last executing test programs: 8m41.33274541s ago: executing program 32 (id=559): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0xffffffffffffffff, 0x18) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x0) utime(&(0x7f0000000200)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020701200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) sync() stat(&(0x7f0000000300)='./file2\x00', &(0x7f0000000340)) syz_open_dev$tty20(0xc, 0x4, 0x1) 6m24.878743269s ago: executing program 33 (id=729): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0xffffffffffffffff, 0x18) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x0) utime(&(0x7f0000000200)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020701200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) socket$inet6_tcp(0xa, 0x1, 0x0) sync() syz_open_dev$tty20(0xc, 0x4, 0x1) 3m48.943344458s ago: executing program 6 (id=932): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x57, 0x2) r1 = syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) close(0x3) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) (fail_nth: 1) 3m48.599474007s ago: executing program 6 (id=934): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x400000000000003, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x48}}, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x20, 0x0, 0x8010002}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00'], 0x20}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x4}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40044) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m36.625979352s ago: executing program 6 (id=945): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) semctl$SETALL(0x0, 0x0, 0x11, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x281c2, 0x0) fcntl$setlease(r2, 0x400, 0x1) sendmsg$NFC_CMD_ACTIVATE_TARGET(0xffffffffffffffff, 0x0, 0x20000001) pread64(0xffffffffffffffff, &(0x7f0000001440)=""/126, 0x7e, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(r3, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) 3m35.68941388s ago: executing program 6 (id=948): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) openat$hwrng(0xffffffffffffff9c, 0x0, 0x200000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') readv(r2, &(0x7f0000000140)=[{&(0x7f0000000380)=""/198, 0xc6}], 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r3) sendmsg$NET_DM_CMD_START(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r4, 0x1}, 0x14}}, 0x0) 3m35.316131633s ago: executing program 6 (id=950): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(0x0, r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x8, 0x1}]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r6 = io_uring_setup(0x17ba, &(0x7f00000002c0)) recvmmsg(0xffffffffffffffff, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000440)=""/233, 0xe9}], 0x1}}], 0x1, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001880)={'vxcan1\x00', 0x0}) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r10 = accept4(r9, 0x0, 0x0, 0x0) sendmsg$kcm(r10, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="d8dc626fb8ae038c1a2ddba312aa562570f3b9e7c8f60a46dd89ac3935442bca8d619f4e2d5a7491912cbb70609585588cb9acfde06ad63aa564fa190c64faf9437b21f043f41e465e1ae8db307354", 0x4f}, {&(0x7f00000003c0), 0xfffffe80}, {&(0x7f0000000200)="09a939a33adcebb03c3d5e22e2d3f32fd548458f33907b3250944cbb7c97386a76cf", 0x2}], 0x3}, 0xc804) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x11, 0xd}}]}}]}, 0x44}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x303, 0x0, 0x25dfdbfd, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0xffffffffffffff91}}, 0x0) 3m34.12747444s ago: executing program 6 (id=952): syncfs(0xffffffffffffffff) ioperm(0x0, 0x6, 0x10000) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) sync() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) futex_waitv(&(0x7f0000001cc0)=[{0x0, &(0x7f0000000080), 0x2}, {0x0, &(0x7f00000000c0), 0x2}, {0x4, &(0x7f0000000100), 0x2}], 0x3, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_LINK={0x8, 0x1, 0x2}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}]}, 0x50}}, 0x0) write$binfmt_aout(r1, &(0x7f0000001000)=ANY=[], 0xff2e) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0x3) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r5 = syz_open_pts(r1, 0x0) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETS(r6, 0x40045431, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700)={0x0}}, 0x0) r9 = dup3(r5, r1, 0x0) ioctl$TCFLSH(r9, 0x540b, 0x2) 3m18.660706014s ago: executing program 34 (id=952): syncfs(0xffffffffffffffff) ioperm(0x0, 0x6, 0x10000) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) sync() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) futex_waitv(&(0x7f0000001cc0)=[{0x0, &(0x7f0000000080), 0x2}, {0x0, &(0x7f00000000c0), 0x2}, {0x4, &(0x7f0000000100), 0x2}], 0x3, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_LINK={0x8, 0x1, 0x2}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}]}, 0x50}}, 0x0) write$binfmt_aout(r1, &(0x7f0000001000)=ANY=[], 0xff2e) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0x3) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r5 = syz_open_pts(r1, 0x0) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETS(r6, 0x40045431, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700)={0x0}}, 0x0) r9 = dup3(r5, r1, 0x0) ioctl$TCFLSH(r9, 0x540b, 0x2) 3m2.142991851s ago: executing program 2 (id=1015): pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r1 = fsopen(&(0x7f0000000280)='nfsd\x00', 0x0) r2 = socket$caif_stream(0x25, 0x1, 0x4) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f0000000000)="11136f1e08cf3ba4f6d701bf122a985053ea747ed65c6587f15a79b7cddd3e43a89a18305eb906b2e806ce5afa0f64ee9ffee92d1e102e6e7a5f3c4012d95cbea20a6c7f7392eb02ea1332388db841afb0384fdafa8a1615d83fc69b23b1f26894f1a370218dd6fec1a52ea7f6a92b5ec3bc5dba09db127e5a4c5b9341f7bc2b0343124686617a911473e9d5fc894dea070dd0da0d63b838a25a7fd6e82ed13d9feaf0078c3b4a1d39ec", 0xaa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180200008010000000000000040000008500000027000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20) sendmsg$inet(r6, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x1) r9 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc298, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r9, &(0x7f0000000e00)={0x2c, &(0x7f0000000000)={0x20, 0x31, 0x5, {0x5, 0x24, "82a794"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2m58.866721756s ago: executing program 2 (id=1031): epoll_create1(0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x49, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040341d0a0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="280000001200010000a7ac18eb000000100000000c00001d80"], 0x28}], 0x1}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) 2m46.777137724s ago: executing program 2 (id=1036): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x400000000000003, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x48}}, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x20, 0x0, 0x8010002}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00'], 0x20}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x4}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m45.043369572s ago: executing program 2 (id=1044): r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/snmp6\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 2m44.993993046s ago: executing program 1 (id=1045): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000001100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) pipe2(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)={'#! ', './file1', [{0x20, 'wg1\x00'}, {0x20, '{-+x^+.&'}]}, 0x19) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x4f, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x19, 0x2c, 0xfe, @remote, @local, {[], {{0x3a00, 0x15, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {'Z\t\x00\x00\x00'}}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x0, 0x80805513, 0x0}) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2m44.947769791s ago: executing program 2 (id=1046): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x4}, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2a400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ftruncate(r3, 0xc17a) timer_create(0x3, 0x0, &(0x7f0000000180)) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ioctl$RTC_UIE_ON(r2, 0x7003) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000040)={0x25, 0x32, 0x0, 0xd, 0xa, 0xbffe, 0x2}) write$binfmt_aout(r1, &(0x7f00000008c0)=ANY=[], 0x5b) sendfile(r0, r1, &(0x7f0000000000)=0x3, 0x5) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r7}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ee527e004c3c000000e3ffffff00000000000000000000ff02000000000000000000000000000133000000000090"], 0x0) 2m42.929511442s ago: executing program 1 (id=1049): getpid() bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1) ptrace$peek(0x2, 0x0, &(0x7f0000000380)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000049500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x6a, &(0x7f0000000980)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e23, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "955aec9ef39911c4e608778212119fd3d90397a2d165de62", "580c5119fb37bf4a8be03c1f77f40bafce6ab79eb3b71dc477351f542ce9232f"}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) acct(&(0x7f00000001c0)='./file0\x00') ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) setfsgid(0xee00) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000e1ffffff0000000200cbfc0b9af540340c"], 0x48}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f00000018c0)={&(0x7f0000000040)={0x1, 0x1ae, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{0x0, 0x1, 0x1, 0x1}, 0x85, 0x3, 0x0, 0x0, "3868efaafd720c4b"}}, 0x38}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r7, 0x0) 2m42.881249108s ago: executing program 2 (id=1051): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000500), 0x4000000000001cd, 0x800) sched_setaffinity(r0, 0x8, &(0x7f0000000840)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082bbd7000ffdbdf250100000006000a002d2c00000c"], 0x34}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000140), &(0x7f0000000080)=@udp=r6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000140), &(0x7f0000000080)=@udp=r6}, 0x20) write$cgroup_int(r3, &(0x7f0000000040)=0x1f00, 0x12) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) 2m41.039299308s ago: executing program 1 (id=1053): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$getsig(0x4202, r0, 0x6, &(0x7f0000000180)) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x3, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x7, 0x2800, 0x6, 0x2, 0xbb6, 0x0, 0x18, {0x8, 0xffffffff}, 0xd0, 0x9}}) 2m30.483593318s ago: executing program 1 (id=1057): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) (async) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000004c0)={0x18, 0x0, {0x2, @empty, 'vlan0\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x4004743a, &(0x7f0000000300)) pwritev(r2, &(0x7f00000002c0)=[{&(0x7f0000000440)="c1cd88758c", 0x5}], 0x1, 0xfffffffe, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r4 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000040)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x5) preadv(r4, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/248, 0xf8}], 0x1, 0x0, 0xa13c996b) (async) preadv(r4, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/248, 0xf8}], 0x1, 0x0, 0xa13c996b) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0.,:/', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0.,:/', 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'sit0\x00'}}, 0x1e) read$FUSE(r4, &(0x7f0000002180)={0x2020}, 0x2020) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000240)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000500)={0x48, 0x2, r8}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@ipv6_getaddrlabel={0x24, 0x4a, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@ipv6_getaddrlabel={0x24, 0x4a, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m30.075474587s ago: executing program 1 (id=1060): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() socket$alg(0x26, 0x5, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000440)=0x3) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f00000020c0)={'syztnl0\x00', 0x0, 0x2f, 0x80, 0x3, 0x8000000, 0x5b, @mcast2, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x0, 0x20, 0x0, 0x8}}) r5 = socket(0x10, 0x803, 0x0) socket(0x1, 0x80804, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x388, 0xffffffff, 0xf8, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @loopback, 0x0, 0x0, 'veth0_to_team\x00', 'wlan0\x00', {}, {}, 0x73}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x5}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@inet=@SET1={0x28}}, {{@ip={@private, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@ah={{0x30}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e8) socket$key(0xf, 0x3, 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00"/14, @ANYRES32, @ANYRES8=r0, @ANYBLOB="123d5815ca47f39e1d6cd673e46d9c26063c7978595e50826d41300015e929bdcbee1e14c5612866c1575229141b3ee33af14e6d656d2ad93fccf550324db4bf", @ANYRESDEC=r5, @ANYRES64=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2b0, 0x2b0, 0x2b0, 0x138, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) 2m28.392709779s ago: executing program 1 (id=1063): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000500), 0x4000000000001cd, 0x800) sched_setaffinity(r0, 0x8, &(0x7f0000000840)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082bbd7000ffdbdf250100000006000a002d2c00000c000300ff010000000000000c"], 0x34}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000140), &(0x7f0000000080)=@udp=r6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000140), &(0x7f0000000080)=@udp=r6}, 0x20) write$cgroup_int(r3, &(0x7f0000000040)=0x1f00, 0x12) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) 2m27.802926513s ago: executing program 35 (id=1051): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000500), 0x4000000000001cd, 0x800) sched_setaffinity(r0, 0x8, &(0x7f0000000840)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082bbd7000ffdbdf250100000006000a002d2c00000c"], 0x34}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000140), &(0x7f0000000080)=@udp=r6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000140), &(0x7f0000000080)=@udp=r6}, 0x20) write$cgroup_int(r3, &(0x7f0000000040)=0x1f00, 0x12) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) 2m15.735980599s ago: executing program 8 (id=1065): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8a0007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x170, 0x9403, 0x4, 0x0, 0x2c0, 0x2a8, 0x4a8, 0x3d8, 0x2a8, 0x3d8, 0x3, 0x0, {[{{@ipv6={@dev, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vxcan1\x00', 'macvtap0\x00'}, 0x0, 0x128, 0x170, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'macsec0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0xa, 0x10010003}}}, @common=@inet=@dscp={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local}}}, {{@ipv6={@remote, @remote, [], [], 'wlan1\x00', 'ipvlan0\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@eui64={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) r7 = epoll_create(0x4) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xfffffffffffffec0, &(0x7f0000000900)={&(0x7f0000000440)={0x64, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x48005) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000001c0)) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) write$vga_arbiter(r5, &(0x7f0000000000)=ANY=[@ANYBLOB='lock io'], 0xc) epoll_create(0xb398) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000003000000080000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r8}, &(0x7f0000000380), &(0x7f00000003c0)='%-010d \x00'}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 2m14.005452137s ago: executing program 8 (id=1078): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000500), 0x4000000000001cd, 0x800) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYRES16=0x0, @ANYBLOB="00082bbd7000ffdbdf250100000006000a002d2c00000c000300ff010000000000000c000400fdffffffffffffff"], 0x34}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000140), &(0x7f0000000080)=@udp=r6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000140), &(0x7f0000000080)=@udp=r6}, 0x20) write$cgroup_int(r3, &(0x7f0000000040)=0x1f00, 0x12) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) socket$igmp6(0xa, 0x3, 0x2) 2m12.936526662s ago: executing program 36 (id=1063): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000500), 0x4000000000001cd, 0x800) sched_setaffinity(r0, 0x8, &(0x7f0000000840)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082bbd7000ffdbdf250100000006000a002d2c00000c000300ff010000000000000c"], 0x34}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000140), &(0x7f0000000080)=@udp=r6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000140), &(0x7f0000000080)=@udp=r6}, 0x20) write$cgroup_int(r3, &(0x7f0000000040)=0x1f00, 0x12) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) 2m11.717732102s ago: executing program 4 (id=1084): r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x5, &(0x7f0000000240)=[{0x8, 0x86, 0x7, 0x1}, {0x40, 0x2, 0x8, 0x1}, {0xcb6, 0xfb, 0x5, 0x6}, {0x8000, 0x2, 0x80, 0x4}, {0x3e, 0x8, 0xf9, 0x48}]}, 0x10) write$binfmt_misc(r5, &(0x7f0000000100), 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x80, 0x16}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}}, 0x0) 2m0.794393979s ago: executing program 4 (id=1089): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8a0007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x170, 0x9403, 0x4, 0x0, 0x2c0, 0x2a8, 0x4a8, 0x3d8, 0x2a8, 0x3d8, 0x3, 0x0, {[{{@ipv6={@dev, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vxcan1\x00', 'macvtap0\x00'}, 0x0, 0x128, 0x170, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'macsec0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0xa, 0x10010003}}}, @common=@inet=@dscp={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local}}}, {{@ipv6={@remote, @remote, [], [], 'wlan1\x00', 'ipvlan0\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@eui64={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) r7 = epoll_create(0x4) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xfffffffffffffec0, &(0x7f0000000900)={&(0x7f0000000440)={0x64, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x48005) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000001c0)) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) write$vga_arbiter(r5, &(0x7f0000000000)=ANY=[@ANYBLOB='lock io'], 0xc) epoll_create(0xb398) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000003000000080000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r8}, &(0x7f0000000380), &(0x7f00000003c0)='%-010d \x00'}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 1m59.811362888s ago: executing program 4 (id=1091): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x8, 0xe, &(0x7f0000000840)=ANY=[@ANYRES16], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60122d9200103afffe8000000000000000000000000000bbff02000000000000000000000000000188009078000000000000000000000000faecd2fae2d81b48d62c9bdf01b9f35b2cc35784abb9531d5001229ccc7def6650d1abd157e13e2c28c621597d61b3355f6108d1e59f5b4e83def3b340424082f8d0edb8b7340fe6e471074013729c65da8671af459d8df6b527967004bd86d3241f48eb6a2f5ea3f45992ca9176448bfc4b7687cfa42547f9bc"], 0x0) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) r0 = socket(0x15, 0x5, 0x0) connect$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000034700)=""/102400, 0x19000) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'pim6reg0\x00', 0x2}) socket$netlink(0x10, 0x3, 0x0) preadv(r3, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x2}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pselect6(0x40, &(0x7f0000000000)={0x9}, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$nbd(0x1, 0x1, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10400, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) 1m58.730065385s ago: executing program 37 (id=1078): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000500), 0x4000000000001cd, 0x800) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYRES16=0x0, @ANYBLOB="00082bbd7000ffdbdf250100000006000a002d2c00000c000300ff010000000000000c000400fdffffffffffffff"], 0x34}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000140), &(0x7f0000000080)=@udp=r6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000140), &(0x7f0000000080)=@udp=r6}, 0x20) write$cgroup_int(r3, &(0x7f0000000040)=0x1f00, 0x12) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) socket$igmp6(0xa, 0x3, 0x2) 1m58.630432038s ago: executing program 4 (id=1097): r0 = socket$inet6(0xa, 0x6, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r7) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x44, r8, 0x8406f989402a7621, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x38ac9a794fc75dab}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES8=r4, @ANYBLOB='\n\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\x00\x00\n', @ANYRES32=r2, @ANYBLOB="33d054e350ccf7c5de82fd3464f9a991cb414fe5c94b3a1ec0c224d516f41a7c0985f7cead7cf539c4035d9ae586fccbb94e5c92afde63930cbf9dfbb5f3b04fe94708861f02fa3ca7c7e2206081b96768e1ad1d69b210ecf6cca02ee4f7da0e404ea46892aa3a7696fbe82d7ceac69759d38f140757dd1d79edf7a44f20c8b8000000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fc000000080011000000000008000e00800000000800", @ANYRES64=r9], 0x5c}, 0x1, 0x0, 0x0, 0x4008003}, 0x0) 1m58.453258514s ago: executing program 4 (id=1098): creat(&(0x7f0000000340)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmsg$inet6(r2, &(0x7f0000001600)={&(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000001580)=[{&(0x7f00000010c0)="bf", 