last executing test programs: 6m13.947546643s ago: executing program 32 (id=315): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = open(&(0x7f0000000280)='./file0\x00', 0x8480, 0x49) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000240)) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500"], 0x15) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x2c, 0xa, 0x3) (async) r2 = socket(0x2a, 0x2, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001bc0)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x1, 0x2, 0x8, 0xff, 0x94, 0x9, 0x3, 0x1000, [{0x4, 0xffffffff, 0x5, 0x35b}, {0x6, 0x7fffffff, 0x5, 0x92d}, {0x6, 0x5, 0x8, 0x6}, {0x9, 0x5, 0x4, 0x5}, {0x9, 0x800, 0xbf2e, 0x2}, {0x7f59, 0x8, 0x18000, 0x8}, {0x9, 0x1, 0x4018, 0xe0}, {0x476a, 0x4, 0x5}]}}]}}]}, 0xc4}}, 0x4000) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000200)={0x5}, 0x1) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000010c0), &(0x7f0000000300)=0x8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) unlink(&(0x7f0000000100)='./file0\x00') ioctl$PPPIOCSACTIVE(r6, 0x40107446, &(0x7f0000000380)={0x5, &(0x7f0000000000)=[{0x5, 0xa7, 0x3, 0xfffffff9}, {0x101, 0x3, 0x8}, {0x9, 0x2, 0x1, 0x3}, {0x538, 0x0, 0x79, 0x7d54}, {0x7, 0x72, 0x1, 0x5}]}) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000940)=@filter={'filter\x00', 0x2, 0x4, 0x388, 0xffffffff, 0x1e8, 0xd0, 0x1e8, 0xfeffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [0x0, 0x0, 0xff], [0x0, 0x0, 0xffffff00], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x3, 0xa}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@mcast1, @loopback, [0x0, 0x0, 0xffffffff], [], 'netdevsim0\x00', 'geneve0\x00', {}, {}, 0x0, 0x96}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b667f10900000000000000e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f00000001c0)={0xb, 0xffffffffffffffff, 0x1}) fcntl$setpipe(r8, 0x407, 0x0) 4m52.568564782s ago: executing program 33 (id=605): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)={0x108, r3, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x00\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x108}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYRES32=r7, @ANYRES16=r5, @ANYBLOB="010028bd7000fbdbdf251200000008000300", @ANYBLOB="c53f2f0e9ecb3948a5ea209b", @ANYBLOB], 0x1c}}, 0xd4) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r5, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4090}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000000300)=@ipv6_deladdr={0x40, 0x15, 0x101, 0x70bd28, 0x25dfdbfe, {0xa, 0x1, 0x0, 0xfe}, [@IFA_LOCAL={0x14, 0x2, @private1}, @IFA_ADDRESS={0x14, 0x1, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000100}, 0x40014) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x2c, r5, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80000c0}, 0x48044) 4m30.734252519s ago: executing program 34 (id=777): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) (async) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000300), 0x8, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) splice(r3, 0x0, r5, 0x0, 0x81, 0x0) (async) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x112, 0x3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000400)={r7}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x92, 0x80, 0x9d5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) (async) syz_init_net_socket$ax25(0x3, 0x4, 0xce) 2m45.951836412s ago: executing program 7 (id=1227): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x8, 0x9, 0x3, 0x41, 0x19}) eventfd(0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xc0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x8, 0x9, 0x3, 0x41, 0x19}) (async) eventfd(0x8) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xc0) (async) 2m45.623199664s ago: executing program 7 (id=1230): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)) (async) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x2) 2m45.346053599s ago: executing program 7 (id=1231): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x17, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_team\x00'}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0xc054) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000001200", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 2m44.80195288s ago: executing program 7 (id=1234): r0 = socket$netlink(0x10, 0x3, 0xb) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010000104000000000000c90000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000300", @ANYRES32=0x0, @ANYBLOB="2000128008000100677470001400028008000100", @ANYRES32=r2], 0x48}}, 0x0) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m44.560516638s ago: executing program 7 (id=1236): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x5) io_setup(0x8, &(0x7f00000001c0)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) io_cancel(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x3e49, 0x0, 0x2}, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8620000090400"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 2m41.5970076s ago: executing program 7 (id=1244): syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8931, &(0x7f0000000900)={'bond0\x00', @multicast}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/route\x00') preadv(r1, &(0x7f00000025c0)=[{&(0x7f0000002500)=""/79, 0x4f}], 0x1, 0x10006c, 0x2f) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000040)=0x5) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) timerfd_create(0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000000)=""/124, 0x7c}], 0x1, 0x1, 0xffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) 2m26.472192837s ago: executing program 35 (id=1244): syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8931, &(0x7f0000000900)={'bond0\x00', @multicast}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/route\x00') preadv(r1, &(0x7f00000025c0)=[{&(0x7f0000002500)=""/79, 0x4f}], 0x1, 0x10006c, 0x2f) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000040)=0x5) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) timerfd_create(0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000000)=""/124, 0x7c}], 0x1, 0x1, 0xffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) 2m17.174003568s ago: executing program 5 (id=1349): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x500, 0x0) (async, rerun: 32) socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x0, 0x2}}) (async, rerun: 64) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) (rerun: 64) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000340)={0x0, 0xfffffffa, 0x0, 0x0, 0xc}) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r3 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x400) (async) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xd) fcntl$dupfd(r4, 0x0, r4) (async, rerun: 32) socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x400000000000004) (async, rerun: 32) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffffffffff56}, 0x0, 0x0) (rerun: 32) ioctl$IOC_PR_PREEMPT(r3, 0x40046109, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000206010200000000000000000500000501140100070000000900020073797a31000000000500040003000000"], 0x30}, 0x1, 0x0, 0x0, 0x9f388d5d2b180a48}, 0x44) (async) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000340)=ANY=[@ANYBLOB="040000000000000cd57d37085529250e7b00040000c0010001000100000006000000bb0500009e05000001000000000000000000000000000000010000400300000004000000000000008c0b00000200000077010000000000000000000000000000010000800400000003000000c00000000100000002000000000000000000000000000000000000000a0000000300000004000000480a000004000000010000805500"/178]) setreuid(0xee01, 0x0) (async) getresuid(&(0x7f0000000280)=0x0, &(0x7f00000002c0), &(0x7f0000000300)) setreuid(0x0, r7) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xfeffffff, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) socket$netlink(0x10, 0x3, 0x4) r8 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x141000) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r8, 0xc1105511, &(0x7f0000000140)={0xa, 0x0, 0x1, 0x0, 'syz0\x00'}) 2m16.443330232s ago: executing program 5 (id=1351): memfd_create(0x0, 0x3) r0 = socket$packet(0x11, 0x2, 0x300) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41, 0x4}, 0x3}}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r2 = syz_usb_connect(0x2, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0}) syz_open_dev$sndmidi(&(0x7f0000000180), 0x1e3, 0x434881) r3 = syz_open_dev$video(&(0x7f0000000300), 0x9, 0x0) ioctl$VIDIOC_G_AUDIO(r3, 0x80345621, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000580)={'syztnl0\x00', r1, 0x7800, 0x8000, 0xd, 0x4f7f, {{0x15, 0x4, 0x1, 0x3, 0xfffffffffffffd72, 0x6a, 0x0, 0x6, 0x2f, 0x0, @rand_addr=0x64010101, @broadcast, {[@timestamp_prespec={0x44, 0x4, 0x9d, 0x3, 0xe}, @lsrr={0x83, 0xf, 0xa4, [@dev={0xac, 0x14, 0x14, 0x1f}, @remote, @empty]}, @cipso={0x86, 0x15, 0xffffffffffffffff, [{0x2, 0xa, "381e562463b04f76"}, {0x6, 0x5, '@xT'}]}, @generic={0x82, 0x4, "5ee3"}, @timestamp_addr={0x44, 0x14, 0x7, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x32}, 0x5ba8fff9}, {@private=0xa010101, 0x5}]}]}}}}}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r1}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) unshare(0x22020400) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0x1, @link_local, 'geneve0\x00'}}, 0x1e) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000100)=0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000280)={'geneve0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400000bd2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, 0x0, 0x400000, 0x6) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./bus/file0\x00', 0x0) syz_open_dev$MSR(&(0x7f0000000080), 0x5, 0x0) 2m13.726031578s ago: executing program 5 (id=1359): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r0], 0x78}, 0x1, 0x0, 0x0, 0x20048081}, 0x841) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0xa, 0x3, 0x3a) (async) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) (async) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) (async) socket(0xa, 0x3, 0x3a) (async) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r0], 0x78}, 0x1, 0x0, 0x0, 0x20048081}, 0x841) (async) 2m13.412672493s ago: executing program 5 (id=1360): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="5975d4b7c435e6546d02c358cddb138dcac4bb0fcc204ee0762e11160bb8277799c7772905dcf0ba0677c7712d76b3aef27eba5529e17a75f334c16fa124d29a6f61c3eb051e20d5f8bfaae3600b91fc587840b8e9ea50aa2aa89ee4cc2a762110f66c915a868de469d6563dcb668d239ab8e9efb0a85ffc", 0x78}, {&(0x7f0000000080)="66dd785b69414b8c62cec4f6e1e0c32c37c14aad0ace8f14c4abe50be8be2d81746f772c494c54dfcc8577fa98795867208e61b8c02dc9610e55d8407f1fdd0b2c89cae5f22835d21f5dc14d3a98515466cfab716e06", 0x56}, {&(0x7f0000000140)="8a99371df59829b38f9075ecd663840b154fa638e343ca529f36af8e88b38861c5b51f66a56abe82043d3a79eba634d95a242b3a06a34845cb6699729725eeb1b1983080e6259042f8073820402cbb92386ea6f645a045f8cdde18e16a7854a8969b38c92bbdc37fb4cede4c3923aae90305a610c87680c9", 0x78}, {&(0x7f0000000200)="bfaa65983374e4df6473aa85af4782742b3f61fa07cc08bf38fb57716384a987e3af9a8c9c835e38bfea0784dc0e597e1377e09897ee5a7cacada5cbb247301fcc914b7cd8426b7031e943f817f028b46ce4", 0x52}, {&(0x7f0000000280)}], 0x5}, 0x48800) 2m13.194113928s ago: executing program 5 (id=1362): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0x19}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_create(0x0, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_clone(0x40, 0x0, 0x0, 0x0, 0x0, 0x0) read$msr(r2, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000001480)={0x85, 0x7, r4, 0x0, 0x10000, 0x0, 0xb, 0x12242b, 0x884f}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x334e8b, 0x10000000000001}) 2m12.222349756s ago: executing program 5 (id=1365): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) unshare(0x62040200) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0xe2c92000) (async, rerun: 64) unshare(0x8000000) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) (async, rerun: 64) syz_init_net_socket$ax25(0x3, 0x3, 0xc4) (rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) prlimit64(0x0, 0xd, &(0x7f0000000140)={0x40000c, 0x30d0a518}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) getpid() r1 = socket(0x2c, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r1}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r2, &(0x7f0000000200)}, 0x20) (async) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x2) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) read(r0, &(0x7f0000000280)=""/44, 0x2c) (async) ioctl$KDMKTONE(r4, 0x4b30, 0x8000000000000001) 1m56.538085084s ago: executing program 36 (id=1365): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) unshare(0x62040200) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0xe2c92000) (async, rerun: 64) unshare(0x8000000) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) (async, rerun: 64) syz_init_net_socket$ax25(0x3, 0x3, 0xc4) (rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) prlimit64(0x0, 0xd, &(0x7f0000000140)={0x40000c, 0x30d0a518}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) getpid() r1 = socket(0x2c, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r1}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r2, &(0x7f0000000200)}, 0x20) (async) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x2) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) read(r0, &(0x7f0000000280)=""/44, 0x2c) (async) ioctl$KDMKTONE(r4, 0x4b30, 0x8000000000000001) 1m51.628708417s ago: executing program 6 (id=1438): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = inotify_init() r3 = epoll_create(0x200008) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x2, 0xe, 0x9, 0x9, 0xb, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x3, 0x7f, 0x3, 0x7fffffff, 0x7}, @sadb_x_filter={0x5, 0x1a, @in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x13}, 0x1d, 0x10, 0xc}]}, 0x58}}, 0x48000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000100)=0x0) sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7ff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f00000001c0)={0x400, 0x300, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xb}) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1m50.469472802s ago: executing program 6 (id=1448): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0x19}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_create(0x0, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_clone(0x40, 0x0, 0x0, 0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102384, 0x18ff0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000001480)={0x85, 0x7, r4, 0x0, 0x10000, 0x0, 0xb, 0x12242b, 0x884f}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x334e8b, 0x10000000000001}) 1m47.559563672s ago: executing program 6 (id=1455): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000010000173c2e5864a2fad65000000000a28000000000a010400000000000000000100004008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) dup(0xffffffffffffffff) (async) r1 = dup(0xffffffffffffffff) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x6, 0x1fc}}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000001c0)={0x2, {0x2, 0xfffe, 0x0, 0x101, 0x1}}) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r3 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010300000ae6f72087a003"], 0x3c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010300000ae6f72087a003"], 0x3c}}, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, r4, 0x223, 0x0, 0x25dfdbfc, {0x3}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, 0x28}}, 0x40040) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000001d80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x4c080002}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x28, r4, 0x10, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x0) read(r2, &(0x7f0000000080)=""/163, 0xa3) (async) read(r2, &(0x7f0000000080)=""/163, 0xa3) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000280)={'filter\x00', 0x0, [0x6, 0xb, 0x4]}, &(0x7f0000000100)=0x44) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001bc0)={'erspan0\x00', &(0x7f0000001ac0)={'gre0\x00', 0x0, 0x7, 0x700, 0x10, 0xba1, {{0x23, 0x4, 0x3, 0x3b, 0x8c, 0x68, 0x0, 0xfe, 0x2f, 0x0, @local, @local, {[@noop, @timestamp_addr={0x44, 0xc, 0xd6, 0x1, 0x4, [{@loopback, 0x7}]}, @cipso={0x86, 0x32, 0x2, [{0x6, 0x5, "ce605f"}, {0x0, 0x9, "5882d1eb49036c"}, {0x1, 0xf, "253b36a8e3e590fa98b479e898"}, {0x7, 0x6, "450e0fc4"}, {0x1, 0x9, "72aa23f5f1b1ab"}]}, @timestamp_addr={0x44, 0x34, 0x26, 0x1, 0x8, [{@multicast1, 0xba}, {@local}, {@rand_addr=0x64010102, 0x3}, {@loopback, 0x4}, {@remote, 0x9d9}, {@remote, 0xf69}]}, @noop, @generic={0x89, 0x3, "bf"}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001bc0)={'erspan0\x00', &(0x7f0000001ac0)={'gre0\x00', 0x0, 0x7, 0x700, 0x10, 0xba1, {{0x23, 0x4, 0x3, 0x3b, 0x8c, 0x68, 0x0, 0xfe, 0x2f, 0x0, @local, @local, {[@noop, @timestamp_addr={0x44, 0xc, 0xd6, 0x1, 0x4, [{@loopback, 0x7}]}, @cipso={0x86, 0x32, 0x2, [{0x6, 0x5, "ce605f"}, {0x0, 0x9, "5882d1eb49036c"}, {0x1, 0xf, "253b36a8e3e590fa98b479e898"}, {0x7, 0x6, "450e0fc4"}, {0x1, 0x9, "72aa23f5f1b1ab"}]}, @timestamp_addr={0x44, 0x34, 0x26, 0x1, 0x8, [{@multicast1, 0xba}, {@local}, {@rand_addr=0x64010102, 0x3}, {@loopback, 0x4}, {@remote, 0x9d9}, {@remote, 0xf69}]}, @noop, @generic={0x89, 0x3, "bf"}]}}}}}) sendmsg$inet(r5, &(0x7f0000001cc0)={&(0x7f0000000240)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000001a00)=[{&(0x7f00000005c0)="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", 0x1000}, {&(0x7f0000000400)="7994c6ac4328dff3fafdf2ee99d415e49c3d573ba6dfeef223d4a4557f4fc63eafd5f3c120a6a0877a4bef50958459d62297568795ff7d255f6ca9492e48d5250a43a7f0e5b9644ed5165a4160d20826de4dbc546233e4a5c1c21e2d04b9bd06b219e46b61858fe73a530f65576310da48a52a66dae08b171993594aa51ace8d08ecb2fdac477d41726f8f61c0063f01d0a88d70c31e87a87deb48f710f239d9d9d9c8f2a30e3e0324da2360721c1b46fc32f72ea093d87733ccefd44a0257f66055621581d6070b95474ed45101e7318753165095a82833bacdbbd4c0b88a7299", 0xe1}, {&(0x7f0000000300)='|ls', 0x3}, {&(0x7f0000000500)="864fa3c02230e80fd9e4308c2ffe0ac5f8f400b283f907ed744cfaf86a7c615b00696b411b0a0eed1feb617bcd1d699f0f18498acda07fa682359a9c96cda597f27d60baf832", 0x46}, {&(0x7f00000015c0)="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", 0xfe}, {&(0x7f00000016c0)="e986708a6ebb6fcc5b4a24e06b5389058367a375e6fab95aa528baf3fe0aff0e05735679e62a60adde3b4b9369c0e8be85f9d310043998de624b566b8e65494e8a74142de9cca42290791c8163e9d197a6e4eda54810e58ef83f3a05c278ff2952676fd7de29be56464b45028e350a3bde409be2f1f97108613888ff14f8a4dde271f3e171631dab74dde899f7bf3bad17a68f2f8c6f2e07d1d7d7bdca24c4dd263b8e91928fa65937753a85b466f9ebeb70138105361051bcb02d4e6779a9a0b7a0df4660c13d39bb4c9f0ca88c88afe95c4ca0b75ec709a871ae822e3a77fbb49b75995e206be2a2b18f322b46c5966f6f83", 0xf3}, {&(0x7f00000017c0)="5c2e46a1e7157192068385f51374aa8d919b1a1341cd7ce6f6175f5dce57d0f50b128d7d7b0cf04437b991b366ad3adeeeb90d2921c1e17256fa0670f0b8d4e693cbeefa455a8189ab4a3a52173daf1351e26930ecd511109ae3eb2042bac5dc4904dd89acf39161ab9e3519357cbf9f50d9cfb103bebd68f2e95205ce6ccba69c95c060213f3e0992241bf447e28c3687a77a3089950dbda229ffec861b3114a4d188456cdea96dbf801342a3b1c385e3146bb501fa355e78ae279ead0e07ba8d1c7830c0c99f0a8bd538f84bb2b1adc541", 0xd2}, {&(0x7f00000018c0)="699ee22736eed84f2536077c5e1ca22a7adcf31e9e57de95ac6967cc8d061c96a8df318026722b9aabf5123d13901f7a432e6aeab7687e042a20a588cd5ac460d34d4e2b1eba4f6a8cbad356a5614de2056288c11460db3a09be6780617b1279be554b65fab8f7459644d27e4952dffe0571f50bbe72e2", 0x77}, {&(0x7f0000001940)="b22b4d827c18c1106e66792bf32fe9fa8a76dbb19cad66c8ad04846a5cabb07535a8a54f016918471b662f05d88f1c7679f9f60289a501c8bc76f85da87eb596", 0x40}, {&(0x7f0000001980)="d00cf48b0027c8171eee044b1c2415eaf3d19c17fb560b2c9e141a70e8d537354ba5c6cfc77a05666501e8ecc2a813dc54a5bbc4733488cb1696768c38c510d368be334efea9456a16d3da3dab23b527793bdd8c6142c009a7e1bac08854b3f03b043c223a17a03644e70d221b976e9e64ddd961cca30ea76100bd", 0x7b}], 0xa, &(0x7f0000001c00)=[@ip_tos_u8={{0x11}}, @ip_retopts={{0x48, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x34, 0x29, 0x3, 0x8, [{@private=0xa010101, 0x8}, {@broadcast, 0x2}, {@multicast2, 0x6}, {@private=0xa010100, 0x10001}, {@remote, 0x393e}, {@empty, 0xfffffffd}]}, @ra={0x94, 0x4}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @multicast1, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_retopts={{0x20, 0x0, 0x7, {[@noop, @generic={0x89, 0xf, "3ed549b81ac7476f5a2c19a553"}]}}}], 0xb8}, 0x40480c5) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a050600001900000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001414000000110001"], 0x64}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000000d0a010e0000000000000000010000000900010073797a3000000000090002"], 0x2c}}, 0x0) (async) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000000d0a010e0000000000000000010000000900010073797a3000000000090002"], 0x2c}}, 0x0) syz_io_uring_complete(0x0) (async) r8 = syz_io_uring_complete(0x0) ioctl$PPPIOCSPASS(r8, 0x40107447, &(0x7f0000000200)={0x4, &(0x7f0000000140)=[{0x4, 0x2, 0x2, 0x1000}, {0x3, 0x7, 0xbb, 0x80000000}, {0x9, 0xf, 0x10, 0x7}, {0x6, 0xd, 0x4, 0x8}]}) 1m47.404721524s ago: executing program 6 (id=1459): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x1000000, 0x0) (async) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 1m46.669996221s ago: executing program 6 (id=1461): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x800) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) (async) r3 = socket(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000280), 0x1, r2}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x490303, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, @void, @value}, 0x94) (async) syz_emit_vhci(&(0x7f0000000b00)=ANY=[@ANYBLOB="02c93010000c000500170b08000100ab950304"], 0x15) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r6 = socket(0x200000000000011, 0x2, 0x0) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000080)={0x3, 0x4}, 0x4) (async) r7 = accept4(r5, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r7) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="001900bd7000000000000200000008000b01008000000800610000000000"], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_COALESCE(r8, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="ee040000003b2500010002000000080005001fa0ad2cd2ddd3f9af7cd60f7a35f8b199", @ANYRES32=r10, @ANYBLOB], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) getpgid(0x0) 1m45.161836297s ago: executing program 6 (id=1467): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021840000000c0a0101000000000000d955070000000900020073797a31000000000900010073797a30000000005800038054000080080003400000000248000b80340001800a0001006c696d69740000002400028008000440000000010c00024000000000000000000c000140", @ANYRES8=r0], 0x108}, 0x1, 0x0, 0x2000000}, 0x0) 1m44.697683347s ago: executing program 37 (id=1467): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021840000000c0a0101000000000000d955070000000900020073797a31000000000900010073797a30000000005800038054000080080003400000000248000b80340001800a0001006c696d69740000002400028008000440000000010c00024000000000000000000c000140", @ANYRES8=r0], 0x108}, 0x1, 0x0, 0x2000000}, 0x0) 1m38.106789358s ago: executing program 9 (id=1494): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', 0x0, 0x100a021, 0x0) 1m37.84903395s ago: executing program 9 (id=1495): write$dsp(0xffffffffffffffff, &(0x7f0000000100)="dbb15e7399f11a52b8030010", 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b1a, &(0x7f0000000040)) 1m37.735393091s ago: executing program 9 (id=1496): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x17, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_team\x00'}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0xc054) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000000000000000000001400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 1m37.5279356s ago: executing program 9 (id=1498): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000440)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x7, r1, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x91}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r1, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r3) openat$cgroup_subtree(r2, &(0x7f0000003000), 0x2, 0x0) ioctl$TUNSETLINK(r3, 0x5450, 0x0) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x4, r1, r1, 0x3, 0x8000000000, 0x3ffd}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff01000000000000000000000000000106000400"], 0x58}}, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r1, 0x0, &(0x7f0000000280)="e1", 0x1, 0x6}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 1m37.336299059s ago: executing program 9 (id=1499): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYRES8, @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000031f1c8739bdbbdab006521e9bf875e75f4e6271a036c4471464e07b12f1fcbe9046dad0d93dc6b27f2aa8811c7d9561df251a31d44166af7f1991e080dea49c2509cf5789d0ef28ad1e58e5cdd3156dcb51e1a3de237aa377a0673d4a18dde41db55e54332d08246144433e590657c5e825abed26cdb9386bf3adf3c219a82f809c3dc1b489a57aa43088254560e089a6a258ecbb83749ddc11ec5f0d4eed4617ea6683650cb171efe5e7f6d430122"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r3, 0xc00464be, &(0x7f0000000280)) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r4, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffe, 0x2}) r7 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RNDADDENTROPY(r7, 0x40085203, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r8, 0x0, 0x1, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r9, 0x4004ae99, &(0x7f00000001c0)=0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r4, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) 1m34.153410803s ago: executing program 9 (id=1510): r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1}, 0x10) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='\b\x00', 0x2}], 0x1, 0x1) close(r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001080)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r4, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)=ANY=[@ANYBLOB="3800000300000003000000000000000000000005050003002f00000014000480080001400000003b0800014000000006050003002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x20000010) prlimit64(0x0, 0xd, &(0x7f0000000000)={0x7, 0x5fd}, &(0x7f0000000040)) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000006600), 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) r6 = socket(0x10, 0x80002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x4, 0x3a00, 0x0, 0x7}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x29, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x53b, 0x70bd2d, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) unshare(0x62040200) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, 0x0) 1m24.874049033s ago: executing program 8 (id=1547): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0xa0702, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="de", 0x1}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x4, 0x5000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)='efs\x00', 0x208000, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = syz_open_dev$audion(&(0x7f0000000040), 0x1, 0x2000) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000080)=r4, 0x4) 1m23.289407845s ago: executing program 8 (id=1551): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x74}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000850) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x3c1, 0x3, 0x560, 0x0, 0xffffff80, 0x178, 0x330, 0x178, 0x490, 0x230, 0x258, 0x490, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x308, 0x330, 0x340, {0x1e0002a8, 0x7203000000000c00}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}, @common=@unspec=@cluster={{0x30}}]}, @common=@unspec=@AUDIT={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x160, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private0, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) 1m22.33865494s ago: executing program 8 (id=1557): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d00)={0x2c, &(0x7f0000000a40)={0x0, 0x30, 0x6, "b095594ef163"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000084000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000003f5d0f6535b6f55a", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000003509010000000000950000000000000075090200020000007b9a00fe00000000b509000000000000c39a04fef1000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018290000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000020000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000080)={0x2002}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000200)={0x40, 0xe, 0x3, "9a71c3"}, 0x0, 0x0}) execveat$binfmt(0xffffffffffffffff, 0x0, &(0x7f0000001040)={[&(0x7f0000000c80)='virt_wifi0\x00', &(0x7f0000000cc0)='veth1_to_bridge\x00', &(0x7f0000000d40)='-}\\)(%&(\x00', &(0x7f0000000e80)='bridge_slave_0\x00', &(0x7f0000000ec0)='team0\x00', &(0x7f0000000f00)='%\x00', &(0x7f0000000f40)='%]\x9b#*\x00', &(0x7f0000000f80)='GPL\x00', &(0x7f0000000fc0)='hsr0\x00', &(0x7f0000001000)='\x00']}, &(0x7f00000012c0)={[&(0x7f00000010c0)='&\x92+*\xf8@#\x00', &(0x7f0000001100)='veth1_to_hsr\x00', &(0x7f0000001140)='+!