutdown } for pid=13074 comm="syz.6.1615" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 532.799710][ T5872] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 532.958423][ T5872] usb 10-1: device descriptor read/64, error -71 [ 533.040619][T13094] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1000 sclass=netlink_xfrm_socket pid=13094 comm=syz.8.1619 [ 533.091600][ T5872] usb usb10-port1: attempt power cycle [ 533.209269][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 533.305021][ T9] usb 8-1: USB disconnect, device number 7 [ 533.340573][T10877] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 533.451251][ T5872] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 533.510895][T10877] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 533.763015][ T5872] usb 10-1: device descriptor read/8, error -71 [ 533.786321][T10877] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.833723][T10877] usb 4-1: config 1 interface 1 has no altsetting 1 [ 533.848385][T10877] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 533.859358][T10877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.883164][T10877] usb 4-1: Product: syz [ 533.894622][T10877] usb 4-1: Manufacturer: syz [ 533.901807][T10877] usb 4-1: SerialNumber: syz [ 533.918127][T10877] usb 4-1: selecting invalid altsetting 1 [ 534.039485][ T5872] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 534.130263][T10877] cdc_ncm 4-1:1.0: bind() failure [ 534.139981][T10877] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 534.146779][T10877] cdc_ncm 4-1:1.1: bind() failure [ 534.153938][T10877] usb 4-1: USB disconnect, device number 22 [ 534.249254][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 534.670455][ T5872] usb 10-1: device descriptor read/8, error -71 [ 535.035141][ T5872] usb usb10-port1: unable to enumerate USB device [ 535.289268][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 535.567549][T13125] trusted_key: encrypted_key: key user:syz not found [ 535.916714][T13122] syz.9.1628: attempt to access beyond end of device [ 535.916714][T13122] nbd9: rw=0, sector=2, nr_sectors = 2 limit=0 [ 535.948421][T13122] syz.9.1628: attempt to access beyond end of device [ 535.948421][T13122] nbd9: rw=0, sector=0, nr_sectors = 2 limit=0 [ 535.963714][T13122] syz.9.1628: attempt to access beyond end of device [ 535.963714][T13122] nbd9: rw=0, sector=0, nr_sectors = 2 limit=0 [ 535.976986][T13122] syz.9.1628: attempt to access beyond end of device [ 535.976986][T13122] nbd9: rw=0, sector=18, nr_sectors = 2 limit=0 [ 535.990648][T13122] VFS: unable to find oldfs superblock on device nbd9 [ 536.041164][T13129] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1630'. [ 536.329250][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 536.890232][T12384] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 537.056458][T12384] usb 10-1: Using ep0 maxpacket: 8 [ 537.066563][ T29] audit: type=1400 audit(1731791504.136:1132): avc: denied { map } for pid=13149 comm="syz.3.1637" path="socket:[36304]" dev="sockfs" ino=36304 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 537.089956][ C0] vkms_vblank_simulate: vblank timer overrun [ 537.145378][T12384] usb 10-1: unable to get BOS descriptor or descriptor too short [ 537.169920][T12384] usb 10-1: config 9 has an invalid interface number: 20 but max is 0 [ 537.369267][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 537.657674][T12384] usb 10-1: config 9 has no interface number 0 [ 537.670794][T12384] usb 10-1: config 9 interface 20 altsetting 5 endpoint 0x6 has invalid maxpacket 1128, setting to 1024 [ 537.686231][T12384] usb 10-1: config 9 interface 20 altsetting 5 bulk endpoint 0x6 has invalid maxpacket 1024 [ 537.708972][T12384] usb 10-1: config 9 interface 20 has no altsetting 0 [ 537.720622][T12384] usb 10-1: string descriptor 0 read error: -22 [ 537.727079][T12384] usb 10-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=12.fe [ 537.817663][T12384] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.370547][T13134] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 538.407996][T12384] usb 10-1: Found UVC 0.00 device (1bcf:0b40) [ 538.415129][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 538.517066][T12384] usb 10-1: Forcing UVC version to 