last executing test programs: 25m55.000256029s ago: executing program 32 (id=1380): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xc) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0c000000fe00010004"], 0x408100) 25m0.454844932s ago: executing program 33 (id=2090): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {0x0, 0x9}, {0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x8}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 24m42.406918803s ago: executing program 34 (id=2344): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff07, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newsa={0xf0, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in=@empty, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x7, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 23m38.201601511s ago: executing program 35 (id=3157): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xb7) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = accept4$unix(r0, 0x0, 0x0, 0x800) connect$unix(r2, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) 19m3.366201284s ago: executing program 36 (id=5302): setrlimit(0x8, 0x0) r0 = fanotify_init(0x200, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x800, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) syslog(0x2, &(0x7f0000002800)=""/116, 0x74) 14m36.428840968s ago: executing program 37 (id=6023): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x26020480) r3 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff}) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) 12m54.772343958s ago: executing program 0 (id=6271): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x789d2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x1, 0x4, 0x9, 0x4cca}, {0x6, 0x1, 0x5, 0x10, 0x7, 0x312}, 0x3, 0x10, 0xd1d}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa89d84ea6e694e0f}, @TCA_TBF_BURST={0x8, 0x6, 0xb1a}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r10, {}, {0x6, 0xb}, {0x9, 0x6}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x1, 0x9, 0x2, 0x5, 0x401}, {0x5, 0x0, 0x4, 0x400, 0x6}, 0xfffffffa, 0x80000000, 0x14ac}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 12m49.081386662s ago: executing program 0 (id=6281): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56441, 0x70b928, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x80000000, 0x46f, 0xfff, 0x5, 0x200}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r6, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f03) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0) 12m46.611370335s ago: executing program 0 (id=6288): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_socket_connect_nvme_tcp() syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00'}) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 12m39.019909273s ago: executing program 0 (id=6307): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x1a, {"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", 0x1000}}, 0x1006) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240), &(0x7f0000000380)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280), 0x0, 0x1, 0x7}) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x15, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24fdc26f1a95d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffffffffffff6570128218a0d22915ff6eddb10000800400", [0xc]}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @dstopts_2292={{0xf8, 0x29, 0x4, {0x4, 0x1c, '\x00', [@generic={0xfe, 0x70, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b08"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x28, {0x1, 0x8, 0x7a, 0x8001, [0x9, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0xf, "e80ee304ecb784ec4655260cecea14"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x98, 0x29, 0x36, {0x5e, 0xf, '\x00', [@generic={0xff, 0x41, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70"}, @pad1, @pad1, @calipso={0x7, 0x18, {0x3, 0x4, 0x0, 0xfff, [0x4, 0x966]}}, @calipso={0x7, 0x8, {0x0, 0x0, 0x7, 0x6}}, @generic={0x8}, @calipso={0x7, 0x8, {0x3, 0x0, 0x3}}]}}}, @rthdr={{0x18}}], 0x1d8}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 12m37.306463373s ago: executing program 0 (id=6311): r0 = socket$caif_stream(0x25, 0x1, 0x4) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000f80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) keyctl$setperm(0x5, 0x0, 0x30925) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) keyctl$search(0xa, 0x0, &(0x7f0000000040)='keyring\x00', 0x0, 0xfffffffffffffffc) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x8, 0x4) connect$caif(r0, &(0x7f0000000780), 0x18) 12m36.215135647s ago: executing program 0 (id=6314): unshare(0x6a040000) mmap(&(0x7f0000706000/0xa000)=nil, 0xa000, 0x800005, 0x11, 0xffffffffffffffff, 0xc3490000) munmap(&(0x7f00006b0000/0x4000)=nil, 0x4000) socket$pppoe(0x18, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/bus/input/devices\x00', 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) accept(r4, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12m32.003451781s ago: executing program 1 (id=6321): restart_syscall() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @info_reply={0x10, 0x0, 0x0, 0x3, 0xe}}}}}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x44, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = socket$kcm(0x2, 0x7, 0x84) sendmsg$inet(r4, &(0x7f0000000e40)={&(0x7f0000000140)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001180)=[{&(0x7f0000000340)="d9", 0x34000}], 0x1}, 0x4000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r3, &(0x7f0000000400), 0x0}, 0x20) 12m30.949288066s ago: executing program 1 (id=6325): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000380)=0x3) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newsa={0x158, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}]}, 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110014a696d4003041060410100f602010902240001000000820904"], 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 12m27.261216883s ago: executing program 1 (id=6340): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000240), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r3, &(0x7f00000008c0)={&(0x7f00000005c0)={0xa, 0x4e21, 0x180000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000007c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x83}}], 0x18}, 0x44) 12m25.730438094s ago: executing program 1 (id=6331): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) symlink(&(0x7f0000002040)='./file0\x00', &(0x7f0000000080)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r1 = syz_io_uring_setup(0x487, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r1}) io_uring_enter(r1, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 12m23.121639382s ago: executing program 1 (id=6339): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_emit_vhci(0x0, 0x9) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000240), 0x0, 0x0) read$FUSE(r1, &(0x7f0000001ac0)={0x2020}, 0x2020) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000100), 0x0, &(0x7f00000002c0)='9p\x00', 0x820014, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x2100, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x60, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000000)={'tunl0\x00', r3, 0x20, 0x40, 0x1001000, 0x6, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x67, 0x0, 0xf9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r4, r4, 0x1, 0x0, 0x0, 0x48, 0x41, 0x1000, 0x8, 0x8, 0x1, 0x0, 'syz0\x00'}) 12m21.625058285s ago: executing program 38 (id=6314): unshare(0x6a040000) mmap(&(0x7f0000706000/0xa000)=nil, 0xa000, 0x800005, 0x11, 0xffffffffffffffff, 0xc3490000) munmap(&(0x7f00006b0000/0x4000)=nil, 0x4000) socket$pppoe(0x18, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/bus/input/devices\x00', 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) accept(r4, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12m20.114923848s ago: executing program 1 (id=6349): r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty, 0x3d}, 0x1c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x65, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xb8, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000023c0)=ANY=[@ANYBLOB="3a1d"], 0xf0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$key(0xffffffffffffffff, &(0x7f00000007c0)={0x400000000000000, 0x0, 0x0}, 0x40080) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}}, 0x0) 12m5.686717771s ago: executing program 39 (id=6349): r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty, 0x3d}, 0x1c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x65, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xb8, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000023c0)=ANY=[@ANYBLOB="3a1d"], 0xf0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$key(0xffffffffffffffff, &(0x7f00000007c0)={0x400000000000000, 0x0, 0x0}, 0x40080) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}}, 0x0) 9m58.373590083s ago: executing program 2 (id=6604): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0xd, [0x7ffe, 0x100c95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x21d, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0xffff8be8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0xffff8000, 0x7ff, 0xfffffff9, 0xb8b, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x100009, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0xbd9, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x7, 0x7ffe, 0x8, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0x8, 0xfffff000, 0xfffd, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x9, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x6, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) userfaultfd(0x801) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x53b, 0x70bd2b, 0x0, {0x9}, [{0x3c, 0x1, [@m_sample={0x38, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x50}}, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) 9m56.098564845s ago: executing program 2 (id=6610): openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x80002, 0x0) syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r0, r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, 0x0, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r8], 0x54}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r11, @ANYBLOB="0174df"], 0x20}}, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 9m54.430990813s ago: executing program 2 (id=6615): setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x20048080) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000800) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000e, 0x5d032, r0, 0x0) userfaultfd(0x80801) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) 9m52.660946776s ago: executing program 2 (id=6619): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) pipe2(&(0x7f00000000c0), 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) openat$vcsu(0xffffff9c, &(0x7f00000000c0), 0x206280, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0), 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0}, 0x94) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 9m51.63859777s ago: executing program 2 (id=6623): bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x28040680) timerfd_create(0x0, 0x0) futex_waitv(&(0x7f00000047c0)=[{0x5, 0x0, 0x82}], 0x1, 0x0, 0x0, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x18, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x1, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x0) syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f0000000040)={0x9, {0xf8000000, 0x4, 0x2008, 0xffffbfff}}) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000a196c98d000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(r4, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 9m49.753156163s ago: executing program 2 (id=6629): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fdatasync(r1) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000000), 0xffffffff, 0x800) ioctl$LOOP_SET_STATUS(r2, 0x1265, 0x0) r3 = socket(0xa, 0x5, 0x1) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0xf0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000005c0), 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2b, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x48) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) 9m49.364584492s ago: executing program 40 (id=6629): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fdatasync(r1) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000000), 0xffffffff, 0x800) ioctl$LOOP_SET_STATUS(r2, 0x1265, 0x0) r3 = socket(0xa, 0x5, 0x1) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0xf0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000005c0), 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2b, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x48) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) 9m10.468948233s ago: executing program 4 (id=6709): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = semget$private(0x0, 0x207, 0x0) semctl$GETALL(r4, 0x0, 0xd, 0xfffffffffffffffe) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000014c0)={'macvtap0\x00', 0x0}) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) 9m7.589214169s ago: executing program 4 (id=6712): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000000)={0x0, 0x6bd7}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x101800, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) r5 = syz_open_dev$amidi(&(0x7f0000000140), 0x3, 0x14080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r5, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3}) io_uring_enter(r0, 0x47f9, 0x1, 0x0, 0x0, 0x0) msgget$private(0x0, 0x790) 9m3.863329281s ago: executing program 4 (id=6719): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES64], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000940)=0x707987cd) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvmsg(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x0) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x240048c1) sched_setscheduler(0x0, 0x2, 0x0) 8m49.597080266s ago: executing program 4 (id=6749): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x8000, 0x80, 0x7fff, {{0x5, 0x4, 0x2, 0x4, 0x14, 0x65, 0x1, 0x7f, 0x2f, 0x0, @private=0xa010101, @remote}}}}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000180000000000000", @ANYRES32=0x1, @ANYBLOB="0f000027b68c1500000000270d00000000000000a8fc3144747bf4de0c3d9d07e59bfcbe3633de8755fc1cc47a943e4ff734724ddd6af14e6f9216fafc546f465910fec25e80c1deca31337fc5793a267fd72e338ad2f42689d17ae0cd162dfb7f08fa4837864f6be6e9586e1ff678a99c7532732cf9d17d31d29afe78a92d34c762e3c1c53757159c2bb6cc6a96c927a05bd9c12b3d692c83e7cb22ae4ae7c5cd38bd6cbde2101a36dbd2980676125aee46dfffdb7c22149325aa6ec4dbf0e03dfa495f19929c36cc04edaec8639c79df", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000040000000500"/28], 0x50) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000001c0)={0x1, 0x1ff, 0x7f, 0x0, 0x11}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb01001800000000000200430000004300000006000000050000000000000b00000000030000000000b4892eb49600001204000000070000000100000f03000000050000009d162e9e7e98b9b305dadb030000000000000e030000000000000000005f2e5f6100"], &(0x7f0000000480)=""/242, 0x62, 0xf2, 0x0, 0xfffffff3}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x13, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6da7, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x4}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x101}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x7, 0x4e, &(0x7f0000000340)=""/78, 0x41100, 0x0, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f00000005c0)={0x2, 0x10001}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000600)=[{0x5, 0x1, 0x4, 0x4}, {0x2, 0x2, 0x6}, {0x0, 0x1, 0xd, 0xa}, {0x1, 0x3, 0x4, 0x5}], 0x10, 0x6}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) clock_adjtime(0x0, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x20, r7, 0x321, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4044094}, 0x4) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@private, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, {0x3bc7, 0x0, 0x80000000}, {0x0, 0x0, 0xffffffff}, 0x70bd2d, 0x0, 0x2, 0x4, 0x0, 0x4c}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x40) 8m46.887795673s ago: executing program 4 (id=6755): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000900)=""/174, 0xae}], 0x1}}], 0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000009b80)=""/102392, 0x18ff8) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$dsp(r3, &(0x7f00000001c0)=""/95, 0x5f) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1) memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\'5\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r3, 0x2b93, 0xe9d0, 0x22, 0x0, 0x0) 8m24.062075267s ago: executing program 41 (id=6775): shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ffe000/0x1000)=nil) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) pwrite64(0xffffffffffffffff, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200970}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) write$9p(0xffffffffffffffff, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xdf3e, 0x80, 0x1, 0xbedffffc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r3, 0x2b93, 0xe9d0, 0x22, 0x0, 0x0) 2m52.045184049s ago: executing program 3 (id=7512): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="34040000", @ANYRES16=r1, @ANYBLOB="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"], 0x434}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$inet6(r5, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @empty, 0x4}, 0x1c, 0x0}}], 0x1, 0x20040005) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000001c0)={{0x25000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0x7, 0x0, 0x40, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x1, 0x2, 0x0, 0x4, 0x1, 0x81, 0x0, 0xc4, 0x5}, {0x70000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0xa, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x6000, 0x0, 0x10, 0x0, 0x4, 0x1, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x6000, 0x4000, 0xf, 0xff, 0x3, 0xff, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0xff, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x9}, 0x40010000, 0x0, 0x26000, 0x300, 0x5, 0x2000, 0x30000, [0x3, 0x401, 0x7, 0xc5]}) close_range(r3, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r8}, 0xc) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x0, 0x6, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r9, 0x11a, 0x1, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010001fff2bbd7000ffffffffffffffdd", @ANYRES32=0x0, @ANYBLOB="21080000050000002000128008000100736974001400028006000d00ff03000008000200ac1414bb"], 0x40}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 2m51.644131989s ago: executing program 3 (id=7514): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x68}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0118000000000000aaffc637809ac22ddb00000f0000000f00ed12bb34c627b9a4dc1c948700"], 0x0, 0x2a, 0x0, 0x0, 0x7ff}, 0x28) socket$tipc(0x1e, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) bind$tipc(r4, 0x0, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x18}}, 0x10, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRESDEC, @ANYBLOB="43da2e2e"], 0x48) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000440)=ANY=[@ANYRES16=r1, @ANYRES32=r2], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x0, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) 2m50.481890237s ago: executing program 3 (id=7518): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x80, 0x1, 0x28}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x50) socket$nl_crypto(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0xc, &(0x7f0000001180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000060000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b200000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x306) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'pim6reg1\x00', @multicast}) close(0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000006909000000000000550901000000000095000000000000007617040007000000bf91000000000000b7020000000000008500000084000000b70000000000"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x41}, 0x94) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2020600}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x2, 0x3, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0xf4, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x24040080}, 