last executing test programs: 2m30.102960181s ago: executing program 0 (id=15): socket$rds(0x15, 0x5, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0xfd, 0xc, 0x5, 0x77, @time={0x3, 0x6}, {0x6, 0x8}, {0x6, 0x3}, @queue={0x1, {0x4, 0x3}}}, {0x6, 0x5, 0xd, 0x6, @tick=0x9, {0x7, 0x7f}, {0x3, 0x7}, @control={0x7f, 0x1, 0x2}}], 0x38) prctl$PR_SET_IO_FLUSHER(0x43, 0x2000000000000000) inotify_init() r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket(0x10, 0x2, 0x8) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000a93000/0x4000)=nil) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x10, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000040c0)={0x2020}, 0x2020) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 2m27.735800815s ago: executing program 0 (id=23): setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x1000, r1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socketpair$unix(0x1, 0x2, 0x0, 0x0) pipe(0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x41, 0x1ff) fcntl$setlease(r3, 0x400, 0x1) truncate(&(0x7f00000001c0)='./file0\x00', 0x7) r4 = socket$l2tp6(0xa, 0x2, 0x73) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r5, 0x80045017, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r5, 0x8010500c, &(0x7f0000000200)) sendmmsg$inet6(r4, &(0x7f0000002880)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x8, @local, 0x64}, 0x1c, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYRES8=r4], 0x48}}], 0x1, 0x8000) 2m26.291912182s ago: executing program 4 (id=24): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r2, 0x8955, 0x0) r3 = accept4$x25(r2, 0x0, &(0x7f0000000040), 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r3, 0x80306e85, &(0x7f0000000100)) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d000800250000000005000000", 0x29}], 0x1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xc) r5 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f000054b000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f0000000180)) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@bridge_dellink={0x20, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r9, 0xa006}}, 0x20}}, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0xa, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m25.690371422s ago: executing program 0 (id=27): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="120100000cb768405e0483020b99010203010902"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x5c, r2, 0x5eae78d9c54e9d3f, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x40, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "2eb01bfa6e26820295b92e2192776b33"}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x51}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x7ffc, 0xffff}, {0x7ef, 0x8343}]}) 2m24.971987578s ago: executing program 4 (id=30): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x8550, 0x80, 0x3, 0x11}, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) prlimit64(0x0, 0xd, &(0x7f0000000140)={0xa, 0x400000000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000f47af6e3000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000006609010000000000060000000b000000180100002020752500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000900000056000000060000002c93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) r8 = socket$xdp(0x2c, 0x3, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0xbe9bac6d2d0f4e0b) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r6) sendmsg$TIPC_CMD_SET_LINK_PRI(r9, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="6800000010fd9de1da6498dc4daf2e0adf5fef74bd6d2f8b57f33e50e4e692e81d648bea7db722c16948c63d33bbc88d3bf342fe546efa", @ANYRES16=r10, @ANYBLOB="04002dbd7000fcdbdf25010000000000000008410000004c001800000401696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x440d8}, 0x1be0213521502173) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r8, &(0x7f00000001c0)={0x2c, 0x8, r12}, 0x10) socket$pptp(0x18, 0x1, 0x2) syz_io_uring_submit(0x0, r1, r2, &(0x7f00000001c0)=@IORING_OP_STATX={0x15, 0x27, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x100, 0x1000, 0x1}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 2m23.837246763s ago: executing program 1 (id=34): setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@private=0xa010102, @empty, @broadcast}, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='veno', 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) syz_open_procfs(0x0, &(0x7f0000000480)='net/fib_triestat\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) fsopen(&(0x7f00000002c0)='jffs2\x00', 0x0) listns(&(0x7f0000000000)={0x20, 0x0, 0xffffffffffffffff, 0x4000000}, 0x0, 0xf4240, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2m23.808363687s ago: executing program 0 (id=35): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x265, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0xb, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x8009, 0xa, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x10, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0xfffffffffffffcad, &(0x7f0000000240)={&(0x7f0000000080)=@newsa={0x138, 0x18, 0x1, 0x70bd27, 0x100, {{@in6=@empty, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x60, 0x73}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, {0x0, 0x4, 0x6, 0x800000ffff, 0x8251c, 0x2, 0x9}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x5, 0x3dca}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@XFRMA_SET_MARK={0x0, 0x1d, 0x7}]}, 0x138}, 0x1, 0x0, 0x0, 0xc841}, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r5, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r6, 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r7, 0x2) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000140)=0x0) lseek(r2, 0x3, 0x1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r9 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x21041, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000000)=0xe) ioctl$TIOCSSOFTCAR(r9, 0x541a, &(0x7f0000000080)=0x3) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004411}, 0x4040804) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) 2m22.826824123s ago: executing program 1 (id=37): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x103f41, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x9, 0xfff3}, {}, {0x10, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r4 = fsopen(&(0x7f0000000240)='exfat\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000040)='utf8', &(0x7f0000000080)="a6", 0x1) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000180)) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) r6 = signalfd4(r5, &(0x7f0000000000)={[0x7]}, 0x8, 0x80800) syz_clone3(&(0x7f0000001340)={0x40000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x25}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/115, &(0x7f0000001300)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r6}}, 0x58) r8 = syz_open_dev$sndctrl(&(0x7f0000002b80), 0x1, 0x8000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r8, 0x80045500, &(0x7f0000000000)) ptrace$setopts(0x4206, r7, 0x7, 0x10) 2m22.38633566s ago: executing program 1 (id=38): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) (async) r1 = socket$packet(0x11, 0x3, 0x300) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000180), &(0x7f0000000140), 0x2, 0x1) (async) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) syz_emit_ethernet(0x1f, &(0x7f0000000000)=ANY=[], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x2, &(0x7f0000000100)={0x7, 0x14}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) (async, rerun: 64) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) (async, rerun: 32) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (rerun: 32) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x7000000) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0xfffffffa, 0x0, 0x20000, 0x1}) (async) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x5e) (async) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) mlockall(0x2) (async) r5 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmat(r5, &(0x7f0000ffd000/0x1000)=nil, 0x7000) (async) shmctl$SHM_UNLOCK(r5, 0xc) (async) unshare(0x2c020400) r6 = semget(0x1, 0x1, 0x567) semop(r6, &(0x7f0000000000)=[{0x3, 0xbbdd, 0x1000}], 0x1) (async) syz_usb_connect$uac3(0x0, 0xa0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) 2m21.743872748s ago: executing program 1 (id=39): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd701004000000050000000800090002000000"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000180)=0x2cf7) write$cgroup_devices(r5, &(0x7f0000000800)=ANY=[@ANYRES8=r5, @ANYRESHEX, @ANYBLOB="8a25a6b0ad"], 0xffdd) r6 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@getchain={0x4c, 0x66, 0x8, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0x0, 0xfff2}, {0x4, 0x6}}, [{0x8, 0xb, 0xe}, {0x8, 0xb, 0xfff}, {0xfffffffffffffe02, 0xb, 0x5}, {0x8, 0xb, 0x100}, {0x8, 0xb, 0xe}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20045080}, 0x890) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e21}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000340)='a', 0x1}], 0x1}, 0x4000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000380)={'veth0_macvtap\x00', 0x1000}) r10 = socket$unix(0x1, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) 2m20.867878018s ago: executing program 4 (id=41): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001740), r1) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xf) r3 = eventfd2(0x80000001, 0x800) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r3}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r7, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000180)={0xffffffffffffff36, 0x2, r7, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r5, 0x0, &(0x7f0000002000/0x3000)=nil, 0x3000, 0x7ffffffe}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000240)=ANY=[@ANYRES16, @ANYRES64=r8, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r9 = fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r9, 0x7, 0x0, 0x0, 0x0) 2m18.690752638s ago: executing program 0 (id=45): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x20) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file1\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x4004010) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCARDURB(r5, 0x550b, 0x0) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0x2]}, &(0x7f0000000180), 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x80}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(0x0, &(0x7f0000c7f000)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000590ffe)='v4') r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r7, 0x402, 0x40000029) r8 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x6, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r8, r8, &(0x7f0000000080), 0x7f03) renameat(r7, &(0x7f0000000040)='./file0\x00', r8, &(0x7f0000000080)='./file0\x00') setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x7, 0x4, 0x410, 0x0, 0x110, 0x0, 0x328, 0x328, 0x328, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast1, @remote, 0x8}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0xb, 0x5, {@mac, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x2822, 0x7, 0x3ff, 0x6, 0x3, 0xd, 'dvmrp1\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x0, 0x1a0}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="7a2f95d49846", @empty, @empty, @local, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x40, 'syz0\x00', {0x4a49aae5}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) 2m18.403709951s ago: executing program 1 (id=46): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x24}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@ipv6_getroute={0x118, 0x1a, 0x20, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x3, 0xfd, 0x4, 0xfc, 0x5, 0x1000}, [@RTA_MARK={0x8}, @RTA_EXPIRES={0x8, 0x17, 0x5}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @ILA_ATTR_CSUM_MODE={0x5, 0x7, 0x2}}, @RTA_METRICS={0xd8, 0x8, 0x0, 0x1, "08762fe677b953b4a8f2e07c4e11a50d8b76dfd7e37626c5842c3021936c10ea30b96bff605f81e00362054bfd0cc79d1634f87b40c9c226e049d5f824f0ddffb22251536e2b2c00e391b3c287730384087ffe6f3c0b4f96d9a91676e734ab52263f3bcd31b803a39d627f3036fe1107ce969a4b57559d8a6a9ab4055ee8c862cb9805fda09f9936a3f042e649f7d4b0e06fff6fe7a44ced656a695d32ef4a05c5f8ea6550e574eb90934c0f9115c3027764676a6b0f9355ffcaa43f9843b3ff824371b971f4b8906b0742114ad7c60e36d12a8e"}, @RTA_PREF={0x5, 0x14, 0x10}]}, 0x118}}, 0x40008) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x4004014) (async) r2 = socket$inet6(0xa, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) (async) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async) r8 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r8, 0xffff) (async) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0x14, 0x0, 0x0) fcntl$addseals(r8, 0x409, 0x7) (async) r10 = ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000000)={r8, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r10, 0x40086200, &(0x7f0000000080)=0x1) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), 0x0}, 0x20) (async) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) (async) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000040)={@remote}, 0x14) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x4c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x58, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}}, 0xec}}, 0x0) 2m17.249551548s ago: executing program 4 (id=47): sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b707000000ff00004870000000000000400000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e345c65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e"], 0x0}, 0x94) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) unshare(0x20000400) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x8) splice(r3, &(0x7f0000000040)=0x10, r4, 0x0, 0x807, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000040)) 2m17.077369429s ago: executing program 0 (id=48): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d507df08c410448200dc01020301090212000100000000"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xd, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0xd}, @jmp={0x5, 0x0, 0xd, 0xb, 0x4, 0x50, 0xffffffffffffffff}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbf}, @map_fd={0x18, 0x9}]}, &(0x7f00000003c0)='GPL\x00', 0x4, 0x20, &(0x7f0000000400)=""/32, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x3, 0x1, 0x4, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0xff3}, 0x94) r5 = socket(0x28, 0x1, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f00000002c0)=0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = syz_open_dev$video(&(0x7f00000002c0), 0x3, 0x1c0201) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000001c0)={0xa, @pix={0x0, 0x6, 0x33565348}}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@delchain={0x24, 0x65, 0x21, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x2, 0x10}, {0xe}, {0xb, 0x3}}}, 0x24}}, 0x8000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r4, r6, 0x25, 0x0, @void}, 0x10) close(r3) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) 2m16.450256447s ago: executing program 4 (id=50): r0 = socket(0x2000000000000021, 0x2, 0xb51d) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21}}, 0x24) sendmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x128, 0xe000}, 0x5}], 0x1, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r2) sendmsg$NBD_CMD_CONNECT(r2, 0x0, 0x4000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$inet(0x2, 0x800, 0xffffffff) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='xfrm0\x00', 0x10) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21}}, 0x24) sendmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="46c43d7e9c121438087f84151800000000000000100100"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r6) sendmsg$NBD_CMD_CONNECT(r6, 0x0, 0x4000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2m16.444633176s ago: executing program 1 (id=51): socket(0x3, 0x803, 0x7) r0 = syz_open_dev$dri(0x0, 0x1, 0x400) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigpending(0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) munmap(&(0x7f0000294000/0x1000)=nil, 0x1000) syz_clone(0x4454c100, 0x0, 0xffffffa4, 0x0, 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, r1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x300, 0x6, &(0x7f00000003c0)=[r2, r5, r4, 0x0, r3, r5], 0x0, &(0x7f0000000300)=[r4, r5], 0x0, 0x0, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) socket(0xa, 0xa, 0x8003a) socket$igmp6(0xa, 0x3, 0x2) userfaultfd(0x801) r6 = syz_io_uring_setup(0x6439, 0x0, 0x0, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(0x0, r7, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x5}) io_uring_enter(r6, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) syz_clone(0xc4843511, 0x0, 0xfecd, 0x0, 0x0, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r9 = fsopen(0x0, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000100)=0x1, 0x4) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) fsmount(r9, 0x1, 0x0) write$sysctl(r8, &(0x7f00000000c0)='2\x00', 0x2) 2m15.855569088s ago: executing program 4 (id=53): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="2000000037000100fcff070004000000010000000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x0, 0x2) r1 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000600)={0x1, 0x0, [{0x591384acc3e00258, 0x6c, &(0x7f0000000400)=""/108}]}) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000001c0)=0x304008000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4080, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000003c0)={0x1, r3}) ioctl$USBDEVFS_BULK(r3, 0xc0185502, &(0x7f0000000500)={{{0x4}}, 0xed, 0x2, &(0x7f0000000400)="a6598837779f45f6717f028aa8a0c1475216c1008ca73d9c0045ad23ad4e86b6fbe895a921ba0163fadde8048b23359941f2a1b4aefa8a754d920bc7afed3966dc1f812af41f4ad4501839ea711249ef70ae3ccc5d9a6f7d0a5ad810a4bb1847b97a8f83aa1a9b873faa67e005768faaa20c0e2da41ad3b20f6e023ab1482f972bffb7b7a2884918c9b854f754112e483b2a82a904291a0f7bbce5eb69732324132534ee544b4e2472e2482940b2196e6aa948c31e7c6e18edf17b043714c429d430655fc5f4d886e65b9f0887018445319dbe9b1c5f709d7c0969389f5e7dd6a499330ac6f06aff1249b98e5d"}) syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000430007012abd7000fcdbdf25027c000018000000140004000000000000000000000000000000000009"], 0x38}}, 0x2004c000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000200), 0x1000, &(0x7f0000000540)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT, @ANYRESDEC=r2, @ANYBLOB="db41a3539d3af7ec106810b3cb0daa2f4cf1215a73b7f2c1a2fba73f0a4df896aa3bcda6c7810b5d4aff1f2df81f308bf1cdfbedae80756089f4d6964596b53cc27da0bc18aa4081db17cfdee2a01d23c96528fb85498a11851f", @ANYRES64=r2]) read$FUSE(r5, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x206f) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x8905add85be3c46c, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) readv(r7, &(0x7f0000000c00)=[{&(0x7f0000000ac0)=""/134, 0x86}], 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000013000/0x2000)=nil, &(0x7f0000186000/0x3000)=nil, 0x2000, 0x2}) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io$uac1(r8, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m14.001456113s ago: executing program 3 (id=54): r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) socket(0x1e, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10122, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) madvise(&(0x7f0000453000/0x1000)=nil, 0x1000, 0x12) madvise(&(0x7f000015c000/0x3000)=nil, 0x3000, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_setup(0x3450, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40845}, 0x8404) r3 = syz_open_dev$sndctrl(0x0, 0xba, 0x28c102) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000500)={0x9, 0x80000001, 0xbd, 0x2, '\x00', '\x00', '\x00', 0x9, 0x80000001, 0x7, 0x100, "65a2506851b13540ecd55d6dcb0dd9c6"}) madvise(&(0x7f0000bc0000/0x3000)=nil, 0x3000, 0xc) keyctl$session_to_parent(0x12) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) syz_usb_connect(0x5, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read$FUSE(r4, 0x0, 0x39) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@fd={0x2, 0x3, 0x4, 0x80, 0x1, {}, {0x6, 0x0, 0xf, 0x9, 0xfc, 0x40, "7aa99ccb"}, 0x9, 0x4, {}, 0xd2a3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) 2m1.621199305s ago: executing program 32 (id=48): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d507df08c410448200dc01020301090212000100000000"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xd, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0xd}, @jmp={0x5, 0x0, 0xd, 0xb, 0x4, 0x50, 0xffffffffffffffff}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbf}, @map_fd={0x18, 0x9}]}, &(0x7f00000003c0)='GPL\x00', 0x4, 0x20, &(0x7f0000000400)=""/32, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x3, 0x1, 0x4, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0xff3}, 0x94) r5 = socket(0x28, 0x1, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f00000002c0)=0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = syz_open_dev$video(&(0x7f00000002c0), 0x3, 0x1c0201) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000001c0)={0xa, @pix={0x0, 0x6, 0x33565348}}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@delchain={0x24, 0x65, 0x21, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x2, 0x10}, {0xe}, {0xb, 0x3}}}, 0x24}}, 0x8000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r4, r6, 0x25, 0x0, @void}, 0x10) close(r3) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) 2m1.480777902s ago: executing program 3 (id=57): socket(0x2a, 0x2, 0x200) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20008001) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x48844) add_key$user(0x0, &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000400)="d7172596ae91", 0x6, 0xfffffffffffffff8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0xe803, 0x7}, {0x1, 0xb}, {0xffff, 0x4}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240448a0}, 0x0) 1m58.840230898s ago: executing program 33 (id=51): socket(0x3, 0x803, 0x7) r0 = syz_open_dev$dri(0x0, 0x1, 0x400) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigpending(0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) munmap(&(0x7f0000294000/0x1000)=nil, 0x1000) syz_clone(0x4454c100, 0x0, 0xffffffa4, 0x0, 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, r1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x300, 0x6, &(0x7f00000003c0)=[r2, r5, r4, 0x0, r3, r5], 0x0, &(0x7f0000000300)=[r4, r5], 0x0, 0x0, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) socket(0xa, 0xa, 0x8003a) socket$igmp6(0xa, 0x3, 0x2) userfaultfd(0x801) r6 = syz_io_uring_setup(0x6439, 0x0, 0x0, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(0x0, r7, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x5}) io_uring_enter(r6, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) syz_clone(0xc4843511, 0x0, 0xfecd, 0x0, 0x0, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r9 = fsopen(0x0, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000100)=0x1, 0x4) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) fsmount(r9, 0x1, 0x0) write$sysctl(r8, &(0x7f00000000c0)='2\x00', 0x2) 1m58.676937548s ago: executing program 34 (id=53): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="2000000037000100fcff070004000000010000000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x0, 0x2) r1 