last executing test programs: 13m59.71605286s ago: executing program 1 (id=1282): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001000)=@raw={'raw\x00', 0x8, 0x3, 0x430, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x360, 0xffffffff, 0xffffffff, 0x360, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x228, 0x270, 0x0, {}, [@common=@inet=@length={{0x28}, {0x2, 0x0, 0x1}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x490) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xea, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x100000, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) 13m58.939448618s ago: executing program 1 (id=1284): ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYRESOCT=r2, @ANYRESDEC=r2, @ANYRES16=r1, @ANYRES32=r0]) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000100, 0x20000000, 0x80000000000004, 0x6, 0x0, {0x0, 0x10041, 0x0, 0xc, 0x2, 0x2, 0x10000, 0x2, 0x0, 0xa000, 0xfffffffc, r5, 0x0, 0x7, 0x57}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x100010, r6, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r7, 0x0, 0x81, &(0x7f0000000200)={'filter\x00', 0x0, 0x0, 0x0, [0x6, 0x4, 0x2680000000000000, 0x7, 0x4, 0x7fffffff], 0x0, 0x0}, 0x78) write$FUSE_INIT(r3, &(0x7f0000004300)={0x50, 0x0, r4, {0x7, 0x26, 0x6caff549, 0xfffffffff323ca46, 0x0, 0xfffc, 0x1, 0x80, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f0000000080)='./file0/file0\x00', 0x1) syz_fuse_handle_req(r3, &(0x7f0000002100)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0xa0, 0xfffffffffffffff5, 0xb, {{0x3, 0x0, 0x800, 0xbafd, 0x2, 0x8, {0x0, 0xd, 0x5, 0xfffffffffffdfff5, 0xd, 0x4, 0x1, 0x6, 0x4, 0x8000, 0xfff, r5, 0x0, 0x0, 0x2}}, {0x0, 0xa}}}, 0x0, 0x0}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000040)) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) r8 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r10, 0xae80, 0x0) 13m56.600425469s ago: executing program 1 (id=1292): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000370000feffff1085000000ae00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13m56.441739361s ago: executing program 1 (id=1295): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) syz_open_dev$video4linux(&(0x7f0000001600), 0x5, 0xe0c61) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setopts(0x4200, r4, 0x8, 0x100001) read$msr(r3, &(0x7f000001aa40)=""/102392, 0x18ff8) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x104, 0x4, 0x3c0, 0x0, 0xe8, 0xe8, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe0}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r6, 0x5412, 0x0) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000400)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xf73f728008fec34a}, 0x801) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 13m55.15558772s ago: executing program 1 (id=1297): sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000000)="e4836d513bcab6b90efd3ebcdfc597b9a7e727a3ece8daadf4b04a69b21dfd745934e8870086d4dcd91c1c9a69f5d303d175b4bcc0da016fb4be47336b3557b59b09b0bce1bace8b3eb86e9f3e3b4244a7bd9bad12f2ae80c3f5a6a08634b6f70ef4d694f97312f472beb24c47fbd19e9e7b2b8c851592d64758d2ff1ac341f208c6d28c62c00052de2165ad708bf2af7551a3db18c1315d89e480c2b6c35b5b3cfb67b110c0320acb9ef107cad8d463534bf85c32818e900374ee12822cacd3ab1cce26bd76299bbb1218e2bb99e46314cc40aa7ac7efe2d8a48a9c464e26adb85f0e5c00043cc8917a962fe33a589be315bc0b6b0500000033e40768e4bf8d4bf27013be64c89be276a0410ff80e298c45a5d0105424d94a869372adee93bc25c4cb8e9599860e2bbd60b6142c2c3e65074ee1bc4443db9b4b94217c3d3440713f56ec694f4fb8c9fad50493ffefe7a18795703be88c81b71ddb5124212aaba5f85b9b3635d0eca0fb44e16a529fb039184e63389b9e2c13effd296fb791aaeb37831976cb81d0052503780dc51f4ab13d0f4ea1135ec50682728a9fb26f2b483b1649e855ce7c152e6df39f95952737", 0x1b1}], 0x1, 0x0, 0x0, 0x40054}, 0x4040884) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000006c0)={0x34, &(0x7f0000000440)={0x20, 0x5, 0x11, "07eccb39332f8c57863d960139d1f4901f"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4028af11, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x64}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) 13m53.155119553s ago: executing program 1 (id=1307): openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb32, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff001f00000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (fail_nth: 1) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) splice(r7, 0x0, r6, 0x0, 0xffffffffffff8000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) fcntl$getown(r5, 0x9) write$P9_RLERRORu(r6, &(0x7f0000000100)=ANY=[], 0xe) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r9, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) r10 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 13m37.708096779s ago: executing program 32 (id=1307): openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb32, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff001f00000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (fail_nth: 1) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) splice(r7, 0x0, r6, 0x0, 0xffffffffffff8000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) fcntl$getown(r5, 0x9) write$P9_RLERRORu(r6, &(0x7f0000000100)=ANY=[], 0xe) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r9, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) r10 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 3m57.04354946s ago: executing program 2 (id=3469): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNGETVNETLE(r3, 0x800454dd, 0xfffffffffffffffc) 3m55.610441904s ago: executing program 2 (id=3473): r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, 0x0, 0x0, 0x20008080, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet6(0xa, 0x6, 0xb2) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x2, 0x100}, {0x5}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x21, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000400)=0x1615, 0x4) close_range(r2, r2, 0x2) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000f40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000540)={0x9a0, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4b4c, 0x52}}}}, [@NL80211_ATTR_TID_CONFIG={0x978, 0x11d, 0x0, 0x1, [{0x918, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x208, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x9, 0x533, 0xff, 0x4, 0x2, 0x1, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x4, 0x4, 0x48, 0x6, 0x9, 0x16, 0x6, 0xc, 0x1, 0x18, 0x4, 0x6c, 0x12, 0x2, 0x2, 0x15, 0x18, 0x6, 0x16, 0x18]}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x5, 0x2}, {0x3, 0x3}, {0x0, 0x1}, {0x6, 0x4}, {0x3, 0x9}, {0x0, 0xa}, {0x5, 0x4}, {0x4, 0x4}, {0x0, 0x5}, {0x5, 0x6}, {0x5, 0x9}, {0x1, 0x3}, {0x6, 0x3}, {0x2, 0x8}, {0x1, 0x9}, {0x1}, {0x3, 0x3}, {0x4, 0x7}, {0x2, 0x1}, {0x7, 0x1}, {0x6, 0x9}, {0x1, 0x5}, {0x0, 0x3}, {0x5, 0x6}, {0x6, 0x1}, {}, {0x5, 0x1}, {0x0, 0x8}, {0x1, 0x7}, {0x1, 0x8}, {0x2, 0x7}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x7}, {0x1, 0x9}, {0x7, 0x3}, {0x0, 0x8}, {0x4}, {0x6}, {0x0, 0x2}, {0x3, 0x1}, {0x4, 0x6}, {0x6}, {0x3, 0x4}, {0x4, 0x3}, {0x0, 0x6}, {0x3, 0x5}, {0x1, 0x4}, {0x7, 0x6}, {0x0, 0x6}, {0x6, 0x2}, {0x0, 0x2}, {0x6, 0x4}, {0x7, 0x6}, {0x6, 0xa}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x5, 0x8}, {0x2, 0x6}, {0x0, 0x6}, {0x3, 0x4}, {0x4, 0x8}, {0x2, 0x3}, {0x6, 0x3}, {0x1, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x400, 0x9, 0x2, 0x1, 0x2, 0xb, 0x442d]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4e, 0x5, 0xfffa, 0x6, 0x0, 0x66da, 0x5, 0x6]}}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x6, 0x6]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0x7, 0x3, 0x1, 0x2, 0x15, 0x9a8f, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x4, 0xbc7, 0x4365, 0x1, 0x0, 0x8, 0xfe01]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x7, 0x1}, {0x6, 0x3}, {0x1, 0x3}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0xa}, {0x2, 0x5}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x2}, {0x5}, {0x0, 0x6}, {0x4, 0x2}, {0x3, 0x5}, {0x3, 0x4}, {0x6, 0xa}, {0x0, 0x2}, {0x1, 0xa}, {0x0, 0xa}, {0x4, 0x3}, {0x5, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x6, 0x2}, {0x1, 0x1}, {0x4, 0x5}, {0x5, 0x9}, {}, {0x0, 0x2}, {0x7, 0x6}, {0x7, 0x2}, {0x7, 0x5}, {0x4, 0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x3}, {0x2, 0xa}, {0x4, 0x7}, {0x3, 0x6}, {0x5, 0x2}, {0x2, 0x1}, {0x0, 0x3}, {0x1, 0x6}, {0x7, 0x1}, {0x2, 0x8}, {0x6, 0xa}, {0x7, 0x4}, {0x5, 0x5}, {0x1, 0x7}, {0x4, 0xa}, {0x4, 0x6}, {0x4, 0x3}, {0x3, 0x8}, {0x7, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x6, 0x94cf, 0x2, 0x87b5, 0x5, 0x8000, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x7, 0x9}, {0x1}, {0x2, 0x5}, {0x7, 0x3}, {0x5, 0x4}, {0x0, 0x9}, {0x5, 0x6}, {0x2, 0x5}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x3}, {0x0, 0x7}, {0x1, 0x4}, {0x4, 0x5}, {0x0, 0x8}, {0x4, 0x7}, {0x4, 0x4}, {0x1, 0x1}, {0x5, 0x9}, {0x1, 0xa}, {0x6, 0x9}, {0x3, 0x1}, {0x2, 0xa}, {}, {0x2, 0x3}, {0x6, 0x7}, {0x4}, {0x0, 0x3}, {0x1, 0x1}, {0x7, 0x2}, {0x1, 0x6}, {0x7, 0x8}, {0x2, 0x8}, {0x3, 0x9}, {0x3}, {0x3, 0x8}, {0x4, 0x5}, {0x0, 0x3}, {0x7, 0xa}, {0x4, 0x2}, {0x5, 0x7}, {0x0, 0xa}, {0x5, 0x8}, {0x0, 0x8}, {0x2, 0x5}, {0x0, 0x9}, {0x0, 0x5}, {0x6, 0x6}, {0x1, 0x2}, {0x1, 0x2}, {0x6, 0x9}, {0x0, 0x3}, {0x1, 0x3}, {0x5, 0x8}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x6, 0x12, 0x6c, 0x3, 0x24, 0x18, 0x18, 0x36, 0x6c, 0x30, 0x6c, 0x1, 0x18, 0x6, 0x16, 0x2]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x12, 0xb, 0x30, 0x2, 0x30, 0x60, 0x5]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcd}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1f8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x60, 0x1b, 0x9, 0x1, 0x21, 0x0, 0xc, 0x1b, 0x36, 0x24, 0x9, 0x48, 0x36, 0x1, 0x0, 0x1, 0x2, 0x18, 0x16, 0x6d, 0x9, 0x0]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x18, 0x24, 0x7f05e48934e1a774, 0x0, 0x1b, 0x48, 0x6c, 0x2, 0x1, 0x3, 0x2, 0x16, 0x5, 0x24, 0xb, 0x74, 0x50, 0x4, 0x4, 0x24, 0x16, 0xc, 0x1b, 0xb, 0x30, 0x18, 0x4, 0x18, 0xb, 0x60]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb4, 0x2, 0x5, 0x6, 0x10, 0x8, 0x4, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x6, 0x3, 0xb79, 0x40, 0x40, 0x2, 0x2]}}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x5, 0xa}, {0x1, 0xa}, {0x0, 0x9}, {0x5, 0x6}, {0x6, 0x3}, {0x2}, {0x6, 0x6}, {0x7, 0x6}, {0x3, 0x6}, {0x2, 0x5}, {0x6, 0x2}, {0x2, 0xa}, {0x2, 0x4}, {0x1, 0x9}, {0x1, 0x8}, {0x7, 0x5}, {0x2, 0x7}, {0x0, 0x4}, {0x5, 0xa}, {0x2, 0x4}, {0x7, 0x3}, {0x0, 0x5}, {0x3, 0x1}, {0x1}, {0x0, 0x5}, {0x1, 0x8}, {0x7, 0x1}, {0x6, 0x3}, {0x3, 0x6}, {0x7, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x1, 0x7}, {0x2, 0x8}, {0x5, 0x4}, {0x7, 0x6}, {0x6, 0x1}, {0x2, 0x9}, {0x0, 0x4}, {0x1, 0x8}, {0x2}, {0x0, 0x6}, {0x4, 0x4}, {0x0, 0x4}, {0x2, 0x2}, {0x1, 0x1}, {0x5, 0x7}, {0x0, 0x9}, {0x0, 0x3}, {0x3, 0x6}, {0x5, 0x6}, {0x3, 0x8}, {0x7, 0x5}, {0x2, 0xa}, {0x6, 0x9}, {0x2, 0x4}, {0x6, 0x9}, {0x2, 0x9}, {0x3, 0x3}, {0x1}, {0x0, 0x4}, {0x5}, {0x6, 0x8}, {0x7}, {0x7, 0x4}, {0x1}, {0x1, 0x7}, {0x0, 0x5}, {0x2}, {0x4, 0x5}, {0x3, 0x5}]}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xbf, 0xaa2, 0xdbe, 0x5, 0x101, 0x100, 0x0, 0x401]}}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x500, 0x0, 0x2, 0xfff7, 0x1d, 0x4, 0x800, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0x9, 0xdc3c, 0x3, 0xa7, 0x7fff, 0x4, 0x1]}}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x2, 0x8}, {0x2, 0x1}, {0x5, 0x8}, {0x7, 0x1}, {0x2, 0x8}, {0x5}, {0x6, 0x6}, {0x0, 0x1}, {0x4, 0x7}, {0x2, 0x9}, {0x4, 0x6}, {0x7, 0x3}, {0x1, 0x8}, {0x4, 0x2}, {0x6, 0x2}, {0x3, 0xa}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0x5, 0x4, 0x3, 0x4359, 0x400, 0x6]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0xb, 0x5, 0x60, 0x48, 0x12, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x7, 0x7}, {0x0, 0x5}, {0x1, 0x4}, {0x2, 0x1}, {0x5, 0x9}, {0x7, 0x1}, {0x7, 0x4}, {0x1, 0x6}, {0x1, 0xa}, {0x7, 0x6}, {0x1, 0x6}, {0x0, 0x5}, {0x1, 0x2}, {0x7, 0x9}, {0x3, 0x3}, {0x5, 0x4}, {0x1, 0xa}, {0x4, 0x2}, {0x1, 0x3}, {0x3, 0x4}, {0x1}, {0x1, 0x9}, {0x7, 0x6}, {0x1, 0x4}, {0x1, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x8}, {0x6, 0x2}, {0x5}, {0x1, 0x4}, {0x3, 0x8}, {0x0, 0x2}, {0x7, 0x6}, {0x0, 0x7}, {0x7}, {0x2, 0x1}, {0x4}, {0x1, 0x5}, {0x7, 0x2}, {0x4, 0xa}, {0x3, 0x7}, {0x6, 0x2}, {0x6, 0xa}, {0x0, 0x3}, {0x0, 0x1}, {0x6, 0x7}, {0x5, 0x9}, {0x1, 0x2}, {0x5, 0x2}, {0x4, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x1, 0x4}, {0x4, 0xa}, {0x4, 0x8}, {0x5}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x0, 0x4}, {0x6}, {0x4, 0x7}, {0x2, 0x6}, {0x6, 0x1}, {0x0, 0x5}, {0x7, 0xa}, {0x5, 0x7}, {0x4, 0x9}, {0x4, 0x8}, {0x2}, {0x1, 0x5}, {0x5}, {0x0, 0x6}, {0x1, 0xa}, {0x1, 0x2}, {0x1, 0x9}, {0x1, 0x1}, {0x1, 0x2}, {0x1, 0x9}, {0x5, 0x6}, {0x3, 0x3}, {0x6, 0x3}, {0x2, 0x1}, {0x3, 0x5}, {0x6}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc0}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x144, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x4, 0x1, 0x24, 0x60, 0x5e, 0x24, 0x2, 0x3, 0x36, 0x18, 0x2, 0x16, 0x1, 0x9, 0x1, 0x60, 0x9, 0x60, 0x18, 0x60, 0x54, 0x1b, 0x6, 0x23, 0x5, 0x9, 0x36, 0x1, 0x2, 0xb, 0x30, 0x48]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x0, 0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x4, 0x6}, {0x1, 0x6}, {0x0, 0x5}, {0x1, 0x7}, {0x1}, {0x7, 0x7}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x6}, {0x1, 0x5}, {0x7, 0x9}, {0x2, 0x4}, {0x2, 0x7}, {0x3, 0x9}, {0x0, 0x2}, {0x6, 0x6}, {0x4, 0x2}, {0x6}, {0x7, 0x3}, {0x2, 0x2}, {0x4, 0x7}, {0x1, 0x5}]}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x4, 0x1b, 0x1, 0x9, 0x3, 0x1b, 0x18, 0x48, 0x6, 0x12, 0x18, 0x3, 0x36, 0x1, 0x6, 0x60, 0xc, 0x24, 0x6c, 0x3, 0x4, 0x18, 0x18, 0x37, 0x1, 0x1b, 0x60, 0x3, 0x60, 0x16, 0x18]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2a, 0x2, [{0x2, 0xa}, {0x3, 0x2}, {0x4, 0x3}, {0x5}, {0x3}, {0x7, 0x4}, {0x6, 0x8}, {0x0, 0x3}, {0x6, 0x8}, {0x4, 0x4}, {0x0, 0xa}, {}, {0x7, 0x2}, {0x1, 0x5}, {0x1, 0x7}, {0x0, 0x2}, {0x0, 0x4}, {0x6, 0x8}, {0x3, 0x3}, {0x6, 0xa}, {0x0, 0x8}, {0x1, 0x7}, {0x0, 0x8}, {0x3, 0x1}, {0x5, 0x8}, {0x2, 0x3}, {0x0, 0x5}, {0x7, 0x9}, {0x0, 0x9}, {0x0, 0x8}, {0x5, 0x3}, {0x0, 0x5}, {0x0, 0x3}, {0x0, 0x6}, {0x0, 0x7}, {0x1, 0xa}, {0x0, 0x1}, {0x2, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x7, 0x4}, {0x1, 0x1}, {0x1, 0xa}, {0x0, 0x8}, {0x7, 0x2}, {0x4, 0x6}, {0x7}, {0x6, 0x5}, {0x5, 0x5}, {0x0, 0x4}, {0x4, 0x3}, {0x5, 0x1}, {0x2, 0x7}, {0x7}, {0x1, 0x4}, {0x3, 0x2}, {0x1, 0x2}, {0x2, 0x4}, {0x7, 0x6}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x3}, {0x6, 0x8}, {0x1, 0x4}, {0x3, 0xa}, {0x4}, {0x3, 0x6}, {0x4, 0x1}, {0x2, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x18, 0xb, 0x24, 0x18, 0x3, 0x1, 0x60, 0x60, 0x1b, 0x48]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x3a8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x5, 0x7ff, 0x7, 0x1c00, 0x2, 0x3, 0x6f8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x6, 0x6, 0x7, 0x81, 0x6, 0x4, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x3, 0x1c, 0x6c, 0x30, 0x2, 0x60, 0xb, 0x60, 0x6, 0x36, 0x62, 0x36, 0x34, 0x9, 0x48, 0x5d, 0xb, 0xb, 0x1b, 0x9, 0x16, 0x16, 0x48, 0xb, 0x36, 0x30, 0x30]}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x4, 0x2}, {0x2, 0x2}, {0x0, 0x4}, {0x1}, {0x7, 0x2}, {0x0, 0x8}, {0x2}, {0x5, 0x2}, {0x1, 0x5}, {0x1, 0xa}, {0x2, 0x4}, {0x2, 0x5}, {0x3, 0x1}, {0x3, 0x4}, {0x2, 0x7}, {0x3, 0x3}, {0x6, 0x3}, {0x2, 0x6}, {0x4, 0x5}, {0x7, 0x7}, {0x7, 0x5}, {0x2, 0x9}, {0x4, 0x2}, {0x1, 0x9}, {0x0, 0x5}, {0x5, 0x4}, {0x5, 0xa}, {0x7, 0x7}, {0x1}, {0x1, 0x9}, {0x7}, {0x1, 0x9}, {0x1, 0x5}, {0x3, 0x3}, {0x4, 0x2}, {}, {0x3, 0x8}, {0x2, 0x9}, {0x2, 0x6}, {0x4, 0x13}, {0x3, 0x3}, {0x0, 0x4}, {0x6, 0xa}, {0x0, 0x8}, {0x1, 0x7}, {0x7, 0x6}, {0x5, 0x7}, {0x1, 0x9}, {0x3, 0xa}, {0x1, 0xa}, {0x3, 0x4}, {0x2, 0xa}, {0x0, 0xa}, {0x5, 0x8}, {0x0, 0x5}, {0x1}, {0x5, 0x8}, {0x1, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x6, 0x1, 0x4, 0x30, 0x8, 0x7, 0x3]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x2, 0x18, 0x16, 0xc]}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1c, 0x36, 0x3, 0xb, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x4e97, 0x4, 0x5, 0x9, 0x2, 0x4, 0x4a6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1e, 0x2, [{0x2, 0x7}, {0x1, 0x9}, {0x4, 0x4}, {0x5, 0x6}, {0x6, 0x9}, {0x0, 0x1}, {0x5, 0x6}, {0x2, 0xa}, {0x6, 0x9}, {0x0, 0x8}, {0x3, 0x3}, {0x1, 0x9}, {0x2, 0x1}, {0x5, 0x7}, {0x4, 0x1}, {0x1, 0x8}, {0x0, 0x8}, {0x7, 0x6}, {0x0, 0xa}, {0x5, 0xa}, {0x2, 0x8}, {0x0, 0x4}, {0x7, 0x9}, {0x1, 0xa}, {0x4, 0xa}, {0x6, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x80, 0xa181, 0x7, 0x5, 0x3, 0xfff8, 0x5]}}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8c40, 0x1ff, 0x6, 0x1, 0x6, 0x200, 0x5, 0xea]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x3, 0x3}, {0x3, 0x9}, {0x2, 0x7}, {0x0, 0x7}, {0x1}, {0x6, 0x2}, {0x7, 0x5}, {}, {0x4, 0x1}, {0x0, 0x6}, {0x1, 0x8}, {0x3, 0x7}, {0x1, 0x9}, {0x3, 0x4}, {0x0, 0x8}, {0x0, 0x8}, {0x5}, {0x7, 0x9}, {0x4, 0x2}, {0x5, 0x6}, {0x5, 0x3}, {0x6, 0xa}, {0x1, 0x4}, {0x6, 0x4}, {0x6, 0x2}, {0x1, 0x9}, {0x3, 0x8}, {0x5, 0x8}, {0x4}, {0x4, 0x8}, {0x7}, {0x5, 0x1}, {0x7, 0x6}, {0x6}, {0x7, 0x2}, {0x4, 0x3}, {0x6, 0x7}, {0x4, 0x5}, {0x1}, {0x4, 0x9}, {0x2, 0x3}, {0x4, 0x1}, {0x6, 0x6}, {0x7, 0x9}, {0x5, 0xa}, {0x5, 0xa}, {0x1, 0x8}, {0x4, 0x3}, {0x0, 0x7}, {0x1, 0x9}, {0x1, 0x5}, {0x4}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x5}, {0x4, 0x4}, {0x1, 0x4}, {0x5, 0x6}, {0x1, 0xa}, {0x1, 0x9}, {0x7, 0x1}, {0x6, 0x7}, {0x1, 0xa}, {0x1, 0x3}, {0x2, 0x4}, {0x3, 0x5}, {0x1, 0x7}, {0x4, 0x1}, {0x3, 0xa}, {0x0, 0x9}, {0x6, 0x5}, {0x3, 0x8}, {0x1, 0x4}, {0x5, 0xa}, {0x5, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x48, 0x9, 0x12, 0x48, 0x30, 0x12, 0x24, 0x6c, 0x9, 0x18]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x0, 0x6, 0x6, 0x8, 0x2, 0x1, 0xfb5b]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x4, 0x8, 0x6, 0x4, 0xc0, 0x1ff, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x7, 0x3}, {0x2, 0x4}, {0x1, 0x6}, {0x3, 0x4}, {0x5, 0x5}, {0x2, 0x8}, {0x0, 0x7}, {0x1, 0x2}, {0x6, 0x7}, {0x0, 0x7}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x6, 0x5}, {0x5, 0x2}, {0x3, 0x3}, {0x7, 0x8}, {0x3, 0x3}, {0x7, 0x7}, {0x0, 0x4}, {0x3, 0x6}, {0x2, 0x4}, {0x0, 0x7}, {0x3, 0x9}, {0x7, 0xa}, {0x5, 0x3}, {0x7}, {0x4, 0x1}, {0x1, 0x9}, {0x5, 0x4}, {0x5, 0x1}, {0x5, 0x9}, {0x7}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x2}, {0x5}, {0x7, 0x9}, {0x4, 0x9}, {0x5, 0x4}, {0x7, 0x2}, {0x0, 0x4}, {0x0, 0x9}, {0x5, 0x6}, {0x0, 0x6}, {0x1, 0x2}, {0x4, 0x9}, {0x1, 0x3}, {0x3, 0x4}, {0x7, 0x4}, {0x2, 0x9}, {0x4, 0xa}, {0x3, 0x9}, {0x2, 0x1}, {0x2, 0xa}, {0x1, 0x6}, {0x1, 0x8}, {0x1, 0x7}, {0x1, 0x4}, {0x6, 0x7}, {0x7}, {0x2, 0x6}, {0x1}, {0x4}, {0x0, 0xa}]}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x3, 0x9}, {0x3, 0x6}, {0x4, 0x1}, {0x6, 0x1}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x4}, {}, {0x1, 0x3}, {0x3, 0x5}, {0x3, 0x4}, {0x3}, {0x6, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x1, 0xa}, {0x6, 0x6}, {0x1, 0x3}, {0x4, 0x3}, {0x3}, {0x7, 0x9}, {0x5, 0x8}, {0x1, 0xa}, {0x2, 0x3}, {0x2, 0x1}, {0x5, 0xa}, {0x6, 0x8}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0xa}, {0x2, 0xa}, {0x0, 0x6}, {0x2, 0xa}, {0x5}, {0x6, 0x7}, {0x5, 0x5}, {0x1, 0xa}, {0x5, 0x4}, {0x1, 0x6}, {0x6, 0x4}, {0x6, 0xa}, {0x0, 0xa}, {0x7, 0x2}, {0x0, 0x9}, {0x4}, {0x3, 0x4}, {0x7, 0xa}, {0x3, 0x7}, {0x4, 0x4}, {0x3, 0x5}, {0x6, 0x8}, {0x5}, {0x7, 0x6}, {0x7, 0x4}, {0x2, 0x1}, {0x1, 0x8}, {0x0, 0xa}, {0x1, 0x2}, {0x5, 0x1}, {0x7, 0x9}, {0x1, 0x2}, {0x7, 0x5}, {0x2, 0xa}, {0x6, 0x6}, {0x5, 0x9}, {0x1, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0xe4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x3, 0xb80, 0x8, 0xc992, 0xf000, 0xffff, 0x1]}}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x6, 0x3}, {0x1, 0x1}, {0x3, 0x9}, {0x4, 0x8}, {0x1, 0xa}, {0x6, 0x9}, {0x0, 0x4}, {0x6, 0x4}, {0x4, 0x8}, {0x3, 0x8}, {0x2, 0x3}, {0x1, 0x5}, {0x4, 0x1}, {0x7, 0xa}, {0x1, 0x9}, {0x0, 0x2}, {0x0, 0x7}, {0x0, 0xa}, {0x5, 0x9}, {0x2, 0x2}, {0x0, 0x2}, {0x1, 0x9}, {0x4, 0x3}, {0x0, 0x1}, {0x5}, {0x6, 0x9}, {0x0, 0x2}, {0x0, 0x4}, {0x7, 0xa}, {0x6, 0x8}, {0x1, 0x4}, {0x7, 0x7}, {0x0, 0x9}, {0x6, 0x6}, {0x6, 0x5}, {0x3, 0x9}, {0x3, 0x5}, {0x2, 0x9}, {0x1, 0x3}, {0x1}, {0x1, 0x1}, {0x5, 0x4}, {0x3, 0x7}, {0x0, 0x1}, {0x5, 0x6}, {0x2, 0x1}, {0x4}, {0x2, 0x4}, {0x4, 0x8}, {0x0, 0xa}, {0x0, 0x5}, {0x1, 0x4}, {0x3, 0x2}, {0x2, 0xa}, {0x7, 0x6}, {0x0, 0x4}, {0x1, 0x7}, {0x3}, {0x5, 0x4}, {0x4}, {0x1, 0x9}, {0x1, 0x4}, {0x6}, {0x4, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x7, 0x9}, {0x0, 0xa}, {0x7, 0xa}, {0x4, 0x4}, {0x3, 0x3}, {0x0, 0x1}, {0x7}, {0x3, 0x9}, {0x0, 0x8}, {0x5, 0x6}, {0x3, 0x1}, {0x1, 0x4}, {0x0, 0xa}, {0x7, 0x5}, {0x5}, {0x3, 0x5}, {0x5}, {0x6}, {0x7, 0x9}, {0x7, 0x4}, {0x0, 0x8}, {0x1, 0x5}, {0x4, 0x2}, {0x4, 0x1}, {0x3, 0x5}, {0x5, 0x8}, {0x4, 0x8}, {0x3, 0x6}, {}, {0x0, 0x7}, {0x6, 0x7}, {0x0, 0x8}, {0x1, 0x2}, {0x4, 0x6}, {0x3, 0x2}, {0x3, 0x2}, {0x7, 0x7}, {0x6, 0x5}, {0x0, 0x3}, {0x1}, {0x6, 0x5}, {0x0, 0x3}, {0x4}, {0x0, 0x8}, {0x4, 0xa}, {0x1}, {0x0, 0x1}, {0x0, 0x7}, {0x7, 0x1}, {0x7, 0x5}, {0x1, 0x2}, {0x6}, {0x5, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xff, 0x4, 0x5, 0x8, 0xf3f, 0x0, 0x81]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x7ff, 0x3, 0xbb57, 0xfffc, 0x4, 0x5, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x8, 0x1, 0x1, 0xfae, 0x9, 0x100, 0x96]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x6, 0x1, 0x3, 0x6, 0x6, 0xae3f, 0x69]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1d}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xc20}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x48}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}]}]}]}, 0x9a0}, 0x1, 0x0, 0x0, 0x20004000}, 0x20048014) 3m53.202684844s ago: executing program 2 (id=3481): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x6}]}}]}, 0x38}}, 0x4000010) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}, 0x94) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0xfffffffd}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r5, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={r6, 0x0, 0x0}, 0x10) socket(0x10, 0x803, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r11, {0xa, 0xffff}, {}, {0xc, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x80}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400000c1}, 0x20000000) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0xfc) socket$unix(0x1, 0x1, 0x0) 3m52.776318923s ago: executing program 2 (id=3483): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNGETVNETLE(r3, 0x800454dd, 0xfffffffffffffffc) 3m51.394005327s ago: executing program 2 (id=3492): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000026c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000000c0)={{0x80}, 'port0\x00', 0xe3, 0x1b1c07, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0x3b) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000001c0)=0x3) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0xb) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x7) sendmsg$nl_netfilter(r2, &(0x7f00000016c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001680)={&(0x7f0000000100)={0x156c, 0x2, 0xb, 0x801, 0x70bd2a, 0x25dfdbfc, {0xa, 0x0, 0x2}, [@nested={0x2d3, 0x19, 0x0, 0x1, [@generic="9c05df1559e06c73745963c0b1fc269158fa7d025cb5a509dc9309f11f6242cc383888d91ecebe3fd720a8e6366aa1458310d87614bd7c429e2e065bc6b0ad6380b1e2e7d4e63d4830a696a36570afe0d2ac0383e9db891716fbdc394219efbbf37b01a681c58eec360ef1b1f2fa947d5f787edefce4d6e709a0e240a6", @typed={0xf9, 0x76, 0x0, 