0x4040805) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f00000000c0)=0x400) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000480)=0xffffffffffffffff) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000640)="8285bd", 0x3}], 0x1}, 0x400c9c1) 2m49.755075096s ago: executing program 3 (id=7521): syz_init_net_socket$ax25(0x3, 0x5, 0xcb) socket$netlink(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) socket$netlink(0x10, 0x3, 0x6) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[], 0x0, 0x5e, 0x0, 0x1}, 0x28) ioctl$HCIINQUIRY(r4, 0x800448d4, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000003c0)=0x1002, 0x12) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x80, 0x0, 0xffffffffffffffff, 0x87}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r6, 0x0, &(0x7f0000001780)=""/4096}, 0x20) 2m48.945513386s ago: executing program 3 (id=7524): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143}, 0x48) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$NBD_CMD_RECONFIGURE(r0, 0x0, 0x4000) 2m41.872976779s ago: executing program 3 (id=7546): pipe2$watch_queue(&(0x7f0000000040), 0x80) r0 = add_key(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x19) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) futex(&(0x7f0000000540)=0x2, 0x8c, 0x1, 0x0, 0x0, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00'}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) add_key$keyring(&(0x7f0000002280), &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x118) 2m27.156107315s ago: executing program 42 (id=7546): pipe2$watch_queue(&(0x7f0000000040), 0x80) r0 = add_key(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x19) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) futex(&(0x7f0000000540)=0x2, 0x8c, 0x1, 0x0, 0x0, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00'}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) add_key$keyring(&(0x7f0000002280), &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x118) 32.881990531s ago: executing program 9 (id=7819): openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000280)=ANY=[@ANYRES64=r2, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, &(0x7f0000000780)}, 0x20) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000003b40)=""/58) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r7, 0x114, 0xa, &(0x7f0000000000), 0x1) 27.933213352s ago: executing program 9 (id=7830): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) io_cancel(0x0, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xd0}}, 0x0) acct(&(0x7f00000001c0)='./file0\x00') ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x6, 0xb, 0x0, 0x0, @str='{\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 26.278022166s ago: executing program 9 (id=7845): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$getenv(0x4201, r1, 0x0, &(0x7f0000000380)) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000003c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8c}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x5) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) 24.85902993s ago: executing program 9 (id=7838): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) get_mempolicy(0x0, 0x0, 0x8, &(0x7f0000927000/0x7000)=nil, 0x2) memfd_create(&(0x7f0000000040)='dev [\x1dx#l', 0x8) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000680)={0x1, 0x0, 0x202, 0xce, 0xffffffffffffffff, 0x200000000000008, 0x1000000000000008, 0x2, 0x8, 0x40000000000002a, 0x80000009, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r6, 0xc06c4124, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) sendmmsg$inet6(r4, &(0x7f0000001700), 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) 22.239243413s ago: executing program 9 (id=7844): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xd8, 0x30, 0xffff, 0x70bd25, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x9, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd, 0x4}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xff, 0x2, 0x20000000, 0xfffffff9, 0x9}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x78d, 0x10000000}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000000)={'wg0\x00'}) sendmsg$nl_route(r4, 0x0, 0x0) 19.964258077s ago: executing program 9 (id=7850): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000a93000/0x4000)=nil, 0x4000) io_submit(0x0, 0x0, &(0x7f0000000500)) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000f40)=ANY=[@ANYBLOB="0100000000000000008000000700000014f7ffff0900000009000000af010000a2b9000001000000100000000800"]) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b0200000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) socket$netlink(0x10, 0x3, 0x12) lremovexattr(0x0, &(0x7f00000001c0)=@known='trusted.syz\x00') ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r3, 0xc01064c1, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff}) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000180)=0x80000001) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[], 0x2e) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) 16.822693526s ago: executing program 7 (id=7856): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpgrp(0x0) syz_pidfd_open(r0, 0x0) epoll_create(0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 15.341337686s ago: executing program 7 (id=7861): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x5, 0x0, 0xff}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4000000000000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) modify_ldt$write2(0x11, 0x0, 0x0) modify_ldt$read(0x0, &(0x7f0000000280)=""/51, 0xfffffffffffffffe) r3 = fcntl$getown(r2, 0x9) lseek(r0, 0xbc, 0x3) r4 = fsopen(&(0x7f0000000580)='overlay\x00', 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="648c161d50613501828c89d5dd59fada754faf2d34dcc27d57e7bb10afd14eeefb21626ee3e5a72b4c608a08c970f04bfa3efc4be0083bb9728bb33e65bba04e474f2b59f682591a9a7410926acc70d0d7", 0x51}, {&(0x7f0000000a00)="8838558583c3076e8c683d190bbb9cf72ad2a5ee2fd419af2c04eafbb431290c77d90521bf940b65ac4d15688b246cf4b8d98f948820573497bc6f02b26c9f1b78c67c159bcb514e5d6079e6a2139bd813ffeddd01db9dcb578205cb233b0cfefbcb5f5e3e8d3921ffca06549e7015fe1e0ab10afb85fa46046e622fd8736bea57432ba01ffd383e9feacc00d1739c82f367775d62cbc5ecd7ef0ec86c1027ba8a24805cfc81daf44707401e5eda4ad28a53d2778c613ead53c4defff7b5b4f6b97eb4c7bc4c", 0xc6}, {&(0x7f0000000b00)="dbc202e291af3c844c28ceb2711a50d0cc5c041359d86c4cc564c83ed180390e380ebbdc773d1be19d5f3f5385b7025f15bafad0bd8cd61219916c7d299152aab6d901ebb4f02f3956c02a88e3b64e8ca8eb53bb35cefb14cb1dd638e66ef1ba69b581beb831702e71e665df296e8ccd5a289ba74dddf821271e63d04454578af4ebfddd974c1390db7f2bac8db687d608e4b4e488769d9d1129f1d542059f3ab415cb34181bc15c21af13ed7c0eba543557cd7c2a169443769433dfc1afb38fda3993cecde0c1b0ae3d05c6eb5c71b2", 0xd0}, {&(0x7f0000000c00)="4a78ccb44e4d468fb374b4d199bd0241345eb6f8a7870e4c9dc81d65014a6bb920a6f2c366207adce5601d0baf552bcdbe1f113db483e9c0aa0ca4c5d8120df1f456462ed3b6b500258db56fbe53f460c2963924e1c31a32f8dd28950ad96b1aa2cd7c923404f3b1df2cdee49bad661f87e7dbdd38481a13f807ff6faca5904e509b", 0x82}, {&(0x7f0000000180)="fbd3171244f36520db97e775", 0xc}, {&(0x7f0000000cc0)="e0bcf76a37c2ee3762abb5b0bfba041178692a59f09368d4486da970ead3a7d47a7b42b8d8e1d7bf24fbc4c3bead5ed44be56103efb3fc42ef1321f070807fa170430059c6eff231a325b0c9fd5e25929b61426fa8f9e1ba086a9ee3f1e81fce6dd20a1d5436f6466fffddecff6ee858872dc4d9d0183abad22bfb8d95e551e0b33b2a486b513f0c549f88257d405cb2c307e54cd9d7ea1c30079e0a2936a511ce172b7661dfa72279128403412a096881", 0xb1}, {&(0x7f0000000340)="bde34a43afa412de", 0x8}], 0x7, &(0x7f0000001480)=[@rights={{0x1c, 0x1, 0x1, [r5, r2, r5]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x80, 0x20000040}}, {{&(0x7f0000001500)=@file={0x0, './file0/../file0/file0\x00'}, 0x6e, &(0x7f0000001580)=[{&(0x7f00000083c0)="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", 0x1000}], 0x1, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000e91b000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xb0, 0x4000804}}, {{&(0x7f0000001780)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001840)=[{&(0x7f0000001800)="868ffe5ee8853d1b", 0x8}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r5, @ANYBLOB="1c000000040000400100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x20008040}}], 0x3, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000200)={0xd8a, 0x20000800, 0x2000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0x1b8, 0x0, 0x1b8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}, {0x5}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xf, 0x2}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000000440)=ANY=[@ANYBLOB="400000000000000002004e22ac14142c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002004e20ac141410000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000926320b038d86508e357382df0ef843f4e54db3499da6b27804817314b8d7417d43022821b7f126af441357f7c2f"], 0x110) 12.248395556s ago: executing program 5 (id=7868): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$fuse(0x0, 0x0, 0x0, 0x2018081, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) listen(0xffffffffffffffff, 0x4000) close(0xffffffffffffffff) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'}) syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x0, 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtaction={0xbc, 0x30, 0x48b, 0x0, 0x0, {}, [{0xa8, 0x1, [@m_ctinfo={0x50, 0x2, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80, 0x5, 0x5, 0x1, 0x2}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @local, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x524, 0x25dfdbfd, {0x2, 0x1f, 0x8b, 0xc8, r5}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3c}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11.071737914s ago: executing program 5 (id=7869): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000000010000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) userfaultfd(0x80801) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x63) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000008400)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9474a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x3, 0x1, 0x0, 0x0, 0xffffffff, 0x0, {0x6, 0x200000000, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x2, 0x0, 0x0, 0x101}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3}, 0x50) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800108, 0x0) writev(0xffffffffffffffff, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)='t', 0x2fd200}, {0x0, 0x2200}, {&(0x7f0000001000)="d6", 0x20c00}], 0x21) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002700090025bd7000ffd3008001000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x4000) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 11.071108494s ago: executing program 8 (id=7870): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x5d96}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x52}, 0x1c, &(0x7f0000000d80)=[{&(0x7f00000000c0)="8871a32229de4e63129d", 0xa}], 0x1}, 0x240480c3) fchmod(r2, 0x140) r3 = dup(r2) socket$alg(0x26, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) r4 = syz_usb_connect$uac1(0x2, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r4, &(0x7f0000000840)={0x14, &(0x7f0000000780)={0x40, 0xb, 0x2, {0x2, 0x1}}, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r7, r6, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r5, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r7, r8, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r5, 0x3b8d, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff6, @empty, 0x7f}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x6}, 0x9c) close_range(r0, 0xffffffffffffffff, 0x0) 10.433034022s ago: executing program 7 (id=7871): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x80102, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$key(0xf, 0x3, 0x2) pipe2(&(0x7f00000002c0), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x1ff, 0x0, 0xfffffe0000000001, 0xfa11}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$rtc(0xffffffffffffff9c, 0x0, 0x200301, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0xf400000000000000) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r4, 0x11e, 0x1, &(0x7f0000000080)=0x5, 0x4) listen(r4, 0x400) r5 = syz_open_dev$video(&(0x7f0000000040), 0x7f, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x3, 0x40000043, 0x3234564e, 0x8, 0x0, 0xfffffff3, 0xc, 0xfeedcafe, 0x2, 0x6, 0x2, 0x1}}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/181, 0xb5}], 0x1, 0x6, 0x1) 9.800293164s ago: executing program 5 (id=7872): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xd8, 0x30, 0xffff, 0x70bd25, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x9, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd, 0x4}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xff, 0x2, 0x20000000, 0xfffffff9, 0x9}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x78d, 0x10000000}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000000)={'wg0\x00'}) sendmsg$nl_route(r4, 0x0, 0x0) 9.084247398s ago: executing program 5 (id=7874): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x35) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@o_path={&(0x7f0000000680)='./file0\x00', 0x0, 0x0, r4}, 0x18) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x7, [@func={0xa, 0x0, 0x0, 0xc, 0x4}, @ptr={0x5, 0x0, 0x0, 0x2, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x7fff}}]}, {0x0, [0x2e, 0x2e, 0x30, 0x0, 0x2e]}}, &(0x7f0000000780)=""/41, 0x4f, 0x29, 0x7fff, 0x8}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1d, 0x4, 0x80000, 0xf, 0x4008, r6, 0x2, '\x00', r3, r7, 0x0, 0x2, 0x3}, 0x50) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) ioctl$COMEDI_BUFCONFIG(r4, 0x8020640d, &(0x7f0000000600)={0x7, 0x3, 0xd8, 0x3536}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r9, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ptrace$getregs(0xc, 0x0, 0x2, &(0x7f0000000540)=""/191) 8.78088173s ago: executing program 6 (id=7875): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xa010, &(0x7f0000000240)={[{@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}], [{@measure}]}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0205648, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @multicast1}]}, &(0x7f0000000140)=0x10) sendmmsg$inet_sctp(r5, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000240)={r7, 0x40}, 0x8) r8 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000140)={'dt2814\x00', [0xb013, 0xf40, 0x0, 0x0, 0x88d7, 0x8f, 0x100a, 0x8012, 0x1002, 0xffffffff, 0xff, 0x7, 0x10000009, 0x4, 0x5, 0x1, 0x8, 0x6, 0x9, 0x8e, 0x4, 0x3, 0x8, 0xa, 0x5, 0x1, 0x52, 0xc, 0x8, 0x400002, 0x2]}) 8.669691801s ago: executing program 8 (id=7876): socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x23, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10002}, 0x94) shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) fsopen(&(0x7f00000004c0)='proc\x00', 0x1) r0 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xc8) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$SNDRV_PCM_IOCTL_LINK(0xffffffffffffffff, 0x40044160, &(0x7f0000000200)=0xfffffffe) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r5, &(0x7f0000000140)={'some', 0x20, 0x9d}, 0x2f) close_range(r0, 0xffffffffffffffff, 0x0) 8.620750953s ago: executing program 7 (id=7877): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000840) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TCSETS(r2, 0x40045431, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x80000) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x2, 0x5f, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x19040) semtimedop(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x40000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x59280, 0x3a0}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x922, 0x12) bind$alg(r5, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) 5.609903163s ago: executing program 43 (id=7850): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000a93000/0x4000)=nil, 0x4000) io_submit(0x0, 0x0, &(0x7f0000000500)) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000f40)=ANY=[@ANYBLOB="0100000000000000008000000700000014f7ffff0900000009000000af010000a2b9000001000000100000000800"]) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b0200000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) socket$netlink(0x10, 0x3, 0x12) lremovexattr(0x0, &(0x7f00000001c0)=@known='trusted.syz\x00') ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r3, 0xc01064c1, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff}) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000180)=0x80000001) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[], 0x2e) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) 5.60780254s ago: executing program 8 (id=7879): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2b, 0x1, 0x0) ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f00000006c0)={'lo\x00', 0xfffffffffffffffa, 0x80000000}) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$sock(r1, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) r4 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r5 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r5}, &(0x7f0000000380)=0x0) timer_settime(r6, 0x1, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) rt_sigprocmask(0x2, &(0x7f0000000000)={[0x100]}, 0x0, 0x8) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10681, 0x189}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER_INTVL={0xc, 0x20, 0x3}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x20044002) 5.411008002s ago: executing program 6 (id=7880): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080), 0x2, 0x2}}, 0x20) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4040889}, 0x40) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r2 = openat$kvm(0xffffff9c, &(0x7f0000000300), 0x80800, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5b, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x25, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x1, "122b472e41e24b11f34b60"}]}}}}}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f00000001c0)=0x1, 0x4) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) connect(r0, &(0x7f0000000140)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 5.405586686s ago: executing program 5 (id=7881): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6(0x2d, 0x806, 0x0) socket(0x29, 0x3, 0x3d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x7ff}, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x2, {0x9, @pix_mp={0xf, 0x5be7, 0x50323234, 0x0, 0xb, [{0x80000004, 0x7}, {0x7ff, 0xffff}, {0x10000003, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x3, 0x489aa92e}, {0x5}, {0x40, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000000c0)={0x0, 0x0, r4, 0x0, 0x3, 0x500, 0xfa, 0x2, {0x400009, 0x9, 0xfffc, 0x8000, 0x3e, 0x400, 0xf5, 0x2, 0x0, 0x1, 0x200, 0xfffffd, 0x6, 0x40000001, "0e19cd00000000caa3431a0300dffb381f5300"}}) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, 0x0, 0x0, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='cubic', 0x9) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) 5.287542376s ago: executing program 6 (id=7882): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000000010000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) userfaultfd(0x80801) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x63) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000a400)={0x2020}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x3, 0x1, 0x0, 0x0, 0xffffffff, 0x0, {0x6, 0x200000000, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x2, 0x0, 0x0, 0x101}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x5842, 0x136) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800108, 0x0) writev(r3, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)='t', 0x2fd200}, {0x0, 0x2200}, {&(0x7f0000001000)="d6", 0x20c00}], 0x21) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002700090025bd7000ffd3008001000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x4000) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 4.35967115s ago: executing program 7 (id=7883): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) rt_tgsigqueueinfo(r0, r0, 0x2a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(&(0x7f0000002740), 0x80080) r3 = fsopen(&(0x7f0000000040)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), 0x0, &(0x7f0000000180)='tmpfs\x00', 0x2204c96, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r5, 0xfffd, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f67fe4)={0xa, 