0x1}], 0x1}, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, &(0x7f0000000080)=0x9c) write$P9_RVERSION(r1, &(0x7f0000004240)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r3, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000004280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@afid}, {@aname={'aname', 0x3d, '@#@'}}], [], 0x6b}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r7, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000500)="65260f08baf80c66b88a33f18466efbafc0cb000ee2ef30fc776ae660f383b527c2e0f01c8660f1eea3e36260f79b797e40f01dffb66b92800000066b80080000066ba000000000f30", 0x49}], 0x1, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r8, 0xae80, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x44e, 0x4, 0x3], 0x0, 0x0, 0x44e, 0x1}}, 0x40) 1m57.376692444s ago: executing program 4 (id=1100): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = socket(0x2a, 0xa, 0x5ad) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000004080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f00000004c0)='contention_end\x00', r3}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f00000000c0)={"bcffffff", 0x0, 0x5, 0x1, 0x0, 0x0, '\x00', "00aa071e", "0300", "97ad3700", ["fdfbfdffffffffffffff0040", "84c9964f495c75ccffffffff", "0000ef000200", "3bf100000000000000c48400"]}) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_uring_setup(0xc91, 0x0) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000140)={0xa4a, 0x4e3bf1d1, 0x2, 0x11, 0x8000, 0x81, "4f1b50acd047e59fcef5394a909a25bb", 0x4, 0x0, 0x6, 0x0, 0x6, 0x3, 0x4}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, r2, {0xc, 0x9}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002a80)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {}, {0xc, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x44050) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r7, &(0x7f0000000040)={0x23, 0x4}, 0x10) bind$phonet(r6, &(0x7f0000000040)={0x23, 0x4}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) accept4$unix(r5, &(0x7f00000003c0), &(0x7f0000000180)=0x6e, 0x800) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r9 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xff, 0x86, 0x76, 0x8, 0x424, 0x7800, 0xe941, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7a, 0xcd, 0x37}}]}}]}}, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r9, 0xc05c6104, &(0x7f0000000040)={"0400", 0x40, 0x6, 0x2, 0x0, 0x0, "993ec98c2e2ecd7a000000002000", "5cf0c360", "000600", "e859ad33", ["b3b02af0c4391f08000000b1", "cf1ddb610c0ac8ba4f862945", "0c43007b9233ed5b96e1a471", "3bf1d98bfae7bc85718b0756"]}) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000240), 0x4) 1m40.588035409s ago: executing program 38 (id=1100): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = socket(0x2a, 0xa, 0x5ad) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000004080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f00000004c0)='contention_end\x00', r3}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f00000000c0)={"bcffffff", 0x0, 0x5, 0x1, 0x0, 0x0, '\x00', "00aa071e", "0300", "97ad3700", ["fdfbfdffffffffffffff0040", "84c9964f495c75ccffffffff", "0000ef000200", "3bf100000000000000c48400"]}) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_uring_setup(0xc91, 0x0) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000140)={0xa4a, 0x4e3bf1d1, 0x2, 0x11, 0x8000, 0x81, "4f1b50acd047e59fcef5394a909a25bb", 0x4, 0x0, 0x6, 0x0, 0x6, 0x3, 0x4}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, r2, {0xc, 0x9}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002a80)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {}, {0xc, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x44050) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r7, &(0x7f0000000040)={0x23, 0x4}, 0x10) bind$phonet(r6, &(0x7f0000000040)={0x23, 0x4}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) accept4$unix(r5, &(0x7f00000003c0), &(0x7f0000000180)=0x6e, 0x800) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r9 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xff, 0x86, 0x76, 0x8, 0x424, 0x7800, 0xe941, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7a, 0xcd, 0x37}}]}}]}}, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r9, 0xc05c6104, &(0x7f0000000040)={"0400", 0x40, 0x6, 0x2, 0x0, 0x0, "993ec98c2e2ecd7a000000002000", "5cf0c360", "000600", "e859ad33", ["b3b02af0c4391f08000000b1", "cf1ddb610c0ac8ba4f862945", "0c43007b9233ed5b96e1a471", "3bf1d98bfae7bc85718b0756"]}) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000240), 0x4) 10.596424409s ago: executing program 7 (id=1227): pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r1 = fsopen(&(0x7f0000000280)='nfsd\x00', 0x0) r2 = socket$caif_stream(0x25, 0x1, 0x4) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f0000000000)="11136f1e08cf3ba4f6d701bf122a985053ea747ed65c6587f15a79b7cddd3e43a89a18305eb906b2e806ce5afa0f64ee9ffee92d1e102e6e7a5f3c4012d95cbea20a6c7f7392eb02ea1332388db841afb0384fdafa8a1615d83fc69b23b1f26894f1a370218dd6fec1a52ea7f6a92b5ec3bc5dba09db127e5a4c5b9341f7bc2b0343124686617a911473e9d5fc894dea070dd0da0d63b838a25a7fd6e82ed13d9feaf0078c3b4a1d39ec", 0xaa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20) sendmsg$inet(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)}], 0x1}, 0x3) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x1) r9 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc298, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r9, &(0x7f0000000e00)={0x2c, &(0x7f0000000000)={0x20, 0x31, 0x5, {0x5, 0x24, "82a794"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) 8.947784218s ago: executing program 9 (id=1232): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000730000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB="16000000d3ec66ecc053c5da5f2e"], 0x48) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x4d068000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, r5, r5) 8.277551544s ago: executing program 5 (id=1233): madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) userfaultfd(0x801) r0 = socket$alg(0x26, 0x5, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x18) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a471000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x803}) openat$tun(0xffffffffffffff9c, 0x0, 0x8302, 0x0) syz_open_dev$mouse(0x0, 0x8000000000000000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0xfe, 0x1}, [@RTA_DST={0x8, 0x1, {0x100}}]}, 0x24}}, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r6 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r6, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000240)}}], 0x2, 0x0, 0x0) 7.745739771s ago: executing program 9 (id=1234): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000440)=0x3) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f00000020c0)={'syztnl0\x00', 0x0, 0x2f, 0x80, 0x3, 0x8000000, 0x5b, @mcast2, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x0, 0x20, 0x0, 0x8}}) r5 = socket(0x10, 0x803, 0x0) socket(0x1, 0x80804, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x388, 0xffffffff, 0xf8, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @loopback, 0x0, 0x0, 'veth0_to_team\x00', 'wlan0\x00', {}, {}, 0x73}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x5}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@inet=@SET1={0x28}}, {{@ip={@private, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@ah={{0x30}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e8) socket$key(0xf, 0x3, 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32, @ANYRES8=r0, @ANYBLOB="123d5815ca47f39e1d6cd673e46d9c26063c7978595e50826d41300015e929bdcbee1e14c5612866c1575229141b3ee33af14e6d656d2ad93fccf550324db4bfa86ebe490e01f0e3683523b684cf1bde40d47989e81be3094cb4d42a93856ee52d496ee98647fcb09ee000804b94fa52a56382b59f36728e54accc009cee8fc21aea", @ANYRESDEC=r5, @ANYRES64=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2000000000000016000200071b48013d030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2b0, 0x2b0, 0x2b0, 0x138, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) 7.685755228s ago: executing program 3 (id=1235): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20044800) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000001480)=[{{&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000017c0)=[{&(0x7f0000000580)="9e5cd0b2a47cf97d72cc3c34ebb413578efac234437ff1969b42c2e0c2bf4f87eab0656fb2a0d4cede3d90b5e99371edaa3bdd8d1163611d7efbf49571e0405df026fd691b27cf011975db", 0x4b}, {&(0x7f0000000040)="79d50e19e5e09c9fd0ef18", 0xb}, {&(0x7f0000001580)="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", 0x117}, {&(0x7f0000001180)="818230da41b62bf51179611cfa278109458f4a5690f11e00f5b2330427dfbc1d27e886767cb5eff59b27f858490a35c0d9c3d4c57a23a6993d7cdbe16a532bd38f9f845c901c441ad4375b7843aff01184ef11266629d37a55a58a550acf70a4cfca9f9eadd3e6627b0f295571ff5cc370b1c390386509b9471765", 0x7b}, {&(0x7f0000001980)="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", 0x117}, {&(0x7f0000000600)="d9ff5053da1b839272ca396c269c15331c257e6175491fb5282c2388b066abb303eece66d10378351731aa663e0eb79f7654f27d52349f40594a29c9452cd7a79f70651ea966b91a75c14676832e3fefe2c5ad5b51423789aae8e7706d48573762ca2f39d82e016dad8364717b2c8d47219b33ff179e83b7aa18f12fc008562da81727828756cc0c69a6954acc5da009ad755e31d4bba6ee2148e2521474f7eefd7047", 0xa3}], 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000f8ff1b000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r4], 0x78, 0x81}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000780)="179f6b2e42c71e2d05acf829e01e4162c4414534e03718a30d69cbc9d906bba993013f3e2f55c323849c59eee149cf4b64ae46490109386fbd94582c0c84c391da4a336c71f347d490fb74991e8b7a1a43006149852eddfe85805715adf8ed5acd81c0ef3db2c95aac0835f065efd4d652900e98849b12b9491ec091540371d36d097e9cadaaf3381abaebe329409c761bf864f403819b314ede867031f73eb661590db6a26718224eabc03728b185999e8f117d1bcc2648eac6b2abcad7d773", 0xc0}, {&(0x7f0000000840)="680ceab4c97dbcd398ef42e98b3177eefdc83fb5d752470212d37a97bbac6235c60cdf129f87761b90cb2a8b672a3482ad6a8792292e2ed47a29a514f46091ad873cc7f304158c190e5d881c2f98ed81af9f0ae7827098a588866984901c3f9b8171d50adbc3b9b03d6ec124ca3c487ce2f6a213a61318a421df7ecff2220a27552b24a8009fb2788563f1ea651dd2d1b8135daedc2c5e99fa579858804e37ea9701a7915ebaeb0bd3e2d2fe65143128968f25f14fa6b0ac4ad01179ff6a373753e22a015f7334d4cf5964aeaed72321", 0xd0}, {&(0x7f0000000940)="d4484d9ac2b4de20f652d485a3b085bb3ded6bd213257617feb370c260fd9749143971b04b45336a8bee9453f3f95bc4e67df490869e8da7ff202e142b8e9dca9f4d19715f812ac63bda1d2f421a80e88aeaa80984c4be8137d3f236aaf76c5537877ebdcf17", 0x66}, {&(0x7f00000009c0)="88cdcc9e80080c6a7daa6bcd480fb70c080faa63f622a90ed1902257a093db9217e609591984c28f829b4834253fc711985512b94c4ef762d3816b14de4299f6519a4617db", 0x45}, {&(0x7f0000000a40)="9e96d4821b7e2b6956656ff6074fb3518be82b05029639b2010488001480318bb3892488791898fb1cc2936ccbce194a9ec885b5e5da9e7c9166537058ec534875ebff9f8d949f5ddeadb080395d1b99bff4cc60e0541df589f80a8f93eca53a6544c134e040593a395336ce29df62b9c36ec2e8c01e6371cc3530b29eaf60a4c042a7a1b1350740dd7ea3eb78956d7d309cb522daa2ff7b6c29adb1d9389102b908045589c2c63d56d28123469b1c19d9c82e7ab5bcfd38982cff", 0xbb}], 0x5, &(0x7f0000000b80)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, r4, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30, 0x20000040}}, {{&(0x7f0000000bc0)=@file={0xb71bf0c5fb3bd51d, './file2\x00'}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000c40)="861cf382628bd5e9cc6a4fabc1931fc9e712f633cf43b867170139638bb2694a", 0x20}, {&(0x7f0000000500)="9f1e67b4fb4b2eac0ee39d29175c5d14dda0d9f50e5878c323a6fe68b8d9e33567fafff95b8e90207e0c63927fe9d505ab5d061c39726c51", 0x38}, {&(0x7f0000000dc0)="82125bb54202e9eba42455c2bc8b3998da88700400ced0d170c173ae7902000000c985fe3ec7acf16c68b61c3064cb6041c3a1af00080000ceefb9c4ee2593ee71eef171c39d07ab15b5f7ff00"/92, 0x5c}, {&(0x7f0000000d00)="528f4aa60f3f0cda5054cbb933a9b81912dc7632a901d90a84acdb54f1cdbbb0a85b8dfd839673bdea367e84286253e352360bd8a57e33ac49e6c9faa43f1f075ab85a6db03a7f248bfcede4e50e1f5883f2d0ef870ae32342eb4e621989d7aa75f4a682441b63e715a619b46b044e55cfec249dfc8fcd097f5599b35e63cd9b2e744b0818dcdd1548896fa2cd3e1dc9505348a0bd62aeea4f437f54ecd6f5367f2916aa62d503ac77796c5705", 0xad}, {&(0x7f0000001840)="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", 0x135}, {&(0x7f0000000e40)="ef54e93b56c1bdc551d99933daa55c1edd93b57a711f1288abf98de4f16d49aba0110bba9c7847949b72543f87e6d90d2bade43b340091d82fb92fa33162f522836d12fc6348ff09a49ca4ba8c30086a33a6423d392c905177a7ac4b762a0516168ba323bcec7066041e17c170d775e1f3e1c994e91a539c117c60c2326dae36dee92be4224cdc6c31d3468e71ca0e87bbe9ee4e69", 0x95}, {&(0x7f0000000f00)="b6854aa5e058255a6bf9f7fc90b4ed9e87f4c459b3320a02dcd6c36cecf614744d60d2bfbdd61ff37321bbe9a06af980bc6e32c93fa10ae512ac981816a9069ddbfb9a", 0x43}, {&(0x7f0000000f80)="0ed3fcfda98877993a375b3b724d8c11fa31bbaa75e02a6801bc87056fd2c787130fd5b1b38d67a52c6a8f88e9", 0x2d}], 0x8, 0x0, 0x0, 0x48000}}, {{&(0x7f0000001040)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000280), 0x0, &(0x7f0000001440)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0x40000}}], 0x4, 0x400c0) socket$qrtr(0x2a, 0x2, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r5 = memfd_secret(0x0) ftruncate(r5, 0x5) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x11, r5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000100)={0x6, 0x401, 0x7, 0x2f, 0x1, 0x0, [{0x6, 0x800, 0x1000, '\x00', 0x204}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16, @ANYRES32], 0x44}}, 0x0) 7.497715405s ago: executing program 7 (id=1236): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x400000000000003, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x48}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00'], 0x20}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x4}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40044) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.356438713s ago: executing program 5 (id=1237): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x4}, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2a400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ftruncate(r3, 0xc17a) timer_create(0x3, 0x0, &(0x7f0000000180)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ioctl$RTC_UIE_ON(r2, 0x7003) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000040)={0x25, 0x32, 0x0, 0xd, 0xa, 0xbffe, 0x2}) write$binfmt_aout(r1, &(0x7f00000008c0)=ANY=[], 0x5b) sendfile(r0, r1, &(0x7f0000000000)=0x3, 0x5) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r7}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ee527e004c3c000000e3ffffff00000000000000000000ff02000000000000000000000000000133000000000090"], 0x0) 7.237515623s ago: executing program 7 (id=1238): madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) userfaultfd(0x801) r0 = socket$alg(0x26, 0x5, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a471000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x803}) syz_open_dev$mouse(0x0, 0x8000000000000000, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) 6.711594977s ago: executing program 0 (id=1239): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000e000000000000000000000000009500000000d9c400"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000180)={0x0, 0x1}, 0xe800, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') readv(r6, &(0x7f0000000140)=[{&(0x7f0000000380)=""/198, 0xc6}], 0x1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r7) sendmsg$NET_DM_CMD_START(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r8, 0x1}, 0x14}}, 0x0) 6.241946392s ago: executing program 7 (id=1240): madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) userfaultfd(0x801) r0 = socket$alg(0x26, 0x5, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x18) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) close(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a471000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x803}) openat$tun(0xffffffffffffff9c, 0x0, 0x8302, 0x0) syz_open_dev$mouse(0x0, 0x8000000000000000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0xfe, 0x1}, [@RTA_DST={0x8, 0x1, {0x100}}]}, 0x24}}, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r6 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r6, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000240)}}], 0x2, 0x0, 0x0) 6.200566411s ago: executing program 0 (id=1241): r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x5, &(0x7f0000000240)=[{0x8, 0x86, 0x7, 0x1}, {0x40, 0x2, 0x8, 0x1}, {0xcb6, 0xfb, 0x5, 0x6}, {0x8000, 0x2, 0x80, 0x4}, {0x3e, 0x8, 0xf9, 0x48}]}, 0x10) write$binfmt_misc(r6, &(0x7f0000000100), 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x80, 0x16}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}}, 0x0) 6.046978037s ago: executing program 9 (id=1242): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8a0007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x170, 0x9403, 0x4, 0x0, 0x2c0, 0x2a8, 0x4a8, 0x3d8, 0x2a8, 0x3d8, 0x3, 0x0, {[{{@ipv6={@dev, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vxcan1\x00', 'macvtap0\x00'}, 0x0, 0x128, 0x170, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'macsec0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0xa, 0x10010003}}}, @common=@inet=@dscp={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local}}}, {{@ipv6={@remote, @remote, [], [], 'wlan1\x00', 'ipvlan0\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@eui64={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) r5 = epoll_create(0x4) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xfffffffffffffec0, &(0x7f0000000900)={&(0x7f0000000440)={0x64, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x48005) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000001c0)) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) write$vga_arbiter(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='lock io'], 0xc) epoll_create(0xb398) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000003000000080000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000380), &(0x7f00000003c0)='%-010d \x00'}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 6.000065989s ago: executing program 3 (id=1243): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x61]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000e000000000000000000000000009500000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000180)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') readv(r6, &(0x7f0000000140)=[{&(0x7f0000000380)=""/198, 0xc6}], 0x1) socket(0x10, 0x3, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r7) sendmsg$NET_DM_CMD_START(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r8, 0x1}, 0x14}}, 0x0) 4.87087272s ago: executing program 7 (id=1244): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000730000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB="16000000d3ec66ecc053c5da5f2e"], 0x48) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x4d068000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, r5, r5) 4.843451809s ago: executing program 3 (id=1245): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r3, 0x8010500c, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') readv(r4, &(0x7f0000000140)=[{&(0x7f0000000380)=""/198, 0xc6}], 0x1) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r5 = syz_genetlink_get_family_id$net_dm(0x0, 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r5, 0x1}, 0x14}}, 0x0) 4.657273578s ago: executing program 0 (id=1246): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$getsig(0x4202, r0, 0x6, &(0x7f0000000180)) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x3, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x7, 0x2800, 0x6, 0x2, 0xbb6, 0x0, 0x18, {0x8, 0xffffffff}, 0xd0, 0x9}}) 4.645422305s ago: executing program 9 (id=1247): pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r1 = fsopen(&(0x7f0000000280)='nfsd\x00', 0x0) r2 = socket$caif_stream(0x25, 0x1, 0x4) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f0000000000)="11136f1e08cf3ba4f6d701bf122a985053ea747ed65c6587f15a79b7cddd3e43a89a18305eb906b2e806ce5afa0f64ee9ffee92d1e102e6e7a5f3c4012d95cbea20a6c7f7392eb02ea1332388db841afb0384fdafa8a1615d83fc69b23b1f26894f1a370218dd6fec1a52ea7f6a92b5ec3bc5dba09db127e5a4c5b9341f7bc2b0343124686617a911473e9d5fc894dea070dd0da0d63b838a25a7fd6e82ed13d9feaf0078c3b4a1d39ec", 0xaa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20) sendmsg$inet(r6, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x1) r9 = syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) syz_usb_control_io(r9, &(0x7f0000000e00)={0x2c, &(0x7f0000000000)={0x20, 0x31, 0x5, {0x5, 0x24, "82a794"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) 3.333804137s ago: executing program 0 (id=1248): getpid() bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1) ptrace$peek(0x2, 0x0, &(0x7f0000000380)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000049500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x6a, &(0x7f0000000980)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e23, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "955aec9ef39911c4e608778212119fd3d90397a2d165de62", "580c5119fb37bf4a8be03c1f77f40bafce6ab79eb3b71dc477351f542ce9232f"}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) acct(&(0x7f00000001c0)='./file0\x00') ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) setfsgid(0xee00) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000500)={&(0x7f00000003c0)={0x1d, r5}, 0x10, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000e1ffffff0000000200cbfc0b9af5"], 0x48}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f00000018c0)={&(0x7f0000000040)={0x1, 0x1ae, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{0x0, 0x1, 0x1, 0x1}, 0x85, 0x3, 0x0, 0x0, "3868efaafd720c4b"}}, 0x38}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r7, 0x0) 3.307838731s ago: executing program 7 (id=1249): pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r1 = fsopen(&(0x7f0000000280)='nfsd\x00', 0x0) r2 = socket$caif_stream(0x25, 0x1, 0x4) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f0000000000)="11136f1e08cf3ba4f6d701bf122a985053ea747ed65c6587f15a79b7cddd3e43a89a18305eb906b2e806ce5afa0f64ee9ffee92d1e102e6e7a5f3c4012d95cbea20a6c7f7392eb02ea1332388db841afb0384fdafa8a1615d83fc69b23b1f26894f1a370218dd6fec1a52ea7f6a92b5ec3bc5dba09db127e5a4c5b9341f7bc2b0343124686617a911473e9d5fc894dea070dd0da0d63b838a25a7fd6e82ed13d9feaf0078c3b4a1d39ec", 0xaa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20) sendmsg$inet(r6, 0x0, 0x3) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x1) r9 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc298, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r9, &(0x7f0000000e00)={0x2c, &(0x7f0000000000)={0x20, 0x31, 0x5, {0x5, 0x24, "82a794"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.143269309s ago: executing program 5 (id=1250): syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea0009058703"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b36"], 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)={0x3c, r2, 0x905, 0x0, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}]}, 0x3c}}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4010, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) write$binfmt_misc(r4, &(0x7f0000000300), 0x4) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f00000001c0)={0x2, @vbi}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f00000002c0)=ANY=[], 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) sendmmsg$inet6(r6, &(0x7f0000003a00)=[{{&(0x7f0000000580)={0xa, 0x20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000700)="cd", 0x1}], 0x1}}], 0x1, 0xc0c0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2.399207272s ago: executing program 0 (id=1251): syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x8b, 0x1d, 0x7b, 0x40, 0x2294, 0x425a, 0x8ff6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x47, 0xc8, 0x1}}]}}]}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs2/custom0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000000)=0xb6de, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x0) mount$cgroup(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)={[{@name={'name', 0x3d, '.'