last executing test programs: 13m54.680601296s ago: executing program 32 (id=228): socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 13m46.354490837s ago: executing program 33 (id=288): socket(0x840000000002, 0x3, 0xff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) copy_file_range(0xffffffffffffffff, &(0x7f00000008c0)=0x4, r2, &(0x7f0000000100), 0x8, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) 6m3.657265311s ago: executing program 34 (id=1412): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="030000000400000004eca6141f198e9dd6000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000002"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x11) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x40, &(0x7f0000000180)={[{@nfs_export_on}, {@verity_require}, {@verity_require}], [{@smackfshat={'smackfshat', 0x3d, 'ns\x00'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x4000200a}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r7, 0x8941, &(0x7f0000000300)=@get={0x1, &(0x7f00000002c0)=""/44, 0x4}) renameat2(r5, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000200)='./bus/file0\x00', 0x8) syz_open_dev$MSR(&(0x7f0000000400), 0x80, 0x0) 2m28.406364693s ago: executing program 7 (id=1951): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='tlb_flush\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x18) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x6, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) close(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x32, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="13d9887cfd24", @val={@val={0x88a8, 0x5, 0x1, 0x3}, {0x8100, 0x5}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xe, @remote, @multicast2, @broadcast, @multicast2}}}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r4, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000040)=0x2c1, 0x4) sendto$inet6(r4, &(0x7f0000000800)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e612721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ec3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a068e9607f57f626a5b8d476636ef1ee76307524009ae49be402000000000000001e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408074c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dfff01a9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669cabc206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb252f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2e02fad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea093680ffffff802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c59d88a29af5886c1f5dfc6837c58aaef12a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e2cccb31016b13ed8d7bcabb03e176b1c9bda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe90400fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97107339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f40029d7cfcaf26fd1900d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60e7222697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792dff2695407ccdd6a7375e0007230fd3f6501c152f1c1ff279b1d67cc95f2820762b7927659368e41657bdef2dd15b63498a93b787bdb26809d734aaf98b86fcf9fc643a34d03ebbe072820662d20d4774d66c5ae270adade5b8f6242a059b926221ee3d677487471c432b0d6d64dad030703475bb3ecac39b204a814f5ece5961621358e36f8a2cf7196c76959824bbb475a7cad8f57853fe05f59f341b5207cc9bb8d686982c2f158e0d8f5c7ec6cbfd500"/1453, 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x498, 0x4) recvmmsg(r4, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0xa248}], 0x1, 0x40000000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x1c}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 2m27.434566257s ago: executing program 7 (id=1953): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}}, 0x0, 0x0, 0xc, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) mkdir(&(0x7f0000000200)='./file0\x00', 0x28e08a7aa33ba155) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000040)=0xc) 2m26.086144001s ago: executing program 7 (id=1958): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000047b012109911a26893330102030109021b00020800100009040803006b97ffff0904080000ff4e48dccfaf1fb84673192c51acdcefd189591ffd02911e87998231e6a8cabc9cf05f42fe520eaa51ee4aa44557efa529b274caeda71052"], 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r2, 0x107, 0x9, 0x0, &(0x7f0000001fc0)) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000500)={0xffffffffffffffff, 0x7, 0x8, 0x1fb1}) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r4, 0x800442d3, &(0x7f0000000540)={0x6, 0x2, 0x1000, @local, 'vlan0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2f22}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x78) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x24, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x90, 0xd, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x2, 0x10, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x249}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x8, 0xc0, 0x5}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0x5, 0x8d, 0x80, 0x8, 0x4}, 0xf0, &(0x7f00000001c0)={0x5, 0xf, 0xf0, 0x1, [@generic={0xeb, 0x10, 0x10, "c586e7d6763bf5e1902af361402e3241c3f41ac0fbd7ddbf275afaf02d50c749c6a895262774d87876c757e94ad886edd0e22dc596566ea393eb8c343422c8567e0dbc51c38079d2f1246de9fd877a5ef08c3838c2de0740859cf6ba970f07b97c810715ffa695940da580dead32d1293d02e91bc4864194e76b3ded6cb7b96eefaa16bc97e43e5895ff4ce4ceb23c407b1d9a35dea14e363cf4c764fdcdb90317c89ffa1e522ef67e48662a87b77936bbfb3c0e675fba533707a7a573165da6b6a900a4669bd819ec2ce04ffdecb21f3be74225b0eb7b45742ec0cd61d9f400300d5e0905c86fa4"}]}, 0x1, [{0xc6, &(0x7f0000000400)=@string={0xc6, 0x3, "9d7b6dfd5ec3f3dab2748286d724ec62066c4b86f1188565b96fbfd0b262943f0d6c5b31ddcb8a2d262c4bb818d7cbdbbf24cd7abd796a4774e16bfdaf8a9516c13af2425cd0f2000c4287b26d98564ed05ffc5c875f704dbbb7ebb5f33e51378224ea759fd1a5b2c728b2ebe6af3d0078efc4c937a8cfd839ea12a9186d44f72163b908825a5abb7c6b23c8450cc9cf520d4916a8b9713687413aa3b88d71338886fab47c901215ce3f9fff76b27bcf5c0a84ac1f1ad525c3560bd24bcf8a186bd15a41"}}]}) 2m10.769505972s ago: executing program 35 (id=1958): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000047b012109911a26893330102030109021b00020800100009040803006b97ffff0904080000ff4e48dccfaf1fb84673192c51acdcefd189591ffd02911e87998231e6a8cabc9cf05f42fe520eaa51ee4aa44557efa529b274caeda71052"], 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r2, 0x107, 0x9, 0x0, &(0x7f0000001fc0)) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000500)={0xffffffffffffffff, 0x7, 0x8, 0x1fb1}) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r4, 0x800442d3, &(0x7f0000000540)={0x6, 0x2, 0x1000, @local, 'vlan0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2f22}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x78) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x24, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x90, 0xd, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x2, 0x10, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x249}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x8, 0xc0, 0x5}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0x5, 0x8d, 0x80, 0x8, 0x4}, 0xf0, &(0x7f00000001c0)={0x5, 0xf, 0xf0, 0x1, [@generic={0xeb, 0x10, 0x10, "c586e7d6763bf5e1902af361402e3241c3f41ac0fbd7ddbf275afaf02d50c749c6a895262774d87876c757e94ad886edd0e22dc596566ea393eb8c343422c8567e0dbc51c38079d2f1246de9fd877a5ef08c3838c2de0740859cf6ba970f07b97c810715ffa695940da580dead32d1293d02e91bc4864194e76b3ded6cb7b96eefaa16bc97e43e5895ff4ce4ceb23c407b1d9a35dea14e363cf4c764fdcdb90317c89ffa1e522ef67e48662a87b77936bbfb3c0e675fba533707a7a573165da6b6a900a4669bd819ec2ce04ffdecb21f3be74225b0eb7b45742ec0cd61d9f400300d5e0905c86fa4"}]}, 0x1, [{0xc6, &(0x7f0000000400)=@string={0xc6, 0x3, "9d7b6dfd5ec3f3dab2748286d724ec62066c4b86f1188565b96fbfd0b262943f0d6c5b31ddcb8a2d262c4bb818d7cbdbbf24cd7abd796a4774e16bfdaf8a9516c13af2425cd0f2000c4287b26d98564ed05ffc5c875f704dbbb7ebb5f33e51378224ea759fd1a5b2c728b2ebe6af3d0078efc4c937a8cfd839ea12a9186d44f72163b908825a5abb7c6b23c8450cc9cf520d4916a8b9713687413aa3b88d71338886fab47c901215ce3f9fff76b27bcf5c0a84ac1f1ad525c3560bd24bcf8a186bd15a41"}}]}) 2m10.318314852s ago: executing program 36 (id=1959): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x16ba82, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x6000050) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000600), 0x103000, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700010005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008"], 0x5c}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0xc101}) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, r7, {0x300, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7}, {0x7, 0xffffffffffffff5c}}}]}]}]}}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x90, 0x2, 0x6, 0x101, 0x0, 0x0, {0xd, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0x54, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x5}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x62}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4008000}, 0x84) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x300, 0x8, 0x300}}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) 2m9.808233845s ago: executing program 37 (id=1961): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e24, @loopback}}, 0x0, 0x0, 0x2d, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46f672f2a7a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308f3d40aa1c788df6"}, 0xd8) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x16ba82, 0x10) write$selinux_load(r3, 0x0, 0x10c) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x6000050) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000600), 0x103000, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700010005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e657400"], 0x5c}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0xc101}) r6 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, 0x0, {0x300, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7}, {0x7, 0xffffffffffffff5c}}}]}]}]}}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x90, 0x2, 0x6, 0x101, 0x0, 0x0, {0xd, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0x54, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x5}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x62}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4008000}, 0x84) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x300, 0x8, 0x300}}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) 1m35.71313825s ago: executing program 38 (id=2014): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e24, @loopback}}, 0x0, 0x0, 0x2d, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46f672f2a7a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308f3d40aa1c788df6"}, 0xd8) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x16ba82, 0x10) write$selinux_load(r2, 0x0, 0x10c) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x6000050) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000600), 0x103000, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x5c}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0xc101}) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, r7, {0x300, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x90, 0x2, 0x6, 0x101, 0x0, 0x0, {0xd, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0x54, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x5}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x62}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4008000}, 0x84) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x300, 0x8, 0x300}}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) 1m35.400869418s ago: executing program 9 (id=2053): socket$nl_route(0x10, 0x3, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = fanotify_init(0x200, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000080)={0xd, 0x18, 0x3, 0x0, 0x0, 0x1000}) fanotify_mark(r3, 0x80, 0x4800003e, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000200)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x1e, &(0x7f0000000400)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}}, @map_fd={0x18, 0x6, 0x1, 0x0, r4}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xd}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf4}}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) getpid() 1m34.759325579s ago: executing program 9 (id=2054): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3569], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = gettid() rt_sigqueueinfo(r4, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) 1m33.896934272s ago: executing program 9 (id=2056): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2800000) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40000) socket$inet6_mptcp(0xa, 0x1, 0x106) fsopen(&(0x7f0000000180)='gfs2\x00', 0x1) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x5e25, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4e24, 0x78a2, @mcast2}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) syz_open_procfs(0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x2004c0c0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @loopback, 0x2}}}, 0x30) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r6 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xa9f5, 0x4000, 0x7, 0x20002fa}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) readv(r5, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x17f, 0x0) 1m32.997838043s ago: executing program 9 (id=2059): unshare(0x2040400) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)=ANY=[], 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$nl_generic(0x10, 0x3, 0x10) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r2 = syz_io_uring_setup(0x118d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x100, 0xffffffff, 0xc2}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0) io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0) 1m32.123912363s ago: executing program 5 (id=2061): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB="080003"], 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x5}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40810) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)=ANY=[@ANYBLOB="140000000102010100000000000000000a000001"], 0x14}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100c28, &(0x7f0000000100)={[], [{@uid_gt}]}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x100000) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @dev}, {0x2, 0x4e20, @remote}, {0x2, 0x4, @multicast1}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x200}) r8 = syz_open_procfs(0x0, 0x0) writev(r8, &(0x7f0000000700)=[{&(0x7f0000000840)="f50e5342", 0x4}], 0x1) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x4e20, @loopback}, {0x2, 0x4e22, @remote}, 0x10c, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00', 0x0, 0xa00, 0x1000}) 1m31.263091214s ago: executing program 9 (id=2064): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x11}]}, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000080)="925a95e24550ec24e8e1a95586dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) close(0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20048810) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x2000018c) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405"], 0x70}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x3ef, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m31.084525184s ago: executing program 5 (id=2065): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) syz_open_procfs(r0, &(0x7f0000000180)='attr/sockcreate\x00') bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000400cb00000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x0, 0x0, 0x0, 0x4000002, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0xa8) socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp6(0xa, 0x2, 0x73) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9b, 0x9}, [@jmp={0x5, 0x0, 0x8, 0x7, 0x7, 0x40, 0xfffffffffffffffc}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, r4}, 0x94) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000000c0)={&(0x7f0000000980)="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", &(0x7f0000000300)=""/168, &(0x7f0000000480)="d56fc67d6645ed07cb058a71bd26c1078e02ac2538f13a8db5252809833dd08d5560f61d19626fc8d596ea5f73710e287e2898f97ee856524bf4bebb62a83af9557c6aad0ca3c353d89480c324c3fc6ced85e9c44fd5a70b2f35a8d043e2d542a67d57a002e852d09e9beb81dfea26ceb26a2802ba4bf09bcb80fcd920bb110e3c75", &(0x7f0000000540)="7fcfbb1f662873dff541366bbd813ed53782992ab7d2d59ccecdf75409ffc3fb627f1efbee6a2e0d588d5229385a300f6ec4d40ab641584956c489ceda4334d888550d372fcf5b02a5befad3cfb1e63baa499fb90f36165adfeea6c798d67aa6b4d741cfc4c1eea474c6b7cd7f91d1aa599a719acfcbf5f19da6e9ce22f217db1e53efc53b3f75a81470d80f704a75bf4ba846def47f", 0xc, r3}, 0x38) r6 = socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 1m30.033074835s ago: executing program 5 (id=2067): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001240)={r0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) close(0xffffffffffffffff) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x28, 0x3, 0x6, 0x301, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x8004) 1m29.608297661s ago: executing program 8 (id=2068): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001240)={r0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) close(0xffffffffffffffff) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x28, 0x3, 0x6, 0x301, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x8004) 1m28.769875414s ago: executing program 9 (id=2069): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x54, 0x8, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0xfffffffffffffe5f, 0x2, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004090) mknodat$null(r1, &(0x7f00000000c0)='./file0\x00', 0x2, 0x103) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001c00), 0x8000, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r3, 0x3b88, &(0x7f0000001c40)={0xc, 0x0, 0x2, 0xfdfd}) sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c000d8008000300", @ANYRES32], 0x24}], 0x1}, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r5 = socket$inet(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x5, 0x9c, &(0x7f0000000000)=ANY=[@ANYRES64=r5, @ANYRESDEC=r0, @ANYRES8=r4, @ANYRES8=r1, @ANYRESOCT=r1], 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, 0x0, 0x240a00, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 1m14.711323791s ago: executing program 39 (id=2067): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001240)={r0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) close(0xffffffffffffffff) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x28, 0x3, 0x6, 0x301, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x8004) 1m14.396602199s ago: executing program 40 (id=2068): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001240)={r0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) close(0xffffffffffffffff) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x28, 0x3, 0x6, 0x301, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x8004) 1m13.700272292s ago: executing program 41 (id=2069): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x54, 0x8, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0xfffffffffffffe5f, 0x2, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004090) mknodat$null(r1, &(0x7f00000000c0)='./file0\x00', 0x2, 0x103) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001c00), 0x8000, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r3, 0x3b88, &(0x7f0000001c40)={0xc, 0x0, 0x2, 0xfdfd}) sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c000d8008000300", @ANYRES32], 0x24}], 0x1}, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r5 = socket$inet(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x5, 0x9c, &(0x7f0000000000)=ANY=[@ANYRES64=r5, @ANYRESDEC=r0, @ANYRES8=r4, @ANYRES8=r1, @ANYRESOCT=r1], 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, 0x0, 0x240a00, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 58.68211403s ago: executing program 2 (id=2115): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x9, 0x8}, 0xc) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x17, 0x2, {{0x200, 0x5, 0x0, 0x0, 0xf407}, 0xfff7fffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0xf, 0x0, 0x1ff, {0x0, 0x401, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={0x1, 0xffffffffffffffff}, 0x4) r8 = syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x180) fcntl$setstatus(r8, 0x4, 0x2000) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5ae, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) poll(&(0x7f0000000300)=[{r10, 0x25a}, {0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x340}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x2b92}], 0x7, 0x28fb436e) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x26e1, 0x0) close(r11) ioctl$SIOCSIFHWADDR(r11, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="ff01ff8d2000"}) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7fff}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_val={0x18, 0x3, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x3}, @alu={0x4, 0x1, 0x3, 0x3, 0xa, 0xffffffffffffffff, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x22ea}, @jmp={0x5, 0x1, 0xa, 0x0, 0x9, 0xffffffffffffffc0, 0xfffffffffffffff0}, @cb_func={0x18, 0xf, 0x4, 0x0, 0x4}]}, &(0x7f00000001c0)='syzkaller\x00', 0x8000, 0x70, &(0x7f0000000200)=""/112, 0xd35eb77610174da, 0x8, '\x00', r6, 0x0, r0, 0x8, &(0x7f0000000280)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xa, 0x40, 0xb}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000440)=[r7, r8, r9, r10, r11, r12], &(0x7f0000000480)=[{0x4, 0x2, 0xa, 0x2}, {0x2, 0x2, 0xc, 0xc}, {0x5, 0x5, 0xc, 0x2}, {0x5, 0x3}, {0x0, 0x4, 0xb, 0xb}, {0x5, 0x5, 0x3, 0x5}, {0x3, 0x4, 0x6, 0x6}], 0x10, 0x7ff}, 0x94) sendmsg$nl_xfrm(r1, 0x0, 0x0) r13 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r13, 0x0, 0x0) r14 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x402) read(r14, 0x0, 0x0) 56.756025534s ago: executing program 7 (id=2090): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000081c0)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x1, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0xfffffffffffffffd, 0x1, 0x0, 0x5dc, 0x120, 0x2000, 0x0, r2, 0x0, 0x501, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1004cc80, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r3, 0x1269, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0x0}) 56.230016488s ago: executing program 2 (id=2119): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='oom_score_adj\x00') pwritev(r3, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0xa00, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 56.226178076s ago: executing program 7 (id=2120): r0 = timerfd_create(0x0, 0x80000) ppoll(&(0x7f0000000100)=[{r0, 0xc0}], 0x1, 0x0, 0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000040)=0x8004) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) userfaultfd(0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x4) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$IMDELTIMER(r4, 0x80044941, &(0x7f00000001c0)=0x3) socket(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b0001110000000904"], 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000580), 0x80) ioctl$SNDRV_TIMER_IOCTL_CREATE(r5, 0xc02054a5, &(0x7f00000005c0)={0x8, r0, 'id1\x00'}) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000400)="5e0070c3913dc53362ac7d082233ce2f9d29592f63ad93a2bca4e9f4f7f991908665128f6643930775b21981000e41d1f1b837535893c20694cf22f9ade6ab7087a72dcfc71e1d149a30db43c6a3425de755ae985420ddd4b916795e91707cb616c3820b908e401656c47268077e1f35e070e42b05c1b674de3befa27c5ac4a7086554f54d6024c81de1cc691d131192902578a9e4384fc1ddef4c121a8729d6eaac27e4f454b5f84a932987b0bb689e18f7963d1658013d2660f8adfb29cfd71c3049a100c4bb96e799c42f0c91f898726d6989", 0xd4, r7) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect(0x2, 0x2d, &(0x7f00000007c0)={{0x12, 0x1, 0x310, 0xd5, 0x99, 0x5f, 0x10, 0x71d, 0x1005, 0x7978, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x8, 0xb, 0x170, 0xe0, [{{0x9, 0x4, 0x34, 0x9, 0x1, 0xa3, 0x21, 0x9c, 0x6, [], [{{0x9, 0x5, 0x82, 0x1, 0x40, 0x3, 0x8, 0x2}}]}}]}}]}}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x70bd26, 0x800000, {0x0, 0x0, 0xe403, r3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @remote}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0xdb}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200028bd7000fbdbdf25020000000800030003000000080002000100000008000300080000000500050003000000"], 0x34}, 0x1, 0x0, 0x0, 0x24000054}, 0x40000c4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000000540)={{0x1, 0x1, 0x18, r6, {0xe4}}, './file0\x00'}) 55.283603631s ago: executing program 2 (id=2123): gettid() r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, @private1={0xfc, 