0x4e24, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) 3.517760642s ago: executing program 5 (id=7884): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r3, 0x0, &(0x7f0000000200)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5c}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r7 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$sock(r7, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e25, 0x68, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0xfffefffd}}], 0x18}, 0x4000000) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)={0x14, 0x0, 0x200, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0xc891) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000004800010928bd700018dcdf250a000100", @ANYBLOB="0000000014000100fe80000000000000000000000000001f14000100fe8000000000000000000000000000bb080002"], 0x54}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @loopback}, @IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x28081}, 0x8000002) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x140, 0x0, 0x0, 0xfffffffb, 0x10000, @value=r0}, 0x28) 3.316922664s ago: executing program 7 (id=7885): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0) r4 = fanotify_init(0x8, 0x1) fanotify_mark(r4, 0x105, 0x40001032, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x4) fcntl$setlease(r3, 0x400, 0x0) read$FUSE(r4, &(0x7f0000000b00)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x2}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) 3.307349718s ago: executing program 8 (id=7886): read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) wait4(r0, 0x0, 0x2, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[], 0x48) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) socket$inet(0x2, 0x1, 0x100) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x20042, 0x0) preadv2(r2, 0x0, 0x0, 0x80, 0x8000, 0x0) r4 = syz_open_dev$sndctrl(0x0, 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0) 2.425388981s ago: executing program 6 (id=7887): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x243, 0x0) syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) getdents64(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000040000"], 0x50) 1.227312347s ago: executing program 8 (id=7888): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = timerfd_create(0x9, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000002ec0)=""/261, 0x105, 0x6) timerfd_settime(r1, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x3938700}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0xf8, 0x0, &(0x7f0000000740)=[@free_buffer, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000600)={@fda={0x66646185, 0x0, 0x0, 0x3f}, @flat=@handle={0x73682a85, 0x1100, 0x1}, @fd}, &(0x7f0000000540)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000680)={@fda={0x66646185, 0x8, 0x1, 0x18}, @flat=@binder={0x73622a85, 0x1101}, @flat=@binder={0x73622a85, 0x2, 0x3}}, &(0x7f0000000700)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000400019070000000000000025037c00000c"], 0x20}, 0x1, 0x0, 0x0, 0x48814}, 0xc000) 1.1423395s ago: executing program 6 (id=7889): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getcwd(&(0x7f0000001180)=""/4096, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00010028bd7000fddbdf2500000000", @ANYRES32=r6, @ANYBLOB="04"], 0x1c}}, 0x20000010) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001480)={0x14, 0x36, 0x107, 0x3, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 38.982612ms ago: executing program 8 (id=7890): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x79af, 0x8, 0x0, 0x272}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @private2}, 0x1c) shutdown(r3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, 0x0, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, &(0x7f0000000580)=""/49}, 0x20) connect$unix(r4, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0x14, 0x2c, 0x0, @remote, @mcast2, {[@hopopts={0x89}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 0s ago: executing program 6 (id=7891): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x79af, 0x8, 0x0, 0x272}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @private2}, 0x1c) shutdown(r3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, 0x0, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, &(0x7f0000000580)=""/49}, 0x20) connect$unix(r4, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0x14, 0x2c, 0x0, @remote, @mcast2, {[@hopopts={0x89}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000400)={0x0, 0x0}) syz_open_procfs$namespace(r6, &(0x7f0000000240)='ns/mnt\x00') socket$qrtr(0x2a, 0x2, 0x0) kernel console output (not intermixed with test programs): known, defaulting to 1000 [ 1211.453499][T27699] lo speed is unknown, defaulting to 1000 [ 1212.773913][T24347] Bluetooth: hci5: command tx timeout [ 1214.815403][T24347] Bluetooth: hci5: command tx timeout [ 1216.735911][T24347] Bluetooth: hci5: command tx timeout [ 1217.419595][T27699] chnl_net:caif_netlink_parms(): no params data found [ 1217.831262][ T5871] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1217.922373][T27699] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.931065][T27699] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.940096][T27699] bridge_slave_0: entered allmulticast mode [ 1217.952011][T27699] bridge_slave_0: entered promiscuous mode [ 1217.966275][T27699] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.985668][T27699] bridge0: port 2(bridge_slave_1) entered disabled state [ 1218.004268][ T5871] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1218.018889][T27699] bridge_slave_1: entered allmulticast mode [ 1218.029023][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.039220][T27699] bridge_slave_1: entered promiscuous mode [ 1218.045612][ T5871] usb 6-1: Product: syz [ 1218.054808][ T5871] usb 6-1: Manufacturer: syz [ 1218.064105][ T5871] usb 6-1: SerialNumber: syz [ 1218.086964][ T5871] usb 6-1: config 0 descriptor?? [ 1218.152934][T27699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1218.170241][ T5871] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1218.180643][T27699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1218.250041][T27699] team0: Port device team_slave_0 added [ 1218.269097][T27699] team0: Port device team_slave_1 added [ 1218.360938][ T5871] gspca_sunplus: reg_r err -32 [ 1218.367917][T27699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1218.383727][T27699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1218.449533][T27699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1218.473601][ T5871] sunplus 6-1:0.0: probe with driver sunplus failed with error -32 [ 1218.475448][T27699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1218.502950][T27699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1218.558846][T27699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1218.737777][T24347] Bluetooth: hci5: command tx timeout [ 1219.163618][T27699] hsr_slave_0: entered promiscuous mode [ 1219.229322][T27699] hsr_slave_1: entered promiscuous mode [ 1219.276620][T27699] debugfs: 'hsr0' already exists in 'hsr' [ 1219.295789][T27699] Cannot create hsr debugfs directory [ 1220.603000][ T5871] usb 6-1: USB disconnect, device number 41 [ 1221.709422][T27828] netlink: 'syz.7.6829': attribute type 4 has an invalid length. [ 1226.816393][T27889] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6839'. [ 1226.826648][T27889] netlink: 108 bytes leftover after parsing attributes in process `syz.8.6839'. [ 1226.836648][T27889] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6839'. [ 1226.845800][T27889] netlink: 108 bytes leftover after parsing attributes in process `syz.8.6839'. [ 1226.851962][ T5871] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1226.854911][T27889] netlink: 84 bytes leftover after parsing attributes in process `syz.8.6839'. [ 1227.526728][ T5871] usb 6-1: device descriptor read/64, error -71 [ 1227.890326][ T5871] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1228.024142][ T30] audit: type=1326 audit(1769126169.807:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27916 comm="syz.6.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50d79acb9 code=0x7ffc0000 [ 1228.065085][ T5871] usb 6-1: device descriptor read/64, error -71 [ 1228.255468][ T30] audit: type=1326 audit(1769126169.817:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27916 comm="syz.6.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50d79acb9 code=0x7ffc0000 [ 1228.280480][ T30] audit: type=1326 audit(1769126169.849:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27916 comm="syz.6.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe50d79acb9 code=0x7ffc0000 [ 1228.415547][ T5871] usb usb6-port1: attempt power cycle [ 1228.643104][ T30] audit: type=1326 audit(1769126169.849:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27916 comm="syz.6.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50d79acb9 code=0x7ffc0000 [ 1228.804709][ T5871] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1228.933240][ T30] audit: type=1326 audit(1769126169.849:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27916 comm="syz.6.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50d79acb9 code=0x7ffc0000 [ 1228.966322][ T30] audit: type=1326 audit(1769126169.849:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27916 comm="syz.6.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fe50d79acb9 code=0x7ffc0000 [ 1229.003783][ T30] audit: type=1326 audit(1769126169.849:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27916 comm="syz.6.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50d79acb9 code=0x7ffc0000 [ 1229.069276][ T30] audit: type=1326 audit(1769126169.849:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27916 comm="syz.6.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50d79acb9 code=0x7ffc0000 [ 1229.104946][ T30] audit: type=1326 audit(1769126169.870:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27916 comm="syz.6.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fe50d79acb9 code=0x7ffc0000 [ 1229.128963][ T5871] usb 6-1: device not accepting address 44, error -71 [ 1229.138509][ T30] audit: type=1326 audit(1769126169.870:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27916 comm="syz.6.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50d79acb9 code=0x7ffc0000 [ 1229.145845][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.330108][T27940] overlayfs: missing 'lowerdir' [ 1230.162342][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.629090][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.278574][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.262244][T27699] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1234.328930][T27699] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1234.429459][T27699] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1234.499002][T28009] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6862'. [ 1234.711191][T27699] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1235.293195][ T13] gretap0: left allmulticast mode [ 1235.322138][ T13] gretap0: left promiscuous mode [ 1235.333333][ T13] bridge0: port 3(gretap0) entered disabled state [ 1235.362854][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 1235.362869][ T30] audit: type=1400 audit(1769126177.523:1410): avc: denied { bind } for pid=28024 comm="syz.8.6864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1235.441836][ T13] bridge_slave_1: left allmulticast mode [ 1235.460815][ T13] bridge_slave_1: left promiscuous mode [ 1235.493506][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1235.505148][ T30] audit: type=1400 audit(1769126177.670:1411): avc: denied { connect } for pid=28024 comm="syz.8.6864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1235.628590][ T13] bridge_slave_0: left allmulticast mode [ 1235.654849][ T13] bridge_slave_0: left promiscuous mode [ 1235.682378][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1235.970344][T28041] siw: device registration error -23 [ 1235.983383][T28041] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1236.711257][T24352] SELinux: failure in sel_netif_sid_slow(), invalid network interface (78) [ 1236.954869][ T30] audit: type=1400 audit(1769126179.182:1412): avc: denied { append } for pid=28049 comm="syz.5.6868" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1238.668567][ T13] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1238.725042][T28069] input: syz1 as /devices/virtual/input/input71 [ 1238.887264][ T13] bond1 (unregistering): (slave bridge1): Releasing active interface [ 1238.935606][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1238.952590][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1238.969875][ T13] bond0 (unregistering): Released all slaves [ 1238.981323][ T13] bond1 (unregistering): Released all slaves [ 1240.109225][T27699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1240.221057][T27699] 8021q: adding VLAN 0 to HW filter on device team0 [ 1240.844883][ T3863] bridge0: port 1(bridge_slave_0) entered blocking state [ 1240.852040][ T3863] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1241.607955][ T1333] bridge0: port 2(bridge_slave_1) entered blocking state [ 1241.615100][ T1333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1242.464763][T24317] Bluetooth: hci5: command 0x0405 tx timeout [ 1243.089294][T27699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1243.205228][T27699] veth0_vlan: entered promiscuous mode [ 1243.264241][T27699] veth1_vlan: entered promiscuous mode [ 1243.317221][T27699] veth0_macvtap: entered promiscuous mode [ 1243.856943][T28129] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6880'. [ 1244.215992][ T13] hsr_slave_0: left promiscuous mode [ 1244.410227][ T13] hsr_slave_1: left promiscuous mode [ 1244.424362][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1244.851600][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1244.900250][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1244.921664][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1245.439085][T28157] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6884'. [ 1245.453621][T28152] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6885'. [ 1245.461884][T28154] erofs (device nbd5): cannot find valid erofs superblock [ 1245.529176][ T13] veth1_macvtap: left promiscuous mode [ 1245.550509][ T13] veth0_macvtap: left promiscuous mode [ 1245.574084][ T13] veth1_vlan: left promiscuous mode [ 1245.601090][ T13] veth0_vlan: left promiscuous mode [ 1246.516190][T28177] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 1248.592323][T28204] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6894'. [ 1248.704247][T11316] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1248.920118][T11316] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1248.951415][T11316] usb 8-1: config 0 has no interface number 0 [ 1249.000428][T11316] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1249.254961][T11316] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.274671][T11316] usb 8-1: Product: syz [ 1249.291891][T11316] usb 8-1: Manufacturer: syz [ 1249.302906][T11316] usb 8-1: SerialNumber: syz [ 1249.320437][T11316] usb 8-1: config 0 descriptor?? [ 1249.608168][T11316] usb 8-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1249.637714][T11316] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1249.653313][T11316] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1249.665369][T11316] usb 8-1: media controller created [ 1249.763007][T11316] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1249.993152][T28219] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6892'. [ 1250.159557][T28228] FAT-fs (loop17): unable to read boot sector [ 1250.808799][T11316] i2c i2c-3: ec100: i2c rd failed=-110 reg=33 [ 1250.971356][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1251.293537][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1252.645805][ T30] audit: type=1400 audit(1769126195.149:1413): avc: denied { associate } for pid=28241 comm="syz.8.6901" name="file0" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1253.081531][T27699] veth1_macvtap: entered promiscuous mode [ 1253.152195][T27699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1253.155895][T11316] usb 8-1: USB disconnect, device number 16 [ 1253.832758][T27699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1254.882826][T21360] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.915493][T21360] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.978800][T21360] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.036417][T21360] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.086862][T28272] trusted_key: encrypted_key: insufficient parameters specified [ 1256.153733][T28272] No control pipe specified [ 1256.655821][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1256.693836][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1256.708392][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1256.727582][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1257.534234][T28291] netlink: 'syz.8.6910': attribute type 4 has an invalid length. [ 1258.151266][T28303] syzkaller0: entered promiscuous mode [ 1258.160764][T28303] syzkaller0: entered allmulticast mode [ 1259.912434][T28334] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1260.864322][T28340] netlink: 'syz.5.6919': attribute type 1 has an invalid length. [ 1260.872187][T28340] netlink: 'syz.5.6919': attribute type 2 has an invalid length. [ 1260.880371][T28340] netlink: 'syz.5.6919': attribute type 1 has an invalid length. [ 1260.888282][T28340] netlink: 'syz.5.6919': attribute type 3 has an invalid length. [ 1260.896005][T28340] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6919'. [ 1261.878113][T24352] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1262.365262][T28365] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1262.380246][ T30] audit: type=1400 audit(1769126205.679:1414): avc: denied { accept } for pid=28357 comm="syz.3.6923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1262.564587][T24352] usb 6-1: Using ep0 maxpacket: 32 [ 1262.590107][T24352] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1262.624551][T24352] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1262.653148][T24352] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1262.789477][T24352] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.830945][T24352] usb 6-1: config 0 descriptor?? [ 1263.927750][T28351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1263.992768][T28351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1264.328090][T28384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1264.337952][T28384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1264.813169][T28387] netlink: 'syz.3.6926': attribute type 1 has an invalid length. [ 1264.821308][T28387] netlink: 'syz.3.6926': attribute type 2 has an invalid length. [ 1264.829407][T28387] netlink: 'syz.3.6926': attribute type 2 has an invalid length. [ 1264.837419][T28387] netlink: 'syz.3.6926': attribute type 1 has an invalid length. [ 1264.845375][T28387] netlink: 'syz.3.6926': attribute type 1 has an invalid length. [ 1266.421984][T24352] usbhid 6-1:0.0: can't add hid device: -71 [ 1266.428012][T24352] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1266.444801][T24352] usb 6-1: USB disconnect, device number 46 [ 1267.278427][T28406] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 1267.284995][T28406] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1267.293069][T28406] vhci_hcd vhci_hcd.0: Device attached [ 1267.531316][T28419] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6933'. [ 1267.659648][T24352] usb 39-1: new high-speed USB device number 3 using vhci_hcd [ 1268.351161][T28415] vhci_hcd: connection reset by peer [ 1268.393252][ T4051] vhci_hcd vhci_hcd.3: stop threads [ 1268.420041][ T4051] vhci_hcd vhci_hcd.3: release socket [ 1268.452187][ T4051] vhci_hcd vhci_hcd.3: disconnect device [ 1268.714632][ T30] audit: type=1804 audit(1769126212.534:1415): pid=28425 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.6934" name="file0" dev="tmpfs" ino=711 res=1 errno=0 [ 1268.736866][T28425] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 1268.745473][T28425] ref_ctr increment failed for inode: 0x2c7 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88804caed5c0 [ 1269.123854][T28427] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 1269.265193][T28432] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6935'. [ 1269.596050][T28427] ref_ctr decrement failed