}}, {@name={'name', 0x3d, 'mask'}}]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000240)={0x7, &(0x7f0000003a40)=[{0x7, 0x1000, &(0x7f0000000a40)="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", 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x5, 0xfd7, &(0x7f0000001a40)="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"}, {0x7, 0xdc8, &(0x7f0000002a40)="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"}, {0xfffffffe, 0x0, 0x0, 0x1, 0x1}, {0xfffffffa, 0x0, &(0x7f0000000800), 0x1, 0x1}, {0x9dfe, 0x3c, &(0x7f0000000040)="63e6154ce0cc31453ebd0a0e480041c8392f6e284778ef0d90b3e218a45f2128e59fc23a4180404801d6e8802cce68f595ac79401a14846e5870b913", 0x1}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f00000001c0)=[@release], 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket(0x40000000002, 0x3, 0x80000000002) getdents64(0xffffffffffffffff, &(0x7f00000002c0)=""/93, 0x5d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x46, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000008501", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000001000000"], &(0x7f00000000c0)='syzkaller\x00', 0x8000, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd, @void, @value}, 0x94) syz_open_dev$sndpcmp(0x0, 0x0, 0x230484) syz_open_procfs(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000540)='net/ip_vs\x00') 2.030667064s ago: executing program 3 (id=1252): r0 = msgget(0x1, 0x102) msgsnd(r0, &(0x7f0000000000)={0x1, "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"}, 0xe00, 0x800) openat$kvm(0xffffffffffffff9c, &(0x7f0000001040), 0x604181, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001080)={0x0, 0x0}) ioprio_get$pid(0x0, r1) msgrcv(r0, &(0x7f0000001100)={0x0, ""/196}, 0xcc, 0x3, 0x800) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001200), 0xa100, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000012c0)={'syztnl1\x00', &(0x7f0000001280)={'gretap0\x00', 0x0, 0x40, 0x20, 0x4, 0x3, {{0x8, 0x4, 0x1, 0x3a, 0x20, 0x65, 0x0, 0xff, 0x29, 0x0, @local, @empty, {[@timestamp={0x44, 0x8, 0xae, 0x0, 0x6, [0x7f]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000013c0)={'syztnl2\x00', &(0x7f0000001340)={'tunl0\x00', 0x0, 0x7800, 0x700, 0xbe, 0x5, {{0x16, 0x4, 0x3, 0x3, 0x58, 0x64, 0x0, 0x4e, 0x4, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@generic={0x44, 0xf, "f5a4b4d58eba249c424c078c72"}, @timestamp={0x44, 0x14, 0x4c, 0x0, 0x3, [0x20e2, 0x6, 0x5, 0x80000001]}, @timestamp={0x44, 0x20, 0x63, 0x0, 0x7, [0xcd, 0x2, 0x800, 0x7, 0x4, 0xd6a, 0x8]}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000002ac0)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002a80)={&(0x7f0000001400)={0xe4, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_HEADER={0x4}, @ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_SOPASS={0x23, 0x3, "d78eed2421303d8d4b617616d62f01ef53295c773283f9787c7326fe5d6573"}, @ETHTOOL_A_WOL_MODES={0x4}, @ETHTOOL_A_WOL_MODES={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80}]}, @ETHTOOL_A_WOL_SOPASS={0x44, 0x3, "0452f6c39f450696d3ae8fe5af3fd2b43186da282f998a98a6fd410a6c45f9f6394c98a52381bfffabb2c6e341e16a258ac96f09b906e5d207b5c6fe88464b85"}, @ETHTOOL_A_WOL_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20000000}, 0x40180) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000002b00), 0x442080, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x23, &(0x7f0000002b40)="a807c51bab390c517c834fcffceb4eb2d244e660b3f9d86d1f67936ccf9baff19081e500c579447c28974314c498e55a82637e59ad9e57001471b2990f799c59652f2d86382ebc5a354479517c1c7ed76bbe97c49e32ef1cf63ba0a93ab622604d6adc5ab5e377b996598eaf", 0x6c) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000002c40)={'ip6_vti0\x00', &(0x7f0000002bc0)={'syztnl2\x00', r3, 0x29, 0x81, 0x9, 0x1, 0x58, @private1, @private2, 0x700, 0x700, 0x7, 0xfffffff2}}) msgget(0x1, 0x605) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000002c80), 0x802, 0x0) ioctl$UI_SET_MSCBIT(r6, 0x40045568, 0x1c) write$uinput_user_dev(r5, &(0x7f0000002cc0)={'syz0\x00', {0xf5, 0x0, 0x5}, 0x7, [0x7ff, 0x2, 0x0, 0x8c, 0x6, 0x2, 0x29, 0x670e, 0x91, 0xc6, 0xffffffff, 0xb4f, 0x3ff, 0xffffffff, 0x7f, 0x0, 0x7, 0x1, 0x40, 0x6, 0x7fff, 0x6, 0x2, 0xffffffff, 0x5, 0xd, 0x2, 0x8, 0x0, 0x9, 0x7, 0x1, 0x7, 0x6, 0x4, 0x3, 0xb, 0x6, 0x2, 0x81, 0x5, 0x5, 0x5, 0x2, 0x91b7, 0xfffffff8, 0x4, 0x38c4, 0x7fffffff, 0x4, 0x7fffffff, 0x9, 0x7, 0x9, 0x1, 0x9, 0x5, 0x6, 0x4, 0x7fff, 0x401, 0x9, 0x6], [0x6, 0x3, 0x4, 0x7, 0xffffffff, 0x9, 0x6, 0x1, 0x10001, 0x3, 0x9, 0x3, 0x1, 0x4, 0xa000000, 0x2, 0x7, 0x2, 0x9, 0x4, 0x2, 0x1, 0x7, 0x0, 0x2, 0x10000, 0x9, 0x9, 0x7, 0x6, 0xfffffffd, 0x9, 0x3, 0xffff7333, 0x0, 0x6, 0xffff, 0xf, 0x8, 0x4, 0x2, 0x10001, 0xfff, 0x4, 0x3, 0x9, 0x2, 0x8, 0x3, 0x5, 0x3, 0x0, 0x3, 0x40, 0x4000000, 0x9, 0x6ad7fe1d, 0xa, 0x7, 0x0, 0x8, 0x5, 0x5, 0x9], [0x3ff, 0x9, 0x7ff, 0x7, 0x4, 0x2, 0x1, 0x73, 0xd2, 0x7, 0x0, 0x0, 0x2, 0x1, 0x38, 0x7, 0xfffffffd, 0x0, 0x6, 0x2, 0x98d, 0x5, 0x2, 0x5, 0x18, 0x4, 0x1, 0x4dc4, 0x4, 0x9, 0x7, 0x7ff, 0x9, 0x1e, 0x33a54d82, 0x4, 0x2, 0xffffffff, 0x8000, 0x2, 0x16f8722c, 0xff, 0x2, 0x8, 0xffff8000, 0xb89, 0x6, 0xfff, 0x9, 0xf890, 0x7, 0x5, 0x10000, 0x0, 0x0, 0xfffffff7, 0xc3, 0x7, 0x7, 0x1, 0x7, 0x4, 0x8, 0x4], [0x61c3, 0x55b, 0x6, 0xa, 0xffffffff, 0x3a0f, 0x3, 0x7, 0xffff260b, 0xe, 0x0, 0x8, 0xffffff01, 0x5a4, 0x1, 0xffff, 0x2, 0x2b3b, 0xe375, 0x0, 0x80000001, 0x7, 0x0, 0x9, 0x800, 0x1, 0x6, 0x1, 0x4, 0xe, 0x3, 0x6502, 0xfffffffb, 0x1, 0xc, 0xb, 0x0, 0x3, 0x9916, 0x7fff, 0x1, 0x10001, 0x6, 0x9, 0x8, 0x5, 0x8000, 0x500000, 0x0, 0x0, 0x7, 0x9, 0x2, 0x80000001, 0xd75, 0x1, 0x2, 0x0, 0x4, 0x1, 0x25fa, 0x1, 0x7fff, 0x6]}, 0x45c) sendmsg$NFT_BATCH(r2, &(0x7f00000037c0)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003780)={&(0x7f0000003180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSET={0x44, 0xb, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_DESC={0x1c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x80000001}]}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x6}]}, @NFT_MSG_DELTABLE={0xf0, 0x2, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xa0, 0x6, "5fd2638feba189161a61cd1542aa93ea5617ada69dc27fc99fcfce8d9d84ca367922cdd5394ff9382e88b2604cf97fc8d9ac428f70e6bbab8dce70607d9a14db62d777dd7f0c760b0bd2b52b47482de24742b187735c73f99617d41fbff62201568a5977e6d6dd14047f820d03ab7a94330bf35b0149fc33c14a0812c4e712f8fcd12ab4f2269c6f1d0406dd37a95ba6165439860b0038be72201ff1"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWRULE={0x1b4, 0x6, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88ee}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x21}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8864}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x86dd}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x12c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x7}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x38}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x5b}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x8c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x7c, 0x2, 0x0, 0x1, [@NFTA_INNER_EXPR={0x2c, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x18}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @meta={{0x9}, @void}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}}}, {0x14, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x54, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x3d, 0x6, "e8bd30fb4ee19479b9187d2d8681c1bc97f0a052a33c8db5c946de058262cd91a6fe13f054276e79eba2a4397bf350e6061c11d8d0347e246c"}]}, @NFT_MSG_DELRULE={0x54, 0x8, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x430}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000040) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffb000/0x3000)=nil) close_range(r2, r2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000003800), 0x292200) io_uring_enter(r5, 0x4cf8, 0x5e0f, 0x5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000003880)=0x0) syz_pidfd_open(r7, 0x0) syz_clone(0x2200900, &(0x7f0000003900)="206852b4988df02a9c9297ea3ad8", 0xe, &(0x7f0000003940), &(0x7f0000003980), &(0x7f00000039c0)="a74d2224b56e7f517839b01ecf0cf5471f9f649f42154b769aa6571a0958191cb8683a030e221d5a7543e6db18cd5ab4390307af522cac84319251c5ee97eb53b023efbb81f37308e4f28c303b7036c1d00b95857f75a8aa685111fb38e6f5363897424e3a604e298712676e73cf391c899a3d6af7571ec8d4b54da9a55ad0cd4a184ea4b4f6c1a3ab7a4361b60c27da753687139694aec9722e0434b246f869a7e45543c73e28fbd0b148cfdb849ea43129aa0f655ff770ed4cab54cb1480553a3c53374060f9752a09e44af9004a5212") syz_genetlink_get_family_id$ethtool(&(0x7f0000003b00), r6) sendmsg$ETHTOOL_MSG_EEE_GET(r5, 0x0, 0x4c004) ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f0000003c40)) 2.005462398s ago: executing program 3 (id=1253): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20044800) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000001480)=[{{&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000017c0)=[{&(0x7f0000000580)="9e5cd0b2a47cf97d72cc3c34ebb413578efac234437ff1969b42c2e0c2bf4f87eab0656fb2a0d4cede3d90b5e99371edaa3bdd8d1163611d7efbf49571e0405df026fd691b27cf011975db", 0x4b}, {&(0x7f0000000040)="79d50e19e5e09c9fd0ef18", 0xb}, {&(0x7f0000001580)="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", 0x117}, {&(0x7f0000001180)="818230da41b62bf51179611cfa278109458f4a5690f11e00f5b2330427dfbc1d27e886767cb5eff59b27f858490a35c0d9c3d4c57a23a6993d7cdbe16a532bd38f9f845c901c441ad4375b7843aff01184ef11266629d37a55a58a550acf70a4cfca9f9eadd3e6627b0f295571ff5cc370b1c390386509b9471765", 0x7b}, {&(0x7f0000001980)="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", 0x117}, {&(0x7f0000000600)="d9ff5053da1b839272ca396c269c15331c257e6175491fb5282c2388b066abb303eece66d10378351731aa663e0eb79f7654f27d52349f40594a29c9452cd7a79f70651ea966b91a75c14676832e3fefe2c5ad5b51423789aae8e7706d48573762ca2f39d82e016dad8364717b2c8d47219b33ff179e83b7aa18f12fc008562da81727828756cc0c69a6954acc5da009ad755e31d4bba6ee2148e2521474f7eefd7047", 0xa3}], 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000f8ff1b000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r4], 0x78, 0x81}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000780)="179f6b2e42c71e2d05acf829e01e4162c4414534e03718a30d69cbc9d906bba993013f3e2f55c323849c59eee149cf4b64ae46490109386fbd94582c0c84c391da4a336c71f347d490fb74991e8b7a1a43006149852eddfe85805715adf8ed5acd81c0ef3db2c95aac0835f065efd4d652900e98849b12b9491ec091540371d36d097e9cadaaf3381abaebe329409c761bf864f403819b314ede867031f73eb661590db6a26718224eabc03728b185999e8f117d1bcc2648eac6b2abcad7d773", 0xc0}, {&(0x7f0000000840)="680ceab4c97dbcd398ef42e98b3177eefdc83fb5d752470212d37a97bbac6235c60cdf129f87761b90cb2a8b672a3482ad6a8792292e2ed47a29a514f46091ad873cc7f304158c190e5d881c2f98ed81af9f0ae7827098a588866984901c3f9b8171d50adbc3b9b03d6ec124ca3c487ce2f6a213a61318a421df7ecff2220a27552b24a8009fb2788563f1ea651dd2d1b8135daedc2c5e99fa579858804e37ea9701a7915ebaeb0bd3e2d2fe65143128968f25f14fa6b0ac4ad01179ff6a373753e22a015f7334d4cf5964aeaed72321", 0xd0}, {&(0x7f0000000940)="d4484d9ac2b4de20f652d485a3b085bb3ded6bd213257617feb370c260fd9749143971b04b45336a8bee9453f3f95bc4e67df490869e8da7ff202e142b8e9dca9f4d19715f812ac63bda1d2f421a80e88aeaa80984c4be8137d3f236aaf76c5537877ebdcf17", 0x66}, {&(0x7f00000009c0)="88cdcc9e80080c6a7daa6bcd480fb70c080faa63f622a90ed1902257a093db9217e609591984c28f829b4834253fc711985512b94c4ef762d3816b14de4299f6519a4617db", 0x45}, {&(0x7f0000000a40)="9e96d4821b7e2b6956656ff6074fb3518be82b05029639b2010488001480318bb3892488791898fb1cc2936ccbce194a9ec885b5e5da9e7c9166537058ec534875ebff9f8d949f5ddeadb080395d1b99bff4cc60e0541df589f80a8f93eca53a6544c134e040593a395336ce29df62b9c36ec2e8c01e6371cc3530b29eaf60a4c042a7a1b1350740dd7ea3eb78956d7d309cb522daa2ff7b6c29adb1d9389102b908045589c2c63d56d28123469b1c19d9c82e7ab5bcfd38982cff", 0xbb}], 0x5, &(0x7f0000000b80)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, r4, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30, 0x20000040}}, {{&(0x7f0000000bc0)=@file={0xb71bf0c5fb3bd51d, './file2\x00'}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000c40)="861cf382628bd5e9cc6a4fabc1931fc9e712f633cf43b867170139638bb2694a", 0x20}, {&(0x7f0000000500)="9f1e67b4fb4b2eac0ee39d29175c5d14dda0d9f50e5878c323a6fe68b8d9e33567fafff95b8e90207e0c63927fe9d505ab5d061c39726c51", 0x38}, {&(0x7f0000000dc0)="82125bb54202e9eba42455c2bc8b3998da88700400ced0d170c173ae7902000000c985fe3ec7acf16c68b61c3064cb6041c3a1af00080000ceefb9c4ee2593ee71eef171c39d07ab15b5f7ff00"/92, 0x5c}, {&(0x7f0000000d00)="528f4aa60f3f0cda5054cbb933a9b81912dc7632a901d90a84acdb54f1cdbbb0a85b8dfd839673bdea367e84286253e352360bd8a57e33ac49e6c9faa43f1f075ab85a6db03a7f248bfcede4e50e1f5883f2d0ef870ae32342eb4e621989d7aa75f4a682441b63e715a619b46b044e55cfec249dfc8fcd097f5599b35e63cd9b2e744b0818dcdd1548896fa2cd3e1dc9505348a0bd62aeea4f437f54ecd6f5367f2916aa62d503ac77796c5705", 0xad}, {&(0x7f0000001840)="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", 0x135}, {&(0x7f0000000e40)="ef54e93b56c1bdc551d99933daa55c1edd93b57a711f1288abf98de4f16d49aba0110bba9c7847949b72543f87e6d90d2bade43b340091d82fb92fa33162f522836d12fc6348ff09a49ca4ba8c30086a33a6423d392c905177a7ac4b762a0516168ba323bcec7066041e17c170d775e1f3e1c994e91a539c117c60c2326dae36dee92be4224cdc6c31d3468e71ca0e87bbe9ee4e69", 0x95}, {&(0x7f0000000f00)="b6854aa5e058255a6bf9f7fc90b4ed9e87f4c459b3320a02dcd6c36cecf614744d60d2bfbdd61ff37321bbe9a06af980bc6e32c93fa10ae512ac981816a9069ddbfb9a", 0x43}, {&(0x7f0000000f80)="0ed3fcfda98877993a375b3b724d8c11fa31bbaa75e02a6801bc87056fd2c787130fd5b1b38d67a52c6a8f88e9", 0x2d}], 0x8, 0x0, 0x0, 0x48000}}, {{&(0x7f0000001040)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000280), 0x0, &(0x7f0000001440)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0x40000}}], 0x4, 0x400c0) socket$qrtr(0x2a, 0x2, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r5 = memfd_secret(0x0) ftruncate(r5, 0x5) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x11, r5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000100)={0x6, 0x401, 0x7, 0x2f, 0x1, 0x0, [{0x6, 0x800, 0x1000, '\x00', 0x204}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16, @ANYRES32], 0x44}}, 0x0) 1.463465214s ago: executing program 9 (id=1254): madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) userfaultfd(0x801) r0 = socket$alg(0x26, 0x5, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x18) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a471000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x803}) openat$tun(0xffffffffffffff9c, 0x0, 0x8302, 0x0) syz_open_dev$mouse(0x0, 0x8000000000000000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0xfe, 0x1}, [@RTA_DST={0x8, 0x1, {0x100}}]}, 0x24}}, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000240)}}], 0x2, 0x0, 0x0) 1.329584743s ago: executing program 5 (id=1255): openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x400000000000003, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x48}}, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x20, 0x0, 0x8010002}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00'], 0x20}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)={0x4}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40044) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 951.43793ms ago: executing program 5 (id=1256): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x61]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000e000000000000000000000000009500000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000180)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') readv(r6, &(0x7f0000000140)=[{&(0x7f0000000380)=""/198, 0xc6}], 0x1) socket(0x10, 0x3, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r7) sendmsg$NET_DM_CMD_START(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r8, 0x1}, 0x14}}, 0x0) 703.599934ms ago: executing program 3 (id=1257): r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x5, &(0x7f0000000240)=[{0x8, 0x86, 0x7, 0x1}, {0x40, 0x2, 0x8, 0x1}, {0xcb6, 0xfb, 0x5, 0x6}, {0x8000, 0x2, 0x80, 0x4}, {0x3e, 0x8, 0xf9, 0x48}]}, 0x10) write$binfmt_misc(r6, &(0x7f0000000100), 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x80, 0x16}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}}, 0x0) 703.061544ms ago: executing program 5 (id=1258): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() socket$alg(0x26, 0x5, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f00000020c0)={'syztnl0\x00', 0x0, 0x2f, 0x80, 0x3, 0x8000000, 0x5b, @mcast2, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x0, 0x20, 0x0, 0x8}}) socket(0x10, 0x803, 0x0) socket(0x1, 0x80804, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x388, 0xffffffff, 0xf8, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @loopback, 0x0, 0x0, 'veth0_to_team\x00', 'wlan0\x00', {}, {}, 0x73}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x5}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@inet=@SET1={0x28}}, {{@ip={@private, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@ah={{0x30}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e8) 550.129016ms ago: executing program 9 (id=1259): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$getsig(0x4202, r0, 0x6, &(0x7f0000000180)) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x3, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x7, 0x2800, 0x6, 0x2, 0xbb6, 0x0, 0x18, {0x8, 0xffffffff}, 0xd0, 0x9}}) 0s ago: executing program 0 (id=1260): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x4}, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2a400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ftruncate(r3, 0xc17a) timer_create(0x3, 0x0, &(0x7f0000000180)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ioctl$RTC_UIE_ON(r2, 0x7003) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000040)={0x25, 0x32, 0x0, 0xd, 0xa, 0xbffe, 0x2}) write$binfmt_aout(r1, &(0x7f00000008c0)=ANY=[], 0x5b) sendfile(r0, r1, &(0x7f0000000000)=0x3, 0x5) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r7}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ee527e004c3c000000e3ffffff00000000000000000000ff02000000000000000000000000000133000000000090"], 0x0) kernel console output (not intermixed with test programs): ? rcu_is_watching+0x12/0xc0 [ 433.274984][ T9514] ? preempt_count_add+0x76/0x150 [ 433.280003][ T9514] ? __pfx_lock_release+0x10/0x10 [ 433.285017][ T9514] ? trace_lock_acquire+0x146/0x1e0 [ 433.290216][ T9514] ? __fget_files+0x40/0x3a0 [ 433.294797][ T9514] ? lock_acquire+0x2f/0xb0 [ 433.299286][ T9514] ? __fget_files+0x40/0x3a0 [ 433.303867][ T9514] ? __fget_files+0x206/0x3a0 [ 433.308534][ T9514] security_file_ioctl+0x9b/0x240 [ 433.313556][ T9514] __x64_sys_ioctl+0xb7/0x200 [ 433.318229][ T9514] do_syscall_64+0xcd/0x250 [ 433.322728][ T9514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.328611][ T9514] RIP: 0033:0x7fe6f3f7e819 [ 433.333034][ T9514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.352639][ T9514] RSP: 002b:00007fe6f4e40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 433.361044][ T9514] RAX: ffffffffffffffda RBX: 00007fe6f4135fa0 RCX: 00007fe6f3f7e819 [ 433.369007][ T9514] RDX: 0000000000000000 RSI: 00000000c0405602 RDI: 0000000000000003 [ 433.376967][ T9514] RBP: 00007fe6f4e40090 R08: 0000000000000000 R09: 0000000000000000 [ 433.384927][ T9514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.392885][ T9514] R13: 0000000000000000 R14: 00007fe6f4135fa0 R15: 00007ffcb74f6f28 [ 433.400849][ T9514] [ 433.405554][ T9514] ERROR: Out of memory at tomoyo_realpath_from_path. [ 433.406140][ T5889] usbhid 1-1:0.0: can't add hid device: -71 [ 433.419268][ T5889] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 433.443482][ T5889] usb 1-1: USB disconnect, device number 30 [ 433.575851][ T29] audit: type=1400 audit(1732566382.896:1162): avc: denied { connect } for pid=9523 comm="syz.0.