last executing test programs: 14m8.310324126s ago: executing program 0 (id=2556): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8) read$FUSE(r0, &(0x7f0000001440)={0x2020}, 0x2020) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r1, r6, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2, 0x0, r1}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3d16, 0x8000, 0x1, 0x2000008, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a09, 0x20, 0x2, 0x40021a, 0x0, r1}}], 0x4, &(0x7f0000000500)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r5, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) signalfd(r0, &(0x7f0000000580)={[0xffffffffffffffff]}, 0x8) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg1\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x20, 0x6e9830792ddec618, 0x8, 0x8, {{0x24, 0x4, 0x3, 0x26, 0x90, 0x66, 0x0, 0x6, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x1e}, {[@timestamp_addr={0x44, 0x14, 0xc2, 0x1, 0x0, [{@multicast1, 0xe67}, {@broadcast, 0x3}]}, @ssrr={0x89, 0x2b, 0xde, [@local, @multicast2, @loopback, @remote, @local, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @private=0xa010102]}, @end, @timestamp={0x44, 0xc, 0x17, 0x0, 0x2, [0x4a, 0x9]}, @timestamp_prespec={0x44, 0x1c, 0x4f, 0x3, 0x4, [{@empty, 0x3}, {@empty, 0x9}, {@dev={0xac, 0x14, 0x14, 0x30}, 0xfffffffa}]}, @lsrr={0x83, 0x13, 0x70, [@rand_addr=0x64010102, @loopback, @dev={0xac, 0x14, 0x14, 0x25}, @remote]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x2f, 0x9, 0x9, 0x7f, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @loopback, 0x700, 0x700, 0x1, 0x9}}) 14m7.39729315s ago: executing program 0 (id=2558): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x2}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3e, 0x0, 0x0) write(r1, &(0x7f0000000040)="a9", 0x1) 14m7.236983927s ago: executing program 0 (id=2561): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x7b}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17}, 0x94) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x1a0, r1, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x9c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x2}}, {0x80, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x7a, 0x2, "b5fbb5b5adb4f5620002344d153b10bac4a849a718a61c7700076d7376e9ed8a1d7ef6ed123ebc01edba0b42e10a3fc704463e2cbe433717ed1cb6af65a46e7f8f1c5afe67b7fe4d6abf5f41e35fb811a36a7578ca2a8afbaa71e0cefe36ac922516b31d9aca89ece0de0d43cbee892f28358da13392"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xe8, 0x3, 0x0, 0x1, [{0xcc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xc7, 0x1, "8f056d2ac27643848a9186e47777e9843941737e1cfd2776eb2d6ea0e0ac578447c7cd21f614cafe0dcd64586cb0a7232e9585b1d3d27d2012e325bb1404e99fa4224ff2af37fccdde633da0a051196c1aa8a28e8e0c6105241fbc7fd5a3da96e875ef75614a665a044f473c954a4b0bfd96a547202591e39c6d2277b66d7183b0c2901d1341dd077e0def5d275a1cf04bce732babb1f15106195e8534266b244b0cdf46d3a87c19973deccbbfdcc0669f5994fdd7f8bac5ee9ad67450ca6f9983bb57"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x899}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x800}, 0x4040080) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0xffffffffffffff92, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a0002616000008009f0005000000080026000816"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 14m6.91032031s ago: executing program 0 (id=2563): socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket(0x1, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0x9}]}, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @local}}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) statx(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x0, 0x800, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r5, {r6, r7}}, './file0\x00'}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@private=0xa010100, 0x4e22, 0x1, 0x4e22, 0x7, 0x92787e95f845f4a5, 0x80, 0xa0, 0x2b, r4, r6}, {0x9, 0x0, 0x1d3, 0x6, 0x1, 0xc9, 0x6, 0x428}, {0x4, 0x0, 0x9, 0xde}, 0xbfc, 0x6e6bbf, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1, 0x4d5, 0x32}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3507, 0x3, 0x0, 0x7f, 0x1, 0x5, 0x2}}, 0xe8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl0\x00', r3, 0x4, 0x0, 0x6, 0x6, 0x52, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x700, 0xfffffbff, 0x800}}) openat$cgroup_int(r1, &(0x7f00000004c0)='memory.swap.high\x00', 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000068000100fdf80000fbdbdf25020000000000000004000400"], 0x1c}}, 0x0) getsockname$packet(r9, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006a0005062cbd7000fcdbdf25020000000000000008000500", @ANYRES32=r10], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000400)={'gre0\x00', &(0x7f0000000380)={'syztnl0\x00', r3, 0x7800, 0x700, 0x7, 0x4, {{0x16, 0x4, 0x2, 0x21, 0x58, 0x65, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010102, @loopback, {[@rr={0x7, 0x17, 0x52, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @rr={0x7, 0x2b, 0xe7, [@dev={0xac, 0x14, 0x14, 0x3d}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @private=0xa010102, @multicast1, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @rand_addr=0x64010102, @private=0xa010102]}]}}}}}) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x1) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv6_newroute={0x54, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff, 0x5}, [@RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{0x0, {0x4, 0x2, 0x4, 0x1, 0x80, 0x30, 0xb9, [@loopback]}}}}}]}, 0x54}}, 0x0) 14m6.684531544s ago: executing program 0 (id=2564): sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8885) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00400068000100fdf80000fbdbdf250200000000000000040004"], 0x1c}}, 0x0) getsockname$packet(r2, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006a0005062cbd7000fcdbdf2502000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) 14m6.415327796s ago: executing program 0 (id=2566): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001000)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000440)=""/200, 0xc8, 0xd73) lseek(r1, 0x80000004, 0x4) r2 = socket$inet6(0xa, 0x800, 0x8000000003c) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @mcast1, 0x9}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000cc0)=@in6={0x21, 0x2800, 0x2, 0x1c, {0x2f, 0x1b59, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}}, 0x24) getdents(r1, &(0x7f0000000140)=""/174, 0xae) 14m5.865434727s ago: executing program 32 (id=2566): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001000)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000440)=""/200, 0xc8, 0xd73) lseek(r1, 0x80000004, 0x4) r2 = socket$inet6(0xa, 0x800, 0x8000000003c) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @mcast1, 0x9}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000cc0)=@in6={0x21, 0x2800, 0x2, 0x1c, {0x2f, 0x1b59, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}}, 0x24) getdents(r1, &(0x7f0000000140)=""/174, 0xae) 3m11.50061274s ago: executing program 3 (id=4530): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x104085280, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000040), &(0x7f0000000080)='%+9llu \x00'}, 0x20) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r7, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3m10.436709684s