\x00', &(0x7f0000001180)='\x00', &(0x7f00000011c0)='ethtool\x00', &(0x7f0000001200)='ip6gre0\x00', &(0x7f0000001240)='+#\x00', &(0x7f0000001280)='-\\}\x00']}, 0x100) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000180)={@empty, @local, 0x0}, &(0x7f00000001c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r4, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xdb, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xd0, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f00000000c0), 0x8, &(0x7f0000000040)={[{@mode={'mode', 0x3d, 0xffff}}]}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000640)={'veth1_to_bridge\x00', 0x0}) getsockopt$inet6_mreq(r1, 0x29, 0x9, &(0x7f0000000680)={@initdev, 0x0}, &(0x7f00000006c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0xf}, {0x0, 0xc}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4c005) getsockname$packet(r1, &(0x7f0000000700)={0x11, 0x0, 0x0}, &(0x7f0000000740)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000940)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000900)={&(0x7f0000000a80)={0x1fc, r5, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x800}, 0x8084) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00jjZ\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 1m18.762238064s ago: executing program 38 (id=1510): r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1}, 0x10) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='\b\x00', 0x2}], 0x1, 0x1) close(r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001080)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r4, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)=ANY=[@ANYBLOB="3800000300000003000000000000000000000005050003002f00000014000480080001400000003b0800014000000006050003002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x20000010) prlimit64(0x0, 0xd, &(0x7f0000000000)={0x7, 0x5fd}, &(0x7f0000000040)) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000006600), 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) r6 = socket(0x10, 0x80002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x4, 0x3a00, 0x0, 0x7}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x29, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x53b, 0x70bd2d, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) unshare(0x62040200) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, 0x0) 1m18.106113999s ago: executing program 8 (id=1573): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet_dccp(0x2, 0x6, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) (async) listen(r1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10) (async) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) (async) close(r0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1837f7752a3cd70084000000000000009500000000000800"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='fscache_cache\x00', r2, 0x0, 0x8}, 0x18) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x2, 0x0, 0xfc}) r6 = fcntl$dupfd(r5, 0x0, r5) write(r6, &(0x7f0000000180), 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='ext4_insert_range\x00', r6, 0x0, 0xff}, 0x18) (async) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$TCXONC(r7, 0x540a, 0x2) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYRES32=r4], 0x15) (async) r8 = dup(r4) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="000000e38dc405", @ANYRESHEX=r8, @ANYBLOB=',cache=fscache,k']) (async) ioctl$IOMMU_VFIO_IOAS$GET(r8, 0x3b88, &(0x7f0000000080)={0xc, 0x0}) (async) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r10, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r11, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r8, 0x3b89, &(0x7f00000001c0)={0x28, 0x2, r12, r9, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000180)}) 1m17.870675016s ago: executing program 8 (id=1575): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) (async) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) syz_usb_connect(0x5, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="120100001ddcdb08ca0700b81f3101020301090212000100000000090400000003"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00', @ANYRES16=r2, @ANYRES32=r4, @ANYBLOB="0500f1ff0008000600080211580000"], 0x30}}, 0x80) (async) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00', @ANYRES16=r2, @ANYRES32=r4, @ANYBLOB="0500f1ff0008000600080211580000"], 0x30}}, 0x80) syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00') (async) r5 = syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00') syz_usb_connect(0x6, 0xfe5, &(0x7f0000000b40)={{0x12, 0x1, 0x310, 0xd3, 0xe2, 0xcb, 0x40, 0x85a, 0x8025, 0x31fe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfd3, 0x4, 0x7f, 0x0, 0x30, 0x5, [{{0x9, 0x4, 0x33, 0x4, 0xc, 0xe1, 0x7c, 0x6, 0xf, [], [{{0x9, 0x5, 0x2, 0x0, 0x10, 0x8, 0x8, 0x1, [@generic={0xc3, 0x4, "d899b186ac4aeae160c696c902e054d84814ebd09c72622fc912c68cd85e5dc09609645a259979fd4e9a15587ab963d8819d6b6e200f1ed77e4b8b9a18842acd109308dc646f9139bfd4c51510c58bbd8794ee818e78e3ed094f4552ace074dc339df9e3384168c269379bb5fbcf08d4c7a16f595056f35ebf8a07792bfe4e88f9ff37efb420e24bc048a865eaeda9ba7b9da03ebcb34ffe24c5604afb70ddc4589ee3c9ef9048599b31553d953d6a3ec547e8662fff676d3897096b7d75eadc6e"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x3ff, 0x2, 0x0, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0xfff1}]}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0xf, 0x6, 0x7}}, {{0x9, 0x5, 0xe, 0x1, 0x8, 0xa, 0x5, 0xf7}}, {{0x9, 0x5, 0x6, 0x3, 0x8, 0x2, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x401}, @generic={0xbc, 0x9, "ad8625054bbfd59f15a7f6c8fa9271e07033ad7f6945820eeb578b4d9726dea4db5a032d4fc3d1c150bd8b5b64a02d49dd90469e8217f4c977ea2554dbd1a888745ee03414205ad80f6450260d04daa8d500afe72024df01ae2db84401a48c3e6d2f8f43e833ad19b094997e1598b9e524f7883f44e004c63b18bfd98994674d321ba00ccab18bda6a223117a0da044013b2e4b73c47bfb2105e05f005b7853f848d4d9f326b4e2e06ce95046ea5fce8b41a061b1a8e182b62bc"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x4, 0xe, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x9bd4a5da12a71da4, 0x1, 0x7}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x9, 0x40, 0xb, [@generic={0xde, 0x21, "84bbc928e9bf4db1ddaa1d96361e0c50ed930c6e2e0b4906f923a85b9089c3fa6da744b62326e59e45d4ee9ed2e3c567c0d4316609b1565bae48a2b1510cd9a6e354b59591c3a432e0f594370bac5d345e4f6d9c110c9c64e2f02db3c9509d11955897ebfdf736086fe7823512afcb8933357a05a66da0ed2a3189be41d8b8fd953de36671f77cea083b8e4f320806fa0630225ddc4508214d79b2fe7858476c20051ff2781c96b91ca8552b9c2633e02ce7a026a448acf72327454a3a0c78d13c9152c2daafd6d09f43c94da1e8979dbb4eedee562188a4101d1e51"}]}}, {{0x9, 0x5, 0x51a623c781ee9c87, 0x8, 0x200, 0x8, 0x9, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x5}, @generic={0x100, 0x31, "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"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x400, 0x2, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7f, 0x9}]}}, {{0x9, 0x5, 0x5, 0x3, 0x10, 0x9, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0xb29e}]}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x5, 0x9, 0x7}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x8, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0xf67}, @generic={0x67, 0x34, "6fffd3b68bbfd97ef4eb7433be1ab22260e630581cf67b3f480b4f7c5a65c5dd0f79503c76cc06689a1c6b46a95b273f9dcd4887f77ad8fed84ebcdb58465474d27d813b5eff4350dfd6337182591d388c586283b3673e5ce23daa23b9497d1b463dc84be4"}]}}]}}, {{0x9, 0x4, 0xca, 0x5, 0xc, 0xe7, 0xf, 0xc0, 0x6, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "9738"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x4, 0x7ff, 0x4}, {0x6, 0x24, 0x1a, 0x3, 0x38}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0x916e, 0x8, 0x65, 0x4, 0x2}, @acm={0x4, 0x24, 0x2, 0xe}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x5}, @mdlm_detail={0xe4, 0x24, 0x13, 0x5, "eb5ce7f10ee45a77c31b4a7a21bf6a7d5e92494caa90009a74198bea994fff79a59f1bdd42a8e0dc100f41f270c1bbe939fd4d81623ee120d11e62909785b0c5ba05a0d0a1a8eb7128f1ad2dd36c89cbe741927af773d2a153bafef97923408a85426571c43bd7341e36d93db8e1a679291ea5f460f9733145260cbb5b69b5cce33b671b25df5bcba7397aad9b4b1c72acb85694a882fafb90de28e59ff31cc5f37c4485651f21c32f6b0e3fad80d4f757c89ee8bf4edbb372721075efa0e082455ae8bd4ad91126f3442aecbe7337da7b5d1d174f01729feba756aa9dab42a3"}, @mbim_extended={0x8, 0x24, 0x1c, 0x5d3, 0x12, 0x1}, @obex={0x5, 0x24, 0x15, 0x2}]}], [{{0x9, 0x5, 0x9, 0xc, 0x40, 0x5, 0x76, 0x9}}, {{0x9, 0x5, 0x6, 0xc, 0x400, 0x3, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xb}]}}, {{0x9, 0x5, 0x5, 0xc, 0x0, 0x0, 0x4, 0x2, [@generic={0x24, 0x28, "0990c878ba256e1493d8b27aab95922c5765d752e4f515ee8ae3768ba438da2189b6"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x9}]}}, {{0x9, 0x5, 0x5, 0x1, 0x3ff, 0x72, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7}, @generic={0x9a, 0x31, "213891cea8437a2863284ad8864cfea56b3f104ec1892d6ba27055d1d8bdf83f41bf007a161f06f1061f34254ebeaf989751cb5f63e3c1165cd50b8b207da9d803a4d123c184d86b19a788dc280dc2785e1e998faa246c682887a912292d104052e0bc572306cdfcf5578ac92231b71814beee72b7bf80f631806aa1949e798d5b3e32b8a908597e81b1d7267582f7069f1e97fec335fa82"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0x3, 0x2f, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfb, 0xaa2}]}}, {{0x9, 0x5, 0x8, 0x2, 0x20, 0x4, 0x81, 0x7}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x4, 0x4, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0xc7a}]}}, {{0x9, 0x5, 0x80, 0x1, 0x200, 0x81, 0x4, 0x92}}, {{0x9, 0x5, 0x9, 0x8, 0x8, 0x7, 0xd1, 0xd9}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x7, 0x94, 0x0, [@generic={0x84, 0x5, "1c34e1fc455cf328a8a117af5aed39b071b03bdbe02d8b2689756ea5a7da0058f76fb417473d9f6f2cafccd78059a02bca420402a8a4e5480ad7ddbcf0de44a7f5a91303a110e2631e1e64d0937f22622e5673f85242d30d913a818fe71e996b9df335b80492fdb930f2461b5c2900d76ee0eb7ed267f284b1d600b31de5699501d7"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x20, 0xfb, 0xd, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x7}, @generic={0x7e, 0x23, "8fe02a56fd489b5447910ef21af54a10c0ccfa40e4e0048097fee766e43cfd6564e0e1023854c89ff86dcee9fac183cd7f598b89c07ceabfe08e885118746c45527ad0b22f8fe905b10a58efbf01cbbeb80f7435a2321b32dc91393c69074a030c8cbff96d76123eae4f0d47bbc6fc5ed663292e4691672cb36b719e"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x3ff, 0x2, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xfd, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x3}]}}]}}, {{0x9, 0x4, 0x27, 0xb, 0x10, 0xdf, 0xcd, 0x17, 0xb, [@generic={0x99, 0x8, "8c5196cc6c6a723226d19a7f9de69c81cfef6e2f3b76b25d34c2704dc1af444c37d71a5a32511cef75890726440195a2640f2c2fe97a1c715c5015fb288dc2418b0e304f23d394c2fa1a8171e1c027420fca8691cf0e5c64cbc7bfabf940f4ac12f3d15c4208dd1fde1a9260466758f6d8fa70e0826eb6c1bc2e7ba0bfb1a3e5a814e21f62ae57ee23602ce3428cb5973d6afea5763ebf"}], [{{0x9, 0x5, 0x1, 0x12, 0x4cf2cbc397ce78c7, 0x53, 0x6e, 0x5, [@generic={0x92, 0xd, "efa60a8029c9757e497a3a1afb709c8e8b67c4c10371c9ce8ba241181745d6d775151339486f88a0651198cdf5b6b324260a9f7fbeeec52a6a4f210ecc8d17477e41307c26ce36649a6d7d4cd55045356a131c09feaf256267827d49c0ee6f44ff35df48afe92b0cd35ec44fd52067d023836d026c1045fbaa02506da0223250c9180df6584262630626d84671a08ccd"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x3164}]}}, {{0x9, 0x5, 0x2, 0x4, 0x10, 0x9, 0xbc, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x7, 0x9, 0x5}]}}, {{0x9, 0x5, 0xc, 0x2, 0x200, 0x2, 0xff, 0x4c, [@generic={0xf2, 0x23, "5f6a850bd9e6116205de85947e47a6ba6909059ea6731110b885958700187c41741d68dd41c6a4b90e8031a56798e5c301fc80a7b064881240b1419626d5356878ab7c5e38dcbcc31b6b42c04045474d2c520df2651c22925ee777f47339aa28bedd7e382557619c37f56801e54e532d6ff116021591859379ec77d386d3ad0ae583a20197e783aad92fd071980a6d433a0c6ac69044634f6141b611fabc4e59f5092670005ae9049dac4964f024fe5ad68bcf77e73ad3739b3a71b037d25ae7000d5451fe56844224e951abfe35693e6ad425cc0f05337e05351e49ff406e6756ae80d8c5f718b23e13c04acdb52430"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x8, 0x3, 0xc}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0xa, 0x6, 0x8d, [@generic={0x62, 0x31, "aa93a2dec8937015b9210a1cd174c260c70ba9fb96849f18923000fdbc685287df62a5324265e67cda3bb5e4dcb8bad2b3688deb61e989b80d8a7f81ff33f291716dc6ea3d9d0701cfda04075296fcb581d37f4bbde43c99e25360c55263c5d2"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x20, 0x4, 0x0, 0x6}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0xff, 0x24, 0x7f}}, {{0x9, 0x5, 0xa, 0x3, 0x200, 0xa, 0xfc, 0xa, [@generic={0x60, 0x31, "6a8e8af27a69c950e7f5d49e8489bb5b64312b17e9bade7f2836f040e206e8ca013b4734a4d46c6fbe08a28a8415b0b72b703675efc7ca9b4d3167f3c94c7b96430018adb0f712d414e4a05a1cf2636d3f6438066cd0304b86a54d47ab30"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x420, 0x2, 0x7, 0x96}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x0, 0x8, 0x48}}, {{0x9, 0x5, 0xb, 0xc, 0x40, 0x5, 0x8, 0x3}}, {{0x9, 0x5, 0x7, 0x8, 0x40, 0x1, 0x5d, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x29ee1f5c3aae6830, 0x4a, 0x8}, @generic={0xdc, 0x23, "cbbd49cc017216779ca83460b410017510592cc5bf5887afb2773bb1eebb33f2886ae874f6171612b4d71ad2f95a148ad34b6bfe8b85f54f305f084b27e3133c1cff91cc77c8bdbe1bbd3d0cc9eeead5843b756af3f5fce9e54c71d55b20fbfb6e09f83060ee0bd31fe299c48a0204fd2af2dee95cb6dd053d2f9c4004b1f6a9bed23d2c2f5632c24ffbe6590b5aa31455359c926c2655668b4e970c75f591a4f345a486590a6bbe52b5531298e5d77fc9bbc7fbf4ef68db84fc90a4d16f7ac63304b8c3067b459c180e936e157841c356a160546cc4370cce0f"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0xa5, 0x5, 0xff, [@generic={0x43, 0xd, "54f67df74e4ca5a9417ffd16f690343ed7ac497cff8610e6b3c55a168e132db620fde0e91f4e71204be30e31e6708cb072f8411a2b8907892120689d6038245423"}, @generic={0x62, 0x31, "114f37fed95ead3a9f64572ab21ef4cde80e2e1201d438b3bde6ac6cb0ed96796748e1370027376589f9fb729a293ff2c9f3811d4d455d682e550ac8a43a36063b2d6f7e46ec7cf7e40606e1009cc5f0caf2866a6fbb12cf848baa8b5a37c1a2"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x10, 0x6, 0x4}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0xff, 0x2, 0x4}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x1, 0x8, 0x1, [@generic={0x60, 0x6, "f770f75c8114f66966121889011088dd0f49a424a4ee15d2cf010300d45b83fed2ad621b915960d21619b44ea5a0d10b72bf9add825114144f0ca7dfd6545c67a79480fc117c7091158f645047974e877b1de1e5f4a71a1ad9ea3878f8e8"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x67, 0x3}]}}]}}, {{0x9, 0x4, 0x64, 0x10, 0x5, 0x22, 0x0, 0x12, 0x8, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "62d031b4"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x7ff, 0x400, 0x3}, [@ncm={0x6, 0x24, 0x1a, 0xaff, 0x10}, @obex={0x5, 0x24, 0x15, 0xeed3}, @mbim_extended={0x8, 0x24, 0x1c, 0xffff, 0x6, 0x3}, @country_functional={0xa, 0x24, 0x7, 0x0, 0x4, [0x7, 0x200]}, @ncm={0x6, 0x24, 0x1a, 0x3db9, 0x30}]}], [{{0x9, 0x5, 0x7, 0x1, 0x200, 0x3, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7f, 0x6}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0xc2, 0x7, 0x9}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x9, 0x5, 0x6, [@generic={0xfb, 0x5, "22886a5ca3a61200eb9df6fa14d15c5c6744fd9ecc86987f54516c9019cb9cb59d4352f50f95c8fd4ea0859d9e8c42eedb1a0024910d4e7db766a78b16d088efd040c9c4b9b976f3da10d87d837c09f1e35a05e0d07128d3148b8f5820b067a68e9c58356ac2e2a3257152c294c5c0d95b398874b042179b9417b1360df77c0bc26af6f690ce2279ce1aa4d65062afbf7449c9e7c6cf8b1729beced1244fce4d9d4d8d1bb72d2c70843275c2f02dce7ce07a2ca805c6b41e345ab06e4e3c2bc2bbba0a23e4ebf9acabfa49fd095d402ffad11fc344995e5b35a170d3e81d270f35464492efeae56b561cf5e3d149044ff8dd6dad5118964145"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x7, 0x7, 0x6, [@generic={0xd, 0x21, "458a7a10e3d9cdf95a8d03"}, @generic={0x7f, 0x21, "ffbf43d0b81c3c2e888db12ea63d4e332e035e5dbe3d036eda1a3828232ce0285fc12ae9a132fddf7989e861cc9a89b97746edb65dd267b00225c228aad828e38716ac1f25feb35e02b95875a41b111c7572c8d8ab93e205474d119232970857b4e685d45fec4ae38badc0b7225f2e164ec4ec770fbcd2e144d94e0247"}]}}, {{0x9, 0x5, 0x16, 0x8, 0x3ff, 0x9, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0xfc01}, @generic={0x50, 0x30, "7638c7fd1e256b3a789f3ee57549c98e7c3cad23277e73abbacbf13635c51ffbc9b85695ca1673d1c25cb9a9902b74f46b4a11082fc4125a0126dfbf430631764fc0b74cd0bb715eea0d166707f0"}]}}]}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x0, 0x3, 0x9, 0x8, 0x5}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x6, [{0x15, &(0x7f0000000240)=@string={0x15, 0x3, "48270008f8fa41b99e5f644ee2d8cf25ef53c4"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x440a}}, {0xf, &(0x7f00000002c0)=@string={0xf, 0x3, "24a503597f87d08f9fe2ab203f"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1809}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1c45}}]}) getdents64(r5, &(0x7f0000001f00)=""/4111, 0x100f) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000099447740970401c07a55010203010902120001440000000904dc01b850d3c3cb"], 0x0) write$USERIO_CMD_REGISTER(r6, &(0x7f00000000c0)={0x0, 0xfc}, 0xffffffffffffff48) 1m17.225307421s ago: executing program 8 (id=1577): modify_ldt$write(0x1, &(0x7f0000000040)={0xc}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m2.182524661s ago: executing program 39 (id=1577): modify_ldt$write(0x1, &(0x7f0000000040)={0xc}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.80991563s ago: executing program 0 (id=1934): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x0, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind(r1, &(0x7f0000000100)=@un=@file={0x0, './file0\x00'}, 0x80) (async) sendto(0xffffffffffffffff, &(0x7f0000000540)="0cc31a4098ddc80dadd3a0aa2bea9050d9f47bcde4cbb8170d3d61aabbdbd869e8a75ab95a3b8e8b960477dbbbbf5cb0fd4a98ea0032d054de676f19c5e1f84def57482d1b3eb94a2a1d3c0a733709610ece6cb54ae7f8c3ed385c3890244d348c9bcfb556ee478845ff23d8a9f2a492531e7c7ce719ef1983bdaf4008386323fc593be590321dbe51aa4ecabebf49ab7edb835efc0f722637337e20cc541399dc617deafa840b68f2b22e5f7c6afb3825871b966ab90a79a4d6d72f29a1e43abdf4d25f6352dfa26c576830c49b18ece887b47c37affa1c3f24fdb0e14151550796aaa09b4669e71d9f4255f63905467b709f7a7185347a078538e4443f0dad324393274e857979db0a9e3894857aacabc2f2ccd9457fda98a520e2b8c83085a206c8aea9dd18a0b66c87b3b61f95fafed84303436c7ae3782f714dc364c10102788b02d3aed05cb29fe974b75e7bf53dfd2554d7b700dcbf24a6fa021732b747a2c7d6d2a649e1ca523f91ba57da29e6e5050da7ec9466884aea64349e0c65b40bd78fe25622a5f854d351fd3282e85e37989b73e1a3b9fe874ad7131850117f285afe15040fd20cd9c861c95b2c1f9844ac1f8b3cd0a7f22269e235866434acb5f4d9d0b64301cd5b4e8c2da68caacd3f7dda0f325120ad99c05a55736067c87cceda7b850758e60ab8829b0dbfdc1ca8322e6716e643e00c2f665781461f08282a0aa366d9927036d685c3a721530dafe21e62906c5710c3214621d6374d9f5eef47eca1e5080e21832e6d639822a3bf99784f7b19e2dfaa7b8ba39dc5212c94585af38e7a50cbf6d619e3f1b8e4c17351203fa037ca4ce7ef32fd8b4387b8583ebd32a0c5aeb05fced1e492670cabc370aba18abe561e2bfcfa6d92c0c3d0419f5f4936772b6a0026a623914f09b04cf5d7c2b3ab010c676e9932f5807240a765b3d92d2bcdd63a91bd0f1c795fe0ecdda5e50ec8fd0a68115986168fb8bb67fa020ed3c416a716fb12d5d918b8522931dcf2bfd0c7bf7d9c56c490c9880309240d0c2cf1a3cafb647e1a9e1fde434cdbcae9eeac3f8c652a85d6aea69b3e9a922cb2727ed8f50e6babd152b96ca623be94c4aedf7e6848650026a7e1df48e00f45714233d9ae79f4e5e13ac220d553da26f7e7bd242d0cd26470bfb99fb84e6035bf", 0x345, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) (async) read$FUSE(r2, &(0x7f0000003680)={0x2020}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00005f5a000000000c003f8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}}, 0x0) (async, rerun: 32) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0xa0}, 0x1, 0x7}, 0x40) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0xc3}, 0x1, 0x100000000000000}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x4, @loopback, 0x0, 0x26}, 0x20) (async) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000100)={0xa, 0x0, 0x200002, @empty, 0x0, 0x2}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) r8 = getpid() (rerun: 64) r9 = syz_pidfd_open(r8, 0x0) ioctl$FS_IOC_GETVERSION(r9, 0x80087601, &(0x7f0000000180)) (async) close_range(r7, 0xffffffffffffffff, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) (async, rerun: 32) r10 = gettid() (rerun: 32) prlimit64(r10, 0xb, &(0x7f00000000c0)={0x1000, 0x6}, &(0x7f0000000180)) 5.204269022s ago: executing program 3 (id=1935): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000040)={0x2, 0xc4, 0xffffffffffffffe8, 0x9, 0x4, 0x5}) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 32) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 32) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000009000100"], 0x34}}, 0x0) (async, rerun: 32) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaace3500590a7f08004500001c000000020011907800000000000000005e23000000089078"], 0x0) (async, rerun: 32) syz_emit_ethernet(0x32, &(0x7f0000000340)={@broadcast, @random="67eaa8fce250", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x3, 0x100, @val=0x80}}}}}}}, 0x0) (async, rerun: 64) r5 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x40880) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 5.107415516s ago: executing program 0 (id=1938): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r1, 0x0, 0x4}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000002c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xa8a, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x0, @local, 0x8001}, @in={0x2, 0x4e21, @broadcast}}}, 0x118) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x54583}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r4 = getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000023c0)={{{@in, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@loopback}}, &(0x7f00000012c0)=0xe8) getgroups(0x8, &(0x7f0000001300)=[0xee01, 0xffffffffffffffff, 0x0, 0xee00, 0xee00, 0xee01, 0x0, 0xffffffffffffffff]) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000024c0)={{0x1, 0x1, 0x18, r2, {0x1000}}, './file0\x00'}) syz_clone3(&(0x7f0000005200)={0x6000, &(0x7f0000004000), &(0x7f0000004040)=0x0, &(0x7f0000004080), {0x3f}, &(0x7f00000040c0)=""/250, 0xfa, &(0x7f00000041c0)=""/4096, &(0x7f00000051c0)=[0x0, 0x0, 0xffffffffffffffff], 0x3, {r1}}, 0x58) stat(&(0x7f0000005280)='./file0\x00', &(0x7f00000052c0)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000005340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000007380)=0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000073c0)={{{@in6=@private2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast1}}, &(0x7f00000074c0)=0xe8) r13 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) setresgid(r14, r14, r14) r15 = syz_clone(0x11000400, &(0x7f0000007500)="077657475ea41d5b02e94a696eae12510604f6cdb5c03a34569644960f75caa408ae0760f7e5577c4d30bf53a8d6da679f641e9ef630d9b053761fbef483236167116231046801a7d2a76dbd68f3463b14d88b3be58b0024e984289f1ad66114285b78492de4d80db396804fceb9a306a43a887082364f6347b9eef3dcb39021220a85f72323ee8c29aa9daec3f79a929479320f02f00a31bbd312be58abfca0255c3d3084948772c015d7d3b22beff3e5f9e16cbad3d946fbd56bb951c565f4bad0cfb6", 0xc4, &(0x7f0000007600), &(0x7f0000007640), &(0x7f0000007680)="97a3e054313249a33d8d38bd921d4017fe5d97b02eb8dc02be442da7907eb5d37fe3f1c3b9df53ecb87fdc8ffe50f6804edadab62803af561fe6127eae472b8c3f2c53a79dc1b8feae46c220ef406d1726db60a1173dc241a5f9e2ec10d8007be1b876897bf2c9131c45b9e2735d2adccc10d49f6312d6e345a89cb7603153d0fc62faaf33a3df9fd51fc257f6c468db47ec2d88ee36f89aa821540ddcc5") r16 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000007740)='./file0\x00', &(0x7f0000007780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) r18 = syz_clone3(&(0x7f00000089c0)={0x120001100, &(0x7f0000007800), &(0x7f0000007840), &(0x7f0000007880), {0x1a}, &(0x7f00000078c0)=""/180, 0xb4, &(0x7f0000007980)=""/4096, &(0x7f0000008980)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x7, {r1}}, 0x58) r19 = openat2(r1, &(0x7f0000008a40)='./file0\x00', &(0x7f0000008a80)={0xc0880, 0x68, 0x1}, 0x18) sendmmsg$unix(r1, &(0x7f0000008bc0)=[{{&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000180)}, {&(0x7f0000000480)="cb19b8c0dfd9752627ddd010ebf70abba3953fe14da1c3bd4da56ede8530c7f3f15c65e8a6170df8c6016e820a37b603bd86a43129eb812d1b6cbfefed99168e1c424b4e2fd70db5093baf0e26fcb2615345a3b79b669059c8ca0ffc11c104a6310f28377fb324d854f10c12d9913817edad0cf2670571fd3e4f424a62506fe074de4016dee1684516db54b408909dacaf4cd3ac5ba3c5a1ca493d173e22027dc587b03b3ac7bf2c4b3500370e9129ee5456010fbe10c15a908c9aebf674325c3f90763af76e27014c96697203c2f7eb6da83b168993bddebe4ae1ab97679d357f4b51f0398879823afe3986c43ee486883771cc", 