for inode: 0x2c7 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88804caed5c0 [ 1269.641745][T28427] uprobe: syz.6.6934:28427 failed to unregister, leaking uprobe [ 1270.993921][T28452] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1271.107708][T28450] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1271.311360][T28451] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6938'. [ 1271.841785][ T5884] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1272.100244][ T5884] usb 4-1: Using ep0 maxpacket: 8 [ 1272.133917][ T5884] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1272.294667][ T5884] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1272.308132][ T5884] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 253 [ 1272.321461][ T5884] usb 4-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=83.a1 [ 1272.333529][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.347111][ T5884] usb 4-1: Product: syz [ 1272.352246][ T5884] usb 4-1: Manufacturer: syz [ 1272.364821][ T5884] usb 4-1: SerialNumber: syz [ 1272.432402][ T5884] usb 4-1: config 0 descriptor?? [ 1272.624174][ T30] audit: type=1326 audit(1769126216.607:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28470 comm="syz.7.6945" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9c6bf9acb9 code=0x0 [ 1272.833918][T24352] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1272.881283][ T30] audit: type=1400 audit(1769126216.912:1417): avc: denied { listen } for pid=28470 comm="syz.7.6945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1274.353744][T28493] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 1274.360304][T28493] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1274.398130][T28493] vhci_hcd vhci_hcd.0: Device attached [ 1274.556512][T11317] usb 4-1: USB disconnect, device number 48 [ 1274.905077][T28482] usb 47-1: new high-speed USB device number 2 using vhci_hcd [ 1275.299693][T28509] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1275.992635][T28501] vhci_hcd: connection reset by peer [ 1276.029566][ T3907] vhci_hcd vhci_hcd.7: stop threads [ 1276.036208][ T3907] vhci_hcd vhci_hcd.7: release socket [ 1276.069939][ T3907] vhci_hcd vhci_hcd.7: disconnect device [ 1276.813415][T28521] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6952'. [ 1277.116977][T28527] netlink: 'syz.6.6952': attribute type 10 has an invalid length. [ 1277.197738][T28527] syz_tun: entered promiscuous mode [ 1277.209203][T28527] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1277.287857][ T30] audit: type=1400 audit(1769126221.531:1418): avc: denied { setopt } for pid=28530 comm="syz.7.6954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1277.593008][T28536] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 1278.653222][T28549] CIFS mount error: No usable UNC path provided in device string! [ 1278.653222][T28549] [ 1278.664279][T28549] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1279.518328][T28561] fuse: Bad value for 'fd' [ 1279.843037][T28482] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1280.717721][T28579] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 1281.182130][ T30] audit: type=1400 audit(1769126225.174:1419): avc: denied { relabelto } for pid=28575 comm="syz.8.6963" name="764" dev="tmpfs" ino=4127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 1281.302916][ T30] audit: type=1400 audit(1769126225.174:1420): avc: denied { associate } for pid=28575 comm="syz.8.6963" name="764" dev="tmpfs" ino=4127 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 1281.520550][ T30] audit: type=1400 audit(1769126225.982:1421): avc: denied { remove_name } for pid=13954 comm="syz-executor" name="binderfs" dev="tmpfs" ino=4131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 1281.990612][ T30] audit: type=1400 audit(1769126225.982:1422): avc: denied { rmdir } for pid=13954 comm="syz-executor" name="764" dev="tmpfs" ino=4127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 1283.896278][T28614] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6968'. [ 1285.743807][T28637] can0: slcan on ttyS3. [ 1286.636093][T28656] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6975'. [ 1288.090774][T28622] can0 (unregistered): slcan off ttyS3. [ 1289.773027][T24347] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1290.271092][T28702] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6984'. [ 1292.784907][T28710] Set syz1 is full, maxelem 65536 reached [ 1295.173297][T28735] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6992'. [ 1295.660238][T28739] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1297.923245][T24352] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1297.950135][T28772] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6997'. [ 1298.191862][T24352] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1298.263189][T28775] fuse: Bad value for 'fd' [ 1298.270083][T24352] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1298.435631][T24352] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1298.900928][T24352] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1298.916937][T24352] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1298.937716][T24352] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.971124][T24352] usb 4-1: config 0 descriptor?? [ 1299.173214][T11317] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 1299.229753][T24352] hdpvr 4-1:0.0: firmware version 0x0 dated [ 1299.391498][T24352] hdpvr 4-1:0.0: untested firmware, the driver might not work. [ 1299.399803][T28771] binder: 28770:28771 ioctl 4018620d 0 returned -22 [ 1299.596400][T28797] siw: device registration error -23 [ 1301.815057][ T30] audit: type=1400 audit(1769126247.219:1423): avc: denied { ioctl } for pid=28817 comm="syz.3.7005" path="socket:[120606]" dev="sockfs" ino=120606 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1302.389869][T24352] hdpvr 4-1:0.0: Could not setup controls [ 1303.223923][T24352] hdpvr 4-1:0.0: registering videodev failed [ 1303.248860][T24352] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -71 [ 1303.261478][T24352] usb 4-1: USB disconnect, device number 49 [ 1303.653657][T25616] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1303.756103][T28846] lo speed is unknown, defaulting to 1000 [ 1303.762144][T28846] lo speed is unknown, defaulting to 1000 [ 1303.771326][T28846] lo speed is unknown, defaulting to 1000 [ 1303.819886][T28846] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 1303.930707][T28846] lo speed is unknown, defaulting to 1000 [ 1303.942202][T28846] lo speed is unknown, defaulting to 1000 [ 1303.953264][T28846] lo speed is unknown, defaulting to 1000 [ 1303.966291][T28846] lo speed is unknown, defaulting to 1000 [ 1303.977494][T28846] lo speed is unknown, defaulting to 1000 [ 1303.990041][T28846] lo speed is unknown, defaulting to 1000 [ 1304.001186][T28846] lo speed is unknown, defaulting to 1000 [ 1304.152670][T11317] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1304.174717][T25616] usb 9-1: Using ep0 maxpacket: 16 [ 1304.191820][T25616] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 1304.206133][T11317] usb 8-1: unable to read config index 0 descriptor/start: -32 [ 1304.236191][T11317] usb 8-1: chopping to 0 config(s) [ 1304.249305][T25616] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1304.338913][T11317] usb 8-1: can't read configurations, error -32 [ 1304.375514][T25616] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 1304.405041][T25616] usb 9-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.00 [ 1304.546803][T11317] usb 8-1: new full-speed USB device number 18 using dummy_hcd [ 1304.557202][T28854] netlink: get zone limit has 8 unknown bytes [ 1304.558638][T25616] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1304.576350][T25616] usb 9-1: config 0 descriptor?? [ 1305.121968][T11317] usb 8-1: device descriptor read/64, error -32 [ 1305.259586][T11317] usb usb8-port1: attempt power cycle [ 1305.273412][T28836] overlayfs: failed lookup in lower (newroot/775, name='bus', err=-40): overlapping layers [ 1305.344332][T28859] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7011'. [ 1305.741218][T25616] smartjoyplus 0003:6666:8801.0034: global environment stack underflow [ 1305.761983][T25616] smartjoyplus 0003:6666:8801.0034: item 0 1 1 11 parsing failed [ 1305.770366][T25616] smartjoyplus 0003:6666:8801.0034: parse failed [ 1305.857126][T28871] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1305.865783][T28871] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1305.874331][T28871] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1306.108970][T28873] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7015'. [ 1306.117931][T28873] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7015'. [ 1306.126946][T28873] netlink: 'syz.5.7015': attribute type 13 has an invalid length. [ 1306.134829][T28873] netlink: 'syz.5.7015': attribute type 12 has an invalid length. [ 1306.200556][T28862] netlink: 666 bytes leftover after parsing attributes in process `syz.8.7009'. [ 1306.244215][T25616] smartjoyplus 0003:6666:8801.0034: probe with driver smartjoyplus failed with error -22 [ 1306.289565][T11317] usb 8-1: new full-speed USB device number 19 using dummy_hcd [ 1306.538401][T11317] usb 8-1: device descriptor read/8, error -32 [ 1306.542174][T28874] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28874 comm=syz.8.7009 [ 1307.786324][T11317] usb 8-1: new full-speed USB device number 20 using dummy_hcd [ 1307.927826][ T5884] usb 9-1: USB disconnect, device number 30 [ 1308.023871][T11317] usb 8-1: device descriptor read/8, error -32 [ 1308.269177][T11317] usb usb8-port1: unable to enumerate USB device [ 1309.078006][T28888] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7018'. [ 1309.851344][T28904] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7019'. [ 1310.135719][ T5884] raw-gadget.1 gadget.7: failed to queue resume event [ 1310.201669][ T5884] usb 8-1: new full-speed USB device number 21 using dummy_hcd [ 1310.209921][ C1] raw-gadget.1 gadget.7: ignoring, device is not running [ 1310.218892][ T5884] raw-gadget.1 gadget.7: failed to queue reset event [ 1310.291422][ T5884] raw-gadget.1 gadget.7: failed to queue resume event [ 1310.411115][ T5884] usb 8-1: device descriptor read/64, error -32 [ 1310.552627][ T30] audit: type=1400 audit(1769126256.447:1424): avc: denied { read } for pid=28908 comm="syz.8.7023" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1310.605731][ T5884] raw-gadget.1 gadget.7: failed to queue suspend event [ 1310.615868][ T5884] raw-gadget.1 gadget.7: failed to queue reset event [ 1310.712180][T28914] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7024'. [ 1310.736061][T24347] Bluetooth: hci0: ISO packet for unknown connection handle 3104 [ 1310.744118][ T30] audit: type=1400 audit(1769126256.615:1425): avc: denied { append } for pid=28911 comm="syz.7.7024" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1310.996982][ T5884] raw-gadget.1 gadget.7: failed to queue resume event [ 1311.078973][ T5884] usb 8-1: new full-speed USB device number 22 using dummy_hcd [ 1311.221408][ C1] raw-gadget.1 gadget.7: ignoring, device is not running [ 1311.242174][ T5884] raw-gadget.1 gadget.7: failed to queue reset event [ 1311.773065][ T5884] raw-gadget.1 gadget.7: failed to queue resume event [ 1312.334709][ T5884] usb 8-1: device descriptor read/64, error -32 [ 1312.423665][T28800] raw-gadget.1 gadget.7: failed to queue suspend event [ 1312.461054][ T5884] usb usb8-port1: attempt power cycle [ 1312.466585][ T5884] raw-gadget.1 gadget.7: failed to queue disconnect event [ 1312.492166][T28800] raw-gadget.1 gadget.7: failed to queue disconnect event [ 1312.562556][T28934] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7026'. [ 1312.756312][T28910] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1312.925814][T28910] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1312.970780][T28910] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1312.980510][T28910] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1312.994166][T24317] Bluetooth: hci4: command 0x0406 tx timeout [ 1313.013469][T28910] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1313.035527][T28910] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1313.055809][T28910] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1313.099015][T28910] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1314.890372][T24317] Bluetooth: hci0: command 0x0c1a tx timeout [ 1314.945187][ T5884] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1314.975978][T24317] Bluetooth: hci5: command 0x0405 tx timeout [ 1314.976013][T24347] Bluetooth: hci4: command 0x0406 tx timeout [ 1315.220560][ T5884] usb 6-1: Using ep0 maxpacket: 32 [ 1315.241003][ T5884] usb 6-1: config 0 has an invalid interface number: 119 but max is 0 [ 1315.249692][ T5884] usb 6-1: config 0 has no interface number 0 [ 1315.256033][ T5884] usb 6-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1315.269611][ T5884] usb 6-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1315.282755][ T5884] usb 6-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1315.314383][ T5884] usb 6-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1315.425533][ T5884] usb 6-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1315.537552][ T5884] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1315.566436][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.584260][T28968] netlink: 'syz.6.7031': attribute type 1 has an invalid length. [ 1315.614038][ T5884] usb 6-1: Product: syz [ 1315.618246][ T5884] usb 6-1: Manufacturer: syz [ 1315.639665][ T5884] usb 6-1: SerialNumber: syz [ 1315.787112][ T5884] usb 6-1: config 0 descriptor?? [ 1316.145376][T28959] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1316.311372][ T5884] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.119/input/input72 [ 1316.330317][ T5176] usb 6-1: BOGUS urb xfer, pipe 1 != type 3 [ 1316.869167][T24347] Bluetooth: hci0: command 0x0c1a tx timeout [ 1316.939683][ C1] bcm5974 6-1:0.119: trackpad urb failed: -1 [ 1316.946395][T24347] Bluetooth: hci5: command 0x0405 tx timeout [ 1317.751618][ C1] bcm5974 6-1:0.119: trackpad urb failed: -1 [ 1317.909187][T24624] usb 6-1: USB disconnect, device number 47 [ 1318.875080][T24347] Bluetooth: hci0: command 0x0c1a tx timeout [ 1319.144397][T24347] Bluetooth: hci5: command 0x0405 tx timeout [ 1319.253467][T28763] udevd[28763]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 1319.341756][T28999] ceph: No mds server is up or the cluster is laggy [ 1319.350463][T24352] libceph: connect (1)[c::]:6789 error -101 [ 1319.374688][T24352] libceph: mon0 (1)[c::]:6789 connect error [ 1320.012104][T29018] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 1320.021796][T29018] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 1320.031319][T29018] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 1322.116276][ T30] audit: type=1400 audit(1769126268.352:1426): avc: denied { bind } for pid=29031 comm="syz.3.7045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1322.461864][T25616] libceph: connect (1)[c::]:6789 error -101 [ 1322.467924][T25616] libceph: mon0 (1)[c::]:6789 connect error [ 1322.477588][T29037] ceph: No mds server is up or the cluster is laggy [ 1327.027001][T29087] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7054'. [ 1327.145984][T29089] fuse: Bad value for 'fd' [ 1327.928471][T29095] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 1327.937062][T29095] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 1327.945687][T29095] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 1329.098760][T29106] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 1333.663736][T29133] ptrace attach of "./syz-executor exec"[25162] was attempted by " [ 1334.726843][T29143] ip6_vti0 speed is unknown, defaulting to 1000 [ 1334.866248][ T30] audit: type=1326 audit(1769126281.705:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29140 comm="syz.6.7066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50d79acb9 code=0x7ffc0000 [ 1334.955336][T29143] lo speed is unknown, defaulting to 1000 [ 1335.097585][T29143] lo speed is unknown, defaulting to 1000 [ 1335.187704][ T30] audit: type=1326 audit(1769126281.705:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29140 comm="syz.6.7066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50d79acb9 code=0x7ffc0000 [ 1335.256657][ T30] audit: type=1326 audit(1769126281.705:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29140 comm="syz.6.7066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe50d79acb9 code=0x7ffc0000 [ 1335.290334][ T30] audit: type=1326 audit(1769126281.705:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29140 comm="syz.6.7066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50d79acb9 code=0x7ffc0000 [ 1335.346153][ T30] audit: type=1326 audit(1769126281.716:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29140 comm="syz.6.7066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50d79acb9 code=0x7ffc0000 [ 1335.386369][ T30] audit: type=1326 audit(1769126281.716:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29140 comm="syz.6.7066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe50d79acb9 code=0x7ffc0000 [ 1335.766051][ T30] audit: type=1326 audit(1769126281.716:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29140 comm="syz.6.7066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50d79acb9 code=0x7ffc0000 [ 1336.353760][ T30] audit: type=1326 audit(1769126281.716:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29140 comm="syz.6.7066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50d79acb9 code=0x7ffc0000 [ 1336.464054][ T30] audit: type=1326 audit(1769126281.726:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29140 comm="syz.6.7066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe50d79acb9 code=0x7ffc0000 [ 1336.488930][ T30] audit: type=1326 audit(1769126281.726:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29140 comm="syz.6.7066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50d79acb9 code=0x7ffc0000 [ 1336.543161][T29146] netlink: 6 bytes leftover after parsing attributes in process `syz.5.7067'. [ 1337.120528][T29146] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1337.880235][T29176] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 1340.606722][T28482] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1340.873381][T28482] usb 8-1: Using ep0 maxpacket: 16 [ 1340.992465][T28482] usb 8-1: config 125 has an invalid interface number: 165 but max is 0 [ 1341.273429][T28482] usb 8-1: config 125 has no interface number 0 [ 1341.283283][T28482] usb 8-1: config 125 interface 165 has no altsetting 0 [ 1341.307185][T28482] usb 8-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=d5.16 [ 1341.316751][T28482] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.431505][T29219] block nbd8: shutting down sockets [ 1342.386259][T29238] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7084'. [ 1343.258567][T28482] usb 8-1: string descriptor 0 read error: -71 [ 1343.279367][T28482] gspca_main: spca501-2.14.0 probing 0497:c001 [ 1343.286359][T28482] gspca_spca501: reg write: error -71 [ 1343.291915][T28482] spca501 8-1:125.165: Reg write failed for 0x02,0x07,0x05 [ 1343.300835][T28482] spca501 8-1:125.165: probe with driver spca501 failed with error -22 [ 1343.392444][T28482] usb 8-1: USB disconnect, device number 24 [ 1343.431150][T29260] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7089'. [ 1344.638378][T29268] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7092'. [ 1345.436610][T29279] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7095'. [ 1347.072032][T29295] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7098'. [ 1349.788771][T29341] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7104'. [ 1350.925563][T29349] overlayfs: failed to clone upperpath [ 1351.613068][T29365] netlink: 4384 bytes leftover after parsing attributes in process `syz.6.7110'. [ 1352.310509][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1352.310527][ T30] audit: type=1400 audit(1769126299.961:1453): avc: denied { mount } for pid=29366 comm="syz.6.7111" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1352.574496][T29374] sit1: entered allmulticast mode [ 1354.301657][ T24] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1355.125469][ T24] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1355.162426][ T24] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1355.177117][ T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1355.206247][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.257939][T29392] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1355.335689][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1355.909188][ T30] audit: type=1326 audit(1769126304.066:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29391 comm="syz.3.7115" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe1f7b9acb9 code=0x0 [ 1356.001465][T24406] usb 4-1: USB disconnect, device number 50 [ 1356.603953][T29414] bridge0: port 1(gretap0) entered blocking state [ 1356.670158][T29414] bridge0: port 1(gretap0) entered disabled state [ 1356.704666][T29414] gretap0: entered allmulticast mode [ 1356.753297][T29414] gretap0: entered promiscuous mode [ 1357.041323][T29423] overlayfs: failed to clone upperpath [ 1357.113245][T29423] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7122'. [ 1358.716034][T29436] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1359.564084][T29446] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1359.571351][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1360.518370][T29453] XFS (nbd5): SB validate failed with error -5. [ 1365.244107][T29468] Set syz1 is full, maxelem 65536 reached [ 1370.244475][T29528] netlink: zone id is out of range [ 1370.250013][T29528] netlink: zone id is out of range [ 1370.255676][T29528] netlink: zone id is out of range [ 1370.261413][T29528] netlink: zone id is out of range [ 1370.266626][T29528] netlink: zone id is out of range [ 1370.271839][T29528] netlink: zone id is out of range [ 1370.277031][T29528] netlink: zone id is out of range [ 1370.282311][T29528] netlink: zone id is out of range [ 1370.288023][T29528] netlink: zone id is out of range [ 1370.298380][T29528] netlink: zone id is out of range [ 1370.633394][T29523] batman_adv: batadv0: Adding interface: macvtap1 [ 1370.639861][T29523] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 1370.665350][T29523] batman_adv: batadv0: Interface activated: macvtap1 [ 1371.765183][T29541] netdevsim netdevsim6: Direct firmware load for failed with error -2 [ 1371.843333][ T30] audit: type=1400 audit(1769126320.800:1455): avc: denied { unmount } for pid=26706 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1371.922421][T29541] netdevsim netdevsim6: Falling back to sysfs fallback for: [ 1372.166062][T29566] loop8: detected capacity change from 0 to 7 [ 1373.214584][T29566] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 1373.243744][T29566] loop8: partition table partially beyond EOD, truncated [ 1373.535283][T29566] loop8: p1 size 3651402975 extends beyond EOD, truncated [ 1373.763513][T29566] loop8: p2 start 956478 is beyond EOD, truncated [ 1373.902348][T29562] udevd[29562]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1374.070989][T29584] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7158'. [ 1376.445645][T16804] libceph: connect (1)[c::]:6789 error -101 [ 1376.493222][T29605] netlink: 6716 bytes leftover after parsing attributes in process `syz.3.7162'. [ 1376.544327][T29601] ceph: No mds server is up or the cluster is laggy [ 1376.604487][T16804] libceph: mon0 (1)[c::]:6789 connect error [ 1377.158367][T29614] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 1379.698598][ T30] audit: type=1400 audit(1769126328.852:1456): avc: denied { append } for pid=29623 comm="syz.3.7166" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 1379.802909][T29629] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7167'. [ 1381.477909][T29640] Device name cannot be null; rc = [-22] [ 1381.690096][T29647] netlink: 'syz.6.7170': attribute type 2 has an invalid length. [ 1382.845690][ T30] audit: type=1326 audit(1769126332.295:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29657 comm="syz.8.7175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058a99acb9 code=0x7ffc0000 [ 1385.348576][ T30] audit: type=1326 audit(1769126332.295:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29657 comm="syz.8.7175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058a99acb9 code=0x7ffc0000 [ 1385.779615][ T30] audit: type=1326 audit(1769126332.295:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29657 comm="syz.8.7175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058a99acb9 code=0x7ffc0000 [ 1385.804006][ T30] audit: type=1326 audit(1769126332.306:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29657 comm="syz.8.7175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f058a99acb9 code=0x7ffc0000 [ 1385.907407][ T30] audit: type=1326 audit(1769126332.306:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29657 comm="syz.8.7175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058a99acb9 code=0x7ffc0000 [ 1386.031654][ T30] audit: type=1326 audit(1769126332.306:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29657 comm="syz.8.7175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058a99acb9 code=0x7ffc0000 [ 1386.093192][ T30] audit: type=1326 audit(1769126332.306:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29657 comm="syz.8.7175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058a99acb9 code=0x7ffc0000 [ 1386.174144][T29678] bridge0: port 2(bridge_slave_1) entered disabled state [ 1386.183862][T29678] bridge0: port 1(bridge_slave_0) entered disabled state [ 1386.560176][ T30] audit: type=1326 audit(1769126332.306:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29657 comm="syz.8.7175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f058a95b58e code=0x7ffc0000 [ 1386.587014][ T30] audit: type=1326 audit(1769126332.306:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29657 comm="syz.8.7175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f058a99bfd7 code=0x7ffc0000 [ 1386.628409][ T30] audit: type=1326 audit(1769126332.306:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29657 comm="syz.8.7175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f058a99acb9 code=0x7ffc0000 [ 1386.810303][ T30] audit: type=1326 audit(1769126332.306:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29657 comm="syz.8.7175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f058a99bfd7 code=0x7ffc0000 [ 1388.244815][T24347] Bluetooth: hci0: Malformed LE Event: 0x0b [ 1389.939318][ T5891] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1390.225938][ T5891] usb 9-1: Using ep0 maxpacket: 16 [ 1390.275592][T24347] Bluetooth: hci0: unexpected event for opcode 0x080b [ 1390.285232][T29712] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7189'. [ 1390.374750][ T5891] usb 9-1: config index 0 descriptor too short (expected 65532, got 18) [ 1390.432795][ T5891] usb 9-1: config 0 has an invalid interface number: 0 but max is -1 [ 1390.589570][ T5891] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1390.652132][ T5891] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1391.054319][ T5891] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1391.079934][ T5891] usb 9-1: Product: syz [ 1391.095052][ T5891] usb 9-1: Manufacturer: syz [ 1391.120513][ T5891] usb 9-1: SerialNumber: syz [ 1391.138435][ T5891] r8152-cfgselector 9-1: Unknown version 0x0000 [ 1391.869909][T29731] netlink: 68 bytes leftover after parsing attributes in process `syz.6.7193'. [ 1391.902059][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 1391.902078][ T30] audit: type=1400 audit(1769126341.817:1526): avc: denied { setopt } for pid=29730 comm="syz.6.7193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1391.947681][ T5891] r8152-cfgselector 9-1: config 0 descriptor?? [ 1392.110998][ T5891] r8152-cfgselector 9-1: Unknown version 0x0000 [ 1392.232683][ T5891] r8152-cfgselector 9-1: bad CDC descriptors [ 1392.249801][ T5891] r8152-cfgselector 9-1: USB disconnect, device number 31 [ 1392.348092][T29736] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29736 comm=syz.3.7192 [ 1393.059667][T29745] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7194'. [ 1393.074702][T11317] lo speed is unknown, defaulting to 1000 [ 1393.082961][T11316] lo speed is unknown, defaulting to 1000 [ 1394.140840][T24347] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1394.151545][T24347] Bluetooth: hci0: Injecting HCI hardware error event [ 1394.161870][T24317] Bluetooth: hci0: hardware error 0x00 [ 1394.239992][T11316] IPVS: starting estimator thread 0... [ 1395.008126][T29756] IPVS: using max 40 ests per chain, 96000 per kthread [ 1395.754913][T29766] RDS: rds_bind could not find a transport for ::ffff:172.30.1.7, load rds_tcp or rds_rdma? [ 1396.122100][T24317] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1397.328843][T29784] trusted_key: encrypted_key: insufficient parameters specified [ 1397.802660][T29790] netlink: 'syz.7.7205': attribute type 3 has an invalid length. [ 1397.813009][T29790] netlink: 'syz.7.7205': attribute type 3 has an invalid length. [ 1399.122449][T11317] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1399.423090][T11317] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1399.671070][T11317] usb 8-1: config 0 has no interface number 0 [ 1399.707305][T11317] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1399.716873][T11317] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.799570][T11317] usb 8-1: Product: syz [ 1399.808438][T11317] usb 8-1: Manufacturer: syz [ 1399.813160][T11317] usb 8-1: SerialNumber: syz [ 1399.858303][T11317] usb 8-1: config 0 descriptor?? [ 1400.108122][T11317] usb 8-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1400.132724][T11317] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1400.365848][T29818] ip6_vti0 speed is unknown, defaulting to 1000 [ 1400.622088][T11317] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1400.690469][T29818] lo speed is unknown, defaulting to 1000 [ 1400.856115][T29818] lo speed is unknown, defaulting to 1000 [ 1400.861907][T29816] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 1400.895444][ T30] audit: type=1326 audit(1769126350.572:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29810 comm="syz.5.7210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d279acb9 code=0x7ffc0000 [ 1400.903444][T11317] usb 8-1: media controller created [ 1400.913483][ T30] audit: type=1326 audit(1769126350.572:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29810 comm="syz.5.7210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d279acb9 code=0x7ffc0000 [ 1400.990593][ T30] audit: type=1326 audit(1769126350.572:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29810 comm="syz.5.7210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f89d279acb9 code=0x7ffc0000 [ 1401.098834][T29823] netlink: 'syz.7.7207': attribute type 1 has an invalid length. [ 1401.626162][T29807] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1401.628245][T24317] Bluetooth: hci4: command 0x0406 tx timeout [ 1401.634903][T11317] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1401.650886][T29807] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 1401.737506][T24317] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1402.156171][T29807] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1402.179441][T29807] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1403.734959][T11317] usb 8-1: USB disconnect, device number 25 [ 1404.486852][T25616] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1404.784642][T25616] usb 9-1: config 0 has an invalid interface number: 235 but max is 0 [ 1404.847412][T25616] usb 9-1: config 0 has no interface number 0 [ 1404.854115][T25616] usb 9-1: config 0 interface 235 has no altsetting 0 [ 1404.873613][T25616] usb 9-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=7b.9e [ 1404.905412][T25616] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.922799][T25616] usb 9-1: Product: syz [ 1404.927564][T25616] usb 9-1: Manufacturer: syz [ 1404.932277][T25616] usb 9-1: SerialNumber: syz [ 1404.970660][T25616] usb 9-1: config 0 descriptor?? [ 1405.616401][T29848] netlink: 'syz.8.7216': attribute type 39 has an invalid length. [ 1405.647130][T29873] nvme_fabrics: missing parameter 'transport=%s' [ 1405.653599][T29873] nvme_fabrics: missing parameter 'nqn=%s' [ 1405.673613][T25616] usb 9-1: USB disconnect, device number 32 [ 1406.794658][T29887] net_ratelimit: 12 callbacks suppressed [ 1406.794691][T29887] netlink: ct family unspecified [ 1406.806607][T29887] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1408.982902][ T30] audit: type=1400 audit(1769126359.769:1530): avc: denied { bind } for pid=29898 comm="syz.5.7230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1411.129258][T29906] delete_channel: no stack [ 1413.858775][T29952] nvme_fabrics: missing parameter 'transport=%s' [ 1413.886165][T29952] nvme_fabrics: missing parameter 'nqn=%s' [ 1414.968631][T29962] ip6_vti0 speed is unknown, defaulting to 1000 [ 1415.198382][T29962] lo speed is unknown, defaulting to 1000 [ 1415.507251][T29962] lo speed is unknown, defaulting to 1000 [ 1418.287796][T29983] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7248'. [ 1419.005053][T29998] bridge0: port 3(gretap0) entered blocking state [ 1419.011866][T29998] bridge0: port 3(gretap0) entered disabled state [ 1419.019243][T29998] gretap0: entered allmulticast mode [ 1419.030892][T29998] gretap0: entered promiscuous mode [ 1419.037583][T29998] bridge0: port 3(gretap0) entered blocking state [ 1419.044115][T29998] bridge0: port 3(gretap0) entered forwarding state [ 1419.938840][T30005] netlink: 'syz.6.7254': attribute type 3 has an invalid length. [ 1419.947588][T30005] netlink: 'syz.6.7254': attribute type 3 has an invalid length. [ 1420.660473][T30006] netlink: 'syz.8.7253': attribute type 27 has an invalid length. [ 1420.785722][T25616] IPVS: starting estimator thread 0... [ 1420.917082][T30008] IPVS: using max 73 ests per chain, 175200 per kthread [ 1421.428978][T30026] syz.3.7257 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1422.475843][T30035] binder: BINDER_SET_CONTEXT_MGR already set [ 1422.539933][T30035] binder: 30032:30035 ioctl 4018620d 200000000040 returned -16 [ 1426.578846][T30079] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7272'. [ 1426.799099][T30080] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7271'. [ 1428.085302][T30096] program syz.5.7273 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1431.965419][T30113] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7281'. [ 1431.974594][T30113] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7281'. [ 1433.519879][T30129] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7285'. [ 1433.661208][T13059] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.930527][T13059] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1434.879972][ T30] audit: type=1326 audit(1769126386.885:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30132 comm="syz.8.7288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058a99acb9 code=0x7ffc0000 [ 1435.176389][T30140] ip6_vti0 speed is unknown, defaulting to 1000 [ 1435.177618][ T30] audit: type=1326 audit(1769126386.885:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30132 comm="syz.8.7288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058a99acb9 code=0x7ffc0000 [ 1435.261926][T30140] lo speed is unknown, defaulting to 1000 [ 1435.406181][T30140] lo speed is unknown, defaulting to 1000 [ 1435.475286][T24347] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1435.490821][T24347] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1435.500101][T24347] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1435.508182][T24347] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1435.516065][T24347] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1435.520499][ T30] audit: type=1326 audit(1769126386.896:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30132 comm="syz.8.7288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f058a99acb9 code=0x7ffc0000 [ 1435.554654][T24317] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1435.587021][T24317] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1435.596017][T24317] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1435.672964][T24317] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1435.683749][T24317] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1435.725023][ T30] audit: type=1326 audit(1769126386.896:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30132 comm="syz.8.7288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058a99acb9 code=0x7ffc0000 [ 1435.787595][T30143] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7297'. [ 1436.563933][ T30] audit: type=1326 audit(1769126386.896:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30132 comm="syz.8.7288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058a99acb9 code=0x7ffc0000 [ 1436.624762][ T30] audit: type=1326 audit(1769126386.896:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30132 comm="syz.8.7288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f058a99acb9 code=0x7ffc0000 [ 1436.705505][ T30] audit: type=1326 audit(1769126386.906:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30132 comm="syz.8.7288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058a99acb9 code=0x7ffc0000 [ 1436.892297][T30160] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7290'. [ 1436.958565][ T30] audit: type=1326 audit(1769126386.906:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30132 comm="syz.8.7288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058a99acb9 code=0x7ffc0000 [ 1437.033723][ T30] audit: type=1326 audit(1769126386.906:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30132 comm="syz.8.7288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f058a99acb9 code=0x7ffc0000 [ 1437.135075][ T30] audit: type=1326 audit(1769126386.906:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30132 comm="syz.8.7288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058a99acb9 code=0x7ffc0000 [ 1437.146793][T13059] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1438.060535][T30166] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1438.172673][T30154] vxcan3: entered promiscuous mode [ 1438.569826][T24317] Bluetooth: hci1: command tx timeout [ 1438.931637][T30141] ip6_vti0 speed is unknown, defaulting to 1000 [ 1438.968026][T25616] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1439.049105][T13059] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1439.173268][T25616] usb 6-1: Using ep0 maxpacket: 32 [ 1439.645369][T30183] RDS: rds_bind could not find a transport for ::ffff:172.30.1.9, load rds_tcp or rds_rdma? [ 1440.050576][T30141] lo speed is unknown, defaulting to 1000 [ 1440.073758][T13059] gretap0: left allmulticast mode [ 1440.079952][T13059] gretap0: left promiscuous mode [ 1440.098251][T13059] bridge0: port 3(gretap0) entered disabled state [ 1440.162326][T13059] bridge_slave_1: left allmulticast mode [ 1440.276939][T25616] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1440.290578][T13059] bridge_slave_1: left promiscuous mode [ 1440.297081][T25616] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 1440.311719][T13059] bridge0: port 2(bridge_slave_1) entered disabled state [ 1440.331095][T25616] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1440.338767][T25616] usb 6-1: can't read configurations, error -71 [ 1440.369456][T13059] bridge_slave_0: left allmulticast mode [ 1440.375179][T13059] bridge_slave_0: left promiscuous mode [ 1440.588203][T24317] Bluetooth: hci1: command tx timeout [ 1440.625746][T13059] bridge0: port 1(bridge_slave_0) entered disabled state [ 1441.216166][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1441.216187][ T30] audit: type=1400 audit(1769126393.604:1555): avc: denied { getopt } for pid=30186 comm="syz.5.7296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1441.494684][T30197] netlink: 'syz.6.7299': attribute type 1 has an invalid length. [ 1442.555997][T24317] Bluetooth: hci1: command tx timeout [ 1444.512054][T24317] Bluetooth: hci1: command tx timeout [ 1444.526218][T13059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1444.536579][T13059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1444.547010][T13059] bond0 (unregistering): Released all slaves [ 1445.201784][T13059] IPVS: stopping master sync thread 28365 ... [ 1445.437754][T24352] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1446.029748][T24352] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1446.052586][T24352] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.093269][T24352] usb 9-1: config 0 descriptor?? [ 1446.179320][T30141] lo speed is unknown, defaulting to 1000 [ 1446.387238][T24352] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1447.060664][T30252] netlink: 104 bytes leftover after parsing