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 433.866941][ T29] audit: type=1400 audit(1732566383.116:1163): avc: denied { bind } for pid=9523 comm="syz.0.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 433.888208][ T29] audit: type=1400 audit(1732566383.196:1164): avc: denied { setopt } for pid=9523 comm="syz.0.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 433.909460][ T9525] netlink: 'syz.0.935': attribute type 10 has an invalid length. [ 433.977090][ T9532] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 434.249698][ T9536] netlink: 'syz.0.935': attribute type 10 has an invalid length. [ 434.284658][ T9525] team0: Failed to send options change via netlink (err -105) [ 434.292368][ T9525] team0: Port device netdevsim0 added [ 434.337196][ T5892] usbhid 5-1:0.0: can't add hid device: -71 [ 434.352116][ T5892] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 434.362379][ T5892] usb 5-1: USB disconnect, device number 24 [ 434.364353][ T9536] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 434.383336][ T9536] team0: Failed to send options change via netlink (err -105) [ 434.392017][ T9536] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 434.401350][ T9536] team0: Port device netdevsim0 removed [ 434.409170][ T9536] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 439.952058][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.958387][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.513808][ T29] audit: type=1400 audit(1732566393.736:1165): avc: denied { map } for pid=9546 comm="syz.2.941" path="pipe:[22975]" dev="pipefs" ino=22975 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 446.151090][ T5890] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 446.210280][ T25] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 446.418697][ T5890] usb 3-1: config 0 has an invalid interface number: 159 but max is 0 [ 446.427180][ T5890] usb 3-1: config 0 has no interface number 0 [ 446.448447][ T5890] usb 3-1: config 0 interface 159 altsetting 0 endpoint 0x7 has an invalid bInterval 249, changing to 11 [ 446.463380][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 446.485020][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.587667][ T5890] usb 3-1: New USB device found, idVendor=07b8, idProduct=9271, bcdDevice=68.1f [ 446.658517][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 446.674907][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.727253][ T5890] usb 3-1: Product: syz [ 446.734003][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.750028][ T5890] usb 3-1: Manufacturer: syz [ 446.768552][ T5890] usb 3-1: SerialNumber: syz [ 446.780107][ T25] usb 5-1: config 0 descriptor?? [ 446.793923][ T29] audit: type=1400 audit(1732566396.126:1166): avc: denied { ioctl } for pid=9576 comm="syz.6.950" path="socket:[23006]" dev="sockfs" ino=23006 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 446.799774][ T5890] usb 3-1: config 0 descriptor?? [ 446.876598][ T5890] usb 3-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 447.134976][ T9581] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 447.190053][ T29] audit: type=1400 audit(1732566396.496:1167): avc: denied { read append } for pid=9552 comm="syz.2.944" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 447.219876][ T5890] usb 3-1: USB disconnect, device number 30 [ 447.228593][ T29] audit: type=1400 audit(1732566396.496:1168): avc: denied { open } for pid=9552 comm="syz.2.944" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 448.117327][ T9601] xfrm1: entered promiscuous mode [ 448.226595][ T29] audit: type=1400 audit(1732566397.516:1169): avc: denied { open } for pid=9595 comm="syz.6.952" path="/dev/ptyr1" dev="devtmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 448.230291][ T5889] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 448.250395][ T29] audit: type=1400 audit(1732566397.526:1170): avc: denied { ioctl } for pid=9595 comm="syz.6.952" path="/dev/ptyr1" dev="devtmpfs" ino=136 ioctlcmd=0x5431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 448.412264][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 448.418257][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 448.421588][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 448.442082][ T25] usb 5-1: USB disconnect, device number 25 [ 448.448219][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.449662][ T29] audit: type=1400 audit(1732566397.776:1171): avc: denied { setopt } for pid=9604 comm="syz.0.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 448.458190][ T5889] usb 2-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 448.486679][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.496444][ T5889] usb 2-1: config 0 descriptor?? [ 448.742709][ T9613] xt_l2tp: v2 doesn't support IP mode [ 448.758413][ T9613] xt_TPROXY: Can be used only with -p tcp or -p udp [ 450.399228][ T5889] usbhid 2-1:0.0: can't add hid device: -71 [ 450.438556][ T5889] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 450.458566][ T5889] usb 2-1: USB disconnect, device number 22 [ 454.380260][ T29] audit: type=1400 audit(1732566403.707:1172): avc: denied { bind } for pid=9614 comm="syz.0.958" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 454.402385][ T29] audit: type=1400 audit(1732566403.707:1173): avc: denied { node_bind } for pid=9614 comm="syz.0.958" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 454.693921][ T9621] VFS: could not find a valid V7 on nullb0. [ 454.704569][ T29] audit: type=1400 audit(1732566404.037:1174): avc: denied { ioctl } for pid=9614 comm="syz.0.958" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 455.562253][ T9624] mmap: syz.4.961 (9624): VmData 37597184 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 455.588618][ T29] audit: type=1400 audit(1732566404.137:1175): avc: denied { getopt } for pid=9615 comm="syz.2.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 455.775946][ T9635] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 455.929691][ T9639] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 456.608278][ T9639] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 457.743212][ T9648] CUSE: unknown device info "KJ éH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®,°ð<Ö_e¤FÀÆ" [ 458.011469][ T9648] CUSE: unknown device info "3ÜŸ•,²¥Ì˜õ" [ 458.018818][ T9648] CUSE: DEVNAME unspecified [ 458.064902][ T29] audit: type=1400 audit(1732566407.397:1176): avc: denied { setattr } for pid=9656 comm="syz.1.968" name="NETLINK" dev="sockfs" ino=23181 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 458.580219][ T5890] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 458.740268][ T5890] usb 1-1: Using ep0 maxpacket: 32 [ 458.750445][ T5890] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 458.759238][ T5890] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 458.773661][ T5890] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 458.785076][ T5890] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 458.796742][ T5890] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 458.810279][ T5890] usb 1-1: config 0 interface 0 has no altsetting 0 [ 458.818677][ T5890] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 458.829298][ T5890] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 458.852291][ T5890] usb 1-1: Product: syz [ 458.864454][ T5889] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 458.866998][ T5890] usb 1-1: Manufacturer: syz [ 458.890078][ T5890] usb 1-1: SerialNumber: syz [ 458.941275][ T5890] usb 1-1: config 0 descriptor?? [ 458.948675][ T5890] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 458.970218][ T5890] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 459.021445][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.035821][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.054494][ T5889] usb 2-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 459.071198][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.111045][ T5889] usb 2-1: config 0 descriptor?? [ 459.180033][ T9663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.189286][ T9663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.384619][ T29] audit: type=1400 audit(1732566408.667:1177): avc: denied { setattr } for pid=9662 comm="syz.0.969" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 459.534243][ T29] audit: type=1400 audit(1732566408.687:1178): avc: denied { watch watch_reads } for pid=9671 comm="syz.4.973" path="/proc/648/net/udplite6" dev="proc" ino=4026533240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 459.559994][ T29] audit: type=1400 audit(1732566408.767:1179): avc: denied { write } for pid=9662 comm="syz.0.969" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 459.581351][ T29] audit: type=1400 audit(1732566408.767:1180): avc: denied { open } for pid=9662 comm="syz.0.969" path="/190/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 459.596594][ T9663] ldusb 1-1:0.0: Couldn't submit interrupt_in_urb -90 [ 459.607716][ T29] audit: type=1400 audit(1732566408.857:1181): avc: denied { write } for pid=9662 comm="syz.0.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 459.632818][ T5889] elo 0003:04E7:0030.0011: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.1-1/input0 [ 459.646449][ T29] audit: type=1400 audit(1732566408.917:1182): avc: denied { nlmsg_write } for pid=9662 comm="syz.0.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 459.667198][ T29] audit: type=1400 audit(1732566408.917:1183): avc: denied { name_connect } for pid=9662 comm="syz.0.969" dest=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 459.691810][ T5889] usb 1-1: USB disconnect, device number 31 [ 459.698730][ T5889] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 459.804369][ T29] audit: type=1400 audit(1732566409.137:1184): avc: denied { setopt } for pid=9678 comm="syz.4.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 459.826915][ T29] audit: type=1400 audit(1732566409.157:1185): avc: denied { getopt } for pid=9678 comm="syz.4.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 459.868899][ T5998] usb 2-1: USB disconnect, device number 23 [ 459.963967][ T9686] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 460.254773][ T29] audit: type=1400 audit(1732566409.587:1186): avc: denied { unmount } for pid=5841 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 460.902458][ T9701] loop8: detected capacity change from 0 to 7 [ 460.909319][ T9701] Dev loop8: unable to read RDB block 7 [ 460.915118][ T9701] loop8: AHDI p1 p3 p4 [ 460.919382][ T9701] loop8: partition table partially beyond EOD, truncated [ 460.926807][ T9701] loop8: p1 start 975770946 is beyond EOD, truncated [ 460.933869][ T9701] loop8: p3 start 6514546 is beyond EOD, truncated [ 461.124147][ T9706] ebt_limit: overflow, try lower: 0/0 [ 462.259577][ T9717] FAULT_INJECTION: forcing a failure. [ 462.259577][ T9717] name failslab, interval 1, probability 0, space 0, times 0 [ 462.272350][ T9717] CPU: 1 UID: 0 PID: 9717 Comm: syz.1.982 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 462.282597][ T9717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 462.292657][ T9717] Call Trace: [ 462.295931][ T9717] [ 462.298856][ T9717] dump_stack_lvl+0x16c/0x1f0 [ 462.303539][ T9717] should_fail_ex+0x497/0x5b0 [ 462.308225][ T9717] ? fs_reclaim_acquire+0xae/0x150 [ 462.313338][ T9717] should_failslab+0xc2/0x120 [ 462.318018][ T9717] __kmalloc_noprof+0xcb/0x400 [ 462.322786][ T9717] copy_splice_read+0x1a8/0xb90 [ 462.327647][ T9717] ? __pfx_copy_splice_read+0x10/0x10 [ 462.333027][ T9717] ? lock_release+0x4e2/0x6f0 [ 462.337715][ T9717] ? splice_direct_to_actor+0x346/0xa40 [ 462.343281][ T9717] ? splice_direct_to_actor+0x346/0xa40 [ 462.348833][ T9717] ? lock_acquire+0x2f/0xb0 [ 462.353337][ T9717] ? splice_direct_to_actor+0x346/0xa40 [ 462.358888][ T9717] ? __pfx_copy_splice_read+0x10/0x10 [ 462.364264][ T9717] do_splice_read+0x282/0x370 [ 462.368957][ T9717] splice_direct_to_actor+0x2a4/0xa40 [ 462.374336][ T9717] ? __pfx_direct_splice_actor+0x10/0x10 [ 462.379970][ T9717] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 462.385870][ T9717] ? lock_release+0x4e2/0x6f0 [ 462.390549][ T9717] do_splice_direct+0x178/0x250 [ 462.395411][ T9717] ? __pfx_do_splice_direct+0x10/0x10 [ 462.397368][ T9709] ebt_limit: overflow, try lower: 0/0 [ 462.400782][ T9717] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 462.400815][ T9717] do_sendfile+0xaed/0xe30 [ 462.400833][ T9717] ? __pfx_do_sendfile+0x10/0x10 [ 462.421371][ T9717] ? __sanitizer_cov_trace_const_cmp4+0x4/0x20 [ 462.427523][ T9717] __x64_sys_sendfile64+0x1da/0x220 [ 462.432713][ T9717] ? ksys_write+0x1ba/0x250 [ 462.437205][ T9717] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 462.442917][ T9717] ? rcu_is_watching+0x12/0xc0 [ 462.447673][ T9717] ? rcu_is_watching+0x12/0xc0 [ 462.452430][ T9717] do_syscall_64+0xcd/0x250 [ 462.456927][ T9717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.462812][ T9717] RIP: 0033:0x7fa40c97e819 [ 462.467211][ T9717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.486805][ T9717] RSP: 002b:00007fa40d807038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 462.495208][ T9717] RAX: ffffffffffffffda RBX: 00007fa40cb36160 RCX: 00007fa40c97e819 [ 462.503172][ T9717] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000008 [ 462.511130][ T9717] RBP: 00007fa40d807090 R08: 0000000000000000 R09: 0000000000000000 [ 462.519088][ T9717] R10: 4000000000010046 R11: 0000000000000246 R12: 0000000000000001 [ 462.527045][ T9717] R13: 0000000000000000 R14: 00007fa40cb36160 R15: 00007ffd05cca9d8 [ 462.535009][ T9717] [ 462.764970][ T29] audit: type=1400 audit(1732566412.097:1187): avc: denied { bind } for pid=9719 comm="syz.4.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 462.903280][ T9728] fuse: Bad value for 'fd' [ 463.118606][ T9732] xt_l2tp: v2 doesn't support IP mode [ 463.126320][ T9731] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 463.394589][ T9731] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 463.585779][ T9743] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 464.487128][ T9751] FAULT_INJECTION: forcing a failure. [ 464.487128][ T9751] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 464.501584][ T9751] CPU: 0 UID: 0 PID: 9751 Comm: syz.1.993 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 464.511857][ T9751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 464.522010][ T9751] Call Trace: [ 464.525291][ T9751] [ 464.528227][ T9751] dump_stack_lvl+0x16c/0x1f0 [ 464.532930][ T9751] should_fail_ex+0x497/0x5b0 [ 464.537633][ T9751] _copy_from_iter+0x2a1/0x1560 [ 464.542508][ T9751] ? trace_lock_acquire+0x146/0x1e0 [ 464.547726][ T9751] ? __alloc_skb+0x1fe/0x380 [ 464.552331][ T9751] ? __virt_addr_valid+0x1a4/0x590 [ 464.557456][ T9751] ? __pfx__copy_from_iter+0x10/0x10 [ 464.562763][ T9751] ? __virt_addr_valid+0x1a4/0x590 [ 464.567894][ T9751] ? __virt_addr_valid+0x5e/0x590 [ 464.572963][ T9751] ? __phys_addr_symbol+0x30/0x80 [ 464.577995][ T9751] ? __check_object_size+0x488/0x710 [ 464.583294][ T9751] netlink_sendmsg+0x813/0xd70 [ 464.588076][ T9751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 464.593372][ T9751] ____sys_sendmsg+0xaaf/0xc90 [ 464.598131][ T9751] ? copy_msghdr_from_user+0x10b/0x160 [ 464.603604][ T9751] ? __pfx_____sys_sendmsg+0x10/0x10 [ 464.608886][ T9751] ? rcu_is_watching+0x12/0xc0 [ 464.613650][ T9751] ? lock_release+0x4e2/0x6f0 [ 464.618314][ T9751] ? get_pid_task+0xfc/0x250 [ 464.622893][ T9751] ___sys_sendmsg+0x135/0x1e0 [ 464.627566][ T9751] ? get_pid_task+0x35/0x250 [ 464.632163][ T9751] ? __pfx____sys_sendmsg+0x10/0x10 [ 464.637357][ T9751] ? lock_release+0x4e2/0x6f0 [ 464.642023][ T9751] ? __pfx_lock_release+0x10/0x10 [ 464.647041][ T9751] ? trace_lock_acquire+0x146/0x1e0 [ 464.652240][ T9751] ? __fget_files+0x206/0x3a0 [ 464.656905][ T9751] __sys_sendmsg+0x16e/0x220 [ 464.661480][ T9751] ? __pfx___sys_sendmsg+0x10/0x10 [ 464.666582][ T9751] ? rcu_is_watching+0x12/0xc0 [ 464.671337][ T9751] ? rcu_is_watching+0x12/0xc0 [ 464.676093][ T9751] do_syscall_64+0xcd/0x250 [ 464.680586][ T9751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.686474][ T9751] RIP: 0033:0x7fa40c97e819 [ 464.690882][ T9751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.710486][ T9751] RSP: 002b:00007fa40d849038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 464.718890][ T9751] RAX: ffffffffffffffda RBX: 00007fa40cb35fa0 RCX: 00007fa40c97e819 [ 464.726846][ T9751] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 464.734814][ T9751] RBP: 00007fa40d849090 R08: 0000000000000000 R09: 0000000000000000 [ 464.742770][ T9751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.750811][ T9751] R13: 0000000000000000 R14: 00007fa40cb35fa0 R15: 00007ffd05cca9d8 [ 464.758778][ T9751] [ 464.761802][ C0] vkms_vblank_simulate: vblank timer overrun [ 464.894566][ T5150] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 464.957395][ T5150] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 464.996023][ T5150] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 465.028913][ T5150] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 465.058773][ T5150] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 465.066190][ T5150] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 465.657795][ T9753] chnl_net:caif_netlink_parms(): no params data found [ 465.764265][ T9782] capability: warning: `syz.4.996' uses 32-bit capabilities (legacy support in use) [ 465.774414][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 465.774427][ T29] audit: type=1400 audit(1732566415.107:1192): avc: denied { ioctl } for pid=9760 comm="syz.4.996" path="/dev/sg0" dev="devtmpfs" ino=741 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 465.806182][ C0] vkms_vblank_simulate: vblank timer overrun [ 465.851743][ T9753] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.870271][ T5998] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 465.880090][ T9753] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.887338][ T9753] bridge_slave_0: entered allmulticast mode [ 465.944344][ T9753] bridge_slave_0: entered promiscuous mode [ 465.951624][ T9753] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.958720][ T9753] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.966104][ T9753] bridge_slave_1: entered allmulticast mode [ 465.972808][ T9753] bridge_slave_1: entered promiscuous mode [ 466.231971][ T9753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.523394][ T5998] usb 3-1: Using ep0 maxpacket: 16 [ 466.550181][ T5998] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.564454][ T9753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.574644][ T5998] usb 3-1: config 0 interface 0 has no altsetting 0 [ 467.194904][ T9798] xt_l2tp: v2 doesn't support IP mode [ 467.251600][ T5998] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 467.261735][ T5998] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.343800][ T5998] usb 3-1: config 0 descriptor?? [ 467.350286][ T5150] Bluetooth: hci5: command tx timeout [ 467.505634][ T9753] team0: Port device team_slave_0 added [ 467.582538][ T9753] team0: Port device team_slave_1 added [ 467.750669][ T9753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.757667][ T9753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.786521][ T9753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.798475][ T9753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.805592][ T9753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.831744][ T9753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.853141][ T5998] corsair 0003:1B1C:1B34.0012: unknown main item tag 0x0 [ 467.860260][ T5998] corsair 0003:1B1C:1B34.0012: unknown main item tag 0x0 [ 467.867642][ T5998] corsair 0003:1B1C:1B34.0012: unknown main item tag 0x0 [ 467.875249][ T5998] corsair 0003:1B1C:1B34.0012: unknown main item tag 0x0 [ 467.882615][ T5998] corsair 0003:1B1C:1B34.0012: item fetching failed at offset 4/5 [ 467.891149][ T5998] corsair 0003:1B1C:1B34.0012: parse failed [ 467.897085][ T5998] corsair 0003:1B1C:1B34.0012: probe with driver corsair failed with error -22 [ 467.934079][ T9810] 9pnet_fd: Insufficient options for proto=fd [ 467.936119][ T9753] hsr_slave_0: entered promiscuous mode [ 467.949834][ T9753] hsr_slave_1: entered promiscuous mode [ 467.958864][ T9753] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 467.966775][ T9753] Cannot create hsr debugfs directory [ 468.044016][ T9753] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 468.057511][ T9753] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 468.070594][ T9753] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 468.081405][ T9753] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 468.126479][ T9753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.138802][ T9753] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.218677][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.225819][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.283444][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.290562][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.736232][ T9753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.114771][ T9753] veth0_vlan: entered promiscuous mode [ 469.130744][ T9753] veth1_vlan: entered promiscuous mode [ 469.688326][ T5150] Bluetooth: hci5: command tx timeout [ 469.690010][ T9753] veth0_macvtap: entered promiscuous mode [ 469.714731][ T9753] veth1_macvtap: entered promiscuous mode [ 469.770714][ T5890] usb 3-1: USB disconnect, device number 31 [ 469.809381][ T9753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.830544][ T9753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.840494][ T9753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.850949][ T9753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.861035][ T9753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.871823][ T9753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.881801][ T9753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.892311][ T9753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.902382][ T9753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.913199][ T9753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.923928][ T9753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.936578][ T9753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.947522][ T9753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.958278][ T9753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.961891][ T25] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 469.969117][ T9753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.986340][ T9753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.997114][ T9753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.007147][ T9753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.018844][ T9753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.028812][ T9753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.039590][ T9753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.051000][ T9753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 470.061524][ T9753] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.070796][ T9753] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.079486][ T9753] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.088656][ T9753] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.121768][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.131498][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 470.135106][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.150250][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.160015][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 470.169694][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.182720][ T25] usb 5-1: config 0 descriptor?? [ 470.184795][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.195929][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.710317][ T5150] Bluetooth: hci5: command tx timeout [ 473.790262][ T5150] Bluetooth: hci5: command tx timeout [ 475.231544][ T25] usbhid 5-1:0.0: can't add hid device: -32 [ 475.238297][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 479.874608][ T5889] usb 5-1: USB disconnect, device number 26 [ 480.696468][ T9863] xt_l2tp: v2 doesn't support IP mode [ 480.974953][ T9867] No source specified [ 480.983395][ T29] audit: type=1400 audit(1732566430.317:1193): avc: denied { write } for pid=9857 comm="syz.7.988" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 481.110237][ T29] audit: type=1400 audit(1732566430.437:1194): avc: denied { ioctl } for pid=9857 comm="syz.7.988" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 481.200338][ T25] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 481.319544][ T29] audit: type=1400 audit(1732566430.437:1195): avc: denied { ioctl } for pid=9857 comm="syz.7.988" path="socket:[25064]" dev="sockfs" ino=25064 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 481.372777][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 481.392228][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.402743][ T25] usb 3-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 481.418399][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.460642][ T25] usb 3-1: config 0 descriptor?? [ 481.725731][ T9877] ebt_limit: overflow, try lower: 0/0 [ 481.923934][ T5889] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 482.070257][ T5889] usb 1-1: device descriptor read/64, error -71 [ 482.283552][ T9894] team0: Cannot enslave team device to itself [ 482.322406][ T5889] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 483.040541][ T25] usbhid 3-1:0.0: can't add hid device: -71 [ 483.051285][ T25] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 483.077151][ T25] usb 3-1: USB disconnect, device number 32 [ 483.147273][ T9909] xt_l2tp: v2 doesn't support IP mode [ 483.202645][ T5889] usb 1-1: device descriptor read/64, error -71 [ 483.311025][ T5889] usb usb1-port1: attempt power cycle [ 483.394860][ T9916] xt_CT: You must specify a L4 protocol and not use inversions on it [ 483.700342][ T25] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 483.790272][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 483.873016][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.885888][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.896098][ T25] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 483.905372][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.915705][ T25] usb 3-1: config 0 descriptor?? [ 483.923317][ T9919] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 483.937839][ T5889] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 484.078227][ T5889] usb 1-1: device descriptor read/8, error -71 [ 484.085730][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 484.096020][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 484.104964][ T9] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 484.114604][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.130527][ T9] usb 2-1: config 0 descriptor?? [ 484.495276][ T25] hid-led 0003:1D34:000A.0013: unknown main item tag 0x0 [ 484.504692][ T25] hid-led 0003:1D34:000A.0013: unknown main item tag 0x0 [ 484.513048][ T5889] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 484.519014][ T25] hid-led 0003:1D34:000A.0013: unknown main item tag 0x0 [ 484.528098][ T25] hid-led 0003:1D34:000A.0013: unknown main item tag 0x0 [ 484.535263][ T25] hid-led 0003:1D34:000A.0013: unknown main item tag 0x0 [ 484.578919][ T5889] usb 1-1: device descriptor read/8, error -71 [ 484.683799][ T9922] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1033'. [ 484.701271][ T5889] usb usb1-port1: unable to enumerate USB device [ 484.705805][ T25] hid-led 0003:1D34:000A.0013: probe with driver hid-led failed with error -71 [ 484.723562][ T25] usb 3-1: USB disconnect, device number 33 [ 485.304614][ T9931] ebt_limit: overflow, try lower: 0/0 [ 485.346621][ T9912] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1030'. [ 485.449515][ T9] Bluetooth: Can't get version to change to load ram patch err [ 485.460358][ T9] Bluetooth: Loading sysconfig file failed [ 485.470529][ T9] ath3k 2-1:0.0: probe with driver ath3k failed with error -71 [ 485.637460][ T9] usb 2-1: USB disconnect, device number 24 [ 495.839570][ T9938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1037'. [ 495.891651][ T9950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1039'. [ 495.915529][ T29] audit: type=1400 audit(1732566445.247:1196): avc: denied { write } for pid=9954 comm="syz.1.1040" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 496.600328][ T931] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 496.780280][ T931] usb 1-1: Using ep0 maxpacket: 32 [ 496.787992][ T931] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 496.802198][ T931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 496.878359][ T9969] xt_l2tp: v2 doesn't support IP mode [ 496.893298][ T931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 496.985983][ T931] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 497.035523][ T931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.058577][ T931] usb 1-1: config 0 descriptor?? [ 497.079376][ T9961] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 497.101309][ T931] hub 1-1:0.0: USB hub found [ 497.204581][ T9975] syz.4.1047[9975] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 497.204660][ T9975] syz.4.1047[9975] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 497.216821][ T9975] syz.4.1047[9975] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 497.233848][ T9973] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 498.652199][ T29] audit: type=1400 audit(1732566447.967:1197): avc: denied { create } for pid=9960 comm="syz.0.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 499.139057][ T931] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 499.212754][ T9996] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 500.113223][T10005] ebt_limit: overflow, try lower: 0/0 [ 500.186904][ T931] usbhid 1-1:0.0: can't add hid device: -71 [ 500.193543][ T931] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 500.221201][ T931] usb 1-1: USB disconnect, device number 36 [ 501.029267][ T25] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 501.210248][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 501.216561][ T25] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 501.224856][ T25] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 501.237339][ T25] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 501.249171][ T25] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 501.259173][ T25] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 501.272373][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 501.280991][ T25] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 501.290004][ T25] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 501.298523][ T25] usb 5-1: Product: syz [ 501.302987][ T25] usb 5-1: Manufacturer: syz [ 501.307587][ T25] usb 5-1: SerialNumber: syz [ 501.313213][ T25] usb 5-1: config 0 descriptor?? [ 501.319535][ T25] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 501.329476][ T25] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 501.391563][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.397855][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.137386][ T5889] usb 5-1: USB disconnect, device number 27 [ 511.174298][T10014] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 511.190104][ T5889] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 511.310032][ T29] audit: type=1400 audit(1732566460.637:1198): avc: denied { name_connect } for pid=10015 comm="syz.0.1055" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 511.810851][ T29] audit: type=1400 audit(1732566461.117:1199): avc: denied { connect } for pid=10029 comm="syz.1.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 511.914994][T10036] libceph: resolve '0.' (ret=-3): failed [ 512.667073][ T5998] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 513.015968][ T66] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.049784][T10042] xt_l2tp: v2 doesn't support IP mode [ 513.061484][T10042] xt_TPROXY: Can be used only with -p tcp or -p udp [ 513.100243][ T5998] usb 1-1: Using ep0 maxpacket: 32 [ 513.107257][ T5998] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 513.117470][ T5998] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 513.134036][ T5998] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 513.134670][ T66] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.145251][ T5998] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 513.145279][ T5998] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 513.474856][T10049] xt_CT: You must specify a L4 protocol and not use inversions on it [ 513.654130][ T5998] usb 1-1: config 0 interface 0 has no altsetting 0 [ 513.674432][ T5998] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 513.684023][ T5998] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 513.695028][ T5998] usb 1-1: Product: syz [ 513.699325][ T5998] usb 1-1: Manufacturer: syz [ 513.706060][ T66] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.717933][ T5998] usb 1-1: SerialNumber: syz [ 513.723462][ T5998] usb 1-1: config 0 descriptor?? [ 513.729627][ T5998] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 513.743177][ T5998] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 513.754249][ T66] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.170276][ T66] bridge_slave_1: left allmulticast mode [ 514.175958][ T66] bridge_slave_1: left promiscuous mode [ 514.188028][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.191955][T10028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.204069][T10028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.212198][ T66] bridge_slave_0: left allmulticast mode [ 514.218014][ T66] bridge_slave_0: left promiscuous mode [ 514.224697][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.234650][ T5890] usb 1-1: USB disconnect, device number 37 [ 514.241830][ T5890] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 514.458526][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 514.467263][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 514.474955][ T25] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 514.474986][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 514.490878][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 514.529923][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 514.660670][T10066] xt_l2tp: v2 doesn't support IP mode [ 514.684222][T10066] xt_TPROXY: Can be used only with -p tcp or -p udp [ 514.734486][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.774155][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 514.782887][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 514.790119][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 514.801750][ T66] bond0 (unregistering): Released all slaves [ 514.868547][ T25] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 514.876845][ T25] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 514.888071][ T25] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 514.899388][ T25] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 514.909496][ T25] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 514.922895][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 514.934922][ T25] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 514.944301][ T25] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 514.952910][ T25] usb 5-1: Product: syz [ 514.961744][ T25] usb 5-1: Manufacturer: syz [ 514.968019][ T25] usb 5-1: SerialNumber: syz [ 514.977561][T10075] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 515.049918][T10062] chnl_net:caif_netlink_parms(): no params data found [ 515.089683][ T25] usb 5-1: config 0 descriptor?? [ 515.123007][ T25] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 515.142801][ T25] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 515.635201][T10057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.673688][T10057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.686355][ T66] hsr_slave_0: left promiscuous mode [ 515.716886][ T66] hsr_slave_1: left promiscuous mode [ 515.724302][ T29] audit: type=1400 audit(1732566465.057:1200): avc: denied { create } for pid=10092 comm="syz.7.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 515.744508][ T29] audit: type=1400 audit(1732566465.077:1201): avc: denied { ioctl } for pid=10092 comm="syz.7.1068" path="socket:[25539]" dev="sockfs" ino=25539 ioctlcmd=0x8938 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 515.773896][ T25] usb 5-1: USB disconnect, device number 28 [ 515.774847][ T29] audit: type=1400 audit(1732566465.077:1202): avc: denied { ioctl } for pid=10092 comm="syz.7.1068" path="socket:[25541]" dev="sockfs" ino=25541 ioctlcmd=0xf502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 515.798662][ T25] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 515.827212][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.834961][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 515.845931][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 515.853656][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 515.865136][ T66] veth1_macvtap: left promiscuous mode [ 515.871075][ T66] veth0_macvtap: left promiscuous mode [ 515.876786][ T66] veth1_vlan: left promiscuous mode [ 515.979773][ T29] audit: type=1400 audit(1732566465.307:1203): avc: denied { create } for pid=10099 comm="syz.0.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 516.005297][T10100] ieee802154 phy0 wpan0: encryption failed: -22 [ 516.010414][ T29] audit: type=1400 audit(1732566465.337:1204): avc: denied { write } for pid=10099 comm="syz.0.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 516.048627][ T66] team0 (unregistering): Port device team_slave_1 removed [ 516.060128][ T66] team0 (unregistering): Port device team_slave_0 removed [ 516.089000][T10102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1069'. [ 516.152115][T10100] 8021q: adding VLAN 0 to HW filter on device bond1 [ 516.159652][T10100] bond0: (slave bond1): Enslaving as an active interface with an up link [ 516.169084][T10102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.177441][T10102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.185882][T10102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.195636][T10102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 516.218060][T10062] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.225365][T10062] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.232720][T10062] bridge_slave_0: entered allmulticast mode [ 516.239215][T10062] bridge_slave_0: entered promiscuous mode [ 516.247891][T10062] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.255349][T10062] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.264707][T10062] bridge_slave_1: entered allmulticast mode [ 516.271646][T10062] bridge_slave_1: entered promiscuous mode [ 516.286829][T10062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 516.298774][T10062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 516.319661][T10062] team0: Port device team_slave_0 added [ 516.329138][T10062] team0: Port device team_slave_1 added [ 516.374157][T10062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.389032][T10062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.429644][T10062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.448916][T10062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.456582][T10062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.483409][T10062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.528055][T10062] hsr_slave_0: entered promiscuous mode [ 516.542449][T10062] hsr_slave_1: entered promiscuous mode [ 516.554163][T10062] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 516.562330][T10062] Cannot create hsr debugfs directory [ 516.655075][T10062] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 516.666058][T10062] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 516.675086][T10062] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 516.686825][T10062] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 516.737119][T10062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.754585][T10062] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.765287][ T6698] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.772425][ T6698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.796625][T10062] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 516.808801][T10062] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 516.823657][ T6698] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.830772][ T6698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.838138][ T5150] Bluetooth: hci3: command tx timeout [ 516.941242][T10062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.072050][T10062] veth0_vlan: entered promiscuous mode [ 517.083463][T10062] veth1_vlan: entered promiscuous mode [ 517.105042][T10062] veth0_macvtap: entered promiscuous mode [ 517.116387][T10062] veth1_macvtap: entered promiscuous mode [ 517.131750][T10062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.143703][T10062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.156610][T10062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.167756][T10062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.177806][T10062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.188434][T10062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.198300][T10062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.208880][T10062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.223271][T10062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.239871][T10062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.250625][T10062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.261136][T10062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.271637][T10062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.281547][T10062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.292128][T10062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.302109][T10062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.312593][T10062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.323452][T10062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.336344][T10062] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.345274][T10062] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.354271][T10062] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.364053][T10062] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.399533][ T3446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.408361][ T3446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.427321][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.435442][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.910284][ T5150] Bluetooth: hci3: command tx timeout [ 520.990301][ T5150] Bluetooth: hci3: command tx timeout [ 523.071051][ T5150] Bluetooth: hci3: command tx timeout [ 526.870643][T10255] xt_CT: You must specify a L4 protocol and not use inversions on it [ 527.211528][T10260] xt_CT: You must specify a L4 protocol and not use inversions on it [ 527.481643][T10261] xt_CT: You must specify a L4 protocol and not use inversions on it [ 528.070278][ T25] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 528.152610][T10275] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 529.159182][ T25] usb 8-1: Using ep0 maxpacket: 8 [ 529.165670][ T25] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.176618][ T25] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.190762][ T25] usb 8-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 529.200800][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.209116][ T25] usb 8-1: Product: syz [ 529.213345][ T25] usb 8-1: Manufacturer: syz [ 529.217951][ T25] usb 8-1: SerialNumber: syz [ 529.312118][ T29] audit: type=1400 audit(1732566478.627:1205): avc: denied { append } for pid=10286 comm="syz.0.1081" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 529.335441][ T29] audit: type=1400 audit(1732566478.647:1206): avc: denied { map } for pid=10286 comm="syz.0.1081" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 529.490573][ T29] audit: type=1400 audit(1732566478.807:1207): avc: denied { write } for pid=10256 comm="syz.7.1076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 529.511577][ T29] audit: type=1400 audit(1732566478.807:1208): avc: denied { nlmsg_read } for pid=10256 comm="syz.7.1076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 529.570471][ T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 529.822556][ T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 529.830043][ T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 529.840985][ T29] audit: type=1400 audit(1732566479.177:1209): avc: denied { mount } for pid=10292 comm="syz.4.1082" name="/" dev="ramfs" ino=26845 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 529.912607][ T29] audit: type=1400 audit(1732566479.207:1210): avc: denied { create } for pid=10292 comm="syz.4.