0x1, '\x00', 0x4}, 0x0, 0x8000, 0x0, 0x80000}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', r1, 0x0, 0x0, 0x3, 0x0, 0x0, @loopback={0x30000}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x6}}) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) 55.01288194s ago: executing program 2 (id=2124): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x11}]}, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000080)="925a95e24550ec24e8e1a95586dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) close(0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20048810) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1"], 0x38}}, 0x2000018c) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405"], 0x70}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x3ef, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 53.653374372s ago: executing program 2 (id=2126): openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x490000, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r2) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7, 0x1f, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sync_file_range(r6, 0x6, 0x200, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) dup(r3) close_range(r0, 0xffffffffffffffff, 0x0) 53.321794087s ago: executing program 2 (id=2127): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001240)={r0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) close(0xffffffffffffffff) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405"], 0x70}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300001400"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x28, 0x3, 0x6, 0x301, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x8004) 52.724531109s ago: executing program 7 (id=2129): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xf, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r2, &(0x7f0000002180)=""/4101, 0x1005, 0x1) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206030000000000000000000700000705000100070000000900020073797a31000000001400078008001240002000050800134000dfff0d0500050002000000050004000100000011000300686173683a6970"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) 49.888774581s ago: executing program 4 (id=2133): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}}, 0x0, 0x0, 0xc, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) mkdir(&(0x7f0000000200)='./file0\x00', 0x28e08a7aa33ba155) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0)) close(r3) 48.561998464s ago: executing program 4 (id=2134): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) sched_setscheduler(0x0, 0x2, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/hibernate_compression_threads', 0x60a02, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) 47.307337623s ago: executing program 4 (id=2139): r0 = open(&(0x7f0000000100)='./bus\x00', 0x24040, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_tables_names\x00') fchdir(r1) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0xfe8e, 0x12) finit_module(r0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8) getitimer(0x0, &(0x7f0000000000)) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000019380)={0x0, 0x0, 0x0}, 0x8800) socket$kcm(0x10, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000280)={0x1f, @none}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc4c85512, &(0x7f0000000280)={{0x3, 0x5, 0x263f, 0x0, '\x00', 0x20000000}, 0x0, [0x4, 0x0, 0x0, 0xfffdffffffffbffd, 0x0, 0x0, 0x0, 0x3, 0x71, 0x0, 0x0, 0x0, 0x100000000, 0x5, 0x2, 0x0, 0x1, 0x0, 0xc19, 0xfffffffffffffffc, 0x7, 0x0, 0x0, 0x2, 0x0, 0x40, 0x0, 0x9, 0x100000000, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xd451, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0xc1, 0x3, 0x0, 0x0, 0x0, 0x2f0, 0x0, 0xe411, 0x10000, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xfffffffffffffffe, 0x4, 0x7f, 0x0, 0x0, 0x9, 0x6d2e, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffff8001, 0x0, 0x10000, 0xfffffffffffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff4, 0x3, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x10, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x1, 0x3ff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x1, 0x10000000000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8]}) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = dup(r7) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x40000000000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000019580)={0x6, 0x15, &(0x7f00000193c0)=ANY=[@ANYRES64=r0, @ANYRESHEX=r4, @ANYBLOB="66000000000000000000060600000018120000", @ANYRES32=r0, @ANYRESDEC=r9], &(0x7f0000019300)='syzkaller\x00', 0x5, 0x6, &(0x7f0000000240)=""/6, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000194c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000019500)={0x4, 0x6, 0x7, 0x7ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000019540)=[r1, r8], 0x0, 0x10, 0x9}, 0x94) ioctl(r5, 0x8b2a, &(0x7f0000000040)) 42.724304902s ago: executing program 6 (id=2146): r0 = syz_usb_connect_ath9k(0x3, 0x7c, &(0x7f0000000c80)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3643, [{{0x9, 0x2, 0x48}}]}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newlink={0x38, 0x10, 0x437, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x40c89}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @loopback}}}], 0x20}}], 0x1, 0x4040880) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000080)=@ready={0x0, 0x0, 0x8, "c6094e40", {0x1, 0x4, 0x6, 0x5}}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000001240)=@ready={0x0, 0x0, 0x8, "de384b3d", {0x1, 0xca1e, 0x4000, 0x9, 0x5}}) 41.76237003s ago: executing program 4 (id=2148): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x1f, &(0x7f0000000c00)={&(0x7f0000005580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x74, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 41.626883585s ago: executing program 4 (id=2149): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x0) setsockopt$MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f00000002c0)={{0xa, 0x4e20, 0x7ff, @remote, 0x3fd}, {0xa, 0x4e22, 0x3, @loopback}, 0x0, {[0x6, 0x7, 0xe, 0x0, 0x10000, 0x0, 0x7, 0x101]}}, 0x5c) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0xa, 0x3, 0x3a) io_uring_setup(0x115c, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r8 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r8, &(0x7f0000000480), 0x2e9, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="02faffffffffffffff00000000000000"], 0x10}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000240)={0x0, 0x0, 0x2, r10, 0x9}, 0xc) write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r11, 0x5b15, &(0x7f0000000040)) 40.365880115s ago: executing program 6 (id=2152): unshare(0x26020400) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x7a52, @local, 0x4}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000000803000000000010000000000000000900010073797a30000000000600024088a800000500030000000000140004"], 0x44}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r2, r2, 0x2f}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000340)='fdinfo/4\x00') read$eventfd(r3, &(0x7f0000000280), 0x8) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$bt_hci(r4, 0x0, 0x3, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r6, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r7, 0x112, 0x8, &(0x7f00000003c0)=0x5, 0x4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) copy_file_range(r2, &(0x7f00000001c0)=0x7, r3, &(0x7f0000000200)=0x3, 0x4, 0x0) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x1c, r10, 0x1, 0x70bd22, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r11 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r11, 0x891d, &(0x7f0000000080)={'veth0_vlan\x00', 0x0}) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x58}}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 39.466376576s ago: executing program 6 (id=2154): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}}, 0x0, 0x0, 0xc, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) mkdir(&(0x7f0000000200)='./file0\x00', 0x28e08a7aa33ba155) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0)) close(r3) 38.83868539s ago: executing program 4 (id=2155): getpgrp(0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r1, &(0x7f0000002180)=""/4101, 0x1005, 0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206030000000000000000000700000705000100070000000900020073797a31000000001400078008001240002000050800134000dfff0d0500050002000000050004000100000011000300686173683a6970"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) 38.545946421s ago: executing program 6 (id=2157): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_usb_connect(0x0, 0x36, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) r1 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r1, &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00e}, 0x30044090) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000021000100000000000000"], 0x44}}, 0x20000040) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r3, 0x0, 0x0) close(r3) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendfile(r4, r4, 0x0, 0x200000) 38.152618999s ago: executing program 42 (id=2127): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001240)={r0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) close(0xffffffffffffffff) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405"], 0x70}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300001400"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x28, 0x3, 0x6, 0x301, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x8004) 37.664944457s ago: executing program 43 (id=2129): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xf, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r2, &(0x7f0000002180)=""/4101, 0x1005, 0x1) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206030000000000000000000700000705000100070000000900020073797a31000000001400078008001240002000050800134000dfff0d0500050002000000050004000100000011000300686173683a6970"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) 36.778130589s ago: executing program 6 (id=2160): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300), 0x800401, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="04000000080600000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x8804}, 0x20008001) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100), 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x54, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0xa}}, [{0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0x1000}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x8ac}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0xffffffff}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004091}, 0x4000c80c) 35.980974349s ago: executing program 6 (id=2161): socket$nl_generic(0x10, 0x3, 0x10) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xf, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r1, &(0x7f0000002180)=""/4101, 0x1005, 0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206030000000000000000000700000705000100070000000900020073797a31000000001400078008001240002000050800134000dfff0d0500050002000000050004000100000011000300686173683a6970"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) 23.699250975s ago: executing program 44 (id=2155): getpgrp(0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r1, &(0x7f0000002180)=""/4101, 0x1005, 0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206030000000000000000000700000705000100070000000900020073797a31000000001400078008001240002000050800134000dfff0d0500050002000000050004000100000011000300686173683a6970"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) 20.71904789s ago: executing program 45 (id=2161): socket$nl_generic(0x10, 0x3, 0x10) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xf, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r1, &(0x7f0000002180)=""/4101, 0x1005, 0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206030000000000000000000700000705000100070000000900020073797a31000000001400078008001240002000050800134000dfff0d0500050002000000050004000100000011000300686173683a6970"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) 14.129024115s ago: executing program 3 (id=2203): syz_open_dev$usbmon(&(0x7f0000000280), 0x17719ffffffffffd, 0x101900) syz_open_procfs(0x0, &(0x7f0000000080)='mountstats\x00') r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x42, [0x9, 0x2, 0x800, 0x6, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xfffffb9c, 0xfffffffc, 0x4, 0xfffffffb, 0x2004, 0x1, 0x4, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x0, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x2, 0x2, 0x4, 0x6, 0x4, 0x2, 0x6, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x3, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0xd, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x5, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x8001, 0x3, 0x41, 0x297, 0x5, 0x0, 0x985, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x5, 0x1, 0xffffffff, 0x81, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x37a, 0x9, 0xe, 0x5, 0x7, 0x2, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc585, 0x200ffff, 0xcd5, 0x7, 0x1f, 0x404, 0x4, 0x8, 0x7fff, 0x7, 0x9, 0x800e8b, 0x5, 0x80000001, 0x48, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x1, 0x1000, 0x80040101, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x3, 0x0, 0x7fff, 0x4, 0xffffffff, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0xf5c1, 0x3ff, 0x3, 0xcac, 0x100fffd, 0x40002005, 0x9, 0x4, 0x9, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x2008, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x803, 0x8320fb05, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x3, 0x2, 0x4, 0x8, 0x2851, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x80000000, 0x20008, 0x8a8, 0x6, 0x44, 0x409, 0x3, 0x744, 0x0, 0x12, 0x4, 0xe, 0x7fff, 0x2, 0xfffffff8, 0x401, 0xf, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x5, 0xf, 0xf, 0x136, 0x6]}, 0x45c) preadv2(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x4, 0x0, 0x17) syz_open_dev$usbmon(&(0x7f0000000040), 0x694c, 0x402402) socket$kcm(0x2, 0xa, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB='filter\x00'/36], &(0x7f0000000240)=0x24) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r5 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000009500"/24], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 12.954993245s ago: executing program 3 (id=2206): openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x44081, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f00000001c0)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x1}, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) unshare(0x8040600) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000980)={[0x1ffffffffd]}, 0x8, 0x0) signalfd4(r5, &(0x7f0000000140), 0x8, 0x0) 12.299417193s ago: executing program 0 (id=2207): write$rfkill(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_ALM_READ(r1, 0x40187013, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="b700000018000000bca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000061140400000000001d430000000000007a0a00fe0000001f6114000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767912d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce0900000000000000499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc682928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348de20f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97b4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b4f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb1bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb36e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b78825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e8a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffff8, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1f8) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r5, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e9ff00", 0x2000, &(0x7f00000041c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000004300)="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", 0x2000, &(0x7f0000008c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x24, 0x100000000, {0xf, 0xcbff, 0x0, {0x5, 0x5, 0x3, 0x6c, 0x7, 0x3, 0x1, 0x6, 0x101, 0xc000, 0xfffffffe, 0xffffffffffffffff, 0x0, 0x3, 0x801}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='trusted.syz\x00', 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000440)='./file0/file1\x00', &(0x7f0000000480)=@known='com.apple.system.Security\x00') 11.285958985s ago: executing program 0 (id=2209): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r2, &(0x7f0000000080)="403a3e5f0fd74905bd0ee36e1d4960050fe7f9b0fccebd8b2ef129561c025f2446a2962f3884c28e86116497d7bda364850eca4df16ea8ebf41a7ce67562c7863308172fe1e6d60cdc8771688799fffb10a46ed62cea1b7583647bc9e35b73a9a49b55bfde28a0393cc2594cd9b61b61ba8fce7affd5b37fcc5facec8fd302a0379999d2f63e9ef57763dca64ccb925aa4e4", &(0x7f0000000440)=""/236}, 0x20) io_submit(r1, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 10.461788406s ago: executing program 0 (id=2211): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net/nfsfs\x00') ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff}, 0x78) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB], 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x4911, 0x0, 0x1}, 0x14, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 9.175145371s ago: executing program 0 (id=2213): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) write$P9_RGETATTR(r1, &(0x7f0000000840)={0xa0, 0x19, 0x2, {0x0, {0x2, 0x1, 0x7}, 0x10b, 0x0, 0x0, 0x7, 0x5, 0x0, 0x200, 0x2, 0xd, 0x0, 0x2, 0x100000000, 0x80000000, 0xb1, 0xfff, 0x4df4, 0x0, 0x6}}, 0xa0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001300)={0x10, 0x2d, 0x1}, 0x10}], 0x1}, 0x300) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) socketpair$unix(0x1, 0x3, 0x0, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x84, &(0x7f0000000000), 0x90) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000000}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x20}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x102}}}, &(0x7f0000000200)='syzkaller\x00', 0xf, 0x0, 0x0, 0x40f00}, 0x94) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000005c0), 0x12) 7.675200079s ago: executing program 1 (id=2216): r0 = open(&(0x7f0000000100)='./bus\x00', 0x24040, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_tables_names\x00') fchdir(r1) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0xfe8e, 0x12) finit_module(r0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) getitimer(0x0, &(0x7f0000000000)) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000019380)={0x0, 0x0, 0x0}, 0x8800) socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000280)={0x1f, @none}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000000280)={{0x3, 0x5, 0x263f, 0x0, '\x00', 0x20000000}, 0x0, [0x4, 0x0, 0x0, 0xfffdffffffffbffd, 0x0, 0x0, 0x0, 0x3, 0x71, 0x0, 0x0, 0x0, 0x100000000, 0x5, 0x2, 0x0, 0x1, 0x0, 0xc19, 0xfffffffffffffffc, 0x7, 0x0, 0x0, 0x2, 0x0, 0x40, 0x0, 0x9, 0x100000000, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xd451, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0xc1, 0x3, 0x0, 0x0, 0x0, 0x2f0, 0x0, 0xe411, 0x10000, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xfffffffffffffffe, 0x4, 0x7f, 0x0, 0x0, 0x9, 0x6d2e, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffff8001, 0x0, 0x10000, 0xfffffffffffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff4, 0x3, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x10, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x1, 0x3ff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x1, 0x10000000000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8]}) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = dup(r6) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x40000000000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000019580)={0x6, 0x15, &(0x7f00000193c0)=ANY=[@ANYRES64=r0, @ANYRESHEX=r3, @ANYBLOB="66000000000000000000060600000018120000", @ANYRES32=r0, @ANYRESDEC=r8], &(0x7f0000019300)='syzkaller\x00', 0x5, 0x6, &(0x7f0000000240)=""/6, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000194c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000019500)={0x4, 0x6, 0x7, 0x7ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000019540)=[r1, r7], 0x0, 0x10, 0x9}, 0x94) ioctl(r4, 0x8b2a, &(0x7f0000000040)) 6.913110117s ago: executing program 1 (id=2217): write$rfkill(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_ALM_READ(r1, 0x40187013, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffff8, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1f8) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r5, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e9ff00", 0x2000, &(0x7f00000041c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000004300)="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", 0x2000, &(0x7f0000008c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x24, 0x100000000, {0xf, 0xcbff, 0x0, {0x5, 0x5, 0x3, 0x6c, 0x7, 0x3, 0x1, 0x6, 0x101, 0xc000, 0xfffffffe, 0xffffffffffffffff, 0x0, 0x3, 0x801}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='trusted.syz\x00', 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000440)='./file0/file1\x00', &(0x7f0000000480)=@known='com.apple.system.Security\x00') 6.805771911s ago: executing program 3 (id=2218): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r3 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r5 = syz_open_procfs(r3, &(0x7f0000000100)='stack\x00') read$FUSE(r5, &(0x7f0000004d80)={0x2020}, 0x2053) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @private=0xa010101, 0x4e24, 0x1, 'none\x00', 0x5, 0x32bd, 0x9}, {@loopback, 0x4e25, 0x2, 0xfffffffe, 0x8, 0x12d5c}}, 0x44) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000006"], 0x28}}, 0x8000) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x1c, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x78}}, @ringbuf_query, @jmp={0x5, 0x1, 0xb, 0x6, 0xb, 0xc, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x68, &(0x7f0000000340)=""/104, 0x41100, 0x22, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000480)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x7, 0x6, 0x5}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000540)=[r5, r4, r4, r4, r4, r5], &(0x7f0000000580)=[{0x1, 0x2, 0xe, 0x6}, {0x0, 0x2, 0x9, 0xb}, {0x3, 0x1, 0x6, 0x8}, {0x4, 0x3, 0x11, 0x5}, {0x1, 0x3, 0x5, 0xb}]}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 5.806418341s ago: executing program 1 (id=2219): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}}, 0x0, 0x0, 0xc, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) mkdir(&(0x7f0000000200)='./file0\x00', 0x28e08a7aa33ba155) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000040)=0xc) 4.902623774s ago: executing program 8 (id=2190): openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x44081, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f00000001c0)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x1}, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000980)={[0x1ffffffffd]}, 0x8, 0x0) signalfd4(r4, &(0x7f0000000140), 0x8, 0x0) 4.894667757s ago: executing program 5 (id=2183): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x7, 0x80, 0x4, 0x1, {{0xd, 0x4, 0x0, 0x24, 0x34, 0x67, 0x0, 0x81, 0x2b, 0x0, @broadcast, @broadcast, {[@noop, @timestamp={0x44, 0x1c, 0xe4, 0x0, 0x1, [0x0, 0x4, 0x62, 0x5, 0x4, 0x2]}]}}}}}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x1, 0x8, 0x7, 0x16, 0x40, 0x800, 0xd}, &(0x7f0000000480)=0x9c) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000000)='/proc\x00\x00\x00\x00\x00\x00\x00\x00D\x00\x00v4\x00\x00s/\x92Ync_\x00le\xf44.