ago: executing program 3 (id=4536): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) open(&(0x7f0000001100)='./file1\x00', 0x329002, 0x44) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/stat\x00', 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xffffffff, 0x8000000008000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{{0x77359400}, 0x2, 0x3, 0x3}, {{}, 0x16, 0x3, 0xf}, {{0x0, 0xea60}, 0x3, 0x7, 0x4c}, {{0x77359400}, 0x17, 0x2, 0x7}], 0x60) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000000b01010126ca7000fbdbdf250500000509005d006365706800000000"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001) request_key(&(0x7f0000000180)='ceph\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000", 0x36}], 0x1) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000100)={{r0}, "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"}) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/18, @ANYRES32=r5, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r7 = dup(r0) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) 3m8.458419859s ago: executing program 3 (id=4541): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000000)={0xd1, 0x92d, 0x9}, 0xc) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000040)={0x0, 0xffff, 0x0, 0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x1ff) r2 = syz_ublk_setup_io_uring(0x3686, &(0x7f0000000100)={0x0, 0x1615, 0x8000, 0x2, 0x2d2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, 0x0, r4, &(0x7f0000000240)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x1000}}) r5 = syz_open_dev$dri(&(0x7f00000002c0), 0xfffffffffffffffe, 0x280000) ioctl$DRM_IOCTL_GET_STATS(r5, 0x80f86406, &(0x7f0000000300)=""/25) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) r6 = syz_open_dev$usbmon(&(0x7f0000000380), 0x7, 0x450800) ioctl$MON_IOCX_MFETCH(r6, 0xc0109207, &(0x7f0000000400)={&(0x7f00000003c0)=[0x0], 0x1, 0x6}) r7 = mmap$IORING_OFF_PBUF_RING(0x0, 0x7, 0x9, 0x30, r2, 0x842c5fb1) r8 = pidfd_getfd(0xffffffffffffffff, r5, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000440)=0x0) syz_ublk_add_dev(r2, r3, r7, r4, &(0x7f00000004c0)={0x2e, 0x0, 0x0, r8, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, r9, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000480)=@any_dev={0x3, 0xf13, 0x0, 0x0, 0x1000, 0x8, r10, 0x0, 0x42}}}, &(0x7f0000000540)) ioctl$XFS_IOC_READLINK_BY_HANDLE(r11, 0xc038586c, &(0x7f0000000680)={r0, &(0x7f0000000580)='/dev/dri/card#\x00', 0x80400, &(0x7f00000005c0)={@_ha_fsid={[0x3ff, 0xe74]}, {0x81, 0x4, 0x705a85b8, 0x2e5}}, 0x8, &(0x7f0000000600)={@_ha_fsid}, &(0x7f0000000640)=0x1}) keyctl$get_keyring_id(0x0, 0x0, 0x1) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x80, 0x1405, 0x400, 0x70bd2a, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) r12 = syz_io_uring_setup(0x282a, &(0x7f0000000800)={0x0, 0xfcf9, 0x8000, 0x2, 0xc8}, &(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000900)) io_uring_enter(r12, 0x60d9, 0x438c, 0x20, &(0x7f0000000940)={[0x5]}, 0x8) cachestat(r0, &(0x7f0000000980)={0x101, 0x5}, &(0x7f00000009c0), 0x0) close(r8) pipe2$9p(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84400) write$P9_RSETATTR(r13, &(0x7f0000000a40)={0x7, 0x1b, 0x2}, 0x7) bind$inet(r0, &(0x7f0000000a80)={0x2, 0x4e23, @loopback}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r8, 0x4058534c, &(0x7f0000000ac0)={0x0, 0xb, 0x32d, 0x5, 0xd, 0x3}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r8, 0x4004af61, &(0x7f0000000b40)=0x1) writev(r0, &(0x7f0000001e80)=[{&(0x7f0000000b80)="dba92ced480af9603681cc2e65d3037de4b955a791a4fa5ab9ff8162f4fe81da8750f81584341836f01280f03f89561919b04a647ecb98b63d71fc14eaa1db7aebecc01513af215855f2b87c9798889ba8099cb661586aa5ce593cd2dc557a8fa1401af4951e82e320784e4431925d4222f354216e14d0f97f49a0b2f2815a6e5cb8f44edf9b61a20448be7393bf19698db5281ed2b7", 0x96}, {&(0x7f0000000c40)="2e918386373a0b9e16d1ed20dab56bb3825267ee21eb3ed04d9db66369fe1088caa2d2f4253405f2254bdaf99848743c", 0x30}, {&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000001c80)="e06752e018411250900f0b7f26dec0048cbb4b7464d02261d678215750ed7bd4f4a6833b02b0ba23a07cf94c64aea29e4bc15248c05b8cce7a15e94f9081f6b7eead300abac5e330d7dae378a72be0baa2c4f30a39a9be244acc20c99ea37c13a640c7f8be6aa7391874632ac1a5a78642340245e11f79bdd2d5cca0316702e7bb042aba16bab5e15480c5e51fe4cd8b18bb0a", 0x93}, {&(0x7f0000001d40)="a4f8814694866c55a2e301d4c3e54c687c59990bf2af76dbfb5e2bf564371fd50d3d93ec1c094e7ca29b2ba43c2fc5a5ab2c2aa7281050d35fb7676c896f57dffc30233064e8e30d05b2d009a95da9c14fa20c29e4fd8fc93d5bbb373740840cf87aa4aa3ce20429455b7bdaf56d807c62e3307b9aa18c30f69e59abe4624800c4f26f4522afb1c24532c274182012700a1808f734cd188e91c825b6d19ff7bdce54b8abcba497c4dbf7594c115b6e73a47fc46d147eca", 0xb7}, {&(0x7f0000001e00)="32c4a35381877035773b8f1843f64f08a7ad8b448fd5686a1681b0d61d66b11dfaaee1788280f67c", 0x28}, {&(0x7f0000001e40)}], 0x7) 3m8.269325664s ago: executing program 3 (id=4545): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b000f000000000904000001dbcc7a000905", @ANYRES32], 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="74000500", @ANYRES16=0x0, @ANYBLOB="010028bd7000ffdbdf252500000008000300", @ANYRES32=0x0, @ANYBLOB="080026006c0900000800a000070000000800a0000100000008009f000600000008009f002acc2a21080035000500000004000a0024006e8004000200040001000400020004000200040001000400020004000100040001"], 0x74}, 0x1, 0x0, 0x0, 0x24040840}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x2) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) sendmsg$NFT_BATCH(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x4048010) 3m4.650420917s ago: executing program 3 (id=4549): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_getscheduler(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x2, 0x9, 0x1f, 0x1, "7dcd43410dff3837c8bef2401f2e6f99545474dd036ecfaf14347c53ada85678a1d247f807fd33318feaa63c7ee1fdb16e780191ff682ed0c28cddf29aec54b8", "a574cee70651116aaf1afc4b0945efb67721ac61bf44ccd284a3078c1170aa90", [0x55, 0x1]}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000697000/0x2000)=nil, 0x2000, 0xd70f4c14f3193ead, 0x810, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1980, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000080)=0x1) pwritev(r5, &(0x7f0000000100)=[{&(0x7f0000000540)='\x00!', 0x2}], 0x1, 0x739, 0x1) pselect6(0x40, &(0x7f0000002640)={0x7, 0x0, 0x2, 0x400, 0x2, 0x4, 0x6, 0xc44}, &(0x7f0000002680)={0x5, 0x3, 0x349, 0x1b, 0x0, 0x3, 0x8, 0x98e}, &(0x7f00000026c0)={0x9, 0x89, 0xc3a, 0x5, 0x8, 0x7fff0000, 0x400, 0x4}, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f0000000200)={0x0, 0xffffffffffffff95, 0x0, 0x1, 0x0, 0x0, 0x20040011}, 0x0) recvmmsg(r6, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/82, 0x52}], 0x1}, 0x3}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/157, 0x9d}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f00000006c0)=""/137, 0x89}, {&(0x7f0000000780)=""/27, 0x1b}, {&(0x7f00000007c0)=""/215, 0xd7}], 0x5, &(0x7f0000000980)=""/98, 0x62}, 0x5b1c}, {{&(0x7f0000000a40)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000ac0)=""/147, 0x93}, {&(0x7f0000000b80)=""/193, 0x123}, {&(0x7f0000000c80)=""/27, 0x1b}, {&(0x7f0000000cc0)=""/166, 0xa6}, {&(0x7f0000000d80)=""/171, 0xab}, {&(0x7f0000000e40)=""/169, 0xa9}, {&(0x7f0000000f00)=""/179, 0xb3}, {&(0x7f0000000fc0)=""/232, 0xe8}], 0x8, &(0x7f0000001140)=""/152, 