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 529.936198][ T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 529.944016][ T54] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 529.970356][ T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 530.011250][ T29] audit: type=1400 audit(1732566479.207:1211): avc: denied { getopt } for pid=10292 comm="syz.4.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 530.101939][ T25] usbhid 8-1:1.0: can't add hid device: -22 [ 530.113474][ T25] usbhid 8-1:1.0: probe with driver usbhid failed with error -22 [ 530.140209][ T931] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 530.148390][ T25] usb 8-1: USB disconnect, device number 2 [ 530.157648][ T29] audit: type=1400 audit(1732566479.487:1212): avc: denied { read } for pid=10292 comm="syz.4.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 530.201836][T10298] chnl_net:caif_netlink_parms(): no params data found [ 530.285938][T10298] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.293196][T10298] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.301731][ T931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 530.313489][T10298] bridge_slave_0: entered allmulticast mode [ 530.322101][T10298] bridge_slave_0: entered promiscuous mode [ 530.333192][ T931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.345654][T10298] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.357038][ T931] usb 1-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 530.363355][ T29] audit: type=1400 audit(1732566479.687:1213): avc: denied { unmount } for pid=5844 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 530.387369][ T931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.395456][T10298] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.395629][T10298] bridge_slave_1: entered allmulticast mode [ 530.409411][ T931] usb 1-1: config 0 descriptor?? [ 530.415993][T10298] bridge_slave_1: entered promiscuous mode [ 530.452624][T10298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.477823][T10298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.509722][T10298] team0: Port device team_slave_0 added [ 530.522369][T10298] team0: Port device team_slave_1 added [ 530.547141][T10298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.556680][T10298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.587215][T10298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.599690][T10298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.606779][T10298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.633433][T10298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.749817][T10298] hsr_slave_0: entered promiscuous mode [ 530.758875][T10298] hsr_slave_1: entered promiscuous mode [ 530.771897][T10298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 530.954095][T10298] Cannot create hsr debugfs directory [ 531.164732][T10298] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 531.193251][T10298] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 531.194557][ T29] audit: type=1400 audit(1732566480.527:1214): avc: denied { listen } for pid=10348 comm="syz.7.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 531.225732][T10298] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 531.244965][T10298] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 531.305604][T10298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.320257][T10298] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.332698][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.339825][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.357413][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.364546][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.503685][T10298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.652182][T10298] veth0_vlan: entered promiscuous mode [ 531.666164][T10298] veth1_vlan: entered promiscuous mode [ 531.689972][T10298] veth0_macvtap: entered promiscuous mode [ 531.703947][T10298] veth1_macvtap: entered promiscuous mode [ 531.718852][T10298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.732000][T10298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.742501][T10298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.754841][T10298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.766769][T10298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.777504][T10298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.787681][T10298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.798434][T10298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.808627][T10298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.819935][T10298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.831057][T10298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 531.845929][T10298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.856744][T10298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.867822][T10298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.878549][T10298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.888709][T10298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.899762][T10298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.909960][T10298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.920869][T10298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.930996][T10298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.942219][T10298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.953281][T10298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 531.964556][T10298] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.973615][T10298] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.982716][T10298] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.991795][T10298] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.033620][ T54] Bluetooth: hci6: command tx timeout [ 532.039665][ T6698] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.048374][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.049325][ T6698] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.065010][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.402877][ T931] usbhid 1-1:0.0: can't add hid device: -71 [ 532.445371][ T931] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 532.460114][ T931] usb 1-1: USB disconnect, device number 38 [ 534.110293][ T54] Bluetooth: hci6: command tx timeout [ 536.190276][ T54] Bluetooth: hci6: command tx timeout [ 538.270296][ T54] Bluetooth: hci6: command tx timeout [ 541.503656][T10448] xt_CT: You must specify a L4 protocol and not use inversions on it [ 541.582016][T10452] xt_CT: You must specify a L4 protocol and not use inversions on it [ 541.999425][T10456] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 542.603559][ T29] audit: type=1400 audit(1732566491.927:1215): avc: denied { create } for pid=10461 comm="syz.4.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 542.630454][ T29] audit: type=1400 audit(1732566491.927:1216): avc: denied { connect } for pid=10461 comm="syz.4.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 542.634717][T10451] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1090'. [ 542.661852][T10451] nbd: couldn't find a device at index 99 [ 543.021646][T10451] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1090'. [ 543.034253][ T29] audit: type=1400 audit(1732566492.367:1217): avc: denied { getopt } for pid=10469 comm="syz.9.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 543.034731][T10470] tun0: tun_chr_ioctl cmd 2148553947 [ 543.123176][T10471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1092'. [ 543.172756][T10471] bond0: (slave netdevsim0): Releasing backup interface [ 543.196377][T10471] batman_adv: batadv0: Adding interface: netdevsim0 [ 543.203100][T10471] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.229181][T10471] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 543.562421][T10481] nbd: must specify a size in bytes for the device [ 543.641628][ T5150] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 543.648746][ T5150] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 543.656150][ T5150] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 543.664588][ T5150] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 543.671970][ T5150] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 543.679055][ T5150] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 543.788101][ T931] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 543.857848][ T29] audit: type=1400 audit(1732566493.187:1218): avc: denied { shutdown } for pid=10490 comm="syz.4.1098" laddr=fe80::10 lport=49891 faddr=2001::2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 543.919122][T10488] chnl_net:caif_netlink_parms(): no params data found [ 543.952910][ T931] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 544.005262][ T931] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 544.030373][ T931] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 544.047956][ T931] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 544.070062][ T931] usb 8-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 544.079820][ T931] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.097464][ T931] usb 8-1: Product: syz [ 544.105582][ T931] usb 8-1: Manufacturer: syz [ 544.132019][T10488] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.162265][ T931] usb 8-1: SerialNumber: syz [ 544.166999][T10488] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.213412][ T931] usb 8-1: config 0 descriptor?? [ 544.234707][T10488] bridge_slave_0: entered allmulticast mode [ 544.295865][T10488] bridge_slave_0: entered promiscuous mode [ 544.305790][ T931] iguanair 8-1:0.0: failed to get version [ 544.332809][T10488] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.339996][T10488] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.340379][ T931] iguanair 8-1:0.0: probe with driver iguanair failed with error -90 [ 544.347565][T10488] bridge_slave_1: entered allmulticast mode [ 544.457839][T10488] bridge_slave_1: entered promiscuous mode [ 544.544986][T10488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.591833][ T29] audit: type=1400 audit(1732566493.927:1219): avc: denied { ioctl } for pid=10474 comm="syz.7.1095" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xf506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 544.624150][T10488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.672628][ T46] usb 8-1: USB disconnect, device number 3 [ 544.718646][T10488] team0: Port device team_slave_0 added [ 544.739735][T10488] team0: Port device team_slave_1 added [ 544.832849][T10488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.839794][T10488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.873854][T10488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.887502][T10488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.894504][T10488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.924733][T10488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.024683][ T29] audit: type=1400 audit(1732566494.347:1220): avc: denied { create } for pid=10508 comm="syz.4.1100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 545.047295][T10488] hsr_slave_0: entered promiscuous mode [ 545.074868][ T29] audit: type=1400 audit(1732566494.347:1221): avc: denied { bind } for pid=10508 comm="syz.4.1100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 545.075525][T10488] hsr_slave_1: entered promiscuous mode [ 545.113614][T10514] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 545.215526][T10488] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 545.229734][T10488] Cannot create hsr debugfs directory [ 545.713004][ T54] Bluetooth: hci7: command tx timeout [ 545.730247][ T5998] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 545.738005][ T29] audit: type=1400 audit(1732566495.057:1222): avc: denied { unmount } for pid=9753 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 546.000973][T10526] xt_CT: You must specify a L4 protocol and not use inversions on it [ 547.093294][T10526] tty tty38: ldisc open failed (-12), clearing slot 37 [ 547.174916][ T5998] usb 5-1: New USB device found, idVendor=0424, idProduct=7800, bcdDevice=e9.41 [ 547.184109][ T5998] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.198395][ T29] audit: type=1400 audit(1732566496.507:1223): avc: denied { ioctl } for pid=10529 comm="syz.0.1104" path="socket:[27344]" dev="sockfs" ino=27344 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 547.221655][ T5998] usb 5-1: config 0 descriptor?? [ 547.255003][ T5998] lan78xx 5-1:0.0 (unnamed net_device) (uninitialized): USB bus speed not supported [ 547.279534][ T5998] lan78xx 5-1:0.0: probe with driver lan78xx failed with error -5 [ 547.435187][T10488] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 547.443930][T10488] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 547.455053][T10488] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 547.464083][T10488] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 547.522371][T10488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.536104][T10488] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.546367][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.553466][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.567800][ T3469] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.574910][ T3469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.701526][T10488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 547.738103][T10488] veth0_vlan: entered promiscuous mode [ 547.748190][T10488] veth1_vlan: entered promiscuous mode [ 547.772381][T10488] veth0_macvtap: entered promiscuous mode [ 547.781224][T10488] veth1_macvtap: entered promiscuous mode [ 547.790372][ T54] Bluetooth: hci7: command tx timeout [ 547.796541][T10488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 547.812639][T10488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.823619][T10488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 547.837830][T10488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.848530][T10488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 547.860966][T10488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.873315][T10488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 547.884914][T10488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.896686][T10488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 547.908113][T10488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.920853][T10488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 547.933054][T10488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.945398][T10488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 547.957812][T10488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.969674][T10488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.980968][T10488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.993596][T10488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.004983][T10488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.015570][T10488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.026313][T10488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.036869][T10488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.047527][T10488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.058092][T10488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.068845][T10488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.079469][T10488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.090724][T10488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.105008][T10488] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.114529][T10488] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.123345][T10488] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.132139][T10488] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.183078][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.195106][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.216261][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.224889][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.870373][ T54] Bluetooth: hci7: command tx timeout [ 551.950399][ T54] Bluetooth: hci7: command tx timeout [ 561.498519][ T5998] usb 5-1: USB disconnect, device number 29 [ 561.569573][T10883] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 561.682765][T10887] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10887 comm=syz.7.1112 [ 561.738260][ T29] audit: type=1326 audit(1732566511.067:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10894 comm="syz.3.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3caaf7e819 code=0x7ffc0000 [ 561.884733][ T1130] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.144695][ T29] audit: type=1800 audit(1732566511.067:1225): pid=10887 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.1112" name="bus" dev="overlay" ino=160 res=0 errno=0 [ 562.175135][ T29] audit: type=1326 audit(1732566511.097:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10894 comm="syz.3.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3caaf7e819 code=0x7ffc0000 [ 562.202980][ T29] audit: type=1326 audit(1732566511.107:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10894 comm="syz.3.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f3caaf7e819 code=0x7ffc0000 [ 562.237305][ T29] audit: type=1326 audit(1732566511.107:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10894 comm="syz.3.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3caaf7e819 code=0x7ffc0000 [ 562.320890][ T29] audit: type=1326 audit(1732566511.107:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10894 comm="syz.3.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3caaf7e819 code=0x7ffc0000 [ 562.364385][ T5150] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 562.364721][ T29] audit: type=1326 audit(1732566511.147:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10894 comm="syz.3.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f3caaf7e819 code=0x7ffc0000 [ 562.418322][ T5150] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 562.431433][ T5150] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 562.452297][ T5150] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 562.462690][ T29] audit: type=1326 audit(1732566511.147:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10894 comm="syz.3.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3caaf7e819 code=0x7ffc0000 [ 562.464582][ T5150] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 562.487770][ T29] audit: type=1326 audit(1732566511.147:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10894 comm="syz.3.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3caaf7e819 code=0x7ffc0000 [ 562.504035][ T5150] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 562.521307][ T29] audit: type=1326 audit(1732566511.147:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10894 comm="syz.3.