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000600)={0x1, 0x0, [{0x591384acc3e00258, 0x6c, &(0x7f0000000400)=""/108}]}) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000001c0)=0x304008000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4080, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000003c0)={0x1, r3}) ioctl$USBDEVFS_BULK(r3, 0xc0185502, &(0x7f0000000500)={{{0x4}}, 0xed, 0x2, &(0x7f0000000400)="a6598837779f45f6717f028aa8a0c1475216c1008ca73d9c0045ad23ad4e86b6fbe895a921ba0163fadde8048b23359941f2a1b4aefa8a754d920bc7afed3966dc1f812af41f4ad4501839ea711249ef70ae3ccc5d9a6f7d0a5ad810a4bb1847b97a8f83aa1a9b873faa67e005768faaa20c0e2da41ad3b20f6e023ab1482f972bffb7b7a2884918c9b854f754112e483b2a82a904291a0f7bbce5eb69732324132534ee544b4e2472e2482940b2196e6aa948c31e7c6e18edf17b043714c429d430655fc5f4d886e65b9f0887018445319dbe9b1c5f709d7c0969389f5e7dd6a499330ac6f06aff1249b98e5d"}) syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000430007012abd7000fcdbdf25027c000018000000140004000000000000000000000000000000000009"], 0x38}}, 0x2004c000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000200), 0x1000, &(0x7f0000000540)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT, @ANYRESDEC=r2, @ANYBLOB="db41a3539d3af7ec106810b3cb0daa2f4cf1215a73b7f2c1a2fba73f0a4df896aa3bcda6c7810b5d4aff1f2df81f308bf1cdfbedae80756089f4d6964596b53cc27da0bc18aa4081db17cfdee2a01d23c96528fb85498a11851f", @ANYRES64=r2]) read$FUSE(r5, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x206f) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x8905add85be3c46c, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) readv(r7, &(0x7f0000000c00)=[{&(0x7f0000000ac0)=""/134, 0x86}], 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000013000/0x2000)=nil, &(0x7f0000186000/0x3000)=nil, 0x2000, 0x2}) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io$uac1(r8, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m48.333429913s ago: executing program 3 (id=62): socket$nl_route(0x10, 0x3, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(r0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @mcast2}, {0xa, 0x0, 0x5, @mcast1, 0x1}, 0xffffffffffffffff, 0x400000}}, 0x48) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_io_uring_setup(0x4b43, &(0x7f0000000080)={0x0, 0xffff003f, 0x1000, 0x6, 0x145}, &(0x7f0000000280), &(0x7f0000000140), &(0x7f0000000180)) 1m47.436846125s ago: executing program 7 (id=59): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) mkdir(0x0, 0x21) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) r3 = syz_open_dev$radio(&(0x7f0000000400), 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1m47.075947826s ago: executing program 3 (id=63): syz_open_dev$media(&(0x7f00000000c0), 0x50d, 0x48000) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, 0x0, 0x0) listen(r3, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(0xffffffffffffffff, r4, 0x53, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r5) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r5, 0x81, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000800)={'#! ', './file0'}, 0xb) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000240)={0x80000000, 0x0, 0x0}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20,serpent)\x00'}, 0x4e) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xf7, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 1m43.893434873s ago: executing program 6 (id=58): r0 = socket$netlink(0x10, 0x3, 0x1e) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_KVMCLOCK_CTRL(r6, 0xaead) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x5c, r1, 0x2, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x805) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000002000010027bd7000000000000a000040000000000000000014000300687372300000000000000000000000001400110076"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) setgroups(0xefff, 0x0) 1m43.206611398s ago: executing program 3 (id=65): syz_emit_ethernet(0x3e, &(0x7f00000016c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x8, 0x3a, 0x0, @dev, @local, {[], @echo_request}}}}}, 0x0) syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='fd', @ANYRESHEX]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89", 0xbf}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc0051"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef", 0x5a}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e14575562668985", 0x15}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x18, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xeb7f}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x1}, @ringbuf_query, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x7}, @map_fd={0x18, 0x9}, @call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f0000000080)='GPL\x00', 0x7fff, 0x0, 0x0, 0x41100, 0x3}, 0x94) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f00000002c0)='team_slave_1\x00') setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r4 = socket$inet_smc(0x2b, 0x1, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000a40)=""/108, 0x6c}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x4008, 0x3, 0x218, 0x0, 0x32, 0x148, 0x0, 0x148, 0x180, 0x240, 0x240, 0x180, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0x8010100, @rand_addr=0x64010102, 0xff, 0xff0000ff, 'syz_tun\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x2e, 0x2, 0x14}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@addrtype={{0x30}, {0x1040, 0x224, 0x0, 0x1}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x0, 0x334}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x2, 0x94}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0x0, 'vlan0\x00', 'caif0\x00', {0xff}, {}, 0x2, 0x3, 0x19}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x2000, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000000000000000000000000001fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d533000000e000000100000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000000000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003509fe8fd57fd44aa5074c50bc700e530c001c00", @ANYRES32=0x0, @ANYBLOB="06"], 0x158}}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m43.05357858s ago: executing program 6 (id=66): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x18, 0x12}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 1m42.778885412s ago: executing program 5 (id=67): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000b40), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0xffffffff, @empty, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r0, 0x11a, 0x3, 0x0, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="350a00000000005d11945600000008e3ff00000000000000"], 0x0}, 0x94) setfsuid(0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000002000000bfa30000000000007603000028feffff7a0af0fff8ffffff61a4f0ff000000005d040000000000007f000000000000002704000001ed0a0025000000170000003e040000000000007b0300fe000000002d03000000000000c600f9ffffff00009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef7054803d0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d85827513acd02b5a655a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f08050ec6850600000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf8707f0d5217e9bb5a05d9e22ce67f1231bd236ed200073826593c4e1a0f50a74bb482e486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e9978931485747292c6fe6e188750cf4f87cce2aa7d67c6133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc1caa80e64461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5fea5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87dd4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f6260a483632a2ab447f88dd6efec73a0271a19ca3aa860aa4dcaeebe3d53040b853a7c02a5fcc08b3a572969bbe91c921ac1476027772c87d172ab29967e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f522df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bdaa075fdd88d22230592a790000000000000000000000003527dfd01b47000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7c54d5cb9076b81b7741ec03877afb520400000000000000c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399fa5ee0b41e14a6fe6894e901a52a8593fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014fa841061e63d40f4e536314beda5738fee012365f963b2a85e7d8075c333475b9f0284405e30700000041285fbe0bdd37220e31d4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe8c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df96d49f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21da4fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696ebc2ab3f4b642f36c9006c0067e24a64aa8c53df824a4ee271e35ed90000800847683c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68ad9fa2b2528798df1c36fc438d9c98f168490b41e158bb2e2d8ed19d44b9cce67c9c522b5136be09ed1b97ea3d5b317508df23e92c56fc2eb74d27d3861d91745b8fb9f6cc20e9f8b174000c62c4a2b212332a073fc5d0be7347e41454cb27e081c43e92ae7f9f046600db85d945a4666b588629ce0809d5c8506308688db21ec04d365497bf900600"/2769], &(0x7f00000001c0)='GPL\x00'}, 0x94) 1m42.657495718s ago: executing program 7 (id=68): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0xffffffffffffffd1, 0x40012052, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x3, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = dup(r0) write$UHID_INPUT(r5, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) 1m41.234818898s ago: executing program 6 (id=70): socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) syz_open_dev$video(&(0x7f0000000000), 0x7fff, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200), 0x40440, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x30040, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x1, 0x222}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x8, 0x1000000, 0x23e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x10448, 0x0, 0x129, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8001f6e, 0x4000, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x100000, 0x200, 0x1, 0x1, 0x0, r5}}], 0x1, 0x0, 0x0) 1m40.995724512s ago: executing program 5 (id=71): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0xfffffffffffffdaf) listen(r3, 0xfffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000200)=0x80008) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r5 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x2, 0xc, 0xa4, 0x0, 0x4, 0x0, 0x9, 0x8, 0x0, 0x24, 0x2, 0x20}, 0xe) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f00000006c0)={0x0, {{0xa, 0x3, 0xffffffff, @mcast1, 0xfffffffe}}, {{0xa, 0x4e21, 0x3ff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1007}}}, 0x108) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000340)={[0x0, 0x1ff, 0x7, 0x7, 0x4, 0x0, 0x81, 0x5, 0xfffffffffffff2d7, 0x37, 0xfffffffffffffffc, 0x2, 0x564, 0x3, 0x9, 0x9], 0x4000, 0x4200}) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60122d9200103afffe8000000000000000000000000000bbff020000000000000000000000000001880090780000000000000000000000007fa16e6cfc486fab16701eeb55d4dd5952c7062a4f15d550869a54307a4fbae327cd7104eccbf7a04f65b3f7cb5d9ef13c2ed6f3c85e103fce8837c1b1b08f86a03a046b5a4c9486551e3c47c8177917b68ae7122b96cce319d7b1616658108a4b96ff1dbdf34357bfac1e325976f9be7df47a0cd6abf85fdcb420b03407a838aa4432e0c15ebc34eb7ad4927b32ebb8125cfe9710a5179b3755a87d10be71a1201451b53a1cf105cc372a038d0bd777c7fba9f0e881a932ea7f752b3293088d7c1eb6c427d8f6a0cb632ee3e6194d838c65c0cf799ffd7ac74d4066aa4d4a01"], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r2, 0x0, 0x10000008ebc, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) syz_open_dev$mouse(&(0x7f0000000000), 0x1, 0xc0040) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x1410, 0x800, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x2400c000}, 0x4050) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) readlinkat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', &(0x7f0000002940)=""/4117, 0x1015) splice(r1, 0x0, r8, 0x0, 0x25a5, 0x0) 1m40.404327856s ago: executing program 5 (id=72): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = userfaultfd(0x80001) io_setup(0x8, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(0x0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) pidfd_send_signal(r2, 0x3d, &(0x7f0000000180)={0x35, 0x7, 0x829}, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r6}, 0x20) sendmmsg$inet6(r6, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}, 0x18020000}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) socket$rds(0x15, 0x5, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x300, 0x6040000}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0xffffffffffffffc5, 0x2, r8, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000600)={0x28, 0x0, r9, 0x0, 0x0}) 1m39.571734163s ago: executing program 3 (id=73): sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24008851}, 0x40040) socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8032, 0xffffffffffffffff, 0x28f41000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x3, 0x10001, 0x10000007}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000009667be2661b55d5ceb26cc90a6ceabe3e27790f1102c50a1405c0b2bc37a38d1b07485167e82f17c36cdbae3f51ad899625332d4a1ad32f30be8c3be6de8d49a04f438a82dee9f92963f38bb2fe6fd46e99f3efbeb0054dcf0c14bbe842866c23a308a66751d705edd62ab306c3c75c2d2ab0ab8ac", @ANYRES16=r0, @ANYBLOB="01002dbd7000fbdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x5dfb, 0x2a000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) io_submit(0x0, 0x0, &(0x7f0000001300)) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x3938700}}, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0xd, 0x85, 0xffffffff, 0x2}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000740)={0x30, 0x5, 0x0, {0x0, 0x2}}, 0x30) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x13, r2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) r4 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x247, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0x40, 0x7, "", [{{0x9, 0x4, 0x0, 0xa0, 0x2, 0x3, 0x1, 0x1, 0xf8, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0xfb5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x5, 0xd8}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x7, 0x9, 0xd0}}]}}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0x8, 0x0, 0x81, 0x0, 0x6}, 0x10, &(0x7f0000000200)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0xff, 0x6, 0xf801, 0x5}]}, 0x3, [{0x29, &(0x7f0000000240)=@string={0x29, 0x3, "a9ba5779cea582afff803d5532ab186063faa2c05eabfb1f854ea981b0964f03b4cacea33264b4"}}, {0xe7, &(0x7f0000000780)=@string={0xe7, 0x3, "973e4032e48905e1d92d2a02b162635ffbf7e962e26b03cd3a7440e285c097c86ef5d5c11f4eb72028a1a876b2011a0baa38ba5c9dd82aefa886ea1fc830d7bc62a5e62037e4b4f2eed7224899bc37cd363181b10cc6d78ca80e2fc0a9ce023af3e8e12a5d80fc16c180cf5b484d4ad365e48a5cd84aee780bca4cac2e3530215e231898ec8e1fa8d6d376157bc8a4d226213f036f33f2c0662c223c676a419c3be9dfc24b1425d066c16770b2e6a65540037bf82778640719613b0e8157685a16d145d234441dd0a6af3ecf06419597c3ccb7ada1f7ce5c72c805d59c2fb3611b142867a9"}}, {0x2, &(0x7f0000000880)=@string={0x2}}]}) syz_usb_control_io$hid(r4, &(0x7f0000000b80)={0x24, &(0x7f0000000940)={0x0, 0xe, 0xd3, {0xd3, 0x5, "f1346b130c03658ac07b36125ec74b3f102f70ad030e3a203e5573974c5bad67099ab7ec250c42b0762f3c125b1023701eb17284d1a450968178c1bb9c1549e8bd588cdab4b5e093c4af5ce25f9ec75edc64fb571a504a7f0080d3fa7f35427469bf4c9de3f063d4efe0a44d965a6685f64d96c756b67a4bcbca00659f233ed44ec4ae9bf0470270dada055999a374823be17a4be1cba7a4dd2b9316a9a7f34752d683c18bc2bea079ce12bae70779ce590673ada8cc2eb341bd3c1acec424f073e60a3fa9a6ae5c26d46215a58f610fea"}}, &(0x7f0000000a40)={0x0, 0x3, 0x82, @string={0x82, 0x3, "04859ad4f750c54109d1f4de2241a365478f16745905ddd2dc53d51acdd3618deb858581aec1e21290c35a422c87d1a809a105cec4eaa3f572619ef4e936e1b035ca3ed246a335f5058c71f5b8768edc3b6522efb8d6f7485297c9eb06bab95f818392fbf0d4dbca06f9323eff29a5f945f90d3479dcc7474e03445b31b7c95c"}}, &(0x7f0000000b00)={0x0, 0x22, 0xa, {[@global=@item_4={0x3, 0x1, 0x0, "ad7f1348"}, @main=@item_4={0x3, 0x0, 0x9, "c3267585"}]}}, &(0x7f0000000b40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0xc, 0x1, {0x22, 0x554}}}}, &(0x7f0000000d00)={0x2c, &(0x7f0000000bc0)={0x40, 0xa, 0x1b, "270f9c13fc124e1d080f357bf7c78c1b286f99f3b79e1eb958f438"}, &(0x7f0000000c00)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000c40)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000c80)={0x20, 0x1, 0x32, "38535723f15891a51b997d0f8d9523f3a3e36f0fc89fe89a5f6e47c307e96aa72ccb70bc61a7e11f15f1cdc1fc4354a1168c"}, &(0x7f0000000cc0)={0x20, 0x3, 0x1, 0x42}}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000080000000", @ANYRES32=0x1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000e00)=ANY=[@ANYBLOB="180000000000009f8c52736e2a450000000000ffffffff180800002020780500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000040000850000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_open_dev$usbfs(&(0x7f0000000000), 0x5, 0x0) 1m39.309663494s ago: executing program 5 (id=74): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ptrace(0x10, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) socket$nl_route(0x10, 0x3, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x200) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a6000000000000005000000", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m38.966438544s ago: executing program 5 (id=75): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000004095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f0000138000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r1, &(0x7f0000000300)=""/172, 0xdc) (async) read(r1, &(0x7f0000000300)=""/172, 0xdc) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) getdents(r2, &(0x7f00000000c0)=""/207, 0xcf) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x401, 0x0, 0x48, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x401, 0x0, 0x48, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x50) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x2082, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)=0x80000003) r4 = dup2(r3, r3) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000040)=0x2) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000000)=0x200) (async) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000000)=0x200) syz_usb_connect(0x1, 0x24, &(0x7f0000001100)={{0x12, 0x1, 0x201, 0xdc, 0xc7, 0xe5, 0x8, 0xcad, 0x9013, 0x433e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x7, 0x0, 0x7, "", [{{0x9, 0x4, 0x60, 0x0, 0x0, 0x4b, 0xa2, 0xfd, 0x3}}]}}]}}, &(0x7f0000001300)={0x0, 0x0, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="050f0f00010a100302000003000104057d36fdf322544741730100000000449daef7ad44f0b383924bbc6a50736b2b17447633beaf028ca92a2d2505e561028dd3a1be846242336611e93bdc5c8b6a6298aa931115e33304f0bad963f0d553eafd22bd4d24041806033829c695961b2e7041b7c60f7b7a037d6278966bcafe590612515014a317b27fb3a70aa985d1b607828dd9ac19af9981549baa4848bc5a950a3f9a5c2706ff2912508c890449f2ce496bcb4df860d26f236d4fcc8bc4020e94db4bc3996f7e858a090b39d631f0a5be156d22424f2c69e754eb846972bc25b0068a5d9488b991436a586ac47840be05"], 0x1, [{0x0, 0x0}]}) (async) syz_usb_connect(0x1, 0x24, &(0x7f0000001100)={{0x12, 0x1, 0x201, 0xdc, 0xc7, 0xe5, 0x8, 0xcad, 0x9013, 0x433e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x7, 0x0, 0x7, "", [{{0x9, 0x4, 0x60, 0x0, 0x0, 0x4b, 0xa2, 0xfd, 0x3}}]}}]}}, &(0x7f0000001300)={0x0, 0x0, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="050f0f00010a100302000003000104057d36fdf322544741730100000000449daef7ad44f0b383924bbc6a50736b2b17447633beaf028ca92a2d2505e561028dd3a1be846242336611e93bdc5c8b6a6298aa931115e33304f0bad963f0d553eafd22bd4d24041806033829c695961b2e7041b7c60f7b7a037d6278966bcafe590612515014a317b27fb3a70aa985d1b607828dd9ac19af9981549baa4848bc5a950a3f9a5c2706ff2912508c890449f2ce496bcb4df860d26f236d4fcc8bc4020e94db4bc3996f7e858a090b39d631f0a5be156d22424f2c69e754eb846972bc25b0068a5d9488b991436a586ac47840be05"], 0x1, [{0x0, 0x0}]}) 1m38.90015567s ago: executing program 7 (id=76): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0xc00, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, 0x42, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 1m38.61794998s ago: executing program 7 (id=77): bpf$MAP_CREATE(0xc00, &(0x7f0000000000)=@base={0x9, 0x81, 0x4, 0x8000, 0x16, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 1m38.560218191s ago: executing program 5 (id=78): mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x10a) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000c60) rmdir(&(0x7f0000000100)='./control\x00') ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004100)="a95ee66af223165fb85c7a063307d28ba66dd294927c55081f5012d8223e0c009905bba59fcad5c499ccbc3ecf96e9d6ab31713938d657bc1cdd65b0a8c5fbba04f0e4926fc32fede46dcf41865bc66b2b1b353824177c6ad6f47ead9c18951b761a2bf0f17b779c4ade8a3100cdb3f4925ce68a944881cad07ce81e6d4ffd31847a0453b3ce672102b33f5c46bab37c7fb678ba1908052334b225eea595ea982901991c169eb4e0fc23b2a45018e1544c308724adc81d1d22c012fe67aebc0d3157170f2a5eb586f9af8bd80fae3bc2e9bbd9b51a9c32fbc467e2b0a0a840b765938728ba3f6902046443434e9c8a539dbce61dd8fb0e6813208877ac1fc45e9fa75ea6c5e7dc23acf9bf14523cc47de600ab3807ae8162eda1c66cf41d61386817d1483e63591002fabca6c9c1b5201974ea2b404dd54d80e24beadcc9048059c4cb26225eb2ade9e189a1ff40fa7cbb917aab58dcda7cf32bf8ac69a4faaf3a67e06e8736f92700608e1bc38d092a18d914881fd0a17e65d465f0c3cbeb987ae1fda981203d792fe5708993cdf5648f94cf23024caa3fc99d7fe6a6a434d5dab60192987ec3f55bedb08c40078e2f5e1c9e0b033f48ee56d00336f997c17a2f976d57193ec8b3132e8ee249c3dcba95e737127c7e2cd8cd6eea30688d627637e82c27b26110c0c61631d0fe0eb8c600023e8e4f0fe495a8666baa4e3cf9de28e4d95d7b7edea0d8f1b19fcff477164bf6abb3d28485398e02dc4b003de2046aa16a808c077f59a35c0ee44d5e6958b57b60b5fe2980cb0f870395c904e735f7c726d48de3bc2b558bce111f913cbdc65e9a6fdd51f0cb6079a4e6048c61a4dba2fc6cce6e3b93d86e312bb43c30a01c0cfc72ebdc3e18781238b159d08ea32fd37fb352f5943b4a22133586ada296c9ec1a3580d9dd59569496194e8f87f95474263ee6313a8eac98de06426c0f5ff00fee25a915e899e9d99b4ca4d52204498a0c8f877adb92cce1010403ad8c53d6162202a09a099930fc4dfb3246f46134993aeae1e49f2e8b0ccb30ea1b09e12dafa24530b8844473ec04d666e8a7e1c89a1f552d04efe1b85a0bbcc33091460faf098625999c0061eaef184e8b02a96e6206d512870a7fe819dbebf93c00ccbf4357841dbe0343c0850cae8d8d15cfeb3da41bf5682c842f53ca5131545784f1dee5ffcf9b4ccf4cdd037a31e4efdb6524056057ba749cc4208df722c80948a486da031a50d129349fda2549157499b8ee553bd545ec411334b902720ef0a71819ffbf002742151d950df0fe8b2efb5a94133d943286c73adf359659480c438bcf1f7f1bc1ad2dbaa54548aa3d1b4ac7d17e755ca23de9f978f45edaaeff3ade5d122c6029f8406732d1c5cfef450635d3bfa323dd14397fa085e1c928ab84f604bd3c378b2368cb0bf371d41ff1e4982e413bc3f3aedf32237845def41805fe66a5239475f246b1bc91045384aac0dd7c0723c5ed4cb02ff0cd39db2b469790a57582543e5fd8edd24944795cb237b5ec6b09e62e7ec95af1560bbd455416d22accf42ad9fdd5eb9afe198e2a327f69ca3b617eae3c24c0fd7dd36fa9fb3bd111d8d7e5dcf3039fa06b8e3405cc73e90f07660b9aa9748643832784b36d2a1418a453645610fcc816c983065a44e86f3fed8ca3bd5397a1eba72c813a49f45af504f18e85fde740dfc63922baece7e5873beded5755869bebd1f984dade3856c34369529bbab5fc32294d2f68512f0d5d116521f56443637b67587372850ff34f093f7c00376bcd15b9d470502200f81d42a46e711ad001aa1135dee47ee2f38754ea50ac8c98b9cd6f1c1a00f862900af52d9e7007be27b3c095b2e0d880d6ff7fa8bece867dac7deb0080d08d7b31cb905666f36cebe4b8033460823ddfe658319bc26a72f1b55fc8bcf364271cb1f280f9f81abab630f656c1491f70412f735061fa1aaf9d0eb016cc5e7152699ed8e7ea5ff05cdb1c7b8c65ca35d18cb7409425240ede6afa92f211b59a825968b83499bc91db40509367fad75ede35c6553ebd28ef8c9f75a566d8107116af185f555cab0322c108ced7e8012c03916ebf8b563dbe818a2576111a0ff9749627acfe19ae3fdccdeab6349b5c1f106a490c1d128d640a81d8706b66e3a16ee0a4068d9e7102c7724a03ab121d7c93adcf179c5e661b9fd47546f2bc73f92e45b372fdb08d8e958610ad2c4acb1a3ad7bfa236565796b16ef1f9799084f7e60d5396a3a286d207051d325eb5282b54837fef08c7e28a5c38f7d72ad8535166d60e2893f58f704aa5152ea4a6b00b6a26825715156eea616c72c1fbaa46f3df4ebe3696164e47cade8edce9f1f7a509e30f135b3b29bfc849ad66bf05c17d6c8679234a7a53a3d8385c509eaf5709b1558434ad5f73b966c6db4eacf52509de480002b6bc6b65134d9cf378d5820bade7c0f0373b389e06c162745c0cedcea0eda0762697f0e73307cda99d95cd7d2388afcbff6370bf3ca5e3b3393bf5a00780a93699c0cfe0fbac6d809ceca12d95c8d5a9f71c236eea0851113ccecd0a6479350b0589b5bba13bbf4640779751328509f7db504c474392b83afb5bb31d4a4835d108584bbbd914e95851ec020a07d95d5dd51fa2bd3dd51bd706cf054a2b4ca0c2937639fc5a5ee3090d08bcd2335a5e6213e4a11c080373854bbfa7a96efa317884b38675a9891f3256ad8a1f74b64e3dde55e4d5c4775b7adc6ac284203aaf9f6ac12f95aaac02b09b2088ff5d53dfaabf0ce4c6958e97250c91147e266247042da5792e7097bc3210f514954b0dbb5163b1d71a0322fdb2c0d747d4754bc0a7da972b9579233ceed92741bf5b582e349b4aa5ce522d9abfba532f50d68b41e365bcf54b008c384bae1099d4d6ced5e7f4c1b05c7f7151d459ad5eb7dcad282b05a31f4530f2d628f93efad19bd239c06143483646c7b1d1614f700be8593108108a8f28152d48ecd6577bc387935552e396bc563db28454bf358d71eaabe0ebfb46226a3088d8c7ea244b99f8fa643d20fa92d9d0cfa4d6c58002eb18e6cc5c13a07237a218b09fcf16dae2812e9d68cedb4a37e49a8298c3dba5712cc84cf1df6427ecdbe2a9ba2f05951608a02ab7674c4c8bcea2832c89ee71efd66b7b72a04e7d2e6caabc3bccbd9d7ea5a8b95c1a9b8fdb9be258b8dd57e9f4e409445267b2f8a1f991ffe7a4b77c50b8845f1be30356f3de2789fcf49ba4ad46d47b78aeefee7e06ae7d386f115ce0a55bc0ee42d9765c12dcdbe540d41a781dd6d08ca45f27c4a91c65c9a9dbb90b9f9c9e60663e41260792663235e70d9bbe3c485f57522b7c3d13704f662fcc94949825316b814acccef8e18128ccf8834330caee12b376b802aa32214160622339c055d8071eb50c7281991495b72eaf132d0669c7d6b534149016e54d5cd2347121dea8ac60e7b5ca5a53acfb8233242ab6ffa6c01997244ccef3d485c6e5ac4b8a252210822265c1f6b9af893550c163a962bd2ea149a6e9b1ab913446c1a54934ce8f56426a8531df2f07fa73670b78d6213d10a0113864bb15af6568765dab324722a74c87bd18550bdb51663c9d8b6724c9dd1299019fe1d8241c7c9a0200257f3a8593b6830c9ed38ac983908242ec5fed94bc07e6f3cf0fecda556a6685d828343d7b7a2ae6a7ce25a1f0af2e565f4479f791d3bb4944803f5a76a768f3ec71e4aafd217da9d8d32aa2967fa320d67c8aed60cc4b5806439092c1a0cf511918beb0c30ff62a547f8bcea0183ed162ec5a7b2764e5ff49aa93539089ca814cee68ad100dfbfcc5617735be68bb8ea22aee333c88fde3124729047646bab77f08e33c7c70d4d6d023b3091337d0582c75206933ed52ed99bda3d4d5cf48bcc8e683b7c17a19768e8770123731d98c1691e22fc97a0c9ee27eff1ed455e839163ef0195ad8f6d3e653d88b0adaa325f8232787cf38629fc1103ae1e77d453db51f8c16299d68a3230e61138e6c716d7c981f8803c2222ec9d99f476701352bfb497a892398a3c84c87ec43c3494e70c92b8fe6351d73bbe68f73dd1d4168b3b67a277c4e85b2e2d34075dbfe23ed3d6f6520d4987b282c2710423cff7624fee0c5bf6364bcdf2734eb8465ad3abea522a5bc1dd787b812901e286788abb7db6fc25398bd4d6b78657bdf7a602b4706caac46bad88c4a0f6c15c8a60252fc53b3d496707e0857f5c5946ff5fcfa89eb816e1b96b335727f09f164136b367191ad047c3f1f3f5fd487ae535b0284e276c232ad5a6df68eaa8c74d5cde46ba3fb6abf3d42177e4466f18f7a8251f9809e39bcfe0ab07e24c4c7bbd99f70b7252d4a1a34a9aa34fa595871996f31a8e1eea0734e2e60d0871a4eb443a7d434b5a53c0bee62f388f4025ed1d413ae737a0b4d39591b9a5cfc5edefbed55ba21f480b7ecd2db6df235c9c6c2e0da1abacccfd8805839164f2493baf75df275012413bca9ebb38a1c88c600b1dac6cc82b9115ecd597b6b4ab0ae3720c6d9cf13bf96cd56e33898026e60e1b6bf1917b602171fe8bae56c7896aff9a5d65522c91f3478af5643dc563523e397b85f26a573d2d03ec2f63dc9615d3956273196cb4ca3033f1fdea6a95fc6fe95c0042caa07d37e0880a3a3053ea87f1a02e3e4cc062f642adfbd6769f2540c04a99335a0fa452559f27acb146257ae1b93f1c80cb000a71cf87b7a8555f4e77ac4ecd6411051a26b846796fd229417fc456e3e7a64a9d5232b0fa9794616a2bfc67ad9aec0cc361f3bb7dcff27d6815defa96896ad904a3d53b4f39030e3b2b786f82f5d46eda4de74a214d092f7d900a3c8575ff781ee659681d77ff348a21c0bec5ee66fa1abdc32ee75ad4a51a0a0f942c801aeb55ad9567d140e13fc3524648a231d8389c25d3c18550cbd54ef5493dc5a7f6ab8924765086a1e5b69ef6e80d5790f078e999883efbf04825c3326d3b7d54aa453988fa226b31cf19549bebbd46b54716e48c05df7655fbcefe426fd48b0e4867795d1a03df00e7da4245e95630f2cd3d1dbaae5b74ab2795f6ad5ababe632f4ae1abbc97182220a28eb1d108feb52f8326ec2b3abb0ed045fe64b8e302348d3bd561eaaa3a7f6d1aa426a5848f320f026db837d98063724d38a778cabe67caa2b8b7462523620661965fbdf41a2e835e64d484804321754f79e8b56f7af558a9007d8871fd60e2aeb697270d470394e97f43c93f6515e9941fce5c3e020148cabac9a3f257769afa92374b3a8b5420dfbeeb3f4f1d9106cf1f822791fab189d3a769438aa0b8ad58316d02eae97264e4238ea807c578fb215614d60f6d69d23c438854b0e0b47cb820e0deca03a8f5b0221f10b0e7164ca28b60f978ae82beb3fc52bf8f5f9d4bf9ea5a44014ffb3fba5604fb70db687bd7649fbb4b72d2e604b8031eec10d7fd55cf62234d1515905c4ecdcb2073ae480437e134fa65b37f5fc718ea1595510b302f5a750bada2b1b51c5d6c14da8e69f51c5454d3c15f94f5551ba41e402f98c31d8340bc24ce0c2d0857eee2e6699781434f9eca84e52e9dc0345c4c289880c3c7162772d39bfa62cfb8b401e1cf9a241e7afe1ae4fd5e224bb1f4c3c7098753b01c35f9c8fe1e0c3cbe7521b259e403006121e1c3f62d357394267e78209f31fa87e1aa87cf1054119ea364d7b9e82ae84b998860d8fa73da7cf6c58fb4bd754316c39bfdc453fcea16b73c1bc56996b22074fb4a1e944b6dc786e1f1d8460004c1b9abba76cb5ad9c02444d01b628aef339809a93696b8eedc658222b11f0ade5cad02ec734bdfae30421adc690dc0882cada0a1cf5ad9d538f0366232c7aca013ae8bafacda63dbdcf8507b911009829f2ef019e60a2b1236614b25c258ac4b05aa85d69e8cb2bff36728b967b58f70683e0f1f4408edc8c4fef715170c163324489d8fa4684579fb6f175af8ee8f387ff939b750c7dfd4ba62fe715eea3e5ac3ff7d5cf3ffcbea739b85374956b00b38d6f4519390d6b382d3a883c8bb7a62ce654c005744921a082479affd60092aaff76cafe07820c1aa10a0d5ba589eb21f48e09bf5c279c7a3ac6bdb7958cd439f54d5ad369f0eb68e090eb2a6cffbce0d5af05f7afe5336ad069482f8a765823c63a45d345a72b42d5ad50d8d73a3e7f22e717c1e2aca4786d43b0b1dd2651fa46c0a6cceaf8f57f2f132cf49112ea156f6a159978f8cf8e5e9d74caee5530d999c4d0e6e50d6c69b5c57edb78b0a63d6a06eeb499060300da73ca39199cd4bf6412d58bc9344b5cedf7800b6cd84f193a55314bfa047bb93f562955d1b4407781ebe40fef42f6e5401046866391dd9ad8b96dc6915d43d40df4d7ceb43f682afa7c0cce1f944d79e81eba4c01c64334bf50bb26db0992e9265ba022b49fec9f188ea213ee504d666544d0230b1272f5222db08aa5347e985abf2607fee7719a03a3dedea280e2bcc77737562cd18d979992dc3bb32dbcd3bbfbb5896b9d06cffef2ee68cb071e76d2b7ec5123a91fd73e6fb737d887c016782328ee5a85bff817a8f5a769205373e5c63ffb883158be34059deb0bb99960f3f0cf838efd35f265240cfede2ed447fd7ebaf92befa24c74546c3c9b93aa6ead03c7350327a3e0bd049a582028f3ca59fc9fdc2ac7819f8f92da0a48c4184f7d9abd10e7745a1af4457127f997580bbda67a56cf9bb67b5f3ce6b2b62dffc56b47c95886fcbbcf89da58ce694281a9e8bf50fd5878efc3d357e6f4994a9483ec74b536a5f8ccc714b045fcb5b896e1d998ac11e418d23028f088e99845ef0458dbf45f0bfe9a7188bda3bc07a27f25c741d414aae493b191d8721ddb60281c741bebccc12c841b07dfab15481f65e90d4337414112c9ec23bff763b1eca8a1bd6cb6c252b6531e4e096dbebae5a16120867ece7746a7b487216851ce059a8e3aa37dd4885c6b4e0b8ed807dcf62279f1de1b3b834add0ba26a1bbce31199a5b145ae456f84136887ba27b2e3c6d57f1cfedc9e7042a6c5c8d5c67c04c4a0610d09ae7c037cc1c75f355fc5033e434762aa8f4f23d28ac98409deea20c826b7a9317168ab0075503f3022ccbf2296b58bea2242082d3925d6788ef2d56c435b1db3f96a992d3854d5a9e2af29e5a7817b6c7f210ef511071c46fc3f013171d53703ed7ec6258f531c0d00782c8e2b30149e6157f0e898732bf683341a4a768c199f0f8953120e8d2e9ea791b228da103a2f67ec920560436bc306861fdb098c45ae66ebe12db1e27bc5d2e5b4fe530de58e90c2d5c4ab764cfe9312f2397dfb20468d7db6e9e0aa5765ff0bd2b1c1620671f9a9a516f405e0e8ca8c3498cadd75a76786d88a1adcfd91d2e7c302876b5c9d97d2ee8e5b51d73ff20039a3dd4ea244ec37242f3bbe6ebd7c2f9c583885274c0537ae5b3af6cdfd216a7e9c9f3638322e1d4c58c5f0ee9107bd19f50f2435642a9c584d4de9a4ac6cbe5f699144b9521f2669ab0df72a70d1af1ac9369c58bc8f23311bccc7e7b0b32b744135241c397d6796690f064c8e6df5d7593c2e7bb159bd1a7da0ee9002c0b7a52b549777def7e854acb8224d83c4ec769bf45e4c699c680243d6e2e4149341db46acc685f0650de45fcd75f4b0bfbb3eb5bce224f2c04a03b35edad303af6a2ba403abe9daed9bc170363333efbb9ab4725e453df55b3861499a7283c983db6cfacd367df13dbad52a31fce48bfd13ab9982d821ace9a998a2763d9bf4f484d46ca345d81360ea8841adaa5b45feace5db05fed42113647dcbe3c3dfd70f4b3537e77228a5218d9419a94685a504fe61a1169115536eb2682a63675a0a4debcfb29ac169e4a999206bb6d4a4cc5e508534e9ad4295f08f681071d5cdf0edd674ba2a43a60739929ff3e22cfd4675b669b78998cfac88a0392033930f2b788dbdfe11e560ec1a04be8fcde01fb3cf80d93ce1df819a21ff158dd18e9bdc759a59b9f7111245d336963a97ac8bc7c4bc2682c8273204117402f666e9bbf1f0c0edb08bf3e51270876f92067ae8d37bdbf857d4174a4a32de8459e4612ab723d5e52bfe77e44d7faf4b70d7c8102a5b3503460b0865e5ded0c0366d9dbfeb111deeb425c8878798cad64a84f2036dd9a883277a89d368d636ae34b7f9a8ee57f1e563d72645629ec94d5e763b29dfe2e2fcf699eee4224ec6a3881f892e4f3139962b7f8c397dda473c820761f82df111ee571df65e01b697287cbd8d1496cc98f462828cf22fcc14bfa4cedf934920892fac405290ab3ee7eedae9af2a1eb0f45309eec1cafec9d5f9fe10212417e89182cd22474a8b8972520b79728c8b712ee96a809b31a0c08bab2285fcff6d8b8f638f5550cea169055163017e5c3ff238fd5ba7e460b06ca7dd11fcb37829e6c71a29df07a53ecf8a041081977da88a21074dee4cf64132868a3d7c32e4efa49a71d98a4be181b681f22152bbdca36b377baf0c90f8cbf2c32f8dac624e7fa650d3aa974aba48d29b7d352557f5b2d8054c86d36363c00497a6e467ebe863890c6344a8151ca09a0012e8d0f904acba4edcc92d16e021dd24f0d58504152c62ddd21904a039222673e9b3c0a255ecb2c67d919cf50abeeb3ed8d52618d31242b274f96057ae05944ae0a367aeb6a29455c1171f69f7b138d20197216e552f1c11956a9a031539b032ff5d666b2b7203b8441d8e8c2bf325aadd08e01d3eebdcf663d318c3302130299b1cf852edec4300498ed3fc57073309f83490ffc5d2f65cf087f47790e950a6c810a50cdef1b6a4c62c0f40f3bf438d1ad1f0a04a4c28645de82c6fe6174147145ccc180e5989fd5368ea9c90b5b74cbb8acdde83a05f91b943d73f950940f4ba967767533e4093015f9e7c5c2bcf422e83af0d2b718dd15c219e1dad959f88f18b4592a20c396e3862bc8d629b50e670eab0e12460e1bd94e8d192fbbef19d5b5e7244ef274a5192f8e28b28d1ecfdbe6da5c4102f9535edf71a6f5de0f59a7290cecf062a0328154b1fa5ba4dcee2a856de908d9984914c5a05038b4678dc5b202150be8768b33d15f7d380f080ecb406be5e991d83f10f6113ec8ee18a4d269a96f4b30b84d059e6600af3fd36f0cd6afc8b9c0d7673ac8ae164a796ee21e4e1e4ba1d75c64a65de49bf755abe4aa4d832ca23c7833972e8735acb7d31969993437d2cbb7b12cfde845e0fa7a3ec6a9959cb859ae8ec8da9b9b93dfaba08b0bc092a1e75d95ded612837ef01b11d05b649ef903a065bbde06643bb2bb6d352b01b2db6b693941e4a6d955fe01c29c56dbd298146a6ab48c2ad9d0e191c4307c3a68c858f975d6da078c95eee82212b07c1c0c496771dfc29429cd3fb6d6932e3c49b77e834e1bcc15a7e2f62779c7eda7cb7339037676dbd603b46554de1ca7950e33d48e7615a7971e525696b69b1e024377d20653bcd41b530f6a764699f75a9134b4be30082ab571eab792063234db36907f6bdf8caba3e0e0f884816943418b32e3063378accf4d916e068f0b9055039e93a875cb500e25ef8258cbea70b445d3c2680c75600759e4df1270f9f79b1826909b2dfe6e7a2b58040d03e0963eb46b8c99a327a61a510c07103b23c40bccefc14e2d8b92140a7792eabc328e147dfcc87cd215a03ffb9d1a54351657ade1af17d4bb953ada02830869186cc820a44fa13325e3e53c565d7cdd5a1292de52150a144df0ed39ee23cb7a26f15ff042a797c9aa69ec8a33d9cede2f1f00c04b990025adf0813ceea6827c46c1ec46cfe6fc9294ac3d7963bbdcb7a5a75431e067c492b0c6da41606c6c82425145ec772f733afcdde02e2a422d64439ba43e080d1f79d1ab5ffa01392f4f21cb9940a1ed244ea5ff85bde6af06d72c5a54cb3c1af918fd0801f8ebdc410db560ec151eec471acd4634f781141c46569dd7abf178f286aed037fd73f4daa356e648eeeda0bc546f196b2b6319da806ef87542e3c47bc5cc54da7ae92e79420fbda44c35f38a72ea14d13df8a4c526175e7f0648151b5fa27ecd735965265e9c07e20f5f1e9cf01a9c9fa508d93cae05d0b666bf7d1a4cdec9b380dcd1694d7ffc09f06420fb2c97ccf1084bce8f30192004f055fe859e3de62ca7f77904d080fa7a6a099d8db70ef3ee82ff8b0d6e4eeee656b17463176c759dcf3d943807207df04da7c731dc2f56a5b263831ce89e4eaaad6e56e21764ca1d96f4cd6069bdfb0a278c23c92521b4a17763c926d70aa4f49cb718c90a426a64ea9c03469be5602ee34141c290375f5e98af76ea53512d32f268cbc0527dcca0ab3e2b1b76e79b4285dc09a3a7f89997da03a629b5d9f755b4ce6a4c50455011efacdc5d2c1b91db8b865c614b135db2e0f9e4cede55ae414cb1f14398a8c9a73a09d315796beb10e702bd8522b9875deff4435cc166b2a87d3d4d7d172b6290acb8e97f6b62615d4019d71324adeac0c3bc00a5650a5fcd471cf27f28a829d0fb8fdeb93b62973482fd1e7b57b3de16283501cd39f6d8986c191172394c39cdf11607f415cb171f8a9662b7990b51a1e42caa718229b34c4262b1db8fdd0c8093d62efd43d9ee3eed44f6208c7151544170c39b9f78becb55c08c597715b2f1901df6457da8e6ebc483b3bb5db68fd3c89668cafc4339a21f4b05e483570190cef51bf92ca49709ba11dc06bd305deadaed6b9f6f028bc95a92fb8385534883990332f54b71733807a1f2b8f25fdb1df88eb3b38976706d07a67f756e431546aebd4af2743f31b36038f91c00deddb1285e26297c174397126ff53433f2e184c1d4cef6b3a7bfa1862de9a1ec20869e03b69379de53d7b4311495acdf897855a9f23552a512ae9bf34a9775693d8957d9905504c089d19d7c98187e1dd671516f8d6b605941d8e7f77ab6118cc5ebeec6ca42a5f9f6818dcef7b0af9652bed27ec585f7e18e23a3b0736dee634cce14dc52656f0663eeee84ebca945e62adf94bba85942c89e328c4f35e43586af445f11b1b64945c8f4dad48f6db27c3444f016cce7feb7a438759d67cd203d9fcb3f44211f4977b5f347800f3f37b874df4ef985dc55d6a1cb3457e6c10a539f4bff7623a09ffe0761fff206afcfb5cc4b5a9fbd54f98e9a553ae59790facbda1adf615a79e439172341c3bf95b99dd8f78ff53699d110769c9731c03ad3ccd8abb8877fe84c0ab0d646ff06a49f73c42764ad003bf85703f633a9d85d0b03d3c595f9eb103a85363fb5df48e201e22d4b361bcb5de70bbaab8a02a2d3b27a5246145b2da2cc71bfa561544f7cd3cff6688a7b049ae086b43d197a61ae54d7113829e8f6afaf2414b7ac0b2f286968d2db9a4bb1b90c1ad9861dba35722483c88c63e5d77cf8b05225f31e665878f9238e55bf90f312fab7c19e400008fd67965386bbbee50999ec685fa1bb20cbf106a909a234f65de75ba4c896e218074ccdb8f75a333ed4e0c256283d1d7d326683b84ddfdb7a7b2e6dc4a93b2dbb8b37b208d4c02b6d192d28bb49ea44dfc56be4e70a3021ed442eaab2c45f832b68bf7b8600", 0x2000, &(0x7f0000006d80)={&(0x7f0000006100)={0x50, 0x0, 0x4, {0x7, 0x2d, 0xa75, 0x5d010640, 0xe0b, 0x7ff, 0x4, 0x7, 0x0, 0x0, 0x741d859d8bbba6ec, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x82200, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) creat(0x0, 0x93) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x2, 0x10001, 0x8, 0xfff, 0xffffff73}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x1}, 0x20) 1m38.271561511s ago: executing program 7 (id=79): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fbffff8100000000000000008500000041000000850000001100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000040)=0x2, 0x1) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x1c0e01, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, 0xee01, 0x0) syslog(0x2, 0x0, 0x0) r4 = getgid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private0}}, &(0x7f0000000300)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @multicast2}}, 0x0, @in6=@private2}}, &(0x7f0000000440)=0xe8) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x8000000000000001, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r8, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x1, 0x6, 0x1}}, 0x20) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r9, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r9, 0x4008ae93, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r7, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@mcast1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000580)=0xe8) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1a00}}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions}], [{@subj_role={'subj_role', 0x3d, ',{[[^'}}, {@dont_hash}, {@euid_gt={'euid>', r5}}, {@hash}, {@euid_lt={'euid<', r6}}, {@smackfsfloor={'smackfsfloor', 0x3d, ',!_#*@'}}, {@flag='ro'}, {@fowner_gt={'fowner>', r10}}, {@subj_type}, {@context={'context', 0x3d, 'system_u'}}]}}) 1m21.413158313s ago: executing program 35 (id=78): mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x10a) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000c60) rmdir(&(0x7f0000000100)='./control\x00') ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004100)="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", 0x2000, &(0x7f0000006d80)={&(0x7f0000006100)={0x50, 0x0, 0x4, {0x7, 0x2d, 0xa75, 0x5d010640, 0xe0b, 0x7ff, 0x4, 0x7, 0x0, 0x0, 0x741d859d8bbba6ec, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x82200, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) creat(0x0, 0x93) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x2, 0x10001, 0x8, 0xfff, 0xffffff73}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x1}, 0x20) 1m21.048429729s ago: executing program 36 (id=70): socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) syz_open_dev$video(&(0x7f0000000000), 0x7fff, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200), 0x40440, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x30040, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x1, 0x222}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x8, 0x1000000, 0x23e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x10448, 0x0, 0x129, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8001f6e, 0x4000, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x100000, 0x200, 0x1, 0x1, 0x0, r5}}], 0x1, 0x0, 0x0) 1m20.779535073s ago: executing program 37 (id=73): sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24008851}, 0x40040) socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8032, 0xffffffffffffffff, 0x28f41000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x3, 0x10001, 0x10000007}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000009667be2661b55d5ceb26cc90a6ceabe3e27790f1102c50a1405c0b2bc37a38d1b07485167e82f17c36cdbae3f51ad899625332d4a1ad32f30be8c3be6de8d49a04f438a82dee9f92963f38bb2fe6fd46e99f3efbeb0054dcf0c14bbe842866c23a308a66751d705edd62ab306c3c75c2d2ab0ab8ac", @ANYRES16=r0, @ANYBLOB="01002dbd7000fbdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x5dfb, 0x2a000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) io_submit(0x0, 0x0, &(0x7f0000001300)) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x3938700}}, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0xd, 0x85, 0xffffffff, 0x2}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000740)={0x30, 0x5, 0x0, {0x0, 0x2}}, 0x30) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x13, r2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) r4 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x247, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0x40, 0x7, "", [{{0x9, 0x4, 0x0, 0xa0, 0x2, 0x3, 0x1, 0x1, 0xf8, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0xfb5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x5, 0xd8}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x7, 0x9, 0xd0}}]}}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0x8, 0x0, 0x81, 0x0, 0x6}, 0x10, &(0x7f0000000200)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0xff, 0x6, 0xf801, 0x5}]}, 0x3, [{0x29, &(0x7f0000000240)=@string={0x29, 0x3, "a9ba5779cea582afff803d5532ab186063faa2c05eabfb1f854ea981b0964f03b4cacea33264b4"}}, {0xe7, &(0x7f0000000780)=@string={0xe7, 0x3, "973e4032e48905e1d92d2a02b162635ffbf7e962e26b03cd3a7440e285c097c86ef5d5c11f4eb72028a1a876b2011a0baa38ba5c9dd82aefa886ea1fc830d7bc62a5e62037e4b4f2eed7224899bc37cd363181b10cc6d78ca80e2fc0a9ce023af3e8e12a5d80fc16c180cf5b484d4ad365e48a5cd84aee780bca4cac2e3530215e231898ec8e1fa8d6d376157bc8a4d226213f036f33f2c0662c223c676a419c3be9dfc24b1425d066c16770b2e6a65540037bf82778640719613b0e8157685a16d145d234441dd0a6af3ecf06419597c3ccb7ada1f7ce5c72c805d59c2fb3611b142867a9"}}, {0x2, &(0x7f0000000880)=@string={0x2}}]}) syz_usb_control_io$hid(r4, &(0x7f0000000b80)={0x24, &(0x7f0000000940)={0x0, 0xe, 0xd3, {0xd3, 0x5, "f1346b130c03658ac07b36125ec74b3f102f70ad030e3a203e5573974c5bad67099ab7ec250c42b0762f3c125b1023701eb17284d1a450968178c1bb9c1549e8bd588cdab4b5e093c4af5ce25f9ec75edc64fb571a504a7f0080d3fa7f35427469bf4c9de3f063d4efe0a44d965a6685f64d96c756b67a4bcbca00659f233ed44ec4ae9bf0470270dada055999a374823be17a4be1cba7a4dd2b9316a9a7f34752d683c18bc2bea079ce12bae70779ce590673ada8cc2eb341bd3c1acec424f073e60a3fa9a6ae5c26d46215a58f610fea"}}, &(0x7f0000000a40)={0x0, 0x3, 0x82, @string={0x82, 0x3, "04859ad4f750c54109d1f4de2241a365478f16745905ddd2dc53d51acdd3618deb858581aec1e21290c35a422c87d1a809a105cec4eaa3f572619ef4e936e1b035ca3ed246a335f5058c71f5b8768edc3b6522efb8d6f7485297c9eb06bab95f818392fbf0d4dbca06f9323eff29a5f945f90d3479dcc7474e03445b31b7c95c"}}, &(0x7f0000000b00)={0x0, 0x22, 0xa, {[@global=@item_4={0x3, 0x1, 0x0, "ad7f1348"}, @main=@item_4={0x3, 0x0, 0x9, "c3267585"}]}}, &(0x7f0000000b40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0xc, 0x1, {0x22, 0x554}}}}, &(0x7f0000000d00)={0x2c, &(0x7f0000000bc0)={0x40, 0xa, 0x1b, "270f9c13fc124e1d080f357bf7c78c1b286f99f3b79e1eb958f438"}, &(0x7f0000000c00)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000c40)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000c80)={0x20, 0x1, 0x32, "38535723f15891a51b997d0f8d9523f3a3e36f0fc89fe89a5f6e47c307e96aa72ccb70bc61a7e11f15f1cdc1fc4354a1168c"}, &(0x7f0000000cc0)={0x20, 0x3, 0x1, 0x42}}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000080000000", @ANYRES32=0x1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000e00)=ANY=[@ANYBLOB="180000000000009f8c52736e2a450000000000ffffffff180800002020780500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000040000850000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_open_dev$usbfs(&(0x7f0000000000), 0x5, 0x0) 1m20.585478193s ago: executing program 38 (id=79): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fbffff8100000000000000008500000041000000850000001100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000040)=0x2, 0x1) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x1c0e01, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, 0xee01, 0x0) syslog(0x2, 0x0, 0x0) r4 = getgid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private0}}, &(0x7f0000000300)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @multicast2}}, 0x0, @in6=@private2}}, &(0x7f0000000440)=0xe8) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x8000000000000001, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r8, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x1, 0x6, 0x1}}, 0x20) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r9, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r9, 0x4008ae93, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r7, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@mcast1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000580)=0xe8) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1a00}}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions}], [{@subj_role={'subj_role', 0x3d, ',{[[^'}}, {@dont_hash}, {@euid_gt={'euid>', r5}}, {@hash}, {@euid_lt={'euid<', r6}}, {@smackfsfloor={'smackfsfloor', 0x3d, ',!