0x0, @binary="74054f990528a1fdd54c25897eeeed3962bdf1ea8e55a3c42a8350d75b7b03bc32cbca0a6ae7dcd061222e9a296fc42df5a25e99a76d684071ba1e755f07a1b86ad0e5dc0d998d1a9d44d38ed167789784584f8ed48e60990b85bdc63f542600b6307916a539213f703c4fae0d70a271c392dcf00239dfd2ec12216e5bc93903e6edfd1fe50c53bdaa621e43aef5ee87ee65a8ba03e6f32bd5a0c2bf26d4d0af3a36311c84b23dcdfa307a18a5e2c36332ab0bd6b08b18c1935658fcc56738edefa9349d0275aa0e2c51c2a69f6faa57be770e45d951a637dadc4762595927e8a2c8f2fa0abb5e496d44c27401b7603568fb15b1d6"}, @typed={0x101, 0x77, 0x0, 0x0, @binary="dcea162ae7f905ba3fcfa87ffd6618e682d90d1f1c12ecfaa92f85eda516a23b53589242136014c8511c7adf22190f8cafba79eae667b25712d3575c4fc1447426ef6ad8241e916ca5d34379713dad73e6753a2f977465140c99f2105ba5cc5b065fb50dc3b6b085947a8502c2679cd882aed1f3d8208bd83773ae4d2d02efb5ab572ecb176c5ac0a1ea654046bd332481094d3e434e33c43598b13be449a7772ab4544ece17957084a1e6df816a1798f988d82ebf4faf44258167ee5226bb6179f8e56be6c0abf8fc22b6234dede51afcb3987f12b0ee41aba31212e404bb7e290b6c6baaa1b4dc38fc086335baf194e8553dd6f396d146639032408e"}, @generic="1b6b302b5b3d32653926078116c48c987aab99dbec8e250df0b0a4fdbc4bf389eef1c81570e485b89d04a1f2db7d6c474e358e62ba4916ab6615300bc07fa94ef7495ee59154f7aa3e66f0a4851af15edbbf"]}, @generic="a96fe542fd0ceb9edb2d6dc18b9e8b88e04abe63be4595b458d2ee39005deff588bef53267e3ec95adc33a42ba7360e2737b23a44e4e53c4960c8826793501f207f8b18d18008fa3da58e0930653070029d268a2f706fe42b5e8d99c5337c4f60cdf379a90ae9ec2fa6d308cfff333", @typed={0xc, 0x25, 0x0, 0x0, @u64=0x7fff}, @generic="39e1c0eb3dbc130d845998019ad36964392cf25f968042779b5fd1d81270f023b06d077aa4eec74b5e0873f5a4c12ce925e20a6bddff878458039a9d2616b1b5b3c6014388d7ea9e932e95b7486e1b0b0124452f25cba55cd33ddfdf85a669e5d68828a697a2d2242e4ace0c9c7d2c207255916f4a2e885b7a4a7e84b920ed8070311b46d4c4d6b5b777ef6d0f87cbc5d7190abbed1a676bba23782df6ecf9b616d8d7c7b9e6b78b1dd7ce17a2ce82e1215dd67c157691558dcabd3134bf97cb3db92ce8b59df4cc4c787b6344a624738d3abf3a4ebef4a0a046175ccf9fc3a956bb", @typed={0xb, 0x13d, 0x0, 0x0, @str='+-$+\\{#'}, @nested={0x10e, 0xcc, 0x0, 0x1, [@generic="ec8720033a708149a536957c4a424b93188e7ac0762cf1c618823e52422a08eaab899bc7ca5332edcdc5f6c51c5f22a6e10a4df12b88f884a60f26e88b0c30ad694c4613f376199641a5407abb04ed44166d90f0d1daa8de59dba1149a", @nested={0x4, 0x55}, @generic="8b5d8d79cc5da0c571fda0768ac58de083a58c3b37b20d08abc7dfb0b165dbc468a0110c4416b96007fc84038a4bf073c17ccee9c777235e260d561ba100a1c93ee448ad8f018a70541fdbfb08e64c38092322d944b1bc9c94eb052b84c43cbc", @generic="86a3305f2c16eca8104a922b2826611a325e093e0b14ddf4a699bc21c34585aea6e3f309d52d55d55db37b255415fb43b09e1ab8b41753d25811c876a9d392e33b7258ec8f6179e3ce"]}, @nested={0x1008, 0x9, 0x0, 0x1, [@typed={0x1004, 0x3a, 0x0, 0x0, @binary="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"}]}]}, 0x156c}, 0x1, 0x0, 0x0, 0x20048000}, 0x40) 3m50.627500432s ago: executing program 2 (id=3493): socket$unix(0x1, 0x2, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000001140)=ANY=[@ANYBLOB="12010000c5aa6d08cd0c380003990102030109021200010000c7000904"], 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) 3m35.349711204s ago: executing program 33 (id=3493): socket$unix(0x1, 0x2, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000001140)=ANY=[@ANYBLOB="12010000c5aa6d08cd0c380003990102030109021200010000c7000904"], 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) 59.49558805s ago: executing program 4 (id=4102): r0 = gettid() socket$igmp(0x2, 0x3, 0x2) socket$caif_seqpacket(0x25, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000fc0)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001c00010029bd7000fedbdf2507efffff", @ANYRES32=r4, @ANYBLOB="800007000a000200aaaaaa"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) 59.202851774s ago: executing program 4 (id=4103): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0xa01) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a4, 0x8, 0x8, 0x4132}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64], 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) write$binfmt_script(r7, &(0x7f00000000c0)={'#! ', './file1', [{0x20, '[@('}, {0x20, '\x00'}]}, 0xe) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 58.273800874s ago: executing program 4 (id=4106): syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="201703dc0300818f61"], 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd26, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x3}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8055}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 56.894265041s ago: executing program 4 (id=4114): syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x4001, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootode=00000000000000000040000,user_id=\x00', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', r1, &(0x7f0000000300)='./file0\x00', 0x41) move_mount(r1, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x220) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) kexec_load(0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x6}, 0x1c) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1) r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r6, 0x100, 0x0) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0xff, 0x1c}, 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) 55.904899194s ago: executing program 4 (id=4119): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x50}, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x2}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe75ba4204694d382eb51806597cde99cedde3f0edd8bd3fce154f83e47f422d0e5bf427c23771a122bd0369cec32bbe791bfc2c0fce202d51df0862c31baa7b80bab6d64c1d5826a7f4c1982e3693e7a0677f2ad388ce872b890394a3ecfd1cec45ba7966945271fc033565d4a9bb17a41aacf550c4510ba99a24b48eab32e5d7549de9bae7954e0f750b55f706de3d5001638a1260dd8d2ad735d9ec409711851badf7e170fc", 0xfb}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000580)}], 0x3, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x48}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd4", 0x73}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c", 0x41}, {&(0x7f0000000d00)="dc6e94ac2db166801ffce85f6f44f2cb071c6b5113bc6bbf2f503d468253693a01102fcb8157c6e8a2b5620efa5d22400147cce896821150f95c0c69fa587a1f99fcb28cfeb09f45cb836f0ff891be10bb209dc04adc202ef866f27b74faa5ad3a2e5d40ebd6785c4e4a97ac13238c746d1109d12af5446c4e84591f121a494251e43bed18f6269bdd2e56f9c211dd7145f664286911b8bb3acf76a1b5ece94183a6c8cc47f2e1dd4e91dc10be8732e92e8620fa060fb15016c2dc9b6da18325e778660d499aec6215b0f9f679fa76d22cdd4ae3776203e2054240594f1c9b77ad77cf3f", 0xe4}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d34273a3baad9692140de74d9294c555a8c2e0d53acea79b788b5eb1a12ada17eda2b2fb96c439ce16e6266afda6613fd7c90be9a9dfcd1b099fe6b023b725241a6e1048c700e7a939bd3a38f1101213b81c252dd8c44b7e647940438343d0d082507d218a952e6d77ec0918968c74f220c981a3797fb6cadfd6723a75c5c4da33e830ecf602c55bc60831ddd694f15728f4d1eacad82a03540713f52f9485138574e5b6aec693c2c613e442d5306c2ef1c8ad8dda8d005f3f3bacb5991d1c18db228185e4d2fcca72d87d81df01c142428158ad7ba84dd6c65d24a8d094308", 0xed}, {&(0x7f00000010c0)="978d1129fddf5e2f1be8be48f935ef4f71893a57f79be3e44522d3987ccee23f4e717d8c8e14573937040fb658a24f1c9e0c7f98a24fa1209a6ea754e1244234c715713d120b6929614443fd6b4223bc04c3a8c9241ccbb6a8b0bb19fe4eedae48642a74e97588dc36bf06a4c1fb17b47b39240a6a8e9b5daa97e63d777e665841a349c52022252eafc1c129e154ab390624dd7fb8ac1e44c203140d6a", 0x9d}, {0x0}, {&(0x7f0000001200)="43979d4537ac96f6e22b12acd1fdd3ffc7ef440e65e2e70d511a408f743d4ce7516f4364a00a041dc7b1ffe56ebc713b158ea1aab13ce3db53ab8af3f76ffaa86df636018175c4a8ea922a193ad08ca30d5031b27a4a87bff93dc12a98b6e4f25b5550d98a5bf3e040a8902083eea93bdbde6da91df3a730dd2b8215e9840f04dd0ab667500fe952fa1b8845c2cee50f8322175049c4", 0x96}], 0x7, &(0x7f00000014c0)}}], 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040f1004001920a2b81410069b27fc8ade3c6f6488ffd0b37743"], 0x7) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) (async) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, &(0x7f0000000500)={[0x26000, 0x8080000, 0x4, 0x5000], 0x147f, 0x0, 0x1000}) 55.133516909s ago: executing program 4 (id=4124): r0 = socket$kcm(0xa, 0x2, 0x73) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10102) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000740)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x48880) recvmmsg(r2, &(0x7f00000062c0)=[{{0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000003100)=""/39, 0x27}], 0x2, &(0x7f0000003180)=""/205, 0xcd}, 0x8}, {{&(0x7f0000003280)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000035c0)=[{&(0x7f0000001380)=""/231, 0xe7}, {&(0x7f0000003400)=""/58, 0x3a}, {&(0x7f0000001500)=""/196, 0xc4}, {&(0x7f0000003500)=""/154, 0x9a}], 0x4}, 0x4}, {{0x0, 0x0, &(0x7f0000003a80)=[{&(0x7f0000003600)=""/150, 0x96}, {&(0x7f0000001600)=""/18, 0x12}, {&(0x7f0000001140)=""/191, 0xbf}, {&(0x7f0000001640)=""/170, 0xaa}, {&(0x7f0000003880)=""/12, 0xc}, {&(0x7f00000038c0)=""/51, 0x33}, {&(0x7f0000001480)=""/100, 0x64}, {&(0x7f0000003980)=""/201, 0xc9}], 0x8, &(0x7f0000001200)=""/97, 0xb8}, 0x3}, {{&(0x7f0000003b80)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000004d00)=[{&(0x7f0000003c00)}, {&(0x7f0000006440)=""/4110, 0x100e}, {&(0x7f0000001700)=""/158, 0x9e}], 0x3, &(0x7f0000004d40)=""/171, 0xab}, 0xb7}, {{0x0, 0x0, &(0x7f0000005f80)=[{&(0x7f0000004e00)=""/128, 0x80}, {&(0x7f0000004e80)=""/4096, 0x1000}, {&(0x7f0000005e80)=""/235, 0xeb}], 0x3, &(0x7f0000005fc0)=""/99, 0x63}}, {{&(0x7f0000006040)=@phonet, 0x80, &(0x7f0000006200)=[{&(0x7f00000060c0)=""/62, 0x3e}, {&(0x7f0000006100)=""/3, 0x3}, {&(0x7f00000017c0)=""/166, 0xa6}], 0x3, &(0x7f0000006240)=""/75, 0x4b}, 0x10000}], 0x6, 0x2092, 0x0) socket$isdn(0x22, 0x3, 0x22) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000001040)="22873dbc7e7e05c9e9cf8972b65b1640c0b00fc3752d47b27ee9c2b4e64aec2ed0ce3bdb54083475cc641ef53f55babd1435d7e38d8150f6327c64790c5f86e65bd1f16db7e5990e2ee6601caf848eed211733721416797f334944d2282cd790342e32a7bde45fab09ef8d57f32b791f3b2b17ec121c72b5b4bf12631b39a42c415e4f2902d6a1ae4b46e95d64a478ffd1fdbb4b8f428ee0061a63", 0x9b}], 0x1, &(0x7f0000001280)=ANY=[@ANYBLOB="3000000000000000840000000200000004004780000000007e2d00002f24fd1f25b523bfbdf55bd6e7e64b31370718ce06825c5b31a5969b3d33b409529ab21f6ebc47c5a435c84fe1758ede68f48ea28889218dff08328610191f3b4e156cc5cf7ba2e853101367bcdf89ce60f54f8175dd404e5f36018a6a8a8a678281b51053ea2b50975e", @ANYRES32=0x0], 0x20, 0x4048800}, 0x0) fsopen(&(0x7f0000000100)='bfs\x00', 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x8880, 0x85) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mmap(&(0x7f00004a5000/0x2000)=nil, 0x2000, 0x0, 0x28011, r4, 0xe7ce3000) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x40000) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "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", "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"}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4140aecd, &(0x7f0000000100)) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) socket$igmp(0x2, 0x3, 0x2) mount(&(0x7f0000000140)=@nullb, &(0x7f0000001340)='./cgroup\x00', 0x0, 0x229400, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 54.677247823s ago: executing program 34 (id=4124): r0 = socket$kcm(0xa, 0x2, 0x73) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10102) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000740)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x48880) recvmmsg(r2, &(0x7f00000062c0)=[{{0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000003100)=""/39, 0x27}], 0x2, &(0x7f0000003180)=""/205, 0xcd}, 0x8}, {{&(0x7f0000003280)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000035c0)=[{&(0x7f0000001380)=""/231, 0xe7}, {&(0x7f0000003400)=""/58, 0x3a}, {&(0x7f0000001500)=""/196, 0xc4}, {&(0x7f0000003500)=""/154, 0x9a}], 0x4}, 0x4}, {{0x0, 0x0, &(0x7f0000003a80)=[{&(0x7f0000003600)=""/150, 0x96}, {&(0x7f0000001600)=""/18, 0x12}, {&(0x7f0000001140)=""/191, 0xbf}, {&(0x7f0000001640)=""/170, 0xaa}, {&(0x7f0000003880)=""/12, 0xc}, {&(0x7f00000038c0)=""/51, 0x33}, {&(0x7f0000001480)=""/100, 0x64}, {&(0x7f0000003980)=""/201, 0xc9}], 0x8, &(0x7f0000001200)=""/97, 0xb8}, 0x3}, {{&(0x7f0000003b80)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000004d00)=[{&(0x7f0000003c00)}, {&(0x7f0000006440)=""/4110, 0x100e}, {&(0x7f0000001700)=""/158, 0x9e}], 0x3, &(0x7f0000004d40)=""/171, 0xab}, 0xb7}, {{0x0, 0x0, &(0x7f0000005f80)=[{&(0x7f0000004e00)=""/128, 0x80}, {&(0x7f0000004e80)=""/4096, 0x1000}, {&(0x7f0000005e80)=""/235, 0xeb}], 0x3, &(0x7f0000005fc0)=""/99, 0x63}}, {{&(0x7f0000006040)=@phonet, 0x80, &(0x7f0000006200)=[{&(0x7f00000060c0)=""/62, 0x3e}, {&(0x7f0000006100)=""/3, 0x3}, {&(0x7f00000017c0)=""/166, 0xa6}], 0x3, &(0x7f0000006240)=""/75, 0x4b}, 0x10000}], 0x6, 0x2092, 0x0) socket$isdn(0x22, 0x3, 0x22) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000001040)="22873dbc7e7e05c9e9cf8972b65b1640c0b00fc3752d47b27ee9c2b4e64aec2ed0ce3bdb54083475cc641ef53f55babd1435d7e38d8150f6327c64790c5f86e65bd1f16db7e5990e2ee6601caf848eed211733721416797f334944d2282cd790342e32a7bde45fab09ef8d57f32b791f3b2b17ec121c72b5b4bf12631b39a42c415e4f2902d6a1ae4b46e95d64a478ffd1fdbb4b8f428ee0061a63", 0x9b}], 0x1, &(0x7f0000001280)=ANY=[@ANYBLOB="3000000000000000840000000200000004004780000000007e2d00002f24fd1f25b523bfbdf55bd6e7e64b31370718ce06825c5b31a5969b3d33b409529ab21f6ebc47c5a435c84fe1758ede68f48ea28889218dff08328610191f3b4e156cc5cf7ba2e853101367bcdf89ce60f54f8175dd404e5f36018a6a8a8a678281b51053ea2b50975e", @ANYRES32=0x0], 0x20, 0x4048800}, 0x0) fsopen(&(0x7f0000000100)='bfs\x00', 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x8880, 0x85) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mmap(&(0x7f00004a5000/0x2000)=nil, 0x2000, 0x0, 0x28011, r4, 0xe7ce3000) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x40000) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "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", "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"}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4140aecd, &(0x7f0000000100)) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) socket$igmp(0x2, 0x3, 0x2) mount(&(0x7f0000000140)=@nullb, &(0x7f0000001340)='./cgroup\x00', 0x0, 0x229400, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 27.51718124s ago: executing program 0 (id=4184): syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="201703dc0300818f61"], 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd26, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x3}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8055}, 0xc010) sendmsg$inet(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 13.724805576s ago: executing program 7 (id=4217): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xfffffffffffffe3e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f00000001c0)={0x0, 0x0, 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0xffff, 0xc30, @loopback, 0x800000}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "05ea4000", "ec3fff9afd96e6c0"}, 0x38) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r4, 0x5421, &(0x7f0000000140)=0x1) writev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x12, 0x0, 0x0) close(r2) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r5 = memfd_create(&(0x7f00000026c0)='aead\x00', 0x6) copy_file_range(r5, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r6, 0x0, 0x0, 0x2, 0x0) 10.783548595s ago: executing program 3 (id=4224): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x68c03, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x19) ioctl$TCSETS(r3, 0x404c4701, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000300)='./bus\x00', 0x1c12c2, 0x1df2a23c5997fa5f) io_uring_setup(0x1f1c, &(0x7f00000005c0)={0x0, 0x17d7, 0xa, 0x3, 0x283}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x68, r5, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x732, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x51}, 0x0) 9.868518926s ago: executing program 7 (id=4225): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000580)) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000004) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0) read(r2, &(0x7f0000000640)=""/187, 0xbb) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x80003, 0x0) r4 = socket$inet6(0xa, 0x6, 0xd61) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x19a1dc757009216e) close_range(r3, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 9.727617399s ago: executing program 3 (id=4226): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0xeb, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000580), 0x3) socket$pptp(0x18, 0x1, 0x2) syz_io_uring_setup(0x1de0, &(0x7f0000000300)={0x0, 0xa14b6, 0x800, 0xfffffffe, 0x128}, &(0x7f00000003c0)=0x0, 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000280)={0x8001, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x400000000000ffff) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r1, 0x0, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x39, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x20000, 0x84, 0x10}, &(0x7f0000000380)='./file0/../file0\x00', 0x18, 0x0, 0x23456}) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0600000004000000101000008900000000000000", @ANYRES32, @ANYBLOB='\"\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000400)=""/107, &(0x7f0000000380), &(0x7f0000000000), 0x6, 0xffffffffffffffff, 0x0, 0x7}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, '\r\x00', "8a36c47a9c625dfaf08ace81c500", "f8ffffff", "362d3017f069109d"}, 0x28) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r5, 0xffffffffffffffff, 0x0) 7.11745436s ago: executing program 5 (id=4228): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x8916, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000038c0)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x6}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}]}, 0x64}}, 0x0) 6.849074193s ago: executing program 5 (id=4229): socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x44000000) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$netlink(0x10, 0x3, 0x0) socket(0x11, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0007000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) 6.821273308s ago: executing program 0 (id=4187): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000003000000ff900000feffff1085000000ae00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.659930726s ago: executing program 0 (id=4230): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$kvm(0x0, &(0x7f00000002c0), 0xa600, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/anycast6\x00') ioperm(0x1, 0x108, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xb635773f06ebbeec, 0x50, 0xffffffffffffffff, 0xb4e05000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x11a) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x10004, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="33224146131ec11fafa1a300243d1c7468c59b0811fe11c30946f4d343b921861bedc9f555bd135e77c031d65cf2ad784fbca77b1e4a0b3914ff15c9ccdb2612401071b90557563d08", @ANYBLOB="9dcb1f2c072f2e5da0b88eb6bfaacb5422f5427fe2a312bf23d09a4222d696d6277547207bb26b0e7fefaacb89d39a515768ac5eb2123367a1f1819499a91232dc35e1392a7b7fc1b27e816ee6d6026435a90bdd2d7a8d629105d9bb472d1ea0e20b1ff3194ba0c256eea5fa66c9be7420694918654a9f82d243ae73907fc89ef6e1bc8900f1629ee5df14704d9b3f0dc991797d5bacdf251ea9b6e4bbdcd7b745be43d5ddad710a1abc891dec4c1661282021c241691f9620b637748cdbf23d8fca3135411fa383b2ee869bfb10866d1559c26c25480513983362a3df2177ea6137058bd2fcbb9f07f21cb5c1"]) shmctl$SHM_UNLOCK(0x0, 0xc) write(r0, &(0x7f0000000080)="240000001a007f0214f9f407000904080300", 0x12) get_mempolicy(0x0, 0x0, 0x4, &(0x7f0000001000/0x4000)=nil, 0x6) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x800, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000380)={'dt2815\x00', [0x5, 0x8, 0x801, 0xff, 0x5fa, 0xb25, 0x8, 0x0, 0x1, 0x2b, 0x60, 0xfffffffe, 0x80000000, 0xa6b7, 0x3, 0x9, 0x1, 0x10fa, 0x80000240, 0x40000001, 0x89, 0x9, 0x130, 0x51, 0xa, 0x8, 0x4d0f, 0x9, 0x1, 0x10000, 0xfffffff1, 0xfffff7fc]}) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/25, 0x19, 0x8000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r4, &(0x7f00000000c0)='2\x00', 0x2) socket$pppl2tp(0x18, 0x1, 0x1) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100005f2ab420720c0d009b27010203010902120001000000000904"], 0x0) 6.510253796s ago: executing program 6 (id=4231): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x18b040, 0xda) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) fstat(0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x800}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x10000, 0x3, 0x1, 0x9, 0xfffffffffffffffc, 0x0, 0x5, 0xfffffffffffffff7}, {0x0, 0xc, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in6=@empty, 0x2, 0x6c}, 0x2, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x7ff, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x90ff}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xffc0}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) 6.264653962s ago: executing program 7 (id=4232): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=0x0, @ANYBLOB="04005b0006006500b0000000"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r7, @ANYBLOB="05005b0016070000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32=r7, @ANYBLOB="05005b"], 0x24}}, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binfmt_format(0xffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r9 = io_uring_setup(0x3454, &(0x7f0000000440)={0x0, 0x0, 0x40, 0x0, 0xa7}) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) mmap(&(0x7f0000a82000/0x3000)=nil, 0x3000, 0x300000a, 0xa3b749903f41249d, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r10 = io_uring_setup(0x40aa, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x345}) io_uring_enter(r10, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x800) ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@null, 0x4, 'wg0\x00'}) 6.126260663s ago: executing program 3 (id=4233): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpgid(0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r4}, 0x38) 6.031831962s ago: executing program 5 (id=4234): open(&(0x7f0000000000)='./bus\x00', 0x1a1043, 0xc5) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x30) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000003000/0x2000)=nil, 0x3) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8, 0x0, 0x6, 0x1, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(r0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r4, 0x0, 0x0}, 0x10) accept4(r0, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @local}, &(0x7f0000000340)=0x80, 0xc0000) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r5, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r6, r5, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r8, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r7, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ac1e0101000000000000000000000000ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffefffffff00000000000000001000000000000000050000000000000000000000002000000000000000000000000000000000000001000202000000004400050000000000000000000000ffff0a010100000004d63c"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 5.339436595s ago: executing program 6 (id=4235): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000040)) syz_open_dev$vcsa(0x0, 0x2c8, 0x400) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) r5 = socket(0x6, 0x80002, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xfffffffffffffd7f, 0x8, {0x1}}}}]}]}, 0x70}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x6, &(0x7f00000002c0)=0x80000000, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB="00000000000000001c002b8008000100", @ANYRES32, @ANYBLOB="080003001900000008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 5.107447631s ago: executing program 6 (id=4236): open(&(0x7f0000000000)='./bus\x00', 0x1a1043, 