last executing test programs: 10m53.504249503s ago: executing program 32 (id=771): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f00)={0x4f0, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x4a4, 0x8, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x3b8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x370, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3e}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0xfffffffffffffe06, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x20000004) 4m3.191312752s ago: executing program 4 (id=2209): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00ddd2d99d00000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x40000}, 0x4000) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000340)={0xfffffffffffffdfb, 0x0, 0x0}) prlimit64(0x0, 0xa, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000) msgsnd(0x0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000200)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r7], &(0x7f0000000280), &(0x7f0000000300)=[0x0], &(0x7f0000000340)}) r8 = eventfd2(0x65c, 0x80000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r8, 0x7, 0x2}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) eventfd2(0x5, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0}, 0x18) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mkdir(&(0x7f0000000400)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 4m1.660842614s ago: executing program 3 (id=2213): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x1, 0xffdff038}, {0x6, 0xff}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) (fail_nth: 1) 3m59.615110434s ago: executing program 4 (id=2219): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) (fail_nth: 1) 3m59.256811814s ago: executing program 4 (id=2221): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)="957bc3871f54da01138019ebbb3587e39b0af28eea1dc1c5b6b0f27c1111d0f8b71e196a9bb19b466172df083b602f37901653c0b41e9ea3218f6680923cb44fcde97805fe3eaf057d955a0de7c0d566c5549dfde8c0703c0f633cd8c5f98fc10f484ec2ab2611e94e", 0x69}, {&(0x7f0000000380)="eed4fbdbc377aaa1f97890499828239f7ce11e4611999338e6da1d1d2deca77c81b916aaaa389580ca6ed38e8d0330bc2f0cce161f489d863da5d3adc46e5c8160ccc889403f20dae567d9969efc4355fd27ba3d6e13f78bf9e57c4e3b723dd7b8540917d4c38bd6d37c70c43032fb1cae37de9f57c3bf053fa22d788b5629b444cd80b5c5257223c6d71b597d9c77a96733b2c18bf7adbe30f66959119bbed4e063dbbad441", 0xa6}, {&(0x7f0000000440)="b9c8ea7741e24130b11e66fa8118a2cda01b3f0acd758075e1c9d7949dcabe424ea007a38ff2c228d330852a68f81c6d7ce898bd7e628ae1242068c2e81985e9ee753e1d02319449f6c878bb5726dbc4eda9097bc6315fec72ff234fb9f26512af7b647069e3415c0338618c7adb1ac5b2f77a9effa9b33193a6da989be1900ce5158f956fcb9510d3850911ba7792fbc8ceaff1c9d7ceba64850bf02eeae9c814fb4cdb5e0e9b836ea2cca20b60440969419d09b1a0bbfb1e25c9dc4294", 0xbe}, {&(0x7f0000000140)="6b7a240a296a37fa753082010bbab360f5b4702580e51f24741ca0e156030aea99d1b437951913173b3187878dc29f77c7a9ec2bf03cada5b063cb819d7f8bf1dd40a6db89c1a295", 0x48}, {&(0x7f00000023c0)="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", 0xd20}, {&(0x7f0000000300)="d4eb0cb9b5afe8a92397fd6083599c6c54", 0x11}], 0x6, &(0x7f00000005c0)=[@tclass={{0x14, 0x29, 0x43, 0x2}}], 0x18}}], 0x1, 0x40004) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3m59.159469638s ago: executing program 4 (id=2222): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x8000) keyctl$clear(0x5, 0xffffffffffffffff) r1 = getpid() r2 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4) syz_pidfd_open(r1, 0x0) syz_usb_connect(0x6, 0x75, &(0x7f0000000780)=ANY=[@ANYBLOB="1201010240d85bc7b1131100345c010203010902630002040800070904880400c192fa280724060000d2cf05"], &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x1, 0x2, 0xf4, 0x20, 0x93}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prlimit64(r3, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40186f40, &(0x7f0000000440)=0x1f) syz_clone(0x120e1100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x100}}) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000040)={0x2, 0x1, 0x18, 0x7, 0x73, 0x0}) socket$nl_route(0x10, 0x3, 0x0) 3m58.165654569s ago: executing program 3 (id=2223): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x228000, 0x1800}, 0x20) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r2, 0x2, &(0x7f0000000180)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x2, r1, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffc, r1, &(0x7f0000000000), 0x0, 0x402e, 0x0, 0x0, r1}]) (async) write$rfkill(r1, &(0x7f0000000080)={0x8, 0x0, 0x3, 0x1}, 0x8) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04000081000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="2539000020000365f507f62aa6172f7881"], 0x33fe0) ioctl$SIOCAX25CTLCON(r0, 0x89e8, 0x0) 3m57.929061881s ago: executing program 3 (id=2224): socket$l2tp6(0xa, 0x2, 0x73) unshare(0x8040480) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48) r1 = socket(0x2c, 0x3, 0x0) setrlimit(0x7, &(0x7f0000000400)) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r1}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000580)="3f1c2725e7", 0x5}], 0x2}, 0x4000000) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000140), &(0x7f0000000080)=@udp=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_crypto(0x10, 0x3, 0x15) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x94}}, 0x0) r9 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000400)=0xc) sendmsg$nl_xfrm(r7, 0x0, 0x24000014) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002d00090027bd7000fedbdf250500"], 0x1c}}, 0x20000086) syz_usb_connect(0x5, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x110, 0x14, 0x8b, 0xe2, 0x10, 0x1286, 0x1fa4, 0x1d4a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfa, 0x3, 0xd0, 0x8e, [{{0x9, 0x4, 0xfa, 0x9, 0x0, 0x6e, 0xb9, 0xde, 0x8}}]}}]}}, 0x0) 3m57.286039334s ago: executing program 3 (id=2225): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000006000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000080"], 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) socket$l2tp6(0xa, 0x2, 0x73) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x2, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r3, 0x23, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000c0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) fsopen(&(0x7f0000000240)='jfs\x00', 0x1) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x6, 0x1000, 0x6, 0x86c}}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m56.001056181s ago: executing program 4 (id=2228): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000007c0)=ANY=[@ANYRES16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x6d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000740)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r6, 0x8919, &(0x7f00000000c0)={'veth0_to_team\x00', {0x2, 0x0, @private}}) fchdir(r5) write$cgroup_int(r4, &(0x7f0000000040)=0x800000000001c8, 0x12) madvise(&(0x7f0000304000/0x3000)=nil, 0x3000, 0x13) bind$inet6(r5, &(0x7f00000005c0)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r8 = accept$alg(r7, 0x0, 0x0) write$binfmt_script(r8, &(0x7f0000000600), 0xfec8) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$kcm(0x10, 0x2, 0x0) 3m54.663994299s ago: executing program 3 (id=2230): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x7e) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtclass={0x68, 0x28, 0x4, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0xa}, {0xf, 0xb}, {0x1, 0xb}}, [@c_atm={{0x8}, {0x24, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xd}}, @TCA_ATM_FD={0x8}, @TCA_ATM_FD={0x8}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff3, 0x275461a364d8dd42}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x7}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000840}, 0x880) recvmsg$can_raw(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/34, 0x62}, {&(0x7f00000006c0)=""/117, 0x4e}], 0x2}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[], 0x2c}}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000fb0000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000007010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004"], 0xd4}}, 0x20000040) 3m54.437929876s ago: executing program 4 (id=2232): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) bind$inet6(r2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x317, 0x1, 0x34, 0x9}, 0x9c) 3m53.377614135s ago: executing program 3 (id=2234): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x100000, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 3m14.133178577s ago: executing program 33 (id=2216): epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) socket(0x5, 0x800, 0xfffffffe) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_pressure(r0, 0x0, 0x2, 0x0) r1 = syz_clone(0x100100, &(0x7f0000000100)="eeac2b85824933939adc5106013bb82db18ddf03", 0x14, &(0x7f00000003c0), 0x0, 0x0) prlimit64(r1, 0x0, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @private=0xa050101}, 0x0, 0x1}}, 0x26) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x10, 0x1405, 0x621}, 0x10}}, 0x40082) syz_io_uring_setup(0x83, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0x352}, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r5 = dup(r4) open(&(0x7f0000000100)='./file0\x00', 0x440, 0x0) write$FUSE_BMAP(r5, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r5, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f00000005c0)=ANY=[@ANYBLOB="b9"], 0xb8) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',cache=fscache']) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x22) writev(r6, &(0x7f0000000000)=[{&(0x7f00000006c0)='\t', 0x2003f}], 0x1) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs2/custom0\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000580), 0xa, 0x0) read$msr(r7, &(0x7f0000032680)=""/102392, 0x18ff8) 3m13.915701116s ago: executing program 34 (id=2233): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) mknod(0x0, 0x8001420, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff62, &(0x7f00000002c0)=0x1002) syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0xfffffd5e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, r2, 0x101, 0x70bd2c, 0x25dfdbde}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) 3m13.843634892s ago: executing program 35 (id=2226): r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0xb, r0, &(0x7f0000003140)=""/4083, 0xff3) socket$kcm(0x2, 0x7, 0x84) socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x69, 0x2004, @fd=r1, 0x5, &(0x7f0000000200)=[{&(0x7f00000001c0)="998f8ab0e5b2fd31099a728af31e59e526085dbedf996ae5e16573f8aa68ad496f0dba885664ca", 0x27}, {&(0x7f0000000780)="1ee46a187dc406e9607d1201ca62624597a7d557885d3786ce32e40beaa212c6c9746d03af5c171e7c4a8fdca7149061307197bfd82354bfca13771c80d9fb730a2130c1a041fa102ebe954e11a05d8ed0644ca3c3f7b40dc0fa50132139b50889bc71b737274354917edf8531c55e6cfe90cc414417efde22e41eeb6f806ad332c454d7009a6d3bdaba800bbf654ed28ffed816a12f842b1d9a29f076d7c36d94bb6f2ce11f9ccd05c244cf841a9261f694cae2f1e5dc765963492cf88b53e50ceda6c1cfc0cc12", 0xc8}], 0x2, 0x4, 0x0, {0x2}}) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) 3m13.763219163s ago: executing program 36 (id=2234): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x100000, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 3m13.612077052s ago: executing program 37 (id=2232): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) bind$inet6(r2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x317, 0x1, 0x34, 0x9}, 0x9c) 2m52.552429712s ago: executing program 7 (id=2257): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = inotify_init() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x1400037e) mkdir(0x0, 0x0) mkdir(0x0, 0x0) mkdir(0x0, 0x1f2) chdir(0x0) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_setup(0x7d, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x5) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file5\x00', 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r5, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0xbff}, @ib={0x1b, 0x38e, 0x0, {'\x00\a\x00'}, 0x0, 0x40000000, 0x8}}}, 0x118) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000a40)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004520005800680000d62f9078ac1414bbac1414aa0421880b000000030d000800090086dd080088be000000021d090300010000000000ffffffff0000000000032bf755030200000000000200000201150800655800000000"], 0x0) 2m52.145804068s ago: executing program 7 (id=2258): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r8}, 0x10) nanosleep(&(0x7f0000000200), 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r10, 0x5606, 0x4) r11 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r11, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r11, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r11, 0x0, 0x0, 0x4000000, &(0x7f0000000240)={0x2, 0x4e21, @private=0xa010100}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56441, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syzkaller0\x00'}) 2m50.142379409s ago: executing program 7 (id=2261): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff0000000000000000", @ANYRES32, @ANYBLOB="0000000000000004180000000000001000000000000200009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="180300"/14, @ANYRES32, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xts-aes-neon)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0xc014) creat(&(0x7f0000000280)='./file0\x00', 0xc1) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) 2m47.721107153s ago: executing program 7 (id=2267): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x1c}}, 0x4000041) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x1614c6, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000200)=0x5, &(0x7f0000000240)=0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) finit_module(r3, &(0x7f0000000300)='/dev/vcsa\x00', 0x1) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x74, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x14}}}}, [@NL80211_ATTR_FRAME_MATCH={0x41, 0x5b, "344116aef563b0b51bbf5080f6e2563eb8bbd7c7f139c9709048beb2584208044e746fdb4539e87983ae35333085ba3e0254a16ef61de0aaaafc793dbe"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000800) pselect6(0x40, &(0x7f00000004c0)={0x4, 0x5, 0x3ffc000, 0x3, 0xff, 0x6, 0x5, 0x3}, &(0x7f0000000500)={0x1, 0x8, 0x5, 0x6660, 0x8001, 0x101, 0xfffffffffffffffd, 0xeb}, &(0x7f0000000540)={0x8000, 0xfff, 0x3, 0x29, 0x101, 0x9, 0x4, 0x400}, &(0x7f0000000580), &(0x7f0000000600)={&(0x7f00000005c0)={[0x4]}, 0x8}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000007c0)={'gretap0\x00', &(0x7f0000000680)={'ip_vti0\x00', 0x0, 0x40, 0x8000, 0x8, 0x5, {{0x3c, 0x4, 0x1, 0x8, 0xf0, 0x64, 0x0, 0x8, 0x4, 0x0, @loopback, @empty, {[@rr={0x7, 0x27, 0xad, [@multicast2, @multicast2, @dev={0xac, 0x14, 0x14, 0x38}, @local, @multicast1, @dev={0xac, 0x14, 0x14, 0xe}, @private=0xa010100, @local, @rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0xc, 0xc2, 0x3, 0xb, [{@local, 0x4}]}, @cipso={0x86, 0x63, 0x3, [{0x6, 0x10, "12aa0f7e7a2dca41f62cb8fc045c"}, {0x7, 0x2}, {0x0, 0x4, "a1c3"}, {0x0, 0x10, "dd867664b146ad568563f575c910"}, {0x6, 0xf, "2009a1ee0c4ec5c0c1d0581385"}, {0x7, 0xc, "611f869e4345b0c4aceb"}, {0x5, 0xc, "47df210b396196738e0a"}, {0x7, 0x10, "49af50bcbc75291b540ee022f842"}]}, @timestamp={0x44, 0xc, 0xfd, 0x0, 0x6, [0x67a, 0x327a]}, @cipso={0x86, 0x36, 0x3, [{0x1, 0x8, "18c868ab47c5"}, {0x2, 0x3, '%'}, {0x7, 0x10, "df1e577cdcac991d6f2071f029a0"}, {0x2, 0x3, 'V'}, {0x5, 0x12, "9b3a24be7624771eb8dd8fcff5313db5"}]}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000880)={'ip6_vti0\x00', &(0x7f0000000800)={'syztnl1\x00', 0x0, 0x29, 0xe, 0xfb, 0x8, 0x1a, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x20, 0x1, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000980)={'tunl0\x00', &(0x7f00000008c0)={'syztnl2\x00', 0x0, 0x7800, 0x20, 0xc, 0xfffffffa, {{0x1c, 0x4, 0x1, 0x3f, 0x70, 0x67, 0x0, 0x3, 0x2, 0x0, @rand_addr=0x64010101, @remote, {[@generic={0x82, 0x9, "96e869b0657131"}, @ssrr={0x89, 0x1b, 0x8b, [@private=0xa010100, @remote, @private=0xa010102, @multicast2, @local, @remote]}, @cipso={0x86, 0x32, 0x0, [{0x7, 0xc, "7eecd20fa5aa2e16a006"}, {0x5, 0x12, "e343c43408f52e5012a4363cf05a0ee4"}, {0x1, 0xe, "d8919bc7d7e5f9b000142aaf"}]}, @ra={0x94, 0x4, 0x1}, @end]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c80)={r6, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x87, &(0x7f0000000a80)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000ac0), &(0x7f0000000b00), 0x8, 0x39, 0x8, 0x8, &(0x7f0000000b40)}}, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000d80)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x7c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9}, 0x8000) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000001880)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001840)={&(0x7f0000000e40)={0x9d8, r11, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1a8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x30, 0x401, 0x10, 0x1, 0x5, 0x2, 0xfff, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x1, 0x5e, 0x9, 0x7f, 0x4, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x800, 0x0, 0x101, 0x4, 0xfb, 0x800, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x1, 0x7}, {0x3, 0xa}, {0x4, 0x3}, {0x5, 0x5}, {0x4, 0x3}, {0x0, 0x8}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x3}, {0x5, 0x7}, {0x4, 0x1}, {0x1}, {0x4}, {0x7, 0x8}, {0x0, 0xa}, {0x0, 0x9}, {0x4, 0x3}, {0x6, 0x7}, {0x6, 0xa}, {0x2, 0xa}, {0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x0, 0x7}, {0x4, 0x8}, {0x1, 0x7}, {0x5}, {0x3, 0x1}, {}, {0x1, 0x5}, {0x7, 0x3}, {0x4}, {0x2}, {0x1, 0x3}, {0x5, 0x6}, {0x6, 0xa}, {0x2, 0x5}, {0x6, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1, 0x4, 0x0, 0x9, 0x3, 0xd4, 0x9]}}]}, @NL80211_BAND_5GHZ={0xd4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xde, 0x8, 0x80, 0x7, 0x6, 0xe44, 0xd, 0x2]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x7, 0x1}, {0x1, 0x7}, {0x5, 0x2}, {0x3}, {0x0, 0xa}, {0x1, 0x3}, {0x2, 0xa}, {0x3, 0x5}, {0x6, 0x9}, {0x0, 0xa}, {0x7, 0x6}, {0x0, 0x2}, {0x3}, {0x4, 0x3}, {0x4, 0x7}, {0x2}, {0x3, 0x6}, {0x7, 0x9}, {0x5, 0x9}, {0x4, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x1, 0x4}, {0x3, 0x9}, {0x1, 0x3}, {}, {0x0, 0x5}, {0x4}, {0x1, 0x4}, {0x6, 0x4}, {0x6, 0x3}, {0x3, 0x5}, {0x4, 0x7}, {0x4, 0x5}, {0x4, 0x3}, {0x5, 0x4}, {0x4, 0xa}, {0x7, 0x1}, {0x0, 0x2}, {0x4, 0x4}, {0x1, 0xa}, {0x7, 0x1}, {0x0, 0x4}, {0x3, 0x1}, {0x6, 0x4}, {0x2, 0x7}, {0x4, 0x1}, {0x0, 0x5}, {0x1}, {0x7, 0x8}, {0x4, 0x6}, {0x2, 0x2}, {0x4, 0x7}, {0x1, 0x3}, {0x3, 0xa}, {0x1, 0x6}, {0x3, 0x2}, {0x0, 0x4}, {0x1, 0x7}, {0x2, 0x3}, {0x4, 0x9}, {0x6, 0x2}, {0x2, 0x8}, {0x0, 0x2}, {0x1, 0x8}, {0x5, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0xff50, 0x7fff, 0x6, 0x7, 0x0, 0xfff, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xdc1, 0x2, 0x0, 0x5, 0xb, 0x5, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x4, 0x6, 0xb, 0x60, 0x24, 0x4, 0x24, 0x60, 0x6c, 0x5, 0x12, 0xb, 0x5, 0x24, 0x36, 0x11, 0x9, 0xc, 0x6c, 0x3c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x6, 0xfff, 0x9, 0x8, 0x70, 0x98, 0xff80]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x67aa, 0x4, 0x2, 0x3, 0x8001, 0x8, 0xc]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x1, 0x5, 0x6, 0x582, 0x800, 0xa, 0xc]}}]}]}, @NL80211_ATTR_TX_RATES={0x2f4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xf69, 0xf, 0x9, 0x1, 0x9, 0x4, 0x2, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x4, 0x12, 0x6c, 0x64, 0x0, 0xb, 0x1a, 0xf, 0x1, 0x36, 0xb, 0xb, 0x1b, 0x19, 0x9, 0x3, 0x4, 0x2, 0x5, 0xb, 0x4, 0x24, 0xc, 0x1b, 0x5, 0x18, 0x5, 0x1, 0x60, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7, 0x4, 0x2, 0x200, 0x8, 0x5, 0x3ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0xffff, 0x9, 0x2, 0x5, 0x2, 0xdf3a, 0x3ff]}}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x8, 0xbe1, 0xfffb, 0x7fff, 0x9, 0x3, 0x7fff]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x80, 0x7, 0x142, 0x1, 0x4, 0x0, 0x8001]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x1, 0x2, 0x1, 0x7aca, 0x8, 0x1, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0xd8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x0, 0xa}, {0x4, 0x9}, {0x0, 0x2}, {0x0, 0x6}, {0x7, 0x6}, {0x4, 0xa}, {0x7, 0x7}, {0x5}, {0x0, 0x8}, {0x3, 0x3}, {0x6, 0x6}, {0x4}, {0x6, 0xa}, {}, {0x1, 0xa}, {0x0, 0x8}, {0x5, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x2, 0x2}, {0x0, 0x8}, {0x6, 0x1}, {0x7, 0x3}, {0x5, 0x7}, {0x3, 0xa}, {0x3}, {0x1, 0x8}, {0x1, 0x8}, {0x1}, {0x1, 0x2}, {0x3, 0x9}, {0x4, 0x9}, {0x0, 0x8}, {0x3, 0x9}, {0x3, 0x2}, {0x1, 0xa}, {0x4, 0xa}, {0x0, 0xa}, {0x3, 0x8}, {0x1, 0x7}, {0x0, 0x2}, {0x1, 0x8}, {0x6, 0x1}, {0x4, 0x7}, {0x0, 0x7}, {0x3, 0x5}, {0x1, 0x1}, {0x4, 0x2}, {0x2, 0xa}]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x7, 0x9}, {0x0, 0x3}, {0x4, 0x7}, {0x3, 0x3}, {0x0, 0x1}, {0x6, 0x4}, {0x6, 0x9}, {0x1, 0xa}, {0x5, 0x1}, {0x1, 0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x2}, {0x5, 0x5}, {0x6, 0x5}, {0x5, 0x7}, {0x4, 0x6}, {0x1, 0x3}, {0x0, 0x1}, {0x7, 0x4}, {0x1, 0x5}, {0x3}, {0x1, 0x3}, {0x1, 0x5}, {0x6, 0x5}, {0x0, 0x3}, {0x2, 0xa}, {0x5, 0xa}, {0x0, 0x1}, {0x7, 0x9}, {0x0, 0x8}, {0x7, 0x4}, {0x7, 0x6}, {0x6, 0x4}, {0x3, 0x2}, {0x5, 0x8}, {0x6, 0x5}, {0x0, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7c1, 0xed18, 0xcc9, 0x8, 0x616, 0x7f, 0x8, 0x6]}}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x6, 0x8}, {0x4, 0x3}, {0x1, 0x5}, {0x1, 0x8}, {0x5}, {0x1, 0x1}, {0x4, 0x4}, {0x4, 0x1}, {0x3, 0x7}, {0x5, 0xa}, {0x1, 0xa}, {0x5, 0x8}, {0x5, 0x3}, {0x2, 0x6}, {0x4, 0x4}, {0x0, 0x8}, {0x1, 0x1}, {0x4, 0x2}, {0x0, 0x3}, {0x2, 0x7}, {0x1, 0x9}, {0x4, 0x6}, {0x2, 0x8}, {0x0, 0x4}, {0x2, 0x1}, {0x3, 0xa}, {0x4}, {0x0, 0x6}, {0x6, 0x8}, {0x1, 0x8}, {0x1, 0xa}, {0x0, 0xa}, {0x6, 0xa}, {0x1, 0x8}, {0x2, 0xa}, {0x1, 0x9}, {0x7, 0x2}, {0x6}, {0x4}, {0x4, 0x8}, {0x1, 0x4}, {0x1, 0xa}, {0x0, 0xa}, {0x1, 0x9}, {0x7, 0x5}, {0x1, 0x2}, {0x3, 0xa}, {0x6, 0x8}, {0x1, 0xa}, {0x7, 0x3}, {0x7, 0x9}, {0x4, 0xa}, {0x2, 0x1}, {0x0, 0x8}, {0x1, 0x6}, {0x1}, {0x1}, {0x4, 0x4}, {0x2}, {0x5, 0x4}, {0x5, 0x7}, {0x7}, {0x4, 0x3}, {0x4}, {0x7, 0x2}, {0x1, 0x9}, {0x4, 0x1}, {0x2, 0x6}, {0x5, 0x7}, {0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0xb, 0x13, 0x5, 0x4, 0xb, 0x6, 0x0, 0x6c, 0x31, 0x1, 0x28, 0x60, 0x1, 0x3, 0x1, 0x24, 0x1, 0x6c, 0x18, 0x1, 0x18, 0x3, 0x45, 0x69, 0xc, 0x30, 0x6, 0xc, 0x3, 0x6, 0x9, 0x12]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x9, 0x12, 0x12, 0x6, 0x1, 0x5, 0x18, 0x6, 0x12, 0x3, 0x26, 0x48, 0x70, 0x7d, 0x24, 0x9, 0x6, 0x2, 0x1b, 0x6, 0x16, 0xc]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x200, 0xa6a, 0x80, 0x1, 0x1, 0x26ad, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x24, 0x36, 0x6, 0x24, 0x60, 0x12, 0x12, 0x36, 0xc, 0x24, 0x9, 0x5, 0x18, 0x5, 0x3, 0x1b, 0xc, 0x48, 0x2, 0x16, 0x30, 0x3, 0x48, 0x3, 0x18]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x3, 0x9}, {0x0, 0x5}, {0x4, 0x5}, {0x2, 0x2}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {0x1}, {0x6, 0x7}, {0x5, 0x9}, {0x5}, {0x2, 0x5}, {0x5, 0x9}, {0x2, 0x7}, {0x7, 0x2}, {0x0, 0x1}, {0x0, 0x8}, {0x6, 0x3}, {0x5, 0x7}, {0x4, 0x4}, {0x2, 0x8}, {0x1, 0x7}, {0x4}, {0x0, 0x7}, {0x4, 0x7}, {0x0, 0x3}, {0x6, 0x2}, {0x2, 0x4}, {0x4, 0x8}, {0x7, 0x3}, {0x1, 0x5}, {0x1, 0x7}, {0x0, 0x8}, {0x7, 0x7}, {0x1}, {0x3, 0x4}, {0x2, 0x2}, {}, {0x4, 0x7}, {0x7, 0x4}, {0x1, 0x2}, {0x2, 0x9}, {0x3, 0x8}, {0x1, 0x2}, {0x6, 0x3}, {0x2, 0x8}, {0x0, 0x3}, {0x7, 0x2}, {0x4}, {0x3}, {0x6, 0x4}, {0x0, 0x2}, {0x1}, {0x7, 0x4}, {0x3, 0x2}, {0x0, 0x8}, {0x7, 0x3}, {0x4, 0x6}, {0x4, 0x8}, {0x2, 0x7}, {0x1}, {0x6, 0x7}, {0x0, 0x8}, {0x3, 0xa}, {0x1, 0x8}, {0x0, 0x7}, {0x0, 0x5}, {0x0, 0x3}, {0x5, 0x5}, {0x7, 0x7}]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x36, 0xb, 0x58, 0x24, 0x5, 0xb]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x21f1b9ecce5e7603, 0x24, 0x6c]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6000, 0x3, 0xa0, 0x2, 0x7, 0x7, 0x5, 0x4]}}]}]}, @NL80211_ATTR_TX_RATES={0xc0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xbc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0x6, 0x8, 0xd, 0x1ff, 0x9]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1, 0xc, 0x24, 0x2, 0x30, 0x16, 0x30, 0x16, 0x60, 0x36, 0x3, 0x36, 0x6c, 0x12, 0x48, 0xc, 0x30, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xfffa, 0xb, 0x9, 0x8a0e, 0xad11, 0x4, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x4}, {0x5, 0x5}, {0x4, 0x2}, {0x4, 0x1}, {0x2, 0x5}, {0x4}, {0x1, 0x3}, {0x1, 0x2}, {0x3, 0x8}, {0x6, 0x4}, {0x6, 0x8}, {0x2, 0x7}, {0x3, 0x9}, {0x6, 0x9}, {0x1, 0x2}, {0x1, 0x8}, {0x1, 0x8}, {0x6, 0x6}, {0x0, 0x3}, {0x0, 0x9}, {0x2, 0xa}, {0x0, 0x4}, {0x0, 0x9}, {0x3, 0x1}, {0x1, 0x7}, {0x3, 0x5}, {0x4, 0x7}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x1}, {0x4, 0x2}, {0x4, 0x9}, {0x7, 0x1}, {0x7, 0x8}, {0x2, 0x9}, {0x1, 0x5}, {0x1, 0x5}, {0x0, 0x9}, {0x0, 0x8}, {0x4, 0x1}, {0x2, 0x6}, {0x5, 0xa}, {0x5, 0x3}, {0x5, 0x4}, {0x7, 0x2}, {0x1, 0x1}, {0x4, 0x4}, {0x3, 0x5}, {0x4, 0x4}, {0x7, 0x6}, {0x3, 0x3}, {0x7, 0x6}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x1}, {0x3, 0x7}, {0x0, 0x9}, {0x1, 0x2}, {0x2, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0x3907, 0x1, 0x7, 0x55b0, 0x1, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xee, 0xd, 0x7, 0xea, 0x6, 0x5, 0x4, 0x3]}}]}]}, @NL80211_ATTR_TX_RATES={0x1f4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xd0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xe38, 