0xf4}], 0x2, &(0x7f00000006c0)=[@rights={{0x18, 0x1, 0x1, [r2, r2]}}, @rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, r0]}}], 0xb0}}, {{&(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000800)="78e4d6d9e157c77cafb1a98dab2e796f84d6d2636e5d75e32225bd11f2ff218878fefd5a19300a68b442bc2bdb3581542df54d46036ecc83b3e99f1ea54f9f35dec48dd87b5be3302b23fcec65c90ba7a12e476039edc854878108da7992256c826a6e8d226c71fb6c73741c9e02060376ee9ac8d1013a7eeeb57d275ec6008eb5729f4f7f1db81adbfa7de6580e95c9b8555550", 0x94}, {&(0x7f00000008c0)="51f31cd96c8247c2d36b9da0ce6ff68352ee3e1a62863cc60b558db3ba0cba2e9b4fa75ef6ace66439eca36eb7d32beb3eea46167ff27dcd359925b82b2d95b653978972f44176ff78c1f24ef587ea16532128670489879c9194a7bce092a3e855c26070ca", 0x65}, {&(0x7f0000000940)="a3d4d623593a9482d31fc6536729505ddbc17be9f009273ed4bbaae34bdb8d554ebc84db9042c4d5868808e57c66ae1344975eafafa7713d8a68", 0x3a}, {&(0x7f00000013c0)="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", 0x1000}], 0x4, &(0x7f0000000b00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, r2]}}, @cred={{0x1c}}], 0x40, 0x40}}, {{&(0x7f0000000b40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000bc0)="d553a2db9ebca3bf2283df5d5cbeeb699959f6441ed89f3436f7ae95153b708069663470ecc5f99d2fbe91c85c5ebbc1a8eb512318bfcc43916919a6f6b192", 0x3f}, {&(0x7f0000000c00)="29c1a654f0d54d757b1b1d8368e33524ec553bc39cc316d765cc65c5", 0x1c}], 0x2, &(0x7f0000002500)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00001a001c000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r7, @ANYRES32=r1, @ANYRES32=r2], 0x150, 0x8080}}, {{&(0x7f0000002680)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000039c0)=[{&(0x7f0000002700)="e60758b4a4de", 0x6}, {&(0x7f0000002740)}, {&(0x7f0000002780)="fdca9cf4e548781a9f13f5fd120ee18755", 0x11}, {&(0x7f0000003840)="2a7897b26949680bf40bcb3e1b285050b170847dd4f7d3bc55577f0b40d675866c3cf7918c05f996f9a49e66947337033470e8b99f3d820e23ee903b62baf29da444921c87276174da8a83438b9f5151058d76e0ad9decda636093af3aa454b1eafa3fd35b3e609276c1e84821bca75b5a27", 0x72}, {&(0x7f00000038c0)="cc1c41e801d47dae40f8a52ea7cc265d8443d84ead58336aba1efd930292ac52d790babe673f404f3b50ca7ad0e12b4188066d7f4221859f310cce4fd35518358b09008050c05305", 0x48}, {&(0x7f0000003940)="1c95618bccba6093f599f4b3cd37336ddd16daa1dba189d5ce5d8a0d757960cd859ce44cac805302ff4718d4ec73ce30b902cae548dee3d87d3a66463ef25ef5289860f608207c514ed13736c7d31917b1b0488cf9b0f6a57c4b1d5f8209e243a3c9", 0x62}, {&(0x7f00000027c0)="4bef56fda740908ce033c54c2a605f95689876a8d4043a1a378faa3419644485b3b228d7b663b84ee29444de8b205a81e001252d24c3ee5262fa32a3b9faf6ee", 0x40}], 0x7, 0x0, 0x0, 0x20008001}}, {{&(0x7f0000003a40)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000003f80)=[{&(0x7f0000003ac0)="3b1acee6d4ae5959840ee0658cabbb9d63c5e71eebe46840b80fbe6e0337612d98c034a7c5b3ff3e7e7d2bc6f747e93ef64790816d19755215afd797f22f1803f95c3f8d747e73093adfe728d9fb4c3987cbaf78bdee9a968940e8d5ba10bb31f156553a83", 0x65}, {&(0x7f0000003b40)="bbf333f07519073f60c4aa8f352d0e0d4bdf6678781b87f2a5a4c8513b7533e1b1c3664141ec2e0d891fd57b465c5b2faa223cbb4f70eb063589701c8ca687b9fe8c4aad077a08c8e2e619cda5de043e0d768f540ae60104b72c74f2ac3404587ab0c536b83eb808f255bebd753d89a4e9ebf530f963df16a2b3aba32737ceedc29e441911085c8a942ecf5c07ffae89730953822ea2b737a0e269795e639e1a196df818e571183958d8be12", 0xac}, {&(0x7f0000003c00)="80bbf8e96be9cf365beeb4ca7595cb92062c93731f01b372068149aa2ee7980e3d9f10f3ecaf4069a5e551a1b89f1e62426f5798d86c", 0x36}, {&(0x7f0000003c40)="fb9f8be75a9bdcf74c122d95810d660658845eb10b6940722743ff4f14fb5ff782bbd0261baecc14b228727512fbb9384c2f137de54d639a164c60b639cb20ecaf08c05db3c642ed4144b9ff35f4b96640f7fceb55e838fdb9", 0x59}, {&(0x7f0000003cc0)="455de66467030e0d00d853080d008b91c6db667b9712a01c978b26e321e6f4caba5024f462ac550c53a33c25d4cbff966eef058b210a066f0501373a9b8e68404e58e5e8f9e557753f5e771add199beb5aa1953dbd5a7bf9bc67941721eab1288668bceec64a1683dea2e852cd4144ae7b9ec0face9cb64a32d4721682e0260d2fd82199552158846f8bba73f5ee24713bb4d21a69a0581850", 0x99}, {&(0x7f0000003d80)="987da12f0f73a948daeec84cb77db4c11699acce8eebd61a73c9865f96b3f560062d78b9403daac9cc40a2499573a9f982e6b103867628f7b7b66295d91bed4b92deef6abdfb3aaf80ddb081975aa07849eee353e651cf1a49ef9635dc26d07ccc296d93fb812e4131ef70b9daf07ec13ea155acaa018ed7bbbd3d92998c840ffb", 0x81}, {&(0x7f0000003e40)="ab", 0x1}, {&(0x7f0000003e80)="4041a2d54aa69872c3885f6de54142ca992afe90818684eee83a0c40839dfc8faaf6854dcc6130e15dd74ab8b13a5f1b716a01e41cc71876a627c6a266626a7723d72821d8c1a6a28eb13ebb0f886d731b3a3dc3b7e2fb63039277fded34a6b34f8d5a2b88bc785c0277101f700eeec44c01c480bb3e797c113908357a983e674938fc6017fff3868aebffcfd1c6aa492a436726b05697cd2f0eb19240a6252ef232dcff50cc34b059ef9962897698987e96b537152779d58cf505b2b6f87caa4161e44a2ee859", 0xc7}], 0x8, &(0x7f0000008ac0)=[@cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @rights={{0x24, 0x1, 0x1, [r1, r1, r0, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r14}}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r17}}}, @cred={{0x1c, 0x1, 0x2, {r18, 0xee00, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r1, r1, r0, r2, r1, r2]}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r1, r19]}}], 0xf0, 0x8000}}], 0x5, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x9, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r20 = socket$nl_generic(0x10, 0x3, 0x10) r21 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r20, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000200)={0xb4, r21, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd128}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}]}, 0xb4}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r22, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40}) 4.95119129s ago: executing program 3 (id=1940): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x48940, 0x0) r1 = inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000004c00)=[{{&(0x7f0000000240)=@nl=@proc, 0x80, &(0x7f0000000580)=[{&(0x7f00000001c0)=""/2, 0x2}, {&(0x7f0000000500)=""/29, 0x1d}, {&(0x7f0000000540)=""/46, 0x2e}], 0x3, &(0x7f00000005c0)=""/4096, 0x1000}, 0x1}, {{&(0x7f00000015c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000001940)=[{&(0x7f0000001640)=""/194, 0xc2}, {&(0x7f0000001740)=""/104, 0x68}, {&(0x7f00000017c0)=""/108, 0x6c}, {&(0x7f0000001840)=""/48, 0x30}, {&(0x7f0000001880)=""/144, 0x90}], 0x5, &(0x7f00000019c0)=""/134, 0x86}, 0x6}, {{&(0x7f0000001a80)=@nfc_llcp, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001b00)=""/65, 0x41}, {&(0x7f0000001b80)=""/42, 0x2a}, {&(0x7f0000001bc0)=""/158, 0x9e}], 0x3, &(0x7f0000001cc0)=""/140, 0x8c}, 0x5}, {{&(0x7f0000001d80)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000003380)=[{&(0x7f0000001e00)=""/216, 0xd8}, {&(0x7f0000001f00)=""/111, 0x6f}, {&(0x7f0000001f80)=""/184, 0xb8}, {&(0x7f0000002040)}, {&(0x7f0000002080)=""/147, 0x93}, {&(0x7f0000002140)=""/27, 0x1b}, {&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/245, 0xf5}, {&(0x7f0000003280)=""/248, 0xf8}], 0x9, &(0x7f0000003440)=""/4096, 0x1000}, 0x88}, {{&(0x7f0000004440)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004540)=[{&(0x7f00000044c0)=""/19, 0x13}, {&(0x7f0000004500)=""/25, 0x19}, {&(0x7f0000005580)=""/4096, 0x1000}], 0x3, &(0x7f0000004580)=""/3, 0x3}, 0x2}, {{0x0, 0x0, &(0x7f0000004940)=[{&(0x7f00000045c0)=""/125, 0x7d}, {&(0x7f0000004640)=""/48, 0x30}, {&(0x7f0000004680)=""/90, 0x5a}, {&(0x7f0000004700)=""/13, 0xd}, {&(0x7f0000004740)=""/12, 0xc}, {&(0x7f0000004780)=""/137, 0x89}, {&(0x7f0000004840)=""/118, 0x76}, {&(0x7f00000048c0)=""/69, 0x45}], 0x8}, 0x3}, {{&(0x7f00000049c0)=@nfc_llcp, 0x80, &(0x7f0000004ac0)=[{&(0x7f0000004a40)=""/75, 0x4b}], 0x1, &(0x7f0000004b00)=""/219, 0xdb}, 0x6}], 0x7, 0x2, 0x0) fchdir(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYRES64=r1], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r1, 0x8, &(0x7f0000000000)={0x3}, 0xffffffffffffffd2, 0x10, 0x0, 0xfffffffffffffd1b, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_DEFRAG_RANGE(r6, 0x40309410, &(0x7f0000000000)={0x6, 0x1000, 0x1, 0x9, 0x2, [0x9, 0xf, 0xff, 0x4e96]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB="b40800000000000073119a00000000008510000002000000b7000000000000009502c200100000009510001200000000ac411284f513cc1e9ad34ac789196b5eced655e1f0ec28e8fcb1e546bb0a5279479980ad77f5de42fe69209ba6159bdb5742160ff6c59e5253ecd807a704a28860423c4fe5c7ff8f2fb77cbf70bfde8eb91cee4d50f68a7b4dc37e24d2eea2d7e1ae218c2341f3505b4ddf5cb4b8868837d679fa4bcb35b67ab0efb098c156a4d4243e934b8c68b8a1b2fe980af65c50851af1a3dbbcbe2cc2982b6c50ca5c1d020c0499ec8f3ace48904f645978157529d83e7544c1ac57a96ee36af19f91bb28b75e8f8cb7"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2, 0x8001, 0x7}) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r8, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x66, &(0x7f0000000080), &(0x7f000009de80)=0x8) 4.279138379s ago: executing program 1 (id=1943): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000b0000000000000000fcdbdf250a1400000000000700000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0xc0) 4.230127723s ago: executing program 0 (id=1944): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002140)=@upd={0xe0, 0x12, 0x1, 0x70bd28, 0x25dfdbff, {{'crc32c-intel\x00'}, '\x00', '\x00', 0x0, 0x400}}, 0xe0}, 0x1, 0x0, 0x0, 0x84}, 0x4004000) (fail_nth: 5) 3.810092826s ago: executing program 3 (id=1947): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@bridge_dellink={0x2c, 0x13, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4, 0x7}}]}]}, 0x2c}}, 0x0) 3.809856501s ago: executing program 1 (id=1948): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) move_pages(0x0, 0x0, 0x0, &(0x7f0000000080)=[0xcad1], 0x0, 0x1) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$tun(r0, &(0x7f0000000540)={@val={0x0, 0x88a8}, @void, @eth={@remote, @multicast, @val, {@ipv6={0x86dd, @tcp={0x5, 0x6, "363ce7", 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @private=0xa010101}, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0x28}}}}}}}}, 0x56) 3.782700131s ago: executing program 0 (id=1949): r0 = syz_open_dev$radio(&(0x7f00000000c0), 0x3, 0x2) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$SNDCTL_SYNTH_INFO(r2, 0xc08c5102, 0x0) ioctl$SIOCRSGCAUSE(r1, 0x89e0, &(0x7f0000000a80)) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000080)={0xf000000, 0x346, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90f, 0x1ff, '\x00', @p_u32=0x0}}) socket$qrtr(0x2a, 0x2, 0x0) socket$isdn_base(0x22, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000070000008010"], 0x50) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r7}]}, 0x20}}, 0x4000000) chdir(&(0x7f00000000c0)='./bus\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x54}}, 0x0) fdatasync(r8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 3.649661028s ago: executing program 2 (id=1950): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000bc0)={&(0x7f00000000c0)={0xaf4, r1, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x49}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x409, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xf}, @device_b, @device_a, @from_mac=@broadcast, {0x6, 0x5}}, 0x4004, 0x1, @device_a, {0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x2, [{0x3, 0x1}, {0x6}]}, @void, [{0xdd, 0x5a, "44d300871b63ae7a76d8d2de812f23fd2ff03605b7f0223386695e8f9105de4d65cb695111f23ab610ef794e09b2770baf04dc40fe105a0c38da64468876649551baf9241b685553e96fae90f550566eb6c1b4e24512e618d1c9"}, {0xdd, 0x8c, "8af2c47e302f43836b8f7f5b67511795e0affc7848ff84aa0a1784209324f0757fefa9971a73672671841daad7583ff53a8e6483320badf57258d96d29d4bb5d4122133a3226ca866042366c979c4cd2e0a3751022fae600831236b89b9b36db8e221bcb78fc48532a23927b26f5f30c8acce5a871549a83bad1300ce411a0957ddc647846604170180babf9"}, {0xdd, 0xf7, "f119c07d9190d584af3cea0085c193ebcdcf0812165c4da6677b9d1cdde777a2d20cc5d6b5a991b87465b2a3475c344a4ff6446d1366a8f8102238598a3ad732fb56d532751c93e7d15b3da83f1519acd040aea4bcaddbe2f7800fa4697d6931afe687e2506ca2cb5ac497cd2d338c2a32fd75ad3f0e1882459f193165a5604b5db0a837cf43066afb2dc9d4b64e87de4a0d9a1d2e533fb93cc8419ff988fd8995accb0bc5d9df6875e063b8adbd8ed1f1dc94460d70f413d994273f810c2af422b0cd2c0bf797e89ba77259aa177038ae9db6ca653afd444a27e508706def8b89feff4b2f56aa1d263b4cb73667ba5e8b7f3c02ad5ae7"}, {0xdd, 0x43, "5e66c6234faff4e201a895675fde96349166ccd34275d1a3408ae3ffb67e8eb430cdfe122f684e99c26e095c42ebf73fbbc58d9a580a3b5d224e204d1b7b7e651ffbdf"}, {0xdd, 0xee, "d0d033dc4f65002753aff4b5d00d70ab507f5865f08ca3a00ddbc386849d5388666799d739a6a5fd25b54fd9c94cb85faaaf9cccb550f3bd2e083f0ea500110e5956faa49e7614d07268d39f9bc335f1513cfe0d023894185d36e3d9c3309d9191c2194a210b933dca96d479795ecf86fff9421dc6bffdfad0cb344d275c4e8322484b4b07c1523926c0acf909b7d6f17f14744c5c3a3b1b532a27cdc0fc2e05195d9a2e1365bfa74f62ab059b945e640a78a79765a2bed08fab59f78f8ea6b09819e3c035b908dcf3f5c4cb8f9adfadf117f63bdbbb31e53ed86afdfd691f1556741851acdde5b602a1eae8689a"}, {0xdd, 0xbd, "71b48ee606a595151bd137ec828e64950743cac075e89f3550952cdff0200fc7ad34ab22afa7703f5f5aeee8007562c510fde9f5c61052dcf7db4948178820576f79b034874c0c79c2d22dc040ef8b6c7085527547096822e1ac876ad94a61049ec30e0b476e24f2abc25dda73f63147266f732a951f65739ade23eedddc6dd13f67d6f8fcee8bbeda3a3ef6e38f7e6c87db9289688a57bf68986281b386808098f58b59204498d93ff2119f690334a2274c438f62a537481cfedd1c47"}]}}, @NL80211_ATTR_FRAME={0x6bb, 0x33, @assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, {0xd}, @device_a, @broadcast, @random="3546d8ba8f01", {0x6, 0x2}}, 0x20, 0x27, @random=0x2, @val={0x1, 0x1, [{0x60}]}, @val={0x2d, 0x1a, {0x8, 0x1, 0x7, 0x0, {0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, 0x8, 0xf, 0xff}}, [{0xdd, 0xe2, "348860c8194b2be98ebfa6a091c288cd42dd8b07e4241b31387a12730c6ec2d3e660926b4b1e47b1a08c5fffce362d40372062c0416542d46b16a17d9dfa13410db3038bae423a2e095391e37d25b960fe763d6293c2e0d67b3d94016df0b600acdf8dd5d45a5570a0354f7c237a026d2cf5c20db9d86b3b2dfe9cd41590e991450a7b035d1f1ded53f34a2b6e40dbfee6418b6303a182e0d77867b28363f3a21d143efeaeab0e16d20aa03c6e8ef7f7b37ef2114274bb2b4d3a53e34b5171928aed45efb4bb2f4bb08e2287a361b4772a59629544567a33c79240aa2d84eb794f60"}, {0xdd, 0x6f, "dd902de80431854567cb160fcdc391e140cbbb1e5746bfce624840f2f52c73a48277486fa9c48ab20c89601d6b74e2567de0332d587f1b8830f8d8636ebd7c28f3ecc866e49dc21a7cae212ed44892e0ade358ae8a8126102112241b80687a4862bdb24e1b4a28caaa73d6143b7443"}, {0xdd, 0xac, "aab45bc9d9ede5489b0c86e117adf4c77e998a48db7091e362c20aba01cc06a27bdf135fe59c89ee9c4b4fe49fe926aaaaa203f799c2a14ec3cc83005e93db8ca5c8e67db2b6c6ff449748c23fe983221bd562d287f61b3c33942fb3a701e24e3562169a03e1a5d613f6909a3aebbb8770a616bca60346c101942f7bdf0da8cd06cf1cff6792d713a7db310e80f5dce3a792b8c269780ff506af96380085313b4f71e937a42912f37c4825e2"}, {0xdd, 0xbd, "f3d8fa9ce3f0e1ff4030ea4d4c8498778b6f04538e54ae7eddeb33250a1bc46f61b23e1e7d27120cbb8c8fbfbeec1c3de5b41e30f81f4f57217fe75696740726b3e9f290732d6caf281fe9f5dce0fb201dd88fd128c19b0ef6a75e74038d8fa6233c695afb5a9c75b38a78988ec53bc826fff8acfe544a3265cac25575051f14b742073f132e1bc9ca25bdae1026052cfb16c043809493d6e25c76cf0fafa1cd0a95f85acafad77026febad4ab5601c9599e586a643f78ad1ce9132205"}, {0xdd, 0x4b, "53ee6ab193be7ee4130309b89e541357f6b46f43ebd236ecd8060b0f33d9ff2b9521f91a486ea76ed5fae96794112178bcbb1ffa6a45cd6bb2131aed94e7ac94470d5a1225a6322009a7fb"}, {0xdd, 0x89, "a6efdb41134e802e415292ca1e303d003fc8c23bfd26da32b662f6084596bb4e723ea228447ec9aaabfe860bedd5b6edcaad6acdb94fb53d861b6e314cabe877b5d3e2d141394f428fb4f01b151669816373688c81535cdbcd256f1413d3575a0a70da5095e876838b944e17f83514b6b928918ce3966e18d1f854949f0be756b3036c66cc8965234f"}, {0xdd, 0xaf, "a626295888c2de49320b6c4a3f07acf797ea138ae94f78bef0c233b7e0200b33849bec584ac847f328a145d4d15b0fdff4cd23d28ea4d23202ca9630476d815e52ed57877abd0199b866ddae7484b0a48a0c6ec7b48bd05d0777ccff34a6b26c43aba67e954394921ef18161610a9e4643ce9496c9fac9aa24f415074c09340038957522e02e5f8258cff48375025326fa9a104aa80dce9158fd8e6c09ca0ad13a5316b12b56e535e107e841baa104"}, {0xdd, 0x9f, "d63b1e05fcdcb6f0f4de507a97b6562fdd1b27a8abdd6e24293041d0e5db68619a02f8eee26ddf10a80a59ab10a2391def1bca6c22186f120f88904721ded6b72230f49edcafbddcb5bd70f3773ceb3580ef7c66ec5ef640b7d2d3784dd8db82072479a59a6d1b5bcc085936ae0b6b9b78a2300d8ce218ec1ccf2c94aa84cb1261282171c8409f26f690063725d23469d343e645e6da7215f9b2f911923f0c"}, {0xdd, 0xb8, "b376d4c2dd38fa708457e0277499bb0f95bf21c9b8d171a46f5aa56c41ee02a847eee2edfc8231fa0f7df3b169485696ed1de9345cb7b294eb5f0c3db8d6e98879d7e2cfc543a22a704d095f362d7310763d2ec8aca16b35dadec4f338ce65372ae711052f4c4db5ac6cb51f23360c83d0661357eedc9627ff5a2192f18d54840b03eabf2bef526b82d39b030ca561dacaba2ae094ba425f6d4fb35639f56c61596d95679638bdbb8717520eb48ca4ecdd5f6b96ff73193b"}, {0xdd, 0xd2, "c4e7d3ad35c25f372d9845824686c39362ee44046a97e1321cc17736992dc84ac2dfc2f682130a5d22cb8e70a8647baba3b9e0c81b50b2feacd60d3fc8885bccc4de1bbf864652abb364d83948e0e8f7396635bb9c1f92c006ce49833a77314e78128723a55f0d7d128beb8952c47b8d29082d474d718fe20a8e425603561f5ce77f8c1be43bc04fecfff3e7fa016cbd5f2b105e64467b709b35a2f116ae20f2936ba4f5289c479b363f78a09fdc8d4b079fdf4cfa7bbe7a30f6b1adaebf4bb3f8edb7ccd67e9910374b03e3e330335a5928"}]}}]}, 0xaf4}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000001200)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000c80)={0x55c, r1, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x74}}}}, [@NL80211_ATTR_HE_BSS_COLOR={0xc, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x193, 0x80, [@link_id={0x65, 0x12, {@from_mac=@device_b, @device_b}}, @fast_bss_trans={0x37, 0x102, {0x8, 0x7, "b9148a2a54b3ecf096fea8bab6e66fff", "5568be39d0813185d25d3b7bf2915152d0012a219bc102f8a5e10c94abcac23e", "1b3d4dd33013766d8f48662c27b38ae7bd115307b11d0ffa82f98cf5a18894e9", [{0x3, 0x18, "434ebaf367ce6deefe98cf423d71123012ef290c953a4b86"}, {0x1, 0x13, "2d67481661f8234858022aed6b5abc0f86d07e"}, {0x2, 0x19, "aa6f29410e9829063129ff1d1b51c4d70386074849fad8c82d"}, {0x2, 0xf, "6311b68359e3cc6fc8efdff894a479"}, {0x3, 0xb, "969e1842940d0effc9ee1c"}, {0x4, 0x1f, "8ca793ce9b256149e7756230d05491af17c0d8f11674d6c05398347fa6bbe9"}, {0x1, 0x25, "246f511e319212b9390585a51abde5a78f714d5bb90740d0ac11d91653d5d4ff9a3b4085c9"}]}}, @erp={0x2a, 0x1}, @erp={0x2a, 0x1}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @prep={0x83, 0x1f, {{}, 0x9, 0x7, @device_a, 0x6, @void, 0x7, 0x20000000, @device_b, 0x6}}, @tim={0x5, 0x4b, {0x6, 0x68, 0x0, "0a3a090a028ef9f93b84706af372980b9827f6178c323a3d7d2de3004b851f312cedb77dfb665e0bbc86086d9ccf91470dc893304aaa03053705f3baf16701e63ef420e3e877d0fa"}}]}, @NL80211_ATTR_BEACON_TAIL={0xc, 0xf, [@mesh_id={0x72, 0x6}]}, @NL80211_ATTR_BEACON_TAIL={0x2ab, 0xf, [@supported_rates={0x1, 0x1, [{0x4, 0x1}]}, @random_vendor={0xdd, 0x9b, "7c713cd8cbb30c5e39799c705055385ebc316b6586032ad52879bd123fc9ea59cafc7482de43963c7041a48a146d954ac23fd27c786d335b22095b50c03b2eb74ec64a0577c81b444901b38ad7897f5bb21d46a37684a6e934dab2e3751ce418a47ffe88fbce46f947eb528ae1e86c0fa5ad32f44d9abf8c67677dcf19edcf795d52ab160556c505b7052ee7cb5fdb90a15251e2cb039f02edb587"}, @peer_mgmt={0x75, 0x16, {0x1, 0x4, @void, @val=0x1, @val="302d96a670b44cdb76b10bf400a72c7c"}}, @supported_rates={0x1, 0x7, [{0x60}, {0x6}, {0x5}, {0x12}, {0x0, 0x1}, {0xb, 0x1}, {0x9}]}, @perr={0x84, 0xf5, {0x4, 0xf, [{{}, @device_a, 0x0, @void, 0x15}, {{0x0, 0x1}, @device_a, 0x4, @value=@broadcast, 0x30}, {{0x0, 0x1}, @device_a, 0x1, @value, 0x2a}, {{}, @broadcast, 0xa73a, @void, 0x3f}, {{0x0, 0x1}, @broadcast, 0x0, @value=@device_b, 0x22}, {{}, @broadcast, 0x9c, @void, 0x10}, {{0x0, 0x1}, @device_a, 0x5, @value=@broadcast}, {{0x0, 0x1}, @device_a, 0x0, @value, 0x30}, {{0x0, 0x1}, @device_a, 0x86a, @value=@device_b, 0x8}, {{}, @device_b, 0x4, @void, 0x3d}, {{0x0, 0x1}, @device_a, 0x2, @value=@device_b, 0xd}, {{}, @broadcast, 0x5, @void, 0x1e}, {{}, @device_b, 0x7f, @void, 0x32}, {{0x0, 0x1}, @device_b, 0x7f, @value, 0x25}, {{}, @broadcast, 0x7, @void, 0x22}]}}, @perr={0x84, 0x4f, {0x3, 0x5, [{{}, @device_b, 0x1ff, @void, 0x30}, {{}, @device_b, 0x8, @void, 0x3b}, {{}, @device_a, 0x4, @void, 0x3a}, {{0x0, 0x1}, @broadcast, 0x1000, @value=@device_b, 0x23}, {{0x0, 0x1}, @device_b, 0x0, @value=@broadcast, 0x26}]}}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, 0x3, 0x1}}, @random_vendor={0xdd, 0x8d, "47eeb50e6434b71df7b0d9382fbdd80656ab43549e940db97b8ed60e856fe691086568d2c4af9af6eb4f3dfc586d1c057b466a920001fbc14b4a0e5ebe8958494ddeb8cb585b575bc805899d5d4972062c26a3cd2bf575dcab454e22e78577fa08197d5dd61595554aea2c237e38d98124462772e47cad3d13c40065fbde26c95bb5c46b39e6dd0af126dac118"}, @chsw_timing={0x68, 0x4, {0x6, 0x2b}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x33, 0x80, [@mesh_id={0x72, 0x6}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x8, 0x3, 0x8}}, @prep={0x83, 0x1f, {{}, 0xc, 0x7, @broadcast, 0x10000, @void, 0x1ca, 0x4, @broadcast, 0x2}}]}, @NL80211_ATTR_FTM_RESPONDER={0x8c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x52, 0x3, "2e1471b46a7adb78d7d47dcc32a5a6a7a2633b88a4bf292c6538eb828db20651ec70429f3e666e79ff2e6669b87e2c59f3309a983a8589cfdb632703d7f5d857341fb9288b5de0e45ae002b6e002"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x28, 0x2, "130a0da82df60eec8966e74776fc064d73337b6f71d52e6bd5caef6ce277d83b8b800fd9"}]}], @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x55c}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000001240)={r0, r0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x3c, r1, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5bc4, 0x59}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x200000c0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001380), 0x42, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f00000013c0), 0x5, 0x800) nanosleep(&(0x7f0000001400)={0x0, 0x3938700}, &(0x7f0000001440)) read$msr(0xffffffffffffffff, &(0x7f0000001480)=""/132, 0x84) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x5c, r1, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@pspoll={{}, @random=0x6, @from_mac=@broadcast, @device_b}}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {}, @broadcast}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {}, @broadcast}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1014}, 0x4) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0xffffffff00000000) socket$rds(0x15, 0x5, 0x0) r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r5, &(0x7f0000001680)={{0x10b, 0x1, 0x80, 0x38b, 0x212, 0x4, 0x10e, 0x8}, "6949a8ba1fa59a3dc5224bd0c33da07a216ced70d9547961413ac94116bdf6b861948d672d43428b27107e5d1bda2f49b4e6376ce73c8d68fb922a2f78c7047229c98924739cdea4a8d49e23"}, 0x6c) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000001700)={0x1, 0x0, 0x7, 0x80800, 0xffffffffffffffff}) tee(r4, r6, 0x0, 0x1) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000001900)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000018c0)={&(0x7f0000001780)={0x114, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1ff, 0x25}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xd}, @NL80211_ATTR_FRAME_MATCH={0xe3, 0x5b, "3b295a34f9d0ec6c253abd455ead583c31179b750ab494312d1bfe3019df11019c2071813440bf5c9b48435167d2fcb8db4875c901949a2f966c952166d81ad8fd5258db6b9442c993ecc97bbee72effd0eff96abbae369125f3e7ac6ae9005848a982c31fa4ac29c61ebe15654803d6d67b7a102253bc624c3ded669f71c27a599d0edc627921ab1e440c3f850f1adb0cb3a29a7d06d77b994ddb90926b1df1d51289dbdcd7167cc44d4df5a37e99f1ea62d367361f6bb41f82e1b576bc762b1063dcf0b1a770193d91cdf35cb9c941be7bf92c8582e94ec0debd008c51b7"}]}, 0x114}, 0x1, 0x0, 0x0, 0x4000004}, 0x854) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000001980), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000001b80)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001b40)={&(0x7f00000019c0)={0x14c, r7, 0x100, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x800}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x5b20e64d}, {0xc, 0x90, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x5}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001bc0)={0x0, 0x0}) fcntl$setown(r0, 0x8, r8) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c40)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f0000001c80)='pids.current\x00', 0x0, 0x0) r10 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001cc0), 0x2, 0x0) write$vhost_msg_v2(r10, &(0x7f0000001e80)={0x2, 0x0, {&(0x7f0000001d00)=""/86, 0x56, &(0x7f0000001d80)=""/209, 0x2, 0x2}}, 0x48) r11 = syz_usb_connect$cdc_ncm(0x4, 0x8d, &(0x7f0000001f00)={{0x12, 0x1, 0x210, 0x2, 0x0, 0x0, 0xaf, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x2, 0x1, 0x9, 0x10, 0xda, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x2, 0x1, 0x3}, {0x6, 0x24, 0x1a, 0x2, 0x6}, [@mdlm={0x15, 0x24, 0x12, 0xc3}, @country_functional={0xa, 0x24, 0x7, 0xff, 0x3, [0x5, 0x4]}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0xf7, 0x11, 0xf2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x75, 0x20, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xff, 0x4, 0xc4}}}}}}}]}}, &(0x7f0000002180)={0xa, &(0x7f0000001fc0)={0xa, 0x6, 0x200, 0x17, 0x2, 0x2, 0xff, 0xfd}, 0x16, &(0x7f0000002000)={0x5, 0xf, 0x16, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0xf, 0x1000}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x0, 0x40, 0x40}]}, 0x2, [{0xfd, &(0x7f0000002040)=@string={0xfd, 0x3, "61260966815576ff1e28b73e275f5ba387c2ad1a04674c2aa0bc1871698c1c8100bc00c49907544b4289e4ce7b533f9906dc5e4f359fb5cf67f221cb6c9e8be94e8ba638ea2a91866f08fcbc8ac8baac29036e02777b513699af7317f0980e0798c003add2f74cc96b10f3c4ab3c904c01624d05e258f32302bc182db0da324591dde97f305a4554513a0b715ef5a7bb182915f2ed37362104c2e3da39c8b90efb5eaf45224fb4dd8d3482dfde406e4f66dc3fb9322a5106c7efa6633dc9f4e42b53356efcc5c918de2c7ed1469bbf810bb95c4904e12c83f557aaf0f97d2e4b36c456c24865a1f52bf184b4b0ed169306b3b3f68f16f22d9675b0"}}, {0x4, &(0x7f0000002140)=@lang_id={0x4, 0x3, 0x2c01}}]}) syz_usb_control_io(r11, &(0x7f0000002300)={0x2c, &(0x7f00000021c0)={0x40, 0x30, 0x1c, {0x1c, 0x11, "90bf7bc0508c2174375d0f15171255f7febbbacfac0e4a49455d"}}, &(0x7f0000002200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x240a}}, &(0x7f0000002240)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x1, 0x4, 0x7}]}}, &(0x7f0000002280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0xfc, 0xff, "9aeadfab", "b3485834"}}, &(0x7f00000022c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8d, 0x80, 0x4, 0x0, 0xe, 0x1, 0xffff}}}, &(0x7f0000002780)={0x84, &(0x7f0000002340)={0x0, 0xa, 0x3d, "7a22b05416cf4cace07078d1571a335fa9554a931b57d31e22c20283fc52da0610a0946c5520794d3402e1d3f1c393c5ef00ffa37bbccc10c5be715890"}, &(0x7f00000023c0)={0x0, 0xa, 0x1}, &(0x7f0000002400)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000002440)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000002480)={0x20, 