\xab%nN\xd4\xfc\x11\x00\xd1l,'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x122) lseek(r4, 0xfff, 0x0) getdents64(r4, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000500)={0x2c2, 0x209, 0x834d, 0x0, r2}, &(0x7f0000000540)=0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)=@newtfilter={0x84, 0x2c, 0xd27, 0x70fd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_ACT={0x50, 0x3, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0xe90, 0x0, 0x6, 0x101}, 0x21}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000140)) pwritev(r8, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x6}], 0x1, 0x0, 0x500) r9 = syz_open_dev$tty20(0xc, 0x4, 0x1) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r10, 0x402c542d, &(0x7f0000000140)={0xcbc6, 0x6a9, 0xd, 0x10001, 0x0, "4ae23ae17df2e98c69ba36c4095c911abad88f"}) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000000)=0x9) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x8, 0xfff3}, {}, {0xc, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xfff3, 0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x840) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x2f, 0x1, 0x63, 0x89, 0x26, @dev={0xfe, 0x80, '\x00', 0x29}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x700, 0x7fff, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x0, 0x7, 0x3, 0x3, 0x79, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7800, 0x8000, 0x99, 0xfe7}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2}, &(0x7f0000000300)=0xc) 4.589694099s ago: executing program 0 (id=2220): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x20000}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.550918571s ago: executing program 3 (id=2221): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net/nfsfs\x00') ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff}, 0x78) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB], 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x4911, 0x0, 0x1}, 0x14, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 4.453762575s ago: executing program 5 (id=2222): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x29cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x14a0000, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xbc, 0x0, 0x71, 0x2, 0x6, 0x2, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x3, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x0, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x313, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x9, 0x1, 0x2000002, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x8, 0x2, 0x7f, 0x9, 0x401, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0xa, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x802, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0x19bd, 0x3, 0xb, 0x5, 0xfffffffe, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0xfffffffe, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x4, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x5, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x3, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40) dup3(r1, r1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_init(0xf00, 0x1) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) socket(0x10, 0x2, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x50240) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x10040) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) move_pages(r0, 0x0, 0x0, &(0x7f0000000240)=[0x1], 0x0, 0x0) creat(&(0x7f0000000440)='./file0\x00', 0x0) 3.820515995s ago: executing program 3 (id=2223): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40000017}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[], 0x20}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0xb6, 0x7fff1004}]}) link(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) ioctl$FS_IOC_GETFSSYSFSPATH(r2, 0x80811501, &(0x7f0000000340)={0x80}) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) setrlimit(0xa, &(0x7f0000000000)={0x3, 0xfff}) iopl(0x3) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x3c) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x4c, 0x14, 0x511, 0x0, 0x0, {0x2b, 0x0, 0x0, 0x1, {0x4e22, 0x0, [], [0x0, 0x0, 0x0, 0x3]}, 0x4}}, 0x4c}, 0x1, 0x0, 0x0, 0x4000840}, 0x8004) r6 = shmget(0x3, 0x2000, 0x10, &(0x7f0000ffe000/0x2000)=nil) shmat(r6, &(0x7f0000ffd000/0x3000)=nil, 0x2000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000d00)=@mgmt_frame=@reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1}, {0x80}, @broadcast, @broadcast, @from_mac=@device_b, {0x8, 0xd92}}, 0x800, 0x7, @broadcast, {0x0, 0x6, @default_ibss_ssid}, @void, @void, [{0xdd, 0x20, "63da52de36534405d9ae0d39f5b213003d14fec375565ea4030c366c3fe14bf1"}, {0xdd, 0xe0, "e815ed84f4d6c9b8557d04a321950275212aff3923c2dcc832598d6f46da241eabe53d2a99c0298d8907136e788a6dc2c205b4c281be423d2e95ab69b134c406f832df9dbf441ce9b37e040c05e4193dde49b9fbf517698327481890470765b35d687de71066a2e49db17582c618ee36bcfc1adef5eda182dfcefe618243a220f4d4e9e06d982d1b5685d6177e16df2dd159609c22edd0e6764c18840999b66bf61cef924e9e726994bc62ebb90c4dbdb3649bfc027ba3990e1b339c2caa3a8963ea447079edf310ea83ff46712ea2345bec763a85b77d46d73e0129bb2107e3"}, {0xdd, 0x54, "158993c7e135bb0e017c30dec1c8698bc22dd27d7bbd0795131b48ff54048591d3c8306022f30b84c81bad351a00de2d11205acdc633d576f9fb12786a5fae86b4499fd1b0d5607f749ec5bf4a71c0086868410d"}, {0xdd, 0x9a, "60509551908b9579598ca5ea1dc509022053779a5001c36079ab6240ce9a3a71cca51f9b0fd9029d557255be52c5cc08f1f96a91e770f0910f1d5b100e655b39063a5150e17541b2763c082c0c2c2a53b1f59b2cd0aa8ce0d3c7279a9eef9a3e0574a0f24fad35c7152820d811f7c779047e66c363de971d17cb85b06e6cd051d360694cae41331a68a634961f37a2833f5847508aa2cabb6e10"}, {0xdd, 0xbf, "0849e5aa41f9773321bae6143e35ca00784fc46bf7bc17507d2e922bd1351d2d32237b0377ada285018d946d86ebac8b6d186c451039858807c389a6eb9fedc8754ee676beb376f3faa6b1af30f4d4dc3772ed5bf142116cca54779d527ed73924ac3ca7c8fe6f9c2ba2705667ffd5b7d3ad0aa1940a9e7a2e87e930b91a7eeeb238e240c351768a975450c293c01defa801ffd8b6f7de479ab6e85f9298ad3ef6c6a88e343b3de0bebcd62928223658c2593680d6be9703491ae600940d96"}, {0xdd, 0x2a, "6c59d34e62976389f927e4ca59468c5918e693856828d4857499200c76a3acfa7a4e337ea57493476c84"}, {0xdd, 0xeb, "6c6b9e66043565503abdb86957830bfb02efa1233fb2fade39182df6bae9e9cef8eb99c1e451652d872800944b76d3e624819ff14f065ac188194a73225ae055cdf75f1ce59b0041e0ae94fc73fc15c4aa7c112ea592999b81e3ae645aaa527a014fe4022a33f610068ee8d42dd6fef875667f3ac01361b4d2e31f08702c25d93bb25f91f888b966af6c28f4f4466879c5c702594063e47352bd7ee2298f532278c34a4e173e556e98ab8ec0f31d26551e0c6b7bb9aeccd11be5dc6bf384a105696d5d9be40e59c5e09a2ecea10f92c320da59a3ff1d8efc1edbb90025202e7dd405550f53cac4df72b5be"}]}, 0x3fa) 3.032363041s ago: executing program 8 (id=2224): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6530303030303000040000000000003600"/29], 0x2d, 0xfffffffffffffff9) r4 = syz_io_uring_setup(0x1eb6, &(0x7f0000000200)={0x0, 0xe094, 0x40}, &(0x7f0000000780), &(0x7f0000000040)) r5 = eventfd2(0x0, 0x865d0cd291d3b4be) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000000)=r5, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, 0x0, 0x1) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000440)) r6 = add_key$keyring(&(0x7f0000000080), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000480)='.request_key_auth\x00', &(0x7f0000000180), &(0x7f0000000100), 0x0, r6) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000400)=0x7) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r7, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 2.315060139s ago: executing program 3 (id=2225): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/uevent_helper', 0x28201, 0x152) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESHEX=r1, @ANYRES16=r1, @ANYRESDEC=r1], 0x48) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b000000000300001f1e9b015b0000", @ANYRES16=r4, @ANYRES8=0x0, @ANYRESDEC=r5, @ANYRES32=r2, @ANYBLOB="00000000000000000000000000000000000000000000243fc2ab239578440efa00a7031374f300000000009b", @ANYRES16=r0], 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c10000010003705007a9b0df2205a093c1c6000001200000000ffee0000", @ANYRES16, @ANYRES16=r6], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0002000000000000b70256e52692000002000000850000008600000018112c5e", @ANYRES8=r4, @ANYBLOB="0000000000000000b70c0000000000007b8af8ff00000000bca2000000000000a6020000f80000000000003000000000b704000000000000850000003300000095d9de7522acf0e32c3e0afd0384d5a25129366ee80f01d216cdf4a83c7bdfb6fd9d431f063368e0b2cd4a1ad76ef9a9e3c7a397a490a372d3a5fa4f9c03fc0ba5f59929b2282862bb0b6d86f682969e6488f7cb4b15c6"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x100002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x35) sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, &(0x7f00000000c0)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 2.252531549s ago: executing program 1 (id=2226): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a66000000000000000000bbee07cb010052f436dd2a00"/42, 0x2a}, {&(0x7f0000000100)="aa1d484ea0000000f747082f52a9d212fa0400db0e8f21d5bc27bd49eb067a06ac7184a3a476e200d8cd201e6a4a1323244a06142500d6419ea1abb2bb31b662b04cb9c3", 0x44}], 0x2) (fail_nth: 4) 2.241446345s ago: executing program 0 (id=2227): io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x40800, 0x3}) socket$inet_icmp(0x2, 0x2, 0x1) gettid() r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x62300) close(r0) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102384, 0x18ff0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, 0x0, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)=0x3) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) 1.971071084s ago: executing program 8 (id=2228): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x7, 0x0, &(0x7f0000000000)) 1.500359889s ago: executing program 8 (id=2229): r0 = open(&(0x7f0000000100)='./bus\x00', 0x24040, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_tables_names\x00') fchdir(r1) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0xfe8e, 0x12) finit_module(r0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8) getitimer(0x0, &(0x7f0000000000)) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000019380)={0x0, 0x0, 0x0}, 0x8800) socket$kcm(0x10, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000280)={0x1f, @none}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r7, 0xc4c85512, &(0x7f0000000280)={{0x3, 0x5, 0x263f, 0x0, '\x00', 0x20000000}, 0x0, [0x4, 0x0, 0x0, 0xfffdffffffffbffd, 0x0, 0x0, 0x0, 0x3, 0x71, 0x0, 0x0, 0x0, 0x100000000, 0x5, 0x2, 0x0, 0x1, 0x0, 0xc19, 0xfffffffffffffffc, 0x7, 0x0, 0x0, 0x2, 0x0, 0x40, 0x0, 0x9, 0x100000000, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xd451, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0xc1, 0x3, 0x0, 0x0, 0x0, 0x2f0, 0x0, 0xe411, 0x10000, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xfffffffffffffffe, 0x4, 0x7f, 0x0, 0x0, 0x9, 0x6d2e, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffff8001, 0x0, 0x10000, 0xfffffffffffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff4, 0x3, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x10, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x1, 0x3ff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x1, 0x10000000000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8]}) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r9 = dup(r8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000019580)={0x6, 0x15, &(0x7f00000193c0)=ANY=[@ANYRES64=r0, @ANYRESHEX=r4, @ANYBLOB="66000000000000000000060600000018120000", @ANYRES32=r0, @ANYRESDEC], &(0x7f0000019300)='syzkaller\x00', 0x5, 0x6, &(0x7f0000000240)=""/6, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000194c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000019500)={0x4, 0x6, 0x7, 0x7ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000019540)=[r1, r9], 0x0, 0x10, 0x9}, 0x94) ioctl(r6, 0x8b2a, &(0x7f0000000040)) 1.413897903s ago: executing program 1 (id=2230): sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e0002000000e0000009000000000000000002000100000000000000000200000000030005003c000000020000007f0000010000000000000000"], 0x50}}, 0x0) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x20000, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000300)={0x0, @initdev, @multicast1}, &(0x7f0000000400)=0xc) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mknodat(r0, &(0x7f0000000340)='./file0\x00', 0x40, 0xffffff81) syz_io_uring_setup(0x109, 0x0, 0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000280), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f0000003ac0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000200)={0x100, 0xffffffffffffffff, 'id1\x00'}) ioctl$RTC_AIE_ON(r3, 0x7001) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) pipe(&(0x7f0000000140)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 538.355562ms ago: executing program 1 (id=2231): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r3 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r5 = syz_open_procfs(r3, &(0x7f0000000100)='stack\x00') read$FUSE(r5, &(0x7f0000004d80)={0x2020}, 0x2053) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @private=0xa010101, 0x4e24, 0x1, 'none\x00', 0x5, 0x32bd, 0x9}, {@loopback, 0x4e25, 0x2, 0xfffffffe, 0x8, 0x12d5c}}, 0x44) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000006"], 0x28}}, 0x8000) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x1c, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x78}}, @ringbuf_query, @jmp={0x5, 0x1, 0xb, 0x6, 0xb, 0xc, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x68, &(0x7f0000000340)=""/104, 0x41100, 0x22, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000480)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x7, 0x6, 0x5}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000540)=[r5, r4, r4, r4, r4, r5], &(0x7f0000000580)=[{0x1, 0x2, 0xe, 0x6}, {0x0, 0x2, 0x9, 0xb}, {0x3, 0x1, 0x6, 0x8}, {0x4, 0x3, 0x11, 0x5}, {0x1, 0x3, 0x5, 0xb}]}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 347.435372ms ago: executing program 8 (id=2232): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r4}, 0x10) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r6) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="84000040", @ANYRES16=r7, @ANYBLOB="08002bbd7000fbdbdf25030000000500010000000000140006006e6574706369300000000000000000000500010000000000080004000000ffff05000100010000002900070073797374656d5f753a6f626a6563745f723a6b6c6f67645f7661725f72756e5f743a733000000000050001000000000008000400e0000001"], 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x24000004) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010428bd7010ffdbdf25030000002c000700737973746d5f753a6f626a573e6563745f723a636865636b706f6c6963795f657865635f743a73300014000600000000"], 0x68}, 0x1, 0x0, 0x0, 0x200048d0}, 0x20040080) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r8 = dup(r0) getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f0000000040)=""/229, &(0x7f0000000140)=0xe5) ioctl$BLKRRPART(r8, 0x125f, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_buf(r8, 0x29, 0x2d, &(0x7f0000000840)="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", 0x1000) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000400)=0x5) 0s ago: executing program 5 (id=2233): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net/nfsfs\x00') ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff}, 0x78) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB], 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x4911, 0x0, 0x1}, 0x14, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) kernel console output (not intermixed with test programs): cated: 4096 (num: 1 largest: 4096), free: 0 (num: 0 largest: 0) [ 816.975189][ T30] audit: type=1400 audit(1768455620.916:416): avc: denied { map } for pid=13643 comm="syz.3.1851" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 817.214951][ T30] audit: type=1400 audit(1768455620.916:417): avc: denied { execute } for pid=13643 comm="syz.3.1851" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 817.786425][ T5821] Bluetooth: hci5: unexpected cc 0x2039 length: 9 > 1 [ 817.794487][ T5821] Bluetooth: hci5: unexpected event for opcode 0x2039 [ 817.995893][T13657] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1854'. [ 818.085219][T13668] overlayfs: failed to resolve './file0': -2 [ 818.304072][T13674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1845'. [ 818.554574][T13678] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1857'. [ 821.815147][ T5821] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 821.824698][ T5821] Bluetooth: hci5: Injecting HCI hardware error event [ 821.834409][ T5821] Bluetooth: hci5: hardware error 0x00 [ 822.206808][T13710] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1865'. [ 823.057826][ T30] audit: type=1400 audit(1768455626.916:418): avc: denied { open } for pid=13718 comm="syz.3.1870" path="/dev/ptyqa" dev="devtmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 824.168143][ T5821] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 825.496455][T13721] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1871'. [ 826.187299][ T49] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 826.291499][ T30] audit: type=1400 audit(1768455630.256:419): avc: denied { map } for pid=13751 comm="syz.1.1877" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 826.467153][ T49] usb 8-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 826.487051][ T49] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.446816][ T49] usb 8-1: config 0 descriptor?? [ 827.458552][ T49] usb 8-1: selecting invalid altsetting 3 [ 827.475461][ T49] comedi comedi5: could not set alternate setting 3 in high speed [ 827.496218][ T49] usbduxsigma 8-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 827.672775][ T49] usbduxsigma 8-1:0.0: probe with driver usbduxsigma failed with error -22 [ 827.679130][T13745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 827.803388][T13745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 828.083576][T13770] netlink: 'syz.0.1883': attribute type 4 has an invalid length. [ 828.422422][ T49] usb 8-1: USB disconnect, device number 13 [ 828.454347][T11914] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 829.035558][T13776] FAULT_INJECTION: forcing a failure. [ 829.035558][T13776] name failslab, interval 1, probability 0, space 0, times 0 [ 829.049578][T13776] CPU: 1 UID: 0 PID: 13776 Comm: syz.7.1885 Tainted: G L syzkaller #0 PREEMPT(full) [ 829.049605][T13776] Tainted: [L]=SOFTLOCKUP [ 829.049610][T13776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 829.049620][T13776] Call Trace: [ 829.049626][T13776] [ 829.049632][T13776] dump_stack_lvl+0x16c/0x1f0 [ 829.049659][T13776] should_fail_ex+0x512/0x640 [ 829.049683][T13776] ? __kvmalloc_node_noprof+0x129/0xa40 [ 829.049706][T13776] should_failslab+0xc2/0x120 [ 829.049728][T13776] __kvmalloc_node_noprof+0x14a/0xa40 [ 829.049748][T13776] ? seq_read_iter+0x830/0x12d0 [ 829.049775][T13776] ? seq_read_iter+0x830/0x12d0 [ 829.049795][T13776] seq_read_iter+0x830/0x12d0 [ 829.049814][T13776] ? preempt_schedule_thunk+0x16/0x30 [ 829.049836][T13776] ? avc_policy_seqno+0x9/0x20 [ 829.049856][T13776] kernfs_fop_read_iter+0x46c/0x610 [ 829.049872][T13776] ? rw_verify_area+0xcf/0x6c0 [ 829.049893][T13776] vfs_read+0x8bf/0xcf0 [ 829.049919][T13776] ? __pfx_vfs_read+0x10/0x10 [ 829.049956][T13776] ksys_read+0x12a/0x250 [ 829.049976][T13776] ? __pfx_ksys_read+0x10/0x10 [ 829.049999][T13776] ? rcu_is_watching+0x12/0xc0 [ 829.050022][T13776] do_syscall_64+0xcd/0xf80 [ 829.050046][T13776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.050062][T13776] RIP: 0033:0x7fcdf0b8f749 [ 829.050076][T13776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 829.050091][T13776] RSP: 002b:00007fcdf193e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 829.050107][T13776] RAX: ffffffffffffffda RBX: 00007fcdf0de6180 RCX: 00007fcdf0b8f749 [ 829.050118][T13776] RDX: 0000000000002020 RSI: 0000200000002900 RDI: 0000000000000008 [ 829.050128][T13776] RBP: 00007fcdf193e090 R08: 0000000000000000 R09: 0000000000000000 [ 829.050137][T13776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 829.050146][T13776] R13: 00007fcdf0de6218 R14: 00007fcdf0de6180 R15: 00007fff73d56b58 [ 829.050170][T13776] [ 829.265467][T11914] usb 4-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=5e.ad [ 829.274747][T11914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.316856][T11914] usb 4-1: config 0 descriptor?? [ 829.474122][T11933] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 829.629047][T13767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 829.651071][T13767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 829.716856][T11933] usb 6-1: Using ep0 maxpacket: 16 [ 829.734874][T11933] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.826843][T11933] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 829.888545][T11933] usb 6-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 829.927243][T11933] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.945283][T11914] snd-usb-hiface 4-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 829.998630][T11933] usb 6-1: config 0 descriptor?? [ 830.007565][T11933] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 830.220472][T13772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 830.264405][T13772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 830.825256][T13794] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1889'. [ 831.127941][T13795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 831.144416][T13795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.716637][T13800] zonefs (nullb0) ERROR: Not a zoned block device [ 831.883219][T11933] usb 4-1: USB disconnect, device number 23 [ 832.007816][ T30] audit: type=1400 audit(1768455635.976:420): avc: denied { read } for pid=13809 comm="syz.0.1894" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 832.075211][ T30] audit: type=1400 audit(1768455636.046:421): avc: denied { write } for pid=13806 comm="syz.7.1892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 832.079974][T13811] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1893'. [ 832.248219][ T30] audit: type=1400 audit(1768455636.216:422): avc: denied { ioctl } for pid=13808 comm="syz.3.1893" path="socket:[36242]" dev="sockfs" ino=36242 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 832.322809][ T30] audit: type=1400 audit(1768455636.216:423): avc: denied { create } for pid=13808 comm="syz.3.1893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 832.724590][T11914] usb 6-1: USB disconnect, device number 16 [ 832.836863][T13810] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 832.862893][T13810] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 832.909551][T13810] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 832.923548][T13810] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 832.930842][T13831] fuse: Bad value for 'fd' [ 832.983259][T13810] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 832.997047][T13810] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 833.012956][T13810] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 833.053132][T13810] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 833.094336][T13834] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1897'. [ 833.404147][T11914] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 833.604000][T11914] usb 8-1: Using ep0 maxpacket: 32 [ 833.625518][T11914] usb 8-1: config index 0 descriptor too short (expected 36, got 12) [ 833.647657][T13844] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1900'. [ 833.754086][T11914] usb 8-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 833.764301][T11914] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 833.773257][T11914] usb 8-1: New USB device found, idVendor=03fc, idProduct=05d8, bcdDevice= 0.00 [ 833.783371][T11914] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.923693][T11914] usb 8-1: config 0 descriptor?? [ 834.194275][T11933] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 834.222680][ T5821] Bluetooth: hci2: command 0x0406 tx timeout [ 834.404008][T11933] usb 4-1: Using ep0 maxpacket: 32 [ 834.410453][T11933] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 834.431007][T11933] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 834.471127][T11933] usb 4-1: config 0 has no interface number 0 [ 834.501739][T11914] usb 8-1: USB disconnect, device number 14 [ 834.525050][T11933] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 834.593529][T11933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.615269][T11933] usb 4-1: Product: syz [ 834.619459][T11933] usb 4-1: Manufacturer: syz [ 834.624439][T11933] usb 4-1: SerialNumber: syz [ 834.632466][T11933] usb 4-1: config 0 descriptor?? [ 834.711921][T11933] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 834.912236][T11933] usb 4-1: qt2_setup_urbs - submit read urb failed -8 [ 834.933059][T11933] quatech2 4-1:0.51: probe with driver quatech2 failed with error -8 [ 834.934451][ T5821] Bluetooth: hci1: command 0x0406 tx timeout [ 834.972457][T13857] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 835.014024][ T5821] Bluetooth: hci0: command 0x0405 tx timeout [ 835.014107][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 835.211518][T13848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.220077][T13848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.242333][T13848] Option ',È,¼¥¡AÒ®„äT%^üûŠ7çÖ‰¢:1u@߇ê¾'kz¯JÐYøªÃ!