0x6f, 0x4, 0x9, 0x4, 0x800, 0x7fff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x18, 0x3, 0x12, 0x24, 0x2, 0x1, 0x18, 0x48, 0x60, 0x2, 0x12, 0x48, 0x1, 0xb, 0x9, 0xc, 0x18, 0x36, 0xb, 0x18, 0x16]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x8001, 0x3e, 0x5, 0x7, 0x4, 0x4, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x1, 0x4}, {0x0, 0x3}, {0x7, 0x9}, {0x6, 0x5}, {0x5, 0x9}, {0x3, 0x8}, {0x0, 0x9}, {0x4, 0xa}, {0x0, 0x9}, {0x1, 0x9}, {0x0, 0x9}, {0x3, 0x4}, {0x6, 0xa}, {0x3, 0x9}, {0x7, 0x5}, {0x6, 0x3}, {0x1, 0x3}, {0x6, 0x9}, {0x4, 0xa}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0xa}, {0x5}, {0x3, 0x9}, {0x5, 0x8}, {0x0, 0x8}, {0x7, 0x2}, {0x0, 0x9}, {0x5, 0x6}, {0x4, 0x5}, {0x2, 0x3}, {0x1, 0xa}, {0x1, 0xa}, {0x3}, {0x7, 0x6}, {0x3, 0x1}, {0x4, 0x3}, {0x2, 0x2}, {0x3, 0x8}, {0x5, 0x9}, {0x2, 0x2}, {}, {0x4, 0x9}, {0x2, 0xa}, {0x0, 0x9}, {0x6, 0x5}, {0x0, 0x6}, {0x0, 0x3}, {0x4, 0x5}, {0x4, 0x2}, {0x6, 0x8}, {0x2, 0x6}, {0x0, 0x2}, {0x1, 0x8}, {0x0, 0x2}, {0x6, 0x2}, {0x4}, {0x5, 0x5}, {0x2, 0x8}, {0x0, 0xa}, {0x3, 0x2}, {0x0, 0x9}, {0x6, 0x4}, {0x1, 0xa}, {0x2, 0x9}, {0x4, 0x7}, {0x1, 0x2}, {0x7, 0x4}, {0x6, 0x7}, {0x7, 0x8}, {0x3, 0x5}, {0x0, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xdb, 0x4, 0x6, 0x1ff, 0xc044, 0x9, 0x1000, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x4]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x6, 0x3}, {0x3}, {0x4, 0x2}, {0x3, 0x4}, {0x5, 0x5}, {0x4, 0x7}, {0x7, 0x7}, {0x4, 0x2}, {0x7, 0x9}, {0x4}, {0x7, 0x2}, {0x1, 0x6}, {}, {0x0, 0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x6}, {0x0, 0x3}, {0x2, 0x5}, {0x7}, {0x4, 0x8}, {0x4}, {0x3, 0x7}, {0x5, 0x5}, {0x7, 0xa}, {0x2, 0x5}, {0x6, 0x8}, {0x4, 0x2}, {0x7, 0x7}, {0x6, 0x1}, {0x1, 0x7}, {0x4, 0x7}, {0x2, 0xa}, {0x1, 0x9}, {0x2, 0x8}, {0x4, 0x9}, {0x3, 0x1}, {0x7, 0x4}, {0x5, 0x6}, {0x5, 0x1}, {0x6, 0x7}, {0x2, 0x8}, {0x0, 0x7}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x2}, {0x2, 0x7}, {0x2, 0x9}, {0x1}, {0x1, 0x2}]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0xb, 0x11, 0x6, 0x24, 0x2, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x5, 0x8}, {0x3, 0x4}, {0x5, 0x6}, {0x3, 0x8}, {0x0, 0x4}, {0x0, 0x4}, {0x1, 0x1}, {0x0, 0x7}, {0x5, 0x2}, {0x1, 0x1}, {0x5, 0x9}, {0x7, 0x9}, {0x3, 0x5}, {0x0, 0x4}, {0x4, 0x8}, {0x6, 0x9}, {0x1, 0x5}, {0x4}, {0x5, 0x2}, {0x4}, {0x7, 0x6}, {0x1, 0x2}, {0x7, 0x3}, {0x3}, {0x0, 0x6}, {0x4, 0x9}, {0x6, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa482, 0x7, 0x8, 0x6, 0x7, 0x7, 0x5, 0x4d41]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd6, 0xc, 0x0, 0x4, 0x2000, 0x4000, 0xdc, 0x101]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x6, 0x0, 0xb, 0x16, 0x10, 0x1b, 0x16, 0x24, 0x1b, 0x18, 0x16, 0x3, 0x24, 0x36, 0x4, 0x6, 0x30, 0x18]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x1c, 0x2, [{}, {0x4, 0x3}, {0x2, 0x8}, {0x7, 0x5}, {0x5, 0x3}, {0x5, 0x8}, {0x1}, {0x6, 0x4}, {0x1, 0x1}, {0x4, 0xa}, {0x6, 0xa}, {0x2, 0x7}, {0x4, 0x3}, {0x1, 0x9}, {0x7, 0x2}, {0x1, 0x4}, {0x3, 0x4}, {0x7}, {0x7, 0xa}, {0x2, 0x5}, {0x4, 0x6}, {0x0, 0xa}, {0x4, 0xa}, {0x0, 0x1}]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x48, 0x30, 0x24, 0x9, 0x30, 0x24, 0x3, 0x6c, 0x16, 0x60, 0x1, 0x24]}]}]}, @NL80211_ATTR_TX_RATES={0xd0, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x4, 0x2, 0x7, 0x8, 0x9, 0x5, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x2, 0x3, 0x0, 0x18, 0x9, 0x6c, 0xb, 0x6, 0x9, 0x6c, 0x3, 0x18, 0x16, 0x7a, 0x12, 0x12, 0x16, 0x1, 0x3, 0x56, 0x16, 0x12, 0x30, 0x1b, 0x24, 0xc]}]}, @NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x89}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8000, 0x84f, 0x2, 0x2, 0x0, 0x0, 0xfabc]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x12, 0x24, 0x1, 0x38, 0x6, 0xc, 0x30, 0x12, 0x36, 0x24, 0x5, 0x5, 0xc, 0x12, 0x4, 0x9, 0x60, 0x24, 0x24, 0x3, 0x1, 0xc, 0x2a0055ff25161723, 0x6, 0x6b, 0x6c, 0x24, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x9, 0xf47e, 0x5, 0x8, 0x612, 0x2, 0x800]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff7, 0x6, 0x0, 0x0, 0x3, 0x8, 0x198, 0x2]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x48, 0x36, 0x1, 0x9, 0x16, 0x3, 0x60, 0x6c, 0x60, 0x6, 0x12, 0x5, 0x6c, 0x2, 0x9, 0xc]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0xa8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xf6f2, 0x8001, 0x2, 0x6, 0x6, 0x0, 0x3]}}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3b, 0x2, [{0x6, 0x2}, {0x0, 0x6}, {0x6, 0x7}, {0x1, 0x2}, {0x6, 0x8}, {0x2, 0x6}, {0x7, 0x4}, {0x4, 0x9}, {}, {0x3, 0x5}, {0x2, 0x8}, {0x2}, {0x2, 0x2}, {0x5}, {0x0, 0x3}, {0x1}, {0x4}, {0x2, 0x3}, {0x2, 0x8}, {0x7, 0x1}, {0x1, 0x3}, {0x1, 0x8}, {0x5, 0x9}, {0x2, 0x8}, {0x0, 0xa}, {0x0, 0x7}, {0x3, 0x5}, {0x0, 0x9}, {0x2, 0x2}, {0x1, 0x3}, {0x1, 0x4}, {0x4, 0x6}, {0x6, 0x3}, {0x3, 0x6}, {0x4, 0x6}, {0x2, 0x5}, {0x4, 0x5}, {0x5, 0x5}, {0x6, 0x4}, {0x2, 0x3}, {0x3, 0x1}, {0x4}, {0x2, 0x7}, {0x3, 0x2}, {0x4, 0x2}, {0x3, 0x9}, {0x2, 0x9}, {0x1, 0x9}, {0x3, 0x4}, {}, {0x7, 0x2}, {0x4, 0x3}, {0x7, 0x4}, {0x5, 0xa}, {0x5, 0x9}]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4, 0x3, 0xfff7, 0x5, 0x7fff, 0x200, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0xf4, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x29, 0x2, [{0x1, 0x5}, {0x7, 0x1}, {0x1, 0x3}, {0x2}, {0x4, 0x2}, {0x1, 0x5}, {0x4, 0x8}, {0x3, 0x2}, {0x6, 0x2}, {0x6, 0x4}, {0x6, 0x2}, {0x4, 0x7}, {0x3, 0x8}, {0x3, 0x1}, {0x0, 0x8}, {0x0, 0x6}, {0x0, 0x9}, {0x6, 0xa}, {0x0, 0x6}, {0x1, 0x6}, {0x3, 0x1}, {}, {0x3}, {0x3, 0x2}, {0x1, 0x7}, {0x7, 0x6}, {0x3, 0x1}, {0x6, 0x1}, {0x2, 0x9}, {0x7, 0x9}, {0x4, 0x7}, {0x1, 0x4}, {0x4, 0x1}, {0x1, 0x9}, {0x3, 0x2}, {0x4, 0x2}, {0x7, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x7, 0x5}, {0x2, 0x2}, {0x1, 0x9}, {0x2, 0x6}, {0x2, 0x5}, {0x0, 0xa}, {0x7, 0x5}, {0x1, 0x9}, {0x0, 0x4}, {0x7, 0x6}, {0x7}, {0x4, 0x6}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x6}, {0x6, 0x6}, {0x2, 0x4}, {0x1, 0x2}, {}, {0x6, 0x2}, {0x3, 0x6}, {0x3, 0x9}, {}, {0x3, 0x5}, {0x0, 0x6}, {0x5, 0x8}, {0x5, 0x1}, {0x0, 0x2}, {0x1, 0x5}, {0x3}, {0x2, 0x6}, {0x4, 0x5}, {0x2}, {0x7}, {0x4, 0x6}, {0x2, 0x2}, {0x5, 0x9}, {0x7, 0x2}, {0x1, 0x2}, {0x0, 0x7}, {0x4, 0x9}, {0x4, 0x9}, {0x0, 0x2}, {0x0, 0x2}, {0x0, 0x8}, {0x0, 0x2}, {0x0, 0x9}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x7, 0x4}, {0x3, 0x2}, {0x4, 0x6}, {0x3, 0x1}, {0x7, 0x5}, {0x2, 0xa}, {0x5, 0x1}, {0x3, 0x4}, {0x2}, {0x4, 0xa}, {0x6, 0xa}, {0x3, 0x6}, {0x6, 0x1}, {0x1, 0x3}, {0x5, 0x1}, {0x5, 0x2}, {0x3, 0xa}, {0x2, 0x7}, {0x0, 0x6}, {0x7, 0x5}, {0x2, 0x3}, {0x2, 0x1}, {0x2}, {0x6}, {0x1, 0x9}, {0x0, 0xa}]}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3c, 0x2, [{0x2, 0x2}, {0x4, 0x5}, {0x7, 0x1}, {0x4, 0x3}, {0x1, 0x9}, {0x6, 0xa}, {0x1, 0x9}, {0x1, 0x5}, {0x7, 0x2}, {0x0, 0x1}, {0x4, 0x9}, {0x5, 0x2}, {0x5, 0x2}, {0x0, 0x8}, {0x6, 0x3}, {0x2, 0x6}, {0x1, 0x3}, {0x5, 0x7}, {0x6, 0x7}, {0x4, 0x3}, {0x5}, {0x1, 0xa}, {0x6, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x7, 0x8}, {0x1, 0xa}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x6}, {0x0, 0x7}, {0x3, 0xa}, {0x6, 0x8}, {0x6, 0x3}, {0x0, 0x1}, {0x0, 0x3}, {0x5}, {0x1, 0x9}, {0x5, 0x1}, {0x5, 0xa}, {0x7, 0x2}, {0x5, 0x3}, {0x0, 0x6}, {0x0, 0x9}, {0x0, 0x9}, {0x1, 0xa}, {0x1}, {0x6, 0x9}, {0x1, 0x1}, {0x4, 0x8}, {0x0, 0x4}, {0x2, 0x1}, {0x3, 0x4}, {0x6, 0xa}, {0x6, 0x8}]}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x5, 0x0, 0x4, 0x400, 0x6, 0x9]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x9d8}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) ioctl$COMEDI_CMDTEST(r6, 0x8050640a, &(0x7f0000001940)={0x1, 0x1, 0x4, 0xe6ee, 0x0, 0xfffffff2, 0x10, 0x7, 0xffffffff, 0x2f4, 0x20, 0x3, &(0x7f00000018c0)=[0x8001], 0x1, &(0x7f0000001900)="aa31ac79f7e3cc6c213f0bc86a0c7c24ef82531757d7ae60bc39326c57c4ee8207661a2061077748d35c16470cb622e3e5368054d29a6cc8", 0x38}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000019c0)={0x0, 0x3}, &(0x7f0000001a00)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000001a40)={r12, 0x72df}, &(0x7f0000001a80)=0x8) read$FUSE(r3, &(0x7f0000001ac0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000003b00)={0x50, 0xfffffffffffffffe, r13, {0x7, 0x2b, 0xffff7fff, 0x4420281, 0xd24, 0xe, 0x7, 0xf256, 0x0, 0x0, 0x100}}, 0x50) r14 = shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x6000) shmdt(r14) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000003d40)={&(0x7f0000003b80), 0xc, &(0x7f0000003d00)={&(0x7f0000003bc0)={0x11c, r1, 0x420, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x75}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0xf4, 0x5b, "ad609158827505a749ad1c64b44c175a5d8772afc40e48dad119ce803a8fd00c0b9cbfd76a59c7faef80f942a352ba20423ab838bba5c54d29dbbcf796167d0acef4781259d8d132a3df4a717251cc23d58b812f16607b2018b89b530552de8ba11b82803bdb8eedbaee727cf6e1237c56960ba1667a20be205674a61763a102413a56dd7f171bb1ee807a8c65702b5802a349332024a1cdd1f73d2d9f382bb723cff1e8eeac501c3f41f7b5d7e2a6c8a5d586ebb28ea7db0ec8d96b421fa817d04337fe496e3dd606e1b6dd2d7015ee0e847a9401162b4a5c4d25a45b66e7ae93a1502178a74f3f1afcf60243c01db8"}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040891) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000003ec0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x4000004}, 0xc, &(0x7f0000003e80)={&(0x7f0000003dc0)={0x90, 0x3, 0x1, 0x600, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6952}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}]}, @CTA_PROTOINFO={0x3c, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x38, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x5}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0xb}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0xe98}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x2}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0xa}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x80}, 0x8080) 2m47.366115811s ago: executing program 7 (id=2270): r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608f8ffffff00008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bind$alg(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r4) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000240)={0xffffffffffffffff, 0x1ff, 0xffff}) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4f2, 0x1421, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0xb1, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x8, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xc, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000000)={0x2c, &(0x7f0000000080)={0x0, 0x8, 0x4, {0x4, 0x35, "00f4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYRES64=r6], 0x44}}, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 2m42.485889713s ago: executing program 7 (id=2279): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x7, 0x7ffc0002}]}) sync() r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)={0x0, @aes128, 0x0, @desc4}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000108117980800000000000109022400010000000009040000020308000009210000010122290a0905", @ANYRES32], 0x0) 2m27.151301975s ago: executing program 38 (id=2279): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x7, 0x7ffc0002}]}) sync() r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)={0x0, @aes128, 0x0, @desc4}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000108117980800000000000109022400010000000009040000020308000009210000010122290a0905", @ANYRES32], 0x0) 1m50.237476371s ago: executing program 1 (id=2438): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) mount$fuse(0x0, 0x0, 0x0, 0x2029000, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB=',group']) r3 = syz_open_dev$loop(&(0x7f0000000400), 0x4, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) r5 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000000)=0x6e, 0x800) recvmsg$unix(r5, &(0x7f0000001580)={&(0x7f0000000140), 0x6e, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/238, 0xee}, {&(0x7f0000000300)=""/78, 0x4e}, {&(0x7f0000000380)=""/106, 0x6a}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/28, 0x1c}, {&(0x7f0000001440)=""/93, 0x5d}], 0x6, &(0x7f0000001540)=[@cred={{0x1c}}], 0x20}, 0x10001) r6 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=ANY=[], 0xffffffffffffffca}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000000008104"]) 1m46.778623984s ago: executing program 1 (id=2444): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r3, @ANYBLOB='\b\x00\v\x00'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 1m45.900224437s ago: executing program 1 (id=2449): r0 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x20000000000, 0x2001) ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0x80045500, &(0x7f0000000280)) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r6 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r6, r5, 0x0, 0x80000000) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000000100)=""/119) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x1fffa2}], 0x1) 1m44.975246147s ago: executing program 1 (id=2456): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x40010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x8000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, 0x0) setpgid(0x0, r4) socket$inet(0x2, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000600000000000000f6ffffff1811", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000b", @ANYRES8], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) 1m43.480245952s ago: executing program 1 (id=2461): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0) creat(&(0x7f0000000200)='./file5\x00', 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x5, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6}]}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file5\x00', 0x2) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file5\x00') r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000500)='bbr\x00', 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000180)="4911b3a4631df762d375385e4a6dc170aa251556c7ed78b8af237adb0af0fe7dd56e65fcf164726b227b6d4c09bfe326faee128b6a00f912fd5dd60df634cb83890e6ad046d360853fd330e792d00b31d24ef5081acdcc35e86fda8a763182bd9eaecb225f738b1acbb5dd723cdcbed7ba59050b748340414d128b5f6584b9a40468c175cb68d83beaf6f2865fe906957e2e050affe71a9c40ff34acf5d21b9e", 0xa0}, {&(0x7f00000002c0)="65a06252f6a4803fe44c8c77f9ae04cbcc210e024027c4a1babaa6ed757069d1cd6ccd9261f83a22cfde5bb56101abad2d8688374a3fa31f6e67feb9c930eaf68023f401c3fcae1d0aca465475ce104faddd6d0eee2df2a30ef0904357db79eb44edf4712492ddc513b191387bc45fd895a95404bd01145c12e62b37a9fcbb1c0a22432c", 0x84}], 0x2, &(0x7f00000000c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3961}}], 0x18}, 0x4000010) sendmmsg$inet(r2, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000004300)="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", 0x455}], 0x1}}], 0x1, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) 1m38.533854615s ago: executing program 1 (id=2477): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff0000000000000000", @ANYRES32, @ANYBLOB="0000000000000004180000000000001000000000000200009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="180300"/14, @ANYRES32, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x2a, 0x2, 0x0) select(0xa2, &(0x7f0000000300)={0x9, 0x3, 0x80000000, 0x6, 0x7, 0x201, 0x8}, 0x0, 0x0, &(0x7f0000000100)={0x77359400}) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0xc014) getpid() creat(&(0x7f0000000280)='./file0\x00', 0xc1) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002780)=@newqdisc={0x28, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}}, [@TCA_STAB={0x4}]}, 0x28}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1m37.226424402s ago: executing program 39 (id=2477): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff0000000000000000", @ANYRES32, @ANYBLOB="0000000000000004180000000000001000000000000200009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="180300"/14, @ANYRES32, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x2a, 0x2, 0x0) select(0xa2, &(0x7f0000000300)={0x9, 0x3, 0x80000000, 0x6, 0x7, 0x201, 0x8}, 0x0, 0x0, &(0x7f0000000100)={0x77359400}) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0xc014) getpid() creat(&(0x7f0000000280)='./file0\x00', 0xc1) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002780)=@newqdisc={0x28, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}}, [@TCA_STAB={0x4}]}, 0x28}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 52.79361832s ago: executing program 5 (id=2605): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff0000000000000000", @ANYRES32, @ANYBLOB="0000000000000004180000000000001000000000000200009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="180300"/14, @ANYRES32, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xts-aes-neon)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0xc014) creat(&(0x7f0000000280)='./file0\x00', 0xc1) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) 51.768216617s ago: executing program 5 (id=2608): r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) prlimit64(0x0, 0x7, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330) socket$rxrpc(0x21, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r2, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002840)=ANY=[@ANYBLOB="14000000270001"], 0x14}], 0x1, 0x0, 0x0, 0x811}, 0x0) connect$rose(r0, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, 0x6, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040041}, 0x44000) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x30, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x14) execve(&(0x7f0000000000)='./file2\x00', 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x800) socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x97, 0x800000000402, 0x4, 0x100}) write$FUSE_NOTIFY_INVAL_INODE(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 50.908353307s ago: executing program 5 (id=2609): r0 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x800}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40800, 0x0) userfaultfd(0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000980)=[{&(0x7f0000000540)=""/82, 0x52}, {&(0x7f00000005c0)=""/79, 0x4f}, {&(0x7f00000006c0)=""/102, 0x66}, {&(0x7f0000000740)=""/172, 0xac}, {&(0x7f0000000800)=""/206, 0xce}, {&(0x7f0000000900)=""/119, 0x77}], 0x6) ptrace(0x10, r1) ptrace$peeksig(0x1a, r1, 0x0, &(0x7f0000000040)) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1}, 0xc) r3 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4664, 0x1, 0x3, 0x8b}, &(0x7f0000000400)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0}) io_uring_enter(r3, 0x40f9, 0x217, 0xa5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs$pagemap(r1, &(0x7f0000001340)) r7 = syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000040)={0xffffffffffffff58, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x10000000021, 0x24, 0x74, 0x0, 0x2c}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) bpf$BPF_PROG_DETACH(0x25, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000680)='.\x00', 0x88980, 0x3c) mkdirat(r8, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x408) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSET={0x14c, 0xb, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3a}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x80}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x9}, @NFTA_SET_DESC={0x38, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x80000}, @NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7d7}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4000100}, @NFTA_SET_DESC_CONCAT={0xc, 0x2, 0x0, 0x1, [{0x4}, {0x4}]}]}, @NFTA_SET_EXPR={0xc8, 0x11, 0x0, 0x1, @dynset={{0xb}, @val={0xb8, 0x2, 0x0, 0x1, [@NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_EXPRESSIONS={0x98, 0xa, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xd}]}}}, {0x10, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x4}}}, {0x40, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_DYNSET_SREG_DATA={0x8}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x12df}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x194}}, 0x8000) 48.484942359s ago: executing program 5 (id=2615): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff0000000000000000", @ANYRES32, @ANYBLOB="0000000000000004180000000000001000000000000200009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="180300"/14, @ANYRES32, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xts-aes-neon)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0xc014) creat(&(0x7f0000000280)='./file0\x00', 0xc1) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) 46.447406735s ago: executing program 5 (id=2617): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000040)=0x1202010, 0x4) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) sendmsg$IEEE802154_LLSEC_LIST_DEV(r3, &(0x7f0000001280)={0x0, 0xfffffffffffffc2b, &(0x7f0000001240)={&(0x7f0000001200)={0x14, r5, 0x301, 0x70bd26, 0x25dfdbfc}, 0x14}}, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x48100) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x2080, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r8}, 0x10) r9 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r9, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0x2, &(0x7f0000000240)={&(0x7f00000004c0)={0x44, r10, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x30, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x24008000) times(0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r11) sendmsg$NFC_CMD_DEP_LINK_UP(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2c, r12, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}}, 0x0) write$binfmt_script(r1, &(0x7f0000000380)={'#! ', './file0'}, 0xb) close_range(r9, 0xffffffffffffffff, 0x0) 45.988885302s ago: executing program 5 (id=2622): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x2040408, &(0x7f0000000340)=ANY=[]) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x78, 0x30, 0x4, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x34, 0x2, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x2a}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r4, 0x8943, &(0x7f0000000080)={'dummy0\x00', @ifru_ivalue}) shutdown(0xffffffffffffffff, 0x1) fspick(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) socket$inet6(0xa, 0x5, 0x20000b) syz_usb_connect(0x3, 0x36, 0x0, 0x0) close(0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='svc_process\x00', r6, 0x0, 0x101}, 0x18) sync() 30.927091756s ago: executing program 40 (id=2622): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x2040408, &(0x7f0000000340)=ANY=[]) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x78, 0x30, 0x4, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x34, 0x2, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x2a}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r4, 0x8943, &(0x7f0000000080)={'dummy0\x00', @ifru_ivalue}) shutdown(0xffffffffffffffff, 0x1) fspick(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) socket$inet6(0xa, 0x5, 0x20000b) syz_usb_connect(0x3, 0x36, 0x0, 0x0) close(0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='svc_process\x00', r6, 0x0, 0x101}, 0x18) sync() 23.076289624s ago: executing program 9 (id=2689): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@delchain={0x24, 0x65, 0xe0a, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffe0}, {0xc, 0xa}, {0x8, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xe2, 0x3, 0xbc, 0x20, 0x11f5, 0x3, 0x6cf0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x8, [{{0x9, 0x4, 0x2a, 0x2, 0x2, 0x18, 0xe0, 0x88, 0xa, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x0, 0x200, 0x0, 0x2}}]}}]}}]}}, 0x0) 20.193786047s ago: executing program 9 (id=2695): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}], 0x20) sendto$inet(r2, &(0x7f0000000800)='-', 0x1, 0x240080d0, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x46}}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local, r4}, 0xc) setsockopt$inet_mreqn(r5, 0x0, 0x28, &(0x7f0000000080)={@multicast1, @local}, 0xc) sendfile(r1, r0, 0x0, 0x7ffff000) r6 = socket(0x25, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1210000, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r7 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) syz_emit_ethernet(0x32, &(0x7f0000000180)=ANY=[@ANYBLOB="e973abc7ac22bbbbbbbbbbbb0800450000240000e000031190000000000000000000000000000010907881010000dcc6d6a65eb17bd58d0ca304157270081c98a62458c098294bfc6cf5941473b3d2a83c5d0f20573afc0e"], 0x0) syz_emit_ethernet(0x32, &(0x7f0000000280)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0x10, 0x0, @gue={{0x2, 0x1, 0x0, 0x6, 0x100}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(r6, &(0x7f0000004400), 0x40000000000026a, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000040)={0xa, {0x8, 0xb}}, 0xa) 16.660727265s ago: executing program 9 (id=2704): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) creat(0x0, 0x80166a87e08db6a7) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pread64(r5, &(0x7f0000002300)=""/176, 0xb0, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 15.016953869s ago: executing program 9 (id=2710): syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0x3, 0x8, 0x2, 0xc, 0xfffffffffffffffc, 0x3}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x400d, 0x4, 0x2, 0x466}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001200)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r3, 0x0) connect$rose(r3, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000100)={0x4}) 