0x0, 0x4, {0x60, 0x20}}, &(0x7f00000024c0)={0x40, 0x7, 0x2, 0x10}, &(0x7f0000002500)={0x40, 0x9, 0x1, 0xd}, &(0x7f0000002540)={0x40, 0xb, 0x2, "c400"}, &(0x7f0000002580)={0x40, 0xf, 0x2, 0x4}, &(0x7f00000025c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000002600)={0x40, 0x17, 0x6, @local}, &(0x7f0000002640)={0x40, 0x19, 0x2, "a903"}, &(0x7f0000002680)={0x40, 0x1a, 0x2, 0x5}, &(0x7f00000026c0)={0x40, 0x1c, 0x1, 0x7f}, &(0x7f0000002700)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000002740)={0x40, 0x21, 0x1, 0x3}}) 3.575567146s ago: executing program 3 (id=1951): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x17, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_team\x00'}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0xc054) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000000000000000007200", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 3.471863398s ago: executing program 1 (id=1953): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x3}, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8, 0x11, 0x0, @private2, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) r2 = memfd_create(&(0x7f0000000100)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\f\xeaH\xd8cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0', 0x6) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0xa, @pix_mp={0x0, 0x0, 0x33565348, 0x7, 0x0, [{0x8, 0xfffffffd}, {0x9}, {}, {0x10000000, 0x6}, {}, {0x400000, 0xfffffffe}, {0xffffffff, 0xffffffff}], 0x6, 0x0, 0x0, 0x2, 0x7}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) fcntl$addseals(r2, 0x409, 0x8) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r4, 0x542f, 0x0) ioctl$TIOCMBIC(r4, 0x5417, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x1}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004280)={0x1c, 0x3d, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x1c}}, 0x4c000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0xffffffffffffff74, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 3.398011744s ago: executing program 3 (id=1954): syz_emit_vhci(0x0, 0xe) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x19) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) fsopen(&(0x7f0000000080)='ext3\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000008b}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x700, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x58}, 0x1, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) iopl(0x80) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x20, 0x4) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e334185850000007300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000002000000000000000000000085000000130000001801000020756c2500000000002020207b1af8ff00000000bfa300000000000007010000f8ffffffb702000008000000b70300000900000085000000060000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="386d178529a39dea18dd3f87d7a5", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_POWER(r5, 0x112, 0x9, 0x0, 0x0) syz_clone(0x80001280, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000020000000c"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x18) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 3.205396478s ago: executing program 4 (id=1955): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018000a8014000700fc"], 0x58}, 0x1, 0x2}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000001080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000050000000000000001000084000000000300000002000000000000000000000000000005000000000000005f"], 0x0, 0x41, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) 2.969333274s ago: executing program 0 (id=1956): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000200), 0xcc, 0x101000) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$PTP_PIN_SETFUNC(r4, 0x40603d07, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000440)='hsr0\x00', 0x10) sendmmsg$inet(r5, &(0x7f0000007580)=[{{&(0x7f0000000480)={0x2, 0x4e20, @loopback}, 0x10, 0x0}}, {{&(0x7f0000000600)={0x2, 0x4e22, @broadcast}, 0x10, 0x0}}], 0x2, 0x2) creat(&(0x7f0000000240)='./file0/bus\x00', 0x0) acct(&(0x7f0000000300)='./file0/bus\x00') chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000280)='./file0\x00', 0x0) write(r2, &(0x7f0000000000)="3f000000010003", 0x7) socket$l2tp(0x2, 0x2, 0x73) 2.833966616s ago: executing program 2 (id=1957): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x48a, 0x0, 0x2}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', 0x0, 0x100a021, 0x0) sendmmsg$sock(r2, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="35be7b801e1cb3910300492512c9e151bcc4f3e3bd1491fee37fad08a965eb", 0x1f}, {&(0x7f0000000080)="8ae827155c75a5d90e42", 0xa}, {&(0x7f0000000340)="bea0fb8d8d91c1832910678ee14c5a9fbe4268f26edf71376298ebc68b7e45cdad4eabfdb0dcbed2e5c7a5498b754ce3385943b73722f369cce7bc3233f7291c8de969d3ec838d9f7bf1e7ffc75ef9bc6a90d1daa241f416151405409359e5783ada9d1920010e10f2a95b7ef784c57fbc44764cb8f4e15c811c4a5d1b2f164ea0b1d033c9fb02b9eb16998931331949e5b23e7571a4bbff7527f84ac040ec8352175ae65908dc680585b4ae1357f9bfdef97033f31e5aad7f800abff74a2e011e9ff4852ff014444928da7f98fe7734aa6e189427400c4d5060e58c612594", 0xdf}, {&(0x7f0000000240)="d697b593107e9ef9c777b8a6ec4999b4fb886642f2ac825e2fc7e14617034eba51bdc421756caac451b2cefc7a7e667143972b9f68670f50c5f94982205b1c9a3524ee55b37b1ed88f7da11433a2839721b3b2b100a84460d179ecc704834a63b8e6ed04ea9843828a957d868ca1c635778f237126f68244468d813cb6f9e1d424d4e45812eea7de68bb9db5b94546", 0x8f}, {&(0x7f0000000440)="3e68d2a40d8dcbb1fe0007a5323c667b27aa7a3b0383b08543a1f5b733ea659ecda13aff6396ce8944a4c163bed3948d111858a9c426e40bf358d7f151815ef3ef50b25436404b7b431016eb7be697cbfc44eec0c98181482dec335d58d794cc949b820655c87f61f003cd1aed61be7d445c7e987bfe7fb8cab36ba10fc79c4a5672c8b1b7d7156d12e60567cec0e8a4ec0b3714a299e6ac3bd859a9c21f60dd842c57690f518cbb5b096058a983c9efb05bac4251d573e07d58a94090db15b5430b09457e1e21b4906bf6845f478b0470c642fe8bc40dd922", 0xd9}, {&(0x7f0000000540)="eb54eea10d02605f3e1d90cc8e83654a42c1c30420e5f45006ead327d9dcdb753c4ac693b4558f758692a5f339e2836693f13911b6fd3ab76cb2d756274ae43fff75f49d9d1b144723c0b6e37c6cbe82a09cbe51215b41b5f14a9695e73e602bf390ad37cf062f6dbeca667764d8d011cbee9b7ef4fd60a4fd91bf42000990d32ff23350c0dda16fdd14df9d78433bd40f290a5dc896546e1dee52b1940a4db2cd2bd62f22ff5cf4bf73493ff9b737bdb869adf55333dbcd366c8629c40ca5e3613ff4dcc347b9b794ad58ddf66ada7748b7a490ce9971a091e9d025bad23e0ac6c117", 0xe3}, {&(0x7f0000000640)="a9fca23662d40511eda2cf6673cb49538aa73e4696da5b7cb58f395ad0f1476372c55dba8bef203955009e3c12b3c2836e0a2490cf5ec90901ccbc8559eea3894c04a0cce31caafa37f80f716eb5e867d1ad4d161046086c8507feb4a5ebc2b6a57f183d2cc41d2cce2ea3b75ce1a188b458c9ad56336a080e84b8182be2c24852c4fa37d817d19e3742ff1864918fe2f4d64c2685042d1d1e174c2cc8dae7c6a26e31c943bd4307afc20f966d5bfb3a19a5f38d99223e6efa6ebf74c7", 0xbd}], 0x7, &(0x7f0000000700)=[@mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x30}}, {{&(0x7f0000000740)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000940)=[{&(0x7f00000007c0)="5c9c450588110e81e8ca39dbf721caf80bf021b10882", 0x16}, {&(0x7f0000000800)="86c92ac8334edd83392b51a0c669114ac02987ed2b6c853f5c4dae5524fa22ef2c8871b3fc696bb1c93d1104417e54b3a8c061e4845021ffbdfd7e78155e4366c7c779e2181ffe1a96e019ed7e5bb14c2a682a61aa5086750a4a4fcb9dda14ac6174543ac7d42527b1c1f1ac50cc6fcba0b2fef0e54f89b915b105b4304326174e16cf0fb98391586ae401e8f375597ae5b6d05250467c1d4cc8b79859aecd5fb1f4ad14738cc6ab18e71e577a68f11abee7b084b109863d7ed7227e0e21091f6b082747ae3804340b7710823c65a971158efcf19b0a7dc6e93440b887019b8160d5b680619c339988ee78e867eb811ce31568e17377", 0xf6}, {&(0x7f0000000900)}], 0x3, &(0x7f0000000980)=[@mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0xd1d4}}, @mark={{0x14, 0x1, 0x24, 0x3ff}}, @txtime={{0x18, 0x1, 0x3d, 0x7fffffff}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0xfff}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0xc0}}], 0x2, 0x24000001) 2.829494231s ago: executing program 1 (id=1958): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r1, 0x0, &(0x7f0000000480)='L', 0x1, 0x2}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r1, 0x0, &(0x7f0000ff6000/0x7000)=nil, 0x7000}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000004c0)={0x28, 0x4, r1, r1, 0xfffffffffffffff9, 0x7, 0x2}) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x8000) r2 = socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[], 0x50) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000019400)="00aaec1182e74571bc2fd8532303b1f05d176168907341f9d148ed69887327fbab3f", 0x22}, {&(0x7f0000000180)}, {&(0x7f0000000040)="da6c88630c5eb498928c88e9e928d33d22ef9ca1c4a489e55b19083f2ac8a488b3ee9da24e8bc8ff1a214087f3f752d6117277150af69bd05401ef3d61edd9c928e672", 0x43}], 0x3, 0x0, 0x0, 0x4044050}], 0x1, 0x50) read$msr(r3, &(0x7f0000019680)=""/102392, 0xffffffffffffff9e) io_uring_setup(0x4899, &(0x7f0000000300)={0x0, 0xbcd4, 0x200, 0x3, 0x2be}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f0000000780)="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", 0x2a0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r7 = socket(0x3, 0x3, 0xfffff801) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r2, @ANYRESDEC=r2, @ANYBLOB="14"], 0x2c}}, 0x0) socket(0x11, 0x80a, 0x0) 2.752893079s ago: executing program 4 (id=1959): sched_setscheduler(0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) getpid() r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x3f00) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) get_robust_list(0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a4d930000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030069705f767469300000000000000000000900010073797a31000000002c000000050a01020000000000000000010000000c00024000000000000000010900010073797a31000000001400"], 0xc8}}, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000240)) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0xf6466a61131948ab}, 0x38) socket$kcm(0xa, 0x3, 0x3a) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) 2.29359989s ago: executing program 2 (id=1960): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="3103000000000000000006000000080003001727d0d1b8e315a4af373e9bea46477916a77f2cf804815b0e7ac1f8bf1c0795bd027b0f2ad000cd9bfef370b663b2686687a35a3cf10fba01e8acb5aae531015a56daa9047bb0274ce39911103699835670834331aea8e4a532edc36828141a2cc4626144012ce9c4bc1113493c4f47a27dbbc7c2f1e25448629f4be9a5b10f9bbbd3a1aafd7ac0bb6a45ac43718a88e104bf165f0e9b15d207bdf400a602fdcb10ca322772a2e5fb3bb2e2154440", @ANYRES32=r0, @ANYBLOB], 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r4, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c0004"], 0x40c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x2, 0x12) syz_genetlink_get_family_id$net_dm(0x0, r5) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=0x3, 0x4) r7 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x77359400}}) io_uring_enter(r7, 0x2def, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE) io_uring_enter(r7, 0x4866, 0x0, 0xb, 0x0, 0x0) socket$inet6(0xa, 0x8000000000080001, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r1, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x76a4229a4571fdf4}, 0x40005) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) r11 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r11, 0xc0045005, &(0x7f0000000100)=0x3) sendmmsg$inet6(r10, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}], 0x1, 0x40011) r12 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r12, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) 2.29310899s ago: executing program 1 (id=1961): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000480), 0x80000, 0x0) r0 = syz_io_uring_setup(0x1e1f, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) write$P9_RAUTH(0xffffffffffffffff, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r5}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x7, 0x10001, 0x3ff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) iopl(0x3) fallocate(0xffffffffffffffff, 0x0, 0x400000000000000, 0x7) io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.980929512s ago: executing program 0 (id=1962): mmap(&(0x7f00000d5000/0x1000)=nil, 0x1000, 0x100000d, 0x3032, 0xffffffffffffffff, 0xffffe000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = fspick(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000000c0)='dirsync\x00', 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) alarm(0x7) alarm(0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) ppoll(&(0x7f0000002280)=[{0xffffffffffffffff, 0x800}, {0xffffffffffffffff, 0xd08a}], 0x2, 0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000140)=""/4096, 0x1000, 0x0, 0x0) add_key(&(0x7f0000000100)='id_legacy\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x60020000) syz_usb_connect(0x2, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xc, 0xa3, 0x8f, 0x40, 0x13d8, 0x11, 0xd062, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa6, 0x1, 0x56}}]}}]}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x276d, &(0x7f0000000140)={0x0, 0x2ba0, 0x8, 0x0, 0x821}, &(0x7f0000000340), &(0x7f0000000280)) 1.831929721s ago: executing program 4 (id=1963): set_mempolicy(0x1, &(0x7f0000000040)=0x1001, 0x4) set_mempolicy(0x1, &(0x7f0000000040)=0x1001, 0x4) (async) 1.318031867s ago: executing program 4 (id=1964): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x17, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_team\x00'}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0xc054) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000000000000c900", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 1.153252697s ago: executing program 1 (id=1965): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000800000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="40070601000056"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/wireless\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000100)=""/204, 0xcc}], 0x1, 0xa4, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000001100)=0xde8, 0xfffffffffffffdad) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080)=0x814f, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x24000005, &(0x7f0000b63fe4)={0xa, 0x2, 0x80000000}, 0x1c) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000080)={0x28, 0x1, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r3, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000240)={0x60, 0xf, 0x2, "2f01"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0}) shmdt(0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900004001000000000000000000000000ffff0000000000000000000000000000ffff"], 0x4c}}, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20010, r4, 0x5b843000) 1.13277116s ago: executing program 2 (id=1966): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0xffffffff80000000, 0x0, 0x5b) close_range(r0, r2, 0x0) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000000080)=""/101, 0x65}], 0x1, 0x0, 0x2500}, 0xf0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002140)=@upd={0xe8, 0x12, 0x1, 0x70bd28, 0x25dfdbff, {{'crc32c-intel\x00'}, '\x00', '\x00', 0x0, 0x400}, [{0x8, 0x1, 0x8000}]}, 0xe8}, 0x1, 0x0, 0x0, 0x84}, 0x4004000) 878.00643ms ago: executing program 4 (id=1967): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x80000000]}, 0x8, 0x800) copy_file_range(r0, &(0x7f0000000040)=0x1, 0xffffffffffffffff, &(0x7f0000000080)=0x2, 0xfffffffffffffffa, 0x0) (async) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r2, &(0x7f0000001f80)=[{{&(0x7f0000000940)=@in6={0xa, 0x4e24, 0xff, @dev={0xfe, 0x80, '\x00', 0x3e}}, 0x80, 0x0}}, {{&(0x7f0000000240)=@in6={0xa, 0x4e22, 0xc2cd, @mcast1, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x18}}], 0x2, 0x0) syz_usb_control_io(r1, 0x0, 0x0) 827.567214ms ago: executing program 2 (id=1968): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x3}, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8, 0x11, 0x0, @private2, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) r2 = memfd_create(&(0x7f0000000100)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\f\xeaH\xd8cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0', 0x6) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0xa, @pix_mp={0x0, 0x0, 0x33565348, 0x7, 0x0, [{0x8, 0xfffffffd}, {0x9}, {}, {0x10000000, 0x6}, {}, {0x400000, 0xfffffffe}, {0xffffffff, 0xffffffff}], 0x6, 0x0, 0x0, 0x2, 0x7}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) fcntl$addseals(r2, 0x409, 0x8) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r4, 0x542f, 0x0) ioctl$TIOCMBIC(r4, 0x5417, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x1}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004280)={0x1c, 0x3d, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x1c}}, 0x4c000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0xffffffffffffff74, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 295.778483ms ago: executing program 2 (id=1969): r0 = io_uring_setup(0x1de0, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') preadv(r1, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/248, 0xf8}], 0x1, 0x0, 0x0) (async) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth1_vlan\x00', 0x0}) (async) unshare(0x62040200) (async) r3 = gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r2, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r3], 0x28}}, 0x0) (async) r4 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12015001020000402505a1a440000102030109025c0002010070000904000001020d0000052406000105240000000d240f01fdfffffffdff08000006241a0000080905810340000000000904010000020d00000904010102020d0000090582d41000000000090503", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f00000005c0)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x3ff, 0x8001, 0x0, 0x7, 0x7f, 0x5, 0x400, 0x1, 0x7, 0x3, 0x66c}}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c1}, 0x0) 816.56µs ago: executing program 4 (id=1970): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x12b0c2, 0x0, 0x5}, 0x18) mkdirat(r3, &(0x7f0000000100)='./file1\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000180)={0x9, 0x93be, {0x1, 0xf75, 0x1, {0x2, 0x5}, {0x3ff, 0x7}, @const={0x7, {0x200, 0x4, 0x678, 0x5}}}, {0x52, 0x8001, 0x7, {0x3, 0x3}, {0x3, 0x841c}, @cond=[{0x0, 0x9, 0x10, 0xfff1, 0x6, 0x7}, {0x3, 0x1, 0x9, 0x8, 0xa4, 0xf001}]}}) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000400)={[{@uuid_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_on}]}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r5, &(0x7f00000003c0)='./file0\x00', 0x200, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000440), 0x10) listen(r7, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r8, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x1}], 0x1) accept4$unix(r7, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=1971): r0 = syz_open_dev$dri(&(0x7f0000000640), 0x1, 0x8442) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000780)={&(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x2, 0x3, 0xa}) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) kernel console output (not intermixed with test programs): 4.463:758): avc: denied { nlmsg_write } for pid=12071 comm="syz.3.1469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 397.839814][ T29] audit: type=1400 audit(1738743735.713:759): avc: denied { setattr } for pid=12083 comm="syz.9.1472" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 397.996629][T12087] ip6t_rpfilter: unknown options [ 398.019204][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 398.036439][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 398.045199][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 398.057625][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 398.066069][ T5833] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 398.090025][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 398.152196][T12088] lo speed is unknown, defaulting to 1000 [ 398.359736][T12088] lo speed is unknown, defaulting to 1000 [ 398.533876][T12088] chnl_net:caif_netlink_parms(): no params data found [ 398.569702][ T5926] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 398.655215][T12088] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.662888][T12088] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.670259][T12088] bridge_slave_0: entered allmulticast mode [ 398.677483][T12088] bridge_slave_0: entered promiscuous mode [ 398.686471][T12088] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.694126][T12088] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.705713][T12088] bridge_slave_1: entered allmulticast mode [ 398.713434][T12088] bridge_slave_1: entered promiscuous mode [ 398.729565][ T5926] usb 3-1: Using ep0 maxpacket: 8 [ 398.736206][ T5926] usb 3-1: config 162 has an invalid interface number: 45 but max is 1 [ 398.754924][ T5926] usb 3-1: config 162 has an invalid interface number: 87 but max is 1 [ 398.773245][T12088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.789868][ T5926] usb 3-1: config 162 has no interface number 0 [ 398.801584][T12088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.811007][ T5926] usb 3-1: config 162 has no interface number 1 [ 398.817299][ T5926] usb 3-1: config 162 interface 45 altsetting 4 endpoint 0x86 has invalid maxpacket 1024, setting to 64 [ 398.860237][ T5926] usb 3-1: config 162 interface 45 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 398.882024][ T5926] usb 3-1: config 162 interface 87 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 398.919660][ T5926] usb 3-1: config 162 interface 87 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 398.934221][T12088] team0: Port device team_slave_0 added [ 398.944254][ T5926] usb 3-1: config 162 interface 87 altsetting 1 has a duplicate endpoint with address 0x86, skipping [ 398.956050][T12088] team0: Port device team_slave_1 added [ 398.967544][ T5926] usb 3-1: config 162 interface 87 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 398.982472][ T5926] usb 3-1: config 162 interface 45 has no altsetting 0 [ 398.998411][ T5926] usb 3-1: config 162 interface 87 has no altsetting 0 [ 399.007501][T12088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.014815][T12088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.042005][T12088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.054601][ T5926] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice=32.4e [ 399.063936][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.072508][ T5926] usb 3-1: Product: syz [ 399.078426][T12088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.085505][ T5926] usb 3-1: Manufacturer: syz [ 399.090556][ T5926] usb 3-1: SerialNumber: syz [ 399.096158][T12088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.127539][T12088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.175211][T12088] hsr_slave_0: entered promiscuous mode [ 399.190675][T12088] hsr_slave_1: entered promiscuous mode [ 399.207052][T12088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 399.219820][T12088] Cannot create hsr debugfs directory [ 399.331315][ T5926] pl2303 3-1:162.45: required endpoints missing [ 399.367011][ T5926] pl2303 3-1:162.87: required endpoints missing [ 399.420380][ T5926] usb 3-1: USB disconnect, device number 36 [ 400.081254][T12113] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1480'. [ 400.140130][ T5833] Bluetooth: hci5: command tx timeout [ 400.350364][T12116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1480'. [ 401.159704][ T971] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 401.313469][ T29] audit: type=1326 audit(1738743739.233:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12127 comm="syz.3.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046a38cda9 code=0x7ffc0000 [ 401.362383][T12088] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 401.391376][T12088] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 401.398069][T12128] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1487'. [ 401.409183][ T29] audit: type=1326 audit(1738743739.233:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12127 comm="syz.3.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f046a38cda9 code=0x7ffc0000 [ 401.455283][T12128] 0X: renamed from caif0 [ 401.460956][T12128] 0X: entered allmulticast mode [ 401.466171][T12128] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 401.482670][T12088] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 401.492251][ T971] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 401.506472][ T971] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 401.529625][ T29] audit: type=1326 audit(1738743739.233:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12127 comm="syz.3.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046a38cda9 code=0x7ffc0000 [ 401.553863][ T971] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 401.571529][ T971] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 401.653569][T12088] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 401.674327][ T971] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 401.690081][ T29] audit: type=1326 audit(1738743739.233:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12127 comm="syz.3.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f046a38cda9 code=0x7ffc0000 [ 402.291045][ T29] audit: type=1326 audit(1738743739.233:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12127 comm="syz.3.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046a38cda9 code=0x7ffc0000 [ 402.314891][ T29] audit: type=1326 audit(1738743739.243:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12127 comm="syz.3.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f046a38cda9 code=0x7ffc0000 [ 402.339827][ T5833] Bluetooth: hci5: command tx timeout [ 402.345582][ T971] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 402.355323][ T971] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 402.388410][T11064] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 402.429836][ T29] audit: type=1326 audit(1738743739.243:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12127 comm="syz.3.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046a38cda9 code=0x7ffc0000 [ 402.459650][ T971] usb 9-1: Product: syz [ 402.463943][ T971] usb 9-1: Manufacturer: syz [ 402.505036][ T971] cdc_wdm 9-1:1.0: skipping garbage [ 402.525792][ T971] cdc_wdm 9-1:1.0: skipping garbage [ 402.526438][T12088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.563491][ T29] audit: type=1326 audit(1738743739.243:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12127 comm="syz.3.