0xc5) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x30) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000003000/0x2000)=nil, 0x3) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8, 0x0, 0x6, 0x1, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(r0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r4, 0x0, 0x0}, 0x10) accept4(r0, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @local}, &(0x7f0000000340)=0x80, 0xc0000) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r5, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r6, r5, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r9, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r8, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ac1e0101000000000000000000000000ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffefffffff00000000000000001000000000000000050000000000000000000000002000000000000000000000000000000000000001000202000000004400050000000000000000000000ffff0a010100000004d63c"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 4.392404625s ago: executing program 5 (id=4237): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x28, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xec}, 0x1, 0x25dfdbfb}, 0x0) 4.159443698s ago: executing program 5 (id=4238): syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf10f5380102030109021b0001000010000904590301801e2a00090582a6"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x6b, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x1, 0x49, 0x10, 0xa0, "", [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x2, 0x6, 0x0, 0x3, {{0x9, 0x24, 0x6, 0x0, 0x0, "9bb6ff42"}, {0x5, 0x24, 0x0, 0xfff9}, {0xd, 0x24, 0xf, 0x1, 0xe7, 0x6, 0xf54, 0x9}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0x80, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x8, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xff, 0x8, 0x7}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x752, 0xc4, 0x0, 0x0, 0x20, 0xea}, 0x80, &(0x7f0000000340)=ANY=[@ANYBLOB="050f8000040a10030002000500cfce60100411db9f9cda3a261c2302f62f5ad3d9dfd52cf63ac63e1ac20f88774fa43e92d15c6271807917442aa39c93d6ae9f50a018e04ab03b981461dbae49abe9d0a2409a3050e10747f1224fbd1c3998d73ebef5a9ae6f4e7b5d458cad2a3e310710021eed7f0000100b"], 0x2, [{0x49, &(0x7f0000000940)=ANY=[@ANYBLOB="49032e617f9e4d1ec84a1216a8d5d1547950601bc250ed4ef0f401df05e22f96588735b461753c8d890de443c97db7726814ab7f2c3577bd5369df6b1564e6fd9a8754b84ed9eb65df4602d1e99227956e9af2ada65243cd8822"]}, {0xf7, &(0x7f0000000800)=ANY=[@ANYBLOB="f7036da303ac8aa20554bb17d7833d3a38c37ee838e581365bbe60288c318b70030108ed2de2de8b8b0ff3ba25b1a4124cbd135b6335633c0b89dd7f196688c4995df0457970217e34335c2f326062663ea52679d5acb0544763ab250714e6132100a392f25fafdddde15f392f90538507dda6de1ff27f4128220151b5ef095d2b887133de9c0e7f210de66bdd09f91ae76d2341aa9cdf99a42fe4fbee032c3e0f4535848955f9ce6bf22870ce9b4ade8b3dd061133e4366872c3a7a03cbe54229f4d7b13cb267ed2452c7eff5dd5fe205d528d78cdf6f392707b0ed95e69c27821f4db78eb39209710ffa5b457d958b649ae884653843e09237e9d28ba5b6dd7f77565cfc78"]}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x407}}, {0x34, &(0x7f0000000540)=@string={0x34, 0x3, "74d490096447d7a0d4d8d6dc2ec1a2fd1c3d4a4ed1c0f25b910fb74155bd7d45adacbbf3aa3820b2eb6020913211560fe0fb"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x42}}, {0x99, &(0x7f00000009c0)=ANY=[@ANYBLOB="9903976797035419e0e353d6065e21fef6cdd59d3e2bbf27b754aabe97cc5a3b4e0fb227dbba44c3524c5cefaf955fc1477b4532d5745fdd8ee3f0319a359ebe7adf620106431110dcdcb0fe32a62a2f9361a94a6523b3f9f74acd4f5c5437e45129aa9947eb1eedee0700000018696d00000000c5cf12d859d56ae353ad9ac9d5b38bd8409b66f14feef8b073ab"]}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0xc01}}]}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00', 0x8}}, {{0xa, 0x4e04, 0x4a3, @private1={0xfc, 0x1, '\x00', 0xfd}, 0x4f2}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000380)={0x2, {{0xa, 0x4e20, 0x1, @mcast1, 0x1000}}, {{0xa, 0x4e22, 0x7, @loopback, 0x3ff}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000c40)=ANY=[@ANYBLOB="03000000000000000a001e220000000cff01000000000000000000000000000108040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000022000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000"], 0x90) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002ab97000ffdbdf25040000000800020005000000080007007f0000e0070008"], 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x24004854) r6 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r6, 0x80106f53, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'veth1_to_team\x00', @local}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 3.969843099s ago: executing program 0 (id=4239): r0 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x8, &(0x7f0000000540)=0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x4, r2, 0x0, 0x0, 0x2a25}]) prlimit64(0x0, 0x5, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) r3 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r3, 0xc01064c4, &(0x7f00000000c0)={0x0}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x11a, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8948, &(0x7f00000002c0)={'bond0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r5, 0xfffffffc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) syz_fuse_handle_req(r6, &(0x7f0000008140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0x0, 0x8110, 0x0, 0x401}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="020000000100030000000000040001000000000020"], 0x1c, 0x2) syz_fuse_handle_req(r6, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x2d, 0x0, 0x800, 0xfffe, 0x2, 0x3a2c, 0x3, 0x0, 0x0, 0x152, 0x76a3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) accept4$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000001c0)=0x1c, 0x800) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x9, &(0x7f0000000000)=ANY=[@ANYRESOCT=r2, @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f00000001c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.964942055s ago: executing program 7 (id=4240): open(&(0x7f0000000000)='./bus\x00', 0x1a1043, 0xc5) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x30) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000003000/0x2000)=nil, 0x3) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8, 0x0, 0x6, 0x1, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(r0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r4, 0x0, 0x0}, 0x10) accept4(r0, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @local}, &(0x7f0000000340)=0x80, 0xc0000) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r5, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r6, r5, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r9, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r8, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ac1e0101000000000000000000000000ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffefffffff00000000000000001000000000000000050000000000000000000000002000000000000000000000000000000000000001000202000000004400050000000000000000000000ffff0a010100000004d63c"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 3.758162035s ago: executing program 3 (id=4241): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x44000000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r1], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000070a000000060001000001000008000500", @ANYRES32=r5], 0x50}}, 0x2) 3.548018012s ago: executing program 0 (id=4242): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000580)) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000004) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0) read(r2, &(0x7f0000000640)=""/187, 0xbb) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x80003, 0x0) r4 = socket$inet6(0xa, 0x6, 0xd61) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x19a1dc757009216e) close_range(r3, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 3.346283323s ago: executing program 6 (id=4243): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0xee) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r1], 0x2b) sendfile(r3, r1, 0x0, 0x4000000053d2) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="50010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x20000000}, 0x4084) recvmmsg(r4, &(0x7f0000000a40)=[{{0x0, 0xd2, &(0x7f0000000780)=[{&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f00000000c0)=""/50, 0x32}], 0x2}, 0x3f}], 0x1, 0x60, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) pipe2(&(0x7f0000002a00)={0xffffffffffffffff}, 0x80) syncfs(r6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) dup(r7) socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) setregid(0x0, r8) r9 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setfsgid(r10) r11 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r11, 0xc0d05605, &(0x7f0000000100)={0x2, @pix_mp={0x3, 0x1ff, 0x32314d56, 0x6, 0x5, [{0x5, 0x9}, {0x6311, 0x1}, {0x8, 0xb7}, {0x7a15, 0x800}, {0x3, 0x6}, {0x0, 0x4}, {0x4, 0x3}, {0x20000002, 0x1}], 0xff, 0xd, 0x7, 0x1, 0x4}}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) r12 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r12, &(0x7f0000000080)='3', 0x1, 0x0) 3.198133383s ago: executing program 3 (id=4244): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpgrp(0x0) prlimit64(r0, 0x7, &(0x7f0000000000)={0x8, 0x1000088}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000001c0)=ANY=[@ANYRES16], &(0x7f0000000080)='GPL\x00', 0x7, 0xc4, &(0x7f0000000500)=""/196, 0x0, 0x0, '\x00', 0x0, @sk_skb, r1, 0x6}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) r3 = dup(r2) ioctl$PTP_EXTTS_REQUEST2(r3, 0x40603d10, &(0x7f00000002c0)={0x1, 0x9}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socket$l2tp6(0xa, 0x2, 0x73) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) 2.180108531s ago: executing program 3 (id=4245): socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0x2b, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000000)=0x39, 0x4) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x2) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='vfat\x00', 0x800041, &(0x7f00000001c0)='discard') syz_io_uring_setup(0x4952, &(0x7f0000000300)={0x0, 0x24a3, 0x200, 0x1, 0x144}, 0x0, &(0x7f0000000380), &(0x7f0000000000)) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') rename(0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$netlink(r3, 0x10e, 0x5, &(0x7f00000006c0)=""/4078, &(0x7f0000000080)=0xfffffffffffffd98) r4 = getpid() lstat(&(0x7f0000000100)='./file2/file0\x00', &(0x7f00000003c0)) r5 = syz_pidfd_open(r4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000005aea7204e08011099bf0002030109021b00010000000009040000014466790009050db7"], 0x0) setns(r5, 0x24020000) r6 = socket$nl_route(0x10, 0x3, 0x0) write(r6, &(0x7f00000001c0)="240000005800410f9c00f4f90085b3025cb1fddf08000100050100000800028001000000", 0x24) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x8000000, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0xcd2, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x2000000003, 0x0, 0x82c, 0x0, 0x81, 0x4}) landlock_create_ruleset(0x0, 0x0, 0x0) 1.92484882s ago: executing program 6 (id=4246): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}]}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@ipv6_newrule={0x28, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0x0, r3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008005}, 0x44) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}]}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x8080}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), &(0x7f00000001c0)=0xc) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@ipv6_newrule={0x28, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0x0, r3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008005}, 0x44) (async) 1.689221142s ago: executing program 7 (id=4247): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$P9_RSTATu(r0, &(0x7f0000000580)={0x237, 0x7d, 0x2, {{0x500, 0xf6, 0x0, 0x5000000, {0x96346fe8a85d2583, 0x0, 0x8}, 0x41400000, 0x0, 0xe5e0, 0x5, 0x1b, '\x04nodev{evoo~\x05E\xc6\x00\x05\b\x007\xd9:\x8b\x92\x00\x00\x00', 0x33, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x37, '\xcf\xc3m\a\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e^\x98\x9c\xd5\xefMQ\xf6\r\xa7X,J\x05\xc8\xf8(\xf6\x8d\xc1wM]\xe2\xe8 \x86#\x81\xf6hm\xd1\xbb\x8f\xd7\x00\x00\x00', 0x3e, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c<;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0w\xdct\x00\x00\x00\x00\x00\x00\x00\x00\a\xec!\xca\xbf\xf2\x0f\x9c\x00\x89\xf9\x06\x00\x00\x00\x00\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x13r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x237) 1.467783965s ago: executing program 6 (id=4248): ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000040)=0x7ff, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x86) epoll_create1(0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket(0x400000000010, 0x3, 0x6) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0) syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d22a6640da0320283c52000000010902440001000000000904000000ef040100052406000105240000000de83e1ace4c8810be0000000006241a050000152412"], 0x0) 1.049225976s ago: executing program 7 (id=4249): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x11, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0xc) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) write$cgroup_subtree(r7, &(0x7f0000000980)=ANY=[], 0x1f) syz_pidfd_open(0x0, 0x0) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x64) r8 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x143041, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x1d, 0x0, 0x0, 0x20066}]}) write$UHID_INPUT(r8, &(0x7f00000021c0)={0x8, {"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", 0x1000}}, 0x1006) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000580)="02042700ea0e0000000000001eafbcf706e105000000000000001104ee1606", 0x1f}], 0x1}, 0x40000) write$hidraw(r8, &(0x7f0000000280)="2b5aeb7b332cc3b22b2450f359a52a491b266e2a43810cc8e23746267ad5b7077ba535c87dd93d3e7893983fa9f60e18be4ea0c11060562fa512e7abd3561696be0250578090bfc93cd3301e2622d090841c7927709601a99bf960686f2c4f497eff8c8f9f5b72e163f099530ee33abf229bdc5f1dd84a58b5e4aa4ca4fa5812572d7afbd4724f3bec527f95a6ebe3e4381d8e10660011a0af92d697c4316c8c2f03f3", 0xa3) syz_usb_connect(0x2, 0x24, &(0x7f00000006c0)={{0x12, 0x1, 0x250, 0x75, 0x0, 0x20, 0x20, 0x846, 0x9041, 0xd7c4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0xe2, 0xf0, 0x2, "", [{{0x9, 0x4, 0xa2, 0x2, 0x0, 0xff, 0xff, 0xff, 0x76}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1404}}]}) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000ffdbdf2501000000000000000141d0e400030017"], 0x34}}, 0x0) 320.524869ms ago: executing program 0 (id=4250): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x10c}, 0x48) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x6) ioctl$TCSBRKP(r1, 0x5425, 0x80000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x6488, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe10000babe638977fb080600017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 0s ago: executing program 5 (id=4251): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x20100, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0xfffffffffffffffe) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000006b192ce4e8dab54360980362d9d656bddd1313d88a141c04fa4371848df6a32fdcc7a7fc3e2fde4de3d301cc446f9dc0da47f83f35589a0dcd4281323e05b0f06ea41b5a9548f787d43b84d1b2277c7745c65eb6d24a846d5812ac8013e3ff36b2487527ef63e1b795e01e2d0f59"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfff0, 0x2000}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000100001000000fcffcf555a2af300020000000000000a3c000000120a01020000000000000000020000000900020073797a08000440000000000900010073797a30000000000800034000000003140000001100010000000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRESDEC=0x0], 0x7c}}, 0x2000c814) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4008801}, 0x24000034) close(r0) socket$kcm(0xa, 0x2, 0x0) rt_sigsuspend(&(0x7f0000000040)={[0x20000001]}, 0x8) ioctl$SIOCSIFHWADDR(r0, 0x8b37, &(0x7f0000000000)={'virt_wifi0\x00', @random="06000000ffff"}) kernel console output (not intermixed with test programs): ile querying for an remote control event. [ 1035.261190][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1035.441004][ T10] dvb-usb: error while querying for an remote control event. [ 1035.510694][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1035.517635][ T10] dvb-usb: error while querying for an remote control event. [ 1035.580739][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1035.596803][ T10] dvb-usb: error while querying for an remote control event. [ 1035.598812][T20006] syzkaller0: entered promiscuous mode [ 1035.671341][T20006] syzkaller0: entered allmulticast mode [ 1035.756379][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1035.788814][ T10] dvb-usb: error while querying for an remote control event. [ 1035.890699][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1035.909284][ T10] dvb-usb: error while querying for an remote control event. [ 1036.001251][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1036.008161][ T10] dvb-usb: error while querying for an remote control event. [ 1036.131194][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1036.138241][ T10] dvb-usb: error while querying for an remote control event. [ 1036.251027][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1036.269097][ T10] dvb-usb: error while querying for an remote control event. [ 1036.470727][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1036.482425][ T10] dvb-usb: error while querying for an remote control event. [ 1036.524737][T20025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3613'. [ 1036.556870][T20026] syzkaller0: entered allmulticast mode [ 1036.564185][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1036.571641][ T10] dvb-usb: error while querying for an remote control event. [ 1036.641329][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1036.648566][ T10] dvb-usb: error while querying for an remote control event. [ 1036.710720][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1036.718382][ T10] dvb-usb: error while querying for an remote control event. [ 1036.790738][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1036.798088][ T10] dvb-usb: error while querying for an remote control event. [ 1036.860656][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1036.867980][ T10] dvb-usb: error while querying for an remote control event. [ 1036.930689][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1036.937696][ T10] dvb-usb: error while querying for an remote control event. [ 1037.000706][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1037.012775][ T10] dvb-usb: error while querying for an remote control event. [ 1037.080671][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1037.096429][ T10] dvb-usb: error while querying for an remote control event. [ 1037.160772][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1037.168768][ T10] dvb-usb: error while querying for an remote control event. [ 1037.277925][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1037.295910][ T10] dvb-usb: error while querying for an remote control event. [ 1037.726706][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1037.733690][ T10] dvb-usb: error while querying for an remote control event. [ 1037.800750][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1037.824525][ T10] dvb-usb: error while querying for an remote control event. [ 1037.891447][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1037.899338][ T10] dvb-usb: error while querying for an remote control event. [ 1037.970711][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1037.977759][ T10] dvb-usb: error while querying for an remote control event. [ 1038.040716][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1038.047610][ T10] dvb-usb: error while querying for an remote control event. [ 1038.426519][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1038.461611][ T5874] dvb-usb: error while querying for an remote control event. [ 1038.520874][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1038.572408][ T5874] dvb-usb: error while querying for an remote control event. [ 1038.641987][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1038.650509][ T5874] dvb-usb: error while querying for an remote control event. [ 1038.710716][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1038.796042][ T5874] dvb-usb: error while querying for an remote control event. [ 1038.970806][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1039.033973][ T10] dvb-usb: error while querying for an remote control event. [ 1039.504684][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1039.512986][ T10] dvb-usb: error while querying for an remote control event. [ 1039.581758][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1039.629643][ T10] dvb-usb: error while querying for an remote control event. [ 1040.382652][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1040.390569][ T10] dvb-usb: error while querying for an remote control event. [ 1040.480701][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1040.488746][T20080] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1040.501983][ T5874] dvb-usb: error while querying for an remote control event. [ 1040.580695][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1040.588118][ T10] dvb-usb: error while querying for an remote control event. [ 1040.622918][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 1040.622934][ T30] audit: type=1400 audit(1775790602.097:1669): avc: denied { unmount } for pid=9712 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1040.666982][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1040.681187][ T10] dvb-usb: error while querying for an remote control event. [ 1040.750678][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1040.757742][ T10] dvb-usb: error while querying for an remote control event. [ 1040.923650][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1040.945106][ T10] dvb-usb: error while querying for an remote control event. [ 1041.058712][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1041.069647][ T10] dvb-usb: error while querying for an remote control event. [ 1041.130733][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1041.137684][ T10] dvb-usb: error while querying for an remote control event. [ 1041.200978][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1041.208010][ T10] dvb-usb: error while querying for an remote control event. [ 1041.282648][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1041.309771][ T10] dvb-usb: error while querying for an remote control event. [ 1041.637218][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1041.647375][T16940] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1041.674546][ T10] dvb-usb: error while querying for an remote control event. [ 1041.749452][T20095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1041.766209][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1041.779779][ T10] dvb-usb: error while querying for an remote control event. [ 1041.819999][T20095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1041.860821][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1041.961728][ T10] dvb-usb: error while querying for an remote control event. [ 1041.982861][T18482] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1042.030724][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1042.038632][ T10] dvb-usb: error while querying for an remote control event. [ 1042.140007][T20102] sg_write: data in/out 26076/10 bytes for SCSI command 0x0-- guessing data in; [ 1042.140007][T20102] program syz.6.3635 not