13.882136165s ago: executing program 9 (id=2714): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x42) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chroot(&(0x7f00000001c0)='./file0/../file0/../file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 12.681313358s ago: executing program 9 (id=2717): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x4, 0xa, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1, 0x0, 0x2000000}, 0x10) 12.562433367s ago: executing program 2 (id=2721): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) creat(0x0, 0x80166a87e08db6a7) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pread64(r5, &(0x7f0000002300)=""/176, 0xb0, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 10.718220005s ago: executing program 2 (id=2726): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x10, &(0x7f0000000280)=0x9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x11, 0x20000000000001d0, &(0x7f00000001c0)=ANY=[@ANYBLOB="b405000000000000611078000000000063102c000000000095000000000000002df3d5144a9b175c3309260184d5d3a84935cb7df8aa3e2d51e22d31af7852b4a447bd94fd0a4b20740493ecc3d0a094099143970bab26f8bbb2864da3e6f0619bcaee016b7dd56cac6e6f4bd1eb92851a2e549b75dad124bd5f3bf6575e10cc20c8669571e8afec70e30a3b0cb4b1be7d3aa6f892441c"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a00)={'bond0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="02030c65420002000fd4ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) socket$inet_sctp(0x2, 0x4, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x101}, &(0x7f0000000040)=0x8) socket$tipc(0x1e, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x0) write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[], 0x41) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x400) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="e3ac2509797f22aed233e4085ea76bc6ac1ff9b4bb458548444b31667b5c9059bce28407694804792e926b91cb25cb32c5aa0632917654180a003314dec5958864b6008bcabfee1ea2acbed9643e0a44f62bed0eeccabcd9062b81ad6b9ff1affc9ce548f70a9f13025e8746af53ed2fa51fae0a5748ecbbb7aac76a772868bf37262df9a911d3e7926fe9f58f29df7a1bdd73ebfe9a0ad344641e4d58a148d6fd9c7469cea87754ed61f52dff09cea844aa3640db8b48e7fc95c2f80be5", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, 0x0, &(0x7f0000000040)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000340)='rpcgss_createauth\x00', r7, 0x0, 0xffffffffffffffff}, 0x18) unshare(0x64000600) gettid() setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) 9.577355425s ago: executing program 0 (id=2728): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x200000, 0x0) (async) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000100)=0x3ff) (async) sched_setattr(0x0, &(0x7f0000000540)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000209, 0xa, 0x0, 0x5}, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000001100)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) (async) r4 = accept(r3, 0x0, 0x0) (async) r5 = socket(0x3, 0x1, 0x1) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000140)={@mcast1, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) (async, rerun: 32) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (rerun: 32) close_range(r7, 0xffffffffffffffff, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x10) (async, rerun: 64) bind$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x1) (async, rerun: 64) syz_usb_connect(0x0, 0x46, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendto$inet(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x10, 0x0, 0x40) (async, rerun: 64) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) (rerun: 64) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) (async) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x0, 0x8001], 0x1, 0x3c4210}) 9.25322263s ago: executing program 0 (id=2731): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0xad3394dc192dae8b, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 9.216058576s ago: executing program 8 (id=2732): openat$dsp(0xffffffffffffff9c, 0x0, 0x109502, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = fcntl$getown(r0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x3, &(0x7f0000000280)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@ipv4_newroute={0x38, 0x18, 0x1, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfc, 0x1, 0x0, 0x9, 0x3800}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x1, 0xfffff800}}}}]}, 0x38}}, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000791238000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r5 = accept$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000240)=0x6e) sendto$unix(r5, &(0x7f0000000300)="01fb3725acdbf5fd627914d6ebd48108db472fe214d9f2b49ad309efd29bd2f60a1c22a6279f9ae43ed66720c9a900d0d9f756c3f02a5e7a87a05218b3e4443874c279d0c526257613c8ec5d4ad34993321611abe6592da84b81c495d21174b9e310289a0d86ccd74474cd09", 0x6c, 0x54, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) listen(r4, 0x0) accept4$rose(r4, 0x0, 0x0, 0x800) 8.840740108s ago: executing program 0 (id=2733): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) ppoll(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x2) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = getpgrp(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x3, r2, 0x2, &(0x7f0000000240)) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r1) sendmsg$NFC_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01052cbd7000fedbdf251d"], 0x2c}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x13, 0x7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x410000}, 0x94) socket$tipc(0x1e, 0x2, 0x0) r4 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x2000000, 0xc, 0xffffffff, 0xc0}, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0xa, 0xfffd, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}}, 0xffffffffffffffff, 0xfffffffc}}, 0x48) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0x16}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r8, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e20, 0x1200240, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r7, 0x4004f506, &(0x7f0000000000)=0x1) 7.456356536s ago: executing program 8 (id=2735): ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x849a}}, './file0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000014000000140000000a0000000000000100000604b10218a329117a16305925a256829b14e87ad9c10f3bd636622e06df00"], 0x0, 0x36}, 0x28) 7.361132395s ago: executing program 8 (id=2736): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCVHANGUP(r3, 0x5437, 0x200000000000000) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x9e52, 0x4000, 0x1, 0xbfdffffc}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r5, &(0x7f0000000080), 0x0}, 0x20) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) openat$pfkey(0xffffff9c, 0x0, 0x14000, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r7, 0xc0cc5615, &(0x7f0000000340)={0xa, @capture={0x1000, 0x0, {0x1, 0x6}, 0x3, 0x8}}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc4d4}, 0x8) sendto$inet6(r8, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r8, 0x84, 0x1e, &(0x7f0000000140), &(0x7f00000001c0)=0x4) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=@newlink={0x30, 0x10, 0xffffff23, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x15610}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x6}, @IFLA_MTU={0x8, 0x4, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) 7.338682512s ago: executing program 0 (id=2738): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000800000000000000000001801000020bd342100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x8040, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket(0x2, 0x80805, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x1d9}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x334, 0x0, r2}, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='\a'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_TEE) io_uring_enter(r2, 0x2d3c, 0x0, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000140), 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000"], 0x3c}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x4002a, &(0x7f0000000180)={[{@size={'size', 0x3d, [0x65]}}]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) r9 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io$uac1(r9, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000540)={0x20, 0x16, 0x6, "fb87f71118d0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r9, 0x0, &(0x7f0000000400)={0x34, &(0x7f00000001c0)={0x40, 0x17, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$DEVLINK_CMD_TRAP_SET(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4c0d0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)={0xec, r8, 0x800, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0x3c}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x20000092) 6.375362494s ago: executing program 6 (id=2739): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x10ffff, 0xfffffffd}) 6.242936211s ago: executing program 2 (id=2740): r0 = syz_usbip_server_init(0x4) write$usbip_server(r0, &(0x7f0000000000)=@ret_unlink={{0x4, 0x401, 0x0, 0x1, 0x7}, {0xa}}, 0x30) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x7) r1 = syz_io_uring_complete(0x0) read$char_usb(r1, &(0x7f0000000040)=""/4096, 0x1000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), r1) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000001280)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001240)={&(0x7f00000010c0)={0x180, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x25}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5ad2}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="98745428d493"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x11e, 0x2a, [@cf={0x4, 0x6, {0x7, 0xff, 0x5, 0x2400}}, @random_vendor={0xdd, 0x34, "c93ee214131aea2d36264ab31aa05e9695da239ff70ea133e9ce71687e947c06f903559e859ae259a33d2b824af780b4e5019f56"}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @ssid={0x0, 0x16, @random="025bc5bc0cc48185e3cf6e2b3b20bfee53a4b3ebe85b"}, @peer_mgmt={0x75, 0x6, {0x0, 0x50c1, @val=0x9, @void, @void}}, @tim={0x5, 0x54, {0xff, 0xf1, 0xf3, "f13050c306b91641a47a50e0faac3e32d5b1e364226bf2196a17f313a3672cc158d77f10b95a3ab72617f99773177e341a6370dbc6c1792290f74eb49c9b3c1040137867be922df43ec8ef1c275f402d68"}}, @ibss={0x6, 0x2, 0x6}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x2, 0x5, @broadcast, 0xe000, @value=@broadcast, 0x6, 0x5, @broadcast, 0x4}}, @preq={0x82, 0x36, {{0x0, 0x0, 0x1, 0x0, 0x1}, 0xa2, 0x67, 0x7fff, @broadcast, 0xfffffffc, @value, 0xcb2, 0x9eaa, 0x2, [{{0x1}, @device_a, 0x80000000}, {{0x1, 0x0, 0x1}, @broadcast, 0x1}]}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x180}, 0x1, 0x0, 0x0, 0x2000c0d1}, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000012c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r3, 0x2, &(0x7f0000001300)) r4 = open(&(0x7f0000001340)='./file0\x00', 0x801, 0xd0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000013c0), r4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000014c0)={'gretap0\x00', &(0x7f0000001400)={'erspan0\x00', 0x0, 0x700, 0x10, 0x2213278b, 0x4, {{0x1e, 0x4, 0x2, 0x2, 0x78, 0x64, 0x0, 0xd, 0x29, 0x0, @private=0xa010101, @rand_addr=0x64010102, {[@end, @cipso={0x86, 0x18, 0x2, [{0x0, 0x12, "89bbb550b7c80970dfd7e44d3815e223"}]}, @end, @timestamp_prespec={0x44, 0x2c, 0xc8, 0x3, 0xe, [{@broadcast}, {@rand_addr=0x64010100, 0x1bb}, {@private=0xa010100, 0x6}, {@private=0xa010101, 0x6}, {@multicast1, 0x2000}]}, @generic={0x94, 0xf, "ebc03c7deb67e350d2c80d7d9f"}, @timestamp={0x44, 0xc, 0x2d, 0x0, 0x3, [0x3, 0x5]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001580)={'ip6gre0\x00', &(0x7f0000001500)={'ip6_vti0\x00', 0x0, 0x2f, 0x5, 0xa0, 0x2, 0x56, @mcast1, @mcast2, 0x80, 0x7800, 0x4, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000015c0)={'vcan0\x00', 0x0}) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000001600)={@remote, 0x0}, &(0x7f0000001640)=0x14) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000001680)=0x0, &(0x7f00000016c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001780)={'ip6tnl0\x00', &(0x7f0000001700)={'syztnl0\x00', 0x0, 0x29, 0x6, 0x4, 0x3, 0x49, @private2, @remote, 0x8, 0x7800, 0x7fff, 0x67}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000017c0)={'team0\x00', 0x0}) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000001800)={@multicast1, @remote, 0x0}, &(0x7f0000001840)=0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001880)={'lo\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000018c0)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r4, &(0x7f0000001a40)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001a00)={&(0x7f0000001900)={0xf0, r5, 0x20, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x811}, 0x0) syz_usbip_server_init(0x5) syz_io_uring_setup(0x7b38, &(0x7f0000001a80)={0x0, 0xb8a9, 0x40, 0x0, 0x3dc, 0x0, r4}, &(0x7f0000001b00), &(0x7f0000001b40)) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000001c40)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x20, r2, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x40, 0x29}}}}}, 0x20}}, 0x2000800) r16 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000001c80)='/proc/asound/card3/oss_mixer\x00', 0x103081, 0x0) syz_emit_ethernet(0xc2, &(0x7f0000001cc0)={@empty, @remote, @void, {@ipv4={0x800, @generic={{0xa, 0x4, 0x1, 0x2b, 0xb4, 0x65, 0x0, 0x38, 0x84, 0x0, @empty, @multicast1, {[@generic={0x86, 0x2}, @generic={0x88, 0x10, "822f02bf24b263e4ae46856064b5"}]}}, "57a51ccc72ada9a9b11a7fca6419ac0b6213d4269ac74e1d10aaf811c371aa2d48c48bccea69c9a4ca9581ac4fb63568959d66bddf02fce44d022efcf7d227a6029178d4d6b7fef920256a273051ab55be821ff52c3d98d635b13931011dade514e2dda085e9a904bea1f6e17dd93c3f1a195efef4257b9e33f11787c70706030d58c1df319848d5f038eb46"}}}}, &(0x7f0000001dc0)={0x0, 0x4, [0xe08, 0xdc8, 0x65c, 0xeeb]}) setsockopt$MRT_ASSERT(r4, 0x0, 0xcf, &(0x7f0000001e00), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r16, 0xc0709411, &(0x7f0000001e40)={{0x0, 0x2, 0x186, 0x81, 0x1f1, 0xfffffffffffffff8, 0x0, 0x7, 0x1, 0x9, 0x8, 0x9, 0x9, 0x101, 0x3}, 0x8, [0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000001ec0)={0x0, r17, "7ab33bb1916141776281caf2517b536d85ea22093f7deb55b857e3f4ab56e0817cb687e3971df1f9d5ca4a918b4577a0946b045f2dc2bae56905b0c7c96386f3f7135d5a150f1f6155a4346c3a410032e1a0d48994cfbb9738666c37542c8e53c4b99c1a901c941dcf9654613988393a7b359b374c30f5f7861ac00173cb6b830b4cb0a98a41a4277d57463b9e55655374bb94e49f1ab0ba2f8386daffc0f23d40bb1353e5a6f6d25387a5204f9016f535affa675c5553c1b316eaa7ee9a106370b35cacd1c8b11963fbbea0316ad1cd3f7f479d7c3cda8ac5f61325669c456ef1bf1a6864f1408ae6b896ce4b2a064b1a1545471fb380600912b0828efe1f0b", "b765289e7052f6dfd91a6ed4cc2894330616aa0e4cd97556f08c19ca707d30e334ccb028189e7ce3afde141f854b113734324e53598f723008718d415ced96990157ffe961e8fa7e849d81627f141d7d858b67ba751fd8c4299877d9d76893da058ab27da1ac1a430dbd3ed5931266b07e986a58d437e8f552565f04d86e6c4c23ff5336f904dedc9f320b1341744337f60ac55559aaac81e92c33cd08b178e1cd4abd9a72919dbca080f56e1224396bd0cc7d46639bdbdd706d3d0559572112f6bc5ab92caba884b7244ca4dc5af93e65a8d881284d40020731678e2c1a8345e65f58887bc306bfb58a736198b3f202edab382d52d8a5a642eede15fe10879154e139587ad285e8f26286942f4d78ea48cb5d7ccb28b2fa87239dc60ebd11546c9eff478bcfe1328dfa8bd6a5255f737425836725a732dc5da127b4424251e4d1df18d5360752dc7bc4983cd7f045970c4d3bfa3a24f5a240afc0f7dc3250ce0fe7ccde1df7eaca15a5ece45fc18b9c1983750735f9900eef639dbf524a9a49479b89642e9e827a8198cdff984372cc79e5ba399fffb5a6a603b8ff0a54d29e4d052a26abfdde18bc2a2d66afa98501769d0655d2d8fed511cc0f4933ccc153fbec609a16faf03d16f8a778808ef3595e26b25140476baaf78290d0af280aa3c9a64dfffe80937ca15d96bb02e7af68e4001012b7fe4ae0be757cb1a253c746e793a10a80da7dc5f5d305d34aae0aefeea934fb0b90bc2dd68c73ea04e2a925bb117c77dfc7e7522cf1f46a058d05afd0a979890d82e307982a3ffac7643fc8d765650e4ddd3e012888a873cf57879903855f78df49b7d46a79e3a39ab409fdfc35ecab4d3004cfbcaf848c1f706556e5baf518b8934dda572e6f5d628fa5bf68caab8ea5b2dc40ed0483220b6481ce7c96efe2f3a1ce8aeb0ed92aed2fdd742378cf1b229a7d39442765381427d25729b4c0a04683c208b1340405ce42838b8c281aa701ed1c0b924fa2a35b997c3feb654534d2ffef429375fc7fe6eddb1658b25dab561f240bdc0396d145f36000ad8efca6a9aa017da9d52a9f6c7ac97cb3a19b82a455bbea61b4e48fd5dbbf971265da05a65cb7ed3333d85f2b6cc001ac496361a7b414745123305044fe210ecd9393a4c420c9ef84947f218589d2eb0f2932f44d134198910c8cd7adba662d731092b8e6f38381ef069da68457e9dc7a3dddd94a6431aa37f10e12f0139f52c85ab2b7d4ff2b8bf35a75924931c5d2f5e40281e89ac6dbd4e2051482c20319e5ec31d036d88e3ae115b8c5655d4853ad946b25e9467d4a4f844bb11b33c7eac25e730940183cbde9041f416b65f6e13ef693de97304ed7ad9d1964c75ade9c0e023050a092fb0c6f300ff5edf5e2c4db74ca74d2547971db617595c358b954fc12ecfdaa0bc5ca0f9502a1251791ad06d8b5a8a488c2bda8d63bd948f27b3f19b9f76e5ba22accb671fd175c972fba847200f1ff979acee6dbab59ed1fc51f275e9aa3a8135e0bf7e1f4e0784fa1ebb51a939125579c6b4c1b4f820934f1b6eb1f3ce9f397f4000e0ebe2e2b74004ec1141b139263b97954f4dae7548e46d786af38e96907920737abdb12f59a385a6345d1927ebb52577de8c57b1f4ee1957c6e6e0f03cca15e0614dccc79c28adb7f4afa7eae74d9b6c28988881decf74bd80c0c4a6ea11ae8c43227e5662430c41fae0ac13a44e8f96c6d903fb2d1bcdc9c340f4c71e50aa5061cfb7bf36c194766b990d5027dd2e910f3531b596ec35e5aca57be15a1df657fb48c62c5a1cdddcdcb2e0e98284509f274ce17c8f76fbb62c678fb2b669074f2acdb0a1ccc7d07673460f95b78aebd1c591459b0d8d61b20c9a7d2f0efda2e43e25b9146c9361dd1850af1c2cc1f3b0e8db239d3d9504f79b2c13d3c26d5454076babcfcd2b1a55886a2e03faf8155b5f29e940aea0c13b49c1ac1704a51ecac2c530654158ff220ea11e09d7e7ce32b68fb201016a906eef7ea95b248abd7ecfd094a04f13af1bfaf63bb224564336b92ec8a87e0f0feeb1102e07231f5c8bd5f300cdf06c97189b5e657af9f4b52d9d24518f80577f81ed165dec165d0db53e2ffd97177a3b1c19eb5f7e637c1df880b317e3df786ff33988ac6ae91b7b4fec9b9b879a2c170f3c5f0400492ec2ee9cb66a7958c8b8f3b41d56f26d4e62e0d12b6397cbfd9adb1f5a5102c7a3e3e120b11a364fa698b0a9784018b56841eee2c4f014e939cb190ea3e7a276960b590b8781eea001d3230be82b4fd88972ed1112ed851658656272f5a66c6ffe47d1c7b5003af7811cb5e4ff5fd826a7b38c7b309fa2b39a59085b48d19580a1837c8588541251934b751bb8ebaf3fb8973c51f48746fb1015f2082880fed4eb3f7f23b7f137ff6a82611fb9857521646734229c118ff872fb112062595442baa49bd9847859b25dd5021c29f4f5e41a782fdb5e53ab23160da3eef64e49a14bd4dc4195d1f28530d201f2fadb8c48796c7f465d8ab41c8d205492d16383a8747793e8752d6a570ee9a7d00105ee11f7ab16110b1cdccc650aa3d45020fb40ece539c9d51680a399c75e1c04116f53620455b0d86040f7e42cf459a6d877e5d4095114147a87012f2f67be7a8531b07cee0691c1b3dbfb7ddebfe5fcc1add439189a29f29f7cfc020e81da02b86cd5773d62af8856ccf2d8078ffbf48507631279891db0cbad20155c55a2d877d0832395c1a23eacc0a5b37063d5bad51871237980178591c4dc0017b11e2bfc535c294f46eadf87be5309b01acb3dbd806d36cfb65e0becb030b9ae34d2dc896e095185776119e9b9a2b18fe3a32a23ccdda25d3eaf8d5f6515c374ed22884162c45ebaa4ace6361116244cdcf83ead0fe28bb025ae0ef5f8b31c6be174c0d886a305005d96e9431dc6ee277506357bffe2c715484a728aad243be6f7ca224c37584ea22359c77c3e0aeea5d1496b8274eb616a9518d8cc4fc957d7567d0601b1836123e5fcafac04b3283e5bc6b28ace50836b8abd0c4b1ca4a46192cd3cef3efc3729f9b59d9a5b7a86ed2ddc2b057010b9585e13b9bea6738b98a1084c1d4a6fa4f16c4e0dc5a4d6fb3e5b098a7afe769e7c9159242d5cc288e68c4bf10aad91e4008aa3050aa82d31628aa6c4886c41a3fb070bfb0a7f4f6fbf951a2b15e42820b33ae6fdae905a89c2098db4621a1f8cde0affc53c4b5cee36ab9c8ec9638574eeaf3326c45a852bb58d15a377265e03cdee5cae1e258ba8855c868da3de6449cfd2b1bf8eee7bae3d9c53ce252b4157a0e9d21f32f57babf0339efb3b601a6af6f0969e2dbdb331efc5ee087bed733d2ae3b93bca016eece0a8dc24f7cafe47e0b0e2a38cd8dcf9ac7a27e099ba35faf50c6b1a19f3139cc00e5ccca09cc60b998c85c9d91771bf5845f2ee38202be160e3cedc1e3df531e4f931fd8a68e2151f1936840aa68a908fe247d0b3f32e69061570c894d6d3f662ecd58ecc2b6b64951e631cf018daa138cc791daedee6ba7e3a7d328206ba3bc33c9d6f215dd37f16aa8f62b80d5746ffbb99af227906a1b9d0eba2aadea5a6ef74d1f594f54da55e7039ac85e20edd420c5661a73a870ef50634c4fba05a9cecd3b911f6d34f9d5ab8bde46c613f3bb3509a440e111533f01deeae6fbfa829e31068ed3c2e8cc6cf0203cbd8e5b6fb8f936db2c8191267a9968df6033371382f025e3f7b303c2dd1d7c9ff5cd035bbb9e8d78924da56be6d8ebfe89c4ff538eb213b00773ccf46589bf5ae27e0e13b11c643d8cc9363db43d3ff10670d4368a722783f15806ece04cabb4b1a291c9b132e64b46265da4cba37e1f2c3c40e51f70ce859923754425ef2c52cdd57ff025229af605d1cbed6ef422abe29a4cd4c3405f9584c9b0600b433c8079dfc9d9759af6792df32172bdd2a543e093b98efe7f807a6e9922e080df7eeb15771c9d401e90f4cf40b93ca46a79456f9587af5699dfd611f492e9789980b4f7d18d1cd279398317e48874aa456a3c863abc0fed0dd7ba0382631c86ee71b8d3eca497a2360c4daf74bbb5ac1ced7401725c3ed972c2237265d8df116dccd5250886f36b534b5c555d9440a0c3e75d824d878cb1830668b57991416812f4e4ed717fe22d53eff603bb88460202aab38a3a38cd17ea0b17f38d70e6adbea721cde2a3f333e953ae41c98cd99b1cdf6754c89060d43ef536c8f60bdbb0d9cdb6edba0cdbacc2efd7213c832595eba0cdf2fe0e4cf00aef6500d13184853751c03c5ab54258226e43178787c66f4731fe645833e72908b9cf20bb157363503be5ee483dc28c23fc8bbaa080b241d8eb073982b783cc0e777cb785f6028e8a9c4947fc3f9b3b1d2ab9c3ff5f3acd206da8d462744a509b4f2c99f41c79de523b96bd5bae2c0aa7a7cae293ec7eba95a89b66be46128ef056659d044e119cafb6b5d32260315e9fd9dc971ad5c83074b91c8f2bb154c0a6e46bca8a5669eb2ca12d24954143c2ba284749c6ccd14346fcdbe0e7f31d1433e2c2b9eb87f437233f6741e5a9f1c74ec6389885b4ea7f159e075404f525e458cc4a62458c69f618bbd43557234bfe61b687846d61f2b49bd8577aec0d9a8dc072f64bed30e8af5546834c0012bf6854477c2e360fe6c2c428583011903fb47fa6609b1e7468131afce2a0f621e51a105300f67d60e116e27067222f2e5c325ba896af30e5a5a16e2ab9dcb872dca567047d4d827265f7b0357ee394d003db9bb3af8373606a7d0aa1e6889d3ce9e446157c20bb67d94b84961b2976e9adab8b21156304746d5e3881be13825c87311ee525a65640f37c16f5264a5ad1b6cb3d75ead029044d62b028b0ed1d4784cefa2afb4f52ff00ae56682868e1a42e509a742bcaade352bfb4ffd0c7847e95542081913674a03411259741da9e2383648971389d7164c5574cebc310dbf860782fb522a7f6852d2ddd753d22bce3d4ce05ca6c0016afca04a880c5c8f9ce3aee7cb675b2d33433eb5908d0bd85ce29aa746c3b099e1dbda46ae6f53ad404c428072de72928f70f84f28250ab3057f5230f461cf7015810bae3985d222e0ada1f2133c9d233567a91423c1cb7eb0463e795cc044f7f07f79c497171d999d628264adeca360b3acfb2af09063ebc8565f29e153537362ecb2a866a8463673876d0a817dcb6e3b6b6454a40ba41ca052895a89a9cab9c58ce7d18603d238af50dd4f5f738ea3063d26ecf59fd136267971f1d27c4f06bcbde53e9ec2583160dafd5f76456bfb72c9de76850658e0e970d86ab861e9685863ce3c8da6a633bcf81233d660853723a943a10687befc22fb9075d9a7fadfe607159ce0b99d363ffa58ff74c1432cce7f211018360adbb17e26ed0"}) 6.203289965s ago: executing program 6 (id=2741): openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x65a4c2, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="830018007bc30577"], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0xa) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0x0, 0xee00, 0x0) setuid(0xee00) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000020c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a1504000000000000797a310000000008000540000000040900020073790680159b47f0d10e207d62b27a310000000008000a40fffffffc3c0000000c0a010800000000000000000a0000060900020073797a31000000000900010073797a3100000000100003800c00008008000340000000021400000011000100"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(r4, 0x400448c9, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) sendmmsg$inet6(r0, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161942, 0x0) 5.369490492s ago: executing program 2 (id=2742): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608f8ffffff00008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bind$alg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socket$nl_generic(0x10, 0x3, 0x10) pread64(0xffffffffffffffff, 0x0, 0x0, 0x2) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000240)={0xffffffffffffffff, 0x1ff, 0xffff}) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4f2, 0x1421, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0xb1, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x8, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xc, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000000)={0x2c, &(0x7f0000000080)={0x0, 0x8, 0x4, {0x4, 0x35, "00f4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYRES64=r4], 0x44}}, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 5.250535005s ago: executing program 6 (id=2743): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000d00)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r2}, 0x10) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x4) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3) 4.665533785s ago: executing program 8 (id=2744): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000006c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r1, 0x7340, 0x0) getdents64(r2, &(0x7f0000003440)=""/92, 0x5c) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) getdents64(r3, &(0x7f0000000300)=""/152, 0x98) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$nl_generic(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)={0x60, 0x1d, 0x100, 0x70bd2a, 0x25dfdbfc, {0xb}, [@nested={0x49, 0x97, 0x0, 0x1, [@generic="da8e350322c40df22905e4dade577de9b227cb6aa4d15f95f403943ad63fa614c02bab04c85eb644abd73b982dce0a20ace4ce193844905b63f9a977240ecd6f0c30b2d545"]}]}, 0x60}, 0x1, 0x0, 0x0, 0x15}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05001096131eb99818b51f00000000008510000002000000850000000500000095030000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000bdd000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) syz_clone(0x80000100, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r5, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x1}}, 0x40) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r8 = getpid() syz_pidfd_open(r8, 0x0) 3.536816591s ago: executing program 6 (id=2745): socket$xdp(0x2c, 0x3, 0x0) gettid() pipe(&(0x7f00000008c0)) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYRESHEX=r1, @ANYRES32=r2, @ANYBLOB="00001000252155b21c001200714d9e0272d14fe9614af9484a1c34890c00010062"], 0x3c}}, 0x40005) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffffcc58dee0", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)=@deltaction={0x1c, 0x31, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) openat$tun(0xffffffffffffff9c, 0x0, 0x40a01, 0x0) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r5, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) 3.469069193s ago: executing program 0 (id=2746): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) (async) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aa", 0xf, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[], 0x50) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r6, 0x0, 0x82, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [0x7, 0x90, 0x0, 0xf, 0xc00003, 0x7]}, &(0x7f0000000200)=0x78) (async) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, 0x0) (async) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0xe21, 0x0, @mcast2, 0x41de}, 0x1c) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000001070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c0002"], 0x140}}, 0x0) (async, rerun: 64) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000340)={0x0, 0x0}) (async, rerun: 64) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) (async, rerun: 64) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 2.491043305s ago: executing program 8 (id=2747): bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) socket$inet6_tcp(0xa, 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendfile(r3, r2, 0x0, 0x4) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000040)=0x10000, 0x5, 0x6) 2.421769448s ago: executing program 6 (id=2748): r0 = io_uring_setup(0x23ea, &(0x7f00000001c0)={0x0, 0x1292, 0x400, 0x2, 0x313}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r1) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000600)={r4, 0x0, 0x1000, 0x10000, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000, 0x800, 0xfffffffd], [0x0, 0x1001000, 0xfffffffc], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000001c0)={r4, 0xae, 0x3ff, 0x34325241, 0x1, [r5, 0x0, 0x0, r6], [0x2b8], [0x0, 0x0, 0x0, 0x1]}) r7 = socket$pppoe(0x18, 0x1, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0x1, @multicast, 'pim6reg0\x00'}}, 0x1e) close_range(r0, 0xffffffffffffffff, 0x0) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000000)='io.bfq.weight\x00', 0x2, 0x0) write$cgroup_int(r10, &(0x7f0000001200)=0x1, 0x12) 2.261218716s ago: executing program 0 (id=2749): r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) prlimit64(0x0, 0x7, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330) socket$rxrpc(0x21, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r2, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002840)=ANY=[@ANYBLOB="14000000270001"], 0x14}], 0x1, 0x0, 0x0, 0x811}, 0x0) connect$rose(r0, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, 0x6, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x4040041}, 0x44000) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x30, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x14) execve(&(0x7f0000000000)='./file2\x00', 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x800) socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x97, 0x800000000402, 0x4, 0x100}) write$FUSE_NOTIFY_INVAL_INODE(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1.885436421s ago: executing program 8 (id=2750): r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x40, 0x23) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRESHEX=r1, @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="ce4872f1af958e041140bd950e2b95d5df4510b3a4014f7502f9ce1d80fdf622ea1085bd5817cab463742a6d5ba1281b6c0db2458458e7fefbbe2013b3c8b8b7463278b5a328f0e0bc3f7cca1477041a2dd0d1d481ec1d043c43e96b4763abf2694b854e09d12fa0a18d5a3a18d319c72c6677d720ab24e4a9fe34522ba8d32377483288b0eda5e9a028", @ANYRES16=0x0, @ANYBLOB="080026bd7000fbdbdf25070000000c0099000700000063000000050053000100000005005300010000000500530000000000080005000a0000000a00180003030303030300001400040067656e657665310000000000000000001400040076657468315f746f5f687372000000000500530000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000841) sched_setscheduler(r3, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet(0x2, 0x4000000805, 0x0) listen(r6, 0x5) r7 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) r8 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r8, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) ioctl$VIDIOC_DQEVENT(r7, 0x80885659, &(0x7f0000000100)) inotify_init() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x38, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_FILTER={0x14}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0x40, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x80800}, 0x0) 1.842857573s ago: executing program 2 (id=2751): bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x34001, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000100)={0xc, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r1, 0x3b83, &(0x7f00000001c0)={0x28, 0x10000, r2, 0x0, 0x38c60c, 0x4, 0x2, 0x158e3a}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) write$selinux_validatetrans(r6, &(0x7f0000000280)={'system_u:object_r:ssh_keysign_exec_t:s0', 0x20, 'system_u:object_r:kvm_device_t:s0', 0x20, 0x100000001, 0x20, '/usr/sbin/ntpd\x00'}, 0x6e) ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x0, 0x5001) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x28, r7, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x20060840) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x32, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000380)={0x1f, 0x7}, 0xe) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0105502, 0x0) 1.509191116s ago: executing program 6 (id=2752): socket$netlink(0x10, 0x3, 0xa) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}, {&(0x7f0000000800)="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", 0xff}], 0x2}, 0x48002) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000cc401882e0daa15c050400009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001080)={0xc, {"a2e3ad214fc752f91b3e090987f70e06d038e7ff7fc6e5539b3264078b089b0e083860090890e0878f0f1ac6e7049b334c959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31310d3b5d0936cd3b78070daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5003a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d780231c9c99a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f068bb87af8b90fd8f08876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd7072f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d27df2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb84bed4b281769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2c1cde360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e51074b41bc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x100) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="390000efffddf892b56508bc6dff3d72ea43dc920ecc7f426a289fd5e0e74a7cefb3c228eaacd340570f2e630e5054c8e135e5e9bc7085eb6f74cfbefa0bf8fa80e524486c660f073fcce3e4fd45060c543fdc4a86ea716fb91ab43ceda87dd8f27fadfc43fed24f0a1f7b877001902204e5", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000020000000500"/28], 0x50) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a40)={'ip6tnl0\x00', &(0x7f00000009c0)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0xb, 0xe7, 0x30, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x700, 0x80, 0x6, 0x5}}) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000cc0)={0xffffffffffffffff, 0x206, 0xc}, 0xc) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000d80)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x1c, 0x20, &(0x7f0000002280)=ANY=[@ANYBLOB="71c90000011100040000000000", @ANYRES16=r1, @ANYBLOB="0000000000000000b70800000b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000078a518000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000018180000", @ANYRES32=r5, @ANYBLOB="000000000000000095000000000000008520000002000000850000006900000095000000000000001801000078f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000e00000085000000060000009500000000000000950000000000000025e5912a13ac50a323067bcb9194af2c0ae968f67a804730043e1bc51af203277290bdf06ba6f03708114ab170003389956d2a1a4c50e3b42d00000000000000000012000000"], &(0x7f0000000980)='GPL\x00', 0xfffffffc, 0xd3, &(0x7f0000000b40)=""/211, 0x41000, 0x0, '\x00', r6, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000c80)={0x4, 0x7, 0xff, 0x1}, 0x10, 0xffffffffffffffff, r1, 0x1, &(0x7f0000000dc0)=[0xffffffffffffffff, r7, r8, r9], &(0x7f0000000e00)=[{0x0, 0x4, 0x9, 0x6}], 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r10 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r10, 0xc05064d1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x1d, 0x1c, &(0x7f00000020c0)=ANY=[@ANYBLOB="180000000e000000000000000500000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fc000000850000000600000018120000", @ANYRES32, @ANYRES64=r1, @ANYRES8, @ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xb, 0xd2, &(0x7f0000000400)=""/210, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0xd, 0xb91, 0x255}, 0x10, 0xffffffffffffffff, 0x0, 0x2, &(0x7f00000003c0)=[r0, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000600)=[{0x3, 0x4, 0xc, 0x3}, {0x5, 0x1, 0x7, 0xb}]}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000740)=@o_path={&(0x7f0000000700)='./file0\x00', 0x0, 0x4018, r10}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x2, 0x3, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000002000000000000deff0000000000f600", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) 0s ago: executing program 2 (id=2753): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}]}}]}, 0x58}}, 0x44080) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x25dfdbfc, {0x60, 0x0, 0x0, r5, {}, {0xfff2, 0xa}, {0x2, 0x8}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x5, 0x2, 0x9}}]}, 0x40}}, 0x4000) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000040)="363c8f3fca5d66571e583e7c88a8", 0xe, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @remote}, 0x14) kernel console output (not intermixed with test programs): usb 7-1: USB disconnect, device number 4 [ 921.117439][T14900] udevd[14900]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 921.474387][T15139] chicony 0003:04F2:1421.0050: hidraw0: USB HID v1.01 Device [HID 04f2:1421] on usb-dummy_hcd.0-1/input0 [ 921.521291][T15139] usb 1-1: USB disconnect, device number 41 [ 921.744241][T16010] fido_id[16010]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 922.710569][T16028] netlink: 'syz.8.2393': attribute type 8 has an invalid length. [ 922.737337][T16025] netlink: 'syz.1.2390': attribute type 1 has an invalid length. [ 922.835871][T16025] netlink: 208 bytes leftover after parsing attributes in process `syz.1.2390'. [ 922.854741][T16028] netem: change failed [ 923.056915][T16037] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2394'. [ 923.066178][T16037] netlink: 'syz.9.2394': attribute type 1 has an invalid length. [ 923.648854][ T5818] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 923.856396][ T5818] usb 9-1: Using ep0 maxpacket: 16 [ 923.880438][ T5818] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 924.125737][ T5818] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 924.166517][ T5818] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 924.232135][ T5818] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 924.284210][ T5818] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 924.306116][ T5818] usb 9-1: SerialNumber: syz [ 924.347911][ T5818] hub 9-1:1.0: bad descriptor, ignoring hub [ 924.386491][ T5818] hub 9-1:1.0: probe with driver hub failed with error -5 [ 924.393950][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 924.393964][ T30] audit: type=1400 audit(1753952472.626:1185): avc: denied { read } for pid=16055 comm="syz.0.2400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 924.433336][ T5818] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 924.595061][T16063] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 924.609851][ T5818] usb 9-1: USB disconnect, device number 6 [ 924.697776][ T30] audit: type=1400 audit(1753952472.936:1186): avc: denied { watch } for pid=16055 comm="syz.0.2400" path="/3" dev="tmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 925.033316][ C0] vkms_vblank_simulate: vblank timer overrun [ 926.145674][ T43] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 926.315763][ T43] usb 9-1: Using ep0 maxpacket: 16 [ 926.559258][T16103] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2409'. [ 926.568462][ T43] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 926.587280][ T5903] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 926.610099][ T43] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 926.643122][T16106] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 926.681031][ T43] usb 9-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 926.695926][T16106] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 926.715275][ T43] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.733646][ T43] usb 9-1: Product: syz [ 926.739945][T16106] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 926.739945][ T30] audit: type=1400 audit(1753952474.986:1187): avc: denied { firmware_load } for pid=16105 comm="syz.6.2410" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 926.769751][T16111] netlink: 'syz.1.2411': attribute type 5 has an invalid length. [ 926.775940][ T5903] usb 1-1: Using ep0 maxpacket: 32 [ 926.787122][ T43] usb 9-1: Manufacturer: syz [ 926.798999][ T43] usb 9-1: SerialNumber: syz [ 926.821083][ T43] usb 9-1: config 0 descriptor?? [ 926.823667][ T5903] usb 1-1: config 0 interface 0 has no altsetting 0 [ 926.834599][ T5903] usb 1-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 926.871512][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.884396][ T5903] usb 1-1: config 0 descriptor?? [ 927.087654][T16082] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 927.103085][ T30] audit: type=1400 audit(1753952475.326:1188): avc: denied { create } for pid=16080 comm="syz.8.2404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 927.115717][T16082] audit: out of memory in audit_log_start [ 927.322849][T16126] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2414'. [ 927.332046][T16126] netlink: 'syz.9.2414': attribute type 1 has an invalid length. [ 927.668260][ T5903] chicony 0003:04F2:1421.0051: hidraw0: USB HID v1.01 Device [HID 04f2:1421] on usb-dummy_hcd.0-1/input0 [ 927.859355][ T5903] usb 9-1: USB disconnect, device number 7 [ 927.935361][ T30] audit: type=1400 audit(1753952476.176:1189): avc: denied { create } for pid=16132 comm="syz.9.2417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 927.959670][ T9560] usb 1-1: USB disconnect, device number 42 [ 928.327660][ T30] audit: type=1400 audit(1753952476.566:1190): avc: denied { shutdown } for pid=16138 comm="syz.1.2418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 928.347411][ C0] vkms_vblank_simulate: vblank timer overrun [ 928.421227][T16134] fido_id[16134]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 930.459244][T16180] tipc: Enabled bearer , priority 0 [ 930.527012][T16180] syzkaller0: entered promiscuous mode [ 930.542570][ T30] audit: type=1400 audit(1753952478.776:1191): avc: denied { connect } for pid=16182 comm="syz.0.2426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 930.578651][T16180] syzkaller0: entered allmulticast mode [ 930.718582][ T30] audit: type=1400 audit(1753952478.776:1192): avc: denied { write } for pid=16182 comm="syz.0.2426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 930.833602][T16180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2425'. [ 930.954232][T16180] hsr_slave_1 (unregistering): left promiscuous mode [ 931.058000][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.204564][T16199] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2427'. [ 931.214073][T16199] netlink: 'syz.6.2427': attribute type 1 has an invalid length. [ 931.490706][ T9496] tipc: Node number set to 763278208 [ 931.507405][T16197] tipc: Resetting bearer [ 931.754939][T16178] tipc: Resetting bearer [ 931.768022][ T30] audit: type=1400 audit(1753952480.006:1193): avc: denied { create } for pid=16202 comm="syz.0.2429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 931.866261][T16178] tipc: Disabling bearer [ 932.057970][ T30] audit: type=1400 audit(1753952480.296:1194): avc: denied { name_bind } for pid=16215 comm="syz.0.2432" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 932.466148][ T30] audit: type=1400 audit(1753952480.406:1195): avc: denied { create } for pid=16215 comm="syz.0.2432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 932.542038][ T30] audit: type=1400 audit(1753952480.426:1196): avc: denied { write } for pid=16215 comm="syz.0.2432" path="socket:[49354]" dev="sockfs" ino=49354 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 932.956823][T16235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.016827][T16235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 933.062890][ T30] audit: type=1400 audit(1753952481.276:1197): avc: denied { setopt } for pid=16230 comm="syz.0.2436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 933.063673][T16236] netlink: 'syz.0.2436': attribute type 1 has an invalid length. [ 933.090934][T16236] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2436'. [ 933.175889][ T9496] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 933.345774][ T9496] usb 10-1: Using ep0 maxpacket: 16 [ 933.399797][ T9496] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 933.457164][ T9496] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 933.510165][ T9496] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 933.589044][ T9496] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 933.615534][ T9496] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 933.679069][ T9496] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 933.694733][ T9496] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 933.703395][ T9496] usb 10-1: Manufacturer: syz [ 933.717463][ T9496] usb 10-1: config 0 descriptor?? [ 933.727750][T16246] loop4: detected capacity change from 0 to 7 [ 933.872854][T16246] Dev loop4: unable to read RDB block 7 [ 933.981884][ T30] audit: type=1400 audit(1753952482.216:1198): avc: denied { read } for pid=16253 comm="syz.6.2441" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 934.006162][ T5818] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 934.027865][T16246] loop4: unable to read partition table [ 934.124096][T16246] loop4: partition table beyond EOD, truncated [ 934.199817][ T30] audit: type=1400 audit(1753952482.246:1199): avc: denied { open } for pid=16253 comm="syz.6.2441" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 934.296305][T16246] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 934.319622][ T9560] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 934.475506][ T9496] rc_core: IR keymap rc-hauppauge not found [ 934.528352][ T9560] usb 7-1: unable to get BOS descriptor or descriptor too short [ 934.553851][ T9496] Registered IR keymap rc-empty [ 934.615018][ T9560] usb 7-1: not running at top speed; connect to a high speed hub [ 934.633175][ T9496] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 934.712565][ T9560] usb 7-1: config 3 has an invalid interface number: 106 but max is 0 [ 934.743318][ T9496] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 934.831137][ T9560] usb 7-1: config 3 has no interface number 0 [ 934.914282][ T9496] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 934.943577][ T9560] usb 7-1: config 3 interface 106 altsetting 10 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 935.080643][ T9560] usb 7-1: config 3 interface 106 has no altsetting 0 [ 935.099504][ T9496] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input37 [ 935.385032][T16263] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2442'. [ 935.395212][T16263] netlink: 'syz.9.2442': attribute type 1 has an invalid length. [ 935.737013][ T9560] usb 7-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=e8.8a [ 935.814492][ T9560] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.849563][ T9496] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 935.857238][ T9560] usb 7-1: Product: syz [ 935.861396][ T9560] usb 7-1: Manufacturer: syz [ 935.936023][ T9496] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 936.010253][ T9560] usb 7-1: SerialNumber: syz [ 936.096136][ T9496] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 936.128651][ T5818] usb 9-1: Using ep0 maxpacket: 32 [ 936.162164][T16257] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 936.316138][ T9496] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 936.477352][ T9496] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 936.496379][T16267] FAULT_INJECTION: forcing a failure. [ 936.496379][T16267] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 936.585353][ T5818] usb 9-1: config 0 has an invalid interface number: 35 but max is 0 [ 936.594025][ T5818] usb 9-1: config 0 has no interface number 0 [ 936.595497][ T9560] kobil_sct 7-1:3.106: KOBIL USB smart card terminal converter detected [ 936.600266][ T5818] usb 9-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 936.621335][ T5818] usb 9-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 936.633615][ T5818] usb 9-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 936.640439][ T9496] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 936.642757][ T5818] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.658010][ T5818] usb 9-1: Product: syz [ 936.660919][T16267] CPU: 0 UID: 0 PID: 16267 Comm: syz.9.2443 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(full) [ 936.660942][T16267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 936.660951][T16267] Call Trace: [ 936.660957][T16267] [ 936.660962][T16267] dump_stack_lvl+0x16c/0x1f0 [ 936.660986][T16267] should_fail_ex+0x512/0x640 [ 936.661005][T16267] _copy_to_user+0x32/0xd0 [ 936.661024][T16267] simple_read_from_buffer+0xcb/0x170 [ 936.661043][T16267] proc_fail_nth_read+0x197/0x240 [ 936.661063][T16267] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 936.661090][T16267] ? rw_verify_area+0xcf/0x680 [ 936.661105][T16267] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 936.661124][T16267] vfs_read+0x1e1/0xc60 [ 936.661144][T16267] ? __pfx___mutex_lock+0x10/0x10 [ 936.661163][T16267] ? __pfx_vfs_read+0x10/0x10 [ 936.661186][T16267] ? __fget_files+0x20e/0x3c0 [ 936.661209][T16267] ksys_read+0x12a/0x250 [ 936.661225][T16267] ? __pfx_ksys_read+0x10/0x10 [ 936.661248][T16267] do_syscall_64+0xcd/0x4c0 [ 936.661267][T16267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.661283][T16267] RIP: 0033:0x7fe77118d3bc [ 936.661296][T16267] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 936.661309][T16267] RSP: 002b:00007fe771f83030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 936.661324][T16267] RAX: ffffffffffffffda RBX: 00007fe7713b5fa0 RCX: 00007fe77118d3bc [ 936.661334][T16267] RDX: 000000000000000f RSI: 00007fe771f830a0 RDI: 0000000000000004 [ 936.661342][T16267] RBP: 00007fe771f83090 R08: 0000000000000000 R09: 0000000000000000 [ 936.661351][T16267] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 936.661360][T16267] R13: 0000000000000000 R14: 00007fe7713b5fa0 R15: 00007ffe8f8a9be8 [ 936.661381][T16267] [ 936.895929][ T9496] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 936.903335][ T5818] usb 9-1: Manufacturer: syz [ 936.903678][ T9560] usb 7-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 936.908499][ T5818] usb 9-1: SerialNumber: syz [ 936.931560][ T5818] usb 9-1: config 0 descriptor?? [ 936.957022][ T5818] usb 9-1: can't set config #0, error -71 [ 936.984874][ T9496] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 936.987523][ T5818] usb 9-1: USB disconnect, device number 8 [ 937.046277][ T9496] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 937.063458][ T30] audit: type=1400 audit(1753952485.276:1200): avc: denied { create } for pid=16273 comm="syz.9.2446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 937.114549][ T9560] usb 7-1: USB disconnect, device number 5 [ 937.125758][ T9496] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 937.170644][ T9560] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 937.182260][ T9496] mceusb 10-1:0.0: Registered with mce emulator interface version 1 [ 937.206988][ T30] audit: type=1400 audit(1753952485.286:1201): avc: denied { ioctl } for pid=16273 comm="syz.9.2446" path="socket:[48817]" dev="sockfs" ino=48817 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 937.231806][ C0] vkms_vblank_simulate: vblank timer overrun [ 937.263759][ T9496] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 937.276317][ T9560] kobil_sct 7-1:3.106: device disconnected [ 937.316121][ T9496] usb 10-1: USB disconnect, device number 7 [ 937.388677][ T30] audit: type=1400 audit(1753952485.336:1202): avc: denied { connect } for pid=16273 comm="syz.9.2446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 937.453768][ T30] audit: type=1400 audit(1753952485.406:1203): avc: denied { setopt } for pid=16275 