0x98}, 0xffffffff}], 0x3, 0x0, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x24, 0x2c, 0x933, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$NL80211_CMD_ADD_TX_TS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) 3m3.605228794s ago: executing program 3 (id=4554): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) (async) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) (async) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() (async) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a310000"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c0000000d0a010100000000090900000a0400010900020073797a31000000000900000073797a3100cb7b27"], 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000340)={0x3, r11, 0xfffffffa, 0x4, 0xb, 0x1fd, 0x1}) mknod$loop(&(0x7f00000004c0)='./file0\x00', 0x6000, 0x1) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f00000002c0)) (async) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r12, r12, r12) io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0xfb6e, 0x8, 0x4, 0xd4}) 2m47.968998443s ago: executing program 33 (id=4554): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) (async) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) (async) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() (async) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a310000"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c0000000d0a010100000000090900000a0400010900020073797a31000000000900000073797a3100cb7b27"], 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000340)={0x3, r11, 0xfffffffa, 0x4, 0xb, 0x1fd, 0x1}) mknod$loop(&(0x7f00000004c0)='./file0\x00', 0x6000, 0x1) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f00000002c0)) (async) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r12, r12, r12) io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0xfb6e, 0x8, 0x4, 0xd4}) 2m36.290260831s ago: executing program 5 (id=4663): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x170bf2a, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0xfffffffe}]}, 0x34}, 0x1, 0xfeffffffffffffff, 0x0, 0x4920}, 0x44860) 2m36.0113806s ago: executing program 5 (id=4665): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00'}) syz_emit_ethernet(0x86, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @multicast2, @empty}, {0x4e20, 0xfffc, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x2, "e5410e86db87a41f716be8e1fa0fe2fb143899778cc5c15c1337404bb397c0fc", "0c17d7b0eb591c2a7eb609eb8d2d9d15", {"28cbbe8b3bc8849d1e6124e7e5913283", "00802000003211817ada1e97297a54f5"}}}}}}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24041091}, 0x844) sendto$inet6(r2, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfb3, @loopback, 0x2000003}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2f, 0x9, 0x70bd25, 0x25dfdbfd, {0x5}, [@typed={0x8, 0xa, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) socket$kcm(0x2, 0xa, 0x2) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) getrlimit(0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000200)={0xfffffffc, {{0xa, 0x4e21, 0x48d, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe}}}, 0x90) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000280)={'netdevsim0\x00', @remote}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) 2m35.184498307s ago: executing program 5 (id=4669): syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000900)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb3b3d0056c1d4dcdb4af167b4fe035bbb095873026e9cc91abe1d8651713c8a2d99372a84c77987d6c353600a391736d807c05228bea65fae42cd2c7756d0af95ad6a18ffc54676dd4642d8f3242c50b5deb8cf57d40c8588ffb15318e8f811bc49cee2bd763a799ab15620be3368dcd76b799f6ad7678a5d2422716728b1e0e25658b1f762ba17e1bf7", 0xcc}, {&(0x7f0000000a00)="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", 0x236}], 0x3, 0x0, 0x0, 0x3abd65e6ec77e0e8}], 0x1, 0x4040840) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) write$binfmt_elf64(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e005666d37500010000000000004000000000000000df012000040000000000000003003800010007000200010003000000000000000300000000010100ff"], 0x509) close(r5) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2000405, 0x0) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, 0x0, 0x0, 0x0) recvmmsg(r7, 0x0, 0xffffffffffffffcf, 0x20, 0x0) r9 = socket(0x10, 0x2, 0x0) write(r9, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r9, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) listen(r0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x3, 0x270, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x1a0, 0x20a, 0x278, 0x1a0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffffff, 0xffffff00, 0xffffff00], [], 'ipvlan0\x00', 'caif0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xfffe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x7, 0xc, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) 2m33.254253886s ago: executing program 5 (id=4676): openat$cachefiles(0xffffffffffffff9c, 0x0, 0x800, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket(0x2, 0x2, 0x1) rseq(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x5}, 0x22, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x60, 0x887}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x109001, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002dbd7000ffdbdf255c0000000c009900e00000004000000008006b003c00000008006b00f000000008006b007800000008006b000008226b006801000008006b00f000"/82], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) sched_setattr(r2, &(0x7f0000000180)={0x38, 0x0, 0x1000004d, 0x0, 0x0, 0x4, 0x2, 0x10001, 0x8538, 0x2}, 0x0) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000001, 0x11, r6, 0xc10c3000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x2000000000000025, &(0x7f0000000140)=ANY=[@ANYBLOB="00fd5100000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x34, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x104}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000ffec00000000000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r7, 0x25, 0x0, @val=@perf_event={0x8}}, 0x18) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000040)=0x1) close_range(r9, 0xffffffffffffffff, 0x0) 2m33.050741204s ago: executing program 5 (id=4677): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000bc0), r0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000280)=ANY=[@ANYBLOB="3400ffff", @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf250600000020000180080003000500000014000200776730"], 0x34}, 0x1, 0x0, 0x0, 0x24000400}, 0x40004) 2m32.887454912s ago: executing program 5 (id=4678): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) sync() sync() ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_all\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r2, &(0x7f00000000c0), 0x2) read(r2, &(0x7f0000000180)=""/236, 0xec) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000140)={0x2, 0xf4}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0x3}, 0x2) 2m17.722374338s ago: executing program 34 (id=4678): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) sync() sync() ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_all\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r2, &(0x7f00000000c0), 0x2) read(r2, &(0x7f0000000180)=""/236, 0xec) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000140)={0x2, 