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f046a38cda9 code=0x7ffc0000 [ 402.569830][ T971] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 402.594021][T12088] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.657260][ T971] cdc_wdm 9-1:1.0: Unknown control protocol [ 402.671208][T11493] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.678288][T11493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.699787][ T29] audit: type=1326 audit(1738743739.243:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12127 comm="syz.3.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046a38cda9 code=0x7ffc0000 [ 402.737842][ T971] usb 9-1: USB disconnect, device number 4 [ 402.755821][T11493] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.762934][T11493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.845442][ T29] audit: type=1326 audit(1738743739.243:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12127 comm="syz.3.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f046a38cda9 code=0x7ffc0000 [ 402.878808][T12088] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 402.927605][T12088] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 402.999585][ T1201] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 403.140099][ T1201] usb 3-1: device descriptor read/64, error -71 [ 403.181457][T12088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.277412][T12166] loop9: detected capacity change from 0 to 7 [ 403.291179][T12166] Dev loop9: unable to read RDB block 7 [ 403.300154][ T971] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 403.309697][T12166] loop9: unable to read partition table [ 403.315523][T12166] loop9: partition table beyond EOD, truncated [ 403.345570][T12166] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 403.395051][ T1201] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 403.483129][ T971] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 403.502126][ T971] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 403.521602][T12179] IPVS: Error joining to the multicast group [ 403.527697][ T971] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 403.549227][ T971] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 403.567386][ T971] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 403.618191][ T971] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 403.635690][ T971] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 403.653365][ T971] usb 9-1: Product: syz [ 403.657673][ T971] usb 9-1: Manufacturer: syz [ 403.670490][ T1201] usb 3-1: device descriptor read/64, error -71 [ 403.671949][ T971] cdc_wdm 9-1:1.0: skipping garbage [ 403.682661][ T971] cdc_wdm 9-1:1.0: skipping garbage [ 403.689155][ T971] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 403.695700][ T971] cdc_wdm 9-1:1.0: Unknown control protocol [ 403.804560][T12088] veth0_vlan: entered promiscuous mode [ 403.839770][T12088] veth1_vlan: entered promiscuous mode [ 403.879628][ T5866] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 403.897277][T12088] veth0_macvtap: entered promiscuous mode [ 403.922354][T12088] veth1_macvtap: entered promiscuous mode [ 403.971589][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.993499][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.011579][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 404.018398][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 404.026501][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 404.033113][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 404.039656][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 404.046260][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 404.052582][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 404.059178][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 404.065497][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 404.072074][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 404.078346][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 404.084925][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 404.091180][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 404.097783][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 404.104034][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 404.110727][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 404.116890][ T5866] usb 10-1: device descriptor read/64, error -71 [ 404.123548][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 404.123561][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 404.124062][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 404.124073][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 404.150801][ T5865] usb 9-1: USB disconnect, device number 5 [ 404.150836][ T1201] usb usb3-port1: attempt power cycle [ 404.156662][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 404.181576][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.200340][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.213309][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.224742][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.239750][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.261239][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.277985][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.303411][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.323099][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.359715][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.386520][ T55] Bluetooth: hci5: command tx timeout [ 404.429593][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.441672][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.452744][T12088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.649748][ T1201] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 405.015362][ T5866] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 405.050093][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.074061][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.088550][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.101057][ T1201] usb 3-1: device descriptor read/8, error -71 [ 405.107048][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.117460][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.134736][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.146497][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.161739][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.173733][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.184347][ T5866] usb 10-1: device descriptor read/64, error -71 [ 405.194531][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.204388][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.214977][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.224849][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.235345][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.270458][T12088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.300281][ T5866] usb usb10-port1: attempt power cycle [ 405.311883][T12088] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.342321][T12088] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.365341][T12088] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.382655][T12088] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.491532][ T1201] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 405.503395][T12192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 405.583978][T12193] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 405.631941][ T1201] usb 3-1: device descriptor read/8, error -71 [ 405.660728][ T5866] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 405.700719][ T5866] usb 10-1: device descriptor read/8, error -71 [ 405.714563][T11049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.737131][T11049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.769966][ T1201] usb usb3-port1: unable to enumerate USB device [ 405.796886][T11064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.969807][ T5866] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 406.041553][ T5866] usb 10-1: device descriptor read/8, error -71 [ 406.264203][T11064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.282648][ T5866] usb usb10-port1: unable to enumerate USB device [ 406.323243][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 406.323260][ T29] audit: type=1400 audit(1738743744.243:839): avc: denied { mounton } for pid=12088 comm="syz-executor" path="/root/syzkaller.xpwE7U/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 406.393698][ T29] audit: type=1400 audit(1738743744.253:840): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 406.427833][ T29] audit: type=1400 audit(1738743744.253:841): avc: denied { mounton } for pid=12088 comm="syz-executor" path="/root/syzkaller.xpwE7U/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=36410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 406.459304][ T29] audit: type=1400 audit(1738743744.253:842): avc: denied { unmount } for pid=12088 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 406.485192][ T55] Bluetooth: hci5: command tx timeout [ 406.505257][ T29] audit: type=1400 audit(1738743744.293:843): avc: denied { mounton } for pid=12088 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 406.530246][ T29] audit: type=1400 audit(1738743744.293:844): avc: denied { mount } for pid=12088 comm="syz-executor" name="/" dev="gadgetfs" ino=7067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 406.559225][ T29] audit: type=1400 audit(1738743744.353:845): avc: denied { mounton } for pid=12088 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 406.673758][ T29] audit: type=1400 audit(1738743744.353:846): avc: denied { mount } for pid=12088 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 406.739878][ T29] audit: type=1400 audit(1738743744.353:847): avc: denied { create } for pid=12208 comm="syz.3.1507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 406.990056][ T971] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 407.241465][ T29] audit: type=1400 audit(1738743744.353:848): avc: denied { write } for pid=12208 comm="syz.3.1507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 407.578370][ T971] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.609885][ T971] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 407.639731][ T971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.679305][ T971] usb 5-1: config 0 descriptor?? [ 407.710176][T12232] overlayfs: failed to clone lowerpath [ 407.718879][T12227] lo speed is unknown, defaulting to 1000 [ 407.898768][ T971] usb 5-1: USB disconnect, device number 5 [ 408.162786][T12239] tipc: Started in network mode [ 408.167928][T12239] tipc: Node identity 7f000001, cluster identity 4711 [ 408.179300][T12239] tipc: Enabled bearer , priority 10 [ 408.686473][T12227] lo speed is unknown, defaulting to 1000 [ 409.292326][ T971] tipc: Node number set to 2130706433 [ 411.535260][T12272] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 411.541855][T12272] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 411.550749][T12272] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 411.564509][T12272] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 411.575018][T12272] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 411.623447][T12272] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 411.647698][T12272] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 411.655783][T12272] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 411.676151][T12272] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 411.686216][T12272] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 411.697480][T12272] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 411.708172][T12272] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 411.912648][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 411.912663][ T29] audit: type=1400 audit(1738743749.843:903): avc: denied { create } for pid=12295 comm="syz.8.1526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 411.984603][ T29] audit: type=1400 audit(1738743749.873:904): avc: denied { write } for pid=12295 comm="syz.8.1526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 412.038207][ T29] audit: type=1400 audit(1738743749.883:905): avc: denied { execute } for pid=12295 comm="syz.8.1526" name="file0" dev="tmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 412.141534][ T971] usb 3-1: new low-speed USB device number 41 using dummy_hcd [ 412.295253][ T29] audit: type=1400 audit(1738743749.893:906): avc: denied { execute_no_trans } for pid=12295 comm="syz.8.1526" path="/32/file0" dev="tmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 412.335244][ T29] audit: type=1400 audit(1738743749.893:907): avc: denied { mounton } for pid=12295 comm="syz.8.1526" path="/32/file0" dev="tmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 412.721720][ T971] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 412.735407][ T971] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 412.753334][ T29] audit: type=1400 audit(1738743750.683:908): avc: denied { ioctl } for pid=12301 comm="syz.8.1528" path="socket:[35698]" dev="sockfs" ino=35698 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 412.782441][ T971] usb 3-1: config 0 has no interface number 0 [ 412.794964][ T971] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 412.808250][ T971] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 412.820809][ T29] audit: type=1400 audit(1738743750.723:909): avc: denied { ioctl } for pid=12301 comm="syz.8.1528" path="socket:[36525]" dev="sockfs" ino=36525 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 412.846218][T12305] overlayfs: missing 'lowerdir' [ 412.848282][ T971] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 412.879371][ T971] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 412.894002][ T29] audit: type=1400 audit(1738743750.753:910): avc: denied { mounton } for pid=12304 comm="syz.4.1529" path="/4/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 412.916901][ T971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.926641][ T29] audit: type=1400 audit(1738743750.783:911): avc: denied { sys_module } for pid=12301 comm="syz.8.1528" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 412.950457][ T971] usb 3-1: config 0 descriptor?? [ 412.959898][ T55] Bluetooth: hci4: command 0x0c1a tx timeout [ 413.097053][ T29] audit: type=1400 audit(1738743751.023:912): avc: denied { write } for pid=12310 comm="syz.8.1531" name="fib_trie" dev="proc" ino=4026534340 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 413.170932][T12313] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.1531'. [ 413.194715][T12312] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.1531'. [ 413.261125][ T8] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 413.445975][T12292] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1524'. [ 413.481522][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 413.491461][ T8] usb 5-1: config 2 interface 0 has no altsetting 0 [ 413.511478][ T8] usb 5-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 413.520881][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.530956][T12316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1524'. [ 413.549542][ T8] usb 5-1: Product: syz [ 413.583176][ T55] Bluetooth: hci6: command 0x0c1a tx timeout [ 413.590223][ T55] Bluetooth: hci2: command 0x0405 tx timeout [ 413.600778][ T55] Bluetooth: hci3: command 0x0405 tx timeout [ 413.627037][ T8] usb 5-1: Manufacturer: syz [ 413.660193][ T5827] Bluetooth: hci7: command 0x0c1a tx timeout [ 413.661090][ T8] usb 5-1: SerialNumber: syz [ 413.740072][ T5827] Bluetooth: hci5: command 0x0c1a tx timeout [ 414.190516][ T8] usb 5-1: USB disconnect, device number 6 [ 414.618516][T12319] veth1_to_bond: entered allmulticast mode [ 414.648135][T12342] lo speed is unknown, defaulting to 1000 [ 414.733216][T12291] veth1_to_bond: left allmulticast mode [ 414.734893][ T971] usb 3-1: USB disconnect, device number 41 [ 414.894794][T12342] lo speed is unknown, defaulting to 1000 [ 414.921210][T12350] overlayfs: missing 'lowerdir' [ 415.669598][ T5827] Bluetooth: hci6: command 0x0c1a tx timeout [ 415.739599][ T5827] Bluetooth: hci7: command 0x0c1a tx timeout [ 415.829540][ T5827] Bluetooth: hci5: command 0x0c1a tx timeout [ 417.012926][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 417.027497][ T29] audit: type=1400 audit(1738743754.943:940): avc: denied { name_bind } for pid=12380 comm="syz.4.1549" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 417.049167][ C1] vkms_vblank_simulate: vblank timer overrun [ 417.064040][ T29] audit: type=1400 audit(1738743754.943:941): avc: denied { node_bind } for pid=12380 comm="syz.4.1549" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 417.349527][ T3527] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 417.741187][ T5827] Bluetooth: hci6: command 0x0c1a tx timeout [ 417.787041][ T29] audit: type=1400 audit(1738743755.713:942): avc: denied { create } for pid=12395 comm="syz.2.1552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 417.808164][ T29] audit: type=1400 audit(1738743755.723:943): avc: denied { listen } for pid=12395 comm="syz.2.1552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 417.829302][ T5827] Bluetooth: hci7: command 0x0c1a tx timeout [ 417.836296][ T29] audit: type=1400 audit(1738743755.723:944): avc: denied { ioctl } for pid=12395 comm="syz.2.1552" path="socket:[36826]" dev="sockfs" ino=36826 ioctlcmd=0xae89 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 417.900815][ T5827] Bluetooth: hci5: command 0x0c1a tx timeout [ 418.194149][ T29] audit: type=1400 audit(1738743756.113:945): avc: denied { create } for pid=12397 comm="syz.2.1553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 418.213624][ C1] vkms_vblank_simulate: vblank timer overrun [ 418.293014][ T29] audit: type=1400 audit(1738743756.123:946): avc: denied { create } for pid=12397 comm="syz.2.1553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 418.312814][ C1] vkms_vblank_simulate: vblank timer overrun [ 418.357620][ T29] audit: type=1400 audit(1738743756.123:947): avc: denied { bind } for pid=12397 comm="syz.2.1553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 418.392235][ T29] audit: type=1400 audit(1738743756.273:948): avc: denied { create } for pid=12400 comm="syz.4.1554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 419.302986][ T29] audit: type=1400 audit(1738743756.823:949): avc: denied { read write } for pid=12405 comm="syz.2.1555" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 419.449929][ T5865] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 419.583579][T12428] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 419.616393][T12428] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 419.624381][T12428] gretap1: entered promiscuous mode [ 419.636127][T12428] gretap1: entered allmulticast mode [ 419.675110][ T5865] usb 9-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 419.693037][ T5865] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.732110][ T5865] usb 9-1: config 0 descriptor?? [ 420.595379][T12321] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 420.779572][T12321] usb 3-1: Using ep0 maxpacket: 8 [ 420.804499][T12437] netlink: 'syz.2.1564': attribute type 1 has an invalid length. [ 420.818639][T12321] usb 3-1: unable to get BOS descriptor or descriptor too short [ 420.863986][T12321] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 420.873428][T12321] usb 3-1: can't read configurations, error -71 [ 421.638769][ T5865] usb 9-1: Cannot set autoneg [ 421.676235][ T5865] MOSCHIP usb-ethernet driver 9-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 422.801722][ T1201] usb 9-1: USB disconnect, device number 6 [ 422.935989][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 422.936004][ T29] audit: type=1400 audit(1738743760.863:971): avc: denied { listen } for pid=12470 comm="syz.8.1573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 423.067795][ T29] audit: type=1400 audit(1738743760.863:970): avc: denied { bind } for pid=12470 comm="syz.8.1573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 423.095587][T12318] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 423.108278][T12318] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 423.109110][ T29] audit: type=1400 audit(1738743761.003:972): avc: denied { read } for pid=12477 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 423.139795][T12480] overlay: Unknown parameter 'reiser\s\' [ 423.151652][ T29] audit: type=1400 audit(1738743761.003:973): avc: denied { open } for pid=12477 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 423.151652][T12318] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 423.151689][ T29] audit: type=1326 audit(1738743761.033:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12478 comm="syz.3.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046a38cda9 code=0x7ffc0000 [ 423.208995][ T29] audit: type=1326 audit(1738743761.033:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12478 comm="syz.3.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046a38cda9 code=0x7ffc0000 [ 423.233246][ T29] audit: type=1326 audit(1738743761.033:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12478 comm="syz.3.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f046a38cda9 code=0x7ffc0000 [ 423.257003][ T29] audit: type=1326 audit(1738743761.033:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12478 comm="syz.3.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046a38cda9 code=0x7ffc0000 [ 423.257110][T12318] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 423.301491][T12318] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 423.355643][T12318] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 423.670942][ T29] audit: type=1326 audit(1738743761.033:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12478 comm="syz.3.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046a38cda9 code=0x7ffc0000 [ 423.681124][T12477] lo speed is unknown, defaulting to 1000 [ 423.711511][ T29] audit: type=1326 audit(1738743761.033:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12478 comm="syz.3.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f046a38cda9 code=0x7ffc0000 [ 424.330379][T12488] lo speed is unknown, defaulting to 1000 [ 424.509898][T12477] lo speed is unknown, defaulting to 1000 [ 424.776403][T12477] chnl_net:caif_netlink_parms(): no params data found [ 424.787117][ T5865] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 424.869540][T12488] lo speed is unknown, defaulting to 1000 [ 424.919825][T12477] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.932470][T12477] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.941458][T12477] bridge_slave_0: entered allmulticast mode [ 424.948286][T12477] bridge_slave_0: entered promiscuous mode [ 424.954496][ T5865] usb 5-1: Using ep0 maxpacket: 32 [ 424.967420][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.979215][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.018082][ T5865] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 425.018198][T12477] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.043945][ T5865] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 425.071487][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.079795][T12477] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.087177][T12477] bridge_slave_1: entered allmulticast mode [ 425.094815][ T5865] usb 5-1: config 0 descriptor?? [ 425.163105][T12477] bridge_slave_1: entered promiscuous mode [ 425.189847][T12477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.202129][T12477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.243647][T12477] team0: Port device team_slave_0 added [ 425.255993][T12477] team0: Port device team_slave_1 added [ 425.305435][T12477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.313522][T12477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.342858][T12477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.387994][T12477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.395268][T12477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.423910][T12477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.501655][T12477] hsr_slave_0: entered promiscuous mode [ 425.533864][T12477] hsr_slave_1: entered promiscuous mode [ 425.543890][ T5865] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0011/input/input25 [ 425.556993][T12477] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 425.571949][T12477] Cannot create hsr debugfs directory [ 425.738668][ T5827] Bluetooth: hci8: command tx timeout [ 426.197551][T12518] overlay: Bad value for 'workdir' [ 426.224824][ T5865] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0011/input/input26 [ 426.274517][ T5865] kye 0003:0458:5011.0011: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 426.502215][T12477] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.579970][T12321] usb 5-1: USB disconnect, device number 7 [ 426.651192][T12477] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.808286][T12477] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.848882][T12529] Process accounting resumed [ 426.925260][T12477] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.127647][T12477] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 427.142478][T12477] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 427.155080][T12477] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 427.168038][T12477] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 427.283471][T12477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.321467][T12477] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.332218][T11035] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.339356][T11035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.367108][T12532] Process accounting resumed [ 427.412693][T11493] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.419839][T11493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.829666][ T5827] Bluetooth: hci8: command tx timeout [ 427.943481][T12550] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1593'. [ 427.969271][T12551] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1593'. [ 427.988900][T12477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.008084][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 428.008101][ T29] audit: type=1400 audit(1738743765.933:1005): avc: denied { setopt } for pid=12558 comm="syz.3.1595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 428.097354][T12477] veth0_vlan: entered promiscuous mode [ 428.127072][T12477] veth1_vlan: entered promiscuous mode [ 428.193303][T12477] veth0_macvtap: entered promiscuous mode [ 428.214630][T12477] veth1_macvtap: entered promiscuous mode [ 428.253470][T12477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.280065][T12477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.299587][T12477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.328258][T12477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.349594][T12477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.362403][ T29] audit: type=1400 audit(1738743766.293:1006): avc: denied { read } for pid=12566 comm="syz.2.1597" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 428.369859][T12477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.403826][T12477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.414587][T12477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.439598][ T29] audit: type=1400 audit(1738743766.293:1007): avc: denied { open } for pid=12566 comm="syz.2.1597" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 428.450991][T12477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.489561][T12477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.502214][T12477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.513769][T12477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.524323][T12477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.536094][T12477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.548356][T12477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.559150][T12477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.566935][T12569] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 428.570294][T12477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.600974][ T29] audit: type=1400 audit(1738743766.483:1008): avc: denied { create } for pid=12568 comm="syz.2.1598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 428.658860][T12477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.665806][T12572] overlayfs: failed to clone upperpath [ 428.679866][ T29] audit: type=1400 audit(1738743766.483:1009): avc: denied { write } for pid=12568 comm="syz.2.1598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 428.699350][T12477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.699366][T12477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.699381][T12477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.699397][T12477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.699409][T12477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.699424][T12477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.699435][T12477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.699449][T12477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.724509][ T29] audit: type=1400 audit(1738743766.483:1010): avc: denied { bind } for pid=12568 comm="syz.2.1598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 428.742218][T12477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.760850][ T29] audit: type=1400 audit(1738743766.583:1011): avc: denied { create } for pid=12568 comm="syz.2.1598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 428.771413][T12477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.771432][T12477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.793639][ T29] audit: type=1400 audit(1738743766.613:1012): avc: denied { mount } for pid=12573 comm="syz.4.1599" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 428.839791][T12477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.873958][ C1] vkms_vblank_simulate: vblank timer overrun [ 428.891657][T12477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.902133][T12477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.912741][T12477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.949692][T12321] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 428.958076][T12477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.988029][T12477] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.004013][T12477] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.016343][T12477] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.028419][T12477] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.106869][T12321] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 429.118028][T12321] usb 5-1: config 0 interface 0 has no altsetting 0 [ 429.149561][T12321] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 429.171048][ T3527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.178946][ T3527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.198481][T12321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.220861][T12321] usb 5-1: config 0 descriptor?? [ 429.248053][T12574] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 429.264054][ T3527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.298236][ T3527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.735524][T12321] konepure 0003:1E7D:2DB4.0012: hidraw0: USB HID v1.01 Device [HID 1e7d:2db4] on usb-dummy_hcd.4-1/input0 [ 429.897267][ T29] audit: type=1400 audit(1738743767.823:1013): avc: denied { setattr } for pid=12573 comm="syz.4.1599" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 429.903943][ T971] usb 5-1: USB disconnect, device number 8 [ 429.932149][ T29] audit: type=1400 audit(1738743767.833:1014): avc: denied { write } for pid=12573 comm="syz.4.1599" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 429.971793][ T5827] Bluetooth: hci8: command tx timeout [ 431.605928][T12622] loop2: detected capacity change from 0 to 7 [ 431.614916][T12622] Dev loop2: unable to read RDB block 7 [ 431.624730][T12622] loop2: unable to read partition table [ 431.631265][T12622] loop2: partition table beyond EOD, truncated [ 431.638552][T12622] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 432.060636][ T5827] Bluetooth: hci8: command tx timeout [ 433.035768][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 433.035785][ T29] audit: type=1400 audit(1738743770.963:1021): avc: denied { connect } for pid=12653 comm="syz.0.1621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 433.134104][ T29] audit: type=1400 audit(1738743770.963:1022): avc: denied { setopt } for pid=12653 comm="syz.0.1621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 433.199655][ T29] audit: type=1400 audit(1738743770.963:1023): avc: denied { read } for pid=12653 comm="syz.0.1621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 433.698717][ T29] audit: type=1400 audit(1738743771.623:1024): avc: denied { listen } for pid=12669 comm="syz.4.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 433.903350][T11493] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 433.923772][ T29] audit: type=1400 audit(1738743771.693:1025): avc: denied { getopt } for pid=12669 comm="syz.4.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 434.075123][ T29] audit: type=1400 audit(1738743771.693:1026): avc: denied { ioctl } for pid=12669 comm="syz.4.1626" path="socket:[38619]" dev="sockfs" ino=38619 ioctlcmd=0x5615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 434.215960][ T29] audit: type=1400 audit(1738743772.143:1027): avc: denied { connect } for pid=12669 comm="syz.4.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 434.395687][ T29] audit: type=1400 audit(1738743772.323:1028): avc: denied { read write } for pid=12679 comm="syz.2.1627" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 434.402057][T12683] input: syz0 as /devices/virtual/input/input27 [ 435.046325][ T29] audit: type=1400 audit(1738743772.323:1029): avc: denied { open } for pid=12679 comm="syz.2.1627" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 435.079102][T12689] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1629'. [ 435.169646][ T29] audit: type=1400 audit(1738743772.323:1030): avc: denied { ioctl } for pid=12679 comm="syz.2.1627" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 438.257816][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 438.257832][ T29] audit: type=1400 audit(1738743776.183:1044): avc: denied { name_bind } for pid=12731 comm="syz.0.1641" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 438.680907][ T29] audit: type=1400 audit(1738743776.233:1045): avc: denied { name_connect } for pid=12731 comm="syz.0.1641" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 438.819667][T12734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1640'. [ 439.560284][T12318] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 439.573196][T12318] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 439.581875][T12318] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 439.594549][T12318] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 439.602143][T12318] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 439.609361][T12318] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 439.668206][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.674594][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.737307][T12758] lo speed is unknown, defaulting to 1000 [ 439.770600][T12767] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1648'. [ 440.590062][ T29] audit: type=1400 audit(1738743778.113:1046): avc: denied { bind } for pid=12769 comm="syz.2.1652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 440.631176][T12767] overlayfs: failed to resolve '/&ʐ4()ϫ%݈': -2 [ 440.930805][ T29] audit: type=1400 audit(1738743778.113:1047): avc: denied { accept } for pid=12769 comm="syz.2.1652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 440.951600][ T29] audit: type=1400 audit(1738743778.113:1048): avc: denied { write } for pid=12769 comm="syz.2.1652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 440.971748][ T29] audit: type=1400 audit(1738743778.863:1049): avc: denied { remount } for pid=12752 comm="syz.4.1648" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 441.189606][ T29] audit: type=1400 audit(1738743779.113:1050): avc: denied { setopt } for pid=12781 comm="syz.2.1654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 441.659701][ T5827] Bluetooth: hci9: command tx timeout [ 441.895541][T12758] lo speed is unknown, defaulting to 1000 [ 442.020434][T12794] loop9: detected capacity change from 0 to 7 [ 442.046954][T12794] Dev loop9: unable to read RDB block 7 [ 442.056979][T12794] loop9: unable to read partition table [ 442.067160][T12794] loop9: partition table beyond EOD, truncated [ 442.083131][T12794] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 442.344340][T12758] chnl_net:caif_netlink_parms(): no params data found [ 442.460016][T12758] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.477351][T12758] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.485332][T12758] bridge_slave_0: entered allmulticast mode [ 442.500565][T12758] bridge_slave_0: entered promiscuous mode [ 442.520923][T12758] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.530914][T12758] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.538102][T12758] bridge_slave_1: entered allmulticast mode [ 442.545473][T12758] bridge_slave_1: entered promiscuous mode [ 442.583429][T12758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.595785][T12758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.605775][T12806] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1660'. [ 442.633480][T12806] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1660'. [ 442.649281][T12758] team0: Port device team_slave_0 added [ 442.657754][T12758] team0: Port device team_slave_1 added [ 442.687254][T12758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.709696][T12758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.757503][T12758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.788155][T12758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.795767][T12758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.823168][T12758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.863991][T12758] hsr_slave_0: entered promiscuous mode [ 442.880282][T12758] hsr_slave_1: entered promiscuous mode [ 442.886159][T12758] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 442.893920][T12758] Cannot create hsr debugfs directory [ 443.045581][ T29] audit: type=1400 audit(1738743780.973:1051): avc: denied { read append } for pid=12818 comm="syz.0.1663" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 443.114899][ T29] audit: type=1400 audit(1738743780.973:1052): avc: denied { open } for pid=12818 comm="syz.0.1663" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 443.168799][T12821] overlayfs: failed to clone lowerpath [ 443.676165][ T29] audit: type=1400 audit(1738743781.603:1053): avc: denied { connect } for pid=12827 comm="syz.0.1667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 443.696519][ T29] audit: type=1400 audit(1738743781.603:1054): avc: denied { setopt } for pid=12827 comm="syz.0.1667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 443.731396][ T29] audit: type=1400 audit(1738743781.603:1055): avc: denied { write } for pid=12827 comm="syz.0.1667" name="001" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 443.759303][ T5827] Bluetooth: hci9: command tx timeout [ 443.964537][T12831] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 443.972687][T12831] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 443.982431][T12831] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 443.990231][T12831] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 444.071171][ T29] audit: type=1400 audit(1738743781.883:1056): avc: denied { create } for pid=12827 comm="syz.0.1667" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 444.371185][T12758] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 444.384977][T12758] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 444.396305][T12758] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 444.397535][T12835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1669'. [ 444.403974][ T29] audit: type=1400 audit(1738743782.333:1057): avc: denied { ioctl } for pid=12834 comm="syz.4.1669" path="socket:[39158]" dev="sockfs" ino=39158 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 444.439317][T12835] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.446989][T12835] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.455209][T12835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.465793][T12835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.466555][ T29] audit: type=1400 audit(1738743782.393:1058): avc: denied { name_bind } for pid=12834 comm="syz.4.1669" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 444.496415][ T29] audit: type=1400 audit(1738743782.393:1059): avc: denied { node_bind } for pid=12834 comm="syz.4.1669" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 444.496449][ T29] audit: type=1400 audit(1738743782.413:1060): avc: denied { accept } for pid=12834 comm="syz.4.1669" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 444.582802][ T29] audit: type=1400 audit(1738743782.513:1061): avc: denied { unlink } for pid=12477 comm="syz-executor" name="file0" dev="tmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 444.618480][T12758] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 444.648028][ T29] audit: type=1400 audit(1738743782.573:1062): avc: denied { unlink } for pid=12838 comm="syz.0.1670" name="#43" dev="tmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 444.715599][T12758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.816171][T12758] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.849206][T11054] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.856300][T11054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.906880][T11054] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.914039][T11054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.778862][T12758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.814307][T12758] veth0_vlan: entered promiscuous mode [ 445.819982][ T5827] Bluetooth: hci9: command tx timeout [ 445.844587][T12758] veth1_vlan: entered promiscuous mode [ 445.875548][T12758] veth0_macvtap: entered promiscuous mode [ 445.884490][T12758] veth1_macvtap: entered promiscuous mode [ 445.903150][T12758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.916688][T12758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.935081][T12758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.971953][T12758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.993518][T12758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.016599][T12758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.026688][T12758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.438192][T12758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.458663][T12758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.473394][T12758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.488727][T12758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.514170][T12758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.528474][T12758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.549185][T12758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.564968][T12758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.579604][T12758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.600658][T12758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.631745][T12758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.659327][T12758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.680982][T12758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.693423][ T52] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 446.711045][T12758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.738869][T12758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.762036][T12758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.783491][T12758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.805622][T12758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.826314][T12758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.849645][T12758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.862975][ T52] usb 5-1: Using ep0 maxpacket: 8 [ 446.876295][ T52] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 446.887669][T12758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.903574][ T52] usb 5-1: config 2 has no interface number 0 [ 446.914782][ T52] usb 5-1: config 2 interface 31 has no altsetting 0 [ 446.931226][T12758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.934553][ T52] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 446.953133][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.954460][T12758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.961464][ T52] usb 5-1: Product: syz [ 446.976435][ T52] usb 5-1: Manufacturer: syz [ 446.979833][T12758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.991157][T12758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.999740][ T52] usb 5-1: SerialNumber: syz [ 447.001804][T12758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.017603][T12758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.035495][T12758] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.044414][T12758] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.053317][T12758] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.065992][T12758] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.186240][T11493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.213533][T11493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.255499][T11493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.271414][T11493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.604719][T12872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.614892][T12872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.720562][T12873] xt_TCPMSS: Only works on TCP SYN packets [ 447.899719][ T5827] Bluetooth: hci9: command tx timeout [ 448.341356][ T52] ch9200 5-1:2.31: probe with driver ch9200 failed with error -22 [ 448.572251][T12886] netlink: 'syz.3.1680': attribute type 10 has an invalid length. [ 448.622006][T12886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.645024][T12886] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 449.224154][T12889] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 449.232591][T12889] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 449.241014][T12889] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 449.263940][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 449.263955][ T29] audit: type=1400 audit(1738743787.143:1066): avc: denied { getopt } for pid=12888 comm="syz.3.1681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 449.296705][ T52] usb 5-1: USB disconnect, device number 9 [ 449.309006][ T29] audit: type=1400 audit(1738743787.153:1067): avc: denied { setattr } for pid=12887 comm="syz.1.1682" name="vcsa" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 449.350880][ T29] audit: type=1400 audit(1738743787.283:1068): avc: denied { create } for pid=12896 comm="syz.4.1683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 449.374677][T11490] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 449.418220][ T29] audit: type=1400 audit(1738743787.303:1069): avc: denied { write } for pid=12896 comm="syz.4.1683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 449.537203][ T5827] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 449.936529][ T29] audit: type=1400 audit(1738743787.863:1070): avc: denied { sqpoll } for pid=12903 comm="syz.3.1686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 450.034889][ T29] audit: type=1400 audit(1738743787.943:1071): avc: denied { create } for pid=12911 comm="syz.1.1687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 450.064155][T12912] lo speed is unknown, defaulting to 1000 [ 450.119582][ T29] audit: type=1400 audit(1738743787.943:1072): avc: denied { write } for pid=12911 comm="syz.1.1687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 451.505986][ T29] audit: type=1400 audit(1738743789.313:1073): avc: denied { name_bind } for pid=12925 comm="syz.0.1692" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 451.682599][T12929] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30768 sclass=netlink_route_socket pid=12929 comm=syz.2.1693 [ 451.752068][ T29] audit: type=1400 audit(1738743789.593:1074): avc: denied { bind } for pid=12927 comm="syz.2.1693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 451.785959][T12912] lo speed is unknown, defaulting to 1000 [ 451.884686][ T29] audit: type=1400 audit(1738743789.603:1075): avc: denied { create } for pid=12927 comm="syz.2.1693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 452.503607][T12940] delete_channel: no stack [ 452.522335][T12940] delete_channel: no stack [ 452.905370][T12947] usb usb8: usbfs: process 12947 (syz.1.1699) did not claim interface 0 before use [ 454.363058][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 454.363074][ T29] audit: type=1400 audit(1738743792.293:1079): avc: denied { map } for pid=12965 comm="syz.1.1705" path="socket:[39769]" dev="sockfs" ino=39769 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 454.420325][ T29] audit: type=1400 audit(1738743792.293:1080): avc: denied { read } for pid=12965 comm="syz.1.1705" path="socket:[39769]" dev="sockfs" ino=39769 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 454.621286][T12975] overlayfs: failed to clone lowerpath [ 454.693811][T12977] netlink: 'syz.1.1710': attribute type 8 has an invalid length. [ 454.890272][ T29] audit: type=1400 audit(1738743792.813:1081): avc: denied { execute } for pid=12983 comm="syz.2.1712" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=39816 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 455.048308][T12987] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 455.144800][T12987] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 455.175502][ T29] audit: type=1400 audit(1738743792.823:1082): avc: denied { mount } for pid=12981 comm="syz.1.1713" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 455.356329][T12993] xt_TCPMSS: Only works on TCP SYN packets [ 455.479554][ T52] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 455.671253][ T52] usb 3-1: Using ep0 maxpacket: 16 [ 455.692868][ T52] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.717479][ T52] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.770134][ T52] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 455.820129][ T29] audit: type=1400 audit(1738743793.733:1083): avc: denied { unmount } for pid=12758 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 455.871342][ T52] usb 3-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 455.906119][ T52] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.330087][ T52] usb 3-1: config 0 descriptor?? [ 456.352633][T12999] sp0: Synchronizing with TNC [ 456.622628][T13008] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1719'. [ 456.649076][ T29] audit: type=1400 audit(1738743794.573:1084): avc: denied { getopt } for pid=13007 comm="syz.1.1720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 456.712578][ T29] audit: type=1400 audit(1738743794.633:1085): avc: denied { remount } for pid=13012 comm="syz.0.1721" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 456.898962][T13015] overlay: Unknown parameter 'fowner>00000000000000000000' [ 456.928032][ T29] audit: type=1400 audit(1738743794.843:1086): avc: denied { ioctl } for pid=12990 comm="syz.2.1715" path="socket:[39926]" dev="sockfs" ino=39926 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 457.240375][ T29] audit: type=1400 audit(1738743795.103:1087): avc: denied { map } for pid=12990 comm="syz.2.1715" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 457.348286][ T52] ryos 0003:1E7D:31CE.0013: unbalanced collection at end of report description [ 457.358922][ T52] ryos 0003:1E7D:31CE.0013: parse failed [ 457.365790][ T52] ryos 0003:1E7D:31CE.0013: probe with driver ryos failed with error -22 [ 457.376479][ T52] usb 3-1: USB disconnect, device number 44 [ 457.429714][ T29] audit: type=1400 audit(1738743795.113:1088): avc: denied { execute } for pid=12990 comm="syz.2.1715" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 458.001976][T13037] overlayfs: failed to clone upperpath [ 459.970794][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 459.970809][ T29] audit: type=1400 audit(1738743797.903:1098): avc: denied { name_bind } for pid=13079 comm="syz.3.1741" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 460.289433][T13098] netlink: 'syz.4.1746': attribute type 10 has an invalid length. [ 460.309716][T13098] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1746'. [ 460.429090][ T29] audit: type=1400 audit(1738743798.213:1099): avc: denied { bind } for pid=13097 comm="syz.4.1746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 460.482357][T13098] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 460.502711][T13098] team0: Failed to send options change via netlink (err -105) [ 460.511761][T13098] team0: Port device geneve0 added [ 460.600127][ T5867] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 460.790182][ T5867] usb 5-1: too many endpoints for config 1 interface 0 altsetting 253: 68, using maximum allowed: 30 [ 460.821965][ T5867] usb 5-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 68 [ 460.849365][ T5867] usb 5-1: config 1 interface 0 has no altsetting 0 [ 460.857979][ T5867] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 