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f3caaf7e819 code=0x7ffc0000 [ 562.582228][ T1130] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.624910][T10912] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 562.655852][ T1130] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.787019][ T5890] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 562.813170][ T1130] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.812716][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.826592][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.868787][ T5890] usb 4-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 563.890644][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.938965][ T25] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 564.007383][ T5890] usb 4-1: Product: syz [ 564.015871][ T5890] usb 4-1: Manufacturer: syz [ 564.020717][ T5890] usb 4-1: SerialNumber: syz [ 564.051639][T10924] Bluetooth: MGMT ver 1.23 [ 564.057007][T10924] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1117'. [ 564.096043][ T54] Bluetooth: hci6: Dropping invalid advertising data [ 564.103145][ T54] Bluetooth: hci6: Dropping invalid advertising data [ 564.109869][ T54] Bluetooth: hci6: Malformed LE Event: 0x02 [ 564.145357][T10904] chnl_net:caif_netlink_parms(): no params data found [ 564.160273][ T25] usb 8-1: Using ep0 maxpacket: 16 [ 564.176399][ T25] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.193529][ T25] usb 8-1: config 0 interface 0 has no altsetting 0 [ 564.203535][ T25] usb 8-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 564.204146][ T1130] bridge_slave_1: left allmulticast mode [ 564.219999][ T1130] bridge_slave_1: left promiscuous mode [ 564.225857][ T1130] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.236360][ T5890] usb 4-1: palm_os_4_probe - error -71 getting connection info [ 564.244531][ T1130] bridge_slave_0: left allmulticast mode [ 564.254449][ T5890] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 564.255313][ T1130] bridge_slave_0: left promiscuous mode [ 564.262289][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.269970][ T1130] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.294886][ T5890] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 564.316544][ T25] usb 8-1: config 0 descriptor?? [ 564.452708][ T5890] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 564.476154][ T5890] usb 4-1: USB disconnect, device number 8 [ 564.548316][T10936] ebt_limit: overflow, try lower: 0/0 [ 564.609956][ T54] Bluetooth: hci2: command tx timeout [ 564.644099][ T5890] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 564.687266][ T5890] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 564.805855][ T5890] visor 4-1:1.0: device disconnected [ 564.891092][ T1130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 564.908110][ T1130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 565.115422][ T1130] bond0 (unregistering): Released all slaves [ 565.716902][T10904] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.725740][T10904] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.734484][T10904] bridge_slave_0: entered allmulticast mode [ 565.742639][T10904] bridge_slave_0: entered promiscuous mode [ 565.757087][T10956] geneve2: entered promiscuous mode [ 565.799153][T10904] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.808490][ T25] usbhid 8-1:0.0: can't add hid device: -71 [ 565.816441][ T25] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 565.832702][T10904] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.839903][T10904] bridge_slave_1: entered allmulticast mode [ 565.846593][T10904] bridge_slave_1: entered promiscuous mode [ 565.853513][T10961] raw_sendmsg: syz.3.1125 forgot to set AF_INET. Fix it! [ 565.890876][ T25] usb 8-1: USB disconnect, device number 4 [ 566.030075][T10904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.058191][ T1130] hsr_slave_0: left promiscuous mode [ 566.071837][ T1130] hsr_slave_1: left promiscuous mode [ 566.077587][ T1130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 566.085107][ T1130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.161609][T10974] ebt_limit: overflow, try lower: 0/0 [ 566.224658][ T1130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.374197][ T1130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.440854][ T1130] veth1_macvtap: left promiscuous mode [ 566.446382][ T1130] veth0_macvtap: left promiscuous mode [ 566.452038][ T1130] veth1_vlan: left promiscuous mode [ 566.572742][ T1130] team0 (unregistering): Port device team_slave_1 removed [ 566.585645][ T1130] team0 (unregistering): Port device team_slave_0 removed [ 566.625044][T10904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.655232][T10904] team0: Port device team_slave_0 added [ 566.663385][T10904] team0: Port device team_slave_1 added [ 566.680287][ T54] Bluetooth: hci2: command tx timeout [ 566.687131][T10904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.694459][T10904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.720745][T10904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.733139][T10904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.740304][T10904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.766698][T10904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.815203][T10904] hsr_slave_0: entered promiscuous mode [ 566.833671][T10904] hsr_slave_1: entered promiscuous mode [ 566.840890][T10904] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 566.848489][T10904] Cannot create hsr debugfs directory [ 567.164929][T10904] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 567.177528][T10904] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 567.189930][T10904] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 567.199073][T10904] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 567.248687][T10904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 567.266949][T10904] 8021q: adding VLAN 0 to HW filter on device team0 [ 567.288053][ T3446] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.295134][ T3446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 567.308988][ T3446] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.316142][ T3446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 567.429792][T10904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 567.566682][T10904] veth0_vlan: entered promiscuous mode [ 567.579184][T10904] veth1_vlan: entered promiscuous mode [ 567.605133][T10904] veth0_macvtap: entered promiscuous mode [ 567.614236][T10904] veth1_macvtap: entered promiscuous mode [ 567.626657][T10904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 567.638077][T10904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.648255][T10904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 567.659724][T10904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.672563][T10904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 567.683260][T10904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.693171][T10904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 567.704402][T10904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.714342][T10904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 567.724909][T10904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.734804][T10904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 567.745229][T10904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.755962][T10904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 567.765249][T10904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 567.777706][T10904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.787744][T10904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 567.798807][T10904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.809216][T10904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 567.819927][T10904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.829778][T10904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 567.840351][T10904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.850195][T10904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 567.860744][T10904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.870631][T10904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 567.881470][T10904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.893312][T10904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 567.907644][T10904] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.916885][T10904] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.925804][T10904] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.934708][T10904] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.997023][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.027344][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.054074][ T3446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.067046][ T3446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.750418][ T54] Bluetooth: hci2: command tx timeout [ 570.830355][ T54] Bluetooth: hci2: command tx timeout [ 576.690213][ T5998] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 576.806625][ T46] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 577.090261][ T5890] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 577.100469][ T46] usb 10-1: Using ep0 maxpacket: 32 [ 577.108172][ T46] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 577.110249][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 577.125090][ T46] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 577.139159][ T46] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 577.140212][ T5998] usb 8-1: Using ep0 maxpacket: 32 [ 577.159290][ T46] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 577.159342][ T5998] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 577.172447][ T46] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 577.179240][ T5998] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 577.202218][ T5998] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 577.213306][ T5998] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 577.223318][ T5998] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 577.226424][ T46] usb 10-1: config 0 interface 0 has no altsetting 0 [ 577.236993][ T5998] usb 8-1: config 0 interface 0 has no altsetting 0 [ 577.252636][ T5998] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 577.261726][ T5998] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 577.263567][ T46] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 577.270270][ T5998] usb 8-1: Product: syz [ 577.270288][ T5998] usb 8-1: Manufacturer: syz [ 577.270302][ T5998] usb 8-1: SerialNumber: syz [ 577.293705][ T5998] usb 8-1: config 0 descriptor?? [ 577.300509][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 577.303436][ T5998] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 577.327899][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.338414][ T5998] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 577.346599][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 577.353835][ T5890] usb 4-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 577.368164][ T9] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 577.376463][ T46] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 577.376514][ T9] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 577.387437][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.404434][ T9] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 577.416819][ T9] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 577.419566][ T46] usb 10-1: Product: syz [ 577.426947][ T9] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 577.426977][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 577.457754][ T9] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 577.458802][ T5890] usb 4-1: config 0 descriptor?? [ 577.473641][ T9] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 577.482261][ T9] usb 6-1: Product: syz [ 577.486432][ T9] usb 6-1: Manufacturer: syz [ 577.490726][ T46] usb 10-1: Manufacturer: syz [ 577.494184][ T9] usb 6-1: SerialNumber: syz [ 577.497882][ T46] usb 10-1: SerialNumber: syz [ 577.505726][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 577.505739][ T29] audit: type=1400 audit(1732566526.837:1242): avc: denied { create } for pid=11436 comm="syz.0.1133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 577.511123][T11437] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 577.515837][ T29] audit: type=1400 audit(1732566526.837:1243): avc: denied { setopt } for pid=11436 comm="syz.0.1133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 577.534662][ T9] usb 6-1: config 0 descriptor?? [ 577.559008][ T46] usb 10-1: config 0 descriptor?? [ 577.585279][ T9] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 577.597526][ T46] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 577.607897][ T9] ldusb 6-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 577.617556][T11418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.617556][ T46] ldusb 10-1:0.0: LD USB Device #2 now attached to major 180 minor 2 [ 577.638311][T11418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.648110][T11439] VFS: unable to find oldfs superblock on device nullb0 [ 577.659547][T11439] ax25_connect(): syz.0.1133 uses autobind, please contact jreuter@yaina.de [ 577.668714][ T29] audit: type=1400 audit(1732566526.987:1244): avc: denied { connect } for pid=11436 comm="syz.0.1133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 577.676447][ T9] usb 8-1: USB disconnect, device number 5 [ 577.733429][ T9] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 577.791014][T11426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.799670][T11426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.825169][ T5889] usb 6-1: USB disconnect, device number 11 [ 577.844046][ T5889] ldusb 6-1:0.0: LD USB Device #1 now disconnected [ 577.847240][T11424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.859991][T11424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.890650][ T5998] usb 10-1: USB disconnect, device number 2 [ 577.897375][ T5998] ldusb 10-1:0.0: LD USB Device #2 now disconnected [ 578.740172][T11451] xt_l2tp: v2 doesn't support IP mode [ 579.054977][ T29] audit: type=1400 audit(1732566528.387:1245): avc: denied { create } for pid=11453 comm="syz.5.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 579.314389][T11463] xt_l2tp: v2 doesn't support IP mode [ 579.340811][T11463] xt_TPROXY: Can be used only with -p tcp or -p udp [ 579.655333][ T5890] usbhid 4-1:0.0: can't add hid device: -71 [ 579.661444][ T5890] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 579.676295][ T5890] usb 4-1: USB disconnect, device number 9 [ 579.733444][T11467] xt_CT: You must specify a L4 protocol and not use inversions on it [ 581.092890][T11509] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 581.130259][ T29] audit: type=1400 audit(1732566530.457:1246): avc: denied { ioctl } for pid=11506 comm="syz.7.1147" path="socket:[29642]" dev="sockfs" ino=29642 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 581.312105][ T5890] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 581.541118][ T5890] usb 4-1: Using ep0 maxpacket: 32 [ 581.554408][ T5890] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 581.562902][ T5890] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 581.579111][ T5890] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 581.592336][ T5890] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 581.603994][ T5890] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 581.660436][ T5890] usb 4-1: config 0 interface 0 has no altsetting 0 [ 581.674853][ T5890] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 581.684062][ T5890] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 581.692526][ T5890] usb 4-1: Product: syz [ 581.696685][ T5890] usb 4-1: Manufacturer: syz [ 581.701482][ T5890] usb 4-1: SerialNumber: syz [ 581.707046][ T5890] usb 4-1: config 0 descriptor?? [ 581.713711][ T5890] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 581.723660][ T5890] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 590.510361][ T5150] Bluetooth: hci5: command 0x0406 tx timeout [ 591.559198][ T5890] usb 4-1: USB disconnect, device number 10 [ 591.650673][ T5890] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 593.190690][T11636] ebt_limit: overflow, try lower: 0/0 [ 593.800403][T11637] xt_l2tp: v2 doesn't support IP mode [ 594.330348][T11637] xt_TPROXY: Can be used only with -p tcp or -p udp [ 594.337733][ T25] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 594.700690][T11640] xt_CT: You must specify a L4 protocol and not use inversions on it [ 594.810228][ T25] usb 10-1: device not accepting address 3, error -71 [ 595.085925][ T29] audit: type=1400 audit(1732566544.417:1247): avc: denied { write } for pid=11651 comm="syz.7.1159" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 596.172444][T11664] geneve2: entered promiscuous mode [ 596.485799][T11671] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 596.500199][ T5934] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 596.683659][T11673] ebt_limit: overflow, try lower: 0/0 [ 597.141467][ T5934] usb 4-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=8f.f6 [ 597.150973][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.159904][ T5934] usb 4-1: config 0 descriptor?? [ 597.165909][ T5934] usb 4-1: ucan: probing device on interface #0 [ 597.172417][ T5934] usb 4-1: ucan: invalid EP count (0) [ 597.177853][ T5934] usb 4-1: ucan: probe failed; try to update the device firmware [ 607.059474][ T5890] usb 4-1: USB disconnect, device number 11 [ 607.267742][T11695] xt_CT: You must specify a L4 protocol and not use inversions on it [ 608.426323][T11714] xt_CT: You must specify a L4 protocol and not use inversions on it [ 608.500323][ T5890] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 608.751832][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 608.778228][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 608.789419][ T5890] usb 4-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 608.974167][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.003903][ T5890] usb 4-1: config 0 descriptor?? [ 609.427165][T11728] ebt_limit: overflow, try lower: 0/0 [ 609.717775][T11730] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 610.485798][ T5890] usbhid 4-1:0.0: can't add hid device: -71 [ 610.498141][ T5890] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 610.553978][ T5890] usb 4-1: USB disconnect, device number 12 [ 611.945657][T11760] xt_l2tp: v2 doesn't support IP mode [ 611.959968][T11760] xt_TPROXY: Can be used only with -p tcp or -p udp [ 612.510387][ T5889] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 612.663656][ T5889] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 612.674802][ T5889] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.684720][ T5889] usb 10-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 612.693941][ T5889] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.703023][ T5889] usb 10-1: config 0 descriptor?? [ 614.157165][ T5889] usbhid 10-1:0.0: can't add hid device: -71 [ 614.164117][ T5889] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 614.174575][ T5889] usb 10-1: USB disconnect, device number 5 [ 622.958347][T11778] xt_CT: You must specify a L4 protocol and not use inversions on it [ 623.161950][ T29] audit: type=1326 audit(1732566572.497:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11782 comm="syz.5.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3708f7e819 code=0x7ffc0000 [ 623.439697][ T29] audit: type=1326 audit(1732566572.617:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11782 comm="syz.5.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3708f7e819 code=0x7ffc0000 [ 624.564449][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.572364][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.821568][T11769] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1184'. [ 624.874180][ T29] audit: type=1326 audit(1732566572.797:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11782 comm="syz.5.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3708f7e819 code=0x7ffc0000 [ 624.909648][ T29] audit: type=1326 audit(1732566572.797:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11782 comm="syz.5.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3708f7e819 code=0x7ffc0000 [ 624.919423][T11769] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1184'. [ 624.943263][ T29] audit: type=1326 audit(1732566572.797:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11782 comm="syz.5.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3708f7e819 code=0x7ffc0000 [ 624.967238][ T29] audit: type=1326 audit(1732566572.797:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11782 comm="syz.5.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3708f7e819 code=0x7ffc0000 [ 624.995959][T11794] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 625.010248][ T29] audit: type=1326 audit(1732566572.797:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11782 comm="syz.5.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3708f7e819 code=0x7ffc0000 [ 625.033846][ T29] audit: type=1326 audit(1732566572.797:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11782 comm="syz.5.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3708f7e819 code=0x7ffc0000 [ 625.057900][ T29] audit: type=1326 audit(1732566572.797:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11782 comm="syz.5.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f3708f7e819 code=0x7ffc0000 [ 625.130564][ T29] audit: type=1326 audit(1732566572.797:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11782 comm="syz.5.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3708f7e819 code=0x7ffc0000 [ 625.507371][ T25] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 626.191574][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 626.203111][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 626.213381][ T25] usb 1-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 626.222612][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.231820][ T25] usb 1-1: config 0 descriptor?? [ 626.397472][T11817] xt_l2tp: v2 doesn't support IP mode [ 626.410803][T11817] xt_TPROXY: Can be used only with -p tcp or -p udp [ 626.640681][T11813] overlayfs: failed to resolve './file0': -2 [ 627.020190][ T5934] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 627.172134][ T5934] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 627.190551][ T5934] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 627.202121][ T5934] usb 6-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 627.211520][ T5934] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.242376][ T5934] usb 6-1: config 0 descriptor?? [ 627.674771][ T25] usbhid 1-1:0.0: can't add hid device: -71 [ 627.688987][ T25] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 627.705338][ T25] usb 1-1: USB disconnect, device number 39 [ 629.357998][ T5934] usbhid 6-1:0.0: can't add hid device: -71 [ 629.364489][ T5934] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 629.378583][ T5934] usb 6-1: USB disconnect, device number 12 [ 637.397319][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 637.397338][ T29] audit: type=1326 audit(1732566586.667:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11841 comm="syz.0.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09a77e819 code=0x7ffc0000 [ 638.131355][T11847] xt_CT: You must specify a L4 protocol and not use inversions on it [ 638.277971][ T29] audit: type=1326 audit(1732566586.667:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11841 comm="syz.0.