ÞyîWàNÁ˜öY§\ÏŸ† ÔEE‰‡I…âV ô³QDžà»qªUùUu†' to dns_resolver key: bad/missing value [ 835.738209][T11933] usb 4-1: USB disconnect, device number 24 [ 835.753276][ T30] audit: type=1400 audit(1768455639.196:424): avc: denied { name_bind } for pid=13847 comm="syz.3.1903" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 836.294051][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 836.654706][T13869] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 837.116571][ T5821] Bluetooth: hci0: command 0x0405 tx timeout [ 837.116880][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 837.122653][ T5821] Bluetooth: hci3: command 0x0406 tx timeout [ 837.522382][T13879] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1908'. [ 839.391852][T13898] FAULT_INJECTION: forcing a failure. [ 839.391852][T13898] name failslab, interval 1, probability 0, space 0, times 0 [ 839.404702][T13898] CPU: 0 UID: 0 PID: 13898 Comm: syz.1.1912 Tainted: G L syzkaller #0 PREEMPT(full) [ 839.404729][T13898] Tainted: [L]=SOFTLOCKUP [ 839.404735][T13898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 839.404744][T13898] Call Trace: [ 839.404749][T13898] [ 839.404756][T13898] dump_stack_lvl+0x16c/0x1f0 [ 839.404783][T13898] should_fail_ex+0x512/0x640 [ 839.404808][T13898] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 839.404825][T13898] should_failslab+0xc2/0x120 [ 839.404847][T13898] kmem_cache_alloc_noprof+0x83/0x770 [ 839.404865][T13898] ? skb_clone+0x190/0x3f0 [ 839.404887][T13898] ? skb_clone+0x190/0x3f0 [ 839.404903][T13898] skb_clone+0x190/0x3f0 [ 839.404922][T13898] netlink_deliver_tap+0xabd/0xd30 [ 839.404953][T13898] netlink_unicast+0x64c/0x870 [ 839.404977][T13898] ? __pfx_netlink_unicast+0x10/0x10 [ 839.405009][T13898] netlink_sendmsg+0x8c8/0xdd0 [ 839.405035][T13898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 839.405068][T13898] ____sys_sendmsg+0xa5d/0xc30 [ 839.405091][T13898] ? copy_msghdr_from_user+0x10a/0x160 [ 839.405109][T13898] ? __pfx_____sys_sendmsg+0x10/0x10 [ 839.405137][T13898] ? sched_clock_cpu+0x6c/0x530 [ 839.405161][T13898] ___sys_sendmsg+0x134/0x1d0 [ 839.405180][T13898] ? __pfx____sys_sendmsg+0x10/0x10 [ 839.405197][T13898] ? kvm_sched_clock_read+0x11/0x20 [ 839.405217][T13898] ? sched_clock+0x38/0x60 [ 839.405254][T13898] ? __schedule+0x1090/0x6150 [ 839.405282][T13898] __sys_sendmsg+0x16d/0x220 [ 839.405301][T13898] ? __pfx___sys_sendmsg+0x10/0x10 [ 839.405337][T13898] do_syscall_64+0xcd/0xf80 [ 839.405361][T13898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.405377][T13898] RIP: 0033:0x7fe35018f749 [ 839.405390][T13898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 839.405404][T13898] RSP: 002b:00007fe34e3d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 839.405415][T13898] RAX: ffffffffffffffda RBX: 00007fe3503e6090 RCX: 00007fe35018f749 [ 839.405422][T13898] RDX: 0000000024000080 RSI: 0000200000000780 RDI: 0000000000000006 [ 839.405428][T13898] RBP: 00007fe34e3d5090 R08: 0000000000000000 R09: 0000000000000000 [ 839.405433][T13898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 839.405439][T13898] R13: 00007fe3503e6128 R14: 00007fe3503e6090 R15: 00007ffc007ef988 [ 839.405452][T13898] [ 839.930420][T13902] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1914'. [ 840.010935][T11914] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 840.314009][T11914] usb 4-1: Using ep0 maxpacket: 32 [ 840.328200][T11914] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 840.336879][T11914] usb 4-1: config 0 has no interface number 0 [ 840.382965][T11914] usb 4-1: config 0 interface 196 has no altsetting 0 [ 840.407680][T11914] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 840.427003][T11914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.467395][T11914] usb 4-1: Product: syz [ 840.471591][T11914] usb 4-1: Manufacturer: syz [ 840.494587][T11914] usb 4-1: SerialNumber: syz [ 840.517467][T11914] usb 4-1: config 0 descriptor?? [ 840.766175][T13908] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1915'. [ 841.950489][T13902] Can't find ip_set type hash:i [ 843.684974][T11914] ipheth 4-1:0.196: Unable to find endpoints [ 843.704654][T11914] usb 4-1: USB disconnect, device number 25 [ 843.904187][T13927] netlink: 'syz.7.1921': attribute type 3 has an invalid length. [ 843.912081][T13927] netlink: 120 bytes leftover after parsing attributes in process `syz.7.1921'. [ 844.094214][T11914] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 844.305805][T11914] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 844.335877][T11914] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 844.358085][T11914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.384496][T11914] usb 4-1: Product: syz [ 844.388684][T11914] usb 4-1: Manufacturer: syz [ 844.393279][T11914] usb 4-1: SerialNumber: syz [ 844.427367][T11914] usb 4-1: config 0 descriptor?? [ 844.477759][T11914] ims_pcu 4-1:0.0: Missing CDC union descriptor [ 844.507097][T11914] ims_pcu 4-1:0.0: probe with driver ims_pcu failed with error -22 [ 844.645183][T13943] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1923'. [ 844.891189][T13925] ip6_vti0: entered promiscuous mode [ 844.920023][T13925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1920'. [ 845.475341][T13952] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1926'. [ 846.354523][T11914] usb 4-1: USB disconnect, device number 26 [ 847.142176][ T30] audit: type=1326 audit(1768455651.106:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13959 comm="syz.0.1930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bae58f749 code=0x7ffc0000 [ 847.269766][ T30] audit: type=1326 audit(1768455651.136:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13959 comm="syz.0.1930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bae58f749 code=0x7ffc0000 [ 847.293987][ T30] audit: type=1326 audit(1768455651.136:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13959 comm="syz.0.1930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f1bae58f749 code=0x7ffc0000 [ 847.377401][ T30] audit: type=1326 audit(1768455651.136:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13959 comm="syz.0.1930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bae58f749 code=0x7ffc0000 [ 847.447237][ T30] audit: type=1326 audit(1768455651.136:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13959 comm="syz.0.1930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bae58f749 code=0x7ffc0000 [ 847.471283][ T30] audit: type=1326 audit(1768455651.136:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13959 comm="syz.0.1930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1bae58f749 code=0x7ffc0000 [ 847.707692][ T30] audit: type=1326 audit(1768455651.136:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13959 comm="syz.0.1930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bae58f749 code=0x7ffc0000 [ 847.841816][ T30] audit: type=1326 audit(1768455651.136:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13959 comm="syz.0.1930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bae58f749 code=0x7ffc0000 [ 847.891044][ T30] audit: type=1326 audit(1768455651.146:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13959 comm="syz.0.1930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f1bae58f749 code=0x7ffc0000 [ 847.979734][ T30] audit: type=1326 audit(1768455651.146:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13959 comm="syz.0.1930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bae58f749 code=0x7ffc0000 [ 849.357025][T13975] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 849.364269][T13975] IPv6: NLM_F_CREATE should be set when creating new route [ 849.671195][T14005] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1939'. [ 851.156031][T14017] netlink: 'syz.5.1944': attribute type 4 has an invalid length. [ 852.619556][T14035] FAULT_INJECTION: forcing a failure. [ 852.619556][T14035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 852.632836][T14035] CPU: 0 UID: 0 PID: 14035 Comm: syz.7.1947 Tainted: G L syzkaller #0 PREEMPT(full) [ 852.632861][T14035] Tainted: [L]=SOFTLOCKUP [ 852.632865][T14035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 852.632871][T14035] Call Trace: [ 852.632875][T14035] [ 852.632879][T14035] dump_stack_lvl+0x16c/0x1f0 [ 852.632900][T14035] should_fail_ex+0x512/0x640 [ 852.632919][T14035] _copy_from_user+0x2e/0xd0 [ 852.632935][T14035] copy_msghdr_from_user+0x98/0x160 [ 852.632947][T14035] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 852.632964][T14035] ___sys_sendmsg+0xfe/0x1d0 [ 852.632975][T14035] ? __pfx____sys_sendmsg+0x10/0x10 [ 852.632986][T14035] ? __schedule+0x3bbb/0x6150 [ 852.633014][T14035] __sys_sendmsg+0x16d/0x220 [ 852.633025][T14035] ? __pfx___sys_sendmsg+0x10/0x10 [ 852.633035][T14035] ? irqentry_exit+0x1dd/0x8c0 [ 852.633053][T14035] ? trace_irq_enable.constprop.0+0x2f/0x110 [ 852.633069][T14035] do_syscall_64+0xcd/0xf80 [ 852.633084][T14035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.633094][T14035] RIP: 0033:0x7fcdf0b8f749 [ 852.633103][T14035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 852.633113][T14035] RSP: 002b:00007fcdf195f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 852.633123][T14035] RAX: ffffffffffffffda RBX: 00007fcdf0de6090 RCX: 00007fcdf0b8f749 [ 852.633130][T14035] RDX: 0000000004040800 RSI: 0000200000000480 RDI: 0000000000000007 [ 852.633135][T14035] RBP: 00007fcdf195f090 R08: 0000000000000000 R09: 0000000000000000 [ 852.633141][T14035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 852.633146][T14035] R13: 00007fcdf0de6128 R14: 00007fcdf0de6090 R15: 00007fff73d56b58 [ 852.633160][T14035] [ 853.267750][T14037] syzkaller1: entered promiscuous mode [ 853.273235][T14037] syzkaller1: entered allmulticast mode [ 853.303248][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 853.303258][ T30] audit: type=1400 audit(1768455657.266:443): avc: denied { ioctl } for pid=14038 comm="syz.7.1950" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 857.263193][ T49] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 857.347738][T14082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1961'. [ 857.494041][ T49] usb 8-1: config 8 has an invalid interface number: 8 but max is 1 [ 857.520090][ T49] usb 8-1: config 8 has an invalid interface number: 8 but max is 1 [ 857.633986][ T49] usb 8-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 857.653197][ T49] usb 8-1: config 8 has no interface number 0 [ 857.683783][ T49] usb 8-1: config 8 interface 8 has no altsetting 1 [ 857.967490][ T49] usb 8-1: New USB device found, idVendor=1199, idProduct=68a2, bcdDevice=33.93 [ 857.985274][ T49] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.039152][ T49] usb 8-1: Product: syz [ 858.053400][ T49] usb 8-1: Manufacturer: syz [ 858.070555][ T49] usb 8-1: SerialNumber: syz [ 858.509029][T14070] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 859.558806][T14094] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1963'. [ 861.267831][T14105] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1965'. [ 862.051283][T14108] SELinux: security_context_str_to_sid () failed with errno=-22 [ 863.188122][ T49] qmi_wwan 8-1:8.8: probe with driver qmi_wwan failed with error -22 [ 868.982200][T14150] xt_ecn: cannot match TCP bits for non-tcp packets [ 869.060814][T14150] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1977'. [ 869.584091][ T49] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 869.748120][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.754528][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.999956][ T49] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 870.011929][ T49] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 870.027112][ T49] usb 6-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 870.054045][ T49] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.063865][ T49] usb 6-1: config 0 descriptor?? [ 870.285129][ T30] audit: type=1400 audit(1768455674.256:444): avc: denied { ioctl } for pid=14144 comm="syz.5.1976" path="/dev/ptyqe" dev="devtmpfs" ino=133 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 870.384811][T11914] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 870.627966][T11914] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 870.638091][T11914] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 870.664133][T11914] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 870.680757][T11914] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 870.690070][T11914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.704050][T11914] usb 2-1: Product: æ‘„X拉胇뙿谪㷞謴í€æ¼Ÿáž¼Ò±ê½áŠì¹˜èŸÓ¤å»¬á¶šã–陇貯ᯙ￧é‹ç—µìª¡à ”â…´ã°‚ëµì‰†å¢ºà¬·è™‰æ˜šë’®á±ï¥êŒŽëµ¹ë¢¡ïµ…⊖苖痠幌塚賗ﮣ儢⠥ﴔﳴç¦á¨†ì”¨ã½í€ä¸¶åŠˆé›ŽíŒµçŠ®äˆ›å¸—ኮ쭢휱å¾è­†çœ¼Ë¹ã‘ä…® [ 870.733998][T11914] usb 2-1: SerialNumber: Ñ [ 871.139372][T11914] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 871.145161][ T30] audit: type=1400 audit(1768455675.086:445): avc: denied { getopt } for pid=14160 comm="syz.1.1980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 871.199448][T11914] cdc_ncm 2-1:1.0: bind() failure [ 871.268747][T11914] usb 2-1: USB disconnect, device number 20 [ 871.379289][T11437] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 871.389682][T11437] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 871.407213][T11437] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 871.439545][T11437] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 871.456222][T11437] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 871.787434][ T49] usbhid 6-1:0.0: can't add hid device: -71 [ 871.793433][ T49] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 871.807967][ T49] usb 6-1: USB disconnect, device number 17 [ 872.260443][T14166] chnl_net:caif_netlink_parms(): no params data found [ 872.316992][T13877] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 872.332774][T13877] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 872.342580][T13877] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 872.350255][T13877] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 872.374734][T13877] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 872.472827][T13877] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 872.484425][T13877] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 872.492949][T13877] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 872.529938][T13877] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 872.551047][T13877] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 872.602339][T14166] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.624727][T14166] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.634156][T14166] bridge_slave_0: entered allmulticast mode [ 872.646048][T14166] bridge_slave_0: entered promiscuous mode [ 872.778022][T14166] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.804268][T14166] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.811510][T14166] bridge_slave_1: entered allmulticast mode [ 872.849767][T14166] bridge_slave_1: entered promiscuous mode [ 873.024410][T14189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 873.285256][T14166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 873.392258][T14166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 873.433647][T14191] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 873.440184][T14191] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 873.482700][T14166] team0: Port device team_slave_0 added [ 873.494440][T14166] team0: Port device team_slave_1 added [ 873.500701][ T30] audit: type=1400 audit(1768455677.466:446): avc: denied { create } for pid=14176 comm="syz.5.1985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 873.552147][T14191] vhci_hcd vhci_hcd.0: Device attached [ 873.581701][T13877] Bluetooth: hci6: command tx timeout [ 873.622140][T14166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 873.630528][T14166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 873.702433][T14166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 873.740368][T14178] chnl_net:caif_netlink_parms(): no params data found [ 873.807146][T14166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 873.821516][T14166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 873.847866][ T6004] usb 44-1: SetAddress Request (2) to port 0 [ 873.914493][ T6004] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 873.943692][T14192] vhci_hcd: connection closed [ 873.943851][ T8474] vhci_hcd vhci_hcd.5: stop threads [ 873.954764][ T8474] vhci_hcd vhci_hcd.5: release socket [ 873.961569][ T8474] vhci_hcd vhci_hcd.5: disconnect device [ 873.967527][T14166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 874.179111][T14166] hsr_slave_0: entered promiscuous mode [ 874.455039][T13877] Bluetooth: hci7: command tx timeout [ 874.594694][T14166] hsr_slave_1: entered promiscuous mode [ 874.600914][T14166] debugfs: 'hsr0' already exists in 'hsr' [ 874.609606][T14166] Cannot create hsr debugfs directory [ 874.615332][T13877] Bluetooth: hci8: command tx timeout [ 875.014236][T14178] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.038560][T14178] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.051648][T14178] bridge_slave_0: entered allmulticast mode [ 875.065018][T14178] bridge_slave_0: entered promiscuous mode [ 875.106309][T14178] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.113410][T14178] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.147900][T14178] bridge_slave_1: entered allmulticast mode [ 875.186946][T14178] bridge_slave_1: entered promiscuous mode [ 875.300779][T14180] chnl_net:caif_netlink_parms(): no params data found [ 875.315988][T14219] zonefs (nullb0) ERROR: Not a zoned block device [ 875.721053][T13877] Bluetooth: hci6: command tx timeout [ 875.858635][T14178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 875.924335][T14225] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1991'. [ 875.933932][T14225] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1991'. [ 875.942876][T14225] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1991'. [ 875.987299][T14226] netlink: 'syz.1.1991': attribute type 12 has an invalid length. [ 876.019616][T14178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 876.185044][T14178] team0: Port device team_slave_0 added [ 876.212650][T14178] team0: Port device team_slave_1 added [ 876.365047][T14180] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.380557][T14180] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.398212][T14180] bridge_slave_0: entered allmulticast mode [ 876.541441][T13877] Bluetooth: hci7: command tx timeout [ 876.613347][T14180] bridge_slave_0: entered promiscuous mode [ 876.697919][T13877] Bluetooth: hci8: command tx timeout [ 876.823088][T14180] bridge0: port 2(bridge_slave_1) entered blocking state [ 876.904824][T14180] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.912033][T14180] bridge_slave_1: entered allmulticast mode [ 876.967679][T14180] bridge_slave_1: entered promiscuous mode [ 877.030810][T14178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 877.037873][T11914] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 877.056484][T14178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 877.164486][T14178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 877.206445][T14178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 877.213384][T14178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 877.303153][T14178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 877.527362][T11914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 877.540534][T11914] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 877.571215][T11914] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 877.603994][T11914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.613841][T11914] usb 2-1: config 0 descriptor?? [ 877.734976][T13877] Bluetooth: hci6: command tx timeout [ 877.752197][T14180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 877.797280][T14180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 877.818319][T14243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 878.045771][T14178] hsr_slave_0: entered promiscuous mode [ 878.085742][T14178] hsr_slave_1: entered promiscuous mode [ 878.091862][T14178] debugfs: 'hsr0' already exists in 'hsr' [ 878.117534][T14178] Cannot create hsr debugfs directory [ 878.124992][T14180] team0: Port device team_slave_0 added [ 878.158822][T14180] team0: Port device team_slave_1 added [ 878.232293][T14166] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 878.301563][T14166] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 878.405906][T14166] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 878.421934][T14166] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 878.463460][T14180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 878.489516][T14180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 878.534230][T14180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 878.585046][T14180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 878.602192][T14180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 878.636098][T13877] Bluetooth: hci7: command tx timeout [ 878.705083][T14180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 878.774900][T13877] Bluetooth: hci8: command tx timeout [ 879.144839][ T6004] usb 44-1: device descriptor read/8, error -110 [ 879.534803][ T6004] usb usb44-port1: attempt power cycle [ 879.585058][T14180] hsr_slave_0: entered promiscuous mode [ 879.597996][T14180] hsr_slave_1: entered promiscuous mode [ 879.629770][T14180] debugfs: 'hsr0' already exists in 'hsr' [ 879.637557][T14180] Cannot create hsr debugfs directory [ 879.832234][T13877] Bluetooth: hci6: command tx timeout [ 880.089975][T11914] usbhid 2-1:0.0: can't add hid device: -71 [ 880.096385][T11914] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 880.107418][T11914] usb 2-1: USB disconnect, device number 21 [ 880.114440][ T6004] usb usb44-port1: unable to enumerate USB device [ 880.440132][T14178] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 880.643050][T14180] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.667103][T14178] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 880.683861][T14178] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 880.695020][T13877] Bluetooth: hci7: command tx timeout [ 880.807375][T11914] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 880.843739][T14178] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 880.855596][T13877] Bluetooth: hci8: command tx timeout [ 880.917378][T14180] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.990298][T11914] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 881.006900][T14166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 881.015616][T11914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.071305][T11914] usb 2-1: Product: syz [ 881.114317][T11914] usb 2-1: Manufacturer: syz [ 881.118938][T11914] usb 2-1: SerialNumber: syz [ 881.128956][T14180] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.140601][T11914] usb 2-1: config 0 descriptor?? [ 881.169706][T11914] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 022 [ 881.320139][T14180] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.355743][T14166] 8021q: adding VLAN 0 to HW filter on device team0 [ 881.445623][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.452730][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 881.473374][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 881.480509][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 881.609498][T14178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 881.987102][T14178] 8021q: adding VLAN 0 to HW filter on device team0 [ 882.057472][ T6002] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.064631][ T6002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 882.096520][T14282] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1998'. [ 882.132216][T14282] gretap0: entered promiscuous mode [ 882.161765][T14282] gretap0: left promiscuous mode [ 883.354363][ T30] audit: type=1400 audit(1768455686.716:447): avc: denied { append } for pid=14286 comm="syz.5.2001" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 883.407949][T14180] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 883.426205][T11914] (null): failure reading functionality [ 883.437458][T11914] i2c i2c-1: failure reading functionality [ 883.461178][ T30] audit: type=1326 audit(1768455686.836:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14286 comm="syz.5.2001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043278f749 code=0x7fc00000 [ 883.490340][T11914] i2c i2c-1: connected i2c-tiny-usb device [ 883.506332][T14180] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 883.550873][ T30] audit: type=1326 audit(1768455687.156:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14286 comm="syz.5.2001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f043278f749 code=0x7fc00000 [ 883.617194][T11914] usb 2-1: USB disconnect, device number 22 [ 883.682657][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.689811][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 883.723543][T14180] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 883.745915][T14166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 883.755190][T14180] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 