comm="syz.8.2445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 937.478195][T16285] netlink: 240 bytes leftover after parsing attributes in process `syz.8.2447'. [ 937.580670][ T30] audit: type=1400 audit(1753952485.556:1204): avc: denied { create } for pid=16279 comm="syz.8.2447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 937.725755][ T30] audit: type=1400 audit(1753952485.656:1205): avc: denied { read } for pid=16279 comm="syz.8.2447" path="socket:[48834]" dev="sockfs" ino=48834 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 937.749781][ C0] vkms_vblank_simulate: vblank timer overrun [ 937.865825][ T30] audit: type=1400 audit(1753952485.716:1206): avc: denied { write } for pid=16279 comm="syz.8.2447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 937.951338][ T30] audit: type=1400 audit(1753952485.916:1207): avc: denied { write } for pid=16288 comm="syz.6.2450" name="001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 937.985826][ T30] audit: type=1400 audit(1753952486.096:1208): avc: denied { setopt } for pid=16294 comm="syz.8.2452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 938.075741][ T30] audit: type=1400 audit(1753952486.216:1209): avc: denied { read write } for pid=16299 comm="syz.0.2454" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 938.099337][ C0] vkms_vblank_simulate: vblank timer overrun [ 938.115706][ T9496] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 938.158816][ T5818] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 938.198413][ T5818] hid-generic 0000:0000:0000.0052: hidraw0: HID v0.00 Device [syz1] on syz0 [ 938.278703][ T9496] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 938.288054][ T9496] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.302879][ T9496] usb 10-1: Product: syz [ 938.322993][ T9496] usb 10-1: Manufacturer: syz [ 938.338241][ T9496] usb 10-1: SerialNumber: syz [ 938.368622][ T9496] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 938.388054][ T9560] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 939.455822][ T9560] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 939.463106][ T9560] ath9k_htc: Failed to initialize the device [ 939.497116][ T9560] usb 10-1: ath9k_htc: USB layer deinitialized [ 940.084814][T16338] : entered promiscuous mode [ 940.709728][T16344] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2460'. [ 940.836531][T16341] binder: 16340:16341 ioctl c0306201 200000000200 returned -22 [ 940.869598][T16341] binder: 16340:16341 unknown command 8192 [ 940.875444][T16341] binder: 16340:16341 ioctl c0306201 2000000003c0 returned -22 [ 940.896523][T16341] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.2460'. [ 940.974089][T16341] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+` [ 941.422943][T16356] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2464'. [ 941.524933][T16356] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2464'. [ 942.436219][ T974] usb 10-1: USB disconnect, device number 8 [ 943.434736][ T9002] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 943.526274][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 943.526290][ T30] audit: type=1400 audit(1753952491.766:1225): avc: denied { write } for pid=16394 comm="syz.0.2471" name="ip_mr_vif" dev="proc" ino=4026533933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 943.556009][ T9002] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.597876][ T30] audit: type=1400 audit(1753952491.836:1226): avc: denied { bind } for pid=16382 comm="syz.6.2467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 943.891695][ T30] audit: type=1400 audit(1753952492.106:1227): avc: denied { nlmsg_write } for pid=16400 comm="syz.9.2472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 944.243084][ T9002] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 944.426447][ T9002] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.708767][ T9002] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 944.743655][ T9002] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.308871][T16427] 9pnet_fd: Insufficient options for proto=fd [ 945.768158][ T9002] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 945.973089][ T9002] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.132776][ T30] audit: type=1400 audit(1753952494.366:1228): avc: denied { ioctl } for pid=16435 comm="syz.6.2480" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=49807 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 946.175959][T16427] tipc: Started in network mode [ 946.180857][T16427] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 946.188498][T16427] tipc: Enabled bearer , priority 10 [ 946.195328][T16428] lo speed is unknown, defaulting to 1000 [ 946.201467][T16428] lo speed is unknown, defaulting to 1000 [ 946.207524][T16428] lo speed is unknown, defaulting to 1000 [ 946.219204][T16428] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 946.253467][T16428] lo speed is unknown, defaulting to 1000 [ 946.260485][T16428] lo speed is unknown, defaulting to 1000 [ 946.267022][T16428] lo speed is unknown, defaulting to 1000 [ 946.273464][T16428] lo speed is unknown, defaulting to 1000 [ 946.280064][T16428] lo speed is unknown, defaulting to 1000 [ 946.286696][T16428] lo speed is unknown, defaulting to 1000 [ 946.293393][T16428] lo speed is unknown, defaulting to 1000 [ 946.299957][T16428] lo speed is unknown, defaulting to 1000 [ 946.306576][T16428] lo speed is unknown, defaulting to 1000 [ 946.313057][T16428] lo speed is unknown, defaulting to 1000 [ 946.476663][T16440] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 946.686825][ T974] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 946.788712][ T9002] bridge_slave_1: left allmulticast mode [ 946.804569][ T30] audit: type=1326 audit(1753952495.016:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16449 comm="syz.0.2485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ec938e9a9 code=0x7ffc0000 [ 946.886356][ T974] usb 7-1: device descriptor read/64, error -71 [ 946.892683][ T9002] bridge_slave_1: left promiscuous mode [ 946.928143][ T9002] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.963457][T14901] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 946.974491][ T30] audit: type=1326 audit(1753952495.016:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16449 comm="syz.0.2485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ec938e9a9 code=0x7ffc0000 [ 946.998675][T14901] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 947.007839][ T30] audit: type=1326 audit(1753952495.026:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16449 comm="syz.0.2485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9ec938e9a9 code=0x7ffc0000 [ 947.031537][ T30] audit: type=1400 audit(1753952495.026:1232): avc: denied { read } for pid=16449 comm="syz.0.2485" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 947.055241][ T30] audit: type=1326 audit(1753952495.026:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16449 comm="syz.0.2485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ec938e9a9 code=0x7ffc0000 [ 947.080970][ T30] audit: type=1326 audit(1753952495.026:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16449 comm="syz.0.2485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ec938e9a9 code=0x7ffc0000 [ 947.104688][T14901] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 947.121564][T14901] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 947.134146][ T9002] bridge_slave_0: left allmulticast mode [ 947.140267][ T974] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 947.148060][ T9002] bridge_slave_0: left promiscuous mode [ 947.154245][T14901] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 947.196244][ T5818] tipc: Node number set to 10005162 [ 947.261572][ T9002] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.306688][ T974] usb 7-1: device descriptor read/64, error -71 [ 947.427753][ T974] usb usb7-port1: attempt power cycle [ 947.717244][ T9560] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 947.744749][T16468] fuse: Unknown parameter '0xffffffffffffffff0xffffffffffffffff0x000000000000000300000000000000000000' [ 947.915762][ T974] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 947.922634][ T9560] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 947.937369][ T974] usb 7-1: device descriptor read/8, error -71 [ 948.108448][T16471] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2487'. [ 948.117689][T16471] netlink: 'syz.9.2487': attribute type 1 has an invalid length. [ 948.225827][ T974] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 948.268921][ T974] usb 7-1: device descriptor read/8, error -71 [ 948.357150][ T9560] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 948.368219][ T9560] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 948.378060][ T9560] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 948.393117][ T9560] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 948.402233][ T9560] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.416296][ T974] usb usb7-port1: unable to enumerate USB device [ 948.426815][ T9560] usb 9-1: config 0 descriptor?? [ 948.759898][ T9002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 948.770158][ T9002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 948.779952][ T9002] bond0 (unregistering): Released all slaves [ 948.875166][T16456] wlan0 speed is unknown, defaulting to 1000 [ 948.892490][ T9002] tipc: Left network mode [ 948.905303][ T9560] plantronics 0003:047F:FFFF.0053: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 949.311755][T16456] lo speed is unknown, defaulting to 1000 [ 949.535783][ T5829] Bluetooth: hci2: command tx timeout [ 949.546611][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 949.546634][ T30] audit: type=1400 audit(1753952497.786:1246): avc: denied { ioctl } for pid=16457 comm="syz.8.2486" path="socket:[49933]" dev="sockfs" ino=49933 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 949.855786][ T5830] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 949.928630][ T92] usb 9-1: USB disconnect, device number 9 [ 950.007764][ T5830] usb 7-1: Using ep0 maxpacket: 16 [ 950.015253][ T5830] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 950.051547][ T5830] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 950.096515][ T5830] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.201624][ T5830] usb 7-1: config 0 descriptor?? [ 950.300404][ T9002] hsr_slave_0: left promiscuous mode [ 950.325198][ T9002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 950.371408][ T9002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 950.487957][ T9002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 950.549953][ T9002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 950.706644][ T9002] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 950.713476][ T9002] batman_adv: batadv0: Removing interface: ipvlan2 [ 950.841036][ T30] audit: type=1400 audit(1753952499.036:1247): avc: denied { read write } for pid=16508 comm="syz.8.2493" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 951.093332][ T30] audit: type=1400 audit(1753952499.036:1248): avc: denied { open } for pid=16508 comm="syz.8.2493" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 951.118544][ C0] vkms_vblank_simulate: vblank timer overrun [ 951.131753][ T9002] veth1_macvtap: left promiscuous mode [ 951.186618][ T9002] veth0_macvtap: left promiscuous mode [ 951.241531][T16517] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 951.248082][T16517] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 951.284738][T16517] vhci_hcd vhci_hcd.0: Device attached [ 951.341490][ T9002] veth1_vlan: left promiscuous mode [ 951.348063][T16517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2495'. [ 951.615672][ T5829] Bluetooth: hci2: command tx timeout [ 951.965593][ T9002] veth0_vlan: left promiscuous mode [ 951.992428][T16518] vhci_hcd: connection closed [ 952.041901][ T350] vhci_hcd: stop threads [ 952.157782][ T5818] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 952.175066][ T350] vhci_hcd: release socket [ 952.272921][ T350] vhci_hcd: disconnect device [ 953.335704][ T30] audit: type=1400 audit(1753952501.566:1249): avc: denied { read } for pid=16534 comm="syz.8.2498" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 953.705661][ T5829] Bluetooth: hci2: command tx timeout [ 953.790617][T16542] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2499'. [ 953.799842][T16542] netlink: 'syz.9.2499': attribute type 1 has an invalid length. [ 954.208073][ T9002] team0 (unregistering): Port device team_slave_1 removed [ 954.274450][ T9002] team0 (unregistering): Port device team_slave_0 removed [ 954.641005][ T30] audit: type=1400 audit(1753952502.866:1250): avc: denied { mount } for pid=16543 comm="syz.9.2500" name="/" dev="ramfs" ino=50025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 954.663393][ C0] vkms_vblank_simulate: vblank timer overrun [ 955.246481][ T5830] usbhid 7-1:0.0: can't add hid device: -71 [ 955.329826][ T5830] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 955.435645][ T5830] usb 7-1: USB disconnect, device number 10 [ 955.631987][ T30] audit: type=1400 audit(1753952503.866:1251): avc: denied { mount } for pid=16562 comm="syz.6.2503" name="/" dev="configfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 955.775944][ T5829] Bluetooth: hci2: command tx timeout [ 955.822885][ T30] audit: type=1400 audit(1753952503.926:1252): avc: denied { search } for pid=16562 comm="syz.6.2503" name="/" dev="configfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 955.845101][ C0] vkms_vblank_simulate: vblank timer overrun [ 955.995043][ T30] audit: type=1400 audit(1753952503.926:1253): avc: denied { search } for pid=16562 comm="syz.6.2503" name="/" dev="configfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 956.018108][ T30] audit: type=1400 audit(1753952503.926:1254): avc: denied { read open } for pid=16562 comm="syz.6.2503" path="/" dev="configfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 956.040862][ T30] audit: type=1400 audit(1753952503.966:1255): avc: denied { getopt } for pid=16562 comm="syz.6.2503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 956.185941][T16560] mkiss: ax0: crc mode is auto. [ 957.079847][ T92] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 957.349416][ T92] usb 10-1: Using ep0 maxpacket: 16 [ 957.365935][ T5818] vhci_hcd: vhci_device speed not set [ 957.515995][ T92] usb 10-1: config 50 has an invalid interface number: 70 but max is 1 [ 957.524297][ T92] usb 10-1: config 50 has an invalid interface number: 35 but max is 1 [ 957.555514][T16456] chnl_net:caif_netlink_parms(): no params data found [ 957.642053][ T92] usb 10-1: config 50 has no interface number 0 [ 957.665690][ T92] usb 10-1: config 50 has no interface number 1 [ 957.712708][ T92] usb 10-1: config 50 interface 35 altsetting 248 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 957.751388][ T92] usb 10-1: config 50 interface 35 altsetting 248 has an invalid descriptor for endpoint zero, skipping [ 957.895628][ T9496] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 958.068193][ T92] usb 10-1: config 50 interface 35 altsetting 248 bulk endpoint 0x5 has invalid maxpacket 8 [ 958.151150][ T92] usb 10-1: config 50 interface 35 altsetting 248 has a duplicate endpoint with address 0x5, skipping [ 958.186486][T16456] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.194644][ T92] usb 10-1: config 50 interface 35 altsetting 248 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 958.219050][ T92] usb 10-1: config 50 interface 35 altsetting 248 has a duplicate endpoint with address 0x3, skipping [ 958.225929][T16456] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.237180][ T92] usb 10-1: config 50 interface 70 has no altsetting 0 [ 958.244353][ T92] usb 10-1: config 50 interface 35 has no altsetting 0 [ 958.262488][T16456] bridge_slave_0: entered allmulticast mode [ 958.276155][ T92] usb 10-1: New USB device found, idVendor=2639, idProduct=0017, bcdDevice=f5.80 [ 958.290598][T16456] bridge_slave_0: entered promiscuous mode [ 958.294825][ T92] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.305259][ T92] usb 10-1: Product: syz [ 958.309501][T16456] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.315907][T16456] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.316866][ T9496] usb 9-1: Using ep0 maxpacket: 32 [ 958.340777][ T92] usb 10-1: Manufacturer: syz [ 958.344582][T16456] bridge_slave_1: entered allmulticast mode [ 958.346435][ T9496] usb 9-1: config 0 interface 0 has no altsetting 0 [ 958.361781][ T92] usb 10-1: SerialNumber: syz [ 958.366711][ T9496] usb 9-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 958.384719][T16456] bridge_slave_1: entered promiscuous mode [ 958.393601][ T9496] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.452566][ T9496] usb 9-1: config 0 descriptor?? [ 958.504821][T16456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 958.554739][T16456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 958.576326][ T5830] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 958.651995][ T92] usb 10-1: USB disconnect, device number 9 [ 958.652332][T16456] team0: Port device team_slave_0 added [ 958.684982][T16456] team0: Port device team_slave_1 added [ 958.747509][ T5830] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 958.760684][T16456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 958.776076][T16456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 958.805820][ T5830] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 958.817285][ T5830] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 958.826608][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.837320][ T9194] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 958.838026][T16456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 958.865964][T16607] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 958.881340][ T9496] chicony 0003:04F2:1421.0054: hidraw0: USB HID v1.01 Device [HID 04f2:1421] on usb-dummy_hcd.8-1/input0 [ 958.887377][ T5830] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 958.901429][T16456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 958.914991][T16456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 958.990400][T16456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 959.011899][ T9194] usb 7-1: too many configurations: 210, using maximum allowed: 8 [ 959.026728][ T9194] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 959.056453][ T9194] usb 7-1: can't read configurations, error -61 [ 959.276488][T16627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.286584][T16627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 959.309913][ T92] usb 9-1: USB disconnect, device number 10 [ 959.317789][ T9194] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 959.322080][ T30] audit: type=1400 audit(1753952507.546:1256): avc: denied { write } for pid=16605 comm="syz.0.2509" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 959.423810][ T9496] usb 1-1: USB disconnect, device number 43 [ 959.431160][T16456] hsr_slave_0: entered promiscuous mode [ 959.439195][T16456] hsr_slave_1: entered promiscuous mode [ 959.452942][T16456] debugfs: 'hsr0' already exists in 'hsr' [ 959.459291][T16456] Cannot create hsr debugfs directory [ 959.507311][ T9194] usb 7-1: too many configurations: 210, using maximum allowed: 8 [ 959.521664][ T9194] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 959.535088][ T9194] usb 7-1: can't read configurations, error -61 [ 959.566503][ T9194] usb usb7-port1: attempt power cycle [ 959.686296][ T9560] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 959.858875][ T9560] usb 10-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 959.954590][ T9194] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 959.966082][ T9560] usb 10-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 959.992884][ T9560] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.014112][ T9560] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 960.035448][ T9194] usb 7-1: too many configurations: 210, using maximum allowed: 8 [ 960.054942][ T9194] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 960.078699][ T9194] usb 7-1: can't read configurations, error -61 [ 960.236473][ T9194] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 960.256060][ T30] audit: type=1400 audit(1753952508.486:1257): avc: denied { unlink } for pid=16649 comm="syz.0.2514" name="#1c" dev="tmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 960.278481][ C0] vkms_vblank_simulate: vblank timer overrun [ 960.293648][ T9194] usb 7-1: too many configurations: 210, using maximum allowed: 8 [ 960.313387][ T9194] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 960.324789][ T9194] usb 7-1: can't read configurations, error -61 [ 960.340691][ T9194] usb usb7-port1: unable to enumerate USB device [ 960.403234][ T30] audit: type=1400 audit(1753952508.636:1258): avc: denied { mount } for pid=16649 comm="syz.0.2514" name="/" dev="overlay" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 960.425684][ T5830] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 960.575651][ T5830] usb 9-1: Using ep0 maxpacket: 8 [ 960.592158][T16655] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2512'. [ 961.156925][ T9560] stv0680 10-1:4.0: STV(e): camera ping failed!! [ 961.212762][ T5830] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 961.225785][ T5830] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.246788][ T5830] usb 9-1: config 0 descriptor?? [ 961.362786][ T9560] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 961.373378][ T9560] stv0680 10-1:4.0: last error: 0, command = 0x0 [ 961.418205][ T9560] usb 10-1: USB disconnect, device number 10 [ 961.542419][ T30] audit: type=1400 audit(1753952509.776:1259): avc: denied { watch_reads } for pid=16664 comm="syz.0.2515" path="/27" dev="tmpfs" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 961.564773][ C0] vkms_vblank_simulate: vblank timer overrun [ 961.639580][T16007] udevd[16007]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 961.695006][T16007] udevd[16007]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 961.890781][ T5830] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 961.953433][ T5968] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 961.963619][ T5830] asix 9-1:0.0: probe with driver asix failed with error -61 [ 962.072444][T16680] netlink: 'syz.9.2518': attribute type 2 has an invalid length. [ 962.131362][ T5968] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 962.166362][T16456] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 962.181620][ T5968] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 962.194589][T16456] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 962.228285][ T5968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.228608][T16456] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 962.275012][ T5968] usb 1-1: config 0 descriptor?? [ 962.309430][T16456] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 962.856780][ T5968] usbhid 1-1:0.0: can't add hid device: -71 [ 962.862800][ T5968] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 962.890846][ T5968] usb 1-1: USB disconnect, device number 44 [ 963.085843][T16456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 963.113318][T16456] 8021q: adding VLAN 0 to HW filter on device team0 [ 963.165730][ T5903] usb 9-1: USB disconnect, device number 11 [ 963.184390][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 963.191543][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 963.368363][ T9002] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.375467][ T9002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 963.435830][ T5968] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 963.547941][T16708] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2519'. [ 963.557221][T16708] netlink: 'syz.8.2519': attribute type 1 has an invalid length. [ 963.953454][T16456] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 963.996191][ T5968] usb 1-1: Using ep0 maxpacket: 16 [ 964.005456][ T5968] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 964.155698][ T5968] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 964.169441][ T5968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.300869][ T30] audit: type=1400 audit(1753952512.446:1260): avc: denied { attach_queue } for pid=16679 comm="syz.9.2518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 964.334517][ T5968] usb 1-1: config 0 descriptor?? [ 964.800676][ T30] audit: type=1400 audit(1753952512.996:1261): avc: denied { remount } for pid=16722 comm="syz.6.2521" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 964.826938][ T30] audit: type=1400 audit(1753952513.006:1262): avc: denied { listen } for pid=16722 comm="syz.6.2521" lport=40224 faddr=::ffff:172.20.255.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 964.949877][T16456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 965.094639][ T30] audit: type=1400 audit(1753952513.006:1263): avc: denied { write } for pid=16722 comm="syz.6.2521" lport=40224 faddr=::ffff:172.20.255.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 965.565689][ T5903] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 965.595047][ T30] audit: type=1400 audit(1753952513.006:1264): avc: denied { setopt } for pid=16722 comm="syz.6.2521" lport=40224 faddr=::ffff:172.20.255.