setting count and/or reply_len properly [ 1042.189510][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1042.215860][ T10] dvb-usb: error while querying for an remote control event. [ 1042.510720][T18482] usb 4-1: Using ep0 maxpacket: 32 [ 1042.510764][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1042.518289][T18482] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1042.538962][T18482] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1042.552697][T18482] usb 4-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 1042.553406][ T10] dvb-usb: error while querying for an remote control event. [ 1042.564276][T18482] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.582730][T18482] usb 4-1: Product: syz [ 1042.587792][T18482] usb 4-1: Manufacturer: syz [ 1042.593539][T18482] usb 4-1: SerialNumber: syz [ 1042.609894][T18482] usb 4-1: config 0 descriptor?? [ 1042.663042][ T5808] dvb-usb: bulk message failed: -22 (1/0) [ 1042.670134][ T5808] dvb-usb: error while querying for an remote control event. [ 1042.740724][ T5808] dvb-usb: bulk message failed: -22 (1/0) [ 1042.747915][ T5808] dvb-usb: error while querying for an remote control event. [ 1042.811222][ T5808] dvb-usb: bulk message failed: -22 (1/0) [ 1042.820562][ T5808] dvb-usb: error while querying for an remote control event. [ 1042.848195][T18482] usb 4-1: USB disconnect, device number 52 [ 1042.905665][ T5808] dvb-usb: bulk message failed: -22 (1/0) [ 1042.914460][ T5808] dvb-usb: error while querying for an remote control event. [ 1042.980725][ T5808] dvb-usb: bulk message failed: -22 (1/0) [ 1042.987744][ T5808] dvb-usb: error while querying for an remote control event. [ 1043.059327][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1043.096398][ T5874] dvb-usb: error while querying for an remote control event. [ 1043.171893][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1043.200916][ T5874] dvb-usb: error while querying for an remote control event. [ 1043.304602][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1043.312682][ T5874] dvb-usb: error while querying for an remote control event. [ 1043.385816][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1043.398112][ T5874] dvb-usb: error while querying for an remote control event. [ 1043.464005][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1043.517131][ T5874] dvb-usb: error while querying for an remote control event. [ 1043.580703][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1043.587806][ T5874] dvb-usb: error while querying for an remote control event. [ 1043.651000][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1043.659115][ T5874] dvb-usb: error while querying for an remote control event. [ 1043.676620][T20121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3641'. [ 1043.721106][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1043.728205][ T5874] dvb-usb: error while querying for an remote control event. [ 1043.770432][T20122] XFS (nbd3): SB validate failed with error -5. [ 1043.808535][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1043.828857][ T5874] dvb-usb: error while querying for an remote control event. [ 1043.900879][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1043.922640][ T5874] dvb-usb: error while querying for an remote control event. [ 1044.142411][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1044.260853][ T5874] dvb-usb: error while querying for an remote control event. [ 1044.357172][T20138] tipc: Enabling of bearer rejected, failed to enable media [ 1044.366923][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1044.374318][ T5874] dvb-usb: error while querying for an remote control event. [ 1044.440754][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1044.683355][ T5874] dvb-usb: error while querying for an remote control event. [ 1044.752004][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1044.790979][ T5874] dvb-usb: error while querying for an remote control event. [ 1044.921329][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1044.930479][ T5874] dvb-usb: error while querying for an remote control event. [ 1045.055549][T20153] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1045.074429][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1045.121095][ T5874] dvb-usb: error while querying for an remote control event. [ 1045.180691][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1045.187636][ T5874] dvb-usb: error while querying for an remote control event. [ 1045.203741][T20153] overlayfs: missing 'lowerdir' [ 1045.305876][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1045.339132][ T5874] dvb-usb: error while querying for an remote control event. [ 1045.473989][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1045.481436][ T5874] dvb-usb: error while querying for an remote control event. [ 1045.542178][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1045.549713][ T5874] dvb-usb: error while querying for an remote control event. [ 1045.620662][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1045.630309][ T5874] dvb-usb: error while querying for an remote control event. [ 1045.745590][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1045.754354][ T5874] dvb-usb: error while querying for an remote control event. [ 1045.820696][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1045.827648][ T5874] dvb-usb: error while querying for an remote control event. [ 1045.890699][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1045.897646][ T5874] dvb-usb: error while querying for an remote control event. [ 1045.960665][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1045.967619][ T5874] dvb-usb: error while querying for an remote control event. [ 1046.051203][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1046.058153][ T5874] dvb-usb: error while querying for an remote control event. [ 1046.130717][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1046.137693][ T5874] dvb-usb: error while querying for an remote control event. [ 1046.200763][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1046.207719][ T5874] dvb-usb: error while querying for an remote control event. [ 1046.381064][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1046.393352][T20166] netlink: 'syz.5.3651': attribute type 1 has an invalid length. [ 1046.597314][ T5874] dvb-usb: error while querying for an remote control event. [ 1046.662742][ T5808] dvb-usb: bulk message failed: -22 (1/0) [ 1046.677170][ T5808] dvb-usb: error while querying for an remote control event. [ 1046.847640][ T5808] dvb-usb: bulk message failed: -22 (1/0) [ 1047.020786][ T5808] dvb-usb: error while querying for an remote control event. [ 1047.401400][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1047.414901][ T5874] dvb-usb: error while querying for an remote control event. [ 1047.480755][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1047.500678][ T5874] dvb-usb: error while querying for an remote control event. [ 1047.582872][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1047.612990][T20177] binder: 20176:20177 ioctl c0189378 200000000240 returned -22 [ 1047.638119][ T5874] dvb-usb: error while querying for an remote control event. [ 1047.694023][T20177] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1047.748393][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1047.776413][ T5874] dvb-usb: error while querying for an remote control event. [ 1048.271563][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1048.287842][ T5874] dvb-usb: error while querying for an remote control event. [ 1048.370725][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1048.377808][ T5874] dvb-usb: error while querying for an remote control event. [ 1048.418657][T20195] tmpfs: Bad value for 'nr_blocks' [ 1048.450796][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1048.463009][ T5874] dvb-usb: error while querying for an remote control event. [ 1048.541256][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1048.581749][ T5874] dvb-usb: error while querying for an remote control event. [ 1048.639789][ T30] audit: type=1400 audit(1775790610.107:1670): avc: denied { bind } for pid=20201 comm="syz.6.3661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1048.671473][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1048.679511][ T5874] dvb-usb: error while querying for an remote control event. [ 1048.740784][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1048.778861][ T5874] dvb-usb: error while querying for an remote control event. [ 1048.814655][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1048.823646][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1048.850945][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1048.913507][T20207] netlink: 'syz.0.3663': attribute type 10 has an invalid length. [ 1048.931187][ T5874] dvb-usb: error while querying for an remote control event. [ 1048.945612][T20207] team0: Device xfrm0 is of different type [ 1049.140775][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1049.163623][ T5874] dvb-usb: error while querying for an remote control event. [ 1049.240693][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1049.280380][ T5874] dvb-usb: error while querying for an remote control event. [ 1049.412532][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1049.486557][T20217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3665'. [ 1049.723540][ T5874] dvb-usb: error while querying for an remote control event. [ 1049.791675][ T5808] dvb-usb: bulk message failed: -22 (1/0) [ 1049.798703][ T5808] dvb-usb: error while querying for an remote control event. [ 1049.860682][ T5808] dvb-usb: bulk message failed: -22 (1/0) [ 1049.880717][ T5808] dvb-usb: error while querying for an remote control event. [ 1049.951274][ T5808] dvb-usb: bulk message failed: -22 (1/0) [ 1049.995603][ T5808] dvb-usb: error while querying for an remote control event. [ 1050.060767][ T5808] dvb-usb: bulk message failed: -22 (1/0) [ 1050.351002][ T5808] dvb-usb: error while querying for an remote control event. [ 1050.424050][ T5808] dvb-usb: bulk message failed: -22 (1/0) [ 1050.451807][ T5808] dvb-usb: error while querying for an remote control event. [ 1050.541111][ T5808] dvb-usb: bulk message failed: -22 (1/0) [ 1050.655198][ T5808] dvb-usb: error while querying for an remote control event. [ 1050.655784][T20235] netlink: 'syz.6.3671': attribute type 1 has an invalid length. [ 1051.053776][T20243] overlayfs: failed to clone upperpath [ 1051.080821][ T30] audit: type=1400 audit(1775790612.537:1671): avc: denied { bind } for pid=20239 comm="syz.4.3673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1051.104826][ T5808] dvb-usb: bulk message failed: -22 (1/0) [ 1051.106718][T20235] bond1: entered promiscuous mode [ 1051.118258][ T5808] dvb-usb: error while querying for an remote control event. [ 1051.152841][T20235] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1051.180760][ T5808] dvb-usb: bulk message failed: -22 (1/0) [ 1051.187703][ T5808] dvb-usb: error while querying for an remote control event. [ 1051.260731][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1051.267633][ T5874] dvb-usb: error while querying for an remote control event. [ 1051.308656][T20249] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1051.364832][T20249] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1051.386875][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1051.440802][ T5874] dvb-usb: error while querying for an remote control event. [ 1051.474345][T20249] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 1052.077153][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1052.094363][ T5874] dvb-usb: error while querying for an remote control event. [ 1052.200713][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1052.253065][ T5874] dvb-usb: error while querying for an remote control event. [ 1052.533942][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1052.569498][ T5874] dvb-usb: error while querying for an remote control event. [ 1052.596213][T20273] vlan2: entered promiscuous mode [ 1052.613310][T20273] vlan2: entered allmulticast mode [ 1052.619456][T20273] hsr_slave_1: entered allmulticast mode [ 1052.675186][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1052.682307][ T5874] dvb-usb: error while querying for an remote control event. [ 1052.771317][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1052.780652][ T5874] dvb-usb: error while querying for an remote control event. [ 1052.859317][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1052.878848][ T5874] dvb-usb: error while querying for an remote control event. [ 1052.901687][T20282] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 1052.940703][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1053.014062][ T5874] dvb-usb: error while querying for an remote control event. [ 1053.091790][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1053.099765][ T5874] dvb-usb: error while querying for an remote control event. [ 1053.160840][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1053.168346][ T5874] dvb-usb: error while querying for an remote control event. [ 1053.233249][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1053.240947][ T5874] dvb-usb: error while querying for an remote control event. [ 1053.351147][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1053.359918][ T5874] dvb-usb: error while querying for an remote control event. [ 1053.432934][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1053.441648][ T5874] dvb-usb: error while querying for an remote control event. [ 1053.541241][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1053.570778][ T5874] dvb-usb: error while querying for an remote control event. [ 1053.698859][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1053.706186][ T5874] dvb-usb: error while querying for an remote control event. [ 1053.770672][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1053.777609][ T5874] dvb-usb: error while querying for an remote control event. [ 1054.215026][ T9] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1054.233510][ T5954] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1054.281747][ T5954] dvb_usb_az6027 5-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 1054.293923][ T9] dvb_usb_az6027 1-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 1054.311919][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1054.320322][T20306] netlink: 'syz.5.3690': attribute type 1 has an invalid length. [ 1054.330915][ T5874] dvb-usb: error while querying for an remote control event. [ 1054.366255][ T9] usb 1-1: USB disconnect, device number 66 [ 1054.378578][ T5954] usb 5-1: USB disconnect, device number 16 [ 1054.405456][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1054.415671][ T5874] dvb-usb: error while querying for an remote control event. [ 1054.449062][T20306] bond18: entered promiscuous mode [ 1054.456559][T20306] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1054.548837][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1054.553925][T20308] bond18: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1054.556105][ T10] dvb-usb: error while querying for an remote control event. [ 1054.621801][T20308] bond18: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1054.631157][ T5954] dvb-usb: bulk message failed: -22 (1/0) [ 1054.664058][ T5954] dvb-usb: error while querying for an remote control event. [ 1054.668027][T20308] bond18: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 1054.740720][ T5954] dvb-usb: bulk message failed: -22 (1/0) [ 1054.760809][ T9] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1054.770001][ T5954] dvb-usb: error while querying for an remote control event. [ 1054.880664][ T5954] dvb-usb: bulk message failed: -22 (1/0) [ 1054.900984][ T5954] dvb-usb: error while querying for an remote control event. [ 1054.983490][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1055.000769][ T5954] dvb-usb: bulk message failed: -22 (1/0) [ 1055.008878][ T9] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1055.020149][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.034616][ T5954] dvb-usb: error while querying for an remote control event. [ 1055.089181][ T9] usb 1-1: config 0 descriptor?? [ 1055.142658][T18482] usb 3-1: USB disconnect, device number 52 [ 1055.150123][ T5954] dvb-usb: bulk message failed: -22 (1/0) [ 1055.165387][ T5954] dvb-usb: error while querying for an remote control event. [ 1055.224956][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.268446][T20321] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3692'. [ 1055.289470][T18482] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 1055.324894][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1055.358964][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1055.377782][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1055.386578][ T9] usb 1-1: media controller created [ 1055.411000][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1055.487216][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.792597][ T9] az6027: usb out operation failed. (-71) [ 1055.799941][ T9] az6027: usb out operation failed. (-71) [ 1055.816223][ T9] stb0899_attach: Driver disabled by Kconfig [ 1055.824665][ T9] az6027: no front-end attached [ 1055.824665][ T9] [ 1055.834165][ T9] az6027: usb out operation failed. (-71) [ 1055.844093][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1055.878579][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input47 [ 1055.966130][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 1055.999670][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1056.059325][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.063320][ T9] usb 1-1: USB disconnect, device number 67 [ 1056.698456][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1057.312861][T20336] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1057.450731][ T30] audit: type=1400 audit(1775790618.887:1672): avc: denied { setattr } for pid=20335 comm="syz.4.3695" name="tun" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 1057.680271][T20343] overlayfs: failed to clone upperpath [ 1058.033907][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.477779][ T13] bridge0: port 3(batadv0) entered disabled state [ 1058.511546][ T13] bridge_slave_1: left allmulticast mode [ 1058.525573][ T13] bridge_slave_1: left promiscuous mode [ 1058.542818][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.555969][T20363] input: syz1 as /devices/virtual/input/input48 [ 1058.611989][ T13] bridge_slave_0: left allmulticast mode [ 1058.633582][ T30] audit: type=1400 audit(1775790620.107:1673): avc: denied { append } for pid=20345 comm="syz.0.3697" name="usbmon3" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1058.678185][ T13] bridge_slave_0: left promiscuous mode [ 1058.688563][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.824354][T20367] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3704'. [ 1059.670682][ T5919] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1059.707885][T20380] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20380 comm=syz.4.3706 [ 1059.734736][T20380] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3706'. [ 1059.990721][ T5919] usb 4-1: Using ep0 maxpacket: 32 [ 1060.013920][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1060.045498][T20384] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20384 comm=syz.4.3706 [ 1060.103096][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1060.157511][ T5919] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1060.204128][ T5919] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1060.221110][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.246646][ T13] smc: removing net device bridge0 with user defined pnetid SYZ1 [ 1060.273969][ T5919] usb 4-1: config 0 descriptor?? [ 1060.340661][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1060.359665][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1060.373331][ T13] bond0 (unregistering): Released all slaves [ 1060.393143][ T13] bond1 (unregistering): Released all slaves [ 1060.427535][T20352] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3700'. [ 1060.635977][T20391] netlink: 'syz.6.3708': attribute type 2 has an invalid length. [ 1060.664191][ T13] tipc: Left network mode [ 1060.809328][ T5919] usbhid 4-1:0.0: can't add hid device: -71 [ 1060.817823][ T5919] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1060.844562][ T5919] usb 4-1: USB disconnect, device number 53 [ 1061.340671][T20402] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=20402 comm=syz.0.3709 [ 1061.404872][T20402] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=20402 comm=syz.0.3709 [ 1061.750819][ T5919] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1062.002102][ T5919] usb 4-1: device descriptor read/64, error -71 [ 1062.120859][ T13] hsr_slave_0: left promiscuous mode [ 1062.142650][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1062.165641][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1062.193546][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1062.216120][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1062.266376][ T13] veth1_macvtap: left promiscuous mode [ 1062.274193][ T13] veth0_macvtap: left promiscuous mode [ 1062.282839][ T5919] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1062.300504][ T13] veth1_vlan: left promiscuous mode [ 1062.319106][ T13] veth0_vlan: left promiscuous mode [ 1062.590961][ T5919] usb 4-1: device descriptor read/64, error -71 [ 1062.785935][ T5919] usb usb4-port1: attempt power cycle [ 1064.684659][T20436] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3716'. [ 1065.768058][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1065.790255][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1065.923547][T20447] openvswitch: netlink: Flow actions attr not present in new flow. [ 1066.065514][T20441] ipvlan2: entered allmulticast mode [ 1066.072184][T20441] dummy0: entered allmulticast mode [ 1066.242411][T20454] netlink: 'syz.4.3722': attribute type 2 has an invalid length. [ 1068.491600][T20492] tipc: Enabling of bearer rejected, failed to enable media [ 1068.572189][T20495] input: syz1 as /devices/virtual/input/input50 [ 1068.689260][T20499] netlink: 'syz.5.3729': attribute type 1 has an invalid length. [ 1068.730382][T20499] bond19: entered promiscuous mode [ 1068.789307][T20499] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1069.380974][T20504] bond19: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1069.495740][T20504] bond19: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1069.569857][T20504] bond19: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 1070.977939][T20534] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3734'. [ 1071.029493][T20534] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3734'. [ 1071.040476][T20534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1071.122385][T20534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1072.543607][T20553] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3737'. [ 1072.844750][ T409] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1072.938731][T20562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3741'. [ 1072.967132][T20562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3741'. [ 1073.013198][T20562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3741'. [ 1073.041454][T20562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3741'. [ 1073.057562][T20565] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1073.152607][T20562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3741'. [ 1073.259714][T20565] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1073.516505][T20574] netlink: 'syz.0.3742': attribute type 10 has an invalid length. [ 1073.531495][T20574] team0: Device xfrm0 is of different