attributes in process `syz.8.7308'. [ 1447.091604][T24352] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 2 [ 1447.122209][T24352] [drm] Initialized udl on minor 2 [ 1447.156688][T24352] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1447.218365][T24352] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 1447.256933][ T5891] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1447.276672][T24352] usb 9-1: USB disconnect, device number 33 [ 1447.296176][ T5891] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 1449.943890][T30141] chnl_net:caif_netlink_parms(): no params data found [ 1450.071725][T30310] netlink: 'syz.5.7320': attribute type 1 has an invalid length. [ 1451.490551][T13059] hsr_slave_0: left promiscuous mode [ 1451.522807][T11317] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1451.542322][T13059] hsr_slave_1: left promiscuous mode [ 1451.561256][T13059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1451.568732][T13059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1451.685012][T11317] usb 6-1: Using ep0 maxpacket: 32 [ 1451.735090][T13059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1451.800430][T11317] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1451.842514][T13059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1451.895691][T11317] usb 6-1: config 0 has no interface number 0 [ 1452.118636][T11317] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1452.243760][T11317] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.372186][T11317] usb 6-1: Product: syz [ 1452.423464][T11317] usb 6-1: Manufacturer: syz [ 1452.479564][T11317] usb 6-1: SerialNumber: syz [ 1452.554226][T11317] usb 6-1: config 0 descriptor?? [ 1452.581114][T13059] veth1_macvtap: left promiscuous mode [ 1452.598997][T11317] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1452.621652][T13059] veth0_macvtap: left promiscuous mode [ 1452.627342][T13059] veth1_vlan: left promiscuous mode [ 1452.795312][T13059] veth0_vlan: left promiscuous mode [ 1452.845226][T11317] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1452.858715][T11317] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1452.940492][T30350] No such timeout policy "syz1" [ 1453.651980][T30349] ALSA: mixer_oss: invalid OSS volume '' [ 1455.491275][T30366] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7329'. [ 1455.712541][T30367] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7328'. [ 1457.339374][T13059] team0 (unregistering): Port device team_slave_1 removed [ 1457.399675][T13059] team0 (unregistering): Port device team_slave_0 removed [ 1457.965957][ T36] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1457.974546][ T36] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1457.982972][ T36] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1457.992709][ T36] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1457.993651][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1458.109045][T25616] lo speed is unknown, defaulting to 1000 [ 1458.164430][T25616] infiniband syz: ib_query_port failed (-19) [ 1458.296423][T25616] usb 6-1: USB disconnect, device number 50 [ 1459.135522][T25616] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1459.335435][T25616] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1459.347391][T25616] quatech2 6-1:0.51: device disconnected [ 1459.525559][T30390] netlink: 'syz.7.7332': attribute type 1 has an invalid length. [ 1459.657358][T30141] bridge0: port 1(bridge_slave_0) entered blocking state [ 1459.674186][T30141] bridge0: port 1(bridge_slave_0) entered disabled state [ 1459.812023][T30141] bridge_slave_0: entered allmulticast mode [ 1459.929148][T30141] bridge_slave_0: entered promiscuous mode [ 1460.047399][T30141] bridge0: port 2(bridge_slave_1) entered blocking state [ 1460.054847][T30141] bridge0: port 2(bridge_slave_1) entered disabled state [ 1460.067871][T30141] bridge_slave_1: entered allmulticast mode [ 1460.410313][T30141] bridge_slave_1: entered promiscuous mode [ 1460.793419][T30141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1460.827233][T30141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1461.615193][T30399] ip6_vti0 speed is unknown, defaulting to 1000 [ 1461.617601][T30141] team0: Port device team_slave_0 added [ 1461.632378][T30141] team0: Port device team_slave_1 added [ 1461.948829][T30399] lo speed is unknown, defaulting to 1000 [ 1462.105135][T30421] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1462.119485][T30421] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1462.210951][ T30] audit: type=1400 audit(1769126415.587:1556): avc: denied { write } for pid=30412 comm="syz.7.7340" path="socket:[126129]" dev="sockfs" ino=126129 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1462.296942][T30141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1462.304305][T30141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1462.407839][T30141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1462.436570][T30141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1462.467778][T30141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1462.517687][T30141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1462.660326][T30141] hsr_slave_0: entered promiscuous mode [ 1462.666484][T30141] hsr_slave_1: entered promiscuous mode [ 1462.672718][T30141] debugfs: 'hsr0' already exists in 'hsr' [ 1462.678668][T30141] Cannot create hsr debugfs directory [ 1462.709429][T13059] IPVS: stop unused estimator thread 0... [ 1464.079413][T30441] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7341'. [ 1465.344682][ T30] audit: type=1400 audit(1769126418.925:1557): avc: denied { ioctl } for pid=30450 comm="syz.7.7345" path="socket:[125678]" dev="sockfs" ino=125678 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1466.050268][T30471] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1466.170267][T30471] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1466.180408][T30471] overlayfs: failed to look up (tracing) for ino (-66) [ 1467.563658][ T30] audit: type=1400 audit(1769126421.235:1558): avc: denied { read } for pid=30478 comm="syz.7.7350" lport=35885 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1467.951702][T30141] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1468.056376][T30492] ALSA: mixer_oss: invalid OSS volume '' [ 1468.198867][T30141] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1468.424658][T30141] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1468.473748][T30141] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1468.698308][ T30] audit: type=1326 audit(1769126422.473:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30496 comm="syz.8.7347" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f058a99acb9 code=0x0 [ 1469.167640][T30141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1469.299231][T30141] 8021q: adding VLAN 0 to HW filter on device team0 [ 1469.315062][T24894] bridge0: port 1(bridge_slave_0) entered blocking state [ 1469.322231][T24894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1469.708569][T30521] overlay: filesystem on ./file0 not supported as upperdir [ 1470.286480][T13053] bridge0: port 2(bridge_slave_1) entered blocking state [ 1470.293616][T13053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1470.498400][T30528] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7356'. [ 1471.344293][T30533] ipvlan0: entered promiscuous mode [ 1471.349619][T30533] ipvlan0: entered allmulticast mode [ 1471.354889][T30533] veth0_vlan: entered allmulticast mode [ 1471.497215][T30535] random: crng reseeded on system resumption [ 1472.858582][T30141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1473.189000][T30141] veth0_vlan: entered promiscuous mode [ 1473.805269][T30141] veth1_vlan: entered promiscuous mode [ 1474.327397][T30141] veth0_macvtap: entered promiscuous mode [ 1474.365186][T30141] veth1_macvtap: entered promiscuous mode [ 1474.449843][T30141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1474.514585][T30141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1474.692406][ T1081] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1474.705432][ T1081] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1474.732368][ T1081] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1474.761690][ T1081] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1475.011125][T24894] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1475.041596][T24894] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1475.194480][T21360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1475.207282][T21360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1476.795512][T30612] veth2: entered allmulticast mode [ 1478.836001][T29634] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1479.191244][T29634] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1479.307886][T29634] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1479.334888][T29634] usb 8-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1479.356011][T29634] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1479.372214][T29634] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1479.388088][T29634] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1479.564408][T29634] usb 8-1: invalid MIDI out EP 0 [ 1479.632815][T25839] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1479.700490][T30645] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1479.844638][ T30] audit: type=1400 audit(1769126434.000:1560): avc: denied { mounton } for pid=30639 comm="syz.8.7369" path="/855/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1479.975284][T29634] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1479.993274][ T30] audit: type=1400 audit(1769126434.326:1561): avc: denied { setattr } for pid=30623 comm="syz.7.7372" path="/dev/mixer" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 1480.022526][T29634] usb 8-1: USB disconnect, device number 26 [ 1480.073968][T25839] usb 4-1: Using ep0 maxpacket: 32 [ 1480.088668][T25839] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1480.816398][T25839] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 1480.825656][T25839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1480.835901][T25839] usb 4-1: Product: syz [ 1480.840090][T25839] usb 4-1: Manufacturer: syz [ 1480.844207][T30152] udevd[30152]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1480.845988][T25839] usb 4-1: SerialNumber: syz [ 1480.867876][T25839] usb 4-1: config 0 descriptor?? [ 1480.892376][T25839] kvaser_usb 4-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 1481.024275][T30661] openvswitch: netlink: Duplicate key (type 1). [ 1481.319307][T30663] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7374'. [ 1481.560379][T25616] IPVS: starting estimator thread 0... [ 1481.690870][T30666] IPVS: using max 50 ests per chain, 120000 per kthread [ 1481.698383][T30663] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1481.753650][T25839] usb 4-1: USB disconnect, device number 51 [ 1481.995183][T29634] usb 9-1: new full-speed USB device number 34 using dummy_hcd [ 1482.407698][T29634] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1483.000727][T29634] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1483.426174][T29634] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1483.526993][T29634] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1483.582799][T29634] usb 9-1: config 0 descriptor?? [ 1483.686290][T29634] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1484.311949][T29634] dvb-usb: bulk message failed: -22 (3/0) [ 1484.322757][T30700] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1484.329313][T30700] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1484.375034][T30710] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7384'. [ 1484.412496][T30700] vhci_hcd vhci_hcd.0: Device attached [ 1484.492043][T30700] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1484.666089][T29634] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1484.710674][ T5891] usb 44-1: SetAddress Request (6) to port 0 [ 1484.716920][ T5891] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1485.175589][T30700] block device autoloading is deprecated and will be removed. [ 1485.181418][T29634] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1485.590799][T29634] usb 9-1: media controller created [ 1485.605779][T30701] vhci_hcd: connection reset by peer [ 1485.610848][T29634] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1485.714137][ T136] vhci_hcd vhci_hcd.5: stop threads [ 1485.720628][ T136] vhci_hcd vhci_hcd.5: release socket [ 1485.736369][ T136] vhci_hcd vhci_hcd.5: disconnect device [ 1485.918742][T29634] dvb-usb: bulk message failed: -22 (6/0) [ 1485.958761][T29634] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1485.999116][T29634] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input74 [ 1486.083526][T29634] dvb-usb: schedule remote query interval to 150 msecs. [ 1486.132086][T29634] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1486.290888][T25839] dvb-usb: bulk message failed: -22 (1/0) [ 1487.055511][T25839] dvb-usb: error while querying for an remote control event. [ 1487.166136][ T5871] usb 9-1: USB disconnect, device number 34 [ 1487.432122][T30740] xt_NFQUEUE: number of queues (51632) out of range (got 109621) [ 1487.452571][T30740] tmpfs: Too few inodes for current use [ 1487.927173][ T5871] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1488.743090][T30755] netlink: 'syz.7.7394': attribute type 3 has an invalid length. [ 1488.751875][T30755] netlink: 'syz.7.7394': attribute type 3 has an invalid length. [ 1489.441450][T30762] netlink: 4384 bytes leftover after parsing attributes in process `syz.3.7393'. [ 1489.830881][T30767] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7395'. [ 1490.064785][T30746] ALSA: mixer_oss: invalid OSS volume '' [ 1490.744663][ T5891] usb 44-1: device descriptor read/8, error -110 [ 1491.130635][ T30] audit: type=1400 audit(1769126445.968:1562): avc: denied { getopt } for pid=30774 comm="syz.3.7397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1491.408533][ T5891] usb usb44-port1: attempt power cycle [ 1491.953335][ T5891] usb usb44-port1: unable to enumerate USB device [ 1493.422060][T30795] nvme_fabrics: missing parameter 'transport=%s' [ 1493.472022][T30795] nvme_fabrics: missing parameter 'nqn=%s' [ 1494.405112][T30824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7409'. [ 1494.414322][T30824] nbd: socks must be embedded in a SOCK_ITEM attr [ 1494.599360][T30826] 9pnet_fd: Insufficient options for proto=fd [ 1494.651950][T30826] syz.6.7410 (30826): attempted to duplicate a private mapping with mremap. This is not supported. [ 1494.721451][T30825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7409'. [ 1494.744949][T30825] nbd: nbd64 already in use [ 1495.214770][T30824] nvme_fabrics: missing parameter 'transport=%s' [ 1495.885819][T30824] nvme_fabrics: missing parameter 'nqn=%s' [ 1496.171746][T30842] random: crng reseeded on system resumption [ 1496.189415][ T30] audit: type=1400 audit(1769126451.322:1563): avc: denied { append } for pid=30838 comm="syz.7.7414" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1496.444723][T30847] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1497.046844][T30842] netlink: 'syz.7.7414': attribute type 23 has an invalid length. [ 1498.750982][T30868] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1498.759914][T30868] overlayfs: missing 'lowerdir' [ 1499.337190][T30874] xt_NFQUEUE: number of queues (51632) out of range (got 109621) [ 1499.352653][T30874] tmpfs: Too few inodes for current use [ 1499.910180][T30877] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 1500.394527][T30881] input: syz0 as /devices/virtual/input/input75 [ 1501.883868][ T30] audit: type=1400 audit(1769126457.295:1564): avc: denied { connect } for pid=30892 comm="syz.5.7426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1502.326267][T30891] nvme_fabrics: missing parameter 'transport=%s' [ 1502.335385][T30891] nvme_fabrics: missing parameter 'nqn=%s' [ 1503.104890][T30911] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7430'. [ 1504.253807][T30927] netlink: 'syz.6.7433': attribute type 4 has an invalid length. [ 1505.740579][ T30] audit: type=1800 audit(1769126460.928:1565): pid=30933 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.7434" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1509.828676][T30966] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1509.951030][T30966] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1509.961217][T30966] overlayfs: failed to look up (tracing) for ino (-66) [ 1512.889533][T30981] Invalid source name [ 1513.887768][T30990] RDS: rds_bind could not find a transport for ::ffff:172.30.1.6, load rds_tcp or rds_rdma? [ 1514.223264][T30993] netlink: 'syz.8.7452': attribute type 3 has an invalid length. [ 1514.232102][T30993] netlink: 'syz.8.7452': attribute type 3 has an invalid length. [ 1516.356582][ T30] audit: type=1326 audit(1769126471.741:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30999 comm="syz.8.7454" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f058a99acb9 code=0x0 [ 1516.583787][T31008] nvme_fabrics: missing parameter 'transport=%s' [ 1516.703424][T31008] nvme_fabrics: missing parameter 'nqn=%s' [ 1516.795872][T31005] team0 (unregistering): left promiscuous mode [ 1517.309441][T31015] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7455'. [ 1517.325571][T31015] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7455'. [ 1518.559390][T31022] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7457'. [ 1518.957374][T31028] openvswitch: netlink: Unknown key attributes 1 [ 1519.993137][T31028] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1520.003504][T31028] cramfs: wrong magic [ 1523.252209][T31061] netlink: 'syz.5.7467': attribute type 13 has an invalid length. [ 1523.939518][T31061] batman_adv: batadv0: Interface deactivated: macvtap1 [ 1523.953708][ T30] audit: type=1400 audit(1769126480.485:1567): avc: denied { sys_admin } for pid=31056 comm="syz.3.7466" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1525.044184][T31080] hub 2-0:1.0: USB hub found [ 1525.053321][T31080] hub 2-0:1.0: 1 port detected [ 1527.184839][T31101] netlink: 'syz.6.7476': attribute type 1 has an invalid length. [ 1527.276866][T31105] ip6_vti0 speed is unknown, defaulting to 1000 [ 1527.538492][T31105] lo speed is unknown, defaulting to 1000 [ 1528.702681][T31121] overlayfs: failed to clone lowerpath [ 1529.199255][T31128] netlink: 'syz.8.7484': attribute type 3 has an invalid length. [ 1529.207925][T31128] netlink: 'syz.8.7484': attribute type 3 has an invalid length. [ 1530.779445][T31135] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7486'. [ 1530.791299][ T30] audit: type=1400 audit(1769126487.593:1568): avc: denied { getopt } for pid=31129 comm="syz.6.7485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1530.967883][T31143] netlink: 'syz.7.7488': attribute type 1 has an invalid length. [ 1532.456425][ T30] audit: type=1400 audit(1769126489.409:1569): avc: denied { read } for pid=31152 comm="syz.7.7492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1532.700642][T31151] nvme_fabrics: missing parameter 'transport=%s' [ 1532.707509][T31151] nvme_fabrics: missing parameter 'nqn=%s' [ 1534.418663][ T5871] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 1534.627039][ T5871] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 1535.039177][ T5871] usb 4-1: config 8 has no interface number 0 [ 1535.046223][ T5871] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1535.138443][ T5871] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1535.157520][ T5871] usb 4-1: config 8 interface 177 has no altsetting 0 [ 1535.173354][ T5871] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1535.187201][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1535.515948][T31184] netlink: 'syz.5.7497': attribute type 3 has an invalid length. [ 1535.524659][T31184] netlink: 'syz.5.7497': attribute type 3 has an invalid length. [ 1535.798947][T31173] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1536.006333][ T5871] usb 4-1: string descriptor 0 read error: -71 [ 1536.014051][ T5871] ir_toy 4-1:8.177: required endpoints not found [ 1536.202503][ T5871] usb 4-1: USB disconnect, device number 52 [ 1536.464915][T31197] xt_NFQUEUE: number of queues (51632) out of range (got 109621) [ 1537.833613][T31206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7503'. [ 1540.964036][ T30] audit: type=1400 audit(1769126498.343:1570): avc: denied { accept } for pid=31226 