0xf4}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0x3}, 0x2) 1m36.9827996s ago: executing program 2 (id=4891): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000380), 0x0, &(0x7f0000000200)=ANY=[@ANYRES16]) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000240)='./file1\x00') unlink(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x400003, @mcast1, 0x2}, 0x1c) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018406c256d00000000000001090224"], 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) syz_io_uring_setup(0x3bd8, &(0x7f0000000280)={0x0, 0xcc19, 0x80000, 0x0, 0x41}, 0x0, 0x0, 0x0) inotify_init1(0x800) syz_open_procfs(0x0, &(0x7f0000000300)='net/netlink\x00') openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080), 0x102, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 1m34.572033941s ago: executing program 2 (id=4900): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f0000000000)) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) ioctl$mixer_OSS_GETVERSION(r0, 0x80044d76, &(0x7f00000000c0)) r1 = userfaultfd(0x2) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) 1m34.441401227s ago: executing program 2 (id=4902): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x2b, 0x40000006, 0xffffffff, 0xb49, 0x9, 0x4000008, 0x2, 0x3}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) ioprio_get$pid(0x1, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x8, &(0x7f00000001c0)='grpquota') quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0x5, 0x2, 0x1, 0x6}) quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000101, 0x0, 0x0) r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000007c0)='\xcf\xed@/\xfe\x94\xc3\xe0,i2\xba\x1b\x8a\xca\xe3\xc6+g\xe7RE\xac\xc4\xd8\xbfr\x15\xfdY\xa9zBZ\xafU\xc3\xa4\fA\a;\xbcZ\xcbc\xe1\xbe2\xc8\xe3\f\x81-X\xd9\xcaP\xb2Q;\rh\xdfD\x04\xe2\x12\x99\xbb.\xacS\x8d4\xbcF\xe5\xb7\xb1\x02\xa0\xc5\x7f\xefW\xbd\xa5\xea\x9cj\xf0\xfa\xfe+\x03\x17\xe5\x81\v\x9a\x8f\xed4\xb5\xb4T\x1e \xb8\xce\xa5@\xd0\aL\xbf\xb6\x10\xd3\xbf\xe2\x94]\xa8\xbc\xfa\x00\xa3jV6\x97[\x9ac\xcem=\xe8\xc2M\xdbcs\xe9\x9e\x92`\xad\xb6\x1f\x95\x82\xce\xefU\x91&\xea\xd1\xcez\x88,(;\xc8\xf8\xec\x1c.\xf1\xf1\xe0\x1a\x90X\xb2\r\x17-*,\xcb\x83\xe8}\xc5\xb6\xd2XG\x9a\x97~oc\xc2\xcc\xf7\x18\\\x95\xd0/D\x12\xd0\xdeB\x9d(?\xf3\x90\x7f\xebwJc\xe7\xc9+\xf7P*]<8R\x9e\x1ffH\xfe\xa7\x83|\rZAt\xad\x04\x00\x00\x00\x00\x00\x00\x00{%Uv\x05U~\x03\vt\xdef\xed{\xc7\x18\x97`|\x9d\x00\x82\xa8\xdc\x81\xa1| G1\xcdK\x15\x8fD\x13\xdb\xd5\xfcX\xda\xde\x90/YJ*\xc7\xa07\xf1E\xb5\xfa|eF\xd7\x02c\xac6[\x97a2Mv\xfeV\x89y\xda\xd3\xdf\x98\x87\xfe+\xe2\xc0\xba\x80\xcbZ\x982:\xc2\xcf\xf0\x96\xa3A\xed\xe1\xc1A\xb7\xc1\xfe\x7f\xa9\xbd\xf2Gtz\xee\xc0\xd0\xc3tb\xbb\xfb\xfd\x84\xa4\xba\xccQ\x9c~\x05\xb3\xabV\xabF\x12\x06\xa92\xbb\x91.4\x9e\x02\x00\x00\x00\xb2\xc7f\xbb\x81\xe4\xfcf\x9d\x8b\x00y\xedBAD|1\xd3R\t\xa4~\v\x1b\xc2\xa1+1\xa92\xebt\x01\xb6\x1aj\xbe\xdd\x9a\xf4\x8c&\x89\x8d\xd8\xaf\xba\xe5\xef\x9eFZ[\v\x13\xe6\xc4S[9', &(0x7f00000003c0)='%\xff:\x04\x00|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\a:\xb5\x0e\xec\xa5\xdc\xe5\x8d?\x16BE0\x00\x00\x00H\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0Rm\x11\xf7\xac\x9fY\x06Q\x06I\xd7\x901\xf2:\xdf\x82\xf3m|\xebW`0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000082c0)=[{{0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000001840)=ANY=[@ANYBLOB="34000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32=r6, @ANYRES32=r6, @ANYRES32=r1, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="40000000070e83e876241f475f9f49c62b9440"], 0x78, 0x4090}}, {{&(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000440)="4fcd672f04dced035017ec525ccb3887c86170bfa0abc352be4486c3e3cfd7311be5f0d2cd62330275f18ef0227ba4efc432f53617a7dfd39cbd9b9f5fffb4d6c21ef858713a8a92b57f795c4da6b460e88285fa11fae88ed601d7c64483d28bf21fb6bef4a626a00026d6474fbf11162f02cd3026e59f7ad8a802f5a90802ee477f19e278b2710c5a76c019716d3d9417b83fac326cd94c16271cf89238d194cdbd5c25c79c82842e258da61b2d3898637ec17f18872240bba5ebeb2b1d8ff1", 0xc0}, {&(0x7f0000000500)="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", 0x1000}], 0x2, &(0x7f0000001580)=[@cred={{0x1c, 0x1, 0x2, {r4, 0x0, 0xee00}}}, @rights={{0x28, 0x1, 0x1, [r3, 0xffffffffffffffff, r0, r2, r1, r1]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x60, 0x8000}}, {{&(0x7f0000001600)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001800)=[{&(0x7f0000001680)="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", 0xfd}, {&(0x7f0000001780)="68d0925048b19979118c5a1cfb68f2d70c95a75ff9efc8358d6fcf13a324b0a72bdebc055f0968c6d7411b9082a1fe6741b262cbfe549013960751b818df47de6e77cb9e4b50f653cd26a27f1a775498e64bb7d9d0d6bf38f59a857b1b6f5cbb6feffe521c0000908d", 0x69}], 0x2, &(0x7f0000001980)=[@rights={{0x20, 0x1, 0x1, [r3, 0xffffffffffffffff, r6, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2, r2]}}, @cred={{0x1c}}], 0x80, 0x40080}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001a00)="187104afb68058fdf1518ddd84d3f53c8d02", 0x12}, {&(0x7f0000001a40)="abd5d05e891dff7a96775fee6fa7d36da17478567b29f9", 0x17}], 0x2, &(0x7f0000001b40)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x2c, 0x1, 0x1, [r6, 0xffffffffffffffff, r5, 0xffffffffffffffff, r5, 0xffffffffffffffff, r2]}}, @rights={{0x18, 0x1, 0x1, [r3, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r3, 0xffffffffffffffff, r5]}}], 0x88, 0x24000011}}, {{&(0x7f0000001c00)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001f40)=[{&(0x7f0000001c80)="6d5924b1cc30800fd3c5ac5ece26bbf498a080e5efb95cff09e6ea03f198c5048817e9c6db3a83b2ffb07545114fb92a1fbea36e576f83ea77ddd5d77e4e9ee700f768059d8262863ee5a1f3252f0265b03cd58ecdff26d73fec153ea0f0d965b0131089ec498ca23c5f78800efeda22e9fd6deae4908610929ee1f2584c71725a07eeafa75bbb784ffe82cc6b41e2124247711145955d00a316ab4cd42a31b24d2c745c655d844a528e5f40777a621f78ab7650b700ddf787d756d66034a5", 0xbf}, {&(0x7f0000001d40)="ea9dffca2a4a29e19d45b6110628eadaf39a4a105d08c0fa0bc29c251e44edf430ba944513a97f6ed56947a28a411092796af566ef45b390570d9d734428a60c2674317554b60ce53e6525aea54937668589d509758a87618351b1333f64f1beecdef4d48e90b0b14780ef312e2d2ef134ecc3bd032fd781acd6266213fcf17886ed1e9295d82455a4422f66e30a3aaace281fdcec6b48af8a513ada80160f66c43dfc1a7fc1c00d", 0xa8}, {&(0x7f0000001e00)="450900000005bf00a16f3115ea", 0xd}, {&(0x7f0000001e40)="19cdc5ad34293f05ffc46150f2d63b5ed3f4e2e885190621ac0a71f8a7fc741ef91e66e53783fe135d53b48d78e609d5f229ac49c48c63cb0d30f1ebc706b5bba0749758d62038c3246ecb314e51e64272854421800f2ac8f5782a66b49b7c5ccaffbd8565e3487e13d32cd59e586a55032254657c33ebc0c4204c6fd99a98f29645757f6bb0f4ccd17e6be01b018c607a1cec81b70b8730517c4c900523352312a68a8070283586a0e19f6a597af2633cc09f12fd2bf48629a0ad824c9f515ba9c66ea0e34341da75654a568c6206f1d68d7ac531bb9dc4944c5fb3cd208425982650635e", 0xe5}], 0x4, 0x0, 0x0, 0x40}}, {{&(0x7f0000001f80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002240)=[{&(0x7f0000002000)="e331e0f9285479e18b30155f9f43ed8451a280ae88e93b3e25c95489fcbaf4d9518ab689833349569a9b21a4205fcea3bbc651fd393593a0a2b686f9ae57dabf594d78ac58af6c51644814b395c35d94c6c005c94a34006a1340a932b3e4e04c0f30b785836dc729e98107bd3edc4105f776f5ee1bf4764280eb2c9487b56f81dad8", 0x82}, {&(0x7f00000020c0)="0f73dacf19111355b6bd21f6bc68f4aac8064336f162c10572c4956b540a515a9ca62d2d4bd9462a3a9164740a7245e3a8a29a761c17188280ad9342b8c03a9ad2201c58", 