460.877347][T13109] 9pnet_virtio: no channels available for device syz [ 460.888290][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.947425][T13104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1749'. [ 460.957097][ T29] audit: type=1400 audit(1738743798.873:1100): avc: denied { bind } for pid=13103 comm="syz.2.1749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 460.977699][ T5867] usb 5-1: Product: syz [ 460.996914][ T5867] usb 5-1: Manufacturer: syz [ 461.083968][ T5867] usb 5-1: SerialNumber: syz [ 461.774944][ T29] audit: type=1400 audit(1738743799.693:1101): avc: denied { ioctl } for pid=13129 comm="syz.0.1757" path="socket:[41318]" dev="sockfs" ino=41318 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 461.841331][ T29] audit: type=1400 audit(1738743799.753:1102): avc: denied { bind } for pid=13125 comm="syz.3.1756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 461.976967][ T5867] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 462.156610][T13144] netlink: 'syz.0.1761': attribute type 11 has an invalid length. [ 462.166727][ T29] audit: type=1400 audit(1738743800.093:1103): avc: denied { read append } for pid=13143 comm="syz.0.1761" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 462.198708][ T29] audit: type=1400 audit(1738743800.093:1104): avc: denied { open } for pid=13143 comm="syz.0.1761" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 462.223025][ T29] audit: type=1400 audit(1738743800.123:1105): avc: denied { ioctl } for pid=13143 comm="syz.0.1761" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 462.548246][ T29] audit: type=1400 audit(1738743800.473:1106): avc: denied { read write } for pid=13097 comm="syz.4.1746" name="lp0" dev="devtmpfs" ino=3184 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 462.577001][ C1] usblp0: nonzero write bulk status received: -71 [ 462.588004][ T29] audit: type=1400 audit(1738743800.473:1107): avc: denied { open } for pid=13097 comm="syz.4.1746" path="/dev/usb/lp0" dev="devtmpfs" ino=3184 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 462.597751][ T5867] usb 5-1: USB disconnect, device number 10 [ 462.645110][ T5867] usblp0: removed [ 462.805910][T13150] overlayfs: failed to resolve './file0': -2 [ 463.228980][T13156] team0: entered promiscuous mode [ 463.234183][T13156] team_slave_0: entered promiscuous mode [ 463.249697][T13156] team_slave_1: entered promiscuous mode [ 463.255424][T13156] geneve0: entered promiscuous mode [ 463.571613][ T5867] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 463.891176][ T5867] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 463.905330][ T5867] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 463.947034][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.958952][T13168] FAULT_INJECTION: forcing a failure. [ 463.958952][T13168] name failslab, interval 1, probability 0, space 0, times 0 [ 463.973141][T13168] CPU: 1 UID: 0 PID: 13168 Comm: syz.1.1770 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 463.973161][T13168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 463.973171][T13168] Call Trace: [ 463.973175][T13168] [ 463.973181][T13168] dump_stack_lvl+0x16c/0x1f0 [ 463.973203][T13168] should_fail_ex+0x50a/0x650 [ 463.973225][T13168] ? fs_reclaim_acquire+0xae/0x150 [ 463.973251][T13168] should_failslab+0xc2/0x120 [ 463.973270][T13168] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 463.973288][T13168] ? __alloc_skb+0x2b1/0x380 [ 463.973311][T13168] __alloc_skb+0x2b1/0x380 [ 463.973329][T13168] ? __pfx___alloc_skb+0x10/0x10 [ 463.973349][T13168] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 463.973372][T13168] netlink_alloc_large_skb+0x69/0x130 [ 463.973392][T13168] netlink_sendmsg+0x689/0xd70 [ 463.973414][T13168] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.973442][T13168] ____sys_sendmsg+0xaaf/0xc90 [ 463.973467][T13168] ? copy_msghdr_from_user+0x10b/0x160 [ 463.973486][T13168] ? __pfx_____sys_sendmsg+0x10/0x10 [ 463.973521][T13168] ___sys_sendmsg+0x135/0x1e0 [ 463.973543][T13168] ? __pfx____sys_sendmsg+0x10/0x10 [ 463.973571][T13168] ? __pfx_lock_release+0x10/0x10 [ 463.973591][T13168] ? trace_lock_acquire+0x14e/0x1f0 [ 463.973617][T13168] ? __fget_files+0x206/0x3a0 [ 463.973638][T13168] __sys_sendmsg+0x16e/0x220 [ 463.973658][T13168] ? __pfx___sys_sendmsg+0x10/0x10 [ 463.973691][T13168] do_syscall_64+0xcd/0x250 [ 463.973710][T13168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.973732][T13168] RIP: 0033:0x7fb08498cda9 [ 463.973745][T13168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.973759][T13168] RSP: 002b:00007fb085768038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 463.973775][T13168] RAX: ffffffffffffffda RBX: 00007fb084ba5fa0 RCX: 00007fb08498cda9 [ 463.973785][T13168] RDX: 0000000004004000 RSI: 0000000020002280 RDI: 0000000000000003 [ 463.973795][T13168] RBP: 00007fb085768090 R08: 0000000000000000 R09: 0000000000000000 [ 463.973804][T13168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.973812][T13168] R13: 0000000000000000 R14: 00007fb084ba5fa0 R15: 00007ffce4b5e228 [ 463.973831][T13168] [ 463.974728][ T5867] usb 5-1: config 0 descriptor?? [ 464.599191][T12321] usb 5-1: USB disconnect, device number 11 [ 464.671866][T13155] team0: left promiscuous mode [ 464.676656][T13155] team_slave_0: left promiscuous mode [ 464.735403][T13155] team_slave_1: left promiscuous mode [ 464.763941][T13155] geneve0: left promiscuous mode [ 464.989915][T13183] xt_TCPMSS: Only works on TCP SYN packets [ 464.998608][T13183] bond0: (slave bond2): Error -95 calling ndo_bpf [ 465.026669][T13174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 465.652734][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 465.652750][ T29] audit: type=1400 audit(1738743803.573:1110): avc: denied { setopt } for pid=13191 comm="syz.0.1777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 465.653112][T13192] trusted_key: syz.0.1777 sent an empty control message without MSG_MORE. [ 465.818337][T13202] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1779'. [ 465.852816][T13204] loop9: detected capacity change from 0 to 7 [ 465.877185][T13204] Dev loop9: unable to read RDB block 7 [ 465.889900][T13204] loop9: unable to read partition table [ 465.900960][T13204] loop9: partition table beyond EOD, truncated [ 465.909653][ T53] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 465.936109][T13204] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 466.039616][ T29] audit: type=1400 audit(1738743803.963:1111): avc: denied { ioctl } for pid=13210 comm="syz.3.1783" path="socket:[41419]" dev="sockfs" ino=41419 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 466.873191][ T29] audit: type=1326 audit(1738743804.743:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13207 comm="syz.4.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3265b8cda9 code=0x7fc00000 [ 466.983234][ T29] audit: type=1326 audit(1738743804.743:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13207 comm="syz.4.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3265b8cda9 code=0x7fc00000 [ 467.011714][ T29] audit: type=1326 audit(1738743804.743:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13207 comm="syz.4.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3265b8cda9 code=0x7fc00000 [ 467.141000][T13227] audit: audit_backlog=65 > audit_backlog_limit=64 [ 467.147708][T13227] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 467.155718][T13227] audit: backlog limit exceeded [ 467.171019][T13227] Process accounting resumed [ 467.205001][ T29] audit: type=1326 audit(1738743804.743:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13207 comm="syz.4.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3265b8cda9 code=0x7fc00000 [ 467.250876][ T29] audit: type=1326 audit(1738743804.743:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13207 comm="syz.4.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3265b8cda9 code=0x7fc00000 [ 467.261802][T13231] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1789'. [ 467.311822][T13231] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1789'. [ 467.326684][T13231] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1789'. [ 467.340461][T13231] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1789'. [ 467.769849][ T5926] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 467.949667][ T5926] usb 5-1: Using ep0 maxpacket: 32 [ 467.957317][ T5926] usb 5-1: config 0 has an invalid interface number: 5 but max is 0 [ 467.972356][ T5926] usb 5-1: config 0 has no interface number 0 [ 468.149860][ T5926] usb 5-1: New USB device found, idVendor=2dc8, idProduct=de2b, bcdDevice=51.f0 [ 468.158938][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.167938][ T5926] usb 5-1: Product: syz [ 468.173483][ T5926] usb 5-1: Manufacturer: syz [ 468.178101][ T5926] usb 5-1: SerialNumber: syz [ 468.190092][ T5926] usb 5-1: config 0 descriptor?? [ 468.393718][T13262] dccp_v4_rcv: dropped packet with invalid checksum [ 468.409703][ T5865] usb 5-1: USB disconnect, device number 12 [ 468.737234][T13271] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 468.750449][T13271] netlink: 'syz.2.1801': attribute type 10 has an invalid length. [ 468.964746][T13275] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 469.515569][T13283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1805'. [ 469.538637][T13283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1805'. [ 469.560720][T13283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1805'. [ 469.589864][T13285] loop9: detected capacity change from 0 to 7 [ 469.601002][T13285] Dev loop9: unable to read RDB block 7 [ 469.606601][T13285] loop9: unable to read partition table [ 469.612186][T13283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1805'. [ 469.619165][T13285] loop9: partition table beyond EOD, truncated [ 469.627430][T13285] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 470.459893][T13297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.843843][T13297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.889662][ T5926] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 471.040330][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 471.040345][ T29] audit: type=1400 audit(1738743808.973:1184): avc: denied { execute } for pid=13304 comm="syz.2.1814" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 471.112110][ T5926] usb 5-1: unable to get BOS descriptor or descriptor too short [ 471.120598][ T5926] usb 5-1: not running at top speed; connect to a high speed hub [ 471.138927][ T5926] usb 5-1: config index 0 descriptor too short (expected 10506, got 59) [ 471.167895][ T5926] usb 5-1: config 125 has too many interfaces: 94, using maximum allowed: 32 [ 471.195462][ T5926] usb 5-1: config 125 has an invalid descriptor of length 36, skipping remainder of the config [ 471.219649][ T5926] usb 5-1: config 125 has 1 interface, different from the descriptor's value: 94 [ 471.228969][ T5926] usb 5-1: config 125 interface 0 altsetting 179 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 471.263076][ T5926] usb 5-1: config 125 interface 0 has no altsetting 0 [ 471.278626][ T5926] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 471.291266][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.299278][ T5926] usb 5-1: Product: syz [ 471.307510][ T5926] usb 5-1: Manufacturer: ٔꩩ桭昧撔㘖꾕詌琨뮧⣛笊┬儞ᓹ恜넹礦↼蚶뢟胡න뻦紿䎐茴ע빸禼ꑼ韻壮萝൱쀞󓌮 [ 471.329099][ T5926] usb 5-1: SerialNumber: syz [ 471.547343][ T5926] usb 5-1: bad CDC descriptors [ 471.566241][ T5926] usb 5-1: USB disconnect, device number 13 [ 474.101229][ T29] audit: type=1400 audit(1738743811.573:1185): avc: denied { write } for pid=13344 comm="syz.2.1823" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 474.168347][ T29] audit: type=1400 audit(1738743811.583:1186): avc: denied { write } for pid=13344 comm="syz.2.1823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 474.389852][ T29] audit: type=1400 audit(1738743812.253:1187): avc: denied { create } for pid=13351 comm="syz.4.1826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 474.740637][ T29] audit: type=1400 audit(1738743812.253:1188): avc: denied { setopt } for pid=13351 comm="syz.4.1826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 474.886920][ T29] audit: type=1400 audit(1738743812.813:1189): avc: denied { map } for pid=13358 comm="syz.1.1828" path="socket:[42616]" dev="sockfs" ino=42616 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 474.915207][T13364] netlink: 288 bytes leftover after parsing attributes in process `syz.0.1827'. [ 474.929631][T13364] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1827'. [ 475.056216][ T29] audit: type=1400 audit(1738743812.813:1190): avc: denied { read accept } for pid=13358 comm="syz.1.1828" path="socket:[42616]" dev="sockfs" ino=42616 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 475.169620][ T5865] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 475.320835][ T5865] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 475.336641][ T5865] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 475.347906][ T5865] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 475.361738][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.596143][T13363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.604682][T13363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.944354][ T29] audit: type=1400 audit(1738743813.873:1191): avc: denied { append } for pid=13359 comm="syz.4.1829" name="media5" dev="devtmpfs" ino=973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 475.944865][T12321] usb 5-1: USB disconnect, device number 14 [ 477.053993][ T5926] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 477.136778][T13395] overlayfs: failed to resolve './file1': -2 [ 477.219579][ T5926] usb 3-1: Using ep0 maxpacket: 8 [ 477.235052][ T5926] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 477.263158][ T5926] usb 3-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 477.292655][ T5926] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 477.313330][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.331035][ T5926] usb 3-1: Product: syz [ 477.337963][ T5926] usb 3-1: Manufacturer: syz [ 477.347701][ T5926] usb 3-1: SerialNumber: syz [ 477.461164][ T29] audit: type=1400 audit(1738743815.393:1192): avc: denied { create } for pid=13402 comm="syz.4.1841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 477.729698][ T8] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 477.889572][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 477.896316][ T8] usb 5-1: config 8 has an invalid interface number: 206 but max is 0 [ 477.905749][ T8] usb 5-1: config 8 has no interface number 0 [ 477.911978][ T8] usb 5-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 477.930375][ T8] usb 5-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 477.942166][ T8] usb 5-1: config 8 interface 206 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 477.954278][ T8] usb 5-1: config 8 interface 206 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 477.967554][ T8] usb 5-1: config 8 interface 206 has no altsetting 0 [ 477.976745][ T8] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 477.986237][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.994397][ T8] usb 5-1: Product: syz [ 477.998740][ T8] usb 5-1: Manufacturer: syz [ 478.003529][ T8] usb 5-1: SerialNumber: syz [ 478.036994][ T29] audit: type=1400 audit(1738743815.963:1193): avc: denied { read } for pid=13405 comm="syz.3.1842" path="socket:[41903]" dev="sockfs" ino=41903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 478.148708][T13410] xt_socket: unknown flags 0x50 [ 478.222176][T13404] bridge0: port 3(vlan2) entered blocking state [ 478.228678][T13404] bridge0: port 3(vlan2) entered disabled state [ 478.235607][T13404] vlan2: entered allmulticast mode [ 478.242964][T13404] vlan2: left allmulticast mode [ 478.274463][T13403] bridge0: port 3(vlan2) entered blocking state [ 478.282040][T13403] bridge0: port 3(vlan2) entered disabled state [ 478.289855][T13403] vlan2: entered allmulticast mode [ 478.296519][T13403] vlan2: left allmulticast mode [ 478.336066][ T8] garmin_gps 5-1:8.206: Garmin GPS usb/tty converter detected [ 478.349308][ T8] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 478.375521][ T8] usb 5-1: USB disconnect, device number 15 [ 478.406915][ T8] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 478.428641][ T8] garmin_gps 5-1:8.206: device disconnected [ 479.078920][ T5865] usb 3-1: USB disconnect, device number 45 [ 479.509634][ T5865] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 479.672958][ T5865] usb 3-1: New USB device found, idVendor=0b57, idProduct=d863, bcdDevice=2e.bb [ 479.682237][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.694458][ T5865] usb 3-1: config 0 descriptor?? [ 479.703105][ T5865] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 480.176824][T13424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.208594][T13424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.291555][ T5865] usb 3-1: USB disconnect, device number 46 [ 480.306752][T13427] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1849'. [ 481.209588][T12318] Bluetooth: hci9: command 0x0405 tx timeout [ 481.359179][T13442] xt_TCPMSS: Only works on TCP SYN packets [ 481.504959][ T29] audit: type=1400 audit(1738743819.433:1194): avc: denied { create } for pid=13449 comm="syz.1.1856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 481.840269][T11040] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 482.379092][ T29] audit: type=1400 audit(1738743820.303:1195): avc: denied { read } for pid=13468 comm="syz.3.1862" path="socket:[42765]" dev="sockfs" ino=42765 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 482.525626][ T29] audit: type=1326 audit(1738743820.453:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13476 comm="syz.2.1864" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb180b8cda9 code=0x7ffb0000 [ 482.579824][ T29] audit: type=1400 audit(1738743820.453:1197): avc: denied { write } for pid=13478 comm="syz.3.1865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 483.444410][T13486] syz.4.1867: attempt to access beyond end of device [ 483.444410][T13486] nbd4: rw=0, sector=2, nr_sectors = 2 limit=0 [ 483.458121][T13486] syz.4.1867: attempt to access beyond end of device [ 483.458121][T13486] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 483.473552][T13486] syz.4.1867: attempt to access beyond end of device [ 483.473552][T13486] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 483.494646][T13488] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=49 sclass=netlink_tcpdiag_socket pid=13488 comm=syz.3.1868 [ 483.514750][T13486] syz.4.1867: attempt to access beyond end of device [ 483.514750][T13486] nbd4: rw=0, sector=18, nr_sectors = 2 limit=0 [ 483.529994][T13486] syz.4.1867: attempt to access beyond end of device [ 483.529994][T13486] nbd4: rw=0, sector=30, nr_sectors = 2 limit=0 [ 483.553533][ T29] audit: type=1400 audit(1738743821.483:1198): avc: denied { setopt } for pid=13487 comm="syz.3.1868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 483.583996][T13486] syz.4.1867: attempt to access beyond end of device [ 483.583996][T13486] nbd4: rw=0, sector=36, nr_sectors = 2 limit=0 [ 484.320220][T13505] overlayfs: unescaped trailing colons in lowerdir mount option. [ 484.350940][T13505] overlayfs: failed to clone lowerpath [ 485.453026][ T29] audit: type=1400 audit(1738743823.283:1199): avc: denied { setopt } for pid=13508 comm="syz.4.1876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 485.590946][T13520] xt_TCPMSS: Only works on TCP SYN packets [ 485.928917][ T29] audit: type=1400 audit(1738743823.843:1200): avc: denied { read write } for pid=13516 comm="syz.0.1878" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 486.189748][ T29] audit: type=1400 audit(1738743823.843:1201): avc: denied { open } for pid=13516 comm="syz.0.1878" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 486.456541][ T29] audit: type=1400 audit(1738743824.383:1202): avc: denied { write } for pid=13525 comm="syz.2.1875" name="file0" dev="tmpfs" ino=2107 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 486.456902][T13529] loop2: detected capacity change from 0 to 7 [ 486.496158][ T29] audit: type=1400 audit(1738743824.383:1203): avc: denied { open } for pid=13525 comm="syz.2.1875" path="/384/file0" dev="tmpfs" ino=2107 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 486.522734][T13529] Dev loop2: unable to read RDB block 7 [ 486.528460][T13529] loop2: unable to read partition table [ 486.535061][T13529] loop2: partition table beyond EOD, truncated [ 486.541878][T13529] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 486.553025][ T29] audit: type=1400 audit(1738743824.413:1204): avc: denied { ioctl } for pid=13525 comm="syz.2.1875" path="/384/file0" dev="tmpfs" ino=2107 ioctlcmd=0x1288 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 486.604382][ T5191] Dev loop2: unable to read RDB block 7 [ 486.610128][ T5191] loop2: unable to read partition table [ 486.615878][ T5191] loop2: partition table beyond EOD, truncated [ 486.681565][T13539] tmpfs: Unknown parameter 'nr_injieY' [ 486.714403][ T29] audit: type=1400 audit(1738743824.643:1205): avc: denied { create } for pid=13538 comm="syz.0.1884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 487.184581][ T1201] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 487.406413][T13558] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1889'. [ 487.449521][ T1201] usb 3-1: Using ep0 maxpacket: 32 [ 487.461414][ T1201] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.559589][ T1201] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.580791][ T1201] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 487.609524][ T1201] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.621201][ T1201] usb 3-1: config 0 descriptor?? [ 487.640486][ T1201] hub 3-1:0.0: USB hub found [ 487.854448][ T1201] hub 3-1:0.0: 1 port detected [ 488.062217][ T1201] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 488.069214][ T1201] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 488.101613][ T1201] usbhid 3-1:0.0: can't add hid device: -71 [ 488.108296][ T1201] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 488.150820][ T1201] usb 3-1: USB disconnect, device number 47 [ 488.256062][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 488.256076][ T29] audit: type=1400 audit(1738743826.183:1207): avc: denied { getopt } for pid=13566 comm="syz.3.1891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 488.446182][T13586] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1896'. [ 488.460870][T13586] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1896'. [ 488.524910][T13588] xt_TCPMSS: Only works on TCP SYN packets [ 488.540240][ T29] audit: type=1400 audit(1738743826.473:1208): avc: denied { bind } for pid=13581 comm="syz.1.1894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 488.600576][ T29] audit: type=1400 audit(1738743826.503:1209): avc: denied { listen } for pid=13581 comm="syz.1.1894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 488.648155][ T29] audit: type=1400 audit(1738743826.503:1210): avc: denied { accept } for pid=13581 comm="syz.1.1894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 488.679593][ T5867] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 488.703902][T13591] loop2: detected capacity change from 0 to 7 [ 488.710955][T13591] Dev loop2: unable to read RDB block 7 [ 488.716544][T13591] loop2: unable to read partition table [ 488.723158][T13591] loop2: partition table beyond EOD, truncated [ 488.729425][T13591] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 488.889641][ T5867] usb 5-1: Using ep0 maxpacket: 32 [ 488.968072][ T5867] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 489.049854][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.125894][ T5867] usb 5-1: Product: syz [ 489.148872][ T5867] usb 5-1: Manufacturer: syz [ 489.173971][ T5867] usb 5-1: SerialNumber: syz [ 489.275538][T13596] hpfs: Bad magic ... probably not HPFS [ 489.377940][ T29] audit: type=1326 audit(1738743827.303:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13600 comm="syz.2.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb180b8cda9 code=0x7ffc0000 [ 489.438031][ T29] audit: type=1326 audit(1738743827.333:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13600 comm="syz.2.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb180b8cda9 code=0x7ffc0000 [ 489.471746][ T29] audit: type=1326 audit(1738743827.333:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13600 comm="syz.2.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fb180b8cda9 code=0x7ffc0000 [ 489.539129][ T29] audit: type=1326 audit(1738743827.333:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13600 comm="syz.2.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb180b8cda9 code=0x7ffc0000 [ 489.565757][ T29] audit: type=1326 audit(1738743827.333:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13600 comm="syz.2.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb180b8cda9 code=0x7ffc0000 [ 489.591315][ T29] audit: type=1326 audit(1738743827.333:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13600 comm="syz.2.