884.329867][T14180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 884.449780][ T30] audit: type=1400 audit(1768455688.416:450): avc: denied { getopt } for pid=14308 comm="syz.1.2004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 884.453353][T14180] 8021q: adding VLAN 0 to HW filter on device team0 [ 884.801865][ T3551] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.808956][ T3551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 884.878722][ T3551] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.885890][ T3551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 885.395962][T14178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 885.452836][T14166] veth0_vlan: entered promiscuous mode [ 885.518023][T14166] veth1_vlan: entered promiscuous mode [ 885.646140][T14166] veth0_macvtap: entered promiscuous mode [ 885.662501][T14166] veth1_macvtap: entered promiscuous mode [ 885.693383][T14166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 885.781381][T14166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 885.864443][ T38] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.884340][ T38] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.960241][ T30] audit: type=1400 audit(1768455689.906:451): avc: denied { append } for pid=14327 comm="syz.1.2007" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 886.010186][ T38] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.021668][ T38] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.061413][ T30] audit: type=1400 audit(1768455690.026:452): avc: denied { ioctl } for pid=14327 comm="syz.1.2007" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 886.363782][T14178] veth0_vlan: entered promiscuous mode [ 886.417963][T14180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 886.640075][T14178] veth1_vlan: entered promiscuous mode [ 886.695892][ T6103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 886.703734][ T6103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 886.761073][T14178] veth0_macvtap: entered promiscuous mode [ 886.780162][ T4480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 886.793972][ T4480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 886.797689][T14178] veth1_macvtap: entered promiscuous mode [ 886.825946][ T30] audit: type=1400 audit(1768455690.786:453): avc: denied { mounton } for pid=14166 comm="syz-executor" path="/root/syzkaller.7U3Wt8/syz-tmp" dev="sda1" ino=2055 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 886.916257][T14178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 886.944338][ T30] audit: type=1400 audit(1768455690.836:454): avc: denied { mounton } for pid=14166 comm="syz-executor" path="/root/syzkaller.7U3Wt8/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 887.027007][T14178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 887.042561][ T30] audit: type=1400 audit(1768455690.896:455): avc: denied { mounton } for pid=14166 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 887.140774][ T1128] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.151217][ T1128] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.244309][ T1128] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.400527][ T1128] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.590225][T14353] netlink: 88 bytes leftover after parsing attributes in process `syz.8.1981'. [ 887.976086][T14180] veth0_vlan: entered promiscuous mode [ 888.498039][T14180] veth1_vlan: entered promiscuous mode [ 888.540359][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 888.584006][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.195747][ T3551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.228023][T14180] veth0_macvtap: entered promiscuous mode [ 889.256749][T14368] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2011'. [ 889.278828][T14180] veth1_macvtap: entered promiscuous mode [ 889.286879][ T3551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.792202][T14180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 889.852061][T14180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 890.014814][ T38] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.126816][ T38] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.138164][ T38] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.199086][ T38] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.352112][ T4480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 891.606949][ T4480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 891.743437][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 891.809553][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 892.537024][T14395] netlink: 'syz.4.1984': attribute type 4 has an invalid length. [ 893.063170][T14399] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=260 sclass=netlink_route_socket pid=14399 comm=syz.9.2016 [ 894.771984][T14396] netlink: 'syz.8.2015': attribute type 4 has an invalid length. [ 895.974877][ T6004] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 896.333057][ T30] audit: type=1400 audit(1768455700.226:456): avc: denied { read } for pid=5483 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 896.413972][ T6004] usb 5-1: Using ep0 maxpacket: 16 [ 896.483803][ T6004] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 896.499910][ T6004] usb 5-1: config 0 has no interface number 0 [ 896.556533][ T6004] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 896.573951][ T6004] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 896.593988][ T6004] usb 5-1: Product: syz [ 896.598145][ T6004] usb 5-1: SerialNumber: syz [ 896.632676][ T6004] usb 5-1: config 0 descriptor?? [ 896.698045][ T6004] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 897.514040][T14432] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2023'. [ 897.673671][ T10] usb 5-1: USB disconnect, device number 5 [ 898.332934][ T30] audit: type=1400 audit(1768455702.296:457): avc: denied { create } for pid=14460 comm="syz.5.2028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 898.401038][ T30] audit: type=1400 audit(1768455702.336:458): avc: denied { bind } for pid=14460 comm="syz.5.2028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 898.744521][T14473] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2029'. [ 898.998022][ T30] audit: type=1400 audit(1768455702.346:459): avc: denied { write } for pid=14460 comm="syz.5.2028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 900.152158][T14487] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2032'. [ 901.711603][T14509] FAULT_INJECTION: forcing a failure. [ 901.711603][T14509] name failslab, interval 1, probability 0, space 0, times 0 [ 901.761521][T14509] CPU: 1 UID: 0 PID: 14509 Comm: syz.8.2037 Tainted: G L syzkaller #0 PREEMPT(full) [ 901.761549][T14509] Tainted: [L]=SOFTLOCKUP [ 901.761555][T14509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 901.761564][T14509] Call Trace: [ 901.761569][T14509] [ 901.761576][T14509] dump_stack_lvl+0x16c/0x1f0 [ 901.761603][T14509] should_fail_ex+0x512/0x640 [ 901.761626][T14509] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 901.761646][T14509] should_failslab+0xc2/0x120 [ 901.761666][T14509] kmem_cache_alloc_node_noprof+0x86/0x800 [ 901.761682][T14509] ? __alloc_skb+0x156/0x410 [ 901.761696][T14509] ? __alloc_skb+0x35d/0x410 [ 901.761714][T14509] ? __alloc_skb+0x156/0x410 [ 901.761727][T14509] __alloc_skb+0x156/0x410 [ 901.761740][T14509] ? __alloc_skb+0x35d/0x410 [ 901.761753][T14509] ? __pfx___alloc_skb+0x10/0x10 [ 901.761768][T14509] ? find_held_lock+0x2b/0x80 [ 901.761798][T14509] alloc_skb_with_frags+0xe0/0x860 [ 901.761817][T14509] ? __might_fault+0xe3/0x190 [ 901.761831][T14509] ? __might_fault+0x13b/0x190 [ 901.761850][T14509] sock_alloc_send_pskb+0x7f9/0x980 [ 901.761876][T14509] ? _copy_from_iter+0x161/0x16c0 [ 901.761906][T14509] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 901.761931][T14509] ? find_held_lock+0x2b/0x80 [ 901.761955][T14509] ? dev_get_by_index+0x17c/0x380 [ 901.761979][T14509] packet_sendmsg+0x1fe4/0x54a0 [ 901.762013][T14509] ? sock_has_perm+0x258/0x2f0 [ 901.762032][T14509] ? __pfx_sock_has_perm+0x10/0x10 [ 901.762053][T14509] ? __pfx_packet_sendmsg+0x10/0x10 [ 901.762082][T14509] __sys_sendto+0x4a3/0x520 [ 901.762099][T14509] ? __pfx___sys_sendto+0x10/0x10 [ 901.762134][T14509] ? ksys_write+0x1ac/0x250 [ 901.762155][T14509] ? __pfx_ksys_write+0x10/0x10 [ 901.762177][T14509] __x64_sys_sendto+0xe0/0x1c0 [ 901.762191][T14509] ? do_syscall_64+0x91/0xf80 [ 901.762211][T14509] ? lockdep_hardirqs_on+0x7c/0x110 [ 901.762232][T14509] do_syscall_64+0xcd/0xf80 [ 901.762253][T14509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.762270][T14509] RIP: 0033:0x7fb2f3f8f749 [ 901.762282][T14509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 901.762297][T14509] RSP: 002b:00007fb2f4deb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 901.762312][T14509] RAX: ffffffffffffffda RBX: 00007fb2f41e5fa0 RCX: 00007fb2f3f8f749 [ 901.762322][T14509] RDX: 000000000001fffc RSI: 0000200000000180 RDI: 0000000000000005 [ 901.762332][T14509] RBP: 00007fb2f4deb090 R08: 0000200000000140 R09: 0000000000000014 [ 901.762342][T14509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 901.762351][T14509] R13: 00007fb2f41e6038 R14: 00007fb2f41e5fa0 R15: 00007fffb01743d8 [ 901.762374][T14509] [ 902.034553][T14504] FAULT_INJECTION: forcing a failure. [ 902.034553][T14504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 902.081669][T14504] CPU: 0 UID: 0 PID: 14504 Comm: syz.4.2035 Tainted: G L syzkaller #0 PREEMPT(full) [ 902.081704][T14504] Tainted: [L]=SOFTLOCKUP [ 902.081709][T14504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 902.081718][T14504] Call Trace: [ 902.081724][T14504] [ 902.081730][T14504] dump_stack_lvl+0x16c/0x1f0 [ 902.081757][T14504] should_fail_ex+0x512/0x640 [ 902.081787][T14504] _copy_from_user+0x2e/0xd0 [ 902.081812][T14504] get_timespec64+0x8b/0x240 [ 902.081832][T14504] ? __pfx_get_timespec64+0x10/0x10 [ 902.081858][T14504] __x64_sys_clock_nanosleep+0x1ce/0x4a0 [ 902.081878][T14504] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 902.081895][T14504] ? rcu_is_watching+0x12/0xc0 [ 902.081918][T14504] do_syscall_64+0xcd/0xf80 [ 902.081941][T14504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.081957][T14504] RIP: 0033:0x7efeb9d8f749 [ 902.081970][T14504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 902.081986][T14504] RSP: 002b:00007efeb7ff6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 902.082002][T14504] RAX: ffffffffffffffda RBX: 00007efeb9fe5fa0 RCX: 00007efeb9d8f749 [ 902.082013][T14504] RDX: 0000200000000000 RSI: 0000000000ca9a3b RDI: 00000000fffffff2 [ 902.082022][T14504] RBP: 00007efeb7ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 902.082031][T14504] R10: 9999999999999999 R11: 0000000000000246 R12: 0000000000000001 [ 902.082040][T14504] R13: 00007efeb9fe6038 R14: 00007efeb9fe5fa0 R15: 00007ffec57cbef8 [ 902.082063][T14504] [ 902.370779][ T30] audit: type=1400 audit(1768455706.336:460): avc: denied { ioctl } for pid=14502 comm="syz.5.2036" path="net:[4026533939]" dev="nsfs" ino=4026533939 ioctlcmd=0xae41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 902.727533][ T30] audit: type=1400 audit(1768455706.696:461): avc: denied { associate } for pid=14502 comm="syz.5.2036" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 903.084365][T11914] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 903.352792][ T30] audit: type=1400 audit(1768455707.286:462): avc: denied { firmware_load } for pid=14522 comm="syz.5.2039" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 903.461186][T11914] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 903.478405][T11914] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 903.515622][T11914] usb 10-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 903.540679][T11914] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.564693][T11914] usb 10-1: config 0 descriptor?? [ 903.905572][T14527] syz.5.2039 (14527) used greatest stack depth: 18680 bytes left [ 903.948835][T14537] FAULT_INJECTION: forcing a failure. [ 903.948835][T14537] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 904.016810][T14537] CPU: 1 UID: 0 PID: 14537 Comm: syz.4.2040 Tainted: G L syzkaller #0 PREEMPT(full) [ 904.016830][T14537] Tainted: [L]=SOFTLOCKUP [ 904.016835][T14537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 904.016844][T14537] Call Trace: [ 904.016849][T14537] [ 904.016855][T14537] dump_stack_lvl+0x16c/0x1f0 [ 904.016882][T14537] should_fail_ex+0x512/0x640 [ 904.016909][T14537] _copy_to_user+0x32/0xd0 [ 904.016936][T14537] simple_read_from_buffer+0xcb/0x170 [ 904.016960][T14537] proc_fail_nth_read+0x197/0x240 [ 904.016978][T14537] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 904.016996][T14537] ? rw_verify_area+0xcf/0x6c0 [ 904.017014][T14537] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 904.017031][T14537] vfs_read+0x1e4/0xcf0 [ 904.017052][T14537] ? __pfx___mutex_lock+0x10/0x10 [ 904.017078][T14537] ? __pfx_vfs_read+0x10/0x10 [ 904.017105][T14537] ? __fget_files+0x20e/0x3c0 [ 904.017134][T14537] ksys_read+0x12a/0x250 [ 904.017154][T14537] ? __pfx_ksys_read+0x10/0x10 [ 904.017183][T14537] do_syscall_64+0xcd/0xf80 [ 904.017206][T14537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.017222][T14537] RIP: 0033:0x7efeb9d8e15c [ 904.017236][T14537] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 904.017251][T14537] RSP: 002b:00007efeb7ff6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 904.017266][T14537] RAX: ffffffffffffffda RBX: 00007efeb9fe5fa0 RCX: 00007efeb9d8e15c [ 904.017276][T14537] RDX: 000000000000000f RSI: 00007efeb7ff60a0 RDI: 0000000000000004 [ 904.017286][T14537] RBP: 00007efeb7ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 904.017294][T14537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 904.017304][T14537] R13: 00007efeb9fe6038 R14: 00007efeb9fe5fa0 R15: 00007ffec57cbef8 [ 904.017328][T14537] [ 904.746209][T14544] netlink: 'syz.8.2046': attribute type 1 has an invalid length. [ 906.080519][T11914] usbhid 10-1:0.0: can't add hid device: -71 [ 906.106257][T11914] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 906.117634][T14556] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2047'. [ 906.162968][ T30] audit: type=1400 audit(1768455710.086:463): avc: denied { bind } for pid=14554 comm="syz.8.2047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 906.204555][T11914] usb 10-1: USB disconnect, device number 2 [ 906.376863][ T30] audit: type=1400 audit(1768455710.346:464): avc: denied { ioctl } for pid=14561 comm="syz.9.2051" path="socket:[41546]" dev="sockfs" ino=41546 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 906.506288][ T30] audit: type=1400 audit(1768455710.366:465): avc: denied { write } for pid=14561 comm="syz.9.2051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 906.748445][ T30] audit: type=1400 audit(1768455710.366:466): avc: denied { read } for pid=14561 comm="syz.9.2051" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 906.791856][T11437] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 906.805815][T11437] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 906.813797][T11437] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 907.112548][ T30] audit: type=1400 audit(1768455710.366:467): avc: denied { open } for pid=14561 comm="syz.9.2051" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 907.136470][T11437] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 907.162680][ T30] audit: type=1400 audit(1768455710.366:468): avc: denied { ioctl } for pid=14561 comm="syz.9.2051" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 907.258320][T11437] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 908.976969][T14567] chnl_net:caif_netlink_parms(): no params data found [ 909.291471][T14567] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.298808][T14567] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.416280][T11437] Bluetooth: hci9: command tx timeout [ 909.700003][T14567] bridge_slave_0: entered allmulticast mode [ 909.709851][T14567] bridge_slave_0: entered promiscuous mode [ 909.720129][T14567] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.727966][T14567] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.737835][T14567] bridge_slave_1: entered allmulticast mode [ 909.747285][T14567] bridge_slave_1: entered promiscuous mode [ 909.901865][T14567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 909.941816][T14567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 910.011264][T14603] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=260 sclass=netlink_route_socket pid=14603 comm=syz.5.2061 [ 910.177373][T14610] syz_tun: entered allmulticast mode [ 910.202001][T14606] syz_tun: left allmulticast mode [ 910.213401][T14567] team0: Port device team_slave_0 added [ 910.222451][T14567] team0: Port device team_slave_1 added [ 910.699478][T14567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 910.730009][T14567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 910.833930][T14567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 911.038102][T14567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 911.065436][T14567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 911.301558][T14622] netlink: 'syz.5.2065': attribute type 4 has an invalid length. [ 911.494586][T11437] Bluetooth: hci9: command tx timeout [ 911.584448][T14567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 912.045216][T14620] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2064'. [ 912.314688][T14567] hsr_slave_0: entered promiscuous mode [ 912.321154][T14567] hsr_slave_1: entered promiscuous mode [ 912.380343][T14623] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2063'. [ 912.424693][T14567] debugfs: 'hsr0' already exists in 'hsr' [ 912.444520][T14567] Cannot create hsr debugfs directory [ 913.206439][T14632] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2069'. [ 913.580856][T11437] Bluetooth: hci9: command tx timeout [ 913.664235][ T89] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 913.866729][ T89] usb 10-1: device descriptor read/64, error -71 [ 914.147624][ T89] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 914.300397][ T89] usb 10-1: device descriptor read/64, error -71 [ 914.379158][T14567] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 914.404097][T14567] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 914.431174][ T89] usb usb10-port1: attempt power cycle [ 914.437054][T14567] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 914.449816][T14567] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 914.611198][T14567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 914.638494][T14567] 8021q: adding VLAN 0 to HW filter on device team0 [ 914.649036][ T6002] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.656212][ T6002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 914.761719][ T3551] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.768908][ T3551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 914.776422][ T89] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 914.811620][ T89] usb 10-1: device descriptor read/8, error -71 [ 914.857868][T14567] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 914.869733][T14567] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 915.064291][ T89] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 915.133208][T14567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 915.163217][ T89] usb 10-1: device descriptor read/8, error -71 [ 915.198759][T14567] veth0_vlan: entered promiscuous mode [ 915.246587][T14567] veth1_vlan: entered promiscuous mode [ 915.292621][T14567] veth0_macvtap: entered promiscuous mode [ 915.299496][ T89] usb usb10-port1: unable to enumerate USB device [ 915.310024][T14567] veth1_macvtap: entered promiscuous mode [ 915.347547][T14567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 915.382828][T14567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 915.398109][ T5981] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.417680][ T5981] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.453076][ T5981] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.475375][ T5981] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.585656][ T5981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 915.603793][ T5981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 915.654381][T11437] Bluetooth: hci9: command tx timeout [ 915.660136][ T6002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 915.669697][ T6002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 916.468527][T14706] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2071'. [ 917.167868][T14714] syzkaller1: entered promiscuous mode [ 917.186847][T14714] syzkaller1: entered allmulticast mode [ 918.754053][ T89] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 918.909232][ T89] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 918.921705][ T89] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 918.944074][ T89] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 918.973464][ T89] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.300698][ T89] usb 3-1: usb_control_msg returned -32 [ 919.376657][ T89] usbtmc 3-1:16.0: can't read capabilities [ 920.125895][ T89] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 920.316577][ T89] usb 5-1: Using ep0 maxpacket: 8 [ 920.323029][ T89] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 920.357163][ T89] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 920.367759][ T89] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 920.394904][ T89] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 920.408001][ T89] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 920.434572][ T89] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.692802][ T89] usb 5-1: GET_CAPABILITIES returned 0 [ 920.702671][ T89] usbtmc 5-1:16.0: can't read capabilities [ 920.999511][T14826] bridge0: entered allmulticast mode [ 921.021981][T14826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2076'. [ 921.033571][T14826] bridge_slave_1: left allmulticast mode [ 921.043702][T14826] bridge_slave_1: left promiscuous mode [ 921.066867][T14826] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.132897][T14826] bridge_slave_0: left allmulticast mode [ 921.141291][T14826] bridge_slave_0: left promiscuous mode [ 921.152133][T14826] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.236901][T14826] bridge0 (unregistering): left allmulticast mode [ 921.449571][ T6003] usb 3-1: USB disconnect, device number 10 [ 921.494440][ T89] usb 5-1: USB disconnect, device number 6 [ 921.764686][T14845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2077'. [ 922.698256][T14853] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2079'. [ 923.324982][ T30] audit: type=1400 audit(1768455727.246:469): avc: denied { mounton } for pid=14854 comm="syz.2.2080" path="/proc/25/task" dev="proc" ino=42416 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 924.022761][T11437] Bluetooth: hci9: unexpected event 0x03 length: 1 < 11 [ 925.314297][T14874] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2084'. [ 926.514037][T14879] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=260 sclass=netlink_route_socket pid=14879 comm=syz.2.2086 [ 927.135937][ T30] audit: type=1400 audit(1768455731.106:470): avc: denied { map } for pid=14880 comm="syz.4.2087" path="socket:[43469]" dev="sockfs" ino=43469 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 927.414229][T13877] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 927.425830][T13877] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 927.434879][T13877] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 927.442664][T13877] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 927.450225][T13877] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 927.595534][ T30] audit: type=1400 audit(1768455731.566:471): avc: denied { shutdown } for pid=14890 comm="syz.2.2089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 927.787252][T14888] chnl_net:caif_netlink_parms(): no params data found [ 927.838691][T11437] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 927.850542][T11437] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 927.859673][T11437] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 927.876961][T11437] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 927.886086][T11437] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 928.053460][T14888] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.060817][T14888] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.071307][T14888] bridge_slave_0: entered allmulticast mode [ 928.078338][T14888] bridge_slave_0: entered promiscuous mode [ 928.090379][T14888] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.098753][T14888] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.107134][T14888] bridge_slave_1: entered allmulticast mode [ 