0x44}, {&(0x7f0000002140)="e6ebd7001a4e38a7cabb19dbae99007a35fe3386eba5ec12194a5845f1334533cae15db6e9e831a4cf2b7420b546bf8cb759c0d7a36e408885e9ca3af02b00628f01785ab6d0f49dfd582bfa8e615778739c35650a3ec11344610e90e268f9bb6d06f59fa87aaa9375ef7bf9e1ebd5fc24366e3568f8c26b7dfbf5a0e06bc4ccda195245c418f21a2689c55754742d2e805b7191be05c6048dab84f3404e9e7c2696cd656516516390f4666f265da000dca5c27889f6895242cf81ef288ac01ebe33fe340e3da4a67836fa3be184d4b287ed0e94412e808c6276f954941c34d4464a9445a5951d00ca85025bc9aaa8a446e8c0", 0xf3}], 0x3, &(0x7f000000af80)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @cred={{0x1c, 0x1, 0x2, {r4}}}, @cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @cred={{0x1c}}], 0xb0, 0x20004000}}, {{&(0x7f00000024c0)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000002a80)=[{&(0x7f0000002540)="c15f", 0x2}, {&(0x7f0000002580)="3edaf4c388d57024a5af846f7699f3588286e9fc56e5885f83f5386a75e581d45446f8cac163e00c943e4fe7b82696a3765c1ba06e92aeecddd067e68187edb76c3daaa47a9051ff2b1f75f9d0a959c0025f76bd94cec11212c705fe33f77c61ff1802c6d22c78d2263ffbffed5bb7eb3f9cc430da369307aa426d81926b", 0x7e}, {&(0x7f0000002600)="5164527a28080ceab2bf2d7dfae9ae76c3d28f3c484fc4cdc0356d95fffebcabd5a075261c235d515e0f882c39744d0b0dba1c9fb8e9070ff69b57733e75533c2ce8a376f354d5b7c7c71a248b15906dc1a47405504093ccb2735c998f9e51066b410f739a9af9b2dfe24769a7d3ea01f552f8b0fc59cc12b74f46a12dba18999baf15c312d22dede04426f8cee0b076014571be7d75508f697b5e88c8deb77074a110861b3dddd3b124b9c5e67640da1b4a85754557205b33bb767e868cfcbac7c0ab94d401d44a7dd0438b440076adf590ed73fc7f7a89", 0xd8}, {&(0x7f0000002700)="2dcfdd67fda605eff48e09a296e6798deb428bbe907fa5653ccb800def5a14424981a05c815c9d8eb5dd915cb252e7b369536102", 0x34}, {&(0x7f0000002740)="7e61f969faed5ccdf9046324b0dcef482d757f4105b6763d6ec90043afcbc6dfc6aac25101984bd8a5abac2406bfe14b4a827a16522e664e75add50c5372abfe6f110cc1ef7c62c3147190491829622bcda7716719d5535c9c5b3bec3b49b1d544572252f88f050de835cb0df491044bb19cc5d80a34a04930040c81b65c6de52e49e483da6850aa0f64e5cd61cc661dcb78621e27625d0192a223fe545b828f10b0f16cc547a87e9627a5a9ab7f8e6a384e5ff015b534cdf391eea57c185a9c5784e0d60c1c4c3e30eed4c23f50a1b819c2e4212429", 0xd6}, {&(0x7f0000002840)="ce202760eee7a35cd47ced8c97cf50ef726d17e004884966c81cd8154b3e42cd69df2417b99dfd0b2064c96e2d1939683b570ace403d06510eb3f8951a63559da35e24260f52addcfb369154cdbb747065466242c8cd8cb1f223947841934ac501639863a3841226801682c0959ce8e1e067abe4a5d7fd78971a18aba23c8f400e5a3ebfdbfbf16715f73634d90ac0f29c59f79711e927fb617b7fa4569e8e3921a91819014c21ea6985cde801cff8bc6f7960bd", 0xb4}, {&(0x7f0000002900)="5c229eb93ba12f6bce9a7a763a2371db", 0x10}, {&(0x7f0000002940)="f5eadad5b99a22407505c09d9103ab4beb1fa42aefe73efb8faaa0d1861a34a82c02cc057a6f204c073e18c76f606a570dc3ec617236fece843940961377973834b18ea56ce37dacd797d48ff729771259c13dbc8916d6e9adf1fb4e0ebfab203d334807b5c153f5dcdfdf794891e0223913ecfd5dc4ac3bceb8c4d12a7a4e8d2d82815898836c81c522cd1541a26b05d9283b474860b3f004f2c26d32c97d733084d355d69446a1c01ac04013c803127234137c4f523442", 0xb8}, {&(0x7f0000002a00)="7b555e71001406076f3694a4320a1aaf232867e757fcedaa177889f2df09c25ef0b0d1beb37d17ef2f4439e645afd8fb4d96a36480d8fb4f5044a5917ccdd269e1b42168e38e", 0x46}], 0x9, 0x0, 0x0, 0x4840}}, {{&(0x7f0000002b40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004d80)=[{&(0x7f0000002bc0)="e825fe437a25b11225b24cf021aeeb8222e00db261a315367e7ba10264abfdf6b844ee3176149770d71ccc30519f5e628bd9b55f970e90380f077b01331a64a0a81be4d7a169bc53b1bc7f942d7f65865c1f9c35f36816fa46aff872f4397bd1cd72b62f565f2b2e4b996f7a1f5a7deaec5e6fb25690dc0c66a393e1b3097071161e599271f78c36bbcecad0097b0cd3fbe556887cc3152340746bb979b8bd4b342dcd80a04d4ce58ba93f10aa7b4ccd64116a952e6a5c0cdaf2c8591a6d5c00249e78abc9a81f88ded05421d190eba2a2f4532bbeab3af4459d7fa9525c0e7316ba", 0xe2}, {&(0x7f0000002cc0)="973731250c3c6072aa665a4b3b818e30722da552379da36e9a8fb6547acbb8acd5fe290d6ecea58da8dd914363a5a29a19b4eb34cecb65f16dd0d6eca8adf5b4309bd2a5f8db5fe5a9bb5a1856fe29d2a680660b52920754c27a817e44cfa0396cc82b5a507c80c2d0ab684cf3", 0x6d}], 0x2, &(0x7f0000004dc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, r1]}}], 0x20, 0x20000090}}, {{&(0x7f0000004e00)=@abs={0x0, 0x0, 0x4e26}, 0x6e, &(0x7f0000006340)=[{&(0x7f0000004e80)="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", 0x1000}, {&(0x7f0000005e80)="14f2440304c48eb3376abe952b3983b330579d9723d7493bcac85308ff0acf7826894b04033c4c15f01732d847a533154fb72ed3ff6413f1ce5a3433189c0e4c73eb7050ed99c5d7f79d4cfd2b9f9526a32ec21ac717430a51b25037130263e9b4ae8be61fc6d0cdffa7dd65744880a9670238283885c3f99a15a105ea27ade6876d44acb2a17aa11fea3258a74d33fad16448f227be45ca64878323ed5f64148e93bb2ffac30f953ef44c5c4e", 0xad}, {&(0x7f0000005f40)="12d2698c6c88f24b28f684908074001534780a6db0b978a350989600e72bab83417612a1953a062cd1c3aea4c63ab88ef81c4bbd5f1b147439cb467b9722fe753b386a22a0f2e81e45579908376e5c", 0x4f}, {&(0x7f0000005fc0)="7808267872231f206c47a234a7026e3a3b889199ed896dd5055fa35a0ff0e0b0668ab3333edcf540b702504d7626e6d0b8ed5f666b23d0bb077916eb14c70fbba64de25130a8752d335ebf8cbd33528ed2c15c85ea26555b53372895126b2c490a381a0c6596d625999fbb3c745d19b3297fdfca22587732fa3677aa37da53facddda12478d94e85ab69c468b79fa6ffdef426e4d3e959392efccbcb2d1fb3a2e85610297ef4cd86575dd49551ce2795fa7297416561ce850b9088df7c95aa8fe590370ff5d9043c10800d18", 0xcc}, {&(0x7f00000060c0)="d882d3beb4dfd690d642df76d714859ddaab28d43ad36e62b9bcd30125f6e46f77e08f1064f6b0ee35bbdf96b30c53c1862ddfa1f2cd458d4cca59617a604bf30b45da3bc56071335e5e0725bc04a0dd5f40d66483d54d4228b64cd550a139838cbd10f08c6e9e8cf60ab4c20fe960f3e8958a353f2e4e3b6773686a9abd7bf5800793ac446ab9d7708f040c6439d1269792d685ea38229014f07f71ac4843c3c9e02d0f63", 0xa5}, {&(0x7f0000006180)="292d98a98ab59ae764b72dbb2bdf136faa0a41dcabbf879181cdcc42b416473382b8c305d2b52b8b1650cb8decbccb87a637599c61f1d04d75bdaf6e5333cfa61ebd6b5f387e057db37b1a39670f6408abea7fd80889e498e2b71d15fa0890", 0x5f}, {&(0x7f0000006200)="faa8bbfe4bc8e98434753955ffc0c22fe92da9d1e5e9e6ccd2e71a0437f5e5dca932663984782aa7da531ff934a53b920a0ed4031e262b129a67943ef63b11dc4bce", 0x42}, {&(0x7f0000006280)="c4fd79f694b368b10ac95e4532d13f4617ef01d6116bafa711f1cd7c878ede9a55cf4a1d2b0401a769d271a2d6c18424995e0b367d1d5e74a6d56faad6c70206486d882d0b1f678ad944b83238b467a70b6120246f7274a5b2a10f8265d3614d3f3d70172c7ee620b19b6b9f521793274eafce7624202df072cf4238ceb01d725c8b7466e1774fc30607ba5dd7ac000000000000", 0x94}], 0x8, &(0x7f0000006440)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, r6, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r4}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f0000006a00)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000006ec0)=[{&(0x7f0000006a80)="786bfe1c986ddc387b28bddcdd35741ca3b0553d3c71c9071b668b70b0551c6a78cc569c7528098f9ff6317e91f0f0ce1f96bb790d35a48b0a21e642553342800381461b84b597e8cbaadaf91d28f8094747b183845d8496cc02ce5b66c65738f487e9aaffc631ba4b516b1f6569be271eaff2a0ef049b216311f4f6671e2ee681afbf0bbb03b8ee714c56797bf900784f6f87596ac0e63d80ab8fe02cd5cd24d83415d61c1fe77e1b5eff5a86038e08939e4df23fe346185a79803e56871d6730cb34242f277515bf158a1cdd84e3be3d843ad7d8d8ae56db40", 0xda}, {&(0x7f0000006b80)="138d3cc1100d91c62b6dc501b22bd9565730062b81bd63e12ca6b4047e744508820d814695c6dc8c87e7c5789da4d6c4352d2cf940e1674c8f64566eee31d8fee0bfa9eed9222111c0729901e38fe3ab28e624a9d9004385952ca65873800c95b5ce092624bededf43", 