1.0a [ 538.525976][T12384] usb 10-1: No valid video chain found. [ 539.150685][T13163] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 539.449719][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 540.189270][ T29] audit: type=1400 audit(1731791507.286:1133): avc: denied { read } for pid=13176 comm="syz.3.1644" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 540.244914][ T29] audit: type=1400 audit(1731791507.286:1134): avc: denied { open } for pid=13176 comm="syz.3.1644" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 540.279833][T12384] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 540.331475][T13181] No buffer was provided with the request [ 540.343835][ T29] audit: type=1400 audit(1731791507.286:1135): avc: denied { ioctl } for pid=13176 comm="syz.3.1644" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 540.489256][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 540.734828][ T51] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 540.803267][T13179] bio_check_eod: 2 callbacks suppressed [ 540.803304][T13179] syz.6.1643: attempt to access beyond end of device [ 540.803304][T13179] nbd6: rw=0, sector=2, nr_sectors = 2 limit=0 [ 540.879313][ T51] usb 4-1: device descriptor read/64, error -71 [ 540.897437][ T5968] usb 10-1: USB disconnect, device number 10 [ 540.919452][T13179] syz.6.1643: attempt to access beyond end of device [ 540.919452][T13179] nbd6: rw=0, sector=0, nr_sectors = 2 limit=0 [ 540.932657][T13179] syz.6.1643: attempt to access beyond end of device [ 540.932657][T13179] nbd6: rw=0, sector=0, nr_sectors = 2 limit=0 [ 540.948712][T13179] syz.6.1643: attempt to access beyond end of device [ 540.948712][T13179] nbd6: rw=0, sector=18, nr_sectors = 2 limit=0 [ 540.984836][T13179] syz.6.1643: attempt to access beyond end of device [ 540.984836][T13179] nbd6: rw=0, sector=30, nr_sectors = 2 limit=0 [ 541.019559][T13179] syz.6.1643: attempt to access beyond end of device [ 541.019559][T13179] nbd6: rw=0, sector=36, nr_sectors = 2 limit=0 [ 541.032884][T13179] VFS: unable to find oldfs superblock on device nbd6 [ 541.129424][ T51] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 541.319274][ T5828] Bluetooth: hci6: command tx timeout [ 541.375332][ T51] usb 4-1: device descriptor read/64, error -71 [ 541.380691][ T30] INFO: task udevd:5840 blocked for more than 143 seconds. [ 541.392889][ T30] Not tainted 6.12.0-rc7-syzkaller-00189-ge8bdb3c8be08 #0 [ 541.402521][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 541.411970][ T30] task:udevd state:D stack:24224 pid:5840 tgid:5840 ppid:5200 flags:0x00000002 [ 541.433145][ T30] Call Trace: [ 541.436692][ T30] [ 541.444964][ T30] __schedule+0xe55/0x5740 [ 541.454015][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 541.462863][ T30] ? lockdep_hardirqs_on_prepare+0x390/0x420 [ 541.475987][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 541.484722][ T30] ? __pfx___schedule+0x10/0x10 [ 541.529283][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 541.563106][ T30] ? schedule+0x298/0x350 [ 541.588371][ T30] ? __pfx_lock_release+0x10/0x10 [ 541.614291][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 541.642493][ T30] ? lock_acquire+0x2f/0xb0 [ 541.654621][ T29] audit: type=1400 audit(1731791508.766:1136): avc: denied { write } for pid=13186 comm="syz.7.1647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 541.693300][ T30] ? schedule+0x1fd/0x350 [ 541.698421][ T51] usb usb4-port1: attempt power cycle [ 541.708585][ T30] schedule+0xe7/0x350 [ 541.719838][ T30] schedule_preempt_disabled+0x13/0x30 [ 541.725571][ T30] __mutex_lock+0x5b8/0x9c0 [ 541.738191][ T30] ? uevent_show+0x188/0x3b0 [ 541.744386][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 541.757896][ T30] ? uevent_show+0x188/0x3b0 [ 541.770286][ T30] uevent_show+0x188/0x3b0 [ 541.775480][ T30] ? __pfx_uevent_show+0x10/0x10 [ 541.781648][ T30] dev_attr_show+0x53/0xe0 [ 541.786647][ T30] ? __pfx_dev_attr_show+0x10/0x10 [ 541.792026][ T30] sysfs_kf_seq_show+0x23e/0x410 [ 541.797076][ T30] seq_read_iter+0x4f4/0x12b0 [ 541.816299][ T30] kernfs_fop_read_iter+0x414/0x580 [ 541.823871][ T30] ? rw_verify_area+0xd0/0x700 [ 541.828789][ T30] vfs_read+0x87f/0xbe0 [ 541.880349][ T30] ? __pfx_vfs_read+0x10/0x10 [ 541.885290][ T30] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 541.898854][ T30] ksys_read+0x12f/0x260 [ 541.904590][ T30] ? __pfx_ksys_read+0x10/0x10 [ 541.927787][ T30] do_syscall_64+0xcd/0x250 [ 541.938268][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.947327][ T30] RIP: 0033:0x7f4405716b6a [ 541.957325][ T30] RSP: 002b:00007fffb1820538 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 541.968930][ T30] RAX: ffffffffffffffda RBX: 0000555a7aeef750 RCX: 00007f4405716b6a [ 541.988797][ T30] RDX: 0000000000001000 RSI: 0000555a7af0db50 RDI: 0000000000000008 [ 541.997397][ T30] RBP: 0000555a7aeef750 R08: 0000000000000008 R09: 0000000000000008 [ 542.012189][ T30] R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000 [ 542.023477][ T30] R13: 0000000000003fff R14: 00007fffb1820a18 R15: 000000000000000a [ 542.031790][ T30] [ 542.035173][ T30] [ 542.035173][ T30] Showing all locks held in the system: [ 542.043160][ T51] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 542.051243][ T30] 6 locks held by kworker/0:0/8: [ 542.067032][ T30] #0: ffff8880236e5148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 542.083341][ T51] usb 4-1: device descriptor read/8, error -71 [ 542.112541][ T30] #1: ffffc900000d7d80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 542.152725][ T30] #2: ffff888028bfc190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c1/0x4e10 [ 542.178585][ T30] #3: ffff888022b08190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x7f/0x4b0 [ 542.229257][ T30] #4: ffff8880655b5160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x7f/0x4b0 [ 542.238624][ T30] #5: ffffffff8e06e990 (umhelper_sem){++++}-{3:3}, at: usermodehelper_read_trylock+0xaa/0x250 [ 542.249140][ T30] 1 lock held by khungtaskd/30: [ 542.254054][ T30] #0: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x7f/0x390 [ 542.264012][ T30] 6 locks held by kworker/1:1/51: [ 542.269042][ T30] #0: ffff8880236e5148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 542.279934][ T30] #1: ffffc90000bc7d80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 542.291747][ T30] #2: ffff8881453cc190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c1/0x4e10 [ 542.301203][ T30] #3: ffff8881453cf510 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x27ec/0x4e10 [ 542.311242][ T30] #4: ffff8881453ee368 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x2815/0x4e10 [ 542.321000][ T30] #5: ffffffff8f4c3990 (ehci_cf_port_reset_rwsem){.+.+}-{3:3}, at: hub_port_reset+0x1a5/0x1cd0 [ 542.331727][ T30] 2 locks held by getty/5586: [ 542.336412][ T30] #0: ffff88814db360a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 542.346252][ T30] #1: ffffc900032432f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfba/0x1480 [ 542.349455][ T51] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 542.356405][ T30] 4 locks held by udevd/5840: [ 542.368647][ T30] #0: ffff88805c783418 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xd8/0x12b0 [ 542.377631][ T30] #1: ffff88803453c488 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x4d/0x240 [ 542.387575][ T30] #2: ffff88802558d788 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x71/0x240 [ 542.397561][ T30] #3: ffff888022b08190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x188/0x3b0 [ 542.406601][ T30] 3 locks held by kworker/0:5/5873: [ 542.411835][ T30] #0: ffff88801b078948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 542.419737][ T51] usb 4-1: device descriptor read/8, error -71 [ 542.422313][ T30] #1: ffffc90003d2fd80 (xfrm_state_gc_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 542.438624][ T30] #2: ffffffff8e1c3c38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x1a4/0x3b0 [ 542.448680][ T30] 2 locks held by kworker/u8:14/5973: [ 542.454107][ T30] #0: ffff88801b081148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 542.465301][ T30] #1: ffffc90004407d80 (connector_reaper_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 542.476062][ T30] 2 locks held by kworker/u8:15/5977: [ 542.481498][ T30] 3 locks held by kworker/u8:19/5991: [ 542.486873][ T30] #0: ffff88801b081148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 542.499199][ T30] #1: ffffc90004247d80 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 542.510352][ T30] #2: ffffffff8e1c3c38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x282/0x3b0 [ 542.520416][ T30] 1 lock held by syz.2.1276/11706: [ 542.525522][ T30] #0: ffff888028bfc190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x1b8/0x8c0 [ 542.534756][ T30] 1 lock held by syz.0.1346/11998: [ 542.539901][ T30] #0: ffff888028bfc190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x1b8/0x8c0 [ 542.548885][ T30] 1 lock held by syz.1.1361/12072: [ 542.554059][ T30] #0: ffff888028bfc190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x1b8/0x8c0 [ 542.555199][ T51] usb usb4-port1: unable to enumerate USB device [ 542.563109][ T30] 6 locks held by kworker/0:3/12384: [ 542.563125][ T30] #0: ffff8880236e5148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 542.563177][ T30] #1: ffffc9001f5d7d80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 542.569606][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 542.604829][ T30] #2: ffff888028d5c190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c1/0x4e10 [ 542.613811][ T30] #3: ffff888028d5f510 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x27ec/0x4e10 [ 542.623777][ T30] #4: ffff8880284fd068 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x2815/0x4e10 [ 542.633483][ T30] #5: ffffffff8f4c3990 (ehci_cf_port_reset_rwsem){.+.+}-{3:3}, at: hub_port_reset+0x1a5/0x1cd0 [ 542.643966][ T30] [ 542.646280][ T30] ============================================= [ 542.646280][ T30] [ 542.654825][ T30] NMI backtrace for cpu 0 [ 542.659142][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc7-syzkaller-00189-ge8bdb3c8be08 #0 [ 542.669626][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 542.679678][ T30] Call Trace: [ 542.682940][ T30] [ 542.685857][ T30] dump_stack_lvl+0x116/0x1f0 [ 542.690524][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 542.695451][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 542.701425][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 542.707393][ T30] watchdog+0xf0c/0x1240 [ 542.711628][ T30] ? __pfx_watchdog+0x10/0x10 [ 542.716284][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 542.721474][ T30] ? __kthread_parkme+0x148/0x220 [ 542.726484][ T30] ? __pfx_watchdog+0x10/0x10 [ 542.731142][ T30] kthread+0x2c1/0x3a0 [ 542.735195][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 542.740380][ T30] ? __pfx_kthread+0x10/0x10 [ 542.744955][ T30] ret_from_fork+0x45/0x80 [ 542.749353][ T30] ? __pfx_kthread+0x10/0x10 [ 542.753927][ T30] ret_from_fork_asm+0x1a/0x30 [ 542.758684][ T30] [ 542.761851][ T30] Sending NMI from CPU 0 to CPUs 1: [ 542.767063][ C1] NMI backtrace for cpu 1 [ 542.767075][ C1] CPU: 1 UID: 0 PID: 5977 Comm: kworker/u8:15 Not tainted 6.12.0-rc7-syzkaller-00189-ge8bdb3c8be08 #0 [ 542.767091][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 542.767099][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 542.767125][ C1] RIP: 0010:debug_lockdep_rcu_enabled+0x26/0x40 [ 542.767140][ C1] Code: 90 90 90 90 f3 0f 1e fa 8b 05 6a b7 3b 05 85 c0 74 20 8b 05 94 e9 3b 05 85 c0 74 16 65 48 8b 05 f0 34 e0 74 8b 80 dc 0a 00 00 <85> c0 0f 94 c0 0f b6 c0 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 [ 542.767153][ C1] RSP: 0018:ffffc90004437488 EFLAGS: 00000202 [ 542.767164][ C1] RAX: 0000000000000000 RBX: ffff88801ed34c00 RCX: ffffffff81fb4c60 [ 542.767173][ C1] RDX: ffff888024fd8000 RSI: ffffffff81fb1f87 RDI: ffff88801ed34c00 [ 542.767182][ C1] RBP: ffff88801ed34c00 R08: 0000000000000006 R09: 0000000000000001 [ 542.767190][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 542.767198][ C1] R13: 0000000000000000 R14: ffff88801ed34bfc R15: dffffc0000000000 [ 542.767206][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 542.767221][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 542.767230][ C1] CR2: 00007f0b1ad08ab8 CR3: 000000003303c000 CR4: 00000000003526f0 [ 542.767238][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 542.767246][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 542.767254][ C1] Call Trace: [ 542.767259][ C1] [ 542.767264][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 542.767283][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 542.767302][ C1] ? nmi_handle+0x1a9/0x5c0 [ 542.767317][ C1] ? debug_lockdep_rcu_enabled+0x26/0x40 [ 542.767329][ C1] ? default_do_nmi+0x6a/0x160 [ 542.767345][ C1] ? exc_nmi+0x170/0x1e0 [ 542.767360][ C1] ? end_repeat_nmi+0xf/0x53 [ 542.767375][ C1] ? __page_table_check_zero+0x130/0x360 [ 542.767391][ C1] ? page_ext_put+0x17/0xd0 [ 542.767404][ C1] ? debug_lockdep_rcu_enabled+0x26/0x40 [ 542.767416][ C1] ? debug_lockdep_rcu_enabled+0x26/0x40 [ 542.767429][ C1] ? debug_lockdep_rcu_enabled+0x26/0x40 [ 542.767441][ C1] [ 542.767445][ C1] [ 542.767449][ C1] page_ext_put+0x1c/0xd0 [ 542.767462][ C1] __page_table_check_zero+0x2d7/0x360 [ 542.767478][ C1] post_alloc_hook+0x2c0/0x350 [ 542.767493][ C1] get_page_from_freelist+0xfce/0x2f80 [ 542.767514][ C1] ? __pfx_get_page_from_freelist+0x10/0x10 [ 542.767529][ C1] ? should_fail_alloc_page+0xee/0x130 [ 542.767546][ C1] ? prepare_alloc_pages.constprop.0+0x16f/0x560 [ 542.767560][ C1] __alloc_pages_noprof+0x223/0x25a0 [ 542.767581][ C1] ? __pfx_mark_lock+0x10/0x10 [ 542.767594][ C1] ? unwind_next_frame+0xe5d/0x20c0 [ 542.767609][ C1] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 542.767624][ C1] ? hlock_class+0x4e/0x130 [ 542.767640][ C1] ? __lock_acquire+0x163e/0x3ce0 [ 542.767654][ C1] ? hlock_class+0x4e/0x130 [ 542.767669][ C1] ? mark_lock+0xb5/0xc60 [ 542.767679][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 542.767690][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 542.767710][ C1] ? policy_nodemask+0xea/0x4e0 [ 542.767726][ C1] alloc_pages_mpol_noprof+0x2c9/0x610 [ 542.767744][ C1] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 542.767762][ C1] ? __pfx_lock_release+0x10/0x10 [ 542.767775][ C1] new_slab+0x2c9/0x410 [ 542.767789][ C1] ___slab_alloc+0xdac/0x1880 [ 542.767801][ C1] ? __alloc_skb+0x2b1/0x380 [ 542.767819][ C1] ? __alloc_skb+0x2b1/0x380 [ 542.767832][ C1] ? __slab_alloc.constprop.0+0x56/0xb0 [ 542.767845][ C1] __slab_alloc.constprop.0+0x56/0xb0 [ 542.767859][ C1] kmem_cache_alloc_node_noprof+0xed/0x310 [ 542.767874][ C1] ? __alloc_skb+0x2b1/0x380 [ 542.767887][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 542.767906][ C1] __alloc_skb+0x2b1/0x380 [ 542.767919][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 542.767932][ C1] ? kfree_skbmem+0x1a4/0x1f0 [ 542.767945][ C1] ? kfree_skbmem+0x1a4/0x1f0 [ 542.767957][ C1] nsim_dev_trap_report_work+0x2a4/0xc90 [ 542.767980][ C1] process_one_work+0x9c5/0x1ba0 [ 542.767995][ C1] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 542.768010][ C1] ? __pfx_process_one_work+0x10/0x10 [ 542.768024][ C1] ? assign_work+0x1a0/0x250 [ 542.768043][ C1] worker_thread+0x6c8/0xf00 [ 542.768059][ C1] ? __pfx_worker_thread+0x10/0x10 [ 542.768071][ C1] kthread+0x2c1/0x3a0 [ 542.768085][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 542.768104][ C1] ? __pfx_kthread+0x10/0x10 [ 542.768118][ C1] ret_from_fork+0x45/0x80 [ 542.768130][ C1] ? __pfx_kthread+0x10/0x10 [ 542.768144][ C1] ret_from_fork_asm+0x1a/0x30 [ 542.768166][ C1] [ 542.769068][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 543.229118][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc7-syzkaller-00189-ge8bdb3c8be08 #0 [ 543.239605][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 543.249659][ T30] Call Trace: [ 543.252920][ T30] [ 543.255834][ T30] dump_stack_lvl+0x3d/0x1f0 [ 543.260412][ T30] panic+0x71d/0x800 [ 543.264302][ T30] ? __pfx_panic+0x10/0x10 [ 543.268704][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 543.274064][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 543.280030][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 543.285384][ T30] ? watchdog+0xd76/0x1240 [ 543.289800][ T30] ? watchdog+0xd69/0x1240 [ 543.294200][ T30] watchdog+0xd87/0x1240 [ 543.298425][ T30] ? __pfx_watchdog+0x10/0x10 [ 543.303081][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 543.308271][ T30] ? __kthread_parkme+0x148/0x220 [ 543.313549][ T30] ? __pfx_watchdog+0x10/0x10 [ 543.318207][ T30] kthread+0x2c1/0x3a0 [ 543.322259][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 543.327465][ T30] ? __pfx_kthread+0x10/0x10 [ 543.332040][ T30] ret_from_fork+0x45/0x80 [ 543.336439][ T30] ? __pfx_kthread+0x10/0x10 [ 543.341012][ T30] ret_from_fork_asm+0x1a/0x30 [ 543.345769][ T30] [ 543.348968][ T30] Kernel Offset: disabled [ 543.353269][ T30] Rebooting in 86400 seconds..