928.116750][T14888] bridge_slave_1: entered promiscuous mode [ 928.182311][T14888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 928.200421][T14888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 928.330268][T14888] team0: Port device team_slave_0 added [ 928.340113][T14888] team0: Port device team_slave_1 added [ 928.405913][T14888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 928.412961][T14888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 928.457667][T13877] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 928.468432][T13877] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 928.485084][T14888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 928.495800][T13877] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 928.516829][T13877] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 928.524557][T13877] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 928.559098][T14888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 928.574809][T14888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 928.601275][T14888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 928.920231][T14888] hsr_slave_0: entered promiscuous mode [ 928.943318][T14888] hsr_slave_1: entered promiscuous mode [ 928.955493][T14888] debugfs: 'hsr0' already exists in 'hsr' [ 928.961340][T14888] Cannot create hsr debugfs directory [ 928.977626][T14899] chnl_net:caif_netlink_parms(): no params data found [ 929.030321][T14916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2094'. [ 929.312940][T14926] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=260 sclass=netlink_route_socket pid=14926 comm=syz.2.2096 [ 929.494197][T13877] Bluetooth: hci10: command tx timeout [ 929.503590][T14899] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.515061][T14899] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.522305][T14899] bridge_slave_0: entered allmulticast mode [ 929.530457][T14899] bridge_slave_0: entered promiscuous mode [ 929.549976][T14899] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.937784][T14899] bridge0: port 2(bridge_slave_1) entered disabled state [ 929.946773][T14899] bridge_slave_1: entered allmulticast mode [ 929.954291][T14899] bridge_slave_1: entered promiscuous mode [ 929.974045][T13877] Bluetooth: hci11: command tx timeout [ 930.614967][T13877] Bluetooth: hci12: command tx timeout [ 930.751469][T14938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=260 sclass=netlink_route_socket pid=14938 comm=syz.2.2098 [ 930.776739][T14899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 930.797294][T14899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 930.899968][T14924] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2095'. [ 930.937353][T14899] team0: Port device team_slave_0 added [ 930.944457][T14908] chnl_net:caif_netlink_parms(): no params data found [ 931.177248][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.184126][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.336794][T14899] team0: Port device team_slave_1 added [ 931.438982][T14899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 931.451324][T14899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 931.484013][T14899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 931.577909][T13877] Bluetooth: hci10: command tx timeout [ 931.725519][T14899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 931.737101][T14899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 931.779582][T14899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 932.067098][T13877] Bluetooth: hci11: command tx timeout [ 932.539960][T14908] bridge0: port 1(bridge_slave_0) entered blocking state [ 932.547401][T14908] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.578112][T14908] bridge_slave_0: entered allmulticast mode [ 932.586888][T14908] bridge_slave_0: entered promiscuous mode [ 932.684900][T14908] bridge0: port 2(bridge_slave_1) entered blocking state [ 932.692025][T14908] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.699387][T13877] Bluetooth: hci12: command tx timeout [ 932.714183][T14908] bridge_slave_1: entered allmulticast mode [ 932.737100][T14908] bridge_slave_1: entered promiscuous mode [ 932.780411][T14899] hsr_slave_0: entered promiscuous mode [ 932.788541][T14899] hsr_slave_1: entered promiscuous mode [ 932.797052][T14899] debugfs: 'hsr0' already exists in 'hsr' [ 932.802792][T14899] Cannot create hsr debugfs directory [ 932.883072][T14908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 932.938657][T14908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 933.357805][T14908] team0: Port device team_slave_0 added [ 933.396946][T14908] team0: Port device team_slave_1 added [ 933.533158][T14908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 933.567511][T14908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 933.663597][T13877] Bluetooth: hci10: command tx timeout [ 933.669307][T14908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 933.747113][T14908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 933.764026][T14908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 933.813823][T14908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 933.920153][T14888] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 933.967847][T14888] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 934.036478][T14899] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.222065][T13877] Bluetooth: hci11: command tx timeout [ 934.259473][T14888] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 934.288875][T14888] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 934.342895][T14899] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.773972][T13877] Bluetooth: hci12: command tx timeout [ 934.818827][T14908] hsr_slave_0: entered promiscuous mode [ 934.846576][T14908] hsr_slave_1: entered promiscuous mode [ 934.860294][T14908] debugfs: 'hsr0' already exists in 'hsr' [ 934.880417][T14908] Cannot create hsr debugfs directory [ 934.987668][T14899] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.179929][T14888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 935.420553][T14899] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.450647][ T89] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 935.570574][T14888] 8021q: adding VLAN 0 to HW filter on device team0 [ 935.601168][ T89] usb 3-1: device descriptor read/64, error -71 [ 935.669923][T14908] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.741646][T10949] bridge0: port 1(bridge_slave_0) entered blocking state [ 935.748779][T10949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 935.756161][T13877] Bluetooth: hci10: command tx timeout [ 935.782258][ T1082] bridge0: port 2(bridge_slave_1) entered blocking state [ 935.789383][ T1082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 935.871025][ T89] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 935.902241][T14908] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.004955][ T89] usb 3-1: device descriptor read/64, error -71 [ 936.045526][T14908] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.144246][ T89] usb usb3-port1: attempt power cycle [ 936.301359][T13877] Bluetooth: hci11: command tx timeout [ 936.346992][T14888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 936.437973][T14908] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.643987][ T89] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 936.725857][ T89] usb 3-1: device descriptor read/8, error -71 [ 936.727284][T14899] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 936.817861][T14899] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 936.859053][T13877] Bluetooth: hci12: command tx timeout [ 936.886649][T14899] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 936.920934][T14899] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 937.008574][ T89] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 937.049023][ T89] usb 3-1: device descriptor read/8, error -71 [ 937.140780][T14908] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 937.174516][ T89] usb usb3-port1: unable to enumerate USB device [ 937.199134][T14908] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 937.258391][T14908] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 937.298592][T14908] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 937.568827][T14888] veth0_vlan: entered promiscuous mode [ 937.864627][T14899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 937.873203][T14888] veth1_vlan: entered promiscuous mode [ 937.893308][T14899] 8021q: adding VLAN 0 to HW filter on device team0 [ 937.913109][T14888] veth0_macvtap: entered promiscuous mode [ 937.942032][T14888] veth1_macvtap: entered promiscuous mode [ 937.956118][T14888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 937.967862][T14888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 938.051596][T10949] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.075191][ T7767] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.082264][ T7767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 938.106247][ T62] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.155576][ T7767] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.162716][ T7767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 938.506070][T15087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2106'. [ 938.694693][ T62] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.753270][T15089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=260 sclass=netlink_route_socket pid=15089 comm=syz.2.2107 [ 938.894373][ T62] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.398485][ T8111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 939.458862][ T8111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 939.666823][T14908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 939.699738][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 939.708964][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 939.956938][T15102] sp0: Synchronizing with TNC [ 939.977903][T15105] sp0: Found TNC [ 939.982711][T15104] netlink: 'syz.2.2108': attribute type 12 has an invalid length. [ 940.044827][T14908] 8021q: adding VLAN 0 to HW filter on device team0 [ 940.066221][ T7767] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.073351][ T7767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 940.190897][ T7767] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.198031][ T7767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 940.292362][T13877] Bluetooth: hci10: unexpected event 0x03 length: 1 < 11 [ 940.553106][T14908] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 940.720321][T15123] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2110'. [ 941.543313][ T30] audit: type=1400 audit(1768455745.506:472): avc: denied { setopt } for pid=15139 comm="syz.2.2112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 942.180138][T14899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 942.249645][T14908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 942.405995][T14908] veth0_vlan: entered promiscuous mode [ 942.422774][T14908] veth1_vlan: entered promiscuous mode [ 942.507817][T14908] veth0_macvtap: entered promiscuous mode [ 942.520577][T14908] veth1_macvtap: entered promiscuous mode [ 942.546711][T14908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 942.594937][T14908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 942.666713][ T1082] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.720020][ T1082] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.754678][ T1082] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.794626][ T1082] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.076416][ T1082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 943.116547][ T1082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 943.182291][T11379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 943.221224][T11379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 943.369256][T14899] veth0_vlan: entered promiscuous mode [ 943.386661][T14899] veth1_vlan: entered promiscuous mode [ 943.416970][T15171] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2115'. [ 943.507016][T14899] veth0_macvtap: entered promiscuous mode [ 943.528104][T14899] veth1_macvtap: entered promiscuous mode [ 943.559236][T14899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 943.628236][T14899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 943.685714][T11379] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.705447][T14943] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 943.735370][T11379] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.950346][T14943] usb 3-1: Using ep0 maxpacket: 8 [ 943.964159][T14943] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 943.978906][T14943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.990592][T11379] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.009812][T11379] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.030638][T14943] pvrusb2: Hardware description: Terratec Grabster AV400 [ 944.068497][T14943] pvrusb2: ********** [ 944.076152][T14943] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 944.096111][T14943] pvrusb2: Important functionality might not be entirely working. [ 944.138647][T14943] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 944.247439][T14943] pvrusb2: ********** [ 944.278781][ T2334] pvrusb2: Invalid write control endpoint [ 944.790413][ T7767] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 944.892767][ T7767] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 944.928379][T15171] pvrusb2: Invalid write control endpoint [ 944.979319][ T2334] pvrusb2: Invalid write control endpoint [ 944.996256][T15151] usb 3-1: USB disconnect, device number 15 [ 945.094674][ T2334] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 945.108244][ T8111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 945.119970][ T8111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 945.144406][ T2334] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 945.164310][ T2334] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 945.187278][ T2334] pvrusb2: Device being rendered inoperable [ 945.207997][ T2334] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 945.230434][ T2334] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 945.344640][ T30] audit: type=1400 audit(1768455749.276:473): avc: denied { connect } for pid=15195 comm="syz.3.2118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 945.593133][ T2334] pvrusb2: Attached sub-driver cx25840 [ 945.599288][ T2334] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 945.643572][ T2334] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 946.774841][T15222] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2121'. [ 946.828633][T11914] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 946.909479][T15214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 946.970907][T15214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 947.324109][T11914] usb 7-1: Using ep0 maxpacket: 8 [ 947.350682][T11914] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 947.362577][T15214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 947.383946][T11914] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 947.415923][T15214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 947.425129][T11914] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 947.471455][T11914] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 947.546272][T11914] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 947.568945][T11914] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.752500][T15236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2124'. [ 947.927990][T11914] usb 7-1: GET_CAPABILITIES returned 0 [ 948.023373][T11914] usbtmc 7-1:16.0: can't read capabilities [ 948.211307][T15245] bridge0: entered allmulticast mode [ 948.258697][T15245] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2122'. [ 948.289167][T15245] bridge_slave_1: left allmulticast mode [ 948.342093][T15245] bridge_slave_1: left promiscuous mode [ 948.362053][T15245] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.431483][T15245] bridge_slave_0: left allmulticast mode [ 948.442810][T15245] bridge_slave_0: left promiscuous mode [ 948.451284][T15245] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.633340][T15245] bridge0 (unregistering): left allmulticast mode [ 948.797057][T15239] 8021q: adding VLAN 0 to HW filter on device bond1 [ 948.803547][T11914] usb 7-1: USB disconnect, device number 6 [ 948.841459][T15246] bond_slave_0: entered promiscuous mode [ 948.847465][T15246] bond_slave_1: entered promiscuous mode [ 948.854688][T15246] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 948.866298][T15246] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 951.139188][T15283] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=260 sclass=netlink_route_socket pid=15283 comm=syz.4.2131 [ 954.273084][T15321] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2136'. [ 955.126538][T15335] zonefs (nullb0) ERROR: Not a zoned block device [ 955.960356][T15340] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2138'. [ 956.331118][T15349] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2142'. [ 956.607122][T15351] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2142'. [ 956.617485][T15351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2142'. [ 957.393634][T15357] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=260 sclass=netlink_route_socket pid=15357 comm=syz.3.2143 [ 958.820738][T15365] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2145'. [ 960.243986][T15307] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 960.417280][T15307] usb 7-1: too many configurations: 67, using maximum allowed: 8 [ 960.441914][T15307] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 960.454926][T15307] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.462931][T15307] usb 7-1: Product: syz [ 960.467324][T15307] usb 7-1: Manufacturer: syz [ 960.471947][T15307] usb 7-1: SerialNumber: syz [ 960.483067][T15307] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 960.542353][T15291] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 960.564071][ T6003] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 960.746034][ T6003] usb 5-1: Using ep0 maxpacket: 8 [ 960.757042][ T6003] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 960.772033][ T6003] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 960.788509][ T6003] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 960.849408][ T6003] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 960.862720][ T6003] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 960.873197][ T6003] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.994719][T15307] usb 7-1: USB disconnect, device number 7 [ 961.150301][ T6003] usb 5-1: GET_CAPABILITIES returned 0 [ 961.156205][ T6003] usbtmc 5-1:16.0: can't read capabilities [ 961.635711][ T30] audit: type=1400 audit(1768455765.606:474): avc: denied { getopt } for pid=15385 comm="syz.6.2152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 961.761282][T15392] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2149'. [ 961.780644][ T30] audit: type=1400 audit(1768455765.746:475): avc: denied { write } for pid=15381 comm="syz.3.2151" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 961.819010][T15291] usb 7-1: Service connection timeout for: 256 [ 961.830721][T15291] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 961.837032][T15291] ath9k_htc: Failed to initialize the device [ 961.852791][T15307] usb 7-1: ath9k_htc: USB layer deinitialized [ 961.856306][ T30] audit: type=1400 audit(1768455765.796:476): avc: denied { ioctl } for pid=15381 comm="syz.3.2151" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x4b6d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 961.930819][ T10] usb 5-1: USB disconnect, device number 7 [ 963.574297][T12566] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 963.823963][T12566] usb 4-1: Using ep0 maxpacket: 8 [ 963.857226][T12566] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 963.894492][T12566] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 963.934277][T12566] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 964.004380][T12566] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 964.034098][T12566] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 964.034828][T11437] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 964.043302][T12566] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.063193][T11437] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 964.088868][T11437] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 964.114653][T11437] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 964.123669][T11437] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 964.519922][T12566] usb 4-1: GET_CAPABILITIES returned 0 [ 964.557028][T12566] usbtmc 4-1:16.0: can't read capabilities [ 964.593366][T13877] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 964.603585][T13877] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 964.613530][T13877] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 964.632317][T13877] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 964.656542][T13877] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 965.033862][T15412] chnl_net:caif_netlink_parms(): no params data found [ 965.178114][T15425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2156'. [ 965.287081][T15424] bridge0: entered allmulticast mode [ 965.405630][T15425] bridge_slave_1: left allmulticast mode [ 965.411277][T15425] bridge_slave_1: left promiscuous mode [ 965.428146][T15430] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2160'. [ 965.481945][T15425] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.522221][T15425] bridge_slave_0: left allmulticast mode [ 965.541489][T15425] bridge_slave_0: left promiscuous mode [ 965.569845][T15425] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.652413][T15425] bridge0 (unregistering): left allmulticast mode [ 966.003643][T15044] usb 4-1: USB disconnect, device number 27 [ 967.079049][T15418] chnl_net:caif_netlink_parms(): no params data found [ 967.094272][ T5821] Bluetooth: hci14: command tx timeout [ 967.101075][T11437] Bluetooth: hci13: command tx timeout [ 967.166345][T15412] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.174529][T15412] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.183764][T15412] bridge_slave_0: entered allmulticast mode [ 967.191537][T15412] bridge_slave_0: entered promiscuous mode [ 967.208160][T15412] bridge0: port 2(bridge_slave_1) entered blocking state [ 967.216062][T15412] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.223357][T15412] bridge_slave_1: entered allmulticast mode [ 967.233270][T15412] bridge_slave_1: entered promiscuous mode [ 967.425686][T15412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 967.496305][T15412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 967.616796][T15418] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.630892][T15418] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.638394][T15418] bridge_slave_0: entered allmulticast mode [ 967.668660][T15418] bridge_slave_0: entered promiscuous mode [ 967.680702][T15412] team0: Port device team_slave_0 added [ 967.688247][T15418] bridge0: port 2(bridge_slave_1) entered blocking state [ 967.695674][T15418] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.702880][T15418] bridge_slave_1: entered allmulticast mode [ 967.714331][T15418] bridge_slave_1: entered promiscuous mode [ 967.751390][T15418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 967.767368][T15418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 967.782181][T15412] team0: Port device team_slave_1 added [ 967.887717][T15412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 967.895174][T15412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 968.164784][T15412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 968.180156][T15418] team0: Port device team_slave_0 added [ 968.221947][T15412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 968.229058][T15412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 968.255813][T15412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 968.268286][T15418] team0: Port device team_slave_1 added [ 968.369335][T15418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 968.376502][T15418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 968.403745][T15418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 968.460428][T15418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 968.469211][T15418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 968.497398][T15418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 968.589060][T15412] hsr_slave_0: entered promiscuous mode [ 968.615102][T15412] hsr_slave_1: entered promiscuous mode [ 968.621129][T15412] debugfs: 'hsr0' already exists in 'hsr' [ 