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fb180b8cda9 code=0x7ffc0000 [ 489.615540][T13603] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1900'. [ 489.687965][ T5867] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 489.694117][ T5867] cdc_ncm 5-1:1.0: bind() failure [ 489.711637][ T5867] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 489.726815][ T5867] cdc_ncm 5-1:1.1: bind() failure [ 489.879546][T12321] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 490.040916][T12321] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 490.051704][T12321] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 490.061583][T12321] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 490.071774][T12321] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 490.080510][T12321] usb 3-1: SerialNumber: syz [ 490.085573][T13614] Process accounting resumed [ 490.224554][T13616] FAULT_INJECTION: forcing a failure. [ 490.224554][T13616] name failslab, interval 1, probability 0, space 0, times 0 [ 490.238180][T13616] CPU: 1 UID: 0 PID: 13616 Comm: syz.0.1905 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 490.238203][T13616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 490.238212][T13616] Call Trace: [ 490.238217][T13616] [ 490.238224][T13616] dump_stack_lvl+0x16c/0x1f0 [ 490.238246][T13616] should_fail_ex+0x50a/0x650 [ 490.238272][T13616] ? fs_reclaim_acquire+0xae/0x150 [ 490.238296][T13616] should_failslab+0xc2/0x120 [ 490.238315][T13616] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 490.238333][T13616] ? __alloc_skb+0x2b1/0x380 [ 490.238355][T13616] __alloc_skb+0x2b1/0x380 [ 490.238373][T13616] ? __pfx___alloc_skb+0x10/0x10 [ 490.238394][T13616] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 490.238417][T13616] netlink_alloc_large_skb+0x69/0x130 [ 490.238437][T13616] netlink_sendmsg+0x689/0xd70 [ 490.238460][T13616] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.238488][T13616] ____sys_sendmsg+0xaaf/0xc90 [ 490.238513][T13616] ? copy_msghdr_from_user+0x10b/0x160 [ 490.238533][T13616] ? __pfx_____sys_sendmsg+0x10/0x10 [ 490.238569][T13616] ___sys_sendmsg+0x135/0x1e0 [ 490.238588][T13616] ? __pfx____sys_sendmsg+0x10/0x10 [ 490.238618][T13616] ? __pfx_lock_release+0x10/0x10 [ 490.238642][T13616] ? trace_lock_acquire+0x14e/0x1f0 [ 490.238669][T13616] ? __fget_files+0x206/0x3a0 [ 490.238691][T13616] __sys_sendmsg+0x16e/0x220 [ 490.238712][T13616] ? __pfx___sys_sendmsg+0x10/0x10 [ 490.238747][T13616] do_syscall_64+0xcd/0x250 [ 490.238765][T13616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.238787][T13616] RIP: 0033:0x7ff4f258cda9 [ 490.238800][T13616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.238816][T13616] RSP: 002b:00007ff4f33bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 490.238832][T13616] RAX: ffffffffffffffda RBX: 00007ff4f27a5fa0 RCX: 00007ff4f258cda9 [ 490.238844][T13616] RDX: 0000000004004000 RSI: 0000000020002280 RDI: 0000000000000003 [ 490.238854][T13616] RBP: 00007ff4f33bf090 R08: 0000000000000000 R09: 0000000000000000 [ 490.238864][T13616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.238874][T13616] R13: 0000000000000000 R14: 00007ff4f27a5fa0 R15: 00007ffe011a9b48 [ 490.238896][T13616] [ 490.477204][T12321] usb 3-1: 0:2 : does not exist [ 490.497360][ T5926] usb 5-1: USB disconnect, device number 16 [ 490.569044][T12321] usb 3-1: USB disconnect, device number 48 [ 490.640338][T13623] loop2: detected capacity change from 0 to 7 [ 490.647717][T13623] Dev loop2: unable to read RDB block 7 [ 490.654362][T13623] loop2: unable to read partition table [ 490.662527][T13623] loop2: partition table beyond EOD, truncated [ 490.668978][T13623] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 490.869084][ T5814] udevd[5814]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 490.951438][ T5926] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 491.137790][ T5926] usb 5-1: config 1 has an invalid interface number: 8 but max is 0 [ 491.146808][ T5926] usb 5-1: config 1 has no interface number 0 [ 491.157022][ T5926] usb 5-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=fd.bf [ 491.166332][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.174817][ T5926] usb 5-1: Product: syz [ 491.179052][ T5926] usb 5-1: Manufacturer: syz [ 491.183976][ T5926] usb 5-1: SerialNumber: syz [ 491.208281][ T5926] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 491.224476][ T5926] dvb-usb: bulk message failed: -22 (3/0) [ 491.265185][ T5926] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 491.291380][ T5926] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19) [ 491.308271][ T5926] dvb_usb_umt_010 5-1:1.8: probe with driver dvb_usb_umt_010 failed with error -22 [ 491.779631][ T8] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 491.940491][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 492.020420][ T8] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 492.059365][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 492.106474][ T8] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 492.135923][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 492.230222][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 492.305402][ T8] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 492.325694][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 492.338079][ T8] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 492.351119][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 492.363128][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 492.383210][ T8] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 492.407639][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 492.438805][ T8] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 492.458924][T13654] x_tables: duplicate underflow at hook 1 [ 492.482274][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 492.514512][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 492.547187][ T8] usb 3-1: string descriptor 0 read error: -22 [ 492.555693][ T8] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 492.575477][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.608257][ T8] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 492.956090][ T8] usb 3-1: USB disconnect, device number 49 [ 493.533056][ T5926] usb 5-1: USB disconnect, device number 17 [ 493.699574][ T8] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 493.886841][ T8] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 493.921312][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 493.950630][ T8] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 494.009560][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 494.023161][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 494.045140][ T8] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 494.073121][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 494.114106][ T8] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 494.142552][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 494.142566][ T29] audit: type=1400 audit(1738743832.073:1243): avc: denied { getopt } for pid=13682 comm="syz.4.1927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 494.142570][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 494.142600][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 494.201057][ T8] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 494.208491][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 494.226102][ T8] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 494.237919][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 494.255203][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 494.344311][ T8] usb 3-1: string descriptor 0 read error: -71 [ 494.359018][ T8] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 494.397496][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.436234][ T8] usb 3-1: can't set config #168, error -71 [ 494.466960][ T8] usb 3-1: USB disconnect, device number 50 [ 494.565715][T13692] FAULT_INJECTION: forcing a failure. [ 494.565715][T13692] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 494.601548][T13692] CPU: 1 UID: 0 PID: 13692 Comm: syz.0.1930 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 494.601575][T13692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 494.601586][T13692] Call Trace: [ 494.601591][T13692] [ 494.601598][T13692] dump_stack_lvl+0x16c/0x1f0 [ 494.601621][T13692] should_fail_ex+0x50a/0x650 [ 494.601648][T13692] _copy_from_iter+0x2a1/0x1560 [ 494.601675][T13692] ? trace_lock_acquire+0x14e/0x1f0 [ 494.601695][T13692] ? __alloc_skb+0x1fe/0x380 [ 494.601715][T13692] ? __pfx__copy_from_iter+0x10/0x10 [ 494.601738][T13692] ? __virt_addr_valid+0x1a4/0x590 [ 494.601759][T13692] ? __virt_addr_valid+0x5e/0x590 [ 494.601781][T13692] ? __phys_addr_symbol+0x30/0x80 [ 494.601798][T13692] ? __check_object_size+0x488/0x710 [ 494.601821][T13692] netlink_sendmsg+0x813/0xd70 [ 494.601845][T13692] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.601872][T13692] ____sys_sendmsg+0xaaf/0xc90 [ 494.601897][T13692] ? copy_msghdr_from_user+0x10b/0x160 [ 494.601918][T13692] ? __pfx_____sys_sendmsg+0x10/0x10 [ 494.601954][T13692] ___sys_sendmsg+0x135/0x1e0 [ 494.601975][T13692] ? __pfx____sys_sendmsg+0x10/0x10 [ 494.602006][T13692] ? __pfx_lock_release+0x10/0x10 [ 494.602027][T13692] ? trace_lock_acquire+0x14e/0x1f0 [ 494.602054][T13692] ? __fget_files+0x206/0x3a0 [ 494.602076][T13692] __sys_sendmsg+0x16e/0x220 [ 494.602096][T13692] ? __pfx___sys_sendmsg+0x10/0x10 [ 494.602131][T13692] do_syscall_64+0xcd/0x250 [ 494.602151][T13692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.602174][T13692] RIP: 0033:0x7ff4f258cda9 [ 494.602188][T13692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.602205][T13692] RSP: 002b:00007ff4f33bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 494.602222][T13692] RAX: ffffffffffffffda RBX: 00007ff4f27a5fa0 RCX: 00007ff4f258cda9 [ 494.602233][T13692] RDX: 0000000004004000 RSI: 0000000020002280 RDI: 0000000000000003 [ 494.602243][T13692] RBP: 00007ff4f33bf090 R08: 0000000000000000 R09: 0000000000000000 [ 494.602254][T13692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.602264][T13692] R13: 0000000000000000 R14: 00007ff4f27a5fa0 R15: 00007ffe011a9b48 [ 494.602285][T13692] [ 494.843165][T13694] ip6tnl1: entered promiscuous mode [ 495.875184][T13718] ipip0: entered promiscuous mode [ 495.938161][ T29] audit: type=1400 audit(1738743833.863:1244): avc: denied { setopt } for pid=13715 comm="syz.1.1937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 496.029627][T13725] tipc: Started in network mode [ 496.034534][T13725] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 496.075044][T13725] tipc: Enabled bearer , priority 10 [ 496.088812][T13718] tipc: Resetting bearer [ 496.230037][T13728] Process accounting resumed [ 496.247050][T13718] tipc: Disabling bearer [ 496.706691][T13740] FAULT_INJECTION: forcing a failure. [ 496.706691][T13740] name failslab, interval 1, probability 0, space 0, times 0 [ 496.725939][T13740] CPU: 0 UID: 0 PID: 13740 Comm: syz.0.1944 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 496.725965][T13740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 496.725976][T13740] Call Trace: [ 496.725982][T13740] [ 496.725989][T13740] dump_stack_lvl+0x16c/0x1f0 [ 496.726013][T13740] should_fail_ex+0x50a/0x650 [ 496.726036][T13740] ? fs_reclaim_acquire+0xae/0x150 [ 496.726062][T13740] should_failslab+0xc2/0x120 [ 496.726082][T13740] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 496.726100][T13740] ? __alloc_skb+0x2b1/0x380 [ 496.726122][T13740] __alloc_skb+0x2b1/0x380 [ 496.726139][T13740] ? __pfx___alloc_skb+0x10/0x10 [ 496.726167][T13740] netlink_ack+0x15f/0xb80 [ 496.726184][T13740] ? __mutex_trylock_common+0xea/0x250 [ 496.726216][T13740] netlink_rcv_skb+0x348/0x440 [ 496.726234][T13740] ? __pfx_crypto_user_rcv_msg+0x10/0x10 [ 496.726257][T13740] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 496.726290][T13740] ? netlink_deliver_tap+0x1ae/0xd30 [ 496.726310][T13740] crypto_netlink_rcv+0x2a/0x40 [ 496.726324][T13740] netlink_unicast+0x53c/0x7f0 [ 496.726344][T13740] ? __pfx_netlink_unicast+0x10/0x10 [ 496.726367][T13740] netlink_sendmsg+0x8b8/0xd70 [ 496.726389][T13740] ? __pfx_netlink_sendmsg+0x10/0x10 [ 496.726414][T13740] ____sys_sendmsg+0xaaf/0xc90 [ 496.726435][T13740] ? copy_msghdr_from_user+0x10b/0x160 [ 496.726453][T13740] ? __pfx_____sys_sendmsg+0x10/0x10 [ 496.726486][T13740] ___sys_sendmsg+0x135/0x1e0 [ 496.726506][T13740] ? __pfx____sys_sendmsg+0x10/0x10 [ 496.726532][T13740] ? __pfx_lock_release+0x10/0x10 [ 496.726553][T13740] ? trace_lock_acquire+0x14e/0x1f0 [ 496.726577][T13740] ? __fget_files+0x206/0x3a0 [ 496.726597][T13740] __sys_sendmsg+0x16e/0x220 [ 496.726616][T13740] ? __pfx___sys_sendmsg+0x10/0x10 [ 496.726654][T13740] do_syscall_64+0xcd/0x250 [ 496.726674][T13740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.726701][T13740] RIP: 0033:0x7ff4f258cda9 [ 496.726715][T13740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.726731][T13740] RSP: 002b:00007ff4f33bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 496.726752][T13740] RAX: ffffffffffffffda RBX: 00007ff4f27a5fa0 RCX: 00007ff4f258cda9 [ 496.726762][T13740] RDX: 0000000004004000 RSI: 0000000020002280 RDI: 0000000000000003 [ 496.726772][T13740] RBP: 00007ff4f33bf090 R08: 0000000000000000 R09: 0000000000000000 [ 496.726780][T13740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.726788][T13740] R13: 0000000000000000 R14: 00007ff4f27a5fa0 R15: 00007ffe011a9b48 [ 496.726808][T13740] [ 497.150304][T13747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1946'. [ 497.239604][ T29] audit: type=1400 audit(1738743835.163:1245): avc: denied { ioctl } for pid=13754 comm="syz.0.1949" path="socket:[44660]" dev="sockfs" ino=44660 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 497.560016][ T29] audit: type=1400 audit(1738743835.483:1246): avc: denied { watch watch_reads } for pid=13766 comm="syz.4.1952" path="/94/file0" dev="tmpfs" ino=537 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 497.909807][T11493] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 498.342423][T13786] Process accounting resumed [ 499.091823][T13795] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1960'. [ 499.232142][T13795] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 499.360215][T13803] lo speed is unknown, defaulting to 1000 [ 499.688264][T13809] loop9: detected capacity change from 0 to 7 [ 499.710154][T13809] Dev loop9: unable to read RDB block 7 [ 499.790309][T13809] loop9: unable to read partition table [ 499.841019][T13809] loop9: partition table beyond EOD, truncated [ 499.868723][T13809] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 500.004620][T13803] lo speed is unknown, defaulting to 1000 [ 500.322131][ T5926] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 500.499636][ T5926] usb 5-1: Using ep0 maxpacket: 32 [ 500.511410][ T5926] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 500.569635][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.598241][ T5926] usb 5-1: config 0 descriptor?? [ 500.625985][ T5926] gspca_main: sq930x-2.14.0 probing 041e:403c [ 500.711522][T13824] lo speed is unknown, defaulting to 1000 [ 500.862846][ T5926] gspca_sq930x: reg_r 001f failed -71 [ 500.868314][ T5926] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 500.927034][ T5926] usb 5-1: USB disconnect, device number 18 [ 500.933147][ T5928] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 501.119976][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.126315][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.237658][ T5928] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 501.296209][T13831] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 501.307986][T13831] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 501.559918][ T29] audit: type=1400 audit(1738743839.463:1247): avc: denied { write } for pid=13828 comm="syz.4.1970" path="socket:[44890]" dev="sockfs" ino=44890 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 501.689692][ T5928] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 52, changing to 4 [ 501.706807][T13824] lo speed is unknown, defaulting to 1000 [ 501.720069][T13832] rdma_rxe: rxe_newlink: failed to add lo [ 501.736430][ T5928] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 13368, setting to 1023 [ 501.742210][ T30] INFO: task kworker/u8:28:11047 blocked for more than 143 seconds. [ 501.758860][ T29] audit: type=1400 audit(1738743839.463:1248): avc: denied { accept } for pid=13828 comm="syz.4.1970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 501.783558][ T5928] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 501.810716][ T30] Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 501.818060][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 501.899549][ T30] task:kworker/u8:28 state:D stack:25808 pid:11047 tgid:11047 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 501.931776][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.949593][ T30] Workqueue: netns cleanup_net [ 501.955773][ T30] Call Trace: [ 501.959135][ T5928] usb 3-1: Product: syz [ 501.965655][ T30] [ 501.975574][ T30] __schedule+0xf43/0x5890 [ 501.991734][ T5928] usb 3-1: Manufacturer: syz [ 502.008681][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 502.021010][ T5928] usb 3-1: SerialNumber: syz [ 502.029702][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 502.052543][ T30] ? __pfx___schedule+0x10/0x10 [ 502.093770][ T30] ? schedule+0x298/0x350 [ 502.110316][ T30] ? __pfx_lock_release+0x10/0x10 [ 502.128789][ T30] ? __mutex_trylock_common+0x78/0x250 [ 502.142211][ T30] ? lock_acquire+0x2f/0xb0 [ 502.151273][ T30] ? schedule+0x1fd/0x350 [ 502.161256][ T30] schedule+0xe7/0x350 [ 502.170980][ T30] schedule_preempt_disabled+0x13/0x30 [ 502.183151][ T30] __mutex_lock+0x6bd/0xb10 [ 502.194394][ T30] ? rdma_dev_change_netns+0x30/0x320 [ 502.205424][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 502.218323][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 502.232369][ T30] ? rdma_dev_change_netns+0x30/0x320 [ 502.244405][ T30] rdma_dev_change_netns+0x30/0x320 [ 502.256466][ T30] rdma_dev_exit_net+0x2de/0x590 [ 502.267102][ T30] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 502.279379][ T30] ? __pfx___might_resched+0x10/0x10 [ 502.291489][ T30] ? __pfx_cfg80211_pernet_exit+0x10/0x10 [ 502.304059][ T30] ? mutex_is_locked+0x17/0x60 [ 502.315118][ T30] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 502.326347][ T30] ops_exit_list+0xb0/0x180 [ 502.336509][ T30] cleanup_net+0x5c6/0xbf0 [ 502.346599][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 502.357180][ T30] ? lock_acquire+0x2f/0xb0 [ 502.367376][ T30] ? process_one_work+0x921/0x1ba0 [ 502.379240][ T30] process_one_work+0x9c5/0x1ba0 [ 502.399867][ T30] ? __pfx_bond_mii_monitor+0x10/0x10 [ 502.405542][ T30] ? __pfx_process_one_work+0x10/0x10 [ 502.416452][ T30] ? assign_work+0x1a0/0x250 [ 502.427465][ T30] worker_thread+0x6c8/0xf00 [ 502.436879][ T30] ? __pfx_worker_thread+0x10/0x10 [ 502.446739][ T30] kthread+0x3af/0x750 [ 502.456841][ T30] ? __pfx_kthread+0x10/0x10 [ 502.469351][ T30] ? lock_acquire+0x2f/0xb0 [ 502.477043][ T30] ? __pfx_kthread+0x10/0x10 [ 502.487150][ T30] ret_from_fork+0x45/0x80 [ 502.491700][ T30] ? __pfx_kthread+0x10/0x10 [ 502.496301][ T30] ret_from_fork_asm+0x1a/0x30 [ 502.501255][ T30] [ 502.507763][ T30] INFO: task syz.7.1244:11214 blocked for more than 144 seconds. [ 502.529208][ T30] Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 502.537049][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 502.557024][ T30] task:syz.7.1244 state:D stack:23728 pid:11214 tgid:11213 ppid:8992 task_flags:0x400140 flags:0x00004004 [ 502.569275][ T30] Call Trace: [ 502.572715][ T30] [ 502.575819][ T30] __schedule+0xf43/0x5890 [ 502.580331][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 502.585548][ T30] ? add_lock_to_list+0x17d/0x390 [ 502.590668][ T30] ? __pfx___schedule+0x10/0x10 [ 502.595560][ T30] ? schedule+0x298/0x350 [ 502.615796][ T5928] cdc_ncm 3-1:1.0: bind() failure [ 502.618154][ T30] ? __pfx_lock_release+0x10/0x10 [ 502.627200][ T30] ? lock_acquire+0x2f/0xb0 [ 502.632070][ T30] ? schedule+0x1fd/0x350 [ 502.636434][ T30] schedule+0xe7/0x350 [ 502.640659][ T30] schedule_timeout+0x244/0x280 [ 502.642825][ T5928] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 502.645523][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 502.659188][ T30] ? mark_held_locks+0x9f/0xe0 [ 502.660618][ T5928] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 502.664101][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 502.677428][ T30] __wait_for_common+0x3e1/0x600 [ 502.681237][ T5928] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 502.682521][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 502.695811][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 502.705654][ T5928] usb 3-1: USB disconnect, device number 51 [ 502.708027][ T30] ? ib_cq_pool_cleanup+0x220/0x360 [ 502.719577][ T30] disable_device+0x170/0x280 [ 502.727115][ T30] ? __pfx_disable_device+0x10/0x10 [ 502.734182][ T30] __ib_unregister_device+0x2b4/0x480 [ 502.741136][ T30] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 502.749573][ T30] ib_unregister_device_and_put+0x5a/0x80 [ 502.755349][ T30] nldev_dellink+0x211/0x300 [ 502.761421][ T30] ? __pfx_nldev_dellink+0x10/0x10 [ 502.766901][ T30] ? cap_capable+0xb3/0x250 [ 502.771919][ T30] ? bpf_lsm_capable+0x9/0x10 [ 502.776881][ T30] ? security_capable+0x7e/0x260 [ 502.782371][ T30] ? ns_capable+0xd7/0x110 [ 502.786838][ T30] ? __pfx_nldev_dellink+0x10/0x10 [ 502.792228][ T30] rdma_nl_rcv_msg+0x388/0x6e0 [ 502.797071][ T30] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 502.802487][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 502.807690][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 502.813077][ T30] ? hlock_class+0x4e/0x130 [ 502.817602][ T30] ? __lock_acquire+0xcc5/0x3c40 [ 502.822599][ T30] rdma_nl_rcv_skb.constprop.0.isra.0+0x2e6/0x450 [ 502.830409][ T30] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 502.837392][ T30] ? netlink_deliver_tap+0x1ae/0xd30 [ 502.842794][ T30] netlink_unicast+0x53c/0x7f0 [ 502.847568][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 502.852999][ T30] netlink_sendmsg+0x8b8/0xd70 [ 502.857764][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 502.863339][ T30] ____sys_sendmsg+0xaaf/0xc90 [ 502.868129][ T30] ? copy_msghdr_from_user+0x10b/0x160 [ 502.873884][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 502.879210][ T30] ___sys_sendmsg+0x135/0x1e0 [ 502.884059][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 502.889279][ T30] ? __pfx_lock_release+0x10/0x10 [ 502.894469][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 502.900237][ T30] ? __fget_files+0x206/0x3a0 [ 502.904936][ T30] __sys_sendmsg+0x16e/0x220 [ 502.914294][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 502.919855][ T30] ? __x64_sys_futex+0x1e1/0x4c0 [ 502.925050][ T30] do_syscall_64+0xcd/0x250 [ 502.930843][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.936754][ T30] RIP: 0033:0x7f4f6958cda9 [ 502.941364][ T30] RSP: 002b:00007f4f6a36d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 502.950004][ T30] RAX: ffffffffffffffda RBX: 00007f4f697a5fa0 RCX: 00007f4f6958cda9 [ 502.957994][ T30] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 000000000000000b [ 502.966082][ T30] RBP: 00007f4f6960e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 502.974192][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 502.982326][ T30] R13: 0000000000000000 R14: 00007f4f697a5fa0 R15: 00007ffcc45a23b8 [ 502.990355][ T30] [ 502.993578][ T30] [ 502.993578][ T30] Showing all locks held in the system: [ 503.001962][ T30] 1 lock held by khungtaskd/30: [ 503.009609][ T30] #0: ffffffff8e1bcbc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 503.027301][ T30] 2 locks held by getty/5583: [ 503.039378][ T30] #0: ffff8880321610a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 503.054439][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 503.064590][ T30] 4 locks held by kworker/u8:28/11047: [ 503.070243][ T30] #0: ffff88801beeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 503.080733][ T30] #1: ffffc9000d4f7d18 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 503.090836][ T30] #2: ffffffff8feddb10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xbf0 [ 503.100206][ T30] #3: ffff88807d2286c0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x30/0x320 [ 503.111508][ T30] 2 locks held by syz.7.1244/11214: [ 503.116679][ T30] #0: ffffffff9ac03178 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv_msg+0x16a/0x6e0 [ 503.127125][ T30] #1: ffff88807d2286c0 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x23b/0x480 [ 503.139387][ T30] 2 locks held by kworker/u8:42/11490: [ 503.144982][ T30] #0: ffff88801cfbd148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 503.155772][ T30] #1: ffffc9000be87d18 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 503.167396][ T30] 2 locks held by syz.5.1365/11674: [ 503.172724][ T30] #0: ffffffff8feddb10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x292/0x6c0 [ 503.182271][ T30] #1: ffff88807d2286c0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x30/0x320 [ 503.193581][ T30] 2 locks held by syz.9.1510/12227: [ 503.198760][ T30] #0: ffffffff8feddb10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x292/0x6c0 [ 503.208343][ T30] #1: ffff88807d2286c0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x30/0x320 [ 503.219649][ T30] 2 locks held by syz.8.1577/12488: [ 503.224823][ T30] #0: ffffffff8feddb10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x292/0x6c0 [ 503.234297][ T30] #1: ffff88807d2286c0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x30/0x320 [ 503.246184][ T30] [ 503.248508][ T30] ============================================= [ 503.248508][ T30] [ 503.266656][ T30] NMI backtrace for cpu 0 [ 503.266671][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 503.266690][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 503.266698][ T30] Call Trace: [ 503.266703][ T30] [ 503.266711][ T30] dump_stack_lvl+0x116/0x1f0 [ 503.266732][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 503.266754][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 503.266775][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 503.266804][ T30] watchdog+0xf62/0x12b0 [ 503.266829][ T30] ? __pfx_watchdog+0x10/0x10 [ 503.266850][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 503.266877][ T30] ? __kthread_parkme+0x148/0x220 [ 503.266893][ T30] ? __pfx_watchdog+0x10/0x10 [ 503.266916][ T30] kthread+0x3af/0x750 [ 503.266936][ T30] ? __pfx_kthread+0x10/0x10 [ 503.266960][ T30] ? __pfx_kthread+0x10/0x10 [ 503.266981][ T30] ret_from_fork+0x45/0x80 [ 503.267001][ T30] ? __pfx_kthread+0x10/0x10 [ 503.267021][ T30] ret_from_fork_asm+0x1a/0x30 [ 503.267049][ T30] [ 503.267055][ T30] Sending NMI from CPU 0 to CPUs 1: [ 503.379443][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x1a/0x20 [ 503.379573][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 503.379585][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 503.379602][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 503.379611][ T30] Call Trace: [ 503.379618][ T30] [ 503.379625][ T30] dump_stack_lvl+0x3d/0x1f0 [ 503.379643][ T30] panic+0x71d/0x800 [ 503.379661][ T30] ? __pfx_panic+0x10/0x10 [ 503.379676][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 503.379698][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 503.379717][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 503.379736][ T30] ? watchdog+0xdcc/0x12b0 [ 503.379757][ T30] ? watchdog+0xdbf/0x12b0 [ 503.379779][ T30] watchdog+0xddd/0x12b0 [ 503.379809][ T30] ? __pfx_watchdog+0x10/0x10 [ 503.379828][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 503.379851][ T30] ? __kthread_parkme+0x148/0x220 [ 503.379867][ T30] ? __pfx_watchdog+0x10/0x10 [ 503.379887][ T30] kthread+0x3af/0x750 [ 503.379905][ T30] ? __pfx_kthread+0x10/0x10 [ 503.379925][ T30] ? __pfx_kthread+0x10/0x10 [ 503.379942][ T30] ret_from_fork+0x45/0x80 [ 503.379961][ T30] ? __pfx_kthread+0x10/0x10 [ 503.379978][ T30] ret_from_fork_asm+0x1a/0x30 [ 503.380002][ T30] [ 503.512670][ T30] Kernel Offset: disabled [ 503.516973][ T30] Rebooting in 86400 seconds..