_#*@'}}, {@flag='ro'}, {@fowner_gt={'fowner>', r10}}, {@subj_type}, {@context={'context', 0x3d, 'system_u'}}]}}) 1m12.118243711s ago: executing program 2 (id=85): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09"], 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f00000002c0)={'wlan1\x00', @random="0200"}) 1m8.151545155s ago: executing program 2 (id=86): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ptrace(0x10, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) socket$nl_route(0x10, 0x3, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x200) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a6000000000000005000000", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m7.972789455s ago: executing program 2 (id=87): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000000c0)={0xc, r1}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000100)={0xc}) ioctl$IOMMU_VFIO_IOAS$CLEAR(r0, 0x3b88, &(0x7f0000000140)={0xc, 0x0, 0x2, 0xffff}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, r1, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1}) ioctl$IOMMU_VFIO_GET_API_VERSION(r0, 0x3b64) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x3) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x9) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000240)={0x70, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}]}}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000280)={0x20, 0x0, &(0x7f00000002c0)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x1c}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000300)={0x18, 0x0, 0x1c, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000340)={0x18, r1}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000380)={0x8, r1}) close(r0) 1m7.783759876s ago: executing program 2 (id=88): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$media(&(0x7f0000000300), 0x400, 0x20000) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) pselect6(0x40, &(0x7f00000001c0)={0xfffffffffffffffd, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) writev(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r1, &(0x7f00000001c0)="64e9", 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000280)={0x8, 0x200}) (async) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000280)={0x8, 0x200}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@loopback}}, 0x0) r6 = dup(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xc, 0x3, 0x2, 0x7, 0x8000, 0x1, 0x10000, '\x00', r5, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @value=r6}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xc, 0x3, 0x2, 0x7, 0x8000, 0x1, 0x10000, '\x00', r5, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @value=r6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_icmp(0x2, 0x2, 0x1) r7 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r7, 0x0, 0xffffffffffffffbb, 0x810, 0x0, 0x0) (async) sendto$inet(r7, 0x0, 0xffffffffffffffbb, 0x810, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 1m7.234349368s ago: executing program 2 (id=89): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x374, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfb, 0x10, 0x6, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x5, 0x78, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0x64}}}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_expedited', 0x149a82, 0x0) sendfile(r1, r1, 0x0, 0xff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a00010600000000010000000700"], 0x18}], 0x1}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r3 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r3, &(0x7f0000836000/0x1000)=nil, 0x0) mbind(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x6, 0x2) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f00000003c0)={0x14, &(0x7f0000000080)={0x40, 0x22, 0x16, {0x16, 0x31, "a45b163378e1f1757a8cbf9a0ba0e7b529bcc5ed"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x415}}}, &(0x7f0000000380)={0x2c, &(0x7f0000000140)={0x40, 0xb, 0xbd, "c3e8a97f233719a3b5b374a88ca8ad165a1c603c9d468689f6a7bcf2b03f5ff906a6a9a42bb712462c79f4b2e4b16933f6143d6dacc2f69ad287ce50a9de5b063524bfe03249253ac036a104bc9f66e11c9c75ce17f4efdc843d7564a6a02ee813af7e79443b7349cea4d5c92fc56dbdda281fc39322358e896e3b2c961729cce2e29688d4280bf910790bbbf217cc8a521b46ee1d604aebd9804cf6d8a774b92ebee4ef18e49f446aff010b63913e301aed9b36ef40acbbdc8c2faac7"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000280)={0x0, 0x8, 0x1}, &(0x7f0000000300)={0xc0, 0x5, 0x3, "0950a3"}, &(0x7f0000000340)={0x40, 0x5, 0x5, "f626300bf2"}}) syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 56.668608272s ago: executing program 8 (id=81): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = memfd_create(&(0x7f0000000100)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe3\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0) ftruncate(r2, 0x80079a0) read$FUSE(r0, &(0x7f0000002400)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) splice(r2, 0x0, r1, 0x0, 0x100002, 0x9) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000040)=0x7) r5 = socket$pptp(0x18, 0x1, 0x2) dup3(r2, r5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f0000002c00)=[{{&(0x7f00000000c0)=@caif=@dbg, 0x80, &(0x7f0000000340)=[{&(0x7f0000000240)=""/104, 0x68}, {&(0x7f0000002cc0)=""/174, 0xae}, {&(0x7f0000000380)=""/181, 0xb5}, {&(0x7f00000002c0)=""/69, 0x45}], 0x4, &(0x7f0000000480)=""/58, 0x3a}}, {{&(0x7f00000004c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002780)=[{&(0x7f0000002d80)=""/86, 0x56}, {&(0x7f00000005c0)=""/151, 0x97}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/168, 0xa8}, {&(0x7f0000002740)=""/6, 0x6}], 0x6, &(0x7f0000002800)=""/223, 0xdf}, 0x3}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002900)=""/63, 0x3f}, {&(0x7f0000002940)=""/32, 0x20}, {&(0x7f0000002980)=""/8, 0x8}, {&(0x7f00000029c0)=""/189, 0xbd}, {&(0x7f0000002a80)=""/162, 0xa2}], 0x5, &(0x7f0000002bc0)=""/59, 0x3b}, 0x1}], 0x3, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x2000, 0x1}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ptrace$pokeuser(0x6, r3, 0x9, 0x9) r11 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r11, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000007e40)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb0800450000200000000080119078000000000000000000004e20000c9078c10b0000"], 0x0) 56.515234338s ago: executing program 2 (id=90): socket$inet6(0xa, 0x1, 0x84) close(0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) syz_extract_tcp_res(&(0x7f0000000080), 0x80000000, 0xd) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) syz_emit_ethernet(0x6e, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000003c0)="4c0000001200ff09ffd5773204ab0c3a150099a2835c5fd8dd9565075bff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a661", 0x45}, {&(0x7f0000000500)="f02ec70a0e8900b151d826894f", 0xd}], 0x2}, 0x0) syz_emit_ethernet(0xc6, 0x0, &(0x7f0000000540)={0x0, 0x2, [0x43b, 0xb10, 0x33e, 0x6ea]}) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x38, &(0x7f00000002c0)={0x0, 0x36a9, 0x8, 0x0, 0x55}, 0x0, 0x0, &(0x7f0000000340)) syz_open_dev$sndpcmp(0x0, 0x3, 0x480000) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_clone(0x18200000, 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000006c0)) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r3, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}}, 0x4084) ioctl$DRM_IOCTL_PANTHOR_BO_SYNC(0xffffffffffffffff, 0xc010644f, &(0x7f0000000740)={{0x18, 0x8, &(0x7f0000000680)=[{0x0, 0x1, 0xffffffffffffad09}, {0x0, 0x0, 0xd2, 0x100000000}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x1, 0x2, 0x100000000}, {0x0, 0x1, 0x5, 0x1}, {0x0, 0x0, 0x0, 0x455}, {0x0, 0x0, 0x3, 0xe}, {0x0, 0x1, 0xbcf3, 0x8000000000000001}]}}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 56.311377619s ago: executing program 9 (id=82): seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$packet(0x11, 0x2, 0x300) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='adfs\x00', 0x2000010, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0xd007) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x2, 0x0, 0x3}}, 0x26) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x30, r6, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) syz_io_uring_setup(0xf00, 0x0, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000300), 0x80) 35.444094675s ago: executing program 9 (id=91): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r1, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = getpgrp(0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c0015"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeec, 0x12, r5, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) 35.119874021s ago: executing program 39 (id=81): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = memfd_create(&(0x7f0000000100)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe3\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0) ftruncate(r2, 0x80079a0) read$FUSE(r0, &(0x7f0000002400)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) splice(r2, 0x0, r1, 0x0, 0x100002, 0x9) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000040)=0x7) r5 = socket$pptp(0x18, 0x1, 0x2) dup3(r2, r5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f0000002c00)=[{{&(0x7f00000000c0)=@caif=@dbg, 0x80, &(0x7f0000000340)=[{&(0x7f0000000240)=""/104, 0x68}, {&(0x7f0000002cc0)=""/174, 0xae}, {&(0x7f0000000380)=""/181, 0xb5}, {&(0x7f00000002c0)=""/69, 0x45}], 0x4, &(0x7f0000000480)=""/58, 0x3a}}, {{&(0x7f00000004c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002780)=[{&(0x7f0000002d80)=""/86, 0x56}, {&(0x7f00000005c0)=""/151, 0x97}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/168, 0xa8}, {&(0x7f0000002740)=""/6, 0x6}], 0x6, &(0x7f0000002800)=""/223, 0xdf}, 0x3}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002900)=""/63, 0x3f}, {&(0x7f0000002940)=""/32, 0x20}, {&(0x7f0000002980)=""/8, 0x8}, {&(0x7f00000029c0)=""/189, 0xbd}, {&(0x7f0000002a80)=""/162, 0xa2}], 0x5, &(0x7f0000002bc0)=""/59, 0x3b}, 0x1}], 0x3, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x2000, 0x1}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ptrace$pokeuser(0x6, r3, 0x9, 0x9) r11 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r11, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000007e40)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb0800450000200000000080119078000000000000000000004e20000c9078c10b0000"], 0x0) 34.951352086s ago: executing program 40 (id=90): socket$inet6(0xa, 0x1, 0x84) close(0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) syz_extract_tcp_res(&(0x7f0000000080), 0x80000000, 0xd) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) syz_emit_ethernet(0x6e, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000003c0)="4c0000001200ff09ffd5773204ab0c3a150099a2835c5fd8dd9565075bff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a661", 0x45}, {&(0x7f0000000500)="f02ec70a0e8900b151d826894f", 0xd}], 0x2}, 0x0) syz_emit_ethernet(0xc6, 0x0, &(0x7f0000000540)={0x0, 0x2, [0x43b, 0xb10, 0x33e, 0x6ea]}) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x38, &(0x7f00000002c0)={0x0, 0x36a9, 0x8, 0x0, 0x55}, 0x0, 0x0, &(0x7f0000000340)) syz_open_dev$sndpcmp(0x0, 0x3, 0x480000) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_clone(0x18200000, 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000006c0)) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r3, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}}, 0x4084) ioctl$DRM_IOCTL_PANTHOR_BO_SYNC(0xffffffffffffffff, 0xc010644f, &(0x7f0000000740)={{0x18, 0x8, &(0x7f0000000680)=[{0x0, 0x1, 0xffffffffffffad09}, {0x0, 0x0, 0xd2, 0x100000000}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x1, 0x2, 0x100000000}, {0x0, 0x1, 0x5, 0x1}, {0x0, 0x0, 0x0, 0x455}, {0x0, 0x0, 0x3, 0xe}, {0x0, 0x1, 0xbcf3, 0x8000000000000001}]}}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 0s ago: executing program 41 (id=91): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r1, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = getpgrp(0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c0015"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeec, 0x12, r5, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.10' (ED25519) to the list of known hosts. [ 59.799119][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 59.799133][ T30] audit: type=1400 audit(1784794781.891:129): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 59.828900][ T30] audit: type=1400 audit(1784794781.921:130): avc: denied { mount } for pid=5596 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.831810][ T5596] cgroup: Unknown subsys name 'net' [ 59.858099][ T30] audit: type=1400 audit(1784794781.951:131): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.998333][ T5596] cgroup: Unknown subsys name 'cpuset' [ 60.005883][ T5596] cgroup: Unknown subsys name 'rlimit' [ 60.124159][ T30] audit: type=1400 audit(1784794782.211:132): avc: denied { setattr } for pid=5596 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.147570][ T30] audit: type=1400 audit(1784794782.211:133): avc: denied { create } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.192750][ T30] audit: type=1400 audit(1784794782.211:134): avc: denied { write } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.213293][ T30] audit: type=1400 audit(1784794782.211:135): avc: denied { read } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.233711][ T30] audit: type=1400 audit(1784794782.231:136): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 60.254437][ T5599] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 60.259865][ T30] audit: type=1400 audit(1784794782.231:137): avc: denied { mount } for pid=5596 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 60.290554][ T30] audit: type=1400 audit(1784794782.361:138): avc: denied { relabelto } for pid=5599 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 61.205198][ T5596] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 65.595264][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 65.595280][ T30] audit: type=1400 audit(1784794787.681:143): avc: denied { create } for pid=5608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.662616][ T4927] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.670616][ T30] audit: type=1400 audit(1784794787.681:144): avc: denied { read write } for pid=5608 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 65.694780][ T30] audit: type=1400 audit(1784794787.681:145): avc: denied { open } for pid=5608 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 65.719390][ T5611] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.727133][ T5611] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.734989][ T5614] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.739883][ T30] audit: type=1400 audit(1784794787.731:146): avc: denied { ioctl } for pid=5608 comm="syz-executor" path="socket:[5265]" dev="sockfs" ino=5265 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.742917][ T5614] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.778068][ T5614] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.792298][ T5621] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.799663][ T5621] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.803142][ T5624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.807933][ T5621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.815107][ T5624] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 65.821832][ T5621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.829858][ T5624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.837790][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.843662][ T5624] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 65.850565][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.857549][ T5624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 65.863902][ T5621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.872461][ T5624] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 65.885019][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.887068][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.893670][ T5624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.905560][ T49] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.906199][ T5624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.914252][ T49] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.926535][ T30] audit: type=1400 audit(1784794787.991:147): avc: denied { read } for pid=5608 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 65.927662][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.961709][ T5624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 65.977723][ T30] audit: type=1400 audit(1784794787.991:148): avc: denied { open } for pid=5608 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 66.001383][ T30] audit: type=1400 audit(1784794787.991:149): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 66.026316][ T30] audit: type=1400 audit(1784794788.051:150): avc: denied { module_request } for pid=5608 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 66.084072][ T30] audit: type=1400 audit(1784794788.171:151): avc: denied { sys_module } for pid=5619 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 67.190752][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.198851][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.206136][ T5618] bridge_slave_0: entered allmulticast mode [ 67.212803][ T5618] bridge_slave_0: entered promiscuous mode [ 67.257032][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.264503][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.271684][ T5618] bridge_slave_1: entered allmulticast mode [ 67.278443][ T5618] bridge_slave_1: entered promiscuous mode [ 67.318073][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.325209][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.332383][ T5619] bridge_slave_0: entered allmulticast mode [ 67.339049][ T5619] bridge_slave_0: entered promiscuous mode [ 67.366751][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.373880][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.381260][ T5619] bridge_slave_1: entered allmulticast mode [ 67.387941][ T5619] bridge_slave_1: entered promiscuous mode [ 67.405563][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.438055][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.457409][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.464565][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.472444][ T5610] bridge_slave_0: entered allmulticast mode [ 67.479268][ T5610] bridge_slave_0: entered promiscuous mode [ 67.505113][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.514495][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.521656][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.529210][ T5610] bridge_slave_1: entered allmulticast mode [ 67.536014][ T5610] bridge_slave_1: entered promiscuous mode [ 67.559619][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.574565][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.581772][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.588915][ T5616] bridge_slave_0: entered allmulticast mode [ 67.595609][ T5616] bridge_slave_0: entered promiscuous mode [ 67.603682][ T5618] team0: Port device team_slave_0 added [ 67.628003][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.635149][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.642276][ T5616] bridge_slave_1: entered allmulticast mode [ 67.649165][ T5616] bridge_slave_1: entered promiscuous mode [ 67.657788][ T5618] team0: Port device team_slave_1 added [ 67.677664][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.700252][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.707432][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.714519][ T5608] bridge_slave_0: entered allmulticast mode [ 67.721428][ T5608] bridge_slave_0: entered promiscuous mode [ 67.729628][ T5619] team0: Port device team_slave_0 added [ 67.737003][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.759725][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.766997][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.774100][ T5608] bridge_slave_1: entered allmulticast mode [ 67.781010][ T5608] bridge_slave_1: entered promiscuous mode [ 67.788802][ T5619] team0: Port device team_slave_1 added [ 67.802411][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.812250][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.819402][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.845524][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.890501][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.900060][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.907590][ T5625] Bluetooth: hci0: command tx timeout [ 67.914017][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.940090][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.952659][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.969625][ T5610] team0: Port device team_slave_0 added [ 67.986076][ T5625] Bluetooth: hci2: command tx timeout [ 67.986326][ T5624] Bluetooth: hci3: command tx timeout [ 67.997248][ T5625] Bluetooth: hci1: command tx timeout [ 68.008915][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.018633][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.025573][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.051756][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.063993][ T5610] team0: Port device team_slave_1 added [ 68.070549][ T5625] Bluetooth: hci4: command tx timeout [ 68.087241][ T5616] team0: Port device team_slave_0 added [ 68.099848][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.106862][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.133035][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.160614][ T5616] team0: Port device team_slave_1 added [ 68.178087][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.185080][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.211131][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.235561][ T5608] team0: Port device team_slave_0 added [ 68.243252][ T5608] team0: Port device team_slave_1 added [ 68.249966][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.257105][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.283001][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.297587][ T5618] hsr_slave_0: entered promiscuous mode [ 68.303698][ T5618] hsr_slave_1: entered promiscuous mode [ 68.336547][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.343514][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.369454][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.387336][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.394302][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.420412][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.433206][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.440210][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.466176][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.487505][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.494570][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.520843][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.570353][ T5619] hsr_slave_0: entered promiscuous mode [ 68.576586][ T5619] hsr_slave_1: entered promiscuous mode [ 68.582877][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 68.588790][ T5619] Cannot create hsr debugfs directory [ 68.605322][ T5610] hsr_slave_0: entered promiscuous mode [ 68.611415][ T5610] hsr_slave_1: entered promiscuous mode [ 68.617471][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 68.623181][ T5610] Cannot create hsr debugfs directory [ 68.652696][ T5608] hsr_slave_0: entered promiscuous mode [ 68.658896][ T5608] hsr_slave_1: entered promiscuous mode [ 68.664814][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 68.670647][ T5608] Cannot create hsr debugfs directory [ 68.723707][ T5616] hsr_slave_0: entered promiscuous mode [ 68.729830][ T5616] hsr_slave_1: entered promiscuous mode [ 68.735695][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 68.742111][ T5616] Cannot create hsr debugfs directory [ 69.061211][ T5618] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.073618][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.082932][ T5618] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.091487][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.099687][ T5618] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.109360][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.123048][ T5618] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.132477][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.176062][ T5616] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.185451][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.194309][ T5616] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.204026][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.216351][ T5616] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.225363][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.233091][ T5616] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.242694][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.314049][ T5610] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.324095][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.332811][ T5610] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.342968][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.351646][ T5610] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.360593][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.368340][ T5610] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.377245][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.461156][ T5619] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.471869][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.487164][ T5619] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.496606][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.504459][ T5619] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.516058][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.532314][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.539771][ T5619] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.549742][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.615694][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.628363][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.651679][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.659053][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.670346][ T5608] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.679486][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.687320][ T5608] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.695760][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.704569][ T5608] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.713329][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.729982][ T5608] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.738722][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.754669][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.761763][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.780157][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.810626][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.817761][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.834534][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.841627][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.883582][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.914832][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.950064][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.957234][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.980260][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.987438][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.996890][ T5625] Bluetooth: hci0: command tx timeout [ 70.030302][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.065900][ T5625] Bluetooth: hci3: command tx timeout [ 70.066111][ T5624] Bluetooth: hci1: command tx timeout [ 70.071474][ T5614] Bluetooth: hci2: command tx timeout [ 70.110215][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.145981][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.146314][ T5614] Bluetooth: hci4: command tx timeout [ 70.153139][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.194668][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.212972][ T1038] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.220122][ T1038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.285599][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.344755][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.351877][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.382647][ T1038] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.389830][ T1038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.783282][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.874002][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.926431][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.951261][ T5618] veth0_vlan: entered promiscuous mode [ 70.994843][ T5618] veth1_vlan: entered promiscuous mode [ 71.066314][ T5610] veth0_vlan: entered promiscuous mode [ 71.115753][ T5610] veth1_vlan: entered promiscuous mode [ 71.148717][ T5618] veth0_macvtap: entered promiscuous mode [ 71.170473][ T5618] veth1_macvtap: entered promiscuous mode [ 71.201196][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.276690][ T5610] veth0_macvtap: entered promiscuous mode [ 71.291452][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.301266][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.323989][ T5610] veth1_macvtap: entered promiscuous mode [ 71.336257][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.359967][ T3404] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.370273][ T3404] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.390276][ T3404] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.408633][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.420292][ T3404] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.438984][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.464030][ T5619] veth0_vlan: entered promiscuous mode [ 71.478496][ T3404] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.487457][ T3404] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.508989][ T3404] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.518477][ T3404] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.532761][ T5619] veth1_vlan: entered promiscuous mode [ 71.560393][ T5616] veth0_vlan: entered promiscuous mode [ 71.572626][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.582010][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.606881][ T5608] veth0_vlan: entered promiscuous mode [ 71.624654][ T5616] veth1_vlan: entered promiscuous mode [ 71.648300][ T3357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.658396][ T3357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.680860][ T5608] veth1_vlan: entered promiscuous mode [ 71.688216][ T30] audit: type=1400 audit(1784794793.781:152): avc: denied { mounton } for pid=5618 comm="syz-executor" path="/root/syzkaller.3SUmeB/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 71.698741][ T3357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.735525][ T30] audit: type=1400 audit(1784794793.781:153): avc: denied { mount } for pid=5618 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 71.736284][ T3357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.768188][ T30] audit: type=1400 audit(1784794793.811:154): avc: denied { mounton } for pid=5618 comm="syz-executor" path="/root/syzkaller.3SUmeB/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 71.789784][ T5608] veth0_macvtap: entered promiscuous mode [ 71.803849][ T30] audit: type=1400 audit(1784794793.811:155): avc: denied { mount } for pid=5618 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 71.828740][ T30] audit: type=1400 audit(1784794793.811:156): avc: denied { mounton } for pid=5618 comm="syz-executor" path="/root/syzkaller.3SUmeB/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 71.831218][ T5616] veth0_macvtap: entered promiscuous mode [ 71.856265][ T30] audit: type=1400 audit(1784794793.811:157): avc: denied { mounton } for pid=5618 comm="syz-executor" path="/root/syzkaller.3SUmeB/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 71.890443][ T5619] veth0_macvtap: entered promiscuous mode [ 71.890719][ T30] audit: type=1400 audit(1784794793.821:158): avc: denied { unmount } for pid=5618 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 71.900277][ T5619] veth1_macvtap: entered promiscuous mode [ 71.921935][ T30] audit: type=1400 audit(1784794793.851:159): avc: denied { mounton } for pid=5618 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 71.946488][ T30] audit: type=1400 audit(1784794793.851:160): avc: denied { mount } for pid=5618 comm="syz-executor" name="/" dev="gadgetfs" ino=7696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 71.970800][ T30] audit: type=1400 audit(1784794793.851:161): avc: denied { mount } for pid=5618 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 71.971439][ T5618] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 72.017274][ T5616] veth1_macvtap: entered promiscuous mode [ 72.032474][ T5608] veth1_macvtap: entered promiscuous mode [ 72.056720][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.061118][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.079375][ T5614] Bluetooth: hci0: command tx timeout [ 72.079585][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.110790][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.145278][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.153356][ T5614] Bluetooth: hci2: command tx timeout [ 72.157794][ T5625] Bluetooth: hci3: command tx timeout [ 72.160563][ T5614] Bluetooth: hci1: command tx timeout [ 72.174361][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.192321][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.209450][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.216845][ T3357] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.228997][ T5614] Bluetooth: hci4: command tx timeout [ 72.261159][ T3357] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.270154][ T3357] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.290475][ T3357] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.299900][ T3357] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.320487][ T3357] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.329540][ T3357] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.359877][ T3357] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.374029][ T3357] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.403241][ T3357] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.420670][ T3357] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.451802][ T3357] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.507115][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.515053][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.542262][ T1038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.559959][ T1038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.576806][ T5816] syz.0.7 uses obsolete (PF_INET,SOCK_PACKET) [ 72.608948][ T1038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.621802][ T1038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.651184][ T3404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.663507][ T3404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.685120][ T3404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.702779][ T3404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.787999][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.820844][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.920533][ T5819] FAULT_INJECTION: forcing a failure. [ 72.920533][ T5819] name failslab, interval 1, probability 0, space 0, times 1 [ 72.992820][ T5819] CPU: 1 UID: 0 PID: 5819 Comm: syz.2.8 Not tainted syzkaller #0 PREEMPT(full) [ 72.992844][ T5819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 72.992853][ T5819] Call Trace: [ 72.992859][ T5819] [ 72.992866][ T5819] dump_stack_lvl+0x100/0x190 [ 72.992894][ T5819] should_fail_ex.cold+0x5/0xa [ 72.992917][ T5819] should_failslab+0xc2/0x120 [ 72.992940][ T5819] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 72.992961][ T5819] ? alloc_inode+0x183/0x250 [ 72.992988][ T5819] alloc_inode+0x183/0x250 [ 72.993010][ T5819] iget_locked+0x1d9/0x6d0 [ 72.993032][ T5819] ? __lock_acquire+0xd5b/0x1a40 [ 72.993052][ T5819] ? __pfx_iget_locked+0x10/0x10 [ 72.993082][ T5819] kernfs_get_inode+0x46/0x470 [ 72.993117][ T5819] cgroup_may_write+0x89/0x120 [ 72.993143][ T5819] cgroup_attach_permissions+0x1b8/0x5e0 [ 72.993176][ T5819] __cgroup_procs_write+0x2d4/0x730 [ 72.993196][ T5819] ? __pfx___cgroup_procs_write+0x10/0x10 [ 72.993221][ T5819] cgroup_procs_write+0x26/0x60 [ 72.993239][ T5819] cgroup_file_write+0x1e6/0x8a0 [ 72.993261][ T5819] ? __pfx_cgroup_procs_write+0x10/0x10 [ 72.993279][ T5819] ? __pfx_cgroup_file_write+0x10/0x10 [ 72.993309][ T5819] kernfs_fop_write_iter+0x3e0/0x5f0 [ 72.993329][ T5819] ? __pfx_cgroup_file_write+0x10/0x10 [ 72.993354][ T5819] vfs_write+0x6ac/0x1050 [ 72.993380][ T5819] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 72.993404][ T5819] ? __pfx_vfs_write+0x10/0x10 [ 72.993449][ T5819] ksys_write+0x12a/0x250 [ 72.993474][ T5819] ? __pfx_ksys_write+0x10/0x10 [ 72.993506][ T5819] do_syscall_64+0x115/0x870 [ 72.993523][ T5819] ? clear_bhb_loop+0x40/0x90 [ 72.993544][ T5819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.993561][ T5819] RIP: 0033:0x7f56fd99de99 [ 72.993577][ T5819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.993592][ T5819] RSP: 002b:00007f56fe828028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 72.993609][ T5819] RAX: ffffffffffffffda RBX: 00007f56fdc25fa0 RCX: 00007f56fd99de99 [ 72.993619][ T5819] RDX: 0000000000000012 RSI: 0000200000000080 RDI: 0000000000000008 [ 72.993629][ T5819] RBP: 00007f56fe828090 R08: 0000000000000000 R09: 0000000000000000 [ 72.993638][ T5819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.993647][ T5819] R13: 00007f56fdc26038 R14: 00007f56fdc25fa0 R15: 00007ffc8faf95c8 [ 72.993670][ T5819] [ 73.298046][ T5825] bridge1: entered promiscuous mode [ 73.397894][ T5830] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5'. [ 73.995356][ T5849] Bluetooth: hci5: Frame reassembly failed (-84) [ 74.027414][ T3404] Bluetooth: hci5: Frame reassembly failed (-84) [ 74.146788][ T5625] Bluetooth: hci0: command tx timeout [ 74.229784][ T5624] Bluetooth: hci3: command tx timeout [ 74.239990][ T5611] Bluetooth: hci2: command tx timeout [ 74.245501][ T5625] Bluetooth: hci1: command tx timeout [ 74.320874][ T5625] Bluetooth: hci4: command tx timeout [ 74.889385][ T5867] fuse: Unknown parameter 'user_i00000000000000000000' [ 74.936317][ T5868] ======================================================= [ 74.936317][ T5868] WARNING: The mand mount option has been deprecated and [ 74.936317][ T5868] and is ignored by this kernel. Remove the mand [ 74.936317][ T5868] option from the mount to silence this warning. [ 74.936317][ T5868] ======================================================= [ 74.978962][ T5867] FAULT_INJECTION: forcing a failure. [ 74.978962][ T5867] name failslab, interval 1, probability 0, space 0, times 0 [ 74.993563][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 75.027070][ T5867] CPU: 0 UID: 0 PID: 5867 Comm: syz.3.20 Not tainted syzkaller #0 PREEMPT(full) [ 75.027095][ T5867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 75.027105][ T5867] Call Trace: [ 75.027110][ T5867] [ 75.027118][ T5867] dump_stack_lvl+0x100/0x190 [ 75.027144][ T5867] should_fail_ex.cold+0x5/0xa [ 75.027167][ T5867] should_failslab+0xc2/0x120 [ 75.027189][ T5867] __kmalloc_noprof+0xfc/0x820 [ 75.027206][ T5867] ? rcu_is_watching+0x12/0xc0 [ 75.027232][ T5867] ? tomoyo_realpath_from_path+0xb6/0x690 [ 75.027261][ T5867] tomoyo_realpath_from_path+0xb6/0x690 [ 75.027293][ T5867] tomoyo_path_perm+0x276/0x460 [ 75.027314][ T5867] ? tomoyo_path_perm+0x262/0x460 [ 75.027337][ T5867] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 75.027359][ T5867] ? __pfx_stack_trace_save+0x10/0x10 [ 75.027376][ T5867] ? stack_depot_save_flags+0x27/0x9d0 [ 75.027406][ T5867] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 75.027424][ T5867] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 75.027453][ T5867] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 75.027494][ T5867] tomoyo_sb_umount+0x8c/0xd0 [ 75.027512][ T5867] ? __pfx_tomoyo_sb_umount+0x10/0x10 [ 75.027534][ T5867] security_sb_umount+0xc4/0x210 [ 75.027558][ T5867] path_umount+0x328/0x1260 [ 75.027578][ T5867] ? putname+0xb1/0x110 [ 75.027595][ T5867] ? __pfx_path_umount+0x10/0x10 [ 75.027612][ T5867] ? putname+0xb6/0x110 [ 75.027629][ T5867] __x64_sys_umount+0x16a/0x1a0 [ 75.027647][ T5867] ? __pfx___x64_sys_umount+0x10/0x10 [ 75.027669][ T5867] do_syscall_64+0x115/0x870 [ 75.027684][ T5867] ? clear_bhb_loop+0x40/0x90 [ 75.027703][ T5867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.027719][ T5867] RIP: 0033:0x7f0aedb9de99 [ 75.027733][ T5867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.027746][ T5867] RSP: 002b:00007f0aee97f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 75.027760][ T5867] RAX: ffffffffffffffda RBX: 00007f0aede25fa0 RCX: 00007f0aedb9de99 [ 75.027771][ T5867] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00002000000000c0 [ 75.027779][ T5867] RBP: 00007f0aee97f090 R08: 0000000000000000 R09: 0000000000000000 [ 75.027787][ T5867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.027794][ T5867] R13: 00007f0aede26038 R14: 00007f0aede25fa0 R15: 00007ffcc2c6e5f8 [ 75.027814][ T5867] [ 75.028221][ T5867] ERROR: Out of memory at tomoyo_realpath_from_path. [ 75.307260][ T24] usb 3-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 75.340082][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.375885][ T24] usb 3-1: Product: syz [ 75.388604][ T24] usb 3-1: Manufacturer: syz [ 75.406633][ T24] usb 3-1: SerialNumber: syz [ 75.489438][ T5871] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 75.674333][ T5862] process 'syz.2.18' launched './file2' with NULL argv: empty string added [ 76.069076][ T5625] Bluetooth: hci5: command 0xfc11 tx timeout [ 76.076498][ T5614] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 78.155419][ T24] usb 3-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 78.165941][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 78.165955][ T30] audit: type=1400 audit(1784794800.201:235): avc: denied { write } for pid=5882 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.176447][ T24] usb 3-1: 1:1 : sample bitwidth 9 in over sample bytes 1 [ 78.214120][ T24] usb 3-1: found format II with max.bitrate = 44931, frame size=8 [ 78.222437][ T24] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 78.283170][ T24] usb 3-1: USB disconnect, device number 2 [ 78.293222][ T5890] netlink: 'syz.4.24': attribute type 8 has an invalid length. [ 78.359948][ T30] audit: type=1400 audit(1784794800.381:236): avc: denied { ioctl } for pid=5889 comm="syz.4.24" path="socket:[9352]" dev="sockfs" ino=9352 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.471890][ T30] audit: type=1400 audit(1784794800.381:237): avc: denied { accept } for pid=5889 comm="syz.4.24" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.503243][ T5894] xt_bpf: check failed: parse error [ 78.530772][ T30] audit: type=1400 audit(1784794800.541:238): avc: denied { block_suspend } for pid=5885 comm="syz.1.25" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 78.744619][ T5888] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 78.759459][ T5888] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 78.769044][ T5888] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 78.776665][ T5888] UDF-fs: Scanning with blocksize 512 failed [ 78.784370][ T5888] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 78.794066][ T5888] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 78.803649][ T5888] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 78.811295][ T5888] UDF-fs: Scanning with blocksize 1024 failed [ 78.817695][ T5888] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 78.827318][ T5888] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 78.836885][ T5888] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 78.844494][ T5888] UDF-fs: Scanning with blocksize 2048 failed [ 78.850830][ T5888] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 78.861206][ T5888] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 78.870771][ T5888] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 78.878398][ T5888] UDF-fs: Scanning with blocksize 4096 failed [ 78.884987][ T5888] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 78.899029][ T30] audit: type=1400 audit(1784794800.831:239): avc: denied { mounton } for pid=5885 comm="syz.1.25" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 79.026355][ T5722] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 79.096780][ T30] audit: type=1400 audit(1784794801.181:240): avc: denied { accept } for pid=5900 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 79.169905][ T30] audit: type=1400 audit(1784794801.191:241): avc: denied { write } for pid=5900 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 79.189805][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 79.226103][ T5722] usb 1-1: config 0 has no interfaces? [ 79.242431][ T5722] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 79.256023][ T30] audit: type=1400 audit(1784794801.211:242): avc: denied { read } for pid=5900 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 79.289736][ T5722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.308187][ T5722] usb 1-1: Product: syz [ 79.317218][ T5722] usb 1-1: Manufacturer: syz [ 79.321883][ T30] audit: type=1400 audit(1784794801.241:243): avc: denied { map } for pid=5902 comm="syz.4.30" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9375 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 79.350849][ T5722] usb 1-1: SerialNumber: syz [ 79.369517][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.386966][ T5722] usb 1-1: config 0 descriptor?? [ 79.401321][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.414942][ T30] audit: type=1400 audit(1784794801.241:244): avc: denied { read write } for pid=5902 comm="syz.4.30" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9375 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 79.449473][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 79.472178][ T5909] syz_tun: refused to change device tx_queue_len [ 79.485951][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 79.512968][ T5614] Bluetooth: hci3: command 0x0406 tx timeout [ 79.518986][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.536547][ T24] usb 3-1: config 0 descriptor?? [ 79.648288][ T5909] capability: warning: `syz.1.32' uses 32-bit capabilities (legacy support in use) [ 80.093635][ T24] plantronics 0003:047F:FFFF.0001: item 0 4 0 9 parsing failed [ 80.104831][ T24] plantronics 0003:047F:FFFF.0001: parse failed [ 80.112383][ T24] plantronics 0003:047F:FFFF.0001: probe with driver plantronics failed with error -22 [ 80.245642][ T5731] usb 1-1: USB disconnect, device number 2 [ 80.298461][ T5894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.330981][ T5894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.537187][ T5739] usb 3-1: USB disconnect, device number 3 [ 80.760118][ T5731] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 81.146649][ T5731] usb 1-1: Using ep0 maxpacket: 16 [ 81.258946][ T10] cfg80211: failed to load regulatory.db [ 81.280028][ T5731] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 81.335245][ T5731] usb 1-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 81.381579][ T5731] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.426301][ T5731] usb 1-1: config 0 descriptor?? [ 81.953774][ T5935] netlink: 64 bytes leftover after parsing attributes in process `syz.0.35'. [ 82.021310][ T5930] mmap: syz.1.38 (5930): VmData 37777408 exceed data ulimit 7. Update limits or use boot option ignore_rlimit_data. [ 82.660566][ T5940] syzkaller0: entered promiscuous mode [ 82.682807][ T5940] syzkaller0: entered allmulticast mode [ 83.839091][ T5947] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ' [ 83.844674][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 83.844688][ T30] audit: type=1400 audit(1784794805.931:267): avc: denied { mounton } for pid=5944 comm="syz.4.41" path="/7/file0" dev="tmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 84.437648][ T5951] Zero length message leads to an empty skb [ 84.444096][ T5951] netlink: 92 bytes leftover after parsing attributes in process `syz.3.43'. [ 85.220509][ T5952] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=5952 comm=syz.3.43 [ 85.334815][ T5942] fuse: Unknown parameter 'ÿÿ0x0000000000000017000000000000000000000000000000000000000000000000000000000000027' [ 85.388641][ T5731] usbhid 1-1:0.0: can't add hid device: -71 [ 85.428477][ T5731] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 85.455515][ T5731] usb 1-1: USB disconnect, device number 3 [ 85.614201][ T5739] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 86.486969][ T30] audit: type=1400 audit(1784794808.571:268): avc: denied { mounton } for pid=5956 comm="syz.0.45" path="/9/file0" dev="tmpfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 86.977421][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 87.176547][ T5739] usb 4-1: Using ep0 maxpacket: 32 [ 87.211628][ T5739] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 87.230141][ T30] audit: type=1400 audit(1784794808.571:269): avc: denied { watch watch_reads } for pid=5956 comm="syz.0.45" path="/9" dev="tmpfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 87.307335][ T5739] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 87.370674][ T5739] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 87.394186][ T30] audit: type=1400 audit(1784794809.411:270): avc: denied { create } for pid=5967 comm="syz.0.