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 965.715800][ T5903] usb 9-1: Using ep0 maxpacket: 32 [ 965.724351][ T5903] usb 9-1: config 0 interface 0 has no altsetting 0 [ 965.754153][ T5903] usb 9-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 965.792473][ T5903] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.840839][ T5968] usbhid 1-1:0.0: can't add hid device: -71 [ 965.881872][ T5968] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 965.885455][ T5903] usb 9-1: config 0 descriptor?? [ 965.936176][ T5968] usb 1-1: USB disconnect, device number 45 [ 966.366293][ T5903] chicony 0003:04F2:1421.0055: hidraw0: USB HID v1.01 Device [HID 04f2:1421] on usb-dummy_hcd.8-1/input0 [ 966.438358][T16456] veth0_vlan: entered promiscuous mode [ 966.446912][ T9194] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 966.486146][T16456] veth1_vlan: entered promiscuous mode [ 966.696664][ T5818] usb 9-1: USB disconnect, device number 12 [ 966.731681][ T9194] usb 1-1: Using ep0 maxpacket: 32 [ 966.761483][ T9194] usb 1-1: config 0 interface 0 has no altsetting 0 [ 966.768156][T16456] veth0_macvtap: entered promiscuous mode [ 966.783759][T16456] veth1_macvtap: entered promiscuous mode [ 966.829714][ T9194] usb 1-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 966.866629][T16456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 966.875735][ T9194] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.881953][T16456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 966.905381][ T9194] usb 1-1: config 0 descriptor?? [ 966.940513][ T9006] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.981286][ T9006] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.995949][ T9006] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.038781][ T30] audit: type=1400 audit(1753952515.276:1265): avc: denied { create } for pid=16760 comm="syz.6.2525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 967.068100][ T9010] Bluetooth: Error in BCSP hdr checksum [ 967.104224][ T9006] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.182024][ T30] audit: type=1400 audit(1753952515.416:1266): avc: denied { sys_admin } for pid=16760 comm="syz.6.2525" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 967.397305][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 967.424522][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 967.458131][ T9194] chicony 0003:04F2:1421.0056: hidraw0: USB HID v1.01 Device [HID 04f2:1421] on usb-dummy_hcd.0-1/input0 [ 967.522292][ T9002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 967.573436][ T9002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 967.812360][ T9560] usb 1-1: USB disconnect, device number 46 [ 968.455909][ T9560] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 968.502112][ T30] audit: type=1400 audit(1753952516.736:1267): avc: denied { read } for pid=16773 comm="syz.8.2526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 968.652635][ T9560] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 968.681847][ T9560] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 968.699477][ T9560] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.726211][ T9560] usb 6-1: Product: syz [ 968.796028][ T9560] usb 6-1: Manufacturer: syz [ 968.800686][ T9560] usb 6-1: SerialNumber: syz [ 968.826490][T14901] Bluetooth: hci7: command 0x1003 tx timeout [ 968.832967][ T5829] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 968.927847][ T9560] usb 6-1: config 0 descriptor?? [ 968.971175][ T9560] ims_pcu 6-1:0.0: Zero length descriptor [ 969.010508][ T9560] ims_pcu 6-1:0.0: probe with driver ims_pcu failed with error -22 [ 969.122617][T16800] syz.0.2528: attempt to access beyond end of device [ 969.122617][T16800] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 969.160148][ T30] audit: type=1400 audit(1753952517.386:1268): avc: denied { write } for pid=16782 comm="syz.5.2527" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 969.187079][ T9560] usb 6-1: USB disconnect, device number 37 [ 969.206274][T16801] batadv_slave_1: entered promiscuous mode [ 969.217644][T16801] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2530'. [ 969.264360][ T30] audit: type=1400 audit(1753952517.466:1269): avc: denied { watch } for pid=16799 comm="syz.9.2530" path="/74" dev="tmpfs" ino=403 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 969.289016][T16799] batadv_slave_1: left promiscuous mode [ 969.354321][ T30] audit: type=1400 audit(1753952517.466:1270): avc: denied { watch_sb } for pid=16799 comm="syz.9.2530" path="/74" dev="tmpfs" ino=403 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 969.467674][ T30] audit: type=1400 audit(1753952517.476:1271): avc: denied { map } for pid=16795 comm="syz.0.2528" path="socket:[51714]" dev="sockfs" ino=51714 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 969.512577][ T30] audit: type=1400 audit(1753952517.476:1272): avc: denied { read } for pid=16795 comm="syz.0.2528" path="socket:[51714]" dev="sockfs" ino=51714 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 969.708216][ T30] audit: type=1326 audit(1753952517.946:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16804 comm="syz.6.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00598e9a9 code=0x7ffc0000 [ 969.771662][T16808] IPVS: Error joining to the multicast group [ 970.075810][ T5818] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 970.248718][ T5818] usb 7-1: Using ep0 maxpacket: 8 [ 970.275133][ T5818] usb 7-1: config 127 has an invalid interface number: 171 but max is 1 [ 970.335681][ T5818] usb 7-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 970.371338][ T5818] usb 7-1: config 127 has no interface number 1 [ 970.380250][ T5818] usb 7-1: config 127 interface 171 has no altsetting 0 [ 970.403763][ T5818] usb 7-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 970.438843][ T5818] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.444739][T16826] fuse: Unknown parameter '' [ 970.466543][ T5818] usb 7-1: Product: syz [ 970.470750][ T5818] usb 7-1: Manufacturer: syz [ 970.475348][ T5818] usb 7-1: SerialNumber: syz [ 970.488204][T16814] netlink: 'syz.9.2534': attribute type 3 has an invalid length. [ 970.573609][T16814] netlink: 'syz.9.2534': attribute type 1 has an invalid length. [ 970.596002][ T30] kauditd_printk_skb: 84 callbacks suppressed [ 970.596035][ T30] audit: type=1326 audit(1753952518.836:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16804 comm="syz.6.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff0059c1265 code=0x7ffc0000 [ 970.615659][ T9560] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 971.053900][T16814] netlink: 220 bytes leftover after parsing attributes in process `syz.9.2534'. [ 971.163119][ T30] audit: type=1400 audit(1753952519.386:1359): avc: denied { bind } for pid=16811 comm="syz.9.2534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 971.264204][ T30] audit: type=1326 audit(1753952519.486:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16804 comm="syz.6.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00598e9a9 code=0x7ffc0000 [ 971.275752][ T9560] usb 6-1: Using ep0 maxpacket: 32 [ 971.336038][ T9560] usb 6-1: config 0 interface 0 has no altsetting 0 [ 971.348999][ T5818] xr_serial 7-1:127.171: xr_serial converter detected [ 971.365633][ T30] audit: type=1326 audit(1753952519.486:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16804 comm="syz.6.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00598e9a9 code=0x7ffc0000 [ 971.399554][ T9560] usb 6-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 971.405666][ T5818] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 971.420884][ T5818] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 971.437744][ T30] audit: type=1326 audit(1753952519.506:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16804 comm="syz.6.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7ff00598e9a9 code=0x7ffc0000 [ 971.476543][ T5818] usb 7-1: USB disconnect, device number 15 [ 971.485941][ T5818] xr_serial 7-1:127.171: device disconnected [ 971.511542][ T30] audit: type=1400 audit(1753952519.506:1363): avc: denied { create } for pid=16804 comm="syz.6.2531" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 971.555011][ T9560] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.625822][T16844] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2534'. [ 971.655532][ T30] audit: type=1326 audit(1753952519.506:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16804 comm="syz.6.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00598e9a9 code=0x7ffc0000 [ 971.688832][T16844] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2534'. [ 971.699368][ T9560] usb 6-1: config 0 descriptor?? [ 971.705882][ T9496] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 971.746805][ T30] audit: type=1326 audit(1753952519.506:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16804 comm="syz.6.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00598e9a9 code=0x7ffc0000 [ 971.895670][ T30] audit: type=1326 audit(1753952519.536:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16804 comm="syz.6.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ff00598e9a9 code=0x7ffc0000 [ 971.919881][ T30] audit: type=1326 audit(1753952519.536:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16804 comm="syz.6.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00598e9a9 code=0x7ffc0000 [ 971.967910][ T9496] usb 9-1: config 0 has no interfaces? [ 971.975753][ T9496] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 972.368868][T16844] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2534'. [ 972.380101][ T59] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 972.417429][ T59] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 972.441966][ T9496] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.474019][ T9560] chicony 0003:04F2:1421.0057: hidraw0: USB HID v1.01 Device [HID 04f2:1421] on usb-dummy_hcd.5-1/input0 [ 972.486523][ T9496] usb 9-1: config 0 descriptor?? [ 972.515674][T16844] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2534'. [ 972.543965][ T9560] usb 6-1: USB disconnect, device number 38 [ 972.580781][ T59] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 972.710965][ T59] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 972.772426][T16853] fido_id[16853]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 973.063115][T16840] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2539'. [ 973.505686][ T9560] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 973.686398][ T9560] usb 10-1: device descriptor read/64, error -71 [ 974.125257][ T9560] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 974.255728][ T5818] usb 7-1: new low-speed USB device number 16 using dummy_hcd [ 974.279184][ T5829] Bluetooth: hci6: command 0x0406 tx timeout [ 974.310237][T14904] Bluetooth: hci0: command 0x0406 tx timeout [ 974.325701][ T5144] Bluetooth: hci5: command 0x0406 tx timeout [ 974.331760][ T5825] Bluetooth: hci4: command 0x0406 tx timeout [ 974.366824][ T9560] usb 10-1: device descriptor read/64, error -71 [ 974.486026][ T9560] usb usb10-port1: attempt power cycle [ 974.509864][ T5818] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 974.594064][ T5818] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.615039][T14387] usb 9-1: USB disconnect, device number 13 [ 974.666332][ T5818] usb 7-1: config 0 descriptor?? [ 974.847129][ T9560] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 974.897708][ T9560] usb 10-1: device descriptor read/8, error -71 [ 975.165658][ T9560] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 975.216835][ T9560] usb 10-1: device descriptor read/8, error -71 [ 975.326085][ T9560] usb usb10-port1: unable to enumerate USB device [ 975.551647][T16931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2556'. [ 975.561009][T16931] netlink: 'syz.0.2556': attribute type 5 has an invalid length. [ 976.106112][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 976.106129][ T30] audit: type=1400 audit(1753952524.336:1394): avc: denied { setopt } for pid=16937 comm="syz.5.2557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 976.249233][ T30] audit: type=1400 audit(1753952524.336:1395): avc: denied { bind } for pid=16937 comm="syz.5.2557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 976.536150][ T30] audit: type=1400 audit(1753952524.336:1396): avc: denied { getopt } for pid=16937 comm="syz.5.2557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 976.568761][ T30] audit: type=1400 audit(1753952524.806:1397): avc: denied { setopt } for pid=16940 comm="syz.9.2558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 976.816929][ T30] audit: type=1400 audit(1753952524.996:1398): avc: denied { mounton } for pid=16884 comm="syz.6.2548" path="/proc/241/cgroup" dev="proc" ino=52391 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 976.902000][ T30] audit: type=1400 audit(1753952525.136:1399): avc: denied { mounton } for pid=16884 comm="syz.6.2548" path="/proc/241/cgroup" dev="nsfs" ino=4026534208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 977.067180][ T30] audit: type=1326 audit(1753952525.266:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16946 comm="syz.9.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77118e9a9 code=0x7ffc0000 [ 977.103892][ T30] audit: type=1326 audit(1753952525.266:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16946 comm="syz.9.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77118e9a9 code=0x7ffc0000 [ 977.127370][ C0] vkms_vblank_simulate: vblank timer overrun [ 977.142128][ T30] audit: type=1326 audit(1753952525.266:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16946 comm="syz.9.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fe77118e9a9 code=0x7ffc0000 [ 977.165617][ C0] vkms_vblank_simulate: vblank timer overrun [ 977.195648][ T30] audit: type=1326 audit(1753952525.266:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16946 comm="syz.9.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77118e9a9 code=0x7ffc0000 [ 977.513716][T16960] geneve2: entered promiscuous mode [ 977.519068][T16960] geneve2: entered allmulticast mode [ 978.254490][T16979] binder: 16968:16979 ioctl 8008f511 200000000340 returned -22 [ 980.109302][ T5818] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 980.145729][ T5818] asix 7-1:0.0: probe with driver asix failed with error -71 [ 980.258961][ T5818] usb 7-1: USB disconnect, device number 16 [ 980.287791][T17001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2570'. [ 980.698073][T17004] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17004 comm=syz.0.2570 [ 981.133153][ T30] kauditd_printk_skb: 107 callbacks suppressed [ 981.133168][ T30] audit: type=1326 audit(1753952529.366:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17011 comm="syz.5.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c9b8e9a9 code=0x7ffc0000 [ 981.398725][ T30] audit: type=1326 audit(1753952529.406:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17011 comm="syz.5.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fe0c9b8e9a9 code=0x7ffc0000 [ 981.551382][ T30] audit: type=1326 audit(1753952529.406:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17011 comm="syz.5.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c9b8e9a9 code=0x7ffc0000 [ 981.766752][ T30] audit: type=1400 audit(1753952529.846:1514): avc: denied { create } for pid=17036 comm="syz.5.2578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 981.949343][T17048] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2581'. [ 981.962806][ T30] audit: type=1400 audit(1753952529.846:1515): avc: denied { write } for pid=17036 comm="syz.5.2578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 982.459586][T17048] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2581'. [ 983.523133][T17067] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2585'. [ 983.615673][ T9560] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 983.686170][T17072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 983.706384][T17072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 983.883436][ T9560] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 983.945880][ T5818] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 984.055809][ T9560] usb 1-1: config 0 interface 0 has no altsetting 0 [ 984.085689][T14387] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 984.092498][ T9560] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 984.126294][ T9560] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.171661][ T9560] usb 1-1: Product: syz [ 984.189631][ T9560] usb 1-1: Manufacturer: syz [ 984.194283][ T9560] usb 1-1: SerialNumber: syz [ 984.206182][ T5818] usb 7-1: Using ep0 maxpacket: 32 [ 985.128293][ T9560] usb 1-1: config 0 descriptor?? [ 985.156041][ T30] audit: type=1400 audit(1753952537.636:1516): avc: denied { setopt } for pid=17082 comm="syz.8.2588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 985.167569][ T9560] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 985.209893][ T5818] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 985.225899][ T5818] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 985.236351][ T5818] usb 7-1: config 0 has no interface number 0 [ 985.242452][ T5818] usb 7-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 985.263803][T14387] usb 6-1: config 0 has no interfaces? [ 985.277691][ T5818] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 985.288302][T14387] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 985.297467][ T5818] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.305765][T14387] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.313838][ T5818] usb 7-1: Product: syz [ 985.318159][ T5818] usb 7-1: Manufacturer: syz [ 985.322764][ T5818] usb 7-1: SerialNumber: syz [ 985.329276][T14387] usb 6-1: config 0 descriptor?? [ 985.349924][ T5818] usb 7-1: config 0 descriptor?? [ 985.381111][ T9560] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 985.393194][ T5818] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 985.486745][ T9560] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 985.624425][ T5818] usb 7-1: qt2_attach - failed to power on unit: -71 [ 985.639966][ T9560] usb 1-1: media controller created [ 985.694772][ T5818] quatech2 7-1:0.51: probe with driver quatech2 failed with error -71 [ 985.742380][ T5818] usb 7-1: USB disconnect, device number 17 [ 985.804477][ T9560] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 986.181847][ T30] audit: type=1400 audit(1753952539.416:1517): avc: denied { bind } for pid=17107 comm="syz.0.2592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 986.225489][ T30] audit: type=1400 audit(1753952539.456:1518): avc: denied { ioctl } for pid=17107 comm="syz.0.2592" path="socket:[52186]" dev="sockfs" ino=52186 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 986.358296][ T9560] DVB: Unable to find symbol tda10046_attach() [ 986.359393][T17110] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2593'. [ 986.368822][ T9560] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 986.464514][T17110] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2593'. [ 987.260312][ T9560] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 987.314403][T17116] netlink: 'syz.0.2594': attribute type 21 has an invalid length. [ 987.322836][T17116] netlink: 'syz.0.2594': attribute type 6 has an invalid length. [ 987.330736][T17116] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2594'. [ 987.529976][ T9560] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 987.552071][ T9560] usb 1-1: USB disconnect, device number 47 [ 987.613893][ T92] usb 6-1: USB disconnect, device number 39 [ 987.885638][ T5903] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 988.923486][T17132] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2597'. [ 988.932589][T17132] netlink: 'syz.5.2597': attribute type 1 has an invalid length. [ 989.226162][ T5903] usb 9-1: device descriptor read/all, error -71 [ 989.317512][T17137] Failed to get privilege flags for destination (handle=0x0:0x0) [ 989.713448][T17148] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 989.833509][ T30] audit: type=1400 audit(1753952542.926:1519): avc: denied { mount } for pid=17146 comm="syz.6.2602" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 990.199637][ T9194] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 990.639790][ T30] audit: type=1400 audit(1753952543.876:1520): avc: denied { unmount } for pid=14888 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 990.659798][ C0] vkms_vblank_simulate: vblank timer overrun [ 990.787244][ T9194] usb 1-1: Using ep0 maxpacket: 8 [ 990.806604][ T9194] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 990.895863][ T43] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 990.912537][ T5968] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 991.055852][ T43] usb 10-1: Using ep0 maxpacket: 8 [ 991.077202][ T43] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 991.126537][ T43] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 991.142885][ T43] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 991.153388][ T5968] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 991.174926][ T43] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 991.195791][ T5968] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 991.228971][ T5968] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.235590][ T9194] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 991.237760][ T43] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 991.284129][ T5968] usb 9-1: config 0 descriptor?? [ 991.295974][ T9194] usb 1-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f [ 991.330057][ T43] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.365595][ T9194] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.440254][ T9194] usb 1-1: Product: syz [ 991.475326][ T9194] usb 1-1: Manufacturer: syz [ 991.498591][ T9194] usb 1-1: SerialNumber: syz [ 991.585176][T17169] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2607'. [ 991.609032][ T9194] usb 1-1: config 0 descriptor?? [ 991.619209][ T9194] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 991.776640][ T43] usb 10-1: GET_CAPABILITIES returned 0 [ 991.806589][ T5968] keytouch 0003:0926:3333.0058: fixing up Keytouch IEC report descriptor [ 991.850107][ T43] usbtmc 10-1:16.0: can't read capabilities [ 992.017179][T17152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 992.037708][ T5968] input: HID 0926:3333 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0926:3333.0058/input/input42 [ 992.045667][ T5903] usb 1-1: USB disconnect, device number 48 [ 992.095195][T17152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 992.124148][T17169] netlink: 'syz.6.2607': attribute type 10 has an invalid length. [ 992.210221][T17169] syz_tun: entered promiscuous mode [ 992.268745][T17169] : (slave syz_tun): Enslaving as an active interface with an up link [ 992.358577][ T5903] usb 10-1: USB disconnect, device number 15 [ 992.399401][ T5968] keytouch 0003:0926:3333.0058: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.8-1/input0 [ 992.504926][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.518891][ T30] audit: type=1400 audit(1753952545.736:1521): avc: denied { audit_read } for pid=17184 comm="syz.5.2609" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 992.570371][ T5968] usb 9-1: USB disconnect, device number 16 [ 992.738185][T17187] fido_id[17187]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 993.205872][ T5903] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 993.478182][ T5903] usb 1-1: Using ep0 maxpacket: 16 [ 993.554055][ T30] audit: type=1400 audit(1753952546.786:1522): avc: denied { write } for pid=17198 comm="syz.8.2612" path="socket:[53446]" dev="sockfs" ino=53446 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 993.732690][ T5903] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 993.824833][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 993.897997][T17199] syzkaller1: entered promiscuous mode [ 993.903468][T17199] syzkaller1: entered allmulticast mode [ 993.931905][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 993.965960][T14387] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 994.024522][ T5903] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 994.110122][ T5903] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 994.170860][T14387] usb 10-1: Using ep0 maxpacket: 8 [ 994.231919][T14387] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 994.243200][ T5903] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 994.243227][ T5903] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 994.367995][ T5903] usb 1-1: Manufacturer: syz [ 994.408691][T14387] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 994.475619][T14387] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.499967][T14387] usb 10-1: config 0 descriptor?? [ 994.519250][ T5903] usb 1-1: config 0 descriptor?? [ 994.751063][T14387] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 995.001212][ T5903] rc_core: IR keymap rc-hauppauge not found [ 995.035782][ T5903] Registered IR keymap rc-empty [ 995.040755][ T5903] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 995.079349][ T30] audit: type=1400 audit(1753952548.316:1523): avc: denied { mounton } for pid=17196 comm="syz.9.2613" path="/syzcgroup/unified/syz9" dev="cgroup2" ino=510 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 995.136445][ T5903] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 996.635653][ T30] audit: type=1400 audit(1753952548.316:1524): avc: denied { mount } for pid=17196 