type [ 1074.659537][T20590] netlink: 'syz.6.3743': attribute type 10 has an invalid length. [ 1074.690403][T20590] team0: Device xfrm0 is of different type [ 1075.612150][T20602] ksmbd: Unknown IPC event: 4, ignore. [ 1076.843503][T20618] IPv6: Can't replace route, no match found [ 1077.358304][T20637] vxcan1: tx drop: invalid da for name 0x0000000000000010 [ 1077.440701][T20641] ksmbd: Unknown IPC event: 4, ignore. [ 1078.299267][T20648] netlink: 'syz.6.3760': attribute type 10 has an invalid length. [ 1078.373264][T20648] team0: Device xfrm0 is of different type [ 1078.729567][T20650] 9p: Bad value for 'rfdno' [ 1078.738020][T20650] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3759'. [ 1079.580265][T20660] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3762'. [ 1080.128794][T20672] infiniband syz1: set active [ 1080.134466][T20672] infiniband syz1: added syz_tun [ 1080.157784][T20672] RDS/IB: syz1: added [ 1080.163037][T20672] smc: adding ib device syz1 with port count 1 [ 1080.170399][T20672] smc: ib device syz1 port 1 has no pnetid [ 1080.824246][T20675] overlayfs: failed to clone upperpath [ 1080.981249][T20678] netlink: 'syz.4.3767': attribute type 1 has an invalid length. [ 1081.012201][T20678] bond3: entered promiscuous mode [ 1081.018454][T20678] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1081.094340][T20686] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1081.129734][T20686] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1081.201504][ T10] usb 4-1: new low-speed USB device number 57 using dummy_hcd [ 1081.373004][ T10] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1081.392622][T20686] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 1081.413944][ T10] usb 4-1: config 0 has no interface number 0 [ 1081.446959][ T10] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1081.499415][ T10] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1081.622812][T20698] netlink: 'syz.0.3772': attribute type 10 has an invalid length. [ 1081.640180][T20698] team0: Device xfrm0 is of different type [ 1081.836782][ T10] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1081.879472][ T10] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1081.918058][ T10] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1081.990002][ T10] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1082.040674][ T10] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1082.084500][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.187962][ T10] usb 4-1: config 0 descriptor?? [ 1082.195170][T20680] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1082.220962][T20680] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1082.291564][T20716] ksmbd: Unknown IPC event: 4, ignore. [ 1082.740106][ T10] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1084.462808][T18482] usb 4-1: USB disconnect, device number 57 [ 1084.478989][T18482] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1084.607494][T20755] IPv6: Can't replace route, no match found [ 1085.477377][T20775] netlink: 'syz.5.3784': attribute type 1 has an invalid length. [ 1085.504135][T20775] bond20: entered promiscuous mode [ 1085.511173][T20775] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1085.530546][T20775] bond20: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1085.545972][T20775] bond20: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1085.558722][T20775] bond20: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 1085.663512][T20778] random: crng reseeded on system resumption [ 1085.836749][T20777] FAULT_INJECTION: forcing a failure. [ 1085.836749][T20777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1085.887202][T20777] CPU: 0 UID: 0 PID: 20777 Comm: syz.3.3782 Tainted: G L syzkaller #0 PREEMPT(full) [ 1085.887233][T20777] Tainted: [L]=SOFTLOCKUP [ 1085.887239][T20777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1085.887249][T20777] Call Trace: [ 1085.887254][T20777] [ 1085.887261][T20777] dump_stack_lvl+0x100/0x190 [ 1085.887289][T20777] should_fail_ex.cold+0x5/0xa [ 1085.887304][T20777] _copy_to_user+0x32/0xd0 [ 1085.887318][T20777] bpf_test_finish.isra.0+0x4df/0x660 [ 1085.887335][T20777] ? __pfx___set_cpus_allowed_ptr+0x10/0x10 [ 1085.887350][T20777] ? rcu_is_watching+0x12/0xc0 [ 1085.887364][T20777] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1085.887381][T20777] ? __pfx_bpf_test_finish.isra.0+0x10/0x10 [ 1085.887398][T20777] ? ___migrate_enable+0x90/0xc0 [ 1085.887412][T20777] ? __pfx____migrate_enable+0x10/0x10 [ 1085.887426][T20777] ? rcu_is_watching+0x12/0xc0 [ 1085.887442][T20777] bpf_prog_test_run_flow_dissector+0x5da/0x980 [ 1085.887464][T20777] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 1085.887491][T20777] ? fput+0x79/0x100 [ 1085.887505][T20777] ? __bpf_prog_get+0x97/0x2a0 [ 1085.887521][T20777] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 1085.887538][T20777] __sys_bpf+0x1725/0x4b90 [ 1085.887552][T20777] ? __pfx___sys_bpf+0x10/0x10 [ 1085.887563][T20777] ? finish_task_switch.isra.0+0x200/0xb80 [ 1085.887581][T20777] ? rcu_is_watching+0x12/0xc0 [ 1085.887594][T20777] ? finish_task_switch.isra.0+0x205/0xb80 [ 1085.887609][T20777] ? lockdep_hardirqs_on+0x78/0x100 [ 1085.887625][T20777] ? finish_task_switch.isra.0+0x205/0xb80 [ 1085.887641][T20777] ? rcu_is_watching+0x12/0xc0 [ 1085.887654][T20777] ? trace_sched_exit_tp+0x13a/0x180 [ 1085.887671][T20777] ? __schedule+0x1000/0x6120 [ 1085.887696][T20777] ? fput+0x79/0x100 [ 1085.887709][T20777] ? exit_to_user_mode_loop+0xdd/0x4a0 [ 1085.887720][T20777] ? rcu_is_watching+0x12/0xc0 [ 1085.887735][T20777] __x64_sys_bpf+0x7b/0xc0 [ 1085.887747][T20777] ? lockdep_hardirqs_on+0x78/0x100 [ 1085.887763][T20777] do_syscall_64+0x106/0xf80 [ 1085.887772][T20777] ? clear_bhb_loop+0x40/0x90 [ 1085.887785][T20777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.887797][T20777] RIP: 0033:0x7f735a19c819 [ 1085.887808][T20777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1085.887818][T20777] RSP: 002b:00007f735b09d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1085.887829][T20777] RAX: ffffffffffffffda RBX: 00007f735a416090 RCX: 00007f735a19c819 [ 1085.887836][T20777] RDX: 0000000000000050 RSI: 0000200000000640 RDI: 000000000000000a [ 1085.887842][T20777] RBP: 00007f735b09d090 R08: 0000000000000000 R09: 0000000000000000 [ 1085.887848][T20777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1085.887854][T20777] R13: 00007f735a416128 R14: 00007f735a416090 R15: 00007ffd1ab50ef8 [ 1085.887869][T20777] [ 1086.271010][T20778] FAT-fs (nbd4): unable to read boot sector [ 1089.585668][T20825] IPv6: Can't replace route, no match found [ 1089.850478][T20836] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3796'. [ 1090.854486][T20851] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3799'. [ 1090.905126][ T3574] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1090.916782][T20851] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3799'. [ 1091.297059][T16747] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1091.346428][T16747] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1091.417408][T16747] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1092.116862][T20870] netlink: 'syz.6.3804': attribute type 1 has an invalid length. [ 1092.669451][ T30] audit: type=1400 audit(1775790654.137:1674): avc: denied { append } for pid=20871 comm="syz.5.3805" name="file0" dev="tmpfs" ino=2749 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1092.710166][T20870] bond2: entered promiscuous mode [ 1092.753129][T20870] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1093.853691][T20901] netlink: 'syz.4.3810': attribute type 10 has an invalid length. [ 1093.943517][T20901] team0: Device xfrm0 is of different type [ 1094.836607][T20911] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1094.970669][ T30] audit: type=1326 audit(1775790656.407:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20913 comm="syz.4.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6659c819 code=0x7ffc0000 [ 1095.111825][ T30] audit: type=1326 audit(1775790656.417:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20913 comm="syz.4.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2f6659c819 code=0x7ffc0000 [ 1095.358932][ T30] audit: type=1326 audit(1775790656.417:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20913 comm="syz.4.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6659c819 code=0x7ffc0000 [ 1095.756613][T20929] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3817'. [ 1096.400864][ T58] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1096.409980][ T58] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1096.420828][ T5874] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1096.440873][ T30] audit: type=1326 audit(1775790656.417:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20913 comm="syz.4.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f2f6659c819 code=0x7ffc0000 [ 1096.586573][ T30] audit: type=1326 audit(1775790656.417:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20913 comm="syz.4.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6659c819 code=0x7ffc0000 [ 1096.680801][ T5874] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1096.785684][ T30] audit: type=1326 audit(1775790656.417:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20913 comm="syz.4.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6659c819 code=0x7ffc0000 [ 1097.207513][ T5874] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1097.272715][ T30] audit: type=1400 audit(1775790658.747:1681): avc: denied { accept } for pid=20933 comm="syz.5.3819" path="socket:[69965]" dev="sockfs" ino=69965 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1097.354995][T20935] netlink: 'syz.5.3819': attribute type 1 has an invalid length. [ 1098.835364][T20957] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1100.321921][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1100.597696][T20971] netlink: 'syz.4.3828': attribute type 1 has an invalid length. [ 1100.617409][ T30] audit: type=1400 audit(1775790662.087:1682): avc: denied { read } for pid=20972 comm="syz.3.3827" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1100.654461][T20973] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3827'. [ 1100.685446][T20973] netlink: 'syz.3.3827': attribute type 7 has an invalid length. [ 1100.716240][T20971] bond4: entered promiscuous mode [ 1100.724986][T20973] netlink: 'syz.3.3827': attribute type 8 has an invalid length. [ 1100.756298][T20971] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1100.780754][T20973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3827'. [ 1100.847885][T20979] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1100.871038][T20979] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1100.905961][T20979] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 1101.803631][T20992] IPv6: Can't replace route, no match found [ 1104.195990][T21031] netlink: 'syz.6.3843': attribute type 1 has an invalid length. [ 1104.293386][T21031] bond3: entered promiscuous mode [ 1104.349020][T21031] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1104.425850][ T58] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1104.540144][T21033] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1104.579903][T21033] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1105.010839][T21033] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 1105.214713][T21040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1105.265595][T21040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1105.641489][ T5919] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1105.842336][ T5919] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1105.859846][ T5919] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1105.898633][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.932449][ T5919] usb 1-1: config 0 descriptor?? [ 1106.026053][T21065] netlink: 'syz.4.3852': attribute type 2 has an invalid length. [ 1106.474932][T21075] openvswitch: netlink: IP tunnel dst address not specified [ 1106.486585][T21072] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3853'. [ 1106.579416][ T5919] usb 1-1: string descriptor 0 read error: -71 [ 1106.615404][ T5919] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1106.649246][ T5919] usb 1-1: USB disconnect, device number 68 [ 1106.662462][ T30] audit: type=1400 audit(1775790668.127:1683): avc: denied { create } for pid=21067 comm="syz.4.3853" name="#27" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1106.705711][T21072] netlink: 'syz.4.3853': attribute type 39 has an invalid length. [ 1106.715602][ T30] audit: type=1400 audit(1775790668.137:1684): avc: denied { link } for pid=21067 comm="syz.4.3853" name="#27" dev="tmpfs" ino=1312 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1106.751479][T21083] syzkaller0: entered promiscuous mode [ 1106.758113][T21083] syzkaller0: entered allmulticast mode [ 1106.768881][T21083] tipc: Enabled bearer , priority 0 [ 1106.777654][T21082] tipc: Resetting bearer [ 1106.795323][T21082] tipc: Disabling bearer [ 1106.805888][ T30] audit: type=1400 audit(1775790668.137:1685): avc: denied { rename } for pid=21067 comm="syz.4.3853" name="#28" dev="tmpfs" ino=1312 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1107.173160][T21092] futex_wake_op: syz.5.3860 tries to shift op by 144; fix this program [ 1107.355552][T21096] netlink: 'syz.6.3861': attribute type 10 has an invalid length. [ 1107.377549][T21096] team0: Device xfrm0 is of different type [ 1107.573273][T21092] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3860'. [ 1107.721890][T21101] netlink: 'syz.5.3863': attribute type 2 has an invalid length. [ 1107.919451][T21112] syzkaller0: entered promiscuous mode [ 1107.927841][T21112] syzkaller0: entered allmulticast mode [ 1107.937460][T21112] tipc: Started in network mode [ 1107.943523][T21112] tipc: Node identity d600ecf1dd41, cluster identity 4711 [ 1107.953358][T21112] tipc: Enabled bearer , priority 0 [ 1107.973962][T21111] tipc: Resetting bearer [ 1108.004100][T21111] tipc: Disabling bearer [ 1108.320782][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1108.900723][T18482] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 1109.050768][T18482] usb 1-1: device descriptor read/64, error -71 [ 1109.124098][T21133] Cannot find add_set index 65532 as target [ 1109.361256][T18482] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 1109.610654][T18482] usb 1-1: device descriptor read/64, error -71 [ 1109.751249][T18482] usb usb1-port1: attempt power cycle [ 1109.897612][T21138] netlink: 'syz.4.3876': attribute type 1 has an invalid length. [ 1109.928621][T21138] bond5: entered promiscuous mode [ 1109.960093][T21138] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1110.130678][T18482] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 1110.134941][T21151] netlink: 'syz.6.3877': attribute type 10 has an invalid length. [ 1110.158858][T21151] team0: Device xfrm0 is of different type [ 1110.251424][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1110.260641][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1110.351368][T18482] usb 1-1: device descriptor read/8, error -71 [ 1110.470969][T21155] netlink: 'syz.4.3879': attribute type 2 has an invalid length. [ 1110.550122][T21157] netlink: 'syz.6.3880': attribute type 4 has an invalid length. [ 1110.593156][T18482] usb 1-1: new full-speed USB device number 72 using dummy_hcd [ 1110.643746][T18482] usb 1-1: device descriptor read/8, error -71 [ 1110.853423][T18482] usb usb1-port1: unable to enumerate USB device [ 1110.931199][T21162] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3881'. [ 1111.833225][T21182] netlink: 'syz.0.3889': attribute type 1 has an invalid length. [ 1111.939856][T21182] bond16: entered promiscuous mode [ 1111.959107][T21182] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1112.110714][ T30] audit: type=1800 audit(1775790673.577:1686): pid=21195 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.3891" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1112.199419][T21190] tipc: Enabled bearer , priority 0 [ 1112.249077][T21202] netlink: 'syz.5.3892': attribute type 10 has an invalid length. [ 1112.259839][ T409] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1112.273208][ T409] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1112.284165][ T10] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1112.295802][T21202] team0: Device xfrm0 is of different type [ 1113.152446][T21209] netlink: 'syz.4.3893': attribute type 10 has an invalid length. [ 1113.165566][T21209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1113.175386][T21209] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1113.232828][T21209] loop5: detected capacity change from 0 to 7 [ 1113.372479][ T792] tipc: Node number set to 1427041600 [ 1113.393837][ T5874] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1113.420546][ T10] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1114.025154][T21209] Dev loop5: unable to read RDB block 7 [ 1114.031875][T21209] loop5: AHDI p1 [ 1114.036231][T21209] loop5: partition table partially beyond EOD, truncated [ 1114.352648][T21198] syzkaller0: entered promiscuous mode [ 1114.359227][T21198] syzkaller0: entered allmulticast mode [ 1114.440929][T21187] tipc: Resetting bearer [ 1114.582970][T21187] tipc: Disabling bearer [ 1115.559161][T21237] kAFS: unable to lookup cell '(,cL' [ 1116.080755][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1116.240369][T21249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1116.260144][T21249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1116.490734][ T5874] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1116.788666][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1116.812980][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1116.828372][ T5874] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1116.840648][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.859419][ T5874] usb 1-1: config 0 descriptor?? [ 1116.913708][T21261] netlink: 'syz.5.3905': attribute type 1 has an invalid length. [ 1116.961242][T21261] bond21: entered promiscuous mode [ 1117.013066][T21261] 8021q: adding VLAN 0 to HW filter on device bond21 [ 1117.090985][ T5874] usbhid 1-1:0.0: can't add hid device: -71 [ 1117.100314][ T5874] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1117.129678][ T5874] usb 1-1: USB disconnect, device number 73 [ 1117.310671][T21268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3908'. [ 1118.236070][T21291] Cannot find set identified by id 3 to match [ 1118.971914][T21306] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21306 comm=syz.0.3918 [ 1121.397940][T21336] netlink: 'syz.3.3923': attribute type 10 has an invalid length. [ 1121.460200][T21336] team0: Device xfrm0 is of different type [ 1122.173279][T21348] lo speed is unknown, defaulting to 1000 [ 1122.180437][T21348] lo speed is unknown, defaulting to 1000 [ 1122.193851][T21348] lo speed is unknown, defaulting to 1000 [ 1122.217984][T21348] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1122.259867][T21348] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1122.544356][T21348] lo speed is unknown, defaulting to 1000 [ 1122.553115][T21348] lo speed is unknown, defaulting to 1000 [ 1122.562592][T21348] lo speed is unknown, defaulting to 1000 [ 1122.570189][T21348] lo speed is unknown, defaulting to 1000 [ 1122.577809][T21348] lo speed is unknown, defaulting to 1000 [ 1122.585689][T21348] lo speed is unknown, defaulting to 1000 [ 1123.659117][T21362] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3933'. [ 1123.680745][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1123.691173][T21362] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3933'. [ 1124.192437][T21370] IPv6: Can't replace route, no match found [ 1124.321354][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1125.067889][T21381] openvswitch: netlink: Flow actions attr not present in new flow. [ 1126.335580][T21394] netlink: 'syz.4.3941': attribute type 10 has an invalid length. [ 1126.358164][T21394] team0: Device xfrm0 is of different type [ 1127.977348][T21407] overlayfs: failed to resolve './file0': -2 [ 1128.360969][T21411] openvswitch: netlink: Flow actions attr not present in new flow. [ 1129.217500][T21433] netlink: 'syz.0.3948': attribute type 2 has an invalid length. [ 1130.064305][T21446] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1130.086521][T21446] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1130.265061][ T30] audit: type=1400 audit(1775790691.737:1687): avc: denied { getopt } for pid=21447 comm="syz.6.3955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1130.532538][T18482] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1131.064731][T21462] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1134.158202][T21491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3968'. [ 1134.603675][ T5811] Bluetooth: hci2: unexpected event for opcode 0x0c22 [ 1134.695140][T21507] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1134.717595][T21507] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1134.913532][T21510] FAULT_INJECTION: forcing a failure. [ 1134.913532][T21510] name failslab, interval 1, probability 0, space 0, times 0 [ 1134.929682][T21510] CPU: 0 UID: 0 PID: 21510 Comm: syz.0.3964 Tainted: G L syzkaller #0 PREEMPT(full) [ 1134.929710][T21510] Tainted: [L]=SOFTLOCKUP [ 1134.929716][T21510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1134.929727][T21510] Call Trace: [ 1134.929733][T21510] [ 1134.929740][T21510] dump_stack_lvl+0x100/0x190 [ 1134.929774][T21510] should_fail_ex.cold+0x5/0xa [ 1134.929799][T21510] should_failslab+0xc2/0x120 [ 1134.929819][T21510] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1134.929847][T21510] ? __alloc_skb+0x140/0x710 [ 1134.929883][T21510] __alloc_skb+0x140/0x710 [ 1134.929906][T21510] ? __alloc_skb+0x5b7/0x710 [ 1134.929929][T21510] ? __pfx___alloc_skb+0x10/0x10 [ 1134.929960][T21510] netlink_alloc_large_skb+0x69/0x150 [ 1134.929981][T21510] netlink_sendmsg+0x680/0xda0 [ 1134.930003][T21510] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1134.930019][T21510] ? __might_fault+0x50/0x140 [ 1134.930053][T21510] ____sys_sendmsg+0x9e1/0xb70 [ 1134.930071][T21510] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1134.930091][T21510] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1134.930122][T21510] ___sys_sendmsg+0x190/0x1e0 [ 1134.930145][T21510] ? __pfx____sys_sendmsg+0x10/0x10 [ 1134.930197][T21510] __sys_sendmsg+0x170/0x220 [ 1134.930224][T21510] ? __pfx___sys_sendmsg+0x10/0x10 [ 1134.930272][T21510] do_syscall_64+0x106/0xf80 [ 1134.930290][T21510] ? clear_bhb_loop+0x40/0x90 [ 1134.930312][T21510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.930331][T21510] RIP: 0033:0x7fc39879c819 [ 1134.930346][T21510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1134.930363][T21510] RSP: 002b:00007fc3995b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1134.930382][T21510] RAX: ffffffffffffffda RBX: 00007fc398a16090 RCX: 00007fc39879c819 [ 1134.930393][T21510] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000a [ 1134.930403][T21510] RBP: 00007fc3995b2090 R08: 0000000000000000 R09: 0000000000000000 [ 1134.930413][T21510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1134.930424][T21510] R13: 00007fc398a16128 R14: 00007fc398a16090 R15: 00007ffe1a581678 [ 1134.930448][T21510] [ 1136.021676][ T58] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1137.297939][T21531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3976'. [ 1137.367112][T21536] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3977'. [ 1137.452151][T21538] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1137.546848][T21540] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1137.815902][T21545] syzkaller0: entered promiscuous mode [ 1137.835381][T21545] syzkaller0: entered allmulticast mode [ 1137.876127][T21545] tipc: Enabled bearer , priority 0 [ 1137.885139][T21543] tipc: Resetting bearer [ 1137.905813][T21543] tipc: Disabling bearer [ 1138.229462][T21555] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3983'. [ 1138.390994][T21555] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1139.040934][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1140.241032][ T792] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1140.460737][ T792] usb 5-1: Using ep0 maxpacket: 32 [ 1140.476908][ T792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1140.609066][ T792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1140.640244][ T792] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1140.660914][ T792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.689092][ T792] usb 5-1: config 0 descriptor?? [ 1140.712300][ T792] hub 5-1:0.0: USB hub found [ 1140.943253][ T792] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 1140.993425][ T792] usbhid 5-1:0.0: can't add hid device: -71 [ 1141.101149][ T792] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1141.131518][ T792] usb 5-1: USB disconnect, device number 17 [ 1141.138820][T21583] comedi: valid board names for 8255 driver are: [ 1141.164018][T21583] 8255 [ 1141.167443][T21583] comedi: valid board names for vmk80xx driver are: [ 1141.177006][T21583] vmk80xx [ 1141.180814][T21583] comedi: valid board names for usbduxsigma driver are: [ 1141.189372][T21583] usbduxsigma [ 1141.594221][T21583] comedi: valid board names for usbduxfast driver are: [ 1141.651198][T21583] usbduxfast [ 1141.662362][T21583] comedi: valid board names for usbdux driver are: [ 1141.675222][T21591] syzkaller0: entered promiscuous mode [ 1141.684529][T21591] syzkaller0: entered allmulticast mode [ 1141.691284][T21583] usbdux [ 1141.694831][T21583] comedi: valid board names for ni6501 driver are: [ 1141.711378][T21591] tipc: Enabled bearer , priority 0 [ 1141.719650][T21583] ni6501 [ 1141.723375][T21583] comedi: valid board names for dt9812 driver are: [ 1141.732446][T21583] dt9812 [ 1141.738217][T21590] tipc: Resetting bearer [ 1141.748337][T21583] comedi: valid board names for ni_labpc_cs driver are: [ 1141.809782][T21590] tipc: Disabling bearer [ 1141.816765][T21583] ni_labpc_cs [ 1141.820982][T21583] comedi: valid board names for ni_daq_700 driver are: [ 1141.829187][T21583] ni_daq_700 [ 1141.976541][T21583] comedi: valid board names for labpc_pci driver are: [ 1141.994977][T21583] labpc_pci [ 1141.998969][T21583] comedi: valid board names for adl_pci9118 driver are: [ 1142.007890][T21583] pci9118dg [ 1142.011899][T21583] pci9118hg [ 1142.016145][T21583] pci9118hr [ 1142.020343][T21583] comedi: valid board names for 8255_pci driver are: [ 1142.031596][T21583] 8255_pci [ 1142.036466][T21583] comedi: valid board names for s526 driver are: [ 1142.046571][T21593] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1142.138245][T21583] s526 [ 1142.143426][T21583] comedi: valid board names for multiq3 driver are: [ 1142.275937][T21602] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1142.299159][T21583] multiq3 [ 1142.448479][T21583] comedi: valid board names for pcmuio driver are: [ 1142.456569][T21583] pcmuio48 [ 1142.728007][T21583] pcmuio96 [ 1142.740704][T21583] comedi: valid board names for pcmmio driver are: [ 1142.750336][T21583] pcmmio [ 1142.755737][T21583] comedi: valid board names for pcmda12 driver are: [ 1142.846243][T21583] pcmda12 [ 1142.846276][T21583] comedi: valid board names for pcmad driver are: [ 1142.846286][T21583] pcmad12 [ 1142.846294][T21583] pcmad16 [ 1142.846300][T21583] comedi: valid board names for ni_labpc driver are: [ 1142.846306][T21583] lab-pc-1200 [ 1142.846310][T21583] lab-pc-1200ai [ 1142.846315][T21583] lab-pc+ [ 1142.846320][T21583] comedi: valid board names for atmio16 driver are: [ 1142.846325][T21583] atmio16 [ 1142.846330][T21583] atmio16d [ 1142.846335][T21583] comedi: valid board names for ni_at_ao driver are: [ 1142.846340][T21583] at-ao-6 [ 1142.846345][T21583] at-ao-10 [ 1142.846349][T21583] comedi: valid board names for ni_at_a2150 driver are: [ 1142.846355][T21583] ni_at_a2150 [ 1142.846359][T21583] comedi: valid board names for adq12b driver are: [ 1142.846365][T21583] adq12b [ 1142.846370][T21583] comedi: valid board names for mpc624 driver are: [ 1142.846376][T21583] mpc624 [ 1142.846380][T21583] comedi: valid board names for c6xdigio driver are: [ 1142.846386][T21583] c6xdigio [ 1142.846390][T21583] comedi: valid board names for aio_iiro_16 driver are: [ 1142.846396][T21583] aio_iiro_16 [ 1142.846401][T21583] comedi: valid board names for aio_aio12_8 driver are: [ 1142.846407][T21583] aio_aio12_8 [ 1142.846411][T21583] aio_ai12_8 [ 1142.846415][T21583] aio_ao12_4 [ 1142.846419][T21583] comedi: valid board names for fl512 driver are: [ 1142.846424][T21583] fl512 [ 1142.846428][T21583] comedi: valid board names for dmm32at driver are: [ 1142.846433][T21583] dmm32at [ 1142.846437][T21583] comedi: valid board names for dt282x driver are: [ 1142.846442][T21583] dt2821 [ 1142.846446][T21583] dt2821-f [ 1142.846449][T21583] dt2821-g [ 1142.846453][T21583] dt2823 [ 1142.846457][T21583] dt2824-pgh [ 1142.846461][T21583] dt2824-pgl [ 1142.846465][T21583] dt2825 [ 1142.846469][T21583] dt2827 [ 1142.846473][T21583] dt2828 [ 1142.846477][T21583] dt2829 [ 1142.846480][T21583] dt21-ez [ 1142.846484][T21583] dt23-ez [ 1142.846488][T21583] dt24-ez [ 1142.846492][T21583] dt24-ez-pgl [ 1142.846496][T21583] comedi: valid board names for dt2817 driver are: [ 1142.846501][T21583] dt2817 [ 1142.846505][T21583] comedi: valid board names for dt2815 driver are: [ 1142.846511][T21583] dt2815 [ 1142.846515][T21583] comedi: valid board names for dt2814 driver are: [ 1142.846520][T21583] dt2814 [ 1142.846524][T21583] comedi: valid board names for dt2811 driver are: [ 1142.846529][T21583] dt2811-pgh [ 1142.846533][T21583] dt2811-pgl [ 1142.846537][T21583] comedi: valid board names for dt2801 driver are: [ 1142.846544][T21583] dt2801 [ 1142.846548][T21583] comedi: valid board names for das6402 driver are: [ 1142.846553][T21583] das6402-12 [ 1142.846557][T21583] das6402-16 [ 1142.846561][T21583] comedi: valid board names for das1800 driver are: [ 1142.846566][T21583] das-1701st [ 1142.846570][T21583] das-1701st-da [ 1142.846574][T21583] das-1702st [ 1142.846578][T21583] das-1702st-da [ 1142.846582][T21583] das-1702hr [ 1142.846586][T21583] das-1702hr-da [ 1142.846590][T21583] das-1701ao [ 1142.846594][T21583] das-1702ao [ 1142.846599][T21583] das-1801st [ 1142.846603][T21583] das-1801st-da [ 1142.846607][T21583] das-1802st [ 1142.846611][T21583] das-1802st-da [ 1142.846615][T21583] das-1802hr [ 1142.846619][T21583] das-1802hr-da [ 1142.846623][T21583] das-1801hc [ 1142.846627][T21583] das-1802hc [ 1142.846631][T21583] das-1801ao [ 1142.846635][T21583] das-1802ao [ 1142.846639][T21583] comedi: valid board names for das800 driver are: [ 1142.846644][T21583] das-800 [ 1142.846648][T21583] cio-das800 [ 1142.846652][T21583] das-801 [ 1142.846656][T21583] cio-das801 [ 1142.846660][T21583] das-802 [ 1142.846664][T21583] cio-das802 [ 1142.846667][T21583] cio-das802/16 [ 1142.846672][T21583] comedi: valid board names for isa-das08 driver are: [ 1142.846677][T21583] isa-das08 [ 1142.846681][T21583] das08-pgm [ 1142.846685][T21583] das08-pgh [ 1142.846689][T21583] das08-pgl [ 1142.846693][T21583] das08-aoh [ 1142.846697][T21583] das08-aol [ 1142.846701][T21583] das08-aom [ 1142.846705][T21583] das08/jr-ao [ 1142.846709][T21583] das08jr-16-ao [ 1142.846713][T21583] pc104-das08 [ 1142.846717][T21583] das08jr/16 [ 1142.846721][T21583] comedi: valid board names for das16m1 driver are: [ 1142.846726][T21583] das16m1 [ 1142.846729][T21583] comedi: valid board names for dac02 driver are: [ 1142.846734][T21583] dac02 [ 1142.846738][T21583] comedi: valid board names for rti802 driver are: [ 1142.846743][T21583] rti802 [ 1142.846747][T21583] comedi: valid board names for rti800 driver are: [ 1142.846753][T21583] rti800 [ 1142.846756][T21583] rti815 [ 1142.846760][T21583] comedi: valid board names for pcm3724 driver are: [ 1142.846765][T21583] pcm3724 [ 1142.846769][T21583] comedi: valid board names for pcl818 driver are: [ 1142.846774][T21583] pcl818l [ 1142.846778][T21583] pcl818h [ 1142.846782][T21583] pcl818hd [ 1142.846786][T21583] pcl818hg [ 1142.846796][T21583] pcl818 [ 1142.846800][T21583] pcl718 [ 1142.846804][T21583] pcm3718 [ 1142.846808][T21583] comedi: valid board names for pcl816 driver are: [ 1142.846813][T21583] pcl816 [ 1142.846817][T21583] pcl814b [ 1142.846821][T21583] comedi: valid board names for pcl812 driver are: [ 1142.846826][T21583] pcl812 [ 1142.846830][T21583] pcl812pg [ 1142.846834][T21583] acl8112pg [ 1142.846838][T21583] acl8112dg [ 1142.846842][T21583] acl8112hg [ 1142.846846][T21583] a821pgl [ 1142.846850][T21583] a821pglnda [ 1142.846855][T21583] a821pgh [ 1142.846860][T21583] a822pgl [ 1142.846864][T21583] a822pgh [ 1142.846868][T21583] a823pgl [ 1142.846872][T21583] a823pgh [ 1142.846876][T21583] pcl813 [ 1142.846881][T21583] pcl813b [ 1142.846885][T21583] acl8113 [ 1142.846890][T21583] iso813 [ 1142.846894][T21583] acl8216 [ 1142.846898][T21583] a826pg [ 1142.846903][T21583] comedi: valid board names for pcl730 driver are: [ 1142.846909][T21583] pcl730 [ 1142.846913][T21583] iso730 [ 1142.846917][T21583] acl7130 [ 1142.846921][T21583] pcm3730 [ 1142.846925][T21583] pcl725 [ 1142.846930][T21583] p8r8dio [ 1142.846935][T21583] acl7225b [ 1142.846939][T21583] p16r16dio [ 1142.846944][T21583] pcl733 [ 1142.846948][T21583] pcl734 [ 1142.846952][T21583] opmm-1616-xt [ 1142.846957][T21583] pearl-mm-p [ 1142.846961][T21583] ir104-pbf [ 1142.846965][T21583] comedi: valid board names for pcl726 driver are: [ 1142.846971][T21583] pcl726 [ 1142.846975][T21583] pcl727 [ 1142.846979][T21583] pcl728 [ 1142.846983][T21583] acl6126 [ 1142.846988][T21583] acl6128 [ 1142.846992][T21583] comedi: valid board names for pcl724 driver are: [ 1142.846998][T21583] pcl724 [ 1142.847003][T21583] pcl722 [ 1142.847007][T21583] pcl731 [ 1142.847011][T21583] acl7122 [ 1142.847015][T21583] acl7124 [ 1142.847019][T21583] pet48dio [ 1142.847022][T21583] pcmio48 [ 1142.847026][T21583] onyx-mm-dio [ 1142.847030][T21583] comedi: valid board names for pcl711 driver are: [ 1142.847035][T21583] pcl711 [ 1142.847039][T21583] pcl711b [ 1142.847043][T21583] acl8112hg [ 1142.847047][T21583] acl8112dg [ 1142.847050][T21583] comedi: valid board names for amplc_pc263 driver are: [ 1142.847055][T21583] pc263 [ 1142.847059][T21583] comedi: valid board names for amplc_pc236 driver are: [ 1142.847065][T21583] pc36at [ 1142.847069][T21583] comedi: valid board names for amplc_dio200 driver are: [ 1142.847074][T21583] pc212e [ 1142.847077][T21583] pc214e [ 1142.847081][T21583] pc215e [ 1142.847085][T21583] pc218e [ 1142.847089][T21583] pc272e [ 1142.847093][T21583] comedi: valid board names for comedi_parport driver are: [ 1142.847098][T21583] comedi_parport [ 1142.847102][T21583] comedi: valid board names for comedi_test driver are: [ 1142.847107][T21583] comedi_test [ 1142.847111][T21583] comedi: valid board names for comedi_bond driver are: [ 1142.847117][T21583] comedi_bond [ 1143.090753][ T792] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1143.151497][T12854] Bluetooth: hci1: command 0x0406 tx timeout [ 1146.629966][T21641] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1147.071171][T21643] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4004'. [ 1149.125156][ T792] usb 5-1: device descriptor read/64, error -110 [ 1149.361278][ T792] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1149.490763][ T792] usb 5-1: device descriptor read/64, error -32 [ 1149.600833][ T792] usb usb5-port1: attempt power cycle [ 1149.890004][T21667] netlink: 'syz.5.4009': attribute type 10 has an invalid length. [ 1149.901328][T21667] team0: Device xfrm0 is of different type [ 1150.286711][T21681] tipc: Enabling of bearer rejected, failed to enable media [ 1151.422451][T21696] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1151.798523][T21704] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1152.943615][T21717] bridge0: port 3(syz_tun) entered blocking state [ 1152.951760][T21717] bridge0: port 3(syz_tun) entered disabled state [ 1152.961270][T21717] syz_tun: entered allmulticast mode [ 1152.978275][T21717] syz_tun: entered promiscuous mode [ 1152.986023][T21717] bridge0: port 3(syz_tun) entered blocking state [ 1152.994390][T21717] bridge0: port 3(syz_tun) entered forwarding state [ 1153.524030][T21720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4027'. [ 1153.612127][T21722] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4028'. [ 1153.622977][T21722] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4028'. [ 1153.644541][T21722] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4028'. [ 1153.660699][T21722] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4028'. [ 1153.749685][T21722] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4028'. [ 1154.486328][T21744] 9pnet_virtio: no channels available for device syz [ 1154.630941][T21746] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4033'. [ 1154.895636][T21752] syzkaller0: entered promiscuous mode [ 1154.902886][T21752] syzkaller0: entered allmulticast mode [ 1154.914993][T21752] tc action pedit 'at' offset -255 out of bounds [ 1154.923162][T21752] tc action pedit 'at' offset -255 out of bounds [ 1154.930811][T21752] tc action pedit 'at' offset -255 out of bounds [ 1154.938404][T21752] tc action pedit 'at' offset -255 out of bounds [ 1154.946040][T21752] tc action pedit 'at' offset -255 out of bounds [ 1154.953675][T21752] tc action pedit 'at' offset -255 out of bounds [ 1154.961294][T21752] tc action pedit 'at' offset -255 out of bounds [ 1154.968889][T21752] tc action pedit 'at' offset -255 out of bounds [ 1154.976520][T21752] tc action pedit 'at' offset -255 out of bounds [ 1154.984113][T21752] tc action pedit 'at' offset -255 out of bounds [ 1154.991750][T21752] TC_ACT_REPEAT abuse ? [ 1155.050715][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1155.070998][ T5954] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 1155.160457][T21760] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1155.286902][ T5954] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1155.306149][ T5954] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1155.320128][ T5954] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1155.337429][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.385616][ T5954] usb 4-1: config 0 descriptor?? [ 1155.394053][ T5954] hub 4-1:0.0: USB hub found [ 1155.597751][ T5954] hub 4-1:0.0: 1 port detected [ 1155.610192][T21769] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1156.964523][ T24] usb 4-1: USB disconnect, device number 59 [ 1157.101616][T21775] netlink: 'syz.4.4043': attribute type 1 has an invalid length. [ 1157.296822][T21777] xt_socket: unknown flags 0x4 [ 1158.234753][T21777] bond6: (slave bridge3): Enslaving as a backup interface with an up link [ 1158.625279][T21794] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 1160.157179][T21810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4049'. [ 1160.724682][T21819] 9p: Bad value for 'rfdno' [ 1161.459896][T21830] lo speed is unknown, defaulting to 1000 [ 1162.148368][T21835] netlink: 'syz.0.4055': attribute type 8 has an invalid length. [ 1162.191246][T21841] netlink: 'syz.0.4055': attribute type 8 has an invalid length. [ 1163.079081][ T30] audit: type=1326 audit(1775790724.537:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21849 comm="syz.5.4058" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcd0d19c819 code=0x0 [ 1163.628760][T21855] FAULT_INJECTION: forcing a failure. [ 1163.628760][T21855] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1163.703174][T21855] CPU: 1 UID: 0 PID: 21855 Comm: syz.6.4060 Tainted: G L syzkaller #0 PREEMPT(full) [ 1163.703204][T21855] Tainted: [L]=SOFTLOCKUP [ 1163.703210][T21855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1163.703219][T21855] Call Trace: [ 1163.703224][T21855] [ 1163.703229][T21855] dump_stack_lvl+0x100/0x190 [ 1163.703256][T21855] should_fail_ex.cold+0x5/0xa [ 1163.703279][T21855] _copy_from_user+0x2e/0xd0 [ 1163.703299][T21855] copy_msghdr_from_user+0x9f/0x4f0 [ 1163.703320][T21855] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1163.703342][T21855] ___sys_sendmsg+0x106/0x1e0 [ 1163.703356][T21855] ? __pfx____sys_sendmsg+0x10/0x10 [ 1163.703388][T21855] __sys_sendmsg+0x170/0x220 [ 1163.703404][T21855] ? __pfx___sys_sendmsg+0x10/0x10 [ 1163.703428][T21855] do_syscall_64+0x106/0xf80 [ 1163.703438][T21855] ? clear_bhb_loop+0x40/0x90 [ 1163.703453][T21855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1163.703464][T21855] RIP: 0033:0x7f1c1c59c819 [ 1163.703478][T21855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1163.703488][T21855] RSP: 002b:00007f1c1d446028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1163.703500][T21855] RAX: ffffffffffffffda RBX: 00007f1c1c815fa0 RCX: 00007f1c1c59c819 [ 1163.703506][T21855] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000008 [ 1163.703512][T21855] RBP: 00007f1c1d446090 R08: 0000000000000000 R09: 0000000000000000 [ 1163.703518][T21855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1163.703524][T21855] R13: 00007f1c1c816038 R14: 00007f1c1c815fa0 R15: 00007ffe0be1f958 [ 1163.703538][T21855] [ 1165.832638][T21888] netlink: 'syz.0.4068': attribute type 2 has an invalid length. [ 1167.118025][ T409] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1167.201112][T21905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4073'. [ 1167.668850][T21912] openvswitch: netlink: Flow actions attr not present in new flow. [ 1167.963013][T21914] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4077'. [ 1168.036825][T21915] netlink: 'syz.4.4077': attribute type 2 has an invalid length. [ 1168.355067][T21917] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.364044][T21917] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.384396][T21920] fuse: Unknown parameter 'K ʾ֭4-f<4c1>LFP~ry"xS cR& pg'B!ރsO0x0000000000000007' [ 1168.463584][T21925] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4080'. [ 1169.078728][T21917] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1169.121336][T21917] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1170.822833][ T10] syz1: Port: 1 Link DOWN [ 1170.843549][ T3574] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.881410][ T3574] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.923771][ T3574] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.993435][T21939] erspan0: entered promiscuous mode [ 1171.024188][ T3574] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.040786][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1171.075489][T21951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4086'. [ 1171.162180][T21956] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1171.693756][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1171.701644][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1172.283090][ T30] audit: type=1400 audit(1775790733.737:1689): avc: denied { recv } for pid=5792 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.238 dest=47446 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1172.392567][ T5954] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1172.456130][T21976] geneve2: entered promiscuous mode [ 1172.463677][T21976] geneve2: entered allmulticast mode [ 1172.730009][T21980] netlink: 220 bytes leftover after parsing attributes in process `syz.4.4096'. [ 1172.755957][ T30] audit: type=1400 audit(1775790734.147:1690): avc: denied { getopt } for pid=21978 comm="syz.4.4096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1172.859399][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1172.907172][ T5954] usb 1-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 1172.960377][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.107196][ T5954] usb 1-1: config 0 descriptor?? [ 1173.465952][T22000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4102'. [ 1173.695110][ T5954] hid_parser_main: 222 callbacks suppressed [ 1173.695124][ T5954] petalynx 0003:18B1:0037.0009: unknown main item tag 0x0 [ 1174.158849][ T5954] petalynx 0003:18B1:0037.0009: unknown main item tag 0x0 [ 1174.181965][ T5954] petalynx 0003:18B1:0037.0009: unknown main item tag 0x0 [ 1174.191795][ T5954] petalynx 0003:18B1:0037.0009: unknown main item tag 0x0 [ 1174.200415][ T5954] petalynx 0003:18B1:0037.0009: unknown main item tag 0x0 [ 1174.213977][ T5954] petalynx 0003:18B1:0037.0009: unknown main item tag 0x0 [ 1174.256056][ T5954] petalynx 0003:18B1:0037.0009: unknown global tag 0xd [ 1174.265024][ T5954] petalynx 0003:18B1:0037.0009: item 0 0 1 13 parsing failed [ 1174.279798][ T5954] petalynx 0003:18B1:0037.0009: parse failed [ 1174.297038][ T5954] petalynx 0003:18B1:0037.0009: probe with driver petalynx failed with error -22 [ 1174.333000][T22011] FAULT_INJECTION: forcing a failure. [ 1174.333000][T22011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1174.460270][T22011] CPU: 1 UID: 0 PID: 22011 Comm: syz.6.4104 Tainted: G L syzkaller #0 PREEMPT(full) [ 1174.460302][T22011] Tainted: [L]=SOFTLOCKUP [ 1174.460308][T22011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1174.460316][T22011] Call Trace: [ 1174.460322][T22011] [ 1174.460328][T22011] dump_stack_lvl+0x100/0x190 [ 1174.460360][T22011] should_fail_ex.cold+0x5/0xa [ 1174.460382][T22011] _copy_from_iter+0x1f4/0x1690 [ 1174.460404][T22011] ? __asan_memset+0x23/0x50 [ 1174.460426][T22011] ? __pfx__copy_from_iter+0x10/0x10 [ 1174.460445][T22011] ? __pfx___alloc_skb+0x10/0x10 [ 1174.460478][T22011] netlink_sendmsg+0x808/0xda0 [ 1174.460500][T22011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1174.460515][T22011] ? __might_fault+0x50/0x140 [ 1174.460538][T22011] ____sys_sendmsg+0x9e1/0xb70 [ 1174.460556][T22011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1174.460573][T22011] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1174.460600][T22011] ___sys_sendmsg+0x190/0x1e0 [ 1174.460620][T22011] ? __pfx____sys_sendmsg+0x10/0x10 [ 1174.460668][T22011] __sys_sendmsg+0x170/0x220 [ 1174.460692][T22011] ? __pfx___sys_sendmsg+0x10/0x10 [ 1174.460741][T22011] do_syscall_64+0x106/0xf80 [ 1174.460758][T22011] ? clear_bhb_loop+0x40/0x90 [ 1174.460779][T22011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.460795][T22011] RIP: 0033:0x7f1c1c59c819 [ 1174.460805][T22011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1174.460815][T22011] RSP: 002b:00007f1c1d446028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1174.460826][T22011] RAX: ffffffffffffffda RBX: 00007f1c1c815fa0 RCX: 00007f1c1c59c819 [ 1174.460833][T22011] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000008 [ 1174.460840][T22011] RBP: 00007f1c1d446090 R08: 0000000000000000 R09: 0000000000000000 [ 1174.460846][T22011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1174.460852][T22011] R13: 00007f1c1c816038 R14: 00007f1c1c815fa0 R15: 00007ffe0be1f958 [ 1174.460866][T22011] [ 1175.478283][ T5874] usb 1-1: USB disconnect, device number 74 [ 1175.794763][T22043] netlink: 'syz.5.4112': attribute type 2 has an invalid length. [ 1175.883824][T22047] fuse: Unknown parameter 'rootode' [ 1176.013359][ T30] audit: type=1326 audit(1775790737.487:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22046 comm="syz.4.4114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6659c819 code=0x7ffc0000 [ 1176.066219][T22056] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1176.085479][T22056] Cannot find add_set index 0 as target [ 1176.463749][ T30] audit: type=1326 audit(1775790737.487:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22046 