968.647524][T15412] Cannot create hsr debugfs directory [ 968.738994][T15418] hsr_slave_0: entered promiscuous mode [ 968.745897][T15418] hsr_slave_1: entered promiscuous mode [ 968.752501][T15418] debugfs: 'hsr0' already exists in 'hsr' [ 968.760562][T15418] Cannot create hsr debugfs directory [ 969.074668][ T30] audit: type=1400 audit(1768455772.876:477): avc: denied { getopt } for pid=15451 comm="syz.3.2165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 969.217379][T13877] Bluetooth: hci13: command tx timeout [ 969.223536][ T5821] Bluetooth: hci14: command tx timeout [ 969.566876][T15412] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 969.605289][T15412] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.763454][T15412] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 969.773901][T15412] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.880290][T15412] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 969.890829][T15412] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.999932][T15412] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 970.011902][T15412] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.193715][T15412] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 970.280565][T15418] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.325371][T15412] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 970.341505][T15412] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 970.375588][T15412] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 970.473635][T15418] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.612135][T15418] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.651167][T15412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 970.671905][T15412] 8021q: adding VLAN 0 to HW filter on device team0 [ 970.688784][ T9658] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.695956][ T9658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 970.727782][ T9658] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.734967][ T9658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 970.796866][T15418] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.078132][T15418] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 971.139224][T15412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 971.167026][T15418] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 971.200760][T15418] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 971.219082][T15418] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 971.265179][ T5821] Bluetooth: hci14: command tx timeout [ 971.265184][T13877] Bluetooth: hci13: command tx timeout [ 971.416683][T15412] veth0_vlan: entered promiscuous mode [ 971.429944][T15412] veth1_vlan: entered promiscuous mode [ 971.483715][T15412] veth0_macvtap: entered promiscuous mode [ 971.510410][T15412] veth1_macvtap: entered promiscuous mode [ 971.538135][T15412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 971.554348][T15418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 971.593049][T15412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 971.620234][ T38] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.631656][ T38] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.645954][T15418] 8021q: adding VLAN 0 to HW filter on device team0 [ 971.653549][ T38] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.687229][ T38] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.698846][T11379] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.706013][T11379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 971.732217][T11379] bridge0: port 2(bridge_slave_1) entered blocking state [ 971.739396][T11379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 971.877366][ T6103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 971.889832][ T6103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 971.988788][ T6002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 972.000505][ T6002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 972.234654][T15418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 972.362342][T15418] veth0_vlan: entered promiscuous mode [ 972.416259][T15418] veth1_vlan: entered promiscuous mode [ 972.500917][T15418] veth0_macvtap: entered promiscuous mode [ 972.566039][T15418] veth1_macvtap: entered promiscuous mode [ 972.591717][T15418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 972.617064][T15482] hfs: can't find a HFS filesystem on dev nullb0 [ 972.629287][T15418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 972.674827][ T38] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.683669][ T38] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.748279][ T38] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.763696][ T38] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.938936][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 972.955289][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 973.066574][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 973.099185][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 973.356175][ T5821] Bluetooth: hci13: command tx timeout [ 973.356181][T13877] Bluetooth: hci14: command tx timeout [ 973.373569][T15491] ªªªªªª: renamed from vlan0 (while UP) [ 973.413657][ T30] audit: type=1400 audit(1768455777.376:478): avc: denied { execute } for pid=15489 comm="syz.3.2169" path="/proc/95/task/96/net/vlan/vlan0" dev="proc" ino=4026533673 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1 [ 974.864387][T14943] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 974.868763][T15508] tipc: Started in network mode [ 974.982647][T15508] tipc: Node identity 1, cluster identity 4711 [ 975.000572][T15508] tipc: Node number set to 1 [ 975.143280][T14943] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 975.154661][T14943] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 975.196956][T14943] usb 4-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 975.223930][T14943] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.250109][T14943] usb 4-1: config 0 descriptor?? [ 977.309680][T14943] usbhid 4-1:0.0: can't add hid device: -71 [ 977.317388][T14943] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 977.331559][T14943] usb 4-1: USB disconnect, device number 28 [ 977.864725][T15534] vlan2: entered promiscuous mode [ 977.869797][T15534] bridge0: entered promiscuous mode [ 977.925154][T15536] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2178'. [ 977.941703][T15536] kvm: emulating exchange as write [ 977.971385][ T30] audit: type=1400 audit(1768455781.936:479): avc: denied { append } for pid=15538 comm="syz.1.2181" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 977.996966][T15539] Invalid logical block size (8353) [ 978.381516][T15547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 978.914920][T13877] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 978.968511][T13877] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 978.978341][T13877] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 978.997157][T13877] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 979.004785][T13877] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 980.409911][T15548] chnl_net:caif_netlink_parms(): no params data found [ 981.106356][ T5821] Bluetooth: hci15: command tx timeout [ 981.426417][T15548] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.445965][T13877] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 981.456657][T13877] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 981.464957][T15548] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.475407][T13877] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 981.483112][T13877] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 981.490603][T13877] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 981.500818][T15548] bridge_slave_0: entered allmulticast mode [ 981.515487][T15548] bridge_slave_0: entered promiscuous mode [ 981.524764][T15548] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.534043][T15548] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.544287][T15548] bridge_slave_1: entered allmulticast mode [ 981.551605][T15548] bridge_slave_1: entered promiscuous mode [ 981.737138][T15548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 981.780742][T15548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 981.875138][T15548] team0: Port device team_slave_0 added [ 981.912743][T15548] team0: Port device team_slave_1 added [ 982.271946][T15548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 982.316454][T15548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 982.460443][T15548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 982.576002][T15583] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2193'. [ 982.838550][T15548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 982.864608][T15548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 982.954125][T15548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 983.244865][T13877] Bluetooth: hci15: command tx timeout [ 983.293190][T15548] hsr_slave_0: entered promiscuous mode [ 983.392275][T15548] hsr_slave_1: entered promiscuous mode [ 983.417628][T15597] 9p: Bad value for 'rfdno' [ 983.679224][T13877] Bluetooth: hci16: command tx timeout [ 983.714371][T15548] debugfs: 'hsr0' already exists in 'hsr' [ 983.729006][T15548] Cannot create hsr debugfs directory [ 983.845603][T15604] netlink: 'syz.0.2197': attribute type 1 has an invalid length. [ 983.939384][T15604] gre1: entered promiscuous mode [ 983.968414][T15608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2197'. [ 983.975870][T15596] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2195'. [ 984.052372][T15575] chnl_net:caif_netlink_parms(): no params data found [ 984.168045][T15608] hsr_slave_1 (unregistering): left promiscuous mode [ 984.913592][T15548] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.984780][ T49] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 985.078178][ T10] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 985.127103][T15548] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.154254][ T49] usb 1-1: Using ep0 maxpacket: 8 [ 985.221110][ T49] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 985.255201][T13877] Bluetooth: hci15: command tx timeout [ 985.283992][ T49] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 985.326150][ T49] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 985.362508][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 985.382496][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 985.436431][ T10] usb 4-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 985.446076][T15622] Bluetooth: MGMT ver 1.23 [ 985.457496][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.468184][ T10] usb 4-1: config 0 descriptor?? [ 985.484350][ T49] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 985.564541][ T49] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 985.573684][ T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.577469][T15548] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.747589][T13877] Bluetooth: hci16: command tx timeout [ 986.022822][T15575] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.030176][T15575] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.069438][T15575] bridge_slave_0: entered allmulticast mode [ 986.084672][T15575] bridge_slave_0: entered promiscuous mode [ 986.168983][T15548] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.319844][T15627] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2199'. [ 986.428244][ T49] usb 1-1: GET_CAPABILITIES returned 0 [ 986.433755][ T49] usbtmc 1-1:16.0: can't read capabilities [ 986.456972][T15575] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.472186][T15575] bridge0: port 2(bridge_slave_1) entered disabled state [ 986.481620][T15575] bridge_slave_1: entered allmulticast mode [ 986.489534][T15575] bridge_slave_1: entered promiscuous mode [ 986.587851][T15575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 986.614590][T15575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 986.734026][T15575] team0: Port device team_slave_0 added [ 986.741916][T15575] team0: Port device team_slave_1 added [ 986.805413][T15575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 986.819988][T15575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 986.895442][T15575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 986.928114][T15575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 986.950011][T15575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 987.038358][T15575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 987.129761][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 987.139303][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 987.157502][ T10] usb 4-1: USB disconnect, device number 29 [ 987.247399][T15575] hsr_slave_0: entered promiscuous mode [ 987.259312][T15575] hsr_slave_1: entered promiscuous mode [ 987.274503][T15575] debugfs: 'hsr0' already exists in 'hsr' [ 987.301642][T15575] Cannot create hsr debugfs directory [ 987.334656][T13877] Bluetooth: hci15: command tx timeout [ 987.587299][T15548] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 987.618139][T15548] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 987.644892][T15548] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 987.814310][T13877] Bluetooth: hci16: command tx timeout [ 988.094930][T15548] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 988.738766][ T6104] usb 1-1: USB disconnect, device number 23 [ 989.682076][T15575] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.901920][T13877] Bluetooth: hci16: command tx timeout [ 990.073643][T15575] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.170124][T15548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 990.260600][T15575] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.388700][T15548] 8021q: adding VLAN 0 to HW filter on device team0 [ 990.399016][ T8474] bridge0: port 1(bridge_slave_0) entered blocking state [ 990.406102][ T8474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 990.485966][ T9658] bridge0: port 2(bridge_slave_1) entered blocking state [ 990.493061][ T9658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 990.702145][T15575] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.523628][T15575] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 991.567689][T15575] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 991.588579][T15575] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 991.686321][T15575] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 991.746804][T15548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 992.617565][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.620987][T15575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 992.627133][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.687979][T15575] 8021q: adding VLAN 0 to HW filter on device team0 [ 992.722146][ T2898] bridge0: port 1(bridge_slave_0) entered blocking state [ 992.729330][ T2898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 992.848523][ T2898] bridge0: port 2(bridge_slave_1) entered blocking state [ 992.855617][ T2898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 993.060787][T15575] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 993.250708][ T30] audit: type=1400 audit(1768455797.116:480): avc: denied { ioctl } for pid=15698 comm="syz.1.2214" path="socket:[50713]" dev="sockfs" ino=50713 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 993.733998][ T89] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 993.939586][T15575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 994.293964][ T89] usb 1-1: Using ep0 maxpacket: 8 [ 994.356231][ T89] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 994.692223][T15548] veth0_vlan: entered promiscuous mode [ 994.700538][ T5831] Bluetooth: hci6: command 0x0406 tx timeout [ 994.710297][ T5831] Bluetooth: hci7: command 0x0406 tx timeout [ 994.716854][ T5831] Bluetooth: hci8: command 0x0406 tx timeout [ 994.767499][T15548] veth1_vlan: entered promiscuous mode [ 994.804040][ T89] usb 1-1: config 179 has no interface number 0 [ 994.810394][ T89] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 994.869888][T15575] veth0_vlan: entered promiscuous mode [ 994.891527][ T89] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 994.943566][T15575] veth1_vlan: entered promiscuous mode [ 994.959748][ T89] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 994.959956][T15548] veth0_macvtap: entered promiscuous mode [ 995.001586][ T89] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 995.008239][T15548] veth1_macvtap: entered promiscuous mode [ 995.057190][T15575] veth0_macvtap: entered promiscuous mode [ 995.076410][ T89] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 995.078192][T15575] veth1_macvtap: entered promiscuous mode [ 995.133438][T15548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 995.151208][ T89] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 995.159153][T15548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 995.183924][ T89] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.197227][ T276] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.228074][T15700] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 995.234557][ T276] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.260921][T15575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 995.360081][T15729] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2218'. [ 995.787851][ T276] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.878104][ T276] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.911963][T15575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 995.957522][ T276] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.982450][ T276] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.187246][ T276] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.640865][ T276] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.739303][ T6003] usb 1-1: USB disconnect, device number 24 [ 996.745337][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 996.745380][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 996.797625][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.809404][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.904662][ T7700] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.912604][ T6002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.921339][ T7700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.931183][ T6002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.982921][ T5004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.994911][ T5004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 997.665344][T15754] overlayfs: failed to resolve './file0': -2 [ 998.316935][T15762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 998.819748][T15763] NFSD: Failed to start, no listeners configured. [ 999.873741][T15779] FAULT_INJECTION: forcing a failure. [ 999.873741][T15779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 999.971146][T15779] CPU: 1 UID: 0 PID: 15779 Comm: syz.1.2226 Tainted: G L syzkaller #0 PREEMPT(full) [ 999.971174][T15779] Tainted: [L]=SOFTLOCKUP [ 999.971179][T15779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 999.971187][T15779] Call Trace: [ 999.971192][T15779] [ 999.971198][T15779] dump_stack_lvl+0x16c/0x1f0 [ 999.971228][T15779] should_fail_ex+0x512/0x640 [ 999.971252][T15779] _copy_from_user+0x2e/0xd0 [ 999.971273][T15779] sg_write+0x2cc/0xe10 [ 999.971297][T15779] ? __pfx_sg_write+0x10/0x10 [ 999.971315][T15779] ? __pfx__kstrtoull+0x10/0x10 [ 999.971351][T15779] ? bpf_lsm_file_permission+0x9/0x10 [ 999.971365][T15779] ? security_file_permission+0x71/0x210 [ 999.971385][T15779] ? iov_iter_advance+0x1e3/0x6c0 [ 999.971404][T15779] ? rw_verify_area+0xcf/0x6c0 [ 999.971422][T15779] ? __pfx_sg_write+0x10/0x10 [ 999.971440][T15779] vfs_writev+0x5df/0xde0 [ 999.971462][T15779] ? __pfx_vfs_writev+0x10/0x10 [ 999.971492][T15779] ? __fget_files+0x20e/0x3c0 [ 999.971514][T15779] ? __fget_files+0x110/0x3c0 [ 999.971537][T15779] ? do_writev+0x132/0x340 [ 999.971550][T15779] do_writev+0x132/0x340 [ 999.971565][T15779] ? __pfx_do_writev+0x10/0x10 [ 999.971587][T15779] do_syscall_64+0xcd/0xf80 [ 999.971606][T15779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.971621][T15779] RIP: 0033:0x7f186218f749 [ 999.971643][T15779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 999.971658][T15779] RSP: 002b:00007f1862f72038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 999.971673][T15779] RAX: ffffffffffffffda RBX: 00007f18623e5fa0 RCX: 00007f186218f749 [ 999.971683][T15779] RDX: 0000000000000002 RSI: 0000200000000400 RDI: 0000000000000003 [ 999.971691][T15779] RBP: 00007f1862f72090 R08: 0000000000000000 R09: 0000000000000000 [ 999.971700][T15779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 999.971709][T15779] R13: 00007f18623e6038 R14: 00007f18623e5fa0 R15: 00007ffecebe7868 [ 999.971730][T15779] [ 1000.429993][ T30] audit: type=1400 audit(1768455804.386:481): avc: denied { getopt } for pid=15783 comm="syz.8.2228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1001.705144][T15799] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2231'. [ 1001.827040][T15803] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2232'. [ 1002.216636][ T31] INFO: task syz.3.1959:14068 blocked for more than 143 seconds. [ 1002.225622][ T31] Tainted: G L syzkaller #0 [ 1002.247252][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1002.345275][ T31] task:syz.3.1959 state:D stack:27736 pid:14068 tgid:14067 ppid:5813 task_flags:0x400140 flags:0x00080002 [ 1002.492687][ T31] Call Trace: [ 1002.662654][ T30] audit: type=1400 audit(1768455806.616:482): avc: denied { connect } for pid=15811 comm="syz.3.2234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1002.664017][ T31] [ 1002.789034][ T31] ? __schedule+0x10b9/0x6150 [ 1002.801723][ T30] audit: type=1400 audit(1768455806.616:483): avc: denied { setopt } for pid=15811 comm="syz.3.2234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1002.806402][ T31] __schedule+0x1139/0x6150 [ 1002.903337][ T30] audit: type=1400 audit(1768455806.616:484): avc: denied { read } for pid=15811 comm="syz.3.2234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1003.011920][ T31] ? __pfx___schedule+0x10/0x10 [ 1003.078480][ T31] ? find_held_lock+0x2b/0x80 [ 1003.097811][ T31] ? schedule+0x2d7/0x3a0 [ 1003.125117][ T31] schedule+0xe7/0x3a0 [ 1003.137600][ T31] schedule_preempt_disabled+0x13/0x30 [ 1003.153985][ T31] __mutex_lock+0xc69/0x1ca0 [ 1003.186901][ T31] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1003.220149][ T31] ? nfnetlink_rcv_msg+0x8d6/0x1200 [ 1003.231867][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1003.253550][ T31] ? find_held_lock+0x2b/0x80 [ 1003.263595][ T31] ? nfnetlink_rcv_msg+0x8a5/0x1200 [ 1003.275120][ T31] ? nfnetlink_rcv_msg+0x8d6/0x1200 [ 1003.289669][ T31] nfnetlink_rcv_msg+0x8d6/0x1200 [ 1003.300078][ T31] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1003.322305][ T31] ? __lock_acquire+0x436/0x2890 [ 1003.394216][ T31] ? avc_has_perm_noaudit+0x149/0x3b0 [ 1003.399638][ T31] netlink_rcv_skb+0x158/0x420 [ 1003.415162][ T31] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1003.433954][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1003.439296][ T31] ? ns_capable+0xd7/0x110 [ 1003.453979][ T31] nfnetlink_rcv+0x1b3/0x430 [ 1003.459856][ T31] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1003.465357][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 1003.470697][ T31] netlink_unicast+0x5aa/0x870 [ 1003.475824][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1003.481181][ T31] netlink_sendmsg+0x8c8/0xdd0 [ 1003.486295][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1003.491644][ T31] ____sys_sendmsg+0xa5d/0xc30 [ 1003.501220][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 1003.506989][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1003.512350][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 1003.519369][ T31] ___sys_sendmsg+0x134/0x1d0 [ 1003.524248][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1003.529509][ T31] ? futex_private_hash_put+0x160/0x1b0 [ 1003.538414][ T31] __sys_sendmsg+0x16d/0x220 [ 1003.543077][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 1003.552207][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 1003.557519][ T31] ? fput+0x70/0xf0 [ 1003.561333][ T31] do_syscall_64+0xcd/0xf80 [ 1003.566178][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.572115][ T31] RIP: 0033:0x7f41f178f749 [ 1003.576975][ T31] RSP: 002b:00007f41f25e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1003.585636][ T31] RAX: ffffffffffffffda RBX: 00007f41f19e5fa0 RCX: 00007f41f178f749 [ 1003.593659][ T31] RDX: 0000000000000084 RSI: 0000200000000780 RDI: 0000000000000007 [ 1003.602003][ T31] RBP: 00007f41f1813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1003.622160][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1003.640486][ T31] R13: 00007f41f19e6038 R14: 00007f41f19e5fa0 R15: 00007ffd538635f8 [ 1003.660708][ T31] [ 1003.671122][ T31] INFO: task syz.3.1959:14073 blocked for more than 144 seconds. [ 1003.687654][ T31] Tainted: G L syzkaller #0 [ 1003.694613][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1003.723918][ T31] task:syz.3.1959 state:D stack:26120 pid:14073 tgid:14067 ppid:5813 task_flags:0x400140 flags:0x00080002 [ 1003.763131][ T31] Call Trace: [ 1003.768154][ T31] [ 1003.771106][ T31] ? __schedule+0x10b9/0x6150 [ 1003.776507][ T31] __schedule+0x1139/0x6150 [ 1003.781111][ T31] ? __pfx___schedule+0x10/0x10 [ 1003.786270][ T31] ? find_held_lock+0x2b/0x80 [ 1003.791005][ T31] ? schedule+0x2d7/0x3a0 [ 1003.795666][ T31] schedule+0xe7/0x3a0 [ 1003.799744][ T31] schedule_preempt_disabled+0x13/0x30 [ 1003.805757][ T31] __mutex_lock+0xc69/0x1ca0 [ 1003.810359][ T31] ? __pfx___schedule+0x10/0x10 [ 1003.815520][ T31] ? nfnetlink_rcv_msg+0x8d6/0x1200 [ 1003.820721][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1003.827425][ T31] ? irqentry_exit+0x1dd/0x8c0 [ 1003.832274][ T31] ? nfnetlink_rcv_msg+0x8d6/0x1200 [ 1003.837811][ T31] ? nfnetlink_rcv_msg+0x8d6/0x1200 [ 1003.843060][ T31] nfnetlink_rcv_msg+0x8d6/0x1200 [ 1003.848537][ T31] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1003.854259][ T31] ? __lock_acquire+0x436/0x2890 [ 1003.859263][ T31] ? avc_has_perm_noaudit+0x149/0x3b0 [ 1003.864970][ T31] netlink_rcv_skb+0x158/0x420 [ 1003.869791][ T31] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1003.875610][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1003.880977][ T31] ? ns_capable+0xd7/0x110 [ 1003.886710][ T31] nfnetlink_rcv+0x1b3/0x430 [ 1003.891360][ T31] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1003.897396][ T31] netlink_unicast+0x5aa/0x870 [ 1003.902231][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1003.907893][ T31] netlink_sendmsg+0x8c8/0xdd0 [ 1003.912711][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1003.918498][ T31] ? ____sys_sendmsg+0x871/0xc30 [ 1003.923729][ T31] ____sys_sendmsg+0xa5d/0xc30 [ 1003.930146][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 1003.935886][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1003.941254][ T31] ___sys_sendmsg+0x134/0x1d0 [ 1003.946952][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1003.952240][ T31] __sys_sendmsg+0x16d/0x220 [ 1003.957398][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 1003.962590][ T31] ? irqentry_exit+0x1dd/0x8c0 [ 1003.967707][ T31] ? trace_irq_enable.constprop.0+0x2f/0x110 [ 1003.973744][ T31] do_syscall_64+0xcd/0xf80 [ 1003.978891][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.985235][ T31] RIP: 0033:0x7f41f178f749 [ 1003.989707][ T31] RSP: 002b:00007f41f25c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1003.998510][ T31] RAX: ffffffffffffffda RBX: 00007f41f19e6090 RCX: 00007f41f178f749 [ 1004.006722][ T31] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 1004.014966][ T31] RBP: 00007f41f1813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1004.023001][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1004.033100][ T31] R13: 00007f41f19e6128 R14: 00007f41f19e6090 R15: 00007ffd538635f8 [ 1004.041367][ T31] [ 1004.050155][ T31] INFO: task syz.7.1958:14086 blocked for more than 145 seconds. [ 1004.073763][ T31] Tainted: G L syzkaller #0 [ 1004.080888][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1004.090611][ T31] task:syz.7.1958 state:D stack:27240 pid:14086 tgid:14069 ppid:11596 task_flags:0x400140 flags:0x00080002 [ 1004.102949][ T31] Call Trace: [ 1004.109897][ T31] [ 1004.112882][ T31] ? __schedule+0x10b9/0x6150 [ 1004.121210][ T31] __schedule+0x1139/0x6150 [ 1004.126012][ T31] ? __lock_acquire+0x436/0x2890 [ 1004.132229][ T31] ? __pfx___schedule+0x10/0x10 [ 1004.140773][ T31] ? find_held_lock+0x2b/0x80 [ 1004.145885][ T31] ? schedule+0x2d7/0x3a0 [ 1004.150273][ T31] schedule+0xe7/0x3a0 [ 1004.154701][ T31] schedule_preempt_disabled+0x13/0x30 [ 1004.163003][ T31] __mutex_lock+0xc69/0x1ca0 [ 1004.168684][ T31] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1004.175004][ T31] ? nfnetlink_rcv_msg+0x8d6/0x1200 [ 1004.180257][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1004.185618][ T31] ? find_held_lock+0x2b/0x80 [ 1004.193755][ T31] ? nfnetlink_rcv_msg+0x8a5/0x1200 [ 1004.199361][ T31] ? nfnetlink_rcv_msg+0x8d6/0x1200 [ 1004.204793][ T31] nfnetlink_rcv_msg+0x8d6/0x1200 [ 1004.209876][ T31] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1004.220595][ T31] ? __lock_acquire+0x436/0x2890 [ 1004.225820][ T31] ? avc_has_perm_noaudit+0x149/0x3b0 [ 1004.232643][ T31] netlink_rcv_skb+0x158/0x420 [ 1004.238140][ T31] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1004.244698][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1004.250083][ T31] ? ns_capable+0xd7/0x110 [ 1004.254873][ T31] nfnetlink_rcv+0x1b3/0x430 [ 1004.261610][ T31] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1004.269690][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 1004.275254][ T31] netlink_unicast+0x5aa/0x870 [ 1004.280064][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1004.285780][ T31] netlink_sendmsg+0x8c8/0xdd0 [ 1004.290592][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1004.296834][ T31] ____sys_sendmsg+0xa5d/0xc30 [ 1004.301654][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 1004.307422][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1004.312756][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 1004.329637][ T31] ___sys_sendmsg+0x134/0x1d0 [ 1004.336483][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1004.341745][ T31] ? futex_private_hash_put+0x160/0x1b0 [ 1004.347690][ T31] __sys_sendmsg+0x16d/0x220 [ 1004.352993][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 1004.358453][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 1004.363457][ T31] do_syscall_64+0xcd/0xf80 [ 1004.370576][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.378531][ T31] RIP: 0033:0x7fcdf0b8f749 [ 1004.383052][ T31] RSP: 002b:00007fcdf195f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1004.391942][ T31] RAX: ffffffffffffffda RBX: 00007fcdf0de6090 RCX: 00007fcdf0b8f749 [ 1004.400344][ T31] RDX: 0000000020004000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1004.408612][ T31] RBP: 00007fcdf0c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1004.416876][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1004.425124][ T31] R13: 00007fcdf0de6128 R14: 00007fcdf0de6090 R15: 00007fff73d56b58 [ 1004.433155][ T31] [ 1004.446005][ T31] INFO: task syz.0.1961:14082 blocked for more than 145 seconds. [ 1004.456147][ T31] Tainted: G L syzkaller #0 [ 1004.462746][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1004.472390][ T31] task:syz.0.1961 state:D stack:26120 pid:14082 tgid:14079 ppid:5825 task_flags:0x400140 flags:0x00080002 [ 1004.484741][ T31] Call Trace: [ 1004.488101][ T31] [ 1004.491077][ T31] ? __schedule+0x10b9/0x6150 [ 1004.496212][ T31] __schedule+0x1139/0x6150 [ 1004.500791][ T31] ? __pfx___schedule+0x10/0x10 [ 1004.506095][ T31] ? find_held_lock+0x2b/0x80 [ 1004.510823][ T31] ? schedule+0x2d7/0x3a0 [ 1004.515493][ T31] schedule+0xe7/0x3a0 [ 1004.519612][ T31] schedule_preempt_disabled+0x13/0x30 [ 1004.525509][ T31] __mutex_lock+0xc69/0x1ca0 [ 1004.530154][ T31] ? nfnetlink_rcv_msg+0x8d6/0x1200 [ 1004.536449][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1004.543288][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 1004.549464][ T31] ? nfnetlink_rcv_msg+0x8d6/0x1200 [ 1004.554870][ T31] nfnetlink_rcv_msg+0x8d6/0x1200 [ 1004.559955][ T31] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1004.566488][ T31] ? __lock_acquire+0x436/0x2890 [ 1004.571500][ T31] ? avc_has_perm_noaudit+0x149/0x3b0 [ 1004.577212][ T31] netlink_rcv_skb+0x158/0x420 [ 1004.599208][ T31] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1004.611378][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1004.623788][ T31] ? ns_capable+0xd7/0x110 [ 1004.628521][ T31] nfnetlink_rcv+0x1b3/0x430 [ 1004.636191][ T31] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1004.643213][ T31] netlink_unicast+0x5aa/0x870 [ 1004.648374][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1004.653717][ T31] netlink_sendmsg+0x8c8/0xdd0 [ 1004.658796][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1004.664325][ T31] ____sys_sendmsg+0xa5d/0xc30 [ 1004.669143][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 1004.676401][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1004.681766][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 1004.687413][ T31] ___sys_sendmsg+0x134/0x1d0 [ 1004.692153][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1004.699097][ T31] ? futex_private_hash_put+0x160/0x1b0 [ 1004.705751][ T31] __sys_sendmsg+0x16d/0x220 [ 1004.710403][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 1004.715877][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 1004.720889][ T31] do_syscall_64+0xcd/0xf80 [ 1004.725892][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.731841][ T31] RIP: 0033:0x7f1bae58f749 [ 1004.736594][ T31] RSP: 002b:00007f1baf4d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1004.746532][ T31] RAX: ffffffffffffffda RBX: 00007f1bae7e6090 RCX: 00007f1bae58f749 [ 1004.756788][ T31] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 1004.765064][ T31] RBP: 00007f1bae613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1004.773091][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1004.783502][ T31] R13: 00007f1bae7e6128 R14: 00007f1bae7e6090 R15: 00007ffcd95560a8 [ 1004.796173][ T31] [ 1004.799346][ T31] INFO: task syz.0.1961:14085 blocked for more than 145 seconds. [ 1004.810092][ T31] Tainted: G L syzkaller #0 [ 1004.817231][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1004.826138][ T31] task:syz.0.1961 state:D stack:27736 pid:14085 tgid:14079 ppid:5825 task_flags:0x400140 flags:0x00080002 [ 1004.838493][ T31] Call Trace: [ 1004.841824][ T31] [ 1004.845100][ T31] ? __schedule+0x10b9/0x6150 [ 1004.851637][ T31] __schedule+0x1139/0x6150 [ 1004.856481][ T31] ? __pfx___schedule+0x10/0x10 [ 1004.861607][ T31] ? find_held_lock+0x2b/0x80 [ 1004.867411][ T31] ? schedule+0x2d7/0x3a0 [ 1004.871803][ T31] schedule+0xe7/0x3a0 [ 1004.876197][ T31] schedule_preempt_disabled+0x13/0x30 [ 1004.881700][ T31] __mutex_lock+0xc69/0x1ca0 [ 1004.886608][ T31] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1004.894444][ T31] ? nfnetlink_rcv_msg+0x8d6/0x1200 [ 1004.899700][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1004.905182][ T31] ? find_held_lock+0x2b/0x80 [ 1004.909918][ T31] ? nfnetlink_rcv_msg+0x8a5/0x1200 [ 1004.915429][ T31] ? nfnetlink_rcv_msg+0x8d6/0x1200 [ 1004.920686][ T31] nfnetlink_rcv_msg+0x8d6/0x1200 [ 1004.926806][ T31] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1004.932448][ T31] ? __lock_acquire+0x436/0x2890 [ 1004.938175][ T31] ? avc_has_perm_noaudit+0x149/0x3b0 [ 1004.943597][ T31] netlink_rcv_skb+0x158/0x420 [ 1004.953475][ T31] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1004.959454][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1004.965007][ T31] ? ns_capable+0xd7/0x110 [ 1004.969480][ T31] nfnetlink_rcv+0x1b3/0x430 [ 1004.975785][ T31] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1004.980963][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 1004.986602][ T31] netlink_unicast+0x5aa/0x870 [ 1004.991416][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1004.997804][ T31] netlink_sendmsg+0x8c8/0xdd0 [ 1005.014313][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1005.024188][ T31] ____sys_sendmsg+0xa5d/0xc30 [ 1005.034441][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 1005.046602][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1005.059688][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1005.071747][ T31] ? try_to_wake_up+0xa67/0x1860 [ 1005.082268][ T31] ___sys_sendmsg+0x134/0x1d0 [ 1005.091442][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1005.103596][ T31] ? futex_private_hash_put+0x160/0x1b0 [ 1005.114848][ T31] __sys_sendmsg+0x16d/0x220 [ 1005.126008][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 1005.139725][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 1005.144764][ T31] do_syscall_64+0xcd/0xf80 [ 1005.149273][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.172205][ T31] RIP: 0033:0x7f1bae58f749 [ 1005.177490][ T31] RSP: 002b:00007f1baf471038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1005.185937][ T31] RAX: ffffffffffffffda RBX: 00007f1bae7e6360 RCX: 00007f1bae58f749 [ 1005.194016][ T31] RDX: 0000000000000084 RSI: 0000200000000780 RDI: 0000000000000007 [ 1005.201981][ T31] RBP: 00007f1bae613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1005.210032][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1005.218268][ T31] R13: 00007f1bae7e63f8 R14: 00007f1bae7e6360 R15: 00007ffcd95560a8 [ 1005.226618][ T31] [ 1005.229715][ T31] [ 1005.229715][ T31] Showing all locks held in the system: [ 1005.238065][ T31] 1 lock held by khungtaskd/31: [ 1005.242914][ T31] #0: ffffffff8e3c96a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1005.266280][ T31] 2 locks held by getty/5576: [ 1005.270979][ T31] #0: ffff88814e6720a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1005.280926][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 [ 1005.291310][ T31] 3 locks held by syz.4.228/6828: [ 1005.296465][ T31] 1 lock held by syz.3.1959/14068: [ 1005.301606][ T31] #0: ffffffff9b0a4118 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8d6/0x1200 [ 1005.313233][ T31] 1 lock held by syz.3.1959/14073: [ 1005.318459][ T31] #0: ffffffff9b0a4118 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8d6/0x1200 [ 1005.328623][ T31] 1 lock held by syz.7.1958/14086: [ 1005.333759][ T31] #0: ffffffff9b0a4118 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8d6/0x1200 [ 1005.344807][ T31] 1 lock held by syz.0.1961/14082: [ 1005.351428][ T31] #0: ffffffff9b0a4118 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8d6/0x1200 [ 1005.368442][ T31] 1 lock held by syz.0.1961/14085: [ 1005.373608][ T31] #0: ffffffff9b0a4118 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8d6/0x1200 [ 1005.384042][ T31] 1 lock held by syz.1.2014/14385: [ 1005.389190][ T31] #0: ffffffff9b0a4118 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8d6/0x1200 [ 1005.399361][ T31] 1 lock held by syz.5.2067/14626: [ 1005.404694][ T31] #0: ffffffff9b0a4118 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8d6/0x1200 [ 1005.429394][ T31] 1 lock held by syz.8.2068/14630: [ 1005.434822][ T31] #0: ffffffff9b0a4118 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8d6/0x1200 [ 1005.445413][ T31] 1 lock held by syz.9.2069/14632: [ 1005.450571][ T31] #0: ffffffff9b0a4118 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8d6/0x1200 [ 1005.462706][ T31] 1 lock held by syz.2.2127/15259: [ 1005.468047][ T31] #0: ffffffff9b0a4118 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8d6/0x1200 [ 1005.478651][ T31] 1 lock held by syz.7.2129/15269: [ 1005.483809][ T31] #0: ffffffff9b0a4118 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8d6/0x1200 [ 1005.495889][ T31] 1 lock held by syz.4.2155/15415: [ 1005.501060][ T31] #0: ffffffff9b0a4118 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8d6/0x1200 [ 1005.511428][ T31] 1 lock held by syz.6.2161/15437: [ 1005.516762][ T31] #0: ffffffff9b0a4118 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8d6/0x1200 [ 1005.527043][ T31] 2 locks held by dhcpcd/15816: [ 1005.531926][ T31] #0: ffff888048f41908 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 1005.542794][ T31] #1: ffffffff8e3d4df8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 1005.552960][ T31] 1 lock held by dhcpcd/15817: [ 1005.558697][ T31] #0: ffff888048f46988 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 1005.570706][ T31] [ 1005.583595][ T31] ============================================= [ 1005.583595][ T31] [ 1005.592438][ T31] NMI backtrace for cpu 1 [ 1005.592454][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1005.592475][ T31] Tainted: [L]=SOFTLOCKUP [ 1005.592480][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1005.592490][ T31] Call Trace: [ 1005.592496][ T31] [ 1005.592502][ T31] dump_stack_lvl+0x116/0x1f0 [ 1005.592529][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1005.592546][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1005.592565][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1005.592583][ T31] sys_info+0x133/0x180 [ 1005.592606][ T31] watchdog+0xe66/0x1180 [ 1005.592629][ T31] ? rcu_is_watching+0x12/0xc0 [ 1005.592645][ T31] ? __pfx_watchdog+0x10/0x10 [ 1005.592661][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1005.592683][ T31] ? __kthread_parkme+0x19e/0x250 [ 1005.592701][ T31] ? __pfx_watchdog+0x10/0x10 [ 1005.592718][ T31] kthread+0x3c5/0x780 [ 1005.592737][ T31] ? __pfx_kthread+0x10/0x10 [ 1005.592757][ T31] ? rcu_is_watching+0x12/0xc0 [ 1005.592771][ T31] ? __pfx_kthread+0x10/0x10 [ 1005.592792][ T31] ret_from_fork+0x983/0xb10 [ 1005.592809][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1005.592828][ T31] ? __switch_to+0x7af/0x10d0 [ 1005.592847][ T31] ? __pfx_kthread+0x10/0x10 [ 1005.592867][ T31] ret_from_fork_asm+0x1a/0x30 [ 1005.592901][ T31] [ 1005.592907][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1005.734150][ C0] NMI backtrace for cpu 0 [ 1005.734167][ C0] CPU: 0 UID: 0 PID: 6828 Comm: syz.4.228 Tainted: G L syzkaller #0 PREEMPT(full) [ 1005.734184][ C0] Tainted: [L]=SOFTLOCKUP [ 1005.734189][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1005.734197][ C0] RIP: 0010:lock_is_held_type+0x119/0x150 [ 1005.734218][ C0] Code: 75 2d 9c 58 f6 c4 02 75 43 48 f7 04 24 00 02 00 00 74 01 fb 48 83 c4 08 44 89 e8 5b 5d 41 5c 41 5d 41 5e 41 5f e9 87 2c 03 00 <45> 31 ed eb b5 90 0f 0b 90 48 c7 c7 b2 ea ac 8d e8 42 18 00 00 65 [ 1005.734231][ C0] RSP: 0018:ffffc9000b8d6898 EFLAGS: 00000046 [ 1005.734243][ C0] RAX: 0000000000000000 RBX: ffff88802cfed4d8 RCX: 0000000000000001 [ 1005.734251][ C0] RDX: 0000000000000000 RSI: ffffffff8ef39618 RDI: ffff88802cfed4d8 [ 1005.734259][ C0] RBP: ffffffff8ef39618 R08: 0000000000000003 R09: 000000000000001f [ 1005.734266][ C0] R10: 0000000000000000 R11: 000000000007fffc R12: ffff88802cfec980 [ 1005.734274][ C0] R13: ffff88802cfed4b0 R14: 00000000ffffffff R15: 0000000000000002 [ 1005.734282][ C0] FS: 00007f78be8bb6c0(0000) GS:ffff8881248f4000(0000) knlGS:0000000000000000 [ 1005.734295][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1005.734303][ C0] CR2: 000055dee0c72168 CR3: 0000000027a3d000 CR4: 00000000003526f0 [ 1005.734311][ C0] Call Trace: [ 1005.734315][ C0] [ 1005.734321][ C0] depot_fetch_stack+0x71/0xb0 [ 1005.734340][ C0] __set_page_owner+0x150/0x560 [ 1005.734357][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 1005.734371][ C0] ? mark_held_locks+0x49/0x80 [ 1005.734386][ C0] ? bad_range+0x261/0x4c0 [ 1005.734401][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1005.734417][ C0] post_alloc_hook+0x1af/0x220 [ 1005.734435][ C0] get_page_from_freelist+0xd0b/0x31a0 [ 1005.734451][ C0] ? should_fail_alloc_page+0xee/0x130 [ 1005.734469][ C0] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 1005.734482][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1005.734497][ C0] ? is_bpf_text_address+0x94/0x1a0 [ 1005.734511][ C0] ? kernel_text_address+0x8d/0x100 [ 1005.734527][ C0] ? __kernel_text_address+0xd/0x40 [ 1005.734541][ C0] ? unwind_get_return_address+0x59/0xa0 [ 1005.734558][ C0] ? arch_stack_walk+0xa6/0x100 [ 1005.734573][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1005.734589][ C0] ? stack_depot_save_flags+0x29/0x9b0 [ 1005.734606][ C0] ? __lock_acquire+0x436/0x2890 [ 1005.734620][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1005.734634][ C0] ? policy_nodemask+0xea/0x4e0 [ 1005.734651][ C0] alloc_pages_mpol+0x1fb/0x550 [ 1005.734666][ C0] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1005.734683][ C0] new_slab+0x2c3/0x430 [ 1005.734701][ C0] ___slab_alloc+0xe18/0x1c90 [ 1005.734718][ C0] ? hash_ipport4_resize+0x104f/0x1b90 [ 1005.734738][ C0] ? hash_ipport4_resize+0x104f/0x1b90 [ 1005.734754][ C0] ? __slab_alloc.constprop.0+0x63/0x110 [ 1005.734771][ C0] __slab_alloc.constprop.0+0x63/0x110 [ 1005.734790][ C0] __kmalloc_noprof+0x4fc/0x910 [ 1005.734807][ C0] ? hash_ipport4_resize+0xd4b/0x1b90 [ 1005.734823][ C0] ? hash_ipport4_resize+0x104f/0x1b90 [ 1005.734840][ C0] ? hash_ipport4_resize+0x104f/0x1b90 [ 1005.734856][ C0] hash_ipport4_resize+0x104f/0x1b90 [ 1005.734877][ C0] ? __pfx_hash_ipport4_resize+0x10/0x10 [ 1005.734895][ C0] call_ad.constprop.0+0x36d/0x940 [ 1005.734913][ C0] ? __pfx_hash_ipport4_resize+0x10/0x10 [ 1005.734931][ C0] ? __pfx_call_ad.constprop.0+0x10/0x10 [ 1005.734942][ C0] ? __pfx___nla_validate_parse+0x10/0x10 [ 1005.734961][ C0] ? __nla_parse+0x40/0x60 [ 1005.734974][ C0] ip_set_ad.constprop.0.isra.0+0x3ce/0x870 [ 1005.734990][ C0] ? __pfx_ip_set_ad.constprop.0.isra.0+0x10/0x10 [ 1005.735002][ C0] ? trace_contention_end+0xdd/0x110 [ 1005.735018][ C0] ? __mutex_lock+0x27b/0x1ca0 [ 1005.735042][ C0] ? find_held_lock+0x2b/0x80 [ 1005.735062][ C0] nfnetlink_rcv_msg+0x9fc/0x1200 [ 1005.735078][ C0] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1005.735090][ C0] ? __lock_acquire+0x436/0x2890 [ 1005.735113][ C0] ? avc_has_perm_noaudit+0x149/0x3b0 [ 1005.735129][ C0] netlink_rcv_skb+0x158/0x420 [ 1005.735144][ C0] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1005.735157][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1005.735177][ C0] ? ns_capable+0xd7/0x110 [ 1005.735193][ C0] nfnetlink_rcv+0x1b3/0x430 [ 1005.735204][ C0] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1005.735215][ C0] ? netlink_deliver_tap+0x1ae/0xd30 [ 1005.735231][ C0] netlink_unicast+0x5aa/0x870 [ 1005.735247][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 1005.735265][ C0] netlink_sendmsg+0x8c8/0xdd0 [ 1005.735282][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1005.735301][ C0] ____sys_sendmsg+0xa5d/0xc30 [ 1005.735317][ C0] ? copy_msghdr_from_user+0x10a/0x160 [ 1005.735330][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1005.735348][ C0] ? __pfx_futex_wake_mark+0x10/0x10 [ 1005.735361][ C0] ___sys_sendmsg+0x134/0x1d0 [ 1005.735374][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 1005.735386][ C0] ? futex_private_hash_put+0x160/0x1b0 [ 1005.735414][ C0] __sys_sendmsg+0x16d/0x220 [ 1005.735427][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 1005.735439][ C0] ? __x64_sys_futex+0x1e0/0x4c0 [ 1005.735462][ C0] do_syscall_64+0xcd/0xf80 [ 1005.735478][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.735490][ C0] RIP: 0033:0x7f78bd98f749 [ 1005.735501][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1005.735511][ C0] RSP: 002b:00007f78be8bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1005.735523][ C0] RAX: ffffffffffffffda RBX: 00007f78bdbe6090 RCX: 00007f78bd98f749 [ 1005.735530][ C0] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000006 [ 1005.735538][ C0] RBP: 00007f78bda13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1005.735545][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1005.735552][ C0] R13: 00007f78bdbe6128 R14: 00007f78bdbe6090 R15: 00007ffe8bca48d8 [ 1005.735564][ C0] [ 1006.331068][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1006.337941][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1006.348619][ T31] Tainted: [L]=SOFTLOCKUP [ 1006.352937][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1006.363001][ T31] Call Trace: [ 1006.366275][ T31] [ 1006.369197][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1006.373799][ T31] vpanic+0x640/0x6f0 [ 1006.377779][ T31] panic+0xca/0xd0 [ 1006.381493][ T31] ? __pfx_panic+0x10/0x10 [ 1006.385906][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1006.391890][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 1006.398043][ T31] ? nmi_trigger_cpumask_backtrace+0x2be/0x300 [ 1006.404195][ T31] ? watchdog+0xe83/0x1180 [ 1006.408616][ T31] ? watchdog+0xe76/0x1180 [ 1006.413056][ T31] watchdog+0xe94/0x1180 [ 1006.417297][ T31] ? rcu_is_watching+0x12/0xc0 [ 1006.422056][ T31] ? __pfx_watchdog+0x10/0x10 [ 1006.426732][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1006.431934][ T31] ? __kthread_parkme+0x19e/0x250 [ 1006.436952][ T31] ? __pfx_watchdog+0x10/0x10 [ 1006.441621][ T31] kthread+0x3c5/0x780 [ 1006.445672][ T31] ? __pfx_kthread+0x10/0x10 [ 1006.450242][ T31] ? rcu_is_watching+0x12/0xc0 [ 1006.454983][ T31] ? __pfx_kthread+0x10/0x10 [ 1006.459556][ T31] ret_from_fork+0x983/0xb10 [ 1006.464128][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1006.469223][ T31] ? __switch_to+0x7af/0x10d0 [ 1006.473882][ T31] ? __pfx_kthread+0x10/0x10 [ 1006.478453][ T31] ret_from_fork_asm+0x1a/0x30 [ 1006.483206][ T31] [ 1006.486486][ T31] Kernel Offset: disabled [ 1006.490787][ T31] Rebooting in 86400 seconds..