comm="syz.7.7509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1541.014047][T31232] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7510'. [ 1541.164242][T31235] nvme_fabrics: missing parameter 'transport=%s' [ 1541.183858][T31235] nvme_fabrics: missing parameter 'nqn=%s' [ 1541.679116][T31240] netlink: 'syz.3.7512': attribute type 2 has an invalid length. [ 1543.873037][T31271] IPVS: set_ctl: invalid protocol: 22 0.0.0.0:20003 [ 1544.157447][T31278] fuse: Unknown parameter 'use00000000000000000000' [ 1544.804526][T31283] sit1: entered promiscuous mode [ 1545.159328][T31290] kAFS: unable to lookup cell '(' [ 1545.275430][T31290] kAFS: unable to lookup cell '(,cL' [ 1546.494299][T31308] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7529'. [ 1546.822452][T31304] nvme_fabrics: missing parameter 'transport=%s' [ 1546.858463][T31304] nvme_fabrics: missing parameter 'nqn=%s' [ 1549.007358][T31331] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7535'. [ 1549.050595][T31328] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7535'. [ 1550.839737][T31352] Invalid source name [ 1550.843862][T31352] UBIFS error (pid: 31352): cannot open "ubifs", error -22 [ 1551.292681][ T30] audit: type=1400 audit(1769126508.182:1571): avc: denied { write } for pid=31356 comm="syz.8.7543" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1552.807380][T31373] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7545'. [ 1552.824731][T31373] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7545'. [ 1555.591373][T31395] nvme_fabrics: missing parameter 'transport=%s' [ 1555.618678][T31395] nvme_fabrics: missing parameter 'nqn=%s' [ 1555.845140][T31406] siw: device registration error -23 [ 1558.810760][ T30] audit: type=1400 audit(1769126515.089:1572): avc: denied { ioctl } for pid=31411 comm="syz.8.7554" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1559.801433][T31431] netlink: 52 bytes leftover after parsing attributes in process `syz.6.7557'. [ 1560.146043][T31438] netlink: 'syz.5.7559': attribute type 21 has an invalid length. [ 1560.154046][T31438] IPv6: NLM_F_CREATE should be specified when creating new route [ 1563.379657][T31467] netlink: 'syz.7.7567': attribute type 4 has an invalid length. [ 1563.419871][T31467] netlink: 'syz.7.7567': attribute type 4 has an invalid length. [ 1566.793189][T31497] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7573'. [ 1566.802727][T31497] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7573'. [ 1566.814569][T31497] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7573'. [ 1567.415415][T24347] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1567.606120][T31501] RDS: rds_bind could not find a transport for ::ffff:172.30.1.7, load rds_tcp or rds_rdma? [ 1568.553903][T24347] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1568.563424][T24347] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1568.574843][T24347] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1568.583840][T24347] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1568.681561][T31502] ip6_vti0 speed is unknown, defaulting to 1000 [ 1568.857864][T31511] netlink: 'syz.6.7577': attribute type 3 has an invalid length. [ 1568.866133][T31511] netlink: 'syz.6.7577': attribute type 3 has an invalid length. [ 1570.451811][ T30] audit: type=1326 audit(1769126528.023:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31515 comm="syz.8.7571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058a99acb9 code=0x7ffc0000 [ 1570.487669][T31502] lo speed is unknown, defaulting to 1000 [ 1570.555137][T24347] Bluetooth: hci5: command tx timeout [ 1570.627378][ T30] audit: type=1326 audit(1769126528.023:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31515 comm="syz.8.7571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058a99acb9 code=0x7ffc0000 [ 1571.230051][T31534] netlink: 'syz.6.7581': attribute type 8 has an invalid length. [ 1571.239926][T31534] bridge0: port 2(bridge_slave_1) entered disabled state [ 1571.247279][T31534] bridge0: port 1(bridge_slave_0) entered disabled state [ 1571.367125][ T30] audit: type=1326 audit(1769126528.023:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31515 comm="syz.8.7571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058a99acb9 code=0x7ffc0000 [ 1571.690588][ T30] audit: type=1326 audit(1769126528.023:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31515 comm="syz.8.7571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058a99acb9 code=0x7ffc0000 [ 1571.791104][ T30] audit: type=1326 audit(1769126528.023:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31515 comm="syz.8.7571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f058a99acb9 code=0x7ffc0000 [ 1571.815537][ T30] audit: type=1326 audit(1769126528.023:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31515 comm="syz.8.7571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058a99acb9 code=0x7ffc0000 [ 1571.886510][ T30] audit: type=1326 audit(1769126528.023:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31515 comm="syz.8.7571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058a99acb9 code=0x7ffc0000 [ 1571.941243][ T30] audit: type=1326 audit(1769126528.023:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31515 comm="syz.8.7571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058a99acb9 code=0x7ffc0000 [ 1573.485898][ T30] audit: type=1326 audit(1769126528.023:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31515 comm="syz.8.7571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058a99acb9 code=0x7ffc0000 [ 1573.495836][T24347] Bluetooth: hci5: command tx timeout [ 1573.569842][ T30] audit: type=1326 audit(1769126528.023:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31515 comm="syz.8.7571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f058a95b58e code=0x7ffc0000 [ 1573.963805][T31543] siw: device registration error -23 [ 1574.221145][ T1151] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1574.298322][T11317] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1574.778323][T31568] fuse: Bad value for 'fd' [ 1575.189512][T11317] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1575.353276][T11317] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1575.384438][T11317] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1575.408480][T11317] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1575.442775][T11317] usb 6-1: config 0 descriptor?? [ 1575.448587][T24347] Bluetooth: hci5: command tx timeout [ 1575.481291][ T1151] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1575.882932][T31556] 9pnet_fd: Insufficient options for proto=fd [ 1575.893927][T11317] cp2112 0003:10C4:EA90.0035: unknown main item tag 0x0 [ 1576.030917][T11317] cp2112 0003:10C4:EA90.0035: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 1576.114154][T31556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1576.131348][T31556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1576.150402][T11317] cp2112 0003:10C4:EA90.0035: Part Number: 0x82 Device Version: 0xFE [ 1576.271580][ T1151] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1576.375807][T11317] cp2112 0003:10C4:EA90.0035: error requesting SMBus config [ 1576.414813][T11317] cp2112 0003:10C4:EA90.0035: probe with driver cp2112 failed with error -32 [ 1576.429205][T31502] chnl_net:caif_netlink_parms(): no params data found [ 1577.062100][ T1151] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1577.482202][T24347] Bluetooth: hci5: command tx timeout [ 1577.524794][T31599] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7592'. [ 1578.114109][T31599] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7592'. [ 1578.556628][T24406] usb 6-1: USB disconnect, device number 51 [ 1578.683876][T31502] bridge0: port 1(bridge_slave_0) entered blocking state [ 1578.698631][T31502] bridge0: port 1(bridge_slave_0) entered disabled state [ 1578.735204][T31502] bridge_slave_0: entered allmulticast mode [ 1579.986871][T31502] bridge_slave_0: entered promiscuous mode [ 1580.082846][T31502] bridge0: port 2(bridge_slave_1) entered blocking state [ 1580.105295][T31615] netlink: 'syz.7.7597': attribute type 1 has an invalid length. [ 1580.163904][T31502] bridge0: port 2(bridge_slave_1) entered disabled state [ 1580.194812][T31502] bridge_slave_1: entered allmulticast mode [ 1580.202278][T31502] bridge_slave_1: entered promiscuous mode [ 1580.307831][T31502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1580.321263][T31502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1581.070663][T31502] team0: Port device team_slave_0 added [ 1581.147378][T31502] team0: Port device team_slave_1 added [ 1581.317423][T31502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1581.399437][T31502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1581.487129][T31502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1581.583219][T31502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1582.153477][T31502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1582.182269][T31502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1582.323818][ T1151] bridge_slave_1: left allmulticast mode [ 1582.342637][ T1151] bridge_slave_1: left promiscuous mode [ 1582.432177][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state [ 1582.464172][ T1151] bridge_slave_0: left allmulticast mode [ 1582.477266][ T1151] bridge_slave_0: left promiscuous mode [ 1582.491052][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state [ 1585.352393][T31664] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nullb0": -EINTR [ 1585.506566][ T1151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1585.535051][ T1151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1585.551524][ T1151] bond0 (unregistering): Released all slaves [ 1585.615319][T31673] netlink: 'syz.5.7612': attribute type 3 has an invalid length. [ 1585.623249][T31673] netlink: 'syz.5.7612': attribute type 3 has an invalid length. [ 1585.631674][T31672] 8021q: VLANs not supported on sit0 [ 1585.699485][T31671] ip6_vti0 speed is unknown, defaulting to 1000 [ 1585.912885][T31671] lo speed is unknown, defaulting to 1000 [ 1585.920595][T31502] hsr_slave_0: entered promiscuous mode [ 1585.927111][T31502] hsr_slave_1: entered promiscuous mode [ 1585.933458][T31502] debugfs: 'hsr0' already exists in 'hsr' [ 1585.957681][T31502] Cannot create hsr debugfs directory [ 1587.521634][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 1587.521654][ T30] audit: type=1800 audit(1769126546.163:1640): pid=31698 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.7616" name="bus" dev="ramfs" ino=131039 res=0 errno=0 [ 1588.021324][ T5924] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1588.044406][T31712] netlink: 'syz.5.7619': attribute type 1 has an invalid length. [ 1588.212383][ T5924] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1588.357434][ T5924] usb 9-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1588.382483][ T5924] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1589.620011][ T5924] usb 9-1: config 0 descriptor?? [ 1589.906906][T31730] netlink: 'syz.5.7621': attribute type 3 has an invalid length. [ 1589.915003][T31730] netlink: 'syz.5.7621': attribute type 3 has an invalid length. [ 1590.837918][ T5924] usbhid 9-1:0.0: can't add hid device: -71 [ 1590.847954][ T5924] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1590.941297][ T5924] usb 9-1: USB disconnect, device number 35 [ 1590.965666][ T1151] hsr_slave_0: left promiscuous mode [ 1590.972493][ T1151] hsr_slave_1: left promiscuous mode [ 1591.096036][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1591.295135][T31752] overlay: filesystem on ./file0 not supported as upperdir [ 1591.913737][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1592.068023][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1592.091064][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1592.150397][ T30] audit: type=1400 audit(1769126551.077:1641): avc: denied { setopt } for pid=31755 comm="syz.7.7628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1592.220397][T31759] kAFS: unable to lookup cell 'էKyy [ 1592.220397][T31759] [ 1592.220397][T31759] =6%*;eܲ5;Z*d{iElZSjUF/k!btF\_vfVnDPPB1%A)X\YT"8ώdJ_.5d#ۜhGp6"5ͺ*,ImI-(WA?WZ)n[qG jnڇ%(J-%ؘccʵ{|6ZA5k@a+oST;]5 !G3{K,' [ 1593.015222][ T1151] veth1_macvtap: left promiscuous mode [ 1594.009576][ T1151] veth0_macvtap: left promiscuous mode [ 1594.016896][ T1151] veth1_vlan: left promiscuous mode [ 1594.022272][ T1151] veth0_vlan: left promiscuous mode [ 1594.132684][T31771] netlink: 60 bytes leftover after parsing attributes in process `syz.8.7629'. [ 1594.265292][T31771] unsupported nlmsg_type 40 [ 1596.754964][T31789] netlink: 60 bytes leftover after parsing attributes in process `syz.7.7636'. [ 1597.738498][ T1151] team0 (unregistering): Port device team_slave_1 removed [ 1598.239104][ T1151] team0 (unregistering): Port device team_slave_0 removed [ 1601.443567][T31823] overlayfs: failed to clone upperpath [ 1601.471780][T31823] overlayfs: failed to resolve './file2': -2 [ 1606.081809][T31502] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1606.172880][T31502] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1606.658312][T31863] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7651'. [ 1606.688147][T31502] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1606.748965][T31502] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1607.458123][ T1151] IPVS: stop unused estimator thread 0... [ 1608.030814][T31502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1608.423705][T31502] 8021q: adding VLAN 0 to HW filter on device team0 [ 1608.447280][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 1608.454423][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1608.474884][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 1608.482042][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1609.977096][T31905] Set syz1 is full, maxelem 65536 reached [ 1610.143072][T31502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1610.374588][T31920] openvswitch: netlink: Missing key (keys=2020040, expected=2000) [ 1610.386284][T31920] sctp: [Deprecated]: syz.8.7657 (pid 31920) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1610.386284][T31920] Use struct sctp_sack_info instead [ 1611.495893][ T5884] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1611.686194][ T5884] usb 9-1: device descriptor read/64, error -71 [ 1611.893311][T31502] veth0_vlan: entered promiscuous mode [ 1611.915914][ T5884] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 1611.973143][T31502] veth1_vlan: entered promiscuous mode [ 1612.051076][T31502] veth0_macvtap: entered promiscuous mode [ 1612.077221][ T5884] usb 9-1: device descriptor read/64, error -71 [ 1612.606276][T31502] veth1_macvtap: entered promiscuous mode [ 1612.714287][ T5884] usb usb9-port1: attempt power cycle [ 1612.732780][T31502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1612.786004][T31502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1613.039330][ T5884] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 1613.230388][ T1333] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1613.298065][T31959] RDS: rds_bind could not find a transport for ::ffff:172.30.1.8, load rds_tcp or rds_rdma? [ 1613.623244][ T5884] usb 9-1: device not accepting address 38, error -71 [ 1613.642181][ T1333] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1613.773078][ T1333] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1613.797297][ T1333] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1613.887400][T31963] siw: device registration error -23 [ 1615.315130][T31973] Set syz1 is full, maxelem 65536 reached [ 1615.373699][T25340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1615.381630][T25340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1615.426296][T25340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1615.506265][T25340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1616.221119][T31984] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 1616.243265][ T30] audit: type=1400 audit(1769126576.366:1642): avc: denied { create } for pid=31976 comm="syz.7.7667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1616.272652][T31984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1616.647175][T31994] netlink: 'syz.5.7670': attribute type 1 has an invalid length. [ 1617.930075][T32008] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7672'. [ 1618.249372][T32015] fuse: Unknown parameter 'use00000000000000000000' [ 1618.265653][T31997] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1618.825104][T32013] nvme_fabrics: missing parameter 'transport=%s' [ 1618.844001][T31997] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 1618.853521][T32013] nvme_fabrics: missing parameter 'nqn=%s' [ 1618.870960][T32010] netlink: 'syz.8.7671': attribute type 4 has an invalid length. [ 1618.898374][T32008] nbd: socks must be embedded in a SOCK_ITEM attr [ 1618.940061][T32012] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7672'. [ 1619.068797][T24406] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1619.116684][T32012] nbd: device at index 64 is going down [ 1619.297351][T24406] usb 6-1: Using ep0 maxpacket: 16 [ 1619.313415][T24406] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1619.362218][T31315] udevd[31315]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1619.403928][T24406] usb 6-1: New USB device found, idVendor=0738, idProduct=1705, bcdDevice= 0.00 [ 1619.540988][T24406] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1619.639306][T32039] bond0: entered promiscuous mode [ 1619.644500][T32039] bond_slave_0: entered promiscuous mode [ 1619.651564][T32039] bond_slave_1: entered promiscuous mode [ 1619.674857][T32039] batadv0: entered promiscuous mode [ 1619.686374][T32039] debugfs: 'hsr1' already exists in 'hsr' [ 1619.692425][T32039] Cannot create hsr debugfs directory [ 1619.700727][T32039] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1619.940669][T24406] usb 6-1: config 0 descriptor?? [ 1619.964714][T24406] usb 6-1: can't set config #0, error -71 [ 1619.990992][T24406] usb 6-1: USB disconnect, device number 52 [ 1620.389728][T32052] siw: device registration error -23 [ 1620.400246][T32052] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1621.153505][T32062] netlink: 'syz.5.7678': attribute type 8 has an invalid length. [ 1621.162200][T32062] bridge0: left promiscuous mode [ 1621.167315][T32062] bridge0: left allmulticast mode [ 1622.499261][T32078] netlink: 'syz.5.7680': attribute type 3 has an invalid length. [ 1622.507347][T32078] netlink: 'syz.5.7680': attribute type 3 has an invalid length. [ 1623.874693][T32102] ip6_vti0 speed is unknown, defaulting to 1000 [ 1624.256928][T32102] lo speed is unknown, defaulting to 1000 [ 1625.354365][T32109] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1625.363962][T32109] block device autoloading is deprecated and will be removed. [ 1625.729191][T32107] lo: entered allmulticast mode [ 1625.734835][T32107] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1627.004771][T32142] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 1628.234959][T32158] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7693'. [ 1628.251329][T32158] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7693'. [ 1629.337580][ T5884] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1630.391217][ T5884] usb 8-1: config 0 has an invalid interface number: 69 but max is 0 [ 1630.423364][ T5884] usb 8-1: config 0 has no interface number 0 [ 1630.453073][ T5884] usb 8-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1630.500774][ T5884] usb 8-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1630.559049][ T5884] usb 8-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1630.748023][T32191] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7699'. [ 1631.177516][T32196] veth1_macvtap: left promiscuous mode [ 1631.418940][ T5884] usb 8-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1631.464928][ T5884] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1631.496266][ T5884] usb 8-1: Product: syz [ 1631.529767][ T5884] usb 8-1: config 0 descriptor?? [ 1631.557071][ T5884] usb 8-1: can't set config #0, error -71 [ 1631.614239][ T5884] usb 8-1: USB disconnect, device number 27 [ 1631.693392][T32203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1632.634193][T32213] xt_l2tp: v2 doesn't support IP mode [ 1632.948723][T32203] 8021q: adding VLAN 0 to HW filter on device team0 [ 1633.119545][T32203] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1633.656374][T32222] SET target dimension over the limit! [ 