comm="syz.4.4114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6659c819 code=0x7ffc0000 [ 1176.498842][ T30] audit: type=1326 audit(1775790737.487:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22046 comm="syz.4.4114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f2f6659c819 code=0x7ffc0000 [ 1176.698498][ T30] audit: type=1326 audit(1775790737.487:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22046 comm="syz.4.4114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6659c819 code=0x7ffc0000 [ 1176.777754][ T30] audit: type=1326 audit(1775790737.487:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22046 comm="syz.4.4114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2f6659c819 code=0x7ffc0000 [ 1176.815052][ T30] audit: type=1326 audit(1775790737.487:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22046 comm="syz.4.4114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6659c819 code=0x7ffc0000 [ 1176.873832][ T30] audit: type=1326 audit(1775790737.487:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22046 comm="syz.4.4114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f2f6659c819 code=0x7ffc0000 [ 1176.912842][ T30] audit: type=1326 audit(1775790737.487:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22046 comm="syz.4.4114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6659c819 code=0x7ffc0000 [ 1176.995949][T15578] bridge0: port 3(syz_tun) entered disabled state [ 1177.026005][T15578] syz_tun (unregistering): left allmulticast mode [ 1177.035270][T22069] cgroup: Name too long [ 1177.106053][T15578] syz_tun (unregistering): left promiscuous mode [ 1177.114007][T15578] bridge0: port 3(syz_tun) entered disabled state [ 1177.510670][ T5919] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1177.715609][ T5919] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 1177.729711][ T5919] usb 1-1: config 0 has an invalid descriptor of length 75, skipping remainder of the config [ 1177.743393][T12854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1177.762742][T12854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1177.777317][T12854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1177.786690][T12854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1177.803902][T12854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1177.820911][ T5919] usb 1-1: config 0 has no interface number 0 [ 1177.828228][ T5919] usb 1-1: too many endpoints for config 0 interface 88 altsetting 226: 218, using maximum allowed: 30 [ 1177.880760][ T5919] usb 1-1: config 0 interface 88 altsetting 226 has 0 endpoint descriptors, different from the interface descriptor's value: 218 [ 1177.896896][ T5919] usb 1-1: config 0 interface 88 has no altsetting 0 [ 1177.910947][ T5919] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1177.921888][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.959532][ T5919] usb 1-1: config 0 descriptor?? [ 1178.209477][T16749] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.248100][ T5811] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1178.262805][ T5811] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1178.273929][ T5811] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1178.284507][ T5811] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1178.294348][ T5811] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1178.409634][T16749] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.531180][T16749] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.557290][T22076] lo speed is unknown, defaulting to 1000 [ 1178.659002][T16749] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.450319][T16749] bridge_slave_1: left allmulticast mode [ 1179.461327][T16749] bridge0: port 2(bridge_slave_1) entered disabled state [ 1179.484383][T16749] bridge_slave_0: left allmulticast mode [ 1179.494667][T16749] bridge_slave_0: left promiscuous mode [ 1179.502011][T16749] bridge0: port 1(bridge_slave_0) entered disabled state [ 1179.842179][ T5811] Bluetooth: hci3: command tx timeout [ 1180.068346][T22109] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1180.100463][T22109] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1180.320770][ C1] SELinux: failure in sel_netif_sid_slow(), invalid network interface (3) [ 1180.331440][ C1] SELinux: failure in sel_netif_sid_slow(), invalid network interface (3) [ 1180.341904][ T5811] Bluetooth: hci5: command tx timeout [ 1180.462802][ T5919] usb 1-1: string descriptor 0 read error: -71 [ 1180.496124][ T792] SELinux: failure in sel_netif_sid_slow(), invalid network interface (98) [ 1180.525418][ T5919] ath6kl: Failed to submit usb control message: -71 [ 1180.540619][ T5919] ath6kl: unable to send the bmi data to the device: -71 [ 1180.549060][ T5919] ath6kl: Unable to send get target info: -71 [ 1180.603670][ T5919] ath6kl: Failed to init ath6kl core: -71 [ 1180.631244][ T5919] ath6kl_usb 1-1:0.88: probe with driver ath6kl_usb failed with error -71 [ 1180.674125][ T5919] usb 1-1: USB disconnect, device number 75 [ 1180.862118][T22124] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1180.916303][T16749] bond6 (unregistering): (slave bridge3): Releasing backup interface [ 1180.948655][T22126] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1181.125354][T16749] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1181.142373][T16749] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1181.250022][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 1181.250064][ T30] audit: type=1800 audit(1775790742.697:1720): pid=22128 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.4136" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 1181.557196][T16749] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1181.639775][T16749] bond0 (unregistering): Released all slaves [ 1181.650118][T16749] bond1 (unregistering): Released all slaves [ 1181.664687][T16749] bond2 (unregistering): Released all slaves [ 1181.679535][T16749] bond3 (unregistering): Released all slaves [ 1181.697262][T16749] bond4 (unregistering): Released all slaves [ 1181.713063][T16749] bond5 (unregistering): Released all slaves [ 1181.725182][T16749] bond6 (unregistering): Released all slaves [ 1181.749050][T22085] lo speed is unknown, defaulting to 1000 [ 1181.801412][T22130] tipc: Enabling of bearer rejected, failed to enable media [ 1181.832919][T22076] chnl_net:caif_netlink_parms(): no params data found [ 1181.919702][ T30] audit: type=1400 audit(1775790743.387:1721): avc: denied { mounton } for pid=22139 comm="syz.0.4138" path="/proc/2099/net/nfsfs" dev="proc" ino=4026534117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 1181.923847][ T5811] Bluetooth: hci3: command tx timeout [ 1182.019018][T16749] tipc: Disabling bearer [ 1182.069977][T16749] tipc: Left network mode [ 1182.242913][T22154] netlink: 'syz.3.4139': attribute type 29 has an invalid length. [ 1182.308000][T22154] netlink: 596 bytes leftover after parsing attributes in process `syz.3.4139'. [ 1182.368514][T22076] bridge0: port 1(bridge_slave_0) entered blocking state [ 1182.401300][ T5811] Bluetooth: hci5: command tx timeout [ 1182.871581][T22076] bridge0: port 1(bridge_slave_0) entered disabled state [ 1182.889509][T22076] bridge_slave_0: entered allmulticast mode [ 1182.912128][T22076] bridge_slave_0: entered promiscuous mode [ 1182.933281][T22159] netlink: 'syz.3.4139': attribute type 29 has an invalid length. [ 1183.074152][T22169] input: syz1 as /devices/virtual/input/input57 [ 1183.224692][ T30] audit: type=1400 audit(1775790744.697:1722): avc: denied { remount } for pid=22172 comm="syz.0.4144" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1183.224724][T22173] hugetlbfs: Bad value 'k' for mount option 'nr_inodes' [ 1183.224724][T22173] [ 1183.262852][T22171] loop2: detected capacity change from 0 to 7 [ 1183.270854][T22076] bridge0: port 2(bridge_slave_1) entered blocking state [ 1183.279380][T22076] bridge0: port 2(bridge_slave_1) entered disabled state [ 1183.280997][T22171] Dev loop2: unable to read RDB block 7 [ 1183.290910][T22076] bridge_slave_1: entered allmulticast mode [ 1183.307252][T22076] bridge_slave_1: entered promiscuous mode [ 1183.327270][T22171] loop2: unable to read partition table [ 1183.414352][T22171] loop2: partition table beyond EOD, truncated [ 1183.480918][T22171] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1184.227691][ T5811] Bluetooth: hci3: command tx timeout [ 1184.443589][T22076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1184.484239][ T5811] Bluetooth: hci5: command tx timeout [ 1184.497089][T22076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1184.789114][T22076] team0: Port device team_slave_0 added [ 1184.820885][T22085] chnl_net:caif_netlink_parms(): no params data found [ 1184.837760][T22076] team0: Port device team_slave_1 added [ 1184.886646][T16749] hsr_slave_0: left promiscuous mode [ 1184.934093][T16749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1184.935759][T22188] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1184.980645][T16749] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1185.035084][T16749] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1185.065260][T22191] Cannot find add_set index 0 as target [ 1185.081524][T16749] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1185.203186][T16749] veth1_macvtap: left promiscuous mode [ 1185.209808][T16749] veth0_macvtap: left promiscuous mode [ 1185.220730][T16749] veth1_vlan: left promiscuous mode [ 1185.244086][T16749] veth0_vlan: left promiscuous mode [ 1186.076939][T16749] team0 (unregistering): Port device team_slave_1 removed [ 1186.112009][T16749] team0 (unregistering): Port device team_slave_0 removed [ 1186.177689][T22205] comedi comedi2: dt2815: I/O port conflict (0xfffffffffffffffd,2) [ 1186.245673][ T5811] Bluetooth: hci3: command tx timeout [ 1186.570892][ T5811] Bluetooth: hci5: command tx timeout [ 1186.657363][T22076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1186.673521][T22076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1186.715212][T22076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1186.831328][T22076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1186.872817][T22076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1187.001181][T22076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1191.013389][T22076] hsr_slave_0: entered promiscuous mode [ 1191.031552][T22076] hsr_slave_1: entered promiscuous mode [ 1191.052899][T22076] debugfs: 'hsr0' already exists in 'hsr' [ 1191.241915][T22076] Cannot create hsr debugfs directory [ 1191.248780][T22085] bridge0: port 1(bridge_slave_0) entered blocking state [ 1191.268912][T22085] bridge0: port 1(bridge_slave_0) entered disabled state [ 1191.292317][T22085] bridge_slave_0: entered allmulticast mode [ 1191.302375][T22085] bridge_slave_0: entered promiscuous mode [ 1191.346440][T16749] IPVS: stop unused estimator thread 0... [ 1191.390103][T22228] syzkaller1: entered promiscuous mode [ 1191.412841][T22228] syzkaller1: entered allmulticast mode [ 1191.466780][T22085] bridge0: port 2(bridge_slave_1) entered blocking state [ 1191.486614][T22085] bridge0: port 2(bridge_slave_1) entered disabled state [ 1191.503071][T22085] bridge_slave_1: entered allmulticast mode [ 1191.520420][T22085] bridge_slave_1: entered promiscuous mode [ 1191.718464][T22085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1191.806590][T22085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1191.851663][T22249] netlink: 'syz.6.4153': attribute type 1 has an invalid length. [ 1191.942239][T22249] bond4: entered promiscuous mode [ 1191.954558][T22249] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1191.954886][T22255] netlink: 'syz.6.4153': attribute type 5 has an invalid length. [ 1192.024857][T22085] team0: Port device team_slave_0 added [ 1192.051155][T22085] team0: Port device team_slave_1 added [ 1192.225389][T22085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1192.245875][T22085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1192.299943][T22085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1192.325116][T22085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1192.357524][T22263] input: syz1 as /devices/virtual/input/input59 [ 1192.373264][T22085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1192.440701][T22085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1192.759592][T22076] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.680518][T12854] block nbd0: Receive control failed (result -32) [ 1194.692055][ T5811] block nbd0: Receive control failed (result -32) [ 1194.829049][T22076] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1195.206577][T22085] hsr_slave_0: entered promiscuous mode [ 1195.265435][T22085] hsr_slave_1: entered promiscuous mode [ 1195.283720][T22284] fuse: Unknown parameter '0x0000000000000008' [ 1195.296575][T22085] debugfs: 'hsr0' already exists in 'hsr' [ 1195.319350][T22085] Cannot create hsr debugfs directory [ 1195.460308][T22076] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1195.661894][T22076] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1196.922515][T22076] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1196.967285][T22076] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1197.020675][T22076] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1197.115601][T22076] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1197.329465][T22085] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1197.393078][T22085] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1197.445858][T22085] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1197.487295][T22325] input: syz1 as /devices/virtual/input/input61 [ 1197.537036][T22085] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1198.200368][T22076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1198.237022][T22076] 8021q: adding VLAN 0 to HW filter on device team0 [ 1198.290006][T16749] bridge0: port 1(bridge_slave_0) entered blocking state [ 1198.298609][T16749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1198.366822][T22085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1198.391987][T16941] bridge0: port 2(bridge_slave_1) entered blocking state [ 1198.400614][T16941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1198.427607][ T30] audit: type=1400 audit(1775790759.897:1723): avc: denied { egress } for pid=10 comm="kworker/0:1" daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 1198.670256][ T30] audit: type=1400 audit(1775790759.897:1724): avc: denied { sendto } for pid=10 comm="kworker/0:1" daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 1199.002946][T22341] bridge0: port 2(bridge_slave_1) entered disabled state [ 1199.012661][T22341] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.092150][T22341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1199.359509][ T5919] lo speed is unknown, defaulting to 1000 [ 1199.367750][ T5919] syz0: Port: 1 Link DOWN [ 1199.378068][ T1006] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1199.405682][ T1006] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.446236][T22085] 8021q: adding VLAN 0 to HW filter on device team0 [ 1199.463525][ T13] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1199.474847][ T13] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.486753][ T13] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1199.834939][ T13] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.144173][ T3574] bridge0: port 1(bridge_slave_0) entered blocking state [ 1200.152783][ T3574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1200.184293][ T13] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1200.204428][ T13] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.238597][ T3574] bridge0: port 2(bridge_slave_1) entered blocking state [ 1200.247119][ T3574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1200.289167][T22358] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4169'. [ 1200.535906][T22076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1200.550843][ T5919] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1200.566966][T22085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1200.735877][ T5919] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1200.755610][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.821461][ T5919] usb 1-1: config 0 descriptor?? [ 1200.896450][T22378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4170'. [ 1200.937629][T22076] veth0_vlan: entered promiscuous mode [ 1200.966738][T22076] veth1_vlan: entered promiscuous mode [ 1201.015930][T22085] veth0_vlan: entered promiscuous mode [ 1201.037366][T22358] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4169'. [ 1201.083118][T22076] veth0_macvtap: entered promiscuous mode [ 1201.196563][T22085] veth1_vlan: entered promiscuous mode [ 1201.238580][T22076] veth1_macvtap: entered promiscuous mode [ 1201.273284][T22085] veth0_macvtap: entered promiscuous mode [ 1201.295747][T22085] veth1_macvtap: entered promiscuous mode [ 1201.327427][T22076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1201.358543][T22085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1201.380405][T22085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1201.399980][T22076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1201.438253][T16747] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.523480][T16747] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.534881][T16747] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.547505][T16747] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.568877][T16747] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.609899][T16747] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.640149][T16747] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.657809][T16747] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.749095][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1201.767121][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1201.844883][T16941] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1201.855781][ T3574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1201.871502][ T3574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1201.875076][T16941] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1201.921618][ T5919] ath6kl: Failed to submit usb control message: -110 [ 1201.929732][ T5919] ath6kl: unable to send the bmi data to the device: -110 [ 1201.944638][ T1006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1201.944982][ T5919] ath6kl: Unable to send get target info: -110 [ 1201.971979][ T5919] ath6kl: Failed to init ath6kl core: -110 [ 1201.979934][ T5919] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1201.988535][ T1006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1202.140529][T22391] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1202.241019][ T5811] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1202.310218][ T5874] usb 1-1: USB disconnect, device number 76 [ 1203.896135][T22415] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4177'. [ 1205.013107][ T30] audit: type=1400 audit(1775790766.487:1725): avc: denied { map } for pid=22431 comm="syz.0.4182" path="/dev/usbmon2" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1205.172832][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1205.340887][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 1205.359253][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1205.371874][ T10] usb 8-1: config 0 has no interfaces? [ 1205.378494][ T10] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1205.390191][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.514428][ T10] usb 8-1: config 0 descriptor?? [ 1205.780690][ T5808] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1205.981226][ T5808] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1206.008149][ T5808] usb 6-1: config 0 has no interfaces? [ 1206.029316][ T5808] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1206.068029][ T5808] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.094882][ T5808] usb 6-1: config 0 descriptor?? [ 1206.257070][T12854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1206.271585][T12854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1206.282693][T12854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1206.291722][T12854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1206.300491][T12854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1206.328042][T16749] smc: removing ib device syz1 [ 1206.341812][ T5919] usb 6-1: USB disconnect, device number 20 [ 1206.459157][T22450] lo speed is unknown, defaulting to 1000 [ 1207.223981][ T30] audit: type=1400 audit(1775790768.407:1726): avc: denied { create } for pid=22452 comm="syz.6.4188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1207.291137][ T30] audit: type=1400 audit(1775790768.407:1727): avc: denied { setopt } for pid=22452 comm="syz.6.4188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1207.343026][ T30] audit: type=1400 audit(1775790768.407:1728): avc: denied { write } for pid=22452 comm="syz.6.4188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1207.525444][T22450] chnl_net:caif_netlink_parms(): no params data found [ 1207.970082][ T9] usb 8-1: USB disconnect, device number 2 [ 1207.988855][T22450] bridge0: port 1(bridge_slave_0) entered blocking state [ 1208.029206][T22450] bridge0: port 1(bridge_slave_0) entered disabled state [ 1208.063603][T22450] bridge_slave_0: entered allmulticast mode [ 1208.251739][T22450] bridge_slave_0: entered promiscuous mode [ 1208.411785][T12854] Bluetooth: hci0: command tx timeout [ 1208.417084][T22476] lo speed is unknown, defaulting to 1000 [ 1208.468995][T22450] bridge0: port 2(bridge_slave_1) entered blocking state [ 1208.756192][T22450] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.590828][T22450] bridge_slave_1: entered allmulticast mode [ 1209.662087][T22450] bridge_slave_1: entered promiscuous mode [ 1209.984765][T22450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1210.154976][T22450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1210.480894][T12854] Bluetooth: hci0: command tx timeout [ 1210.527165][T22450] team0: Port device team_slave_0 added [ 1210.568835][T22450] team0: Port device team_slave_1 added [ 1210.659328][T22450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1210.680721][T22450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1210.712648][T22450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1210.737323][T22450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1210.747134][T22450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1210.780621][T22450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1210.858003][T22450] hsr_slave_0: entered promiscuous mode [ 1210.876731][T22450] hsr_slave_1: entered promiscuous mode [ 1210.896665][T22450] debugfs: 'hsr0' already exists in 'hsr' [ 1210.909133][T22450] Cannot create hsr debugfs directory [ 1211.701746][T13514] bridge_slave_1: left allmulticast mode [ 1211.714175][T13514] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.759246][T13514] bridge_slave_0: left allmulticast mode [ 1211.779599][T13514] bridge_slave_0: left promiscuous mode [ 1211.788084][T13514] bridge0: port 1(bridge_slave_0) entered disabled state [ 1211.986281][T13514] bond14 (unregistering): (slave gretap1): Releasing active interface [ 1212.226925][T22545] netlink: 'syz.7.4200': attribute type 10 has an invalid length. [ 1212.486115][T13514] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1212.500157][T13514] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1212.512985][T13514] bond0 (unregistering): Released all slaves [ 1212.523285][T13514] bond1 (unregistering): Released all slaves [ 1212.537487][T13514] bond2 (unregistering): Released all slaves [ 1212.553014][T13514] bond3 (unregistering): Released all slaves [ 1212.560628][T12854] Bluetooth: hci0: command tx timeout [ 1212.567599][T13514] bond4 (unregistering): Released all slaves [ 1212.579736][T13514] bond5 (unregistering): Released all slaves [ 1212.627395][T13514] bond6 (unregistering): Released all slaves [ 1212.750317][T13514] bond7 (unregistering): Released all slaves [ 1212.763130][T13514] bond8 (unregistering): Released all slaves [ 1212.775501][T13514] bond9 (unregistering): Released all slaves [ 1213.297681][T13514] bond10 (unregistering): Released all slaves [ 1213.341896][T13514] bond11 (unregistering): Released all slaves [ 1213.356111][T13514] bond12 (unregistering): Released all slaves [ 1213.372194][T13514] bond13 (unregistering): Released all slaves [ 1213.386341][T13514] bond14 (unregistering): Released all slaves [ 1213.525373][T13514] bond15 (unregistering): Released all slaves [ 1213.565062][T13514] bond16 (unregistering): Released all slaves [ 1213.883810][ T792] libceph: connect (1)[c::]:6789 error -101 [ 1213.896395][ T792] libceph: mon0 (1)[c::]:6789 connect error [ 1213.924355][T22569] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1213.933663][T22560] ceph: No mds server is up or the cluster is laggy [ 1213.946530][ T30] audit: type=1400 audit(1775790775.417:1729): avc: denied { listen } for pid=22559 comm="syz.6.4205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1213.997571][T13514] tipc: Left network mode [ 1214.640781][T12854] Bluetooth: hci0: command tx timeout [ 1214.641837][T22579] overlayfs: missing 'lowerdir' [ 1216.018677][T22450] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1216.179670][T22450] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1216.449936][T22602] netlink: 'syz.5.4212': attribute type 1 has an invalid length. [ 1216.884958][ T30] audit: type=1400 audit(1775790777.997:1730): avc: denied { mount } for pid=22597 comm="syz.7.4211" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1216.930985][ T30] audit: type=1400 audit(1775790778.017:1731): avc: denied { remount } for pid=22597 comm="syz.7.4211" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1217.025132][T22450] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1217.046743][T22450] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1217.182763][ T30] audit: type=1400 audit(1775790778.657:1732): avc: denied { unmount } for pid=22085 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1217.254922][T22595] netlink: 'syz.3.4210': attribute type 1 has an invalid length. [ 1218.168194][T22619] netlink: 'syz.5.4215': attribute type 10 has an invalid length. [ 1218.246334][T13514] hsr_slave_0: left promiscuous mode [ 1218.452249][T13514] hsr_slave_1: left promiscuous mode [ 1218.459110][T13514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1218.502566][T13514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1218.695540][T13514] team0 (unregistering): Port device team_slave_1 removed [ 1218.724932][T13514] team0 (unregistering): Port device team_slave_0 removed [ 1218.958366][T22595] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1219.037100][T22632] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4216'. [ 1219.521163][T22450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1219.842672][T22450] 8021q: adding VLAN 0 to HW filter on device team0 [ 1219.976695][T22642] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4218'. [ 1220.017562][T22648] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1220.032005][T22640] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48673 sclass=netlink_route_socket pid=22640 comm=syz.5.4218 [ 1220.094944][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state [ 1220.103456][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1220.114374][ T30] audit: type=1400 audit(1775790781.517:1733): avc: denied { bind } for pid=22639 comm="syz.5.4218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1220.607675][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state [ 1220.616264][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1222.740305][T22450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1222.879602][T22450] veth0_vlan: entered promiscuous mode [ 1222.936527][T22450] veth1_vlan: entered promiscuous mode [ 1223.052339][T22450] veth0_macvtap: entered promiscuous mode [ 1223.100380][T22450] veth1_macvtap: entered promiscuous mode [ 1223.177202][T22450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1223.218270][T22450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1223.268237][T16940] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.290065][T16940] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.342216][T16940] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.395976][T16940] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.559363][T22697] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1223.627779][T16749] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1223.658553][T16749] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1223.777771][T22697] Cannot find add_set index 0 as target [ 1224.046991][T22706] netlink: 'syz.5.4227': attribute type 4 has an invalid length. [ 1225.618475][ T3574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1225.655775][ T3574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1225.953551][T22714] vlan2: entered promiscuous mode [ 1225.970007][T22714] vlan2: entered allmulticast mode [ 1226.010388][T22714] hsr_slave_1: entered allmulticast mode [ 1226.214650][T22718] nfs: Unknown parameter '3"AF' [ 1226.246454][T22718] comedi comedi1: comedi_config --init_data is deprecated [ 1226.710697][ T5874] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1227.200712][ T5874] usb 1-1: Using ep0 maxpacket: 32 [ 1227.304442][T22733] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1227.435788][ T5874] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1227.505353][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.527652][T22738] netlink: 260 bytes leftover after parsing attributes in process `syz.6.4235'. [ 1227.559381][ T5874] usb 1-1: Product: syz [ 1227.581567][ T5874] usb 1-1: Manufacturer: syz [ 1227.612669][ T5874] usb 1-1: SerialNumber: syz [ 1227.647291][ T5874] usb 1-1: config 0 descriptor?? [ 1227.979644][ T5874] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1228.050807][ T5874] peak_usb 1-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 1228.127113][T22743] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1228.231253][ T5874] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 1228.259715][ T5874] usb 1-1: USB disconnect, device number 77 [ 1228.863810][ T24] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1229.013784][T22758] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1229.110740][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 1229.118288][ T24] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 1229.151207][ T24] usb 6-1: config 0 has no interface number 0 [ 1229.167068][ T24] usb 6-1: config 0 interface 89 altsetting 3 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1229.193787][ T24] usb 6-1: config 0 interface 89 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 0 [ 1229.228520][ T24] usb 6-1: config 0 interface 89 has no altsetting 0 [ 1229.278971][ T24] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.f5 [ 1229.309496][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.336996][ T24] usb 6-1: Product: syz [ 1229.377502][ T24] usb 6-1: Manufacturer: syz [ 1229.389238][ T24] usb 6-1: SerialNumber: syz [ 1229.410366][ T24] usb 6-1: config 0 descriptor?? [ 1229.478044][T22765] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.4243'. [ 1229.552676][ T30] audit: type=1400 audit(1775790791.017:1734): avc: denied { getopt } for pid=22764 comm="syz.6.4243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1229.607789][ T24] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1229.755162][ T30] audit: type=1326 audit(1775790791.017:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22764 comm="syz.6.4243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1c59c819 code=0x7ffc0000 [ 1230.291041][ T24] em28xx 6-1:0.89: Video interface 89 found: bulk [ 1230.485851][ T30] audit: type=1326 audit(1775790791.017:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22764 comm="syz.6.4243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1c59c819 code=0x7ffc0000 [ 1230.530109][T22773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1230.641258][T22775] FAT-fs (nullb0): bogus number of reserved sectors [ 1230.649260][T22775] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1230.688700][ T30] audit: type=1326 audit(1775790791.017:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22764 comm="syz.6.4243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1c1c59c819 code=0x7ffc0000 [ 1230.749052][T22773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1230.852623][ T30] audit: type=1326 audit(1775790791.017:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22764 comm="syz.6.4243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1c59c819 code=0x7ffc0000 [ 1230.926243][ T30] audit: type=1326 audit(1775790791.017:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22764 comm="syz.6.4243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1c59c819 code=0x7ffc0000 [ 1230.970713][T22347] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1231.009397][ T30] audit: type=1326 audit(1775790791.017:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22764 comm="syz.6.4243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f1c1c59c819 code=0x7ffc0000 [ 1231.121193][ T30] audit: type=1400 audit(1775790791.037:1741): avc: denied { recv } for pid=16941 comm="kworker/u8:20" saddr=10.128.0.169 src=30006 daddr=10.128.0.238 dest=47446 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1231.190823][T22347] usb 4-1: Using ep0 maxpacket: 32 [ 1231.235719][T22347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1231.314655][T22347] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=bf.99 [ 1231.326588][T22347] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1231.370973][T22347] usb 4-1: Product: syz [ 1231.400407][T22347] usb 4-1: SerialNumber: syz [ 1231.453822][ T30] audit: type=1400 audit(1775790791.057:1742): avc: denied { ioctl } for pid=22748 comm="syz.5.4238" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1231.543134][T22347] usb 4-1: config 0 descriptor?? [ 1231.573688][ T30] audit: type=1400 audit(1775790791.067:1743): avc: denied { prog_load } for pid=22766 comm="syz.3.4244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1231.602301][ T24] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 1231.704820][ T24] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1231.714789][ T24] em28xx 6-1:0.89: board has no eeprom [ 1231.809540][ T24] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 1231.819106][ T24] em28xx 6-1:0.89: analog set to bulk mode. [ 1231.827012][T22347] em28xx 6-1:0.89: Registering V4L2 extension [ 1232.230661][ T5874] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 1232.304368][T22347] em28xx 6-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 1232.315972][T22347] em28xx 6-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 1232.390741][T22347] em28xx 6-1:0.89: reading from i2c device at 0x42 failed (error=-5) [ 1232.410790][T22347] em28xx 6-1:0.89: reading from i2c device at 0x40 failed (error=-5) [ 1232.425695][T22347] em28xx 6-1:0.89: Config register raw data: 0xfffffffb [ 1232.435044][T22347] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 1232.493471][T22347] em28xx 6-1:0.89: No AC97 audio processor [ 1232.493804][ T5874] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1232.517375][ T10] usb 6-1: USB disconnect, device number 21 [ 1232.534310][ T10] em28xx 6-1:0.89: Disconnecting em28xx [ 1232.580335][ T5874] usb 8-1: not running at top speed; connect to a high speed hub [ 1232.601268][T22347] usb 6-1: Decoder not found [ 1232.609990][ T5874] usb 8-1: config 6 has an invalid interface number: 162 but max is 0 [ 1232.613448][T22347] em28xx 6-1:0.89: failed to create media graph [ 1232.640141][ T5874] usb 8-1: config 6 has no interface number 0 [ 1232.646193][T22347] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 1232.667268][ T5874] usb 8-1: config 6 interface 162 has no altsetting 0 [ 1232.759314][ T5874] usb 8-1: New USB device found, idVendor=0846, idProduct=9041, bcdDevice=d7.c4 [ 1232.771841][ T5874] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.787065][ T5874] usb 8-1: Product: syz [ 1232.795005][ T5874] usb 8-1: Manufacturer: syz [ 1232.805132][T22795] ================================================================== [ 1232.820288][T22795] BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0 [ 1232.829216][T22795] Read of size 8 at addr ffff8880411c4790 by task v4l_id/22795 [ 1232.838234][T22795] [ 1232.840994][T22795] CPU: 1 UID: 0 PID: 22795 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 1232.841010][T22795] Tainted: [L]=SOFTLOCKUP [ 1232.841014][T22795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1232.841020][T22795] Call Trace: [ 1232.841025][T22795] [ 1232.841030][T22795] dump_stack_lvl+0x100/0x190 [ 1232.841049][T22795] print_report+0x156/0x4c9 [ 1232.841064][T22795] ? __virt_addr_valid+0x239/0x430 [ 1232.841081][T22795] ? v4l2_fh_init+0x27d/0x2c0 [ 1232.841096][T22795] kasan_report+0xdf/0x1e0 [ 1232.841108][T22795] ? v4l2_fh_init+0x27d/0x2c0 [ 1232.841125][T22795] v4l2_fh_init+0x27d/0x2c0 [ 1232.841145][T22795] v4l2_fh_open+0x64/0xa0 [ 1232.841161][T22795] em28xx_v4l2_open+0x11e/0x570 [ 1232.841177][T22795] v4l2_open+0x1d2/0x490 [ 1232.841187][T22795] ? __pfx_v4l2_open+0x10/0x10 [ 1232.841196][T22795] chrdev_open+0x234/0x6a0 [ 1232.841208][T22795] ? __pfx_chrdev_open+0x10/0x10 [ 1232.841221][T22795] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1232.841243][T22795] do_dentry_open+0x6d8/0x1660 [ 1232.841256][T22795] ? __pfx_chrdev_open+0x10/0x10 [ 1232.841269][T22795] vfs_open+0x82/0x3f0 [ 1232.841282][T22795] path_openat+0x208c/0x31a0 [ 1232.841297][T22795] ? __pfx_path_openat+0x10/0x10 [ 1232.841311][T22795] do_file_open+0x20e/0x430 [ 1232.841323][T22795] ? __pfx_do_file_open+0x10/0x10 [ 1232.841339][T22795] ? alloc_fd+0x476/0x790 [ 1232.841352][T22795] ? do_getname+0x191/0x390 [ 1232.841366][T22795] do_sys_openat2+0x10d/0x1e0 [ 1232.841379][T22795] ? __pfx_do_sys_openat2+0x10/0x10 [ 1232.841396][T22795] __x64_sys_openat+0x12d/0x210 [ 1232.841410][T22795] ? __pfx___x64_sys_openat+0x10/0x10 [ 1232.841425][T22795] ? do_user_addr_fault+0x8d6/0x12f0 [ 1232.841438][T22795] do_syscall_64+0x106/0xf80 [ 1232.841448][T22795] ? clear_bhb_loop+0x40/0x90 [ 1232.841460][T22795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1232.841471][T22795] RIP: 0033:0x7f292c8a7407 [ 1232.841481][T22795] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1232.841491][T22795] RSP: 002b:00007ffddb7d6cb0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1232.841502][T22795] RAX: ffffffffffffffda RBX: 00007f292d09d880 RCX: 00007f292c8a7407 [ 1232.841509][T22795] RDX: 0000000000000000 RSI: 00007ffddb7d7f1b RDI: ffffffffffffff9c [ 1232.841515][T22795] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1232.841521][T22795] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1232.841528][T22795] R13: 00007ffddb7d6f00 R14: 00007f292d204000 R15: 00005641e14954d8 [ 1232.841538][T22795] [ 1232.841542][T22795] [ 1233.148206][T22795] Allocated by task 22347: [ 1233.153471][T22795] kasan_save_stack+0x30/0x50 [ 1233.159053][T22795] kasan_save_track+0x14/0x30 [ 1233.164632][T22795] __kasan_kmalloc+0xaa/0xb0 [ 1233.170110][T22795] em28xx_v4l2_init.cold+0x94/0x3503 [ 1233.176414][T22795] em28xx_init_extension+0x13a/0x200 [ 1233.182730][T22795] request_module_async+0x61/0x80 [ 1233.188720][T22795] process_one_work+0xa23/0x19a0 [ 1233.194601][T22795] worker_thread+0x5ef/0xe50 [ 1233.200078][T22795] kthread+0x370/0x450 [ 1233.204927][T22795] ret_from_fork+0x754/0xd80 [ 1233.210393][T22795] ret_from_fork_asm+0x1a/0x30 [ 1233.216066][T22795] [ 1233.218824][T22795] Freed by task 22347: [ 1233.223659][T22795] kasan_save_stack+0x30/0x50 [ 1233.229236][T22795] kasan_save_track+0x14/0x30 [ 1233.234813][T22795] kasan_save_free_info+0x3b/0x70 [ 1233.240800][T22795] __kasan_slab_free+0x5f/0x80 [ 1233.246473][T22795] kfree+0x1f6/0x6b0 [ 1233.251106][T22795] kref_put.isra.0+0x56/0x90 [ 1233.256574][T22795] em28xx_v4l2_init.cold+0x280/0x3503 [ 1233.262974][T22795] em28xx_init_extension+0x13a/0x200 [ 1233.269273][T22795] request_module_async+0x61/0x80 [ 1233.275274][T22795] process_one_work+0xa23/0x19a0 [ 1233.281157][T22795] worker_thread+0x5ef/0xe50 [ 1233.286633][T22795] kthread+0x370/0x450 [ 1233.291491][T22795] ret_from_fork+0x754/0xd80 [ 1233.296957][T22795] ret_from_fork_asm+0x1a/0x30 [ 1233.302633][T22795] [ 1233.305385][T22795] The buggy address belongs to the object at ffff8880411c4000 [ 1233.305385][T22795] which belongs to the cache kmalloc-8k of size 8192 [ 1233.322202][T22795] The buggy address is located 1936 bytes inside of [ 1233.322202][T22795] freed 8192-byte region [ffff8880411c4000, ffff8880411c6000) [ 1233.338924][T22795] [ 1233.341682][T22795] The buggy address belongs to the physical page: [ 1233.349328][T22795] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x411c0 [ 1233.359799][T22795] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1233.370056][T22795] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1233.379063][T22795] page_type: f5(slab) [ 1233.383798][T22795] raw: 00fff00000000040 ffff88813fe41280 dead000000000100 dead000000000122 [ 1233.394061][T22795] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 1233.404316][T22795] head: 00fff00000000040 ffff88813fe41280 dead000000000100 dead000000000122 [ 1233.414675][T22795] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 1233.425049][T22795] head: 00fff00000000003 ffffea0001047001 00000000ffffffff 00000000ffffffff [ 1233.435416][T22795] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1233.445770][T22795] page dumped because: kasan: bad access detected [ 1233.453418][T22795] page_owner tracks the page as allocated [ 1233.460234][T22795] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 22476, tgid 22473 (syz.3.4190), ts 1207885813165, free_ts 1189606992179 [ 1233.486235][T22795] post_alloc_hook+0x153/0x170 [ 1233.491933][T22795] get_page_from_freelist+0x111d/0x3140 [ 1233.498547][T22795] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 1233.505578][T22795] new_slab+0xa6/0x6b0 [ 1233.510420][T22795] refill_objects+0x26b/0x400 [ 1233.515993][T22795] __pcs_replace_empty_main+0x1ab/0x660 [ 1233.522616][T22795] __kmalloc_cache_noprof+0x493/0x6f0 [ 1233.529029][T22795] mr_table_alloc+0x5f/0x2e0 [ 1233.534500][T22795] ip6mr_net_init+0x318/0x4a0 [ 1233.540071][T22795] ops_init+0x1e2/0x5f0 [ 1233.545021][T22795] setup_net+0x118/0x3a0 [ 1233.550076][T22795] copy_net_ns+0x46f/0x7c0 [ 1233.555342][T22795] create_new_namespaces+0x3ea/0xac0 [ 1233.561651][T22795] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1233.568384][T22795] ksys_unshare+0x473/0xad0 [ 1233.573756][T22795] __x64_sys_unshare+0x31/0x40 [ 1233.579435][T22795] page last free pid 22219 tgid 22212 stack trace: [ 1233.587189][T22795] __free_frozen_pages+0x7e1/0x10d0 [ 1233.593395][T22795] qlist_free_all+0x47/0xe0 [ 1233.598772][T22795] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1233.605282][T22795] __kasan_slab_alloc+0x69/0x90 [ 1233.611071][T22795] __kmalloc_noprof+0x2b9/0x850 [ 1233.616853][T22795] iter_file_splice_write+0x1d8/0x10a0 [ 1233.623359][T22795] direct_splice_actor+0x192/0x6c0 [ 1233.629459][T22795] splice_direct_to_actor+0x345/0xa30 [ 1233.635860][T22795] do_splice_direct+0x174/0x240 [ 1233.641647][T22795] do_sendfile+0xadc/0xe20 [ 1233.646906][T22795] __x64_sys_sendfile64+0x1d8/0x220 [ 1233.653112][T22795] do_syscall_64+0x106/0xf80 [ 1233.658588][T22795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.665614][T22795] [ 1233.668361][T22795] Memory state around the buggy address: [ 1233.675074][T22795] ffff8880411c4680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1233.684702][T22795] ffff8880411c4700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1233.694343][T22795] >ffff8880411c4780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1233.703980][T22795] ^ [ 1233.709439][T22795] ffff8880411c4800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1233.719069][T22795] ffff8880411c4880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1233.728704][T22795] ================================================================== [ 1233.740922][T22347] em28xx 6-1:0.89: Registering snapshot button... [ 1233.752917][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1233.754175][T22347] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input63 [ 1233.775149][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1233.782138][T22347] em28xx 6-1:0.89: Remote control support is not available for this card. [ 1233.795319][T22795] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1233.803949][T22795] CPU: 1 UID: 0 PID: 22795 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 1233.816625][T22795] Tainted: [L]=SOFTLOCKUP [ 1233.821778][T22795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1233.833811][T22795] Call Trace: [ 1233.837714][T22795] [ 1233.841200][T22795] dump_stack_lvl+0x100/0x190 [ 1233.846790][T22795] vpanic+0x552/0x970 [ 1233.851546][T22795] ? __pfx_vpanic+0x10/0x10 [ 1233.856918][T22795] ? v4l2_fh_init+0x27d/0x2c0 [ 1233.862503][T22795] panic+0xd1/0xe0 [ 1233.866932][T22795] ? __pfx_panic+0x10/0x10 [ 1233.872195][T22795] ? v4l2_fh_init+0x27d/0x2c0 [ 1233.877780][T22795] ? preempt_schedule_common+0x42/0xc0 [ 1233.884306][T22795] ? check_panic_on_warn+0x1f/0x90 [ 1233.890408][T22795] check_panic_on_warn.cold+0x19/0x34 [ 1233.896851][T22795] end_report.part.0+0x3a/0x90 [ 1233.902558][T22795] kasan_report.cold+0xe/0x18 [ 1233.908153][T22795] ? v4l2_fh_init+0x27d/0x2c0 [ 1233.913746][T22795] v4l2_fh_init+0x27d/0x2c0 [ 1233.919123][T22795] v4l2_fh_open+0x64/0xa0 [ 1233.924294][T22795] em28xx_v4l2_open+0x11e/0x570 [ 1233.930085][T22795] v4l2_open+0x1d2/0x490 [ 1233.935150][T22795] ? __pfx_v4l2_open+0x10/0x10 [ 1233.940854][T22795] chrdev_open+0x234/0x6a0 [ 1233.946149][T22795] ? __pfx_chrdev_open+0x10/0x10 [ 1233.952085][T22795] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1233.959653][T22795] do_dentry_open+0x6d8/0x1660 [ 1233.965342][T22795] ? __pfx_chrdev_open+0x10/0x10 [ 1233.971237][T22795] vfs_open+0x82/0x3f0 [ 1233.976109][T22795] path_openat+0x208c/0x31a0 [ 1233.981598][T22795] ? __pfx_path_openat+0x10/0x10 [ 1233.987492][T22795] do_file_open+0x20e/0x430 [ 1233.992866][T22795] ? __pfx_do_file_open+0x10/0x10 [ 1233.998873][T22795] ? alloc_fd+0x476/0x790 [ 1234.004041][T22795] ? do_getname+0x191/0x390 [ 1234.009418][T22795] do_sys_openat2+0x10d/0x1e0 [ 1234.015002][T22795] ? __pfx_do_sys_openat2+0x10/0x10 [ 1234.021215][T22795] __x64_sys_openat+0x12d/0x210 [ 1234.027008][T22795] ? __pfx___x64_sys_openat+0x10/0x10 [ 1234.033441][T22795] ? do_user_addr_fault+0x8d6/0x12f0 [ 1234.039754][T22795] do_syscall_64+0x106/0xf80 [ 1234.045229][T22795] ? clear_bhb_loop+0x40/0x90 [ 1234.050810][T22795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.057846][T22795] RIP: 0033:0x7f292c8a7407 [ 1234.063110][T22795] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1234.086608][T22795] RSP: 002b:00007ffddb7d6cb0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1234.096670][T22795] RAX: ffffffffffffffda RBX: 00007f292d09d880 RCX: 00007f292c8a7407 [ 1234.106205][T22795] RDX: 0000000000000000 RSI: 00007ffddb7d7f1b RDI: ffffffffffffff9c [ 1234.115739][T22795] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1234.125271][T22795] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1234.134801][T22795] R13: 00007ffddb7d6f00 R14: 00007f292d204000 R15: 00005641e14954d8 [ 1234.144339][T22795] [ 1234.148208][T22795] Kernel Offset: disabled [ 1234.153375][T22795] Rebooting in 86400 seconds..