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 87.447869][ T5739] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 87.481769][ T5739] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 87.503058][ T5973] gretap1: entered promiscuous mode [ 87.511174][ T5739] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.545523][ T5739] usb 4-1: Product: syz [ 87.565805][ T5739] usb 4-1: Manufacturer: syz [ 87.590565][ T5739] usb 4-1: SerialNumber: syz [ 87.668109][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 87.679181][ T5803] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 87.754189][ T5739] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input6 [ 87.789090][ T30] audit: type=1400 audit(1784794809.871:271): avc: denied { create } for pid=5974 comm="syz.1.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 87.856366][ T5803] usb 1-1: Using ep0 maxpacket: 8 [ 87.913162][ T5803] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.966821][ T30] audit: type=1400 audit(1784794809.881:272): avc: denied { create } for pid=5975 comm="syz.4.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 87.987465][ T5739] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 88.017203][ T5803] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 88.040632][ T5739] (id 0x00) [ 88.070175][ T5803] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 88.095943][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 88.106842][ T30] audit: type=1400 audit(1784794809.911:273): avc: denied { create } for pid=5975 comm="syz.4.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.138150][ T5803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.177585][ T5803] usb 1-1: Product: syz [ 88.199486][ T5803] usb 1-1: Manufacturer: syz [ 88.230923][ T30] audit: type=1400 audit(1784794809.911:274): avc: denied { ioctl } for pid=5975 comm="syz.4.50" path="socket:[10266]" dev="sockfs" ino=10266 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.264310][ T5803] usb 1-1: SerialNumber: syz [ 88.296353][ T5803] usb 1-1: config 0 descriptor?? [ 88.305875][ T5739] rc_core: IR keymap rc-imon-pad not found [ 88.319581][ T5739] Registered IR keymap rc-empty [ 88.337742][ T5988] netlink: 'syz.4.53': attribute type 4 has an invalid length. [ 88.356181][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 88.361509][ T5739] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 88.393016][ T10] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 88.405025][ T30] audit: type=1400 audit(1784794809.981:275): avc: denied { write } for pid=5954 comm="syz.3.44" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 88.436826][ T5739] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 88.457670][ T10] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 88.500762][ T5739] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 88.524651][ T10] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 88.546383][ T30] audit: type=1400 audit(1784794810.001:276): avc: denied { ioctl } for pid=5954 comm="syz.3.44" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x643a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 88.593889][ T10] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 88.783584][ T5739] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input7 [ 88.822253][ T10] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 88.845712][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.884869][ T5739] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:2> initialized [ 88.905313][ T10] usb 3-1: Product: syz [ 88.922977][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 88.922993][ T30] audit: type=1400 audit(1784794811.011:280): avc: denied { create } for pid=5967 comm="syz.0.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 88.956321][ T10] usb 3-1: Manufacturer: syz [ 88.979943][ T10] usb 3-1: SerialNumber: syz [ 89.068544][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 89.087193][ T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input8 [ 89.099383][ T5803] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 89.295876][ T5803] usb 5-1: Using ep0 maxpacket: 8 [ 89.303105][ T10] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 89.351369][ T5803] usb 5-1: config 1 has an invalid interface number: 115 but max is 6 [ 89.380393][ T10] (id 0x00) [ 89.415851][ T5803] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 89.496152][ T5803] usb 5-1: config 1 has no interface number 0 [ 89.531306][ T5803] usb 5-1: too many endpoints for config 1 interface 115 altsetting 97: 99, using maximum allowed: 30 [ 89.603599][ T5803] usb 5-1: config 1 interface 115 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 99 [ 89.655859][ T10] rc_core: IR keymap rc-imon-pad not found [ 89.668006][ T5803] usb 5-1: config 1 interface 115 has no altsetting 0 [ 89.682207][ T10] Registered IR keymap rc-empty [ 89.703438][ T10] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 89.726380][ T5803] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 89.759695][ T5803] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 89.769718][ T10] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 89.806879][ T5803] usb 5-1: Product: syz [ 89.822538][ T5803] usb 5-1: Manufacturer: syz [ 89.836781][ T10] rc rc1: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc1 [ 89.872680][ T5803] usb 5-1: SerialNumber: syz [ 89.924977][ T10] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc1/input9 [ 90.014340][ T10] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:4> initialized [ 90.060212][ T5739] usb 4-1: USB disconnect, device number 2 [ 90.388573][ T30] audit: type=1400 audit(1784794812.481:281): avc: denied { create } for pid=5996 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.715788][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 90.865788][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 90.945795][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 90.965786][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 91.135790][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 91.165787][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 91.175786][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 91.215791][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 91.315780][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.244991][ C0] sched: DL replenish lagged too much [ 101.927679][ T5803] usb 5-1: palm_os_3_probe - error -71 getting connection information [ 102.319358][ T5803] visor 5-1:1.115: probe with driver visor failed with error -71 [ 102.358006][ T187] usb 3-1: USB disconnect, device number 4 [ 102.476174][ T5803] usb 5-1: USB disconnect, device number 2 [ 103.988902][ T30] audit: type=1400 audit(1784794826.081:282): avc: denied { create } for pid=6009 comm="syz.3.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 104.496162][ T6012] Bluetooth: MGMT ver 1.23 [ 104.984633][ T30] audit: type=1400 audit(1784794826.491:283): avc: denied { bind } for pid=6010 comm="syz.2.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 105.005204][ T30] audit: type=1400 audit(1784794826.591:284): avc: denied { write } for pid=6010 comm="syz.2.56" path="socket:[10411]" dev="sockfs" ino=10411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 105.946306][ T5614] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 105.956794][ T5614] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 105.965435][ T5614] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 105.978577][ T5614] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 105.986373][ T5614] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 106.495386][ T5614] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 106.506716][ T5614] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 106.514655][ T5614] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 106.522502][ T5614] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 106.530153][ T5614] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 106.751626][ T5625] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 106.761026][ T5625] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 106.775219][ T5625] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 106.786817][ T5625] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 106.794934][ T5625] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 108.012564][ T6051] tipc: Started in network mode [ 108.034099][ T6051] tipc: Node identity cee9c6dea1e5, cluster identity 4711 [ 108.050641][ T6051] tipc: Enabled bearer , priority 0 [ 108.081022][ T6052] syzkaller0: entered promiscuous mode [ 108.114864][ T6052] syzkaller0: entered allmulticast mode [ 108.145891][ T5625] Bluetooth: hci5: command tx timeout [ 108.561909][ T6052] syzkaller0: mtu greater than device maximum [ 108.626605][ T5625] Bluetooth: hci6: command tx timeout [ 108.664869][ T6050] tipc: Resetting bearer [ 108.754575][ T6050] tipc: Disabling bearer [ 108.865854][ T5625] Bluetooth: hci7: command tx timeout [ 109.673283][ T6026] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.684437][ T6026] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.694232][ T6026] bridge_slave_0: entered allmulticast mode [ 109.702717][ T6026] bridge_slave_0: entered promiscuous mode [ 109.734161][ T6026] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.743893][ T6026] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.756722][ T6026] bridge_slave_1: entered allmulticast mode [ 109.764094][ T6026] bridge_slave_1: entered promiscuous mode [ 109.777167][ T6022] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.784591][ T6022] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.797249][ T6022] bridge_slave_0: entered allmulticast mode [ 109.804712][ T6022] bridge_slave_0: entered promiscuous mode [ 109.837115][ T6022] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.844995][ T6022] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.856884][ T6022] bridge_slave_1: entered allmulticast mode [ 109.864463][ T6022] bridge_slave_1: entered promiscuous mode [ 109.922218][ T6026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.957205][ T6026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.972986][ T6022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.985422][ T6022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.995342][ T6029] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.003024][ T6029] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.010736][ T6029] bridge_slave_0: entered allmulticast mode [ 110.025336][ T6029] bridge_slave_0: entered promiscuous mode [ 110.055459][ T6029] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.062824][ T6029] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.072353][ T6029] bridge_slave_1: entered allmulticast mode [ 110.083154][ T6029] bridge_slave_1: entered promiscuous mode [ 110.134338][ T6026] team0: Port device team_slave_0 added [ 110.151239][ T6022] team0: Port device team_slave_0 added [ 110.172317][ T6026] team0: Port device team_slave_1 added [ 110.182076][ T6022] team0: Port device team_slave_1 added [ 110.205493][ T6029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.226038][ T5625] Bluetooth: hci5: command tx timeout [ 110.263959][ T6029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.363830][ T6026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.377661][ T6026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.405098][ T6026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.418995][ T6026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.428024][ T6026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.455289][ T6026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.476225][ T6022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.483419][ T6022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.511972][ T6022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.525343][ T6022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.534381][ T6022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.562317][ T6022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.645150][ T6029] team0: Port device team_slave_0 added [ 110.678438][ T6029] team0: Port device team_slave_1 added [ 110.690507][ T6026] hsr_slave_0: entered promiscuous mode [ 110.702165][ T6026] hsr_slave_1: entered promiscuous mode [ 110.708828][ T5625] Bluetooth: hci6: command tx timeout [ 110.723062][ T6026] debugfs: 'hsr0' already exists in 'hsr' [ 110.728997][ T6026] Cannot create hsr debugfs directory [ 110.743101][ T6022] hsr_slave_0: entered promiscuous mode [ 110.750105][ T6022] hsr_slave_1: entered promiscuous mode [ 110.756572][ T6022] debugfs: 'hsr0' already exists in 'hsr' [ 110.762797][ T6022] Cannot create hsr debugfs directory [ 110.824134][ T6029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.831558][ T6029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.860322][ T6029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.898692][ T6029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.905746][ T6029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.938588][ T6029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.951003][ T5625] Bluetooth: hci7: command tx timeout [ 111.068925][ T6029] hsr_slave_0: entered promiscuous mode [ 111.078809][ T6029] hsr_slave_1: entered promiscuous mode [ 111.085040][ T6029] debugfs: 'hsr0' already exists in 'hsr' [ 111.091378][ T6029] Cannot create hsr debugfs directory [ 111.476196][ T6026] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 111.508295][ T6026] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 111.531689][ T6026] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 111.548538][ T6026] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 111.574819][ T6026] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 111.594579][ T6026] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 111.624517][ T6026] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 111.642261][ T6026] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 111.714953][ T6022] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 111.744840][ T6022] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 111.764051][ T6022] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 111.787529][ T6022] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 111.809602][ T6022] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 111.835135][ T6022] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 111.843592][ T6022] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 111.862014][ T6022] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 111.985059][ T6029] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 112.009457][ T6029] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 112.031862][ T6029] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 112.061257][ T6029] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 112.087922][ T6029] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 112.108918][ T6029] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 112.123355][ T6029] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 112.143297][ T6029] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 112.212264][ T6026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.253787][ T6022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.286828][ T6026] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.306084][ T5625] Bluetooth: hci5: command tx timeout [ 112.333782][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.340977][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.381027][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.388194][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.423625][ T6022] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.468636][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.475851][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.511777][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.518936][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.545910][ T6029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.663976][ T6029] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.702605][ T3357] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.709756][ T3357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.764190][ T3357] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.771353][ T3357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.789547][ T5625] Bluetooth: hci6: command tx timeout [ 113.037324][ T5625] Bluetooth: hci7: command tx timeout [ 113.761496][ T6026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.093814][ T6022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.271171][ T6029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.386272][ T5625] Bluetooth: hci5: command tx timeout [ 114.681067][ T6026] veth0_vlan: entered promiscuous mode [ 114.729875][ T6026] veth1_vlan: entered promiscuous mode [ 114.866025][ T5625] Bluetooth: hci6: command tx timeout [ 114.889050][ T6026] veth0_macvtap: entered promiscuous mode [ 114.922699][ T6026] veth1_macvtap: entered promiscuous mode [ 114.989153][ T6022] veth0_vlan: entered promiscuous mode [ 115.015106][ T6026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.050802][ T6022] veth1_vlan: entered promiscuous mode [ 115.067374][ T6026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.101075][ T5999] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.110369][ T5625] Bluetooth: hci7: command tx timeout [ 115.130237][ T5999] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.151693][ T5999] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.170083][ T6029] veth0_vlan: entered promiscuous mode [ 115.194787][ T5999] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.259278][ T6029] veth1_vlan: entered promiscuous mode [ 115.271869][ T6022] veth0_macvtap: entered promiscuous mode [ 115.299516][ T6022] veth1_macvtap: entered promiscuous mode [ 115.378043][ T6029] veth0_macvtap: entered promiscuous mode [ 115.401715][ T6022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.410951][ T6029] veth1_macvtap: entered promiscuous mode [ 115.419093][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.453965][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.476068][ T6022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.524175][ T1038] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.537626][ T6029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.549536][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.557964][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.572481][ T1038] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.591848][ T6029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.659426][ T10] usb 1-1: USB disconnect, device number 4 [ 115.677679][ T1038] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.761203][ T1038] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.773853][ T30] audit: type=1400 audit(1784794837.841:285): avc: denied { unmount } for pid=6026 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 115.950939][ T30] audit: type=1400 audit(1784794837.951:286): avc: denied { mount } for pid=6026 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 116.197399][ T30] audit: type=1400 audit(1784794838.091:287): avc: denied { create } for pid=6142 comm="syz.2.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 116.504276][ T1038] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.513301][ T30] audit: type=1400 audit(1784794838.261:288): avc: denied { setopt } for pid=6142 comm="syz.2.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 116.533704][ T1038] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.593030][ T30] audit: type=1400 audit(1784794838.541:289): avc: denied { read write } for pid=6143 comm="syz.3.62" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 116.704994][ T30] audit: type=1400 audit(1784794838.541:290): avc: denied { open } for pid=6143 comm="syz.3.62" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 116.964620][ T5999] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.081558][ T30] audit: type=1400 audit(1784794838.581:291): avc: denied { kexec_image_load } for pid=6142 comm="syz.2.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 117.124652][ T1038] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.313889][ T1038] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.283427][ T30] audit: type=1400 audit(1784794838.771:292): avc: denied { create } for pid=6151 comm="syz.7.