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09a77e819 code=0x7ffc0000 [ 638.301513][ T29] audit: type=1326 audit(1732566586.677:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11841 comm="syz.0.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09a77e819 code=0x7ffc0000 [ 638.371244][ T29] audit: type=1326 audit(1732566586.677:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11841 comm="syz.0.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09a77e819 code=0x7ffc0000 [ 638.554263][T11844] xt_l2tp: v2 doesn't support IP mode [ 638.562423][T11844] xt_TPROXY: Can be used only with -p tcp or -p udp [ 638.584229][ T29] audit: type=1326 audit(1732566586.677:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11841 comm="syz.0.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09a77e819 code=0x7ffc0000 [ 638.607749][ T29] audit: type=1326 audit(1732566586.677:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11841 comm="syz.0.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd09a77e819 code=0x7ffc0000 [ 638.631604][ T29] audit: type=1326 audit(1732566586.677:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11841 comm="syz.0.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09a77e819 code=0x7ffc0000 [ 638.655211][ T29] audit: type=1326 audit(1732566586.677:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11841 comm="syz.0.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09a77e819 code=0x7ffc0000 [ 638.680016][ T29] audit: type=1326 audit(1732566586.677:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11841 comm="syz.0.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fd09a77e819 code=0x7ffc0000 [ 638.704513][ T29] audit: type=1326 audit(1732566586.677:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11841 comm="syz.0.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09a77e819 code=0x7ffc0000 [ 638.777610][T11853] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 640.061714][T11869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1208'. [ 640.090855][T11869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1208'. [ 640.462845][T11880] ebt_limit: overflow, try lower: 0/0 [ 642.856274][ T5150] Bluetooth: hci3: command 0x0406 tx timeout [ 643.540197][ T46] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 643.603765][ T9] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 643.762354][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 643.773718][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 643.833988][ T9] usb 10-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 643.853773][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.966861][ T9] usb 10-1: config 0 descriptor?? [ 643.973822][ T9] usb 10-1: can't set config #0, error -71 [ 643.981356][ T9] usb 10-1: USB disconnect, device number 6 [ 644.120269][ T46] usb 1-1: device not accepting address 40, error -71 [ 648.843919][T11902] xt_CT: You must specify a L4 protocol and not use inversions on it [ 648.967627][T11907] xt_l2tp: v2 doesn't support IP mode [ 649.622974][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 649.622992][ T29] audit: type=1326 audit(1732566598.177:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11904 comm="syz.9.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9cb7e819 code=0x7ffc0000 [ 649.854889][ T29] audit: type=1326 audit(1732566598.177:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11904 comm="syz.9.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9cb7e819 code=0x7ffc0000 [ 649.879825][ T29] audit: type=1326 audit(1732566598.177:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11904 comm="syz.9.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9cb7e819 code=0x7ffc0000 [ 649.904587][ T29] audit: type=1326 audit(1732566598.177:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11904 comm="syz.9.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9cb7e819 code=0x7ffc0000 [ 649.928832][ T29] audit: type=1326 audit(1732566598.177:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11904 comm="syz.9.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9cb7e819 code=0x7ffc0000 [ 649.952885][ T29] audit: type=1326 audit(1732566598.177:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11904 comm="syz.9.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5a9cb7e819 code=0x7ffc0000 [ 649.976790][ T29] audit: type=1326 audit(1732566598.177:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11904 comm="syz.9.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9cb7e819 code=0x7ffc0000 [ 650.000597][ T29] audit: type=1326 audit(1732566598.177:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11904 comm="syz.9.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9cb7e819 code=0x7ffc0000 [ 650.024346][ T29] audit: type=1326 audit(1732566598.177:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11904 comm="syz.9.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f5a9cb7e819 code=0x7ffc0000 [ 650.048163][ T29] audit: type=1326 audit(1732566598.177:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11904 comm="syz.9.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9cb7e819 code=0x7ffc0000 [ 650.074266][T11917] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 650.664772][ T5890] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 651.048275][ T5890] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 651.073049][ T5890] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 651.082261][ T5890] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 651.091559][ T5890] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.106249][ T5890] usb 10-1: config 0 descriptor?? [ 652.210230][ T5889] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 652.413002][ T5889] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 652.435592][ T5889] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 652.520354][ T9] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 652.540234][ T5889] usb 8-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 652.559670][ T5889] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.584630][ T5889] usb 8-1: config 0 descriptor?? [ 652.681351][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 652.709847][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 652.723833][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 652.733276][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.750790][ T9] usb 1-1: config 0 descriptor?? [ 652.955127][T11962] xt_CT: You must specify a L4 protocol and not use inversions on it [ 653.075877][ T5998] usb 10-1: USB disconnect, device number 7 [ 654.568168][ T5889] usbhid 8-1:0.0: can't add hid device: -71 [ 654.579538][ T5889] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 654.595148][ T5889] usb 8-1: USB disconnect, device number 6 [ 654.850036][T11989] xt_l2tp: v2 doesn't support IP mode [ 654.893516][T11989] xt_TPROXY: Can be used only with -p tcp or -p udp [ 655.385698][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 655.391863][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 655.403436][ T9] usb 1-1: USB disconnect, device number 42 [ 657.192236][ T5150] Bluetooth: hci6: command 0x0406 tx timeout [ 657.349394][T12006] xt_CT: You must specify a L4 protocol and not use inversions on it [ 657.566082][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 657.566096][ T29] audit: type=1326 audit(1732566606.757:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12014 comm="syz.7.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610f57e819 code=0x7ffc0000 [ 658.027545][ T29] audit: type=1326 audit(1732566606.757:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12014 comm="syz.7.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610f57e819 code=0x7ffc0000 [ 658.606255][ T29] audit: type=1326 audit(1732566606.757:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12014 comm="syz.7.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610f57e819 code=0x7ffc0000 [ 658.669515][ T29] audit: type=1326 audit(1732566606.757:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12014 comm="syz.7.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610f57e819 code=0x7ffc0000 [ 658.694704][ T29] audit: type=1326 audit(1732566606.757:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12014 comm="syz.7.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610f57e819 code=0x7ffc0000 [ 658.718366][ T29] audit: type=1326 audit(1732566606.767:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12014 comm="syz.7.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f610f57e819 code=0x7ffc0000 [ 658.742424][ T29] audit: type=1326 audit(1732566606.767:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12014 comm="syz.7.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610f57e819 code=0x7ffc0000 [ 658.767472][ T29] audit: type=1326 audit(1732566606.767:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12014 comm="syz.7.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f610f57e819 code=0x7ffc0000 [ 658.792139][ T29] audit: type=1326 audit(1732566606.767:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12014 comm="syz.7.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610f57e819 code=0x7ffc0000 [ 658.816332][ T29] audit: type=1326 audit(1732566606.767:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12014 comm="syz.7.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f610f57e819 code=0x7ffc0000 [ 659.278286][T12040] ebt_limit: overflow, try lower: 0/0 [ 659.494276][ T9] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 659.618304][ T5890] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 659.702313][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 659.713736][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 659.723735][ T9] usb 8-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 659.734190][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.743993][ T9] usb 8-1: config 0 descriptor?? [ 659.840248][ T5890] usb 6-1: Using ep0 maxpacket: 32 [ 659.847048][ T5890] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 659.855345][ T5890] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 659.869628][ T5890] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 659.882246][ T5890] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 659.892724][ T5890] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 659.906013][ T5890] usb 6-1: config 0 interface 0 has no altsetting 0 [ 659.914856][ T5890] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 659.924006][ T5890] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 659.932575][ T5890] usb 6-1: Product: syz [ 659.936825][ T5890] usb 6-1: Manufacturer: syz [ 659.941543][ T5890] usb 6-1: SerialNumber: syz [ 659.949822][ T5890] usb 6-1: config 0 descriptor?? [ 659.960008][ T25] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 659.972877][ T5890] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 659.987167][ T5890] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 660.114132][ T25] usb 1-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=8f.f6 [ 660.123363][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.134641][ T25] usb 1-1: config 0 descriptor?? [ 660.141169][ T25] usb 1-1: ucan: probing device on interface #0 [ 660.147831][ T25] usb 1-1: ucan: invalid EP count (0) [ 660.154236][ T25] usb 1-1: ucan: probe failed; try to update the device firmware [ 660.180852][T12038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.192202][T12038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.216706][T12038] ldusb 6-1:0.0: Couldn't submit interrupt_in_urb -90 [ 660.225185][ T25] usb 6-1: USB disconnect, device number 13 [ 660.233193][ T25] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 660.417191][T12042] cgroup: name respecified [ 660.463639][ T5889] usb 1-1: USB disconnect, device number 43 [ 661.961895][ T9] usbhid 8-1:0.0: can't add hid device: -71 [ 661.967902][ T9] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 661.977772][ T9] usb 8-1: USB disconnect, device number 7 [ 662.064117][ T30] INFO: task syz.1.1063:10054 blocked for more than 143 seconds. [ 662.073573][T12037] caif:caif_disconnect_client(): nothing to disconnect [ 662.080771][ T30] Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 662.092092][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 662.101157][ T30] task:syz.1.1063 state:D stack:28216 pid:10054 tgid:10051 ppid:5849 flags:0x00000004 [ 662.113999][ T30] Call Trace: [ 662.117474][ T30] [ 662.122837][ T30] __schedule+0xe58/0x5ad0 [ 662.127439][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 662.135683][ T30] ? ksys_write+0x12b/0x250 [ 662.141664][ T30] ? stack_depot_save_flags+0x28/0x8f0 [ 662.147438][ T30] ? kasan_save_free_info+0x3b/0x60 [ 662.154407][ T30] ? __pfx___schedule+0x10/0x10 [ 662.159572][ T30] ? lock_release+0x4e2/0x6f0 [ 662.169344][ T30] ? schedule+0x298/0x350 [ 662.175400][ T30] ? __pfx_lock_release+0x10/0x10 [ 662.203968][ T30] ? __mutex_trylock_common+0x78/0x250 [ 662.299117][ T30] ? schedule+0x1fd/0x350 [ 662.385095][ T30] ? lock_acquire+0x2f/0xb0 [ 662.391021][ T30] ? schedule+0x1fd/0x350 [ 662.396478][ T30] schedule+0xe7/0x350 [ 662.403667][ T30] schedule_preempt_disabled+0x13/0x30 [ 662.409755][T12073] xt_l2tp: v2 doesn't support IP mode [ 662.415816][ T30] __mutex_lock+0x62b/0xa60 [ 662.424517][ T30] ? lock_system_sleep+0x87/0xa0 [ 662.432653][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 662.447397][ T30] ? kfree+0x14f/0x4b0 [ 662.453017][ T30] ? lock_system_sleep+0x87/0xa0 [ 662.458027][ T30] lock_system_sleep+0x87/0xa0 [ 662.462976][ T30] resume_store+0x200/0x460 [ 662.467533][ T30] ? __pfx_resume_store+0x10/0x10 [ 662.472691][ T30] ? kernfs_fop_write_iter+0x27b/0x500 [ 662.478211][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 662.483412][ T30] ? trace_lock_acquire+0x146/0x1e0 [ 662.488687][ T30] ? __pfx_resume_store+0x10/0x10 [ 662.494124][ T30] kobj_attr_store+0x55/0x80 [ 662.498774][ T30] ? __pfx_kobj_attr_store+0x10/0x10 [ 662.504120][ T30] sysfs_kf_write+0x117/0x170 [ 662.508850][ T30] kernfs_fop_write_iter+0x33d/0x500 [ 662.514268][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 662.519525][ T30] vfs_write+0x5ae/0x1150 [ 662.524399][ T30] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 662.530849][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 662.535941][ T30] ? __pfx_vfs_write+0x10/0x10 [ 662.540835][ T30] ksys_write+0x12b/0x250 [ 662.545215][ T30] ? __pfx_ksys_write+0x10/0x10 [ 662.550157][ T30] ? rcu_is_watching+0x12/0xc0 [ 662.554980][ T30] ? rcu_is_watching+0x12/0xc0 [ 662.559813][ T30] do_syscall_64+0xcd/0x250 [ 662.564411][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.570486][ T30] RIP: 0033:0x7fa40c97e819 [ 662.574945][ T30] RSP: 002b:00007fa40d807038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 662.583444][ T30] RAX: ffffffffffffffda RBX: 00007fa40cb36160 RCX: 00007fa40c97e819 [ 662.591492][ T30] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000007 [ 662.599501][ T30] RBP: 00007fa40c9f175e R08: 0000000000000000 R09: 0000000000000000 [ 662.607566][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 662.615711][ T30] R13: 0000000000000000 R14: 00007fa40cb36160 R15: 00007ffd05cca9d8 [ 662.623807][ T30] [ 662.631524][ T30] INFO: lockdep is turned off. [ 662.662738][ T30] NMI backtrace for cpu 1 [ 662.667092][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 662.677250][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 662.687307][ T30] Call Trace: [ 662.690580][ T30] [ 662.693504][ T30] dump_stack_lvl+0x116/0x1f0 [ 662.698189][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 662.703130][ T30] ? rcu_is_watching+0x12/0xc0 [ 662.707904][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 662.713883][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 662.719872][ T30] watchdog+0xf0c/0x1240 [ 662.724127][ T30] ? __pfx_watchdog+0x10/0x10 [ 662.728811][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 662.734014][ T30] ? __kthread_parkme+0x148/0x220 [ 662.739043][ T30] ? __pfx_watchdog+0x10/0x10 [ 662.743721][ T30] kthread+0x2c1/0x3a0 [ 662.747792][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 662.752996][ T30] ? __pfx_kthread+0x10/0x10 [ 662.757592][ T30] ret_from_fork+0x45/0x80 [ 662.762016][ T30] ? __pfx_kthread+0x10/0x10 [ 662.766608][ T30] ret_from_fork_asm+0x1a/0x30 [ 662.771384][ T30] [ 662.775239][ T30] Sending NMI from CPU 1 to CPUs 0: [ 662.781091][ C0] NMI backtrace for cpu 0 [ 662.781101][ C0] CPU: 0 UID: 0 PID: 12066 Comm: syz.5.1258 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 662.781121][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 662.781131][ C0] RIP: 0010:__raw_callee_save___pv_queued_spin_unlock+0x10/0x18 [ 662.781158][ C0] Code: 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 52 b8 01 00 00 00 31 d2 f0 0f b0 17 <75> 06 5a c3 cc cc cc cc 56 0f b6 f0 e8 9f ff ff ff 5e 5a c3 cc cc [ 662.781174][ C0] RSP: 0018:ffffc9000e08f708 EFLAGS: 00000046 [ 662.781187][ C0] RAX: 0000000000000001 RBX: ffff88805cf70100 RCX: ffffffff816be403 [ 662.781199][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88805cf70100 [ 662.781209][ C0] RBP: ffff88805cf70108 R08: 0000000000000000 R09: ffffed100b9ee020 [ 662.781220][ C0] R10: ffff88805cf70103 R11: 0000000000000000 R12: ffff88805cf70110 [ 662.781231][ C0] R13: ffff88807886cb40 R14: 0000000000000246 R15: ffffc9000e08f8d8 [ 662.781243][ C0] FS: 00007f3709cdf6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 662.781260][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 662.781272][ C0] CR2: 0000001b2c01dff8 CR3: 000000004a1d4000 CR4: 00000000003526f0 [ 662.781283][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 662.781293][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 662.781304][ C0] Call Trace: [ 662.781308][ C0] [ 662.781314][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 662.781339][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 662.781356][ C0] ? nmi_handle+0x1a7/0x5c0 [ 662.781374][ C0] ? __raw_callee_save___pv_queued_spin_unlock+0x10/0x18 [ 662.781395][ C0] ? default_do_nmi+0x6a/0x160 [ 662.781424][ C0] ? exc_nmi+0x170/0x1e0 [ 662.781445][ C0] ? end_repeat_nmi+0xf/0x53 [ 662.781468][ C0] ? do_raw_spin_unlock+0x53/0x230 [ 662.781491][ C0] ? __raw_callee_save___pv_queued_spin_unlock+0x10/0x18 [ 662.781511][ C0] ? __raw_callee_save___pv_queued_spin_unlock+0x10/0x18 [ 662.781533][ C0] ? __raw_callee_save___pv_queued_spin_unlock+0x10/0x18 [ 662.781553][ C0] [ 662.781558][ C0] [ 662.781564][ C0] do_raw_spin_unlock+0x172/0x230 [ 662.781584][ C0] _raw_spin_unlock_irqrestore+0x22/0x80 [ 662.781601][ C0] __skb_try_recv_datagram+0x177/0x4f0 [ 662.781626][ C0] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 662.781646][ C0] ? __pfx___skb_try_recv_datagram+0x10/0x10 [ 662.781671][ C0] __unix_dgram_recvmsg+0x1d1/0xe50 [ 662.781695][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 662.781719][ C0] ? rcu_is_watching+0x12/0xc0 [ 662.781741][ C0] ? trace_irq_enable.constprop.0+0xe6/0x140 [ 662.781763][ C0] ? lock_release+0x4e2/0x6f0 [ 662.781780][ C0] ? __might_fault+0x13b/0x190 [ 662.781803][ C0] unix_dgram_recvmsg+0xd0/0x110 [ 662.781824][ C0] ____sys_recvmsg+0x5f8/0x6b0 [ 662.781845][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 662.781867][ C0] ? kfree+0x274/0x4b0 [ 662.781883][ C0] ? __pfx___schedule+0x10/0x10 [ 662.781901][ C0] ___sys_recvmsg+0x115/0x1a0 [ 662.781916][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 662.781940][ C0] ? rcu_is_watching+0x12/0xc0 [ 662.781965][ C0] ? __pfx___might_resched+0x10/0x10 [ 662.781986][ C0] ? __might_fault+0xe3/0x190 [ 662.782008][ C0] do_recvmmsg+0x2f8/0x740 [ 662.782024][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 662.782041][ C0] ? __pfx___schedule+0x10/0x10 [ 662.782061][ C0] ? rcu_is_watching+0x12/0xc0 [ 662.782084][ C0] __x64_sys_recvmmsg+0x239/0x290 [ 662.782101][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 662.782120][ C0] do_syscall_64+0xcd/0x250 [ 662.782140][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.782159][ C0] RIP: 0033:0x7f3708f7e819 [ 662.782172][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 662.782188][ C0] RSP: 002b:00007f3709cdf038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 662.782204][ C0] RAX: ffffffffffffffda RBX: 00007f3709136080 RCX: 00007f3708f7e819 [ 662.782215][ C0] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 662.782226][ C0] RBP: 00007f3708ff175e R08: 0000000000000000 R09: 0000000000000000 [ 662.782236][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 662.782246][ C0] R13: 0000000000000000 R14: 00007f3709136080 R15: 00007ffe3d040578 [ 662.782262][ C0] [ 663.270192][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 663.277079][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 663.287292][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 663.297356][ T30] Call Trace: [ 663.300647][ T30] [ 663.303583][ T30] dump_stack_lvl+0x3d/0x1f0 [ 663.308173][ T30] panic+0x71d/0x800 [ 663.312068][ T30] ? __pfx_panic+0x10/0x10 [ 663.316478][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 663.321843][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 663.327809][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 663.333171][ T30] ? watchdog+0xd76/0x1240 [ 663.337580][ T30] ? watchdog+0xd69/0x1240 [ 663.341989][ T30] watchdog+0xd87/0x1240 [ 663.346229][ T30] ? __pfx_watchdog+0x10/0x10 [ 663.350906][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 663.356100][ T30] ? __kthread_parkme+0x148/0x220 [ 663.361126][ T30] ? __pfx_watchdog+0x10/0x10 [ 663.365806][ T30] kthread+0x2c1/0x3a0 [ 663.369879][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 663.375066][ T30] ? __pfx_kthread+0x10/0x10 [ 663.379646][ T30] ret_from_fork+0x45/0x80 [ 663.384053][ T30] ? __pfx_kthread+0x10/0x10 [ 663.388636][ T30] ret_from_fork_asm+0x1a/0x30 [ 663.393400][ T30] [ 663.396665][ T30] Kernel Offset: disabled [ 663.400966][ T30] Rebooting in 86400 seconds..