0x69}, {&(0x7f0000006c00)="7117627824d82723b6a144a0f2f856171d707997ff031fa4dafa095241695ea28210a92de38cc0dbcfa70f99aa4d4dcbbfa0cd833ab24840ffc103be6ddc7418e1bb18ec6113df303ab31b6f362d26d5702ce4b96cccdf6e651bb0788aee192b491a5f407a7ad4d5cd4d0a37785ae8befd9b959db9d8059d0d7f91f16b136dfbb9abcc80c653639faba3419d0080a761456744fc4edb35aa2105dd9f2d4fa76c0ea0d1925b8981d191d13f3af721", 0xae}, {&(0x7f0000006cc0)="8b734fa5fb056fb657f58a2bbcb719aee7ca236eb39cc29f512542da256e2d79160f0fb801d049aa1c60ef74f5808396c4684a8a2f96ee78f49843b90dd5d0dff6120b313421054cc62718fe477c2893f726", 0x52}, {&(0x7f0000006d40)="ea118170be3f1cbd4b7029a2a20168ff519222d339b27c2a737fd5f94e83dc8b56931412407b1b4984c42df3c1fe4a4e048c326b1c38a339ed43fc3e31be7409d1defc", 0x43}, {&(0x7f0000006dc0)="62f9e695ff24114b2fe11661765638d1061ef8d1af6a490cb176142720e99f0efc20ba1cf9a5802698b36f5cbf774dd06932a53a2a1d01ff5c", 0x39}, {&(0x7f0000006e00)="90ad6e958c8d767ef0b012eaafadd4135eb65f4555eef1f4b7bfe23efcc62aa5317b709e856acf53fceecda6608062b6e767ed5f22763c30dfad1177ddad8ea3bda897d9d04417319aec3e5141d5e367f7c3814db8f0e483b795f393f3763f548481f5399ecad1c11e6f2d7cd7c7f0a7fb09bbc3b07e0e87fcb94d6a3c3860a3c3afa854beb34bfa9dd8ffa8b96b8980d75efd4627e136e8150067d82e95f89173891fc917d39862b0aef72f43867930b5352301ed", 0xb5}], 0x7, &(0x7f0000006fc0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r0]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r5, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff, r6, r2, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [r3, r2, r5, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x1a0, 0x20000040}}], 0xa, 0x40) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000002d40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioprio_get$pid(0x2, r9) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001e00010027bd7000fcdbdf250a000000", @ANYRES32=0x0, @ANYBLOB="000000000600050000000000d0a64e76a4e97bde85596fcf37c8b4f74fd5695d498dbe94c49fdb450cd6801e15dc7f525c790c215d251b"], 0x24}}, 0x20000000) sendto$inet(r10, 0x0, 0x0, 0x32000800, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r7) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x0, 0x1, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r11, 0x0, 0x0, 0x0, 0x4, 0x8, @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x1, 0xfffffffe, 0x1}}) sendmsg$nl_route(r2, 0x0, 0x8000) 1m29.472523128s ago: executing program 2 (id=4923): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) (async) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1c2a) (async) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async, rerun: 64) socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) r1 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000108000000090476620160291d000905", @ANYRES8=r1, @ANYRES16=r0], 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async, rerun: 32) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) (async, rerun: 32) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) (async) rename(&(0x7f0000000440)='./file0\x00', &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async, rerun: 64) r2 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) (rerun: 64) write$P9_RVERSION(r2, &(0x7f0000002200)=ANY=[], 0xfffffcd9) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)=0x2b1b1983) 1m17.037764594s ago: executing program 1 (id=4984): ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0x41000, 0x3, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}, {0x0, 0x60000, 0xb, 0x0, 0x0, 0x17, 0xf9, 0x6, 0x6, 0x0, 0x4, 0x6}, {0xeeef0000, 0x6000, 0x13, 0x5, 0x0, 0x0, 0x81, 0x0, 0x4, 0xe, 0x1, 0x6}, {0x30000, 0x0, 0x8c830142212b14d, 0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4}, {0x3004, 0x80a0000, 0x3, 0x0, 0x5, 0x91, 0x8, 0x20, 0x0, 0x84, 0x1a}, {0xe000, 0xd000, 0x10, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x84}, {0x4, 0x5000, 0x4, 0x4, 0x70, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x2}, {0x1, 0x100000, 0x0, 0xf9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, {0x70000, 0xffff}, {0x0, 0xfffe}, 0x3771459b4651a1c4, 0x0, 0x7000, 0x0, 0x0, 0x1, 0x900, [0xfffffffffffffffc, 0x0, 0x0, 0x40]}) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c200000000000000000008004500001c0000000010029078ac1e0001e000000111009078e0000001144a1b"], 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYBLOB="fac5c9a7c7e9cec50d73ea7f82802a8b1bf605a1188c6ba15e7b4313911512c3284a463d697f32afd8126932eee331536a67e80c7d0318e277b8fd6a62264d6b57dfa91e20d58a7e1ea991429179022228ef42823012cefc066f31b3a11fd8f6f8e50d1f11860b3e38fe150d47e864c56fd655260843626bcfc5", @ANYRES64, @ANYBLOB, @ANYRES32=r0, @ANYRES8=r0, @ANYRES64=0x0], 0x14) r1 = socket$qrtr(0x2a, 0x2, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x181003, 0x101) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x8, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r4, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r4, 0x1) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000020101080000000000000000000000050800084000000c2cb979a4fe9870e40bbc6f38a8e6224e020dba3786e807b777306573bc8dc44d5df81815977a5da1249104fc4cb57f"], 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x80) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f00000000c0)=0x6f) write$dsp(0xffffffffffffffff, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xc8) writev(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m16.787256644s ago: executing program 1 (id=4986): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4000004) r2 = io_uring_setup(0x7, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) read$FUSE(0xffffffffffffffff, &(0x7f00000193c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_getaffinity(r3, 0x8, &(0x7f000001b400)) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x18, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, 0x0, 0x0) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0xf1e5, 0x400, 0xa, 0x20002f4, 0x0, r2}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) sendfile(r5, r5, 0x0, 0x200000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x4000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x2, 0x1e5}, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) r10 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x241, 0x0) ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x100, 0x4, 0x2, 0xc, 0xe, 0x7, 0x79, 0x3, 0x80008, 0x6, 0xbe5, 0x80001, 0x7, 0x7, 0x1, 0xfb, 0xfffffffb, 0x8007, 0xbe, 0x80000001, 0x89, 0xca9f, 0x0, 0x20001e58, 0xfffffeff, 0x78, 0x3, 0x8, 0xa6b5, 0x0, 0xfffffbf8]}) syz_io_uring_submit$UBLK(0x0, r8, r9, &(0x7f0000001a00)=@ublk_io_need_get_data_sqe={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0107522, 0x0, 0x0, 0x0, 0x1e0303d7fa4e9fa1, {0x7}, 0x0, 0x0, '\x00', {0x2, 0x6e5, 0x3, 0x0}}) syz_io_uring_submit(0x0, r8, r9, &(0x7f0000000980)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r11}}) syz_ublk_add_dev(r7, 0x0, r8, r9, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000019300)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000004a4ee3446ac874159b236d3e39a9d6547df65c10c24c1d823ee6ae3ff031b87712f6b38d583212cb42903198aedbcebc3883a9be3d1f1afbcf534773498703a6b7e7d7eed7f901447b73bf38be88ee49d38c0fe95e1c3aff9fbd08ed", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES8, @ANYRES32, @ANYBLOB], 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) 1m16.691367339s ago: executing program 1 (id=4988): r0 = syz_open_dev$swradio(&(0x7f0000000c00), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000c40)={0xb, @pix_mp={0x38305343, 0x5, 0x49323159, 0x2, 0x1, [{0x4}, {0x5, 0x2}, {0x9, 0x5}, {0x6, 0x3}, {0x2, 0x5}, {0x7}, {0x1, 0x3}, {0x0, 0x4daa}], 0x7, 0x8, 0x0, 0x1, 0x6}}) 1m16.553872503s ago: executing program 1 (id=4989): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000140)={0x8000, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x0, 0x0, 0x0, 0xb}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0xd) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000280)='*', 0x1}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="36d37dd61388780263cd6ad7e892a9db0fac49e2eb66b596a86edde373a57be3510f2f937ab1f4a07bed8d03ce4bc6236ab3ac152f7b9ecf7dc6bba5ce60e92463a9acb9b4de2ee64291f3b11538933bef51f8c2acb5304fc25e", 0x5a) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(cbc-blowfish-asm,blake2s-160-arm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343e", 0xc4}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff40}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) dup(0xffffffffffffffff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x424400, 0x0) ioctl$KVM_GET_MSRS_sys(r5, 0xc008ae88, &(0x7f00000001c0)={0x1, 0x0, [{0xce, 0x0, 0xe85}]}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r6, &(0x7f00000004c0)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000840)=[{&(0x7f00000006c0)="62043c00590200000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f901", 0x42}, {&(0x7f0000001940)="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", 0x276}], 0x2}, 0x40) 1m14.396517147s ago: executing program 35 (id=4923): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) (async) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1c2a) (async) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async, rerun: 64) socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) r1 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000108000000090476620160291d000905", @ANYRES8=r1, @ANYRES16=r0], 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async, rerun: 32) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) (async, rerun: 32) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) (async) rename(&(0x7f0000000440)='./file0\x00', &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async, rerun: 64) r2 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) (rerun: 64) write$P9_RVERSION(r2, &(0x7f0000002200)=ANY=[], 0xfffffcd9) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)=0x2b1b1983) 1m12.862173013s ago: executing program 1 (id=5003): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r1, 0x9, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x1, 0x3}, 0x20) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') read$FUSE(r3, &(0x7f0000006200)={0x2020}, 0xffe8) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f00000004c0)={0x84, &(0x7f0000000140)={0x40, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m11.955698879s ago: executing program 1 (id=5007): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "cceff5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x82, 0x102, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x0, 0x11, 0xd5, @private=0xa010100, 0x6, "bd182f6d3697d1"}]}}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) r5 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r6, 0xc004ae0a, &(0x7f0000000040)={0x4, [0x0, 0x0, 0x0, 0x0]}) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000000240)={0x1, [0x86, 0xfffffffd, 0x101], [{0x5, 0x8, 0x0, 0x1, 0x0, 0x1}, {0x7, 0x2, 0x0, 0x1, 0x0, 0x1}, {0x6c, 0x100, 0x1, 0x1}, {0x8d7c, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x7, 0x7, 0x1, 0x0, 0x1, 0x1}, {0x2, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x9, 0x77a1, 0x1, 0x1, 0x1}, {0x71e, 0x0, 0x1}, {0x5, 0x1ff, 0x1, 0x1, 0x0, 0x1}, {0x5e1c80e2, 0x4, 0x1, 0x1, 0x1, 0x1}, {0x40, 0x7fffffff, 0x1, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x0, 0x0, 0x1}], 0x4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000180)={0xf0f03c, 0x3}) socket$inet_smc(0x2b, 0x1, 0x0) 56.622161057s ago: executing program 36 (id=5007): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "cceff5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x82, 0x102, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x0, 0x11, 0xd5, @private=0xa010100, 0x6, "bd182f6d3697d1"}]}}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) r5 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r6, 0xc004ae0a, &(0x7f0000000040)={0x4, [0x0, 0x0, 0x0, 0x0]}) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000000240)={0x1, [0x86, 0xfffffffd, 0x101], [{0x5, 0x8, 0x0, 0x1, 0x0, 0x1}, {0x7, 0x2, 0x0, 0x1, 0x0, 0x1}, {0x6c, 0x100, 0x1, 0x1}, {0x8d7c, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x7, 0x7, 0x1, 0x0, 0x1, 0x1}, {0x2, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x9, 0x77a1, 0x1, 0x1, 0x1}, {0x71e, 0x0, 0x1}, {0x5, 0x1ff, 0x1, 0x1, 0x0, 0x1}, {0x5e1c80e2, 0x4, 0x1, 0x1, 0x1, 0x1}, {0x40, 0x7fffffff, 0x1, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x0, 0x0, 0x1}], 0x4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000180)={0xf0f03c, 0x3}) socket$inet_smc(0x2b, 0x1, 0x0) 27.282337631s ago: executing program 8 (id=5119): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24041091}, 0x844) sendto$inet6(r2, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfb3, @loopback, 0x2000003}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2f, 0x9, 0x70bd25, 0x25dfdbfd, {0x5}, [@typed={0x8, 0xa, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) socket$kcm(0x2, 0xa, 0x2) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) getrlimit(0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000200)={0xfffffffc, {{0xa, 0x4e21, 0x48d, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe}}}, 0x90) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000280)={'netdevsim0\x00', @remote}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) 26.653618642s ago: executing program 8 (id=5121): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0xfffffffd) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r4 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, 0x0, 0x0) 26.158221417s ago: executing program 8 (id=5122): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000300)={0x2, 0x86e, 0x0, &(0x7f0000000340)="0000040000cf3b2ba333ffff956e6e6551b5d99f85", 0x0, 0x15}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0xffffffffffffffff, 0x0, 0x8, 0x3, 0x8}}) syz_open_dev$ttys(0xc, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000019700)={0x10000, 0x240, 0x380, &(0x7f0000019300)=[0x5, 0x400, 0xfc, 0x2, 0xfffffffffffffff8, 0x7, 0x44, 0xa862, 0x1, 0x0, 0x1, 0xfffffffffffffffe, 0x8, 0x7, 0x1, 0x6a26, 0xc6f6, 0x8, 0x3, 0x8000000000000000, 0x5, 0x5, 0x795, 0x1, 0x4, 0xfc, 0x5, 0xfffffffffffffffd, 0x4, 0x4, 0x400, 0x7, 0x5, 0x5, 0x9, 0x9, 0x10, 0xffffffffffffffff, 0x6, 0x0, 0x9, 0x9, 0x4, 0xc3b, 0x8000000000000001, 0x1, 0x3, 0xa9bd, 0x16, 0x1, 0xffffffff80000001, 0x6, 0xc4, 0x0, 0x0, 0x9, 0xffffffffffffff74, 0x6, 0xba, 0x8, 0x7, 0xf, 0x1, 0xdf1, 0x101, 0x40, 0x5, 0xa12f, 0x2, 0x8, 0x0, 0x2, 0xfffffffffffffffe, 0x80, 0xb, 0x7ff, 0x1000, 0x200, 0x7, 0x400, 0x986, 0x6, 0x9, 0x4, 0x100000000000000, 0x1, 0x86db, 0x15, 0x8000, 0x6, 0x7, 0xa6, 0x8000000000000000, 0x6, 0xfffffffffffffff8, 0x7, 0x40, 