comm="syz.9.2613" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 996.666567][ T5903] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 996.684810][T14387] usb 10-1: USB disconnect, device number 16 [ 996.823621][ T5903] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input43 [ 996.877267][ T5903] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 996.956766][ T5903] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 996.986243][ T5903] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 997.030390][ T5903] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 997.070992][T17244] netlink: 'syz.8.2619': attribute type 10 has an invalid length. [ 997.079509][T17244] netlink: 152 bytes leftover after parsing attributes in process `syz.8.2619'. [ 997.089194][ T5903] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 997.215886][ T5903] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 997.241044][ T5903] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 997.291488][ T5903] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 997.315972][ T5903] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 997.466179][T17256] block nbd0: server does not support multiple connections per device. [ 997.544788][T17256] block nbd0: shutting down sockets [ 997.902760][ T5903] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 997.957216][ T5903] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 998.005622][ T5903] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 998.019628][T17264] lo speed is unknown, defaulting to 1000 [ 998.035892][T17264] lo speed is unknown, defaulting to 1000 [ 998.042199][T17264] lo speed is unknown, defaulting to 1000 [ 998.132056][T17264] infiniband sz1: set active [ 998.136921][T17264] infiniband sz1: added lo [ 998.146296][T14387] lo speed is unknown, defaulting to 1000 [ 998.230117][T17264] RDS/IB: sz1: added [ 998.234766][T17264] smc: adding ib device sz1 with port count 1 [ 998.241145][T17264] smc: ib device sz1 port 1 has pnetid [ 998.250335][T17264] lo speed is unknown, defaulting to 1000 [ 998.337557][T17264] lo speed is unknown, defaulting to 1000 [ 998.421235][T17264] lo speed is unknown, defaulting to 1000 [ 998.504669][T17264] lo speed is unknown, defaulting to 1000 [ 998.590090][T17264] lo speed is unknown, defaulting to 1000 [ 998.673365][T17264] lo speed is unknown, defaulting to 1000 [ 998.755774][T17264] lo speed is unknown, defaulting to 1000 [ 998.839318][T17264] lo speed is unknown, defaulting to 1000 [ 998.922916][T17264] lo speed is unknown, defaulting to 1000 [ 999.008197][T17264] lo speed is unknown, defaulting to 1000 [ 999.095705][ T43] lo speed is unknown, defaulting to 1000 [ 999.115029][ T30] audit: type=1400 audit(1753952551.276:1525): avc: denied { name_bind } for pid=17268 comm="syz.0.2623" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 999.281224][ T5903] usb 1-1: USB disconnect, device number 49 [ 999.706675][T17248] syz.9.2618: attempt to access beyond end of device [ 999.706675][T17248] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 999.883104][ T30] audit: type=1400 audit(1753952553.106:1526): avc: denied { map } for pid=17242 comm="syz.9.2618" path="/dev/net/tun" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 999.931320][T17284] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 999.967025][ T30] audit: type=1400 audit(1753952553.106:1527): avc: denied { execute } for pid=17242 comm="syz.9.2618" path="/dev/net/tun" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 1000.067702][ T5903] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1000.186280][ T30] audit: type=1400 audit(1753952553.196:1528): avc: denied { append } for pid=17275 comm="syz.6.2625" name="sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1000.235715][ T5903] usb 1-1: Using ep0 maxpacket: 32 [ 1000.242233][ T5903] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.263065][ T5903] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1000.320376][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.421175][ T5903] usb 1-1: Product: syz [ 1000.531835][ T5903] usb 1-1: Manufacturer: syz [ 1000.572506][ T5903] usb 1-1: SerialNumber: syz [ 1000.603724][ T5903] usb 1-1: config 0 descriptor?? [ 1001.020796][ T5903] usb 1-1: USB disconnect, device number 50 [ 1001.210090][ T30] audit: type=1400 audit(1753952554.446:1529): avc: denied { name_bind } for pid=17315 comm="syz.9.2633" src=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 1001.263512][T17317] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2633'. [ 1001.327119][ T30] audit: type=1400 audit(1753952554.566:1530): avc: denied { map } for pid=17320 comm="syz.0.2634" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1001.365238][ T9560] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1001.371992][T17327] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2635'. [ 1001.393983][ T30] audit: type=1400 audit(1753952554.566:1531): avc: denied { execute } for pid=17320 comm="syz.0.2634" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1001.550265][ T30] audit: type=1400 audit(1753952554.786:1532): avc: denied { name_connect } for pid=17326 comm="syz.8.2635" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1001.579813][ T9560] usb 7-1: Using ep0 maxpacket: 8 [ 1001.760006][ T9560] usb 7-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1001.780471][ T9560] usb 7-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1001.819394][ T9560] usb 7-1: Product: syz [ 1001.823610][ T9560] usb 7-1: Manufacturer: syz [ 1001.849633][ T9560] usb 7-1: SerialNumber: syz [ 1001.868535][ T9560] usb 7-1: config 0 descriptor?? [ 1001.916012][ T9560] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1002.406089][ T30] audit: type=1400 audit(1753952555.636:1533): avc: denied { accept } for pid=17326 comm="syz.8.2635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1002.426456][ C0] vkms_vblank_simulate: vblank timer overrun [ 1002.601551][T17342] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2638'. [ 1002.628548][T17342] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2638'. [ 1002.829855][ T30] audit: type=1400 audit(1753952556.066:1534): avc: denied { create } for pid=17345 comm="syz.0.2639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1002.939697][T17345] delete_channel: no stack [ 1003.095874][ T9560] gspca_zc3xx: reg_w_i err -110 [ 1003.100836][ T9560] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1003.387786][T17364] loop4: detected capacity change from 0 to 524287999 [ 1003.405669][T17364] netlink: 'syz.0.2642': attribute type 12 has an invalid length. [ 1003.510148][T17362] block device autoloading is deprecated and will be removed. [ 1003.672675][T17354] netlink: 'syz.6.2632': attribute type 21 has an invalid length. [ 1003.694544][T17371] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2643'. [ 1004.435066][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 1004.435081][ T30] audit: type=1400 audit(1753952557.666:1587): avc: denied { read } for pid=17385 comm="syz.0.2646" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1004.527797][ T30] audit: type=1400 audit(1753952557.666:1588): avc: denied { open } for pid=17385 comm="syz.0.2646" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1004.809425][ T30] audit: type=1400 audit(1753952558.036:1589): avc: denied { read } for pid=17384 comm="syz.9.2645" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1004.881932][ T5903] usb 7-1: USB disconnect, device number 18 [ 1004.882985][ T30] audit: type=1400 audit(1753952558.046:1590): avc: denied { open } for pid=17384 comm="syz.9.2645" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1004.945289][ T30] audit: type=1400 audit(1753952558.166:1591): avc: denied { read write } for pid=17384 comm="syz.9.2645" name="vbi6" dev="devtmpfs" ino=993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1004.983675][ T30] audit: type=1400 audit(1753952558.166:1592): avc: denied { open } for pid=17384 comm="syz.9.2645" path="/dev/vbi6" dev="devtmpfs" ino=993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1005.315844][ T30] audit: type=1400 audit(1753952558.176:1593): avc: denied { ioctl } for pid=17384 comm="syz.9.2645" path="/dev/vbi6" dev="devtmpfs" ino=993 ioctlcmd=0x5627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1005.340634][ C0] vkms_vblank_simulate: vblank timer overrun [ 1005.351816][ T30] audit: type=1400 audit(1753952558.546:1594): avc: denied { create } for pid=17389 comm="syz.0.2647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1005.395819][ T30] audit: type=1400 audit(1753952558.586:1595): avc: denied { write } for pid=17394 comm="syz.6.2648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1005.440591][ T30] audit: type=1400 audit(1753952558.626:1596): avc: denied { unmount } for pid=14890 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1005.645969][T17357] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1005.686003][T17358] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 1005.694645][T17406] SELinux: policydb magic number 0x4c5047 does not match expected magic number 0xf97cff8c [ 1005.707938][T17406] SELinux: failed to load policy [ 1005.713291][T17405] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2651'. [ 1005.775041][T17405] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2651'. [ 1005.805880][T17357] usb 7-1: Using ep0 maxpacket: 8 [ 1006.543402][T17358] usb 1-1: not running at top speed; connect to a high speed hub [ 1006.558249][T17357] usb 7-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1006.619004][T17358] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1006.632457][T17357] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1006.747786][T17358] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1006.760854][T17357] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 1006.770223][T17357] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.780877][T17357] usb 7-1: config 0 descriptor?? [ 1006.808826][T17358] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1006.823064][T17358] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.831510][T17358] usb 1-1: Product: syz [ 1006.836104][T17358] usb 1-1: Manufacturer: syz [ 1006.840903][T17358] usb 1-1: SerialNumber: syz [ 1007.310573][T17398] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1007.325859][T17395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1007.337992][T17395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1010.285870][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 1010.285889][ T30] audit: type=1400 audit(1753952561.446:1619): avc: denied { read write } for pid=17420 comm="syz.8.2655" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1010.334422][ T30] audit: type=1400 audit(1753952561.456:1620): avc: denied { open } for pid=17420 comm="syz.8.2655" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1010.345950][ T5903] usb 7-1: USB disconnect, device number 19 [ 1010.464312][ T30] audit: type=1400 audit(1753952561.526:1621): avc: denied { create } for pid=17420 comm="syz.8.2655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1011.086632][ T30] audit: type=1400 audit(1753952561.616:1622): avc: denied { ioctl } for pid=17420 comm="syz.8.2655" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1011.112267][ C0] vkms_vblank_simulate: vblank timer overrun [ 1011.523962][ T30] audit: type=1400 audit(1753952563.776:1623): avc: denied { create } for pid=17425 comm="syz.9.2656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1011.549933][ T5903] IPVS: starting estimator thread 0... [ 1011.568776][ T30] audit: type=1400 audit(1753952563.796:1624): avc: denied { bind } for pid=17425 comm="syz.9.2656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1011.640347][ T30] audit: type=1400 audit(1753952563.796:1625): avc: denied { listen } for pid=17425 comm="syz.9.2656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1011.662624][T17436] IPVS: using max 48 ests per chain, 115200 per kthread [ 1011.943128][ T30] audit: type=1400 audit(1753952563.816:1626): avc: denied { append } for pid=17425 comm="syz.9.2656" name="comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1011.971435][T17358] cdc_ncm 1-1:1.0: bind() failure [ 1011.998305][T17358] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1012.005121][T17358] cdc_ncm 1-1:1.1: bind() failure [ 1012.025045][T17358] usb 1-1: USB disconnect, device number 51 [ 1012.092694][ T30] audit: type=1400 audit(1753952564.406:1627): avc: denied { create } for pid=17431 comm="syz.8.2658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1012.115849][ T30] audit: type=1400 audit(1753952564.416:1628): avc: denied { connect } for pid=17431 comm="syz.8.2658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1012.151283][T17446] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2661'. [ 1012.221788][T17449] binder_alloc: 17448: pid 17448 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1012.241537][T17449] binder_alloc: 17448: pid 17448 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1012.258564][T17449] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2663'. [ 1012.267840][T17449] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2663'. [ 1012.565887][T17358] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1013.126070][T17358] usb 1-1: Using ep0 maxpacket: 8 [ 1013.333791][T17358] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1013.350490][T17358] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1013.491783][T17358] usb 1-1: Product: syz [ 1013.573187][T17358] usb 1-1: Manufacturer: syz [ 1013.632794][T17358] usb 1-1: SerialNumber: syz [ 1013.675868][T17360] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1013.755839][T17358] usb 1-1: config 0 descriptor?? [ 1013.778288][ T9560] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 1013.792256][T17358] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1013.835253][T14901] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1013.849142][T14901] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1013.859714][T14901] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1013.873273][T14901] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1013.882482][T14901] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1013.895847][T17360] usb 10-1: Using ep0 maxpacket: 32 [ 1013.958722][ T9560] usb 9-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1013.967260][T17468] wlan0 speed is unknown, defaulting to 1000 [ 1013.968227][ T9560] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.975391][T17468] lo speed is unknown, defaulting to 1000 [ 1013.982480][ T9560] usb 9-1: Product: syz [ 1013.982500][ T9560] usb 9-1: Manufacturer: syz [ 1013.982515][ T9560] usb 9-1: SerialNumber: syz [ 1013.989119][ T9560] usb 9-1: config 0 descriptor?? [ 1014.005131][T17468] lo speed is unknown, defaulting to 1000 [ 1014.035957][ T9560] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1014.221941][T17358] gspca_zc3xx: reg_r err -71 [ 1014.231123][T17358] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1014.258956][T17358] usb 1-1: USB disconnect, device number 52 [ 1014.403260][T17468] chnl_net:caif_netlink_parms(): no params data found [ 1014.634227][T17468] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.642403][T17468] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.652327][T17468] bridge_slave_0: entered allmulticast mode [ 1014.666984][T17468] bridge_slave_0: entered promiscuous mode [ 1014.684388][T17468] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.096187][ T9560] gspca_stk1135: reg_w 0x3 err -110 [ 1015.144986][ T9560] gspca_stk1135: serial bus timeout: status=0x00 [ 1015.151549][T17468] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.161242][ T9560] gspca_stk1135: Sensor write failed [ 1015.164040][T17468] bridge_slave_1: entered allmulticast mode [ 1015.167227][ T9560] gspca_stk1135: serial bus timeout: status=0x00 [ 1015.177118][T17468] bridge_slave_1: entered promiscuous mode [ 1015.179502][ T9560] gspca_stk1135: Sensor write failed [ 1015.190645][ T9560] gspca_stk1135: serial bus timeout: status=0x00 [ 1015.197087][ T9560] gspca_stk1135: Sensor read failed [ 1015.202509][ T9560] gspca_stk1135: serial bus timeout: status=0x00 [ 1015.209161][ T9560] gspca_stk1135: Sensor read failed [ 1015.214568][ T9560] gspca_stk1135: Detected sensor type unknown (0x0) [ 1015.221389][ T9560] gspca_stk1135: serial bus timeout: status=0x00 [ 1015.228029][ T9560] gspca_stk1135: Sensor read failed [ 1015.233321][ T9560] gspca_stk1135: serial bus timeout: status=0x00 [ 1015.239919][ T9560] gspca_stk1135: Sensor read failed [ 1015.245491][ T9560] gspca_stk1135: serial bus timeout: status=0x00 [ 1015.252106][ T9560] gspca_stk1135: Sensor write failed [ 1015.257500][ T9560] gspca_stk1135: serial bus timeout: status=0x00 [ 1015.280294][T17468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1015.290358][ T9560] gspca_stk1135: Sensor write failed [ 1015.296111][ T9560] stk1135 9-1:0.0: probe with driver stk1135 failed with error -110 [ 1015.311855][T17468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1015.451827][T17468] team0: Port device team_slave_0 added [ 1015.465300][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1015.465320][ T30] audit: type=1400 audit(1753952568.686:1653): avc: denied { write } for pid=17480 comm="syz.6.2672" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1015.506942][ T30] audit: type=1400 audit(1753952568.716:1654): avc: denied { write } for pid=17458 comm="syz.8.2667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1015.546024][T17468] team0: Port device team_slave_1 added [ 1015.566796][ T30] audit: type=1400 audit(1753952568.796:1655): avc: denied { ioctl } for pid=17483 comm="syz.0.2673" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1015.674758][ T30] audit: type=1400 audit(1753952568.906:1656): avc: denied { create } for pid=17491 comm="syz.0.2675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1015.701936][T17468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1015.727384][ T30] audit: type=1400 audit(1753952568.946:1657): avc: denied { setopt } for pid=17491 comm="syz.0.2675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1015.738234][T17468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1015.765315][ T30] audit: type=1400 audit(1753952568.946:1658): avc: denied { write } for pid=17491 comm="syz.0.2675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1015.773532][ C0] vkms_vblank_simulate: vblank timer overrun [ 1015.818875][ T30] audit: type=1400 audit(1753952568.996:1659): avc: denied { ioctl } for pid=17493 comm="syz.6.2676" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1015.858233][T17468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1015.889135][T17468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1015.894639][T17495] syz.8.2667: attempt to access beyond end of device [ 1015.894639][T17495] nbd8: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1015.899286][T17468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1015.914447][T17495] hpfs: hpfs_map_sector(): read error [ 1015.935923][ T30] audit: type=1400 audit(1753952569.156:1660): avc: denied { name_bind } for pid=17496 comm="syz.0.2677" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1015.966481][T14901] Bluetooth: hci7: command tx timeout [ 1015.973678][ T30] audit: type=1400 audit(1753952569.156:1661): avc: denied { node_bind } for pid=17496 comm="syz.0.2677" saddr=::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1015.996402][T17468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1016.011162][T17501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1016.020084][T17501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1016.027960][T17358] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1016.068599][T17495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1016.089149][T17468] hsr_slave_0: entered promiscuous mode [ 1016.101805][ T30] audit: type=1400 audit(1753952569.316:1662): avc: denied { read write } for pid=17502 comm="syz.0.2678" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1016.125424][ C0] vkms_vblank_simulate: vblank timer overrun [ 1016.128661][T17360] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1016.139596][T17495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1016.142344][T17468] hsr_slave_1: entered promiscuous mode [ 1016.164768][T17468] debugfs: 'hsr0' already exists in 'hsr' [ 1016.172797][T17468] Cannot create hsr debugfs directory [ 1016.355804][T17360] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1016.363535][T17360] usb 10-1: can't read configurations, error -71 [ 1016.369993][T17358] usb 7-1: Using ep0 maxpacket: 8 [ 1016.379440][T17358] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1016.390281][T17358] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.398415][T17358] usb 7-1: Product: syz [ 1016.402583][T17358] usb 7-1: Manufacturer: syz [ 1016.407354][T17358] usb 7-1: SerialNumber: syz [ 1016.425362][T17358] usb 7-1: config 0 descriptor?? [ 1016.443462][T17358] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1016.451979][T17358] usb 7-1: setting power ON [ 1016.491663][T17357] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 1016.765687][T17360] usb 10-1: new low-speed USB device number 18 using dummy_hcd [ 1016.980470][T17357] hid-generic 0000:0000:0000.0059: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1016.986383][T17494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1016.993824][T17358] dvb-usb: bulk message failed: -22 (2/0) [ 1017.006750][T17494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1017.028579][T17358] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1017.051111][T17360] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1017.079793][T17360] usb 10-1: config 0 has an invalid interface number: 105 but max is 0 [ 1017.089603][T17358] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1017.116075][T17360] usb 10-1: config 0 has no interface number 0 [ 1017.132579][T17358] usb 7-1: media controller created [ 1017.141308][T17360] usb 10-1: config 0 interface 105 altsetting 10 endpoint 0xE is Bulk; changing to Interrupt [ 1017.183338][T17360] usb 10-1: config 0 interface 105 has no altsetting 0 [ 1017.197701][T17508] fido_id[17508]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1017.220028][T17358] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1017.232122][T17360] usb 10-1: string descriptor 0 read error: -22 [ 1017.241909][T17360] usb 10-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 1017.242123][ T9560] usb 9-1: USB disconnect, device number 17 [ 1017.419760][T17360] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.610319][T17516] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2680'. [ 1017.980066][T17360] usb 10-1: config 0 descriptor?? [ 1017.993627][T17358] usb 7-1: selecting invalid altsetting 6 [ 1018.008160][T17505] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 1018.017630][T14901] Bluetooth: hci7: command tx timeout [ 1018.080278][T17358] usb 7-1: digital interface selection failed (-22) [ 1018.112268][T17360] usb 10-1: Found UVC 0.00 device (1943:2250) [ 1018.119411][T17358] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1018.130036][T17360] usb 10-1: No valid video chain found. [ 1018.143584][T17358] usb 7-1: setting power OFF [ 1018.151210][T17360] go7007 10-1:0.105: Sensoray 2250 found [ 1018.181105][T17358] dvb-usb: bulk message failed: -22 (2/0) [ 1018.213170][T17360] go7007 10-1:0.105: probe with driver go7007 failed with error -12 [ 1018.236025][T17358] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1018.305220][T17358] (NULL device *): no alternate interface [ 1018.495665][T17358] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1018.582015][T17513] 8021q: VLANs not supported on ipvlan1 [ 1018.588692][T17358] usb 7-1: USB disconnect, device number 20 [ 1018.667280][T17505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1018.699567][T17505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1018.766910][T17360] usb 10-1: USB disconnect, device number 18 [ 1018.946282][ T5903] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1019.116139][ T5903] usb 1-1: Using ep0 maxpacket: 8 [ 1019.144263][ T5903] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1019.161813][T17468] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1019.172958][ T5903] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1019.174534][T17468] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1019.201727][T17468] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1019.205979][ T5903] usb 1-1: Product: syz [ 1019.214144][ T5903] usb 1-1: Manufacturer: syz [ 1019.228520][ T5903] usb 1-1: SerialNumber: syz [ 1019.231437][T17468] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1019.352545][ T5903] usb 1-1: config 0 descriptor?? [ 1019.423330][ T5903] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1019.640923][T17539] loop2: detected capacity change from 0 to 7 [ 1019.651461][T17539] Dev loop2: unable to read RDB block 7 [ 1019.657079][T17539] loop2: unable to read partition table [ 1019.663909][T17539] loop2: partition table beyond EOD, truncated [ 1019.670741][T17539] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1019.833565][ T5903] gspca_zc3xx: reg_r err -71 [ 1019.835052][T17542] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1020.012768][ T5903] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1020.033390][T17542] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1020.039519][T17468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1020.052942][T17542] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1020.068496][ T5903] usb 1-1: USB disconnect, device number 53 [ 1020.094978][T17542] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1020.096211][T14901] Bluetooth: hci7: command tx timeout [ 1020.116243][T17468] 8021q: adding VLAN 0 to HW filter on device team0 [ 1020.154504][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.161708][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1020.229049][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.236262][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1020.268656][T17547] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2689'. [ 1020.309096][T17547] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2689'. [ 1020.532636][T17555] fuse: Unknown parameter '0xffffffffffffffff0x00000000000000040x00000000000000030000000000000000000000000000000000000000' [ 1020.535903][T17358] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1020.564678][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1020.564695][ T30] audit: type=1400 audit(1753952573.796:1672): avc: denied { mount } for pid=17553 comm="syz.0.2691" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1020.593091][ C0] vkms_vblank_simulate: vblank timer overrun [ 1020.733341][T17468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1021.213142][T17562] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2690'. [ 1021.222431][T17562] netlink: 'syz.6.2690': attribute type 1 has an invalid length. [ 1022.037125][T17565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2691'. [ 1022.055635][T17358] usb 10-1: Using ep0 maxpacket: 32 [ 1022.063462][T17358] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1022.076346][T17358] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1022.084033][T17358] usb 10-1: can't read configurations, error -71 [ 1022.138701][T17468] veth0_vlan: entered promiscuous mode [ 1022.225221][T14901] Bluetooth: hci7: command tx timeout [ 1022.251794][T17468] veth1_vlan: entered promiscuous mode [ 1022.420643][T17468] veth0_macvtap: entered promiscuous mode [ 1022.439739][T17468] veth1_macvtap: entered promiscuous mode [ 1022.969229][T17468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1023.027857][T17468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1023.072767][ T30] audit: type=1400 audit(1753952576.306:1673): avc: denied { name_bind } for pid=17576 comm="syz.9.2695" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1023.325985][ T9006] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.334829][ T9006] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.357561][ T30] audit: type=1400 audit(1753952576.556:1674): avc: denied { create } for pid=17576 comm="syz.9.2695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1023.432087][ T9006] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.460959][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.618711][ T30] audit: type=1400 audit(1753952576.856:1675): avc: denied { create } for pid=17580 comm="syz.0.2696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1023.835722][ T9023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1024.315768][ T30] audit: type=1400 audit(1753952577.166:1676): avc: denied { connect } for pid=17580 comm="syz.0.2696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1024.357794][ T9023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1024.466907][ T9002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1024.569146][ T9002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1024.580205][ T30] audit: type=1400 audit(1753952577.796:1677): avc: denied { create } for pid=17584 comm="syz.8.2697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1025.445643][ T30] audit: type=1400 audit(1753952578.366:1678): avc: denied { mounton } for pid=17468 comm="syz-executor" path="/root/syzkaller.B0J2Wi/syz-tmp" dev="sda1" ino=2063 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1025.455958][T14895] Bluetooth: hci1: command 0x0406 tx timeout [ 1025.529972][ T30] audit: type=1400 audit(1753952578.386:1679): avc: denied { mount } for pid=17468 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1025.553394][ T30] audit: type=1400 audit(1753952578.576:1680): avc: denied { write } for pid=17576 comm="syz.9.2695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1025.573260][ T30] audit: type=1400 audit(1753952578.646:1681): avc: denied { mount } for pid=17468 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1025.596037][ T30] audit: type=1400 audit(1753952578.676:1682): avc: denied { mounton } for pid=17468 comm="syz-executor" path="/root/syzkaller.B0J2Wi/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1025.647536][T17592] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2699'. [ 1025.674840][T17592] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2699'. [ 1025.690639][ T30] audit: type=1400 audit(1753952578.676:1683): avc: denied { mounton } for pid=17468 comm="syz-executor" path="/root/syzkaller.B0J2Wi/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=54851 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1025.841613][ T30] audit: type=1400 audit(1753952578.716:1684): avc: denied { unmount } for pid=17468 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1025.862551][ T30] audit: type=1400 audit(1753952578.766:1685): avc: denied { mounton } for pid=17468 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2788 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1026.320204][ T30] audit: type=1400 audit(1753952578.766:1686): avc: denied { mount } for pid=17468 comm="syz-executor" name="/" dev="gadgetfs" ino=7619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1026.343491][ T30] audit: type=1400 audit(1753952578.766:1687): avc: denied { mount } for pid=17468 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1026.382999][T17601] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2701'. [ 1026.391956][T17601] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2701'. [ 1026.401775][ T30] audit: type=1400 audit(1753952578.766:1688): avc: denied { mounton } for pid=17468 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1026.461932][ T30] audit: type=1400 audit(1753952578.926:1689): avc: denied { connect } for pid=17594 comm="syz.8.2700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1027.428845][T17611] fuse: Unknown parameter '0xffffffffffffffff0x00000000000000040x00000000000000030000000000000000000000000000000000000000' [ 1027.514937][T17612] hub 6-0:1.0: USB hub found [ 1027.521195][T17612] hub 6-0:1.0: 1 port detected [ 1027.540858][ T30] audit: type=1400 audit(1753952580.746:1690): avc: denied { write } for pid=17607 comm="syz.9.2704" name="001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1027.917988][T17622] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2703'. [ 1027.927361][T17622] netlink: 'syz.8.2703': attribute type 1 has an invalid length. [ 1030.056078][T17648] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2715'. [ 1030.065026][T17648] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2715'. [ 1030.799218][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 1030.799237][ T30] audit: type=1400 audit(1753952584.036:1710): avc: denied { write } for pid=17660 comm="syz.0.2722" name="binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1030.828229][ C0] vkms_vblank_simulate: vblank timer overrun [ 1030.920181][T17661] dummy0: entered promiscuous mode [ 1030.928503][T17661] macsec1: entered promiscuous mode [ 1030.935755][T17661] macsec1: entered allmulticast mode [ 1030.941282][T17661] dummy0: entered allmulticast mode [ 1030.950040][T17661] dummy0: left allmulticast mode [ 1030.955600][T17661] dummy0: left promiscuous mode [ 1030.977445][T17666] hub 6-0:1.0: USB hub found [ 1030.982235][T17666] hub 6-0:1.0: 1 port detected [ 1030.997303][T17667] tipc: Started in network mode [ 1031.003894][T17667] tipc: Node identity 6af394c46ee7, cluster identity 4711 [ 1031.012400][T17667] tipc: Enabled bearer , priority 0 [ 1031.084290][T17660] tipc: Disabling bearer [ 1031.085652][ T5951] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1031.245751][ T5951] usb 9-1: Using ep0 maxpacket: 32 [ 1031.253212][ T5951] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1031.260609][ T5951] usb 9-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 1031.274955][ T5951] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.386935][ T5951] usb 9-1: config 0 descriptor?? [ 1032.428230][T11659] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0 [ 1032.553672][T11659] hid-generic 0000:0000:0000.005A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1032.706872][ T5951] chicony 0003:04F2:1421.005B: hidraw0: USB HID v1.01 Device [HID 04f2:1421] on usb-dummy_hcd.8-1/input0 [ 1032.710789][ T30] audit: type=1400 audit(1753952585.946:1711): avc: denied { setopt } for pid=17678 comm="syz.2.2726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1032.793335][T17677] fido_id[17677]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1032.803985][ T30] audit: type=1400 audit(1753952585.946:1712): avc: denied { write } for pid=17678 comm="syz.2.2726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1033.022088][ T30] audit: type=1400 audit(1753952586.086:1713): avc: denied { bind } for pid=17681 comm="syz.0.2727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1033.029533][ T5951] usb 9-1: USB disconnect, device number 18 [ 1033.487642][ T30] audit: type=1400 audit(1753952586.716:1714): avc: denied { getopt } for pid=17681 comm="syz.0.2727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1033.753187][ T30] audit: type=1400 audit(1753952586.716:1715): avc: denied { create } for pid=17681 comm="syz.0.2727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 1033.849697][T17689] fido_id[17689]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1034.009823][T17698] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2730'. [ 1034.035829][T17698] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2730'. [ 1034.174790][T17701] wlan0 speed is unknown, defaulting to 1000 [ 1034.182313][T17701] lo speed is unknown, defaulting to 1000 [ 1034.188975][T17701] lo speed is unknown, defaulting to 1000 [ 1035.701295][ T30] audit: type=1400 audit(1753952588.226:1716): avc: denied { accept } for pid=17707 comm="syz.8.2732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1035.722379][ C0] vkms_vblank_simulate: vblank timer overrun [ 1035.749497][T17711] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2733'. [ 1036.673389][T17733] hub 6-0:1.0: USB hub found [ 1036.678685][T17733] hub 6-0:1.0: 1 port detected [ 1036.689740][ T30] audit: type=1400 audit(1753952589.926:1717): avc: denied { remount } for pid=17719 comm="syz.0.2738" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1036.839013][ T30] audit: type=1400 audit(1753952590.066:1718): avc: denied { name_connect } for pid=17720 comm="syz.8.2736" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1037.023304][T17740] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1037.029848][T17740] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1037.037408][ T9496] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1037.096518][T17740] vhci_hcd vhci_hcd.0: Device attached [ 1037.149079][T17740] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1037.155633][T17740] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1037.170346][T17740] vhci_hcd vhci_hcd.0: Device attached [ 1037.205623][ T9496] usb 1-1: device descriptor read/64, error -71 [ 1037.272479][T17741] wlan0 speed is unknown, defaulting to 1000 [ 1037.275902][ T9560] vhci_hcd: vhci_device speed not set [ 1037.298764][T17741] lo speed is unknown, defaulting to 1000 [ 1037.307714][T17747] vhci_hcd: connection closed [ 1037.307895][T17742] vhci_hcd: connection closed [ 1037.356018][ T9008] vhci_hcd: stop threads [ 1037.748708][ T9560] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 1037.761026][T17743] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1037.770804][ T9008] vhci_hcd: release socket [ 1037.778355][ T9008] vhci_hcd: disconnect device [ 1037.783119][ T9008] vhci_hcd: stop threads [ 1037.789742][ T9008] vhci_hcd: release socket [ 1037.793608][T17741] lo speed is unknown, defaulting to 1000 [ 1037.794268][ T9008] vhci_hcd: disconnect device [ 1037.885868][ T9496] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1038.025619][ T9496] usb 1-1: device descriptor read/64, error -71 [ 1038.138997][ T9496] usb usb1-port1: attempt power cycle [ 1038.316556][T17360] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1038.485671][T17360] usb 3-1: Using ep0 maxpacket: 32 [ 1038.495873][ T9496] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1038.505248][T17360] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1038.512812][T17360] usb 3-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 1038.525892][T17360] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.526272][ T9496] usb 1-1: device descriptor read/8, error -71 [ 1038.538827][T17360] usb 3-1: config 0 descriptor?? [ 1039.683478][ T9496] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1039.691398][ T30] audit: type=1400 audit(1753952592.016:1719): avc: denied { mount } for pid=17759 comm="syz.8.2744" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1039.773043][ T30] audit: type=1400 audit(1753952592.026:1720): avc: denied { mounton } for pid=17759 comm="syz.8.2744" path="/109/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 1039.796168][ T9496] usb 1-1: device descriptor read/8, error -71 [ 1039.797640][T17769] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2745'. [ 1039.811861][T17769] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2745'. [ 1039.906451][ T9496] usb usb1-port1: unable to enumerate USB device [ 1040.174894][T17360] chicony 0003:04F2:1421.005C: hidraw0: USB HID v1.01 Device [HID 04f2:1421] on usb-dummy_hcd.2-1/input0 [ 1040.634753][ T30] audit: type=1400 audit(1753952592.026:1721): avc: denied { mount } for pid=17759 comm="syz.8.2744" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1040.658213][ T30] audit: type=1400 audit(1753952592.236:1722): avc: denied { map } for pid=17759 comm="syz.8.2744" path="/109/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 1040.745814][T17776] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2746'. [ 1040.838672][ T5903] usb 3-1: USB disconnect, device number 41 [ 1040.919757][ T30] audit: type=1400 audit(1753952594.156:1723): avc: denied { unmount } for pid=14890 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1041.014609][ T30] audit: type=1400 audit(1753952594.246:1724): avc: denied { name_bind } for pid=17783 comm="syz.8.2747" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1041.225590][ T30] audit: type=1400 audit(1753952594.376:1725): avc: denied { create } for pid=17783 comm="syz.8.2747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1041.245863][ T30] audit: type=1400 audit(1753952594.396:1726): avc: denied { write } for pid=17783 comm="syz.8.2747" path="socket:[55925]" dev="sockfs" ino=55925 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1041.871794][T17798] fuse: Unknown parameter '0xffffffffffffffff0x00000000000000040x00000000000000030000000000000000000000000000000000000000' [ 1042.494682][ T30] audit: type=1400 audit(1753952595.726:1727): avc: denied { create } for pid=17799 comm="syz.6.2752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1042.531339][T17803] IPv6: Can't replace route, no match found [ 1043.048602][T17805] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2750'. [ 1043.058101][T17805] netlink: 'syz.8.2750': attribute type 1 has an invalid length. [ 1043.238474][ T31] INFO: task syz.7.2279:15342 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1043.317586][ T9560] vhci_hcd: vhci_device speed not set [ 1043.323207][ T31] Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 [ 1043.353893][ T30] audit: type=1400 audit(1753952596.536:1728): avc: denied { write } for pid=5806 comm="syz-executor" path="pipe:[5149]" dev="pipefs" ino=5149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1043.377012][ C0] vkms_vblank_simulate: vblank timer overrun [ 1043.388878][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1043.388893][ T31] task:syz.7.2279 state:D stack:28232 pid:15342 tgid:15341 ppid:14898 task_flags:0x400140 flags:0x00004004 [ 1043.411338][ T31] Call Trace: [ 1043.414638][ T31] [ 1043.416500][T17807] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1043.419045][ T31] __schedule+0x118d/0x5df0 [ 1043.434441][ T31] ? __pfx___schedule+0x10/0x10 [ 1043.495661][ T31] ? find_held_lock+0x2b/0x80 [ 1043.524456][ T31] ? schedule+0x2d7/0x3a0 [ 1043.542213][ T31] schedule+0xe7/0x3a0 [ 1043.556056][ T31] super_lock+0x2c0/0x3f0 [ 1043.560425][ T31] ? __pfx_super_lock+0x10/0x10 [ 1043.565280][ T31] ? __pfx_var_wake_function+0x10/0x10 [ 1043.595853][ T31] ? __iterate_supers+0x1b6/0x330 [ 1043.600919][ T31] __iterate_supers+0x1e0/0x330 [ 1043.626250][ T31] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 1043.631852][ T31] ksys_sync+0x89/0x150 [ 1043.645572][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 1043.650378][ T31] ? syscall_trace_enter+0x89/0x240 [ 1043.656663][ T31] __do_sys_sync+0xe/0x20 [ 1043.661007][ T31] do_syscall_64+0xcd/0x4c0 [ 1043.665563][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1043.671455][ T31] RIP: 0033:0x7f7a35b8e9a9 [ 1043.675982][ T31] RSP: 002b:00007f7a36ade038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1043.684396][ T31] RAX: ffffffffffffffda RBX: 00007f7a35db5fa0 RCX: 00007f7a35b8e9a9 [ 1043.692421][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1043.704377][ T31] RBP: 00007f7a35db5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1043.712407][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1043.720472][ T31] R13: 0000000000000000 R14: 00007f7a35db5fa0 R15: 00007ffd7291a5c8 [ 1043.730001][ T31] [ 1043.733155][ T31] [ 1043.733155][ T31] Showing all locks held in the system: [ 1043.740952][ T31] 1 lock held by khungtaskd/31: [ 1043.746275][ T31] #0: ffffffff8e5c3a20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1043.756680][ T31] 2 locks held by getty/5580: [ 1043.761702][ T31] #0: ffff8880366780a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1043.782918][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1043.793152][ T31] 5 locks held by kworker/0:6/5951: [ 1043.798584][ T31] #0: ffff8881436b0d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1043.809467][ T31] #1: ffffc900046cfd10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1043.820737][ T31] #2: ffff88814671a198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 1043.831069][ T31] #3: ffff88814671d518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2981/0x4fe0 [ 1043.841179][ T31] #4: ffff88802982fe68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x29aa/0x4fe0 [ 1043.851090][ T31] 2 locks held by kworker/u8:10/6122: [ 1043.856991][ T31] 4 locks held by kworker/u8:15/9010: [ 1043.862365][ T31] #0: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1043.872314][ T31] #1: ffff8880b8424088 (per_cpu_ptr(&psi_seq, cpu)){-.-.}-{0:0}, at: __schedule+0x186b/0x5df0 [ 1043.882671][ T31] #2: ffffffff8e5c3a20 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x20a0 [ 1043.892330][ T31] #3: ffff8880b843bf60 (&list->lock#12){..-.}-{3:3}, at: process_backlog+0x72f/0x15e0 [ 1043.902001][ T31] 6 locks held by kworker/0:7/9560: [ 1043.907201][ T31] #0: ffff8881436b0d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1043.917989][ T31] #1: ffffc9001aadfd10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1043.929250][ T31] #2: ffff88802a9ac198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 1043.939800][ T31] #3: ffff88802a9af518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2981/0x4fe0 [ 1043.949993][ T31] #4: ffff88802982fe68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x29aa/0x4fe0 [ 1043.959702][ T31] #5: ffffffff8f9340d0 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x1a1/0x1cb0 [ 1043.970363][ T31] 1 lock held by syz.0.2216/14745: [ 1043.975495][ T31] #0: ffff8880269060e0 (&type->s_umount_key#71/1){+.+.}-{4:4}, at: alloc_super+0x235/0xbd0 [ 1043.985685][ T31] 1 lock held by syz-executor/15618: [ 1043.990958][ T31] #0: ffffffff8e5cefb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 1044.000970][ T31] 1 lock held by syz.2.2753/17808: [ 1044.006081][ T31] #0: ffffffff8e5cefb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 1044.085642][ T31] [ 1044.087990][ T31] ============================================= [ 1044.087990][ T31] [ 1044.136337][ T31] NMI backtrace for cpu 1 [ 1044.136357][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(full) [ 1044.136380][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1044.136390][ T31] Call Trace: [ 1044.136396][ T31] [ 1044.136404][ T31] dump_stack_lvl+0x116/0x1f0 [ 1044.136430][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1044.136456][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1044.136485][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1044.136513][ T31] watchdog+0xf0e/0x1260 [ 1044.136544][ T31] ? __pfx_watchdog+0x10/0x10 [ 1044.136561][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1044.136582][ T31] ? __kthread_parkme+0x19e/0x250 [ 1044.136606][ T31] ? __pfx_watchdog+0x10/0x10 [ 1044.136621][ T31] kthread+0x3c2/0x780 [ 1044.136637][ T31] ? __pfx_kthread+0x10/0x10 [ 1044.136653][ T31] ? rcu_is_watching+0x12/0xc0 [ 1044.136672][ T31] ? __pfx_kthread+0x10/0x10 [ 1044.136687][ T31] ret_from_fork+0x5d4/0x6f0 [ 1044.136701][ T31] ? __pfx_kthread+0x10/0x10 [ 1044.136716][ T31] ret_from_fork_asm+0x1a/0x30 [ 1044.136747][ T31] [ 1044.136753][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1044.259382][ C0] NMI backtrace for cpu 0 [ 1044.259399][ C0] CPU: 0 UID: 0 PID: 4494 Comm: kworker/u8:7 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(full) [ 1044.259417][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1044.259425][ C0] Workqueue: bat_events batadv_nc_worker [ 1044.259449][ C0] RIP: 0010:__this_cpu_preempt_check+0x0/0x20 [ 1044.259469][ C0] Code: c6 00 0b 16 8c 48 c7 c7 40 0b 16 8c e9 f9 fe ff ff 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 89 fe 48 c7 c7 80 0b 16 8c e9 cd fe ff ff 66 2e 0f [ 1044.259481][ C0] RSP: 0018:ffffc9000e36faa8 EFLAGS: 00000046 [ 1044.259491][ C0] RAX: ffff888034afa440 RBX: ffffffff8e5c3a20 RCX: 0000000000000001 [ 1044.259500][ C0] RDX: 0000000000000000 RSI: ffffffff8b58669a RDI: ffffffff8df0581b [ 1044.259509][ C0] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1044.259517][ C0] R10: 0000000000000400 R11: 0000000000000001 R12: 0000000000000000 [ 1044.259525][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1044.259532][ C0] FS: 0000000000000000(0000) GS:ffff88812471e000(0000) knlGS:0000000000000000 [ 1044.259546][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1044.259556][ C0] CR2: 00007f5b34a73f98 CR3: 000000000e382000 CR4: 00000000003526f0 [ 1044.259564][ C0] Call Trace: [ 1044.259570][ C0] [ 1044.259575][ C0] lock_acquire+0x140/0x350 [ 1044.259597][ C0] ? batadv_nc_worker+0x895/0x1030 [ 1044.259610][ C0] batadv_nc_worker+0x16a/0x1030 [ 1044.259623][ C0] ? batadv_nc_worker+0x159/0x1030 [ 1044.259637][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1044.259652][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 1044.259667][ C0] ? rcu_is_watching+0x12/0xc0 [ 1044.259684][ C0] process_one_work+0x9cc/0x1b70 [ 1044.259701][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 1044.259713][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1044.259729][ C0] ? assign_work+0x1a0/0x250 [ 1044.259742][ C0] worker_thread+0x6c8/0xf10 [ 1044.259760][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1044.259773][ C0] kthread+0x3c2/0x780 [ 1044.259785][ C0] ? __pfx_kthread+0x10/0x10 [ 1044.259797][ C0] ? rcu_is_watching+0x12/0xc0 [ 1044.259812][ C0] ? __pfx_kthread+0x10/0x10 [ 1044.259824][ C0] ret_from_fork+0x5d4/0x6f0 [ 1044.259836][ C0] ? __pfx_kthread+0x10/0x10 [ 1044.259849][ C0] ret_from_fork_asm+0x1a/0x30 [ 1044.259869][ C0] [ 1044.605675][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1044.612636][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(full) [ 1044.624095][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1044.634150][ T31] Call Trace: [ 1044.637408][ T31] [ 1044.640314][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1044.644877][ T31] panic+0x71c/0x800 [ 1044.648752][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 1044.654643][ T31] ? __pfx_panic+0x10/0x10 [ 1044.659046][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1044.664406][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1044.670370][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1044.675728][ T31] ? watchdog+0xd78/0x1260 [ 1044.680125][ T31] ? watchdog+0xd6b/0x1260 [ 1044.684556][ T31] watchdog+0xd89/0x1260 [ 1044.688810][ T31] ? __pfx_watchdog+0x10/0x10 [ 1044.693498][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1044.698690][ T31] ? __kthread_parkme+0x19e/0x250 [ 1044.703699][ T31] ? __pfx_watchdog+0x10/0x10 [ 1044.708354][ T31] kthread+0x3c2/0x780 [ 1044.712402][ T31] ? __pfx_kthread+0x10/0x10 [ 1044.716971][ T31] ? rcu_is_watching+0x12/0xc0 [ 1044.721722][ T31] ? __pfx_kthread+0x10/0x10 [ 1044.726312][ T31] ret_from_fork+0x5d4/0x6f0 [ 1044.730905][ T31] ? __pfx_kthread+0x10/0x10 [ 1044.735488][ T31] ret_from_fork_asm+0x1a/0x30 [ 1044.740256][ T31] [ 1044.743455][ T31] Kernel Offset: disabled [ 1044.747772][ T31] Rebooting in 86400 seconds..