1633.894042][T24406] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1634.530873][T32238] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1634.542286][T32238] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1634.624392][T25074] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1634.950476][T24406] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1635.236462][T32254] netlink: 1272 bytes leftover after parsing attributes in process `syz.8.7709'. [ 1635.407156][T32259] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7710'. [ 1635.580353][ T4220] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1635.761631][ T4220] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1635.813951][T32262] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7712'. [ 1636.072869][ T5884] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1636.103890][T32267] lo: left allmulticast mode [ 1636.133613][T32267] bridge0: port 2(bridge_slave_1) entered blocking state [ 1636.140781][T32267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1636.148238][T32267] bridge0: port 1(bridge_slave_0) entered blocking state [ 1636.155349][T32267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1636.469001][T32267] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1636.545654][T32275] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7715'. [ 1637.477528][ T5891] libceph: connect (1)[c::]:6789 error -101 [ 1637.501787][ T5891] libceph: mon0 (1)[c::]:6789 connect error [ 1637.596885][T32286] ceph: No mds server is up or the cluster is laggy [ 1637.850068][ T5884] libceph: connect (1)[c::]:6789 error -101 [ 1637.918138][ T5884] libceph: mon0 (1)[c::]:6789 connect error [ 1639.606160][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1640.564542][T32330] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7726'. [ 1640.870469][T32329] netlink: 31 bytes leftover after parsing attributes in process `syz.8.7725'. [ 1642.114680][T32343] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7728'. [ 1642.187693][T32344] netlink: 'syz.7.7727': attribute type 8 has an invalid length. [ 1642.196662][T32344] bridge0: port 2(bridge_slave_1) entered disabled state [ 1642.203899][T32344] bridge0: port 1(bridge_slave_0) entered disabled state [ 1643.702789][T32350] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1644.980931][T32358] netlink: 'syz.7.7732': attribute type 1 has an invalid length. [ 1645.407150][T32375] vivid-007: disconnect [ 1646.023228][T32387] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7736'. [ 1646.077636][T32365] vivid-007: reconnect [ 1647.226310][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1647.590313][ T981] libceph: connect (1)[c::]:6789 error -13 [ 1647.596276][ T981] libceph: mon0 (1)[c::]:6789 connect error [ 1647.645648][T32406] ceph: No mds server is up or the cluster is laggy [ 1647.805982][T32406] ip6tnl2: entered promiscuous mode [ 1648.745550][T32424] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7740'. [ 1654.550752][T32516] nvme_fabrics: unknown parameter or missing value ' ' in ctrl creation request [ 1655.210435][T32526] xt_NFQUEUE: number of queues (63489) out of range (got 96768) [ 1655.971100][T32535] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7758'. [ 1657.389566][T32544] team0: Port device team_slave_0 removed [ 1657.455226][T32565] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7764'. [ 1660.079259][T32599] tipc: Started in network mode [ 1660.084352][T32599] tipc: Node identity ac14140f, cluster identity 4711 [ 1660.104818][T32599] tipc: New replicast peer: 255.255.255.255 [ 1660.112200][T32599] tipc: Enabled bearer , priority 10 [ 1661.058223][T29634] tipc: Node number set to 2886997007 [ 1661.253088][T32613] No such timeout policy "syz1" [ 1661.265621][T32613] No control pipe specified [ 1661.275151][T32613] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7774'. [ 1661.756823][T32615] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7776'. [ 1662.457730][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1663.248609][T32625] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7778'. [ 1663.456179][T32630] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7779'. [ 1665.073482][T32651] fuse: Bad value for 'fd' [ 1665.724684][T32656] ip6t_srh: unknown srh invflags 7F00 [ 1665.746331][T32656] xt_cgroup: path and classid specified [ 1667.192657][T32663] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7788'. [ 1667.464581][T32667] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input76 [ 1668.302426][ T30] audit: type=1400 audit(1769126630.662:1643): avc: denied { read } for pid=32666 comm="syz.9.7787" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1668.449447][T32684] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7791'. [ 1668.710599][ T30] audit: type=1400 audit(1769126630.662:1644): avc: denied { open } for pid=32666 comm="syz.9.7787" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1668.852086][ T30] audit: type=1400 audit(1769126630.662:1645): avc: denied { ioctl } for pid=32666 comm="syz.9.7787" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1669.078964][T32685] syz.5.7789 (32685): drop_caches: 2 [ 1669.516655][T32702] ip6_vti0 speed is unknown, defaulting to 1000 [ 1669.871385][T32702] lo speed is unknown, defaulting to 1000 [ 1670.081309][ T30] audit: type=1400 audit(1769126632.195:1646): avc: denied { accept } for pid=32697 comm="syz.7.7793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1672.684682][T32723] lo: entered allmulticast mode [ 1672.690543][T32723] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1673.704735][T32737] ip6_vti0 speed is unknown, defaulting to 1000 [ 1673.899623][T32737] lo speed is unknown, defaulting to 1000 [ 1675.055252][T32746] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 1676.435871][T32761] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.7804'. [ 1677.603193][ T30] audit: type=1400 audit(1769126640.772:1647): avc: denied { getopt } for pid=324 comm="syz.6.7809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1678.597404][ T343] xt_l2tp: v2 doesn't support IP mode [ 1679.920915][ T361] netlink: 'syz.7.7815': attribute type 3 has an invalid length. [ 1679.935256][ T361] netlink: 'syz.7.7815': attribute type 3 has an invalid length. [ 1681.294943][ T377] netlink: 'syz.6.7820': attribute type 3 has an invalid length. [ 1681.302849][ T377] netlink: 'syz.6.7820': attribute type 3 has an invalid length. [ 1682.366915][ T403] bridge_slave_1: invalid flags given to default FDB implementation [ 1684.233494][ T412] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7826'. [ 1685.449643][ T30] audit: type=1400 audit(1769126648.509:1648): avc: denied { search } for pid=414 comm="syz.7.7827" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1685.480157][ T30] audit: type=1400 audit(1769126648.509:1649): avc: denied { search } for pid=414 comm="syz.7.7827" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1685.828538][ T421] overlayfs: failed to resolve './file0': -2 [ 1686.015951][ T429] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1686.249310][ T427] netlink: 'syz.8.7831': attribute type 3 has an invalid length. [ 1686.257271][ T427] netlink: 'syz.8.7831': attribute type 3 has an invalid length. [ 1686.949037][ T435] Process accounting resumed [ 1688.253617][ T455] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1688.963978][ T458] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7828'. [ 1689.800265][ T30] audit: type=1400 audit(1769126653.023:1650): avc: denied { setopt } for pid=460 comm="syz.5.7839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1690.035422][ T5891] usb 8-1: new full-speed USB device number 28 using dummy_hcd [ 1690.071103][ T470] 8021q: VLANs not supported on sit0 [ 1690.217990][ T5891] usb 8-1: config 0 has an invalid interface number: 2 but max is 1 [ 1690.228363][ T5891] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1690.237715][ T475] 8021q: VLANs not supported on lo [ 1690.244418][ T5891] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1690.278617][ T5891] usb 8-1: config 0 has no interface number 0 [ 1690.365581][ T5891] usb 8-1: too many endpoints for config 0 interface 2 altsetting 164: 188, using maximum allowed: 30 [ 1690.377878][ T5891] usb 8-1: config 0 interface 2 altsetting 164 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1690.396237][ T5891] usb 8-1: config 0 interface 2 has no altsetting 0 [ 1690.416125][ T5891] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1690.434528][ T5891] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1690.540154][ T5891] usb 8-1: config 0 descriptor?? [ 1691.648381][ T5891] usb 8-1: can't set config #0, error -71 [ 1691.675420][ T5891] usb 8-1: USB disconnect, device number 28 [ 1692.149047][ T485] netlink: 'syz.9.7844': attribute type 3 has an invalid length. [ 1692.160367][ T485] netlink: 'syz.9.7844': attribute type 3 has an invalid length. [ 1692.949574][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1694.039625][ T510] bond0: entered promiscuous mode [ 1694.044765][ T510] bond_slave_0: entered promiscuous mode [ 1694.051908][ T510] bond_slave_1: entered promiscuous mode [ 1694.073035][ T510] batadv0: entered promiscuous mode [ 1694.084225][ T510] debugfs: 'hsr1' already exists in 'hsr' [ 1694.090071][ T510] Cannot create hsr debugfs directory [ 1694.098324][ T510] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1695.731887][ T519] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 1695.831778][ T526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1696.505078][ T30] audit: type=1400 audit(1769126660.634:1651): avc: denied { connect } for pid=530 comm="syz.7.7854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1697.272084][ T544] tipc: Enabling of bearer rejected, already enabled [ 1698.368239][ T553] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7860'. [ 1698.420164][ T556] overlayfs: missing 'lowerdir' [ 1698.661268][ T30] audit: type=1400 audit(1769126662.891:1652): avc: denied { append } for pid=554 comm="syz.8.7859" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1698.790694][ T565] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7862'. [ 1698.799796][ T565] netlink: 108 bytes leftover after parsing attributes in process `syz.6.7862'. [ 1698.809939][ T565] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7862'. [ 1698.820034][ T565] netlink: 108 bytes leftover after parsing attributes in process `syz.6.7862'. [ 1698.829143][ T565] netlink: 84 bytes leftover after parsing attributes in process `syz.6.7862'. [ 1700.639052][ T589] netlink: 31 bytes leftover after parsing attributes in process `syz.5.7866'. [ 1703.030911][ T30] audit: type=1400 audit(1769126667.479:1653): avc: denied { setattr } for pid=602 comm="syz.8.7870" name="SCTPv6" dev="sockfs" ino=136142 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1703.303083][ T603] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1704.497774][ T620] SQUASHFS error: Failed to read block 0x0: -5 [ 1704.566691][ T622] netlink: 'syz.5.7872': attribute type 3 has an invalid length. [ 1704.574864][ T622] netlink: 'syz.5.7872': attribute type 3 has an invalid length. [ 1704.704533][ T624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1704.829377][ T625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1704.912304][ T624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1705.399127][ T634] qrtr: Invalid version 0 [ 1708.898621][T24317] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1708.911494][T24317] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1708.919941][T24317] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1708.929566][ T652] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7881'. [ 1708.942276][T24317] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1708.950732][T24317] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1709.147539][ T647] ip6_vti0 speed is unknown, defaulting to 1000 [ 1710.459936][ T647] lo speed is unknown, defaulting to 1000 [ 1711.232274][T24317] Bluetooth: hci1: command tx timeout [ 1711.680644][ T673] gre2: entered promiscuous mode [ 1711.949021][ T680] overlayfs: failed to clone lowerpath [ 1713.213841][T24317] Bluetooth: hci1: command tx timeout [ 1713.365274][ T695] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7888'. [ 1713.739482][ T647] chnl_net:caif_netlink_parms(): no params data found [ 1713.996535][ T647] bridge0: port 1(bridge_slave_0) entered blocking state [ 1714.036347][T32689] ================================================================== [ 1714.044455][T32689] BUG: KASAN: use-after-free in __mutex_lock+0x1861/0x1b90 [ 1714.051671][T32689] Read of size 8 at addr ffff888065d200a8 by task khidpd_10000008/32689 [ 1714.059340][ T647] bridge0: port 1(bridge_slave_0) entered disabled state [ 1714.059994][T32689] [ 1714.060007][T32689] CPU: 0 UID: 0 PID: 32689 Comm: khidpd_10000008 Tainted: G L syzkaller #0 PREEMPT(full) [ 1714.060029][T32689] Tainted: [L]=SOFTLOCKUP [ 1714.060035][T32689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1714.060045][T32689] Call Trace: [ 1714.060050][T32689] [ 1714.060057][T32689] dump_stack_lvl+0x100/0x190 [ 1714.060082][T32689] print_report+0x156/0x4c9 [ 1714.060103][T32689] ? __virt_addr_valid+0x81/0x620 [ 1714.060119][T32689] ? __phys_addr+0xe8/0x180 [ 1714.060134][T32689] ? __mutex_lock+0x1861/0x1b90 [ 1714.060151][T32689] kasan_report+0xdf/0x1a0 [ 1714.060172][T32689] ? __mutex_lock+0x1861/0x1b90 [ 1714.060190][T32689] __mutex_lock+0x1861/0x1b90 [ 1714.060207][T32689] ? l2cap_unregister_user+0x71/0x240 [ 1714.060229][T32689] ? __lock_acquire+0x4a5/0x2630 [ 1714.060246][T32689] ? __pfx___mutex_lock+0x10/0x10 [ 1714.060265][T32689] ? find_held_lock+0x2b/0x80 [ 1714.060284][T32689] ? __wake_up+0x3f/0x60 [ 1714.060305][T32689] ? __wake_up+0x3f/0x60 [ 1714.060328][T32689] ? l2cap_unregister_user+0x71/0x240 [ 1714.060348][T32689] l2cap_unregister_user+0x71/0x240 [ 1714.060370][T32689] hidp_session_thread+0x459/0x680 [ 1714.060387][T32689] ? __pfx_hidp_session_thread+0x10/0x10 [ 1714.060404][T32689] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 1714.060419][T32689] ? __kthread_parkme+0xbb/0x230 [ 1714.060442][T32689] ? rcu_is_watching+0x12/0xc0 [ 1714.060461][T32689] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 1714.060478][T32689] ? __kthread_parkme+0x18c/0x230 [ 1714.060501][T32689] ? __pfx_hidp_session_thread+0x10/0x10 [ 1714.060516][T32689] kthread+0x3b3/0x730 [ 1714.060532][T32689] ? __pfx_kthread+0x10/0x10 [ 1714.060546][T32689] ? ret_from_fork+0x79/0xaf0 [ 1714.060563][T32689] ? ret_from_fork+0x79/0xaf0 [ 1714.060580][T32689] ? rcu_is_watching+0x12/0xc0 [ 1714.060599][T32689] ? __pfx_kthread+0x10/0x10 [ 1714.060614][T32689] ret_from_fork+0x754/0xaf0 [ 1714.060632][T32689] ? __pfx_ret_from_fork+0x10/0x10 [ 1714.060649][T32689] ? __switch_to+0x7b9/0x10c0 [ 1714.060670][T32689] ? __pfx_kthread+0x10/0x10 [ 1714.060685][T32689] ret_from_fork_asm+0x1a/0x30 [ 1714.060704][T32689] [ 1714.060710][T32689] [ 1714.067234][ T647] bridge_slave_0: entered allmulticast mode [ 1714.069306][T32689] The buggy address belongs to the physical page: [ 1714.069314][T32689] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888065d230c0 pfn:0x65d20 [ 1714.069330][T32689] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1714.069351][T32689] raw: 00fff00000000000 ffffea0000d26e08 ffff8880b8540f80 0000000000000000 [ 1714.069366][T32689] raw: ffff888065d230c0 0000000000000000 00000000ffffffff 0000000000000000 [ 1714.069375][T32689] page dumped because: kasan: bad access detected [ 1714.069384][T32689] page_owner tracks the page as freed [ 1714.069389][T32689] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 31502, tgid 31502 (syz-executor), ts 1567394831572, free_ts 1714034065097 [ 1714.352942][T32689] post_alloc_hook+0x1e1/0x250 [ 1714.357695][T32689] get_page_from_freelist+0xe3d/0x2e10 [ 1714.363136][T32689] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 1714.369016][T32689] alloc_pages_mpol+0x1fb/0x550 [ 1714.373852][T32689] new_slab+0x2c4/0x440 [ 1714.377985][T32689] ___slab_alloc+0xda3/0x1ca0 [ 1714.382636][T32689] __slab_alloc.isra.0+0x63/0x110 [ 1714.387636][T32689] kmem_cache_alloc_node_noprof+0x51e/0x880 [ 1714.393510][T32689] kmalloc_reserve+0x18b/0x2c0 [ 1714.398260][T32689] __alloc_skb+0x186/0x410 [ 1714.402657][T32689] __netdev_alloc_skb+0x7a/0x8f0 [ 1714.407577][T32689] __ieee80211_beacon_get+0xba1/0x1ee0 [ 1714.413020][T32689] ieee80211_beacon_get_tim+0xa6/0x280 [ 1714.418459][T32689] mac80211_hwsim_beacon_tx+0x4d6/0xa00 [ 1714.423989][T32689] __iterate_interfaces+0x2e6/0x650 [ 1714.429170][T32689] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 1714.436195][T32689] page last free pid 31502 tgid 31502 stack trace: [ 1714.442671][T32689] __free_frozen_pages+0x822/0x1130 [ 1714.447858][T32689] hci_release_dev+0x4ef/0x630 [ 1714.452601][T32689] bt_host_release+0x6a/0xb0 [ 1714.457172][T32689] device_release+0xa4/0x240 [ 1714.461747][T32689] kobject_put+0x1f7/0x640 [ 1714.466146][T32689] put_device+0x1f/0x30 [ 1714.470283][T32689] vhci_release+0x185/0x230 [ 1714.474767][T32689] __fput+0x3ff/0xb40 [ 1714.478733][T32689] task_work_run+0x150/0x240 [ 1714.483312][T32689] do_exit+0x829/0x2a30 [ 1714.487466][T32689] do_group_exit+0xd5/0x2a0 [ 1714.491964][T32689] get_signal+0x1ec7/0x21e0 [ 1714.496451][T32689] arch_do_signal_or_restart+0x91/0x7a0 [ 1714.501981][T32689] exit_to_user_mode_loop+0x86/0x4b0 [ 1714.507247][T32689] do_syscall_64+0x4fe/0xf80 [ 1714.511818][T32689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1714.517692][T32689] [ 1714.519993][T32689] Memory state around the buggy address: [ 1714.525601][T32689] ffff888065d1ff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1714.533637][T32689] ffff888065d20000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1714.541676][T32689] >ffff888065d20080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1714.549709][T32689] ^ [ 1714.555052][T32689] ffff888065d20100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1714.563091][T32689] ffff888065d20180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1714.571130][T32689] ================================================================== [ 1714.582188][T32689] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1714.589413][T32689] CPU: 0 UID: 0 PID: 32689 Comm: khidpd_10000008 Tainted: G L syzkaller #0 PREEMPT(full) [ 1714.600791][T32689] Tainted: [L]=SOFTLOCKUP [ 1714.605110][T32689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1714.615163][T32689] Call Trace: [ 1714.618437][T32689] [ 1714.621364][T32689] dump_stack_lvl+0x100/0x190 [ 1714.626045][T32689] vpanic+0x20d/0x630 [ 1714.630031][T32689] panic+0xd1/0xd1 [ 1714.633754][T32689] ? __pfx_panic+0x10/0x10 [ 1714.638164][T32689] ? check_panic_on_warn+0x1f/0x90 [ 1714.643272][T32689] check_panic_on_warn.cold+0x19/0x34 [ 1714.648649][T32689] end_report.part.0+0x3a/0x90 [ 1714.653422][T32689] kasan_report.cold+0xe/0x18 [ 1714.658107][T32689] ? __mutex_lock+0x1861/0x1b90 [ 1714.662959][T32689] __mutex_lock+0x1861/0x1b90 [ 1714.667630][T32689] ? l2cap_unregister_user+0x71/0x240 [ 1714.673005][T32689] ? __lock_acquire+0x4a5/0x2630 [ 1714.677945][T32689] ? __pfx___mutex_lock+0x10/0x10 [ 1714.682960][T32689] ? find_held_lock+0x2b/0x80 [ 1714.687614][T32689] ? __wake_up+0x3f/0x60 [ 1714.691833][T32689] ? __wake_up+0x3f/0x60 [ 1714.696053][T32689] ? l2cap_unregister_user+0x71/0x240 [ 1714.701400][T32689] l2cap_unregister_user+0x71/0x240 [ 1714.706578][T32689] hidp_session_thread+0x459/0x680 [ 1714.711670][T32689] ? __pfx_hidp_session_thread+0x10/0x10 [ 1714.717291][T32689] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 1714.723504][T32689] ? __kthread_parkme+0xbb/0x230 [ 1714.728419][T32689] ? rcu_is_watching+0x12/0xc0 [ 1714.733158][T32689] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 1714.739459][T32689] ? __kthread_parkme+0x18c/0x230 [ 1714.744463][T32689] ? __pfx_hidp_session_thread+0x10/0x10 [ 1714.750069][T32689] kthread+0x3b3/0x730 [ 1714.754112][T32689] ? __pfx_kthread+0x10/0x10 [ 1714.758673][T32689] ? ret_from_fork+0x79/0xaf0 [ 1714.763325][T32689] ? ret_from_fork+0x79/0xaf0 [ 1714.767973][T32689] ? rcu_is_watching+0x12/0xc0 [ 1714.772715][T32689] ? __pfx_kthread+0x10/0x10 [ 1714.777278][T32689] ret_from_fork+0x754/0xaf0 [ 1714.781843][T32689] ? __pfx_ret_from_fork+0x10/0x10 [ 1714.786945][T32689] ? __switch_to+0x7b9/0x10c0 [ 1714.791603][T32689] ? __pfx_kthread+0x10/0x10 [ 1714.796177][T32689] ret_from_fork_asm+0x1a/0x30 [ 1714.800915][T32689] [ 1714.804217][T32689] Kernel Offset: disabled [ 1714.808514][T32689] Rebooting in 86400 seconds..