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 118.946259][ T5731] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 119.039661][ T6000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.066674][ T6000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.132498][ T1038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.144443][ T5731] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.173925][ T1038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.188683][ T5731] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 119.217131][ T5731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.253467][ T5731] usb 4-1: config 0 descriptor?? [ 119.265117][ T5999] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.278646][ T5344] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 119.424393][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.463706][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.474246][ T5344] usb 3-1: device descriptor read/64, error -71 [ 119.511371][ T5731] usbhid 4-1:0.0: can't add hid device: -71 [ 119.557755][ T5731] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 119.595374][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.652082][ T5731] usb 4-1: USB disconnect, device number 3 [ 119.666103][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.736490][ T5344] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 119.911094][ T5999] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.951328][ T5344] usb 3-1: device descriptor read/64, error -71 [ 120.055630][ T30] audit: type=1400 audit(1784794842.141:293): avc: denied { read } for pid=6161 comm="syz.5.55" name="sg0" dev="devtmpfs" ino=795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 120.125605][ T5344] usb usb3-port1: attempt power cycle [ 120.146044][ T5731] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 120.236569][ T30] audit: type=1400 audit(1784794842.141:294): avc: denied { open } for pid=6161 comm="syz.5.55" path="/dev/sg0" dev="devtmpfs" ino=795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 120.359631][ T5731] usb 4-1: Using ep0 maxpacket: 32 [ 120.370002][ T5999] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.393788][ T5731] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.470027][ T5731] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 120.546067][ T5344] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 120.565728][ T5731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.620152][ T5344] usb 3-1: device descriptor read/8, error -71 [ 120.644592][ T5731] usb 4-1: config 0 descriptor?? [ 120.854414][ T5731] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 120.956098][ T5344] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 120.990063][ T5731] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 121.061298][ T5344] usb 3-1: device descriptor read/8, error -71 [ 121.120417][ T5731] usb 4-1: USB disconnect, device number 4 [ 121.202501][ T5731] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 121.247564][ T5344] usb usb3-port1: unable to enumerate USB device [ 121.259240][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 121.259255][ T30] audit: type=1400 audit(1784794843.331:296): avc: denied { ioctl } for pid=6170 comm="syz.3.65" path="socket:[12976]" dev="sockfs" ino=12976 ioctlcmd=0x89a1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 121.335169][ T6171] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 121.452913][ T6174] bridge1: entered promiscuous mode [ 121.560980][ T30] audit: type=1400 audit(1784794843.401:297): avc: denied { read } for pid=6170 comm="syz.3.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 122.864791][ T30] audit: type=1400 audit(1784794843.491:298): avc: denied { search } for pid=5273 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.089395][ T30] audit: type=1400 audit(1784794843.491:299): avc: denied { search } for pid=5273 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.378974][ T5999] bridge_slave_1: left allmulticast mode [ 123.520554][ T5999] bridge_slave_1: left promiscuous mode [ 123.536911][ T30] audit: type=1400 audit(1784794843.501:300): avc: denied { search } for pid=5273 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.576346][ T5999] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.661821][ T5999] bridge_slave_0: left allmulticast mode [ 123.680283][ T30] audit: type=1400 audit(1784794843.501:301): avc: denied { read } for pid=5273 comm="dhcpcd" name="n30" dev="tmpfs" ino=2278 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 123.739055][ T5999] bridge_slave_0: left promiscuous mode [ 123.781875][ T5999] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.877417][ T30] audit: type=1400 audit(1784794843.501:302): avc: denied { open } for pid=5273 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=2278 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 124.443202][ T30] audit: type=1400 audit(1784794843.501:303): avc: denied { getattr } for pid=5273 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=2278 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 124.622104][ T30] audit: type=1400 audit(1784794843.561:304): avc: denied { read } for pid=6175 comm="syz.5.67" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 124.915899][ T30] audit: type=1400 audit(1784794843.561:305): avc: denied { open } for pid=6175 comm="syz.5.67" path="/dev/ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 124.999799][ T6209] netlink: 40 bytes leftover after parsing attributes in process `syz.5.74'. [ 125.791487][ T5999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.273185][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 128.324851][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.846880][ T5999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.883629][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 142.883645][ T30] audit: type=1400 audit(1784794864.971:323): avc: denied { ioctl } for pid=6232 comm="syz.7.79" path="socket:[13221]" dev="sockfs" ino=13221 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 142.928693][ T5999] bond0 (unregistering): Released all slaves [ 143.501869][ T30] audit: type=1400 audit(1784794865.591:324): avc: denied { write } for pid=6238 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.550266][ T5731] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 143.800194][ T30] audit: type=1400 audit(1784794865.611:325): avc: denied { remove_name } for pid=6238 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=2326 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.865925][ T5731] usb 3-1: Using ep0 maxpacket: 32 [ 143.937296][ T5731] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 144.021719][ T5731] usb 3-1: config 0 has no interface number 0 [ 144.091594][ T5731] usb 3-1: config 0 interface 12 has no altsetting 0 [ 144.149739][ T30] audit: type=1400 audit(1784794865.611:326): avc: denied { unlink } for pid=6238 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=2326 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 144.232014][ T5614] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 144.250908][ T5614] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 144.259121][ T5614] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 144.269009][ T5731] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 144.289892][ T5614] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 144.300243][ T5614] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 144.365705][ T5731] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.398378][ T5731] usb 3-1: Product: syz [ 144.414806][ T5731] usb 3-1: Manufacturer: syz [ 144.433061][ T5731] usb 3-1: SerialNumber: syz [ 144.472477][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 144.512345][ T5731] usb 3-1: config 0 descriptor?? [ 144.662782][ T5614] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 144.690329][ T5614] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 144.715239][ T5614] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 144.757451][ T5614] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 144.767288][ T5614] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 144.954714][ T5625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 144.966841][ T5625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 144.974886][ T5625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 144.997347][ T5625] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 145.009529][ T5625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 145.155340][ T5614] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 145.167919][ T5614] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 145.189062][ T5614] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 145.208230][ T5614] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 145.219540][ T5614] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 146.895595][ T5624] Bluetooth: hci1: command tx timeout [ 146.901582][ T5625] Bluetooth: hci0: command tx timeout [ 146.958000][ T30] audit: type=1400 audit(1784794869.031:327): avc: denied { setopt } for pid=6239 comm="syz.2.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 147.128663][ T5625] Bluetooth: hci3: command tx timeout [ 147.268315][ T5625] Bluetooth: hci8: command tx timeout [ 148.340594][ T5731] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -32 [ 148.493969][ T5731] f81534 3-1:0.12: f81534_find_config_idx: read failed: -32 [ 148.653052][ T5731] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 148.691646][ T5731] f81534 3-1:0.12: probe with driver f81534 failed with error -32 [ 148.938078][ T30] audit: type=1400 audit(1784794871.031:328): avc: denied { write } for pid=6259 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.967461][ T5625] Bluetooth: hci0: command tx timeout [ 148.973724][ T5625] Bluetooth: hci1: command tx timeout [ 149.055091][ T30] audit: type=1400 audit(1784794871.141:329): avc: denied { write } for pid=6276 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.284007][ T5625] Bluetooth: hci3: command tx timeout [ 149.615234][ T5625] Bluetooth: hci8: command tx timeout [ 150.834265][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2 [ 151.025860][ T5625] Bluetooth: hci1: command tx timeout [ 151.031985][ T5614] Bluetooth: hci0: command tx timeout [ 151.348532][ T5625] Bluetooth: hci3: command tx timeout [ 151.675914][ T5625] Bluetooth: hci8: command tx timeout [ 152.278844][ T1220] usb 3-1: USB disconnect, device number 9 [ 152.703131][ T30] audit: type=1400 audit(1784794874.791:330): avc: denied { write } for pid=6295 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.116069][ T5625] Bluetooth: hci1: command tx timeout [ 153.121515][ T5614] Bluetooth: hci0: command tx timeout [ 153.218854][ T30] audit: type=1400 audit(1784794875.311:331): avc: denied { write } for pid=6318 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.334736][ T5273] 8021q: adding VLAN 0 to HW filter on device eth3 [ 153.426242][ T5625] Bluetooth: hci3: command tx timeout [ 153.836050][ T5625] Bluetooth: hci8: command tx timeout [ 154.453308][ T30] audit: type=1400 audit(1784794876.541:332): avc: denied { write } for pid=6330 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.488171][ T5731] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 154.664668][ T6244] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.671944][ T5731] usb 3-1: Using ep0 maxpacket: 32 [ 154.682006][ T6244] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.690451][ T5731] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.703983][ T6244] bridge_slave_0: entered allmulticast mode [ 154.711731][ T5731] usb 3-1: config 0 interface 0 has no altsetting 0 [ 154.727231][ T6244] bridge_slave_0: entered promiscuous mode [ 154.737695][ T5731] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 154.755328][ T6244] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.769625][ T5731] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.782884][ T6244] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.794826][ T5731] usb 3-1: Product: syz [ 154.803757][ T5731] usb 3-1: Manufacturer: syz [ 154.810289][ T6244] bridge_slave_1: entered allmulticast mode [ 154.825787][ T5731] usb 3-1: SerialNumber: syz [ 154.835523][ T6244] bridge_slave_1: entered promiscuous mode [ 154.848335][ T5731] usb 3-1: config 0 descriptor?? [ 154.871186][ T5731] gs_usb 3-1:0.0: Required endpoints not found [ 154.884492][ T6254] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.893629][ T30] audit: type=1400 audit(1784794876.971:333): avc: denied { write } for pid=6354 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.922260][ T6254] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.946933][ T6254] bridge_slave_0: entered allmulticast mode [ 154.984213][ T6254] bridge_slave_0: entered promiscuous mode [ 155.050299][ T6247] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.057737][ T6247] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.064954][ T6247] bridge_slave_0: entered allmulticast mode [ 155.088829][ T6247] bridge_slave_0: entered promiscuous mode [ 155.112314][ T6254] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.126207][ T6254] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.133526][ T6254] bridge_slave_1: entered allmulticast mode [ 155.142885][ T6254] bridge_slave_1: entered promiscuous mode [ 155.154190][ T5273] 8021q: adding VLAN 0 to HW filter on device eth4 [ 155.170374][ T6338] warning: `syz.2.85' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 155.361580][ T6247] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.376296][ T6233] usb 3-1: USB disconnect, device number 10 [ 155.391757][ T6247] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.407499][ T6247] bridge_slave_1: entered allmulticast mode [ 155.420873][ T6247] bridge_slave_1: entered promiscuous mode [ 155.520463][ T6244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.550231][ T6244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.591043][ T6250] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.603764][ T6250] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.613553][ T6250] bridge_slave_0: entered allmulticast mode [ 155.621242][ T6250] bridge_slave_0: entered promiscuous mode [ 155.663729][ T6254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.673832][ T6250] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.687619][ T6250] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.696261][ T6250] bridge_slave_1: entered allmulticast mode [ 155.707362][ T6250] bridge_slave_1: entered promiscuous mode [ 155.723707][ T6247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.754242][ T6247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.810123][ T6254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.862186][ T6244] team0: Port device team_slave_0 added [ 156.023614][ T6244] team0: Port device team_slave_1 added [ 156.040146][ T6362] netlink: 40 bytes leftover after parsing attributes in process `syz.2.86'. [ 156.118789][ T6254] team0: Port device team_slave_0 added [ 156.148666][ T6254] team0: Port device team_slave_1 added [ 156.209028][ T6250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.252969][ T6247] team0: Port device team_slave_0 added [ 156.279819][ T6247] team0: Port device team_slave_1 added [ 156.879369][ T6250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.929141][ T6244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.946993][ T6244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.999509][ T6244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.012420][ T6254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.026381][ T6254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.060817][ T6254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.100419][ T6244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.115976][ T6244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.148567][ T6244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.172244][ T5731] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 157.191524][ T6254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.203571][ T6254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.234974][ T6254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.259160][ T6247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.275099][ T6247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.313136][ T6247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.352191][ T5731] usb 3-1: config 1 interface 0 has no altsetting 0 [ 157.360734][ T5731] usb 3-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.40 [ 157.370303][ T5731] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.386742][ T5731] usb 3-1: Product: syz [ 157.395721][ T6250] team0: Port device team_slave_0 added [ 157.402155][ T5731] usb 3-1: Manufacturer: syz [ 157.410381][ T6250] team0: Port device team_slave_1 added [ 157.423331][ T5731] usb 3-1: SerialNumber: syz [ 157.431943][ T6247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.444610][ T6247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.474352][ T6247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.548044][ T6244] hsr_slave_0: entered promiscuous mode [ 157.554735][ T6244] hsr_slave_1: entered promiscuous mode [ 157.561927][ T6244] debugfs: 'hsr0' already exists in 'hsr' [ 157.571782][ T6244] Cannot create hsr debugfs directory [ 157.622052][ T6250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.629240][ T6250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.664554][ T6250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.717061][ T6250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.734563][ T6250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.763377][ T6250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.790503][ T6247] hsr_slave_0: entered promiscuous mode [ 157.797173][ T6247] hsr_slave_1: entered promiscuous mode [ 157.803528][ T6247] debugfs: 'hsr0' already exists in 'hsr' [ 157.809756][ T6247] Cannot create hsr debugfs directory [ 157.822740][ T6254] hsr_slave_0: entered promiscuous mode [ 157.829551][ T6254] hsr_slave_1: entered promiscuous mode [ 157.843359][ T6254] debugfs: 'hsr0' already exists in 'hsr' [ 157.849418][ T6254] Cannot create hsr debugfs directory [ 158.145717][ T6250] hsr_slave_0: entered promiscuous mode [ 158.153162][ T6250] hsr_slave_1: entered promiscuous mode [ 158.161336][ T6250] debugfs: 'hsr0' already exists in 'hsr' [ 158.171046][ T6250] Cannot create hsr debugfs directory [ 158.690817][ T6254] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.297420][ T6254] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.493866][ T5999] hsr_slave_0: left promiscuous mode [ 160.516040][ T5999] hsr_slave_1: left promiscuous mode [ 160.522140][ T5999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.537338][ T5999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.551369][ T5999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.559667][ T5999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.590600][ T5999] veth1_macvtap: left promiscuous mode [ 160.607885][ T5999] veth0_macvtap: left promiscuous mode [ 160.615563][ T5999] veth1_vlan: left promiscuous mode [ 160.621389][ T5999] veth0_vlan: left promiscuous mode [ 161.015146][ T5999] team0 (unregistering): Port device team_slave_1 removed [ 161.043081][ T5999] team0 (unregistering): Port device team_slave_0 removed [ 161.358825][ T6254] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.525362][ T6254] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.843505][ T6244] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 161.871104][ T6244] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 161.889813][ T6244] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 161.929932][ T6244] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 161.943885][ T6244] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 161.963810][ T6244] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 161.991196][ T6244] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 162.015772][ T6244] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 162.104131][ T6247] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 162.142666][ T6247] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 162.156831][ T6247] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 162.177022][ T6247] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 162.195236][ T6247] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 162.212237][ T6247] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 162.318151][ T6250] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.361122][ T6247] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 162.383337][ T6247] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 162.499548][ T6244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.551825][ T6244] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.631648][ T6250] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.687524][ T3357] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.694709][ T3357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.720499][ T6247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.729115][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.736263][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.771358][ T6247] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.794285][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.801422][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.845394][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.852559][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.887007][ T5731] usbhid 3-1:1.0: can't add hid device: -32 [ 162.893065][ T5731] usbhid 3-1:1.0: probe with driver usbhid failed with error -32 [ 162.951892][ T6250] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.268041][ T6250] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.029865][ T6250] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 164.083048][ T6250] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 164.121392][ T6250] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 164.164993][ T6250] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 164.204150][ T6250] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 164.222405][ T6250] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 164.232835][ T6244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.253966][ T6247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.291559][ T6250] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 164.340129][ T6250] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 164.662933][ T6254] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 164.701470][ T6254] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 164.739762][ T6254] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 164.765280][ T6254] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 164.815405][ T6254] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 164.865432][ T6254] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 164.910357][ T6254] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 164.949307][ T6254] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 165.135037][ T6250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.168024][ T6244] veth0_vlan: entered promiscuous mode [ 165.181515][ T6247] veth0_vlan: entered promiscuous mode [ 165.222817][ T6250] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.237180][ T6244] veth1_vlan: entered promiscuous mode [ 165.244828][ T6247] veth1_vlan: entered promiscuous mode [ 165.261360][ T6000] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.268527][ T6000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.342370][ T6000] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.349528][ T6000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.401306][ T6244] veth0_macvtap: entered promiscuous mode [ 165.458321][ T6244] veth1_macvtap: entered promiscuous mode [ 165.474835][ T6247] veth0_macvtap: entered promiscuous mode [ 165.531050][ T6247] veth1_macvtap: entered promiscuous mode [ 165.556642][ T6254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.590294][ T6244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.685651][ T6254] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.708745][ T6244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.752410][ T6247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.785658][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.792826][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.863932][ T3404] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.901097][ T3404] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.949672][ T6247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.979976][ T6230] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.987143][ T6230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.033693][ T3404] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.054899][ T3404] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.122866][ T3404] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.162079][ T3404] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.212542][ T3404] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.226167][ T3404] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.521660][ T30] audit: type=1400 audit(1784794888.611:334): avc: denied { write } for pid=6444 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.611472][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.657774][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.810676][ T3404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.871559][ T3404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.936224][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.958744][ T30] audit: type=1400 audit(1784794889.041:335): avc: denied { write } for pid=6460 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.037931][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.123102][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.181829][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.452699][ T6250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.521440][ T6233] usb 3-1: USB disconnect, device number 11 [ 188.737666][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.755454][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.984527][ T6250] veth0_vlan: entered promiscuous mode [ 189.190589][ T6250] veth1_vlan: entered promiscuous mode [ 189.715214][ T6250] veth0_macvtap: entered promiscuous mode [ 189.827377][ T6250] veth1_macvtap: entered promiscuous mode [ 189.869577][ T6495] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.008532][ T6250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.025928][ T5624] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 190.036237][ T5624] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 190.044409][ T5624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 190.052534][ T5624] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 190.061019][ T5624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 190.184876][ T6250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.152906][ T5625] Bluetooth: hci4: command tx timeout [ 193.159630][ T5624] Bluetooth: hci2: command 0x0406 tx timeout [ 209.650912][ T5624] Bluetooth: hci4: command tx timeout [ 211.767287][ T5614] Bluetooth: hci4: command tx timeout [ 213.826656][ T5614] Bluetooth: hci4: command tx timeout [ 250.160541][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 251.523530][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.614029][ T4927] Bluetooth: hci3: command 0x0406 tx timeout [ 267.620163][ T5614] Bluetooth: hci1: command 0x0406 tx timeout [ 268.066095][ T4927] Bluetooth: hci8: command 0x0406 tx timeout [ 311.601340][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 312.923727][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 313.691980][ T5624] Bluetooth: hci4: command 0x0406 tx timeout [ 371.907416][ T5611] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 373.034533][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.041071][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.695947][ T5611] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 379.683891][ T6501] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 381.167814][ T5624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 381.181511][ T5624] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 381.196459][ T5624] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 381.207486][ T5624] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 381.224643][ T5624] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 381.936869][ T5624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 381.950704][ T5624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 381.962685][ T5624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 381.973969][ T5624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 381.986176][ T5624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 382.028632][ T5624] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 382.039077][ T5624] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 382.053241][ T5624] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 382.062652][ T5624] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 382.072745][ T5624] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 382.643945][ T30] audit: type=1400 audit(1784795104.731:336): avc: denied { write } for pid=6471 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 382.858173][ T5624] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 382.871794][ T5624] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 382.881863][ T5624] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 382.889830][ T5624] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 382.905747][ T5624] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 383.017460][ T30] audit: type=1400 audit(1784795105.111:337): avc: denied { write } for pid=6543 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 384.089617][ T5624] Bluetooth: hci0: command tx timeout [ 384.096345][ T5611] Bluetooth: hci2: command tx timeout [ 384.159001][ T5611] Bluetooth: hci6: command tx timeout [ 387.944463][ T5611] Bluetooth: hci7: command tx timeout [ 387.945993][ T5624] Bluetooth: hci2: command tx timeout [ 387.956418][ T5625] Bluetooth: hci0: command tx timeout [ 387.961850][ T5624] Bluetooth: hci6: command tx timeout [ 390.005810][ T5611] Bluetooth: hci2: command tx timeout [ 390.011274][ T5611] Bluetooth: hci0: command tx timeout [ 390.016739][ T5624] Bluetooth: hci7: command tx timeout [ 390.065797][ T5624] Bluetooth: hci6: command tx timeout [ 392.066106][ T5624] Bluetooth: hci7: command tx timeout [ 392.071561][ T5611] Bluetooth: hci0: command tx timeout [ 392.076995][ T5614] Bluetooth: hci2: command tx timeout [ 392.145768][ T5624] Bluetooth: hci6: command tx timeout [ 394.145927][ T5624] Bluetooth: hci7: command tx timeout [ 404.324214][ T4927] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 404.334431][ T4927] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 404.343398][ T4927] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 404.361814][ T4927] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 404.372662][ T4927] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 406.466220][ T4927] Bluetooth: hci1: command tx timeout [ 408.546757][ T4927] Bluetooth: hci1: command tx timeout [ 410.625793][ T4927] Bluetooth: hci1: command tx timeout [ 412.706044][ T31] INFO: task kworker/u8:11:5999 blocked for more than 143 seconds. [ 412.715303][ T4927] Bluetooth: hci1: command tx timeout [ 412.724103][ T31] Not tainted syzkaller #0 [ 412.729974][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 412.752833][ T31] task:kworker/u8:11 state:D stack:24136 pid:5999 tgid:5999 ppid:2 task_flags:0x4208060 flags:0x00080000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 412.836105][ T31] Workqueue: netns cleanup_net [ 412.870776][ T31] Call Trace: [ 412.910682][ T31] [ 412.959774][ T31] __schedule+0x125c/0x6730 [ 413.034761][ T31] ? __pfx___schedule+0x10/0x10 [ 413.102158][ T31] ? find_held_lock+0x2b/0x80 [ 413.138657][ T31] ? schedule+0x225/0x2c0 [ 413.156658][ T31] schedule+0xdd/0x2c0 [ 413.172389][ T31] exp_funnel_lock+0x344/0x3c0 [ 413.188390][ T31] ? __pfx_exp_funnel_lock+0x10/0x10 [ 413.208653][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 413.231422][ T31] ? __pfx___might_resched+0x10/0x10 [ 413.238964][ T31] synchronize_rcu_expedited+0x298/0x450 [ 413.244964][ T31] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 413.252436][ T31] nf_conntrack_cleanup_net_list+0xd3/0x6e0 [ 413.260376][ T31] ? lockdep_hardirqs_on+0x78/0x100 [ 413.265612][ T31] ? __pfx_nf_conntrack_cleanup_net_list+0x10/0x10 [ 413.272478][ T31] ? nf_conntrack_log_invalid_sysctl+0x120/0x140 [ 413.279038][ T31] ? nf_conntrack_pernet_exit+0xaa/0x150 [ 413.284697][ T31] ? __pfx_nf_conntrack_pernet_exit+0x10/0x10 [ 413.291452][ T31] ops_undo_list+0x363/0xab0 [ 413.296241][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 413.301367][ T31] ? cleanup_net+0x332/0x920 [ 413.308651][ T31] ? idr_destroy+0x62/0x2e0 [ 413.313187][ T31] cleanup_net+0x499/0x920 [ 413.319260][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 413.327973][ T31] ? rcu_is_watching+0x12/0xc0 [ 413.332787][ T31] process_one_work+0xa23/0x1940 [ 413.342419][ T31] ? __pfx_process_one_work+0x10/0x10 [ 413.361859][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 413.366989][ T31] worker_thread+0x5ef/0xe50 [ 413.372493][ T31] ? kthread+0x13a/0x450 [ 413.376922][ T31] ? __pfx_worker_thread+0x10/0x10 [ 413.382046][ T31] kthread+0x370/0x450 [ 413.386422][ T31] ? __pfx_kthread+0x10/0x10 [ 413.391039][ T31] ret_from_fork+0x72b/0xd50 [ 413.395630][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 413.401320][ T31] ? __switch_to+0x800/0x10f0 [ 413.406191][ T31] ? __pfx_kthread+0x10/0x10 [ 413.410805][ T31] ret_from_fork_asm+0x1a/0x30 [ 413.415585][ T31] [ 413.421628][ T31] [ 413.421628][ T31] Showing all locks held in the system: [ 413.503997][ T31] 3 locks held by kworker/0:0/9: [ 413.533441][ T31] #0: ffff88801ee8b140 ((wq_completion)wg-kex-wg0#10){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 413.553334][ T31] #1: ffffc900000e7d08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 413.596828][ T31] #2: ffff888027ab5c58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x30/0xe40 [ 413.613855][ T31] 2 locks held by kworker/1:0/24: [ 413.621557][ T31] 2 locks held by kworker/1:1/29: [ 413.626796][ T31] 1 lock held by khungtaskd/31: [ 413.635306][ T31] #0: ffffffff8ebe6180 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 413.648990][ T31] 1 lock held by dhcpcd/5273: [ 413.653691][ T31] #0: ffffffff90a9c9c0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x18b0 [ 413.663794][ T31] 2 locks held by getty/5365: [ 413.668754][ T31] #0: ffff88802433d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 413.678766][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 413.690410][ T31] 2 locks held by kworker/1:4/5723: [ 413.697019][ T31] 3 locks held by kworker/1:5/5746: [ 413.702237][ T31] 2 locks held by kworker/1:7/5805: [ 413.707751][ T31] 1 lock held by syz.2.10/5836: [ 413.712608][ T31] #0: ffffffff8ebf1af8 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 413.727220][ T31] 4 locks held by kworker/u8:11/5999: [ 413.738927][ T31] #0: ffff88801ce88940 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 413.749589][ T31] #1: ffffc90005507d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 413.762335][ T31] #2: ffffffff90a83dc8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 413.772255][ T31] #3: ffffffff90a9c9c0 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_notifier_net+0x1c/0xf0 [ 413.783417][ T31] 3 locks held by kworker/1:8/6179: [ 413.788854][ T31] 2 locks held by kworker/1:9/6201: [ 413.794064][ T31] 1 lock held by syz-executor/6244: [ 413.802245][ T31] #0: ffffffff90a9c9c0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 413.811616][ T31] 1 lock held by syz-executor/6250: [ 413.817037][ T31] #0: ffffffff90a9c9c0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 413.829370][ T31] 1 lock held by syz-executor/6254: [ 413.838210][ T31] #0: ffffffff90a9c9c0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 413.850662][ T31] 1 lock held by syz.9.91/6494: [ 413.855533][ T31] #0: ffffffff90a9c9c0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 413.865176][ T31] 1 lock held by syz-executor/6497: [ 413.876073][ T31] #0: ffffffff90a9c9c0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x18b0 [ 413.885534][ T31] 3 locks held by kworker/1:12/6508: [ 413.891138][ T31] 3 locks held by kworker/u8:21/6512: [ 413.896729][ T31] #0: ffff888033a18140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 413.908053][ T31] #1: ffffc9000399fd08 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 413.921184][ T31] #2: ffffffff90a9c9c0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11f/0x1360 [ 413.930921][ T31] 1 lock held by syz-executor/6524: [ 413.941978][ T31] #0: ffffffff90a9c9c0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x18b0 [ 413.951694][ T31] 1 lock held by syz-executor/6530: [ 413.961619][ T31] #0: ffffffff90a9c9c0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x18b0 [ 413.972491][ T31] 1 lock held by syz-executor/6531: [ 413.980452][ T31] #0: ffffffff90a9c9c0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x18b0 [ 413.995058][ T31] 1 lock held by syz-executor/6542: [ 414.001380][ T31] #0: ffffffff90a9c9c0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x18b0 [ 414.011066][ T31] 1 lock held by syz-executor/6555: [ 414.016451][ T31] #0: ffffffff90a9c9c0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x18b0 [ 414.031822][ T31] [ 414.034265][ T31] ============================================= [ 414.034265][ T31] [ 414.054496][ T31] NMI backtrace for cpu 0 [ 414.054520][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 414.054541][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 414.054551][ T31] Call Trace: [ 414.054557][ T31] [ 414.054565][ T31] dump_stack_lvl+0x100/0x190 [ 414.054592][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 414.054615][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 414.054639][ T31] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 414.054666][ T31] sys_info+0x141/0x190 [ 414.054687][ T31] watchdog+0xcb1/0x1030 [ 414.054711][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 414.054737][ T31] ? __pfx_watchdog+0x10/0x10 [ 414.054756][ T31] ? __kthread_parkme+0x18c/0x230 [ 414.054782][ T31] ? kthread+0x13a/0x450 [ 414.054796][ T31] ? __pfx_watchdog+0x10/0x10 [ 414.054813][ T31] kthread+0x370/0x450 [ 414.054827][ T31] ? __pfx_kthread+0x10/0x10 [ 414.054854][ T31] ret_from_fork+0x72b/0xd50 [ 414.054878][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 414.054902][ T31] ? __switch_to+0x800/0x10f0 [ 414.054918][ T31] ? __pfx_kthread+0x10/0x10 [ 414.054946][ T31] ret_from_fork_asm+0x1a/0x30 [ 414.054982][ T31] [ 414.054989][ T31] Sending NMI from CPU 0 to CPUs 1: [ 414.183072][ C1] NMI backtrace for cpu 1 [ 414.183086][ C1] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 414.183102][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 414.183111][ C1] Workqueue: wg-kex-wg1 wg_packet_handshake_receive_worker [ 414.183136][ C1] RIP: 0010:__lock_acquire+0x518/0x1a40 [ 414.183153][ C1] Code: 8d 04 80 0f b6 44 c7 f9 32 43 21 a8 60 0f 85 5f 08 00 00 48 89 f0 89 f7 48 c1 e8 20 89 c2 41 89 c0 01 c6 c1 c2 04 0f b6 43 22 <44> 0f b7 4b 20 83 e0 03 66 41 81 e1 ff 1f c1 e0 0d 44 09 c8 98 44 [ 414.183166][ C1] RSP: 0018:ffffc90000a08030 EFLAGS: 00000017 [ 414.183177][ C1] RAX: 0000000000000002 RBX: ffff88801f2d0c68 RCX: 0000000000000200 [ 414.183187][ C1] RDX: 00000000501fefef RSI: 0000000036198be1 RDI: 0000000041178ce3 [ 414.183196][ C1] RBP: ffff88801f2d0000 R08: 00000000f501fefe R09: 0000000000000001 [ 414.183204][ C1] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000007 [ 414.183212][ C1] R13: 0000000000000005 R14: 0000000000000000 R15: 0000000000000005 [ 414.183221][ C1] FS: 0000000000000000(0000) GS:ffff888123ee6000(0000) knlGS:0000000000000000 [ 414.183235][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 414.183244][ C1] CR2: 0000001b32cf6ff8 CR3: 000000000e992000 CR4: 00000000003526f0 [ 414.183253][ C1] Call Trace: [ 414.183257][ C1] [ 414.183267][ C1] lock_acquire+0x1b9/0x370 [ 414.183281][ C1] ? unwind_next_frame+0xbd/0x2090 [ 414.183301][ C1] ? unwind_next_frame+0x3be/0x2090 [ 414.183320][ C1] ? unwind_next_frame+0x3be/0x2090 [ 414.183339][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 414.183361][ C1] unwind_next_frame+0xd1/0x2090 [ 414.183379][ C1] ? unwind_next_frame+0xbd/0x2090 [ 414.183397][ C1] ? nft_do_chain_inet+0xf3/0x400 [ 414.183418][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 414.183437][ C1] arch_stack_walk+0x94/0xf0 [ 414.183457][ C1] ? nft_do_chain_inet+0xf3/0x400 [ 414.183477][ C1] ? kfree_skbmem+0x19a/0x210 [ 414.183495][ C1] stack_trace_save+0x8e/0xc0 [ 414.183507][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 414.183521][ C1] ? __lock_acquire+0x49f/0x1a40 [ 414.183534][ C1] ? nft_synproxy_do_eval+0xa24/0xce0 [ 414.183547][ C1] ? nft_do_chain+0x2e5/0x19d0 [ 414.183560][ C1] kasan_save_stack+0x30/0x50 [ 414.183574][ C1] ? kasan_save_stack+0x30/0x50 [ 414.183586][ C1] ? kasan_save_track+0x14/0x30 [ 414.183599][ C1] ? kasan_save_free_info+0x3b/0x70 [ 414.183617][ C1] ? __kasan_slab_free+0x5f/0x80 [ 414.183630][ C1] ? kmem_cache_free+0x127/0x6b0 [ 414.183648][ C1] ? kfree_skbmem+0x19a/0x210 [ 414.183664][ C1] ? consume_skb+0xd1/0x110 [ 414.183678][ C1] ? nft_synproxy_do_eval+0xa24/0xce0 [ 414.183689][ C1] ? nft_do_chain+0x2e5/0x19d0 [ 414.183702][ C1] ? nft_do_chain_inet+0xf3/0x400 [ 414.183731][ C1] kasan_save_track+0x14/0x30 [ 414.183744][ C1] kasan_save_free_info+0x3b/0x70 [ 414.183761][ C1] __kasan_slab_free+0x5f/0x80 [ 414.183776][ C1] kmem_cache_free+0x127/0x6b0 [ 414.183794][ C1] ? skb_release_data+0x6ca/0x8e0 [ 414.183808][ C1] kfree_skbmem+0x19a/0x210 [ 414.183825][ C1] consume_skb+0xd1/0x110 [ 414.183839][ C1] nft_synproxy_do_eval+0xa24/0xce0 [ 414.183852][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 414.183869][ C1] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 414.183882][ C1] nft_do_chain+0x2e5/0x19d0 [ 414.183897][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 414.183909][ C1] ? mark_held_locks+0x40/0x70 [ 414.183923][ C1] ? __local_bh_enable_ip+0x9e/0x120 [ 414.183941][ C1] ? __local_bh_enable_ip+0x9e/0x120 [ 414.183955][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 414.183981][ C1] nft_do_chain_inet+0xf3/0x400 [ 414.183999][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 414.184024][ C1] ? __pfx_ipt_do_table+0x10/0x10 [ 414.184038][ C1] ? nf_nat_ipv4_local_in+0x181/0x730 [ 414.184055][ C1] nf_hook_slow+0xbf/0x220 [ 414.184074][ C1] nf_hook.constprop.0+0x2a6/0x750 [ 414.184090][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 414.184108][ C1] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 414.184123][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 414.184140][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 414.184158][ C1] ? ip_rcv_finish_core+0x7ec/0x2c30 [ 414.184176][ C1] ip_local_deliver+0x163/0x1f0 [ 414.184192][ C1] ? __pfx_ip_local_deliver+0x10/0x10 [ 414.184209][ C1] ip_rcv+0x33a/0x3c0 [ 414.184225][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 414.184240][ C1] __netif_receive_skb_one_core+0x197/0x1e0 [ 414.184260][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 414.184280][ C1] ? lock_acquire+0x1b9/0x370 [ 414.184294][ C1] ? process_backlog+0x32a/0x1580 [ 414.184314][ C1] ? process_backlog+0x32a/0x1580 [ 414.184331][ C1] __netif_receive_skb+0x1f/0x120 [ 414.184350][ C1] process_backlog+0x37a/0x1580 [ 414.184371][ C1] __napi_poll.constprop.0+0xaf/0x450 [ 414.184391][ C1] net_rx_action+0xa40/0xf20 [ 414.184412][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 414.184430][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 414.184448][ C1] ? try_to_wake_up+0x158/0x1c90 [ 414.184465][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 414.184483][ C1] ? sched_clock+0x38/0x60 [ 414.184497][ C1] ? sched_clock_cpu+0x6c/0x570 [ 414.184514][ C1] ? mark_held_locks+0x40/0x70 [ 414.184529][ C1] handle_softirqs+0x1ea/0x9b0 [ 414.184544][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 414.184560][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 414.184576][ C1] ? kernel_fpu_end+0x5f/0x80 [ 414.184594][ C1] do_softirq+0xac/0xe0 [ 414.184608][ C1] [ 414.184612][ C1] [ 414.184617][ C1] __local_bh_enable_ip+0xf8/0x120 [ 414.184632][ C1] kernel_fpu_end+0x64/0x80 [ 414.184649][ C1] blake2s_compress+0x78/0xf0 [ 414.184666][ C1] blake2s_final+0xc9/0x170 [ 414.184681][ C1] hmac.constprop.0+0x34a/0x480 [ 414.184696][ C1] ? __pfx_hmac.constprop.0+0x10/0x10 [ 414.184714][ C1] ? kdf.constprop.0+0x199/0x280 [ 414.184728][ C1] ? __pfx_curve25519+0x10/0x10 [ 414.184748][ C1] kdf.constprop.0+0x128/0x280 [ 414.184762][ C1] ? __pfx_kdf.constprop.0+0x10/0x10 [ 414.184777][ C1] ? mix_dh+0xe1/0x130 [ 414.184788][ C1] ? mix_dh+0xe8/0x130 [ 414.184820][ C1] wg_noise_handshake_consume_response+0x4b3/0x950 [ 414.184838][ C1] ? __pfx_wg_noise_handshake_consume_response+0x10/0x10 [ 414.184857][ C1] ? __local_bh_enable_ip+0x9e/0x120 [ 414.184872][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 414.184890][ C1] ? kernel_fpu_end+0x5f/0x80 [ 414.184907][ C1] ? __local_bh_enable_ip+0x9e/0x120 [ 414.184922][ C1] ? kernel_fpu_end+0x69/0x80 [ 414.184939][ C1] ? __asan_memset+0x23/0x50 [ 414.184960][ C1] ? __pfx_blake2s.constprop.0+0x10/0x10 [ 414.184977][ C1] ? __crypto_memneq+0x1fe/0x430 [ 414.184992][ C1] ? wg_cookie_validate_packet+0x16e/0x360 [ 414.185011][ C1] ? __pfx_wg_cookie_validate_packet+0x10/0x10 [ 414.185028][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 414.185046][ C1] wg_receive_handshake_packet+0x615/0xc20 [ 414.185065][ C1] ? __pfx_wg_receive_handshake_packet+0x10/0x10 [ 414.185083][ C1] ? do_raw_spin_lock+0x128/0x260 [ 414.185102][ C1] ? __local_bh_enable_ip+0x9e/0x120 [ 414.185118][ C1] wg_packet_handshake_receive_worker+0x15e/0x370 [ 414.185139][ C1] process_one_work+0xa23/0x1940 [ 414.185155][ C1] ? __pfx_process_one_work+0x10/0x10 [ 414.185171][ C1] ? __pfx_wg_packet_handshake_receive_worker+0x10/0x10 [ 414.185191][ C1] worker_thread+0x5ef/0xe50 [ 414.185207][ C1] ? kthread+0x13a/0x450 [ 414.185217][ C1] ? __pfx_worker_thread+0x10/0x10 [ 414.185230][ C1] kthread+0x370/0x450 [ 414.185240][ C1] ? __pfx_kthread+0x10/0x10 [ 414.185259][ C1] ret_from_fork+0x72b/0xd50 [ 414.185275][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 414.185292][ C1] ? __switch_to+0x800/0x10f0 [ 414.185304][ C1] ? __pfx_kthread+0x10/0x10 [ 414.185322][ C1] ret_from_fork_asm+0x1a/0x30 [ 414.185344][ C1] [ 414.978590][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 414.985470][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 414.994572][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 415.004620][ T31] Call Trace: [ 415.007890][ T31] [ 415.010814][ T31] dump_stack_lvl+0x100/0x190 [ 415.015495][ T31] vpanic+0x552/0x970 [ 415.019475][ T31] ? __pfx_vpanic+0x10/0x10 [ 415.023977][ T31] ? rcu_is_watching+0x12/0xc0 [ 415.028746][ T31] panic+0xd1/0xe0 [ 415.032459][ T31] ? __pfx_panic+0x10/0x10 [ 415.036878][ T31] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 415.043031][ T31] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 415.049184][ T31] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 415.055336][ T31] ? watchdog.cold+0x1ec/0x234 [ 415.060094][ T31] ? watchdog+0xcc1/0x1030 [ 415.064512][ T31] watchdog.cold+0x1fd/0x234 [ 415.069107][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 415.074915][ T31] ? __pfx_watchdog+0x10/0x10 [ 415.079587][ T31] ? __kthread_parkme+0x18c/0x230 [ 415.084615][ T31] ? kthread+0x13a/0x450 [ 415.088852][ T31] ? __pfx_watchdog+0x10/0x10 [ 415.093521][ T31] kthread+0x370/0x450 [ 415.097586][ T31] ? __pfx_kthread+0x10/0x10 [ 415.102180][ T31] ret_from_fork+0x72b/0xd50 [ 415.106770][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 415.111881][ T31] ? __switch_to+0x800/0x10f0 [ 415.116547][ T31] ? __pfx_kthread+0x10/0x10 [ 415.121143][ T31] ret_from_fork_asm+0x1a/0x30 [ 415.125920][ T31] [ 415.129121][ T31] Kernel Offset: disabled [ 415.133436][ T31] Rebooting in 86400 seconds..