0x4800000000000, 0x67c, 0x5, 0x4, 0x8, 0x200, 0x8, 0x0, 0x1, 0x2, 0x6, 0xa, 0x8, 0x2, 0x4, 0xfffffffffffffffe, 0x3, 0xe, 0x6, 0x1000, 0x800, 0x0, 0x80, 0x9, 0x800, 0xc, 0x0, 0x6, 0xc9, 0x4, 0x3]}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) read$msr(0xffffffffffffffff, &(0x7f0000000300)=""/102400, 0x19000) r4 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, 0x1}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x7000, 0x0, 0x77, 0x8, 0x0, 0xcb, 0x2, 0x0, 0x8, 0x6}, {0xe000, 0x9000, 0xc, 0xeb, 0x2, 0x0, 0x0, 0x0, 0x7}, {0xeeee0000, 0x1000, 0x10, 0x0, 0x7, 0xc4, 0x0, 0x1, 0x45, 0x3, 0x0, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x1, 0x0, 0x7, 0x0, 0x3, 0x0, 0x4}, {0x10000, 0xffff1000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x34, 0x7}, {0xffff1000, 0x0, 0x0, 0x78, 0x5, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0x80a0000, 0xa, 0x4, 0x0, 0x0, 0x7, 0x20}, {0x0, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x3}, {0x5000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0xe, 0xf801, 0x0, [0x80000001, 0x0, 0x1, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) fadvise64(r5, 0x0, 0x401, 0x44ca43298d9b4a59) 25.101439743s ago: executing program 8 (id=5124): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x9}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x82) 24.273144244s ago: executing program 8 (id=5127): ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0x41000, 0x3, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}, {0x0, 0x60000, 0xb, 0x0, 0x0, 0x17, 0xf9, 0x6, 0x6, 0x0, 0x4, 0x6}, {0xeeef0000, 0x6000, 0x13, 0x5, 0x0, 0x0, 0x81, 0x0, 0x4, 0xe, 0x1, 0x6}, {0x30000, 0x0, 0x8c830142212b14d, 0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4}, {0x3004, 0x80a0000, 0x3, 0x0, 0x5, 0x91, 0x8, 0x20, 0x0, 0x84, 0x1a}, {0xe000, 0xd000, 0x10, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x84}, {0x4, 0x5000, 0x4, 0x4, 0x70, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x2}, {0x1, 0x100000, 0x0, 0xf9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, {0x70000, 0xffff}, {0x0, 0xfffe}, 0x3771459b4651a1c4, 0x0, 0x7000, 0x0, 0x0, 0x1, 0x900, [0xfffffffffffffffc, 0x0, 0x0, 0x40]}) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c200000000000000000008004500001c0000000010029078ac1e0001e000000111009078e0000001144a1b"], 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYBLOB="fac5c9a7c7e9cec50d73ea7f82802a8b1bf605a1188c6ba15e7b4313911512c3284a463d697f32afd8126932eee331536a67e80c7d0318e277b8fd6a62264d6b57dfa91e20d58a7e1ea991429179022228ef42823012cefc066f31b3a11fd8f6f8e50d1f11860b3e38fe150d47e864c56fd655260843626bcfc5", @ANYRES64, @ANYBLOB, @ANYRES32=r0, @ANYRES8=r0, @ANYRES64=0x0], 0x14) r1 = socket$qrtr(0x2a, 0x2, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x181003, 0x101) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x8, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r4, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r4, 0x1) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4002000}, 0x80) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f00000000c0)=0x6f) write$dsp(0xffffffffffffffff, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xc8) writev(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 22.437283497s ago: executing program 8 (id=5132): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0}, 0x68) brk(0x8) r1 = socket$rxrpc(0x21, 0x2, 0xa) sendmmsg$sock(r1, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000d80)=@rc={0x1f, @none, 0x8}, 0x80, 0x0}}], 0x2, 0x20000044) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) bind$alg(r3, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x800) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) syz_emit_ethernet(0x1011, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f0000000180)={0xb5, &(0x7f00000000c0)=""/181}) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$FUSE(r5, &(0x7f0000006540)={0x2020}, 0xfffffce2) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x34) 14.620004853s ago: executing program 9 (id=5159): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x18) r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f00000000c0)=[0x7, 0x4], 0x2) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r5, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x41}}, 0x10, 0x0}, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x3, 0x1, 0x0, 0xfffc}, 0x20) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) unshare(0x2c020400) 13.504025902s ago: executing program 9 (id=5162): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x41c) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, 0x0, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x9, 0x81fd, 0x2001, 0x1}, 0x1c) r5 = socket(0x1e, 0x4, 0x0) r6 = socket$inet6(0xa, 0x800, 0x800000) sendmsg$sock(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@txtime={{0x14, 0x1, 0x4f, 0x1bbf}}], 0x18}, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) recvmsg$unix(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r7, &(0x7f0000000300)=""/102400, 0x19000) sendmsg$sock(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r8, 0x29, 0x11, &(0x7f0000000680)=0xab21, 0x4) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) 12.719849768s ago: executing program 6 (id=5163): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x104}}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x1, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000600)=0xe8) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000640)={0x0, r2, 0xffffffffffffffff}, 0xc) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000001000010428bd70000000000000030000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010067656e0700000000000000801400070000000000fc00000000000000000000011400030067656e657665ca000000000000000000"], 0x5c}}, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) listns(&(0x7f0000000000)={0x20, 0x0, 0x2}, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', 0x90980, 0xb5) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_uring_setup(0x1b7c, 0x0) socket$inet(0x2, 0x80001, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x5, 0x5}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) 12.618478364s ago: executing program 4 (id=5164): syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000040)='\x00', 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x48240) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000800)=ANY=[@ANYRES64], 0x0, 0xfffffffb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102384, 0x18ff0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x4000000) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000003c0)={'pcl812\x00', [0x140, 0x2, 0x1, 0x2, 0x1, 0x10000, 0x7ffd, 0x6, 0x1007, 0xc72d, 0x1, 0x10, 0xf8, 0x8, 0x4ce, 0x9e9a, 0x101, 0x400, 0x6, 0x8, 0x8000004, 0x0, 0xa, 0x9, 0x81, 0x200000, 0xae, 0x100000, 0x9, 0x0, 0x8]}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e"], 0xf8) socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x80009}}, 0x10) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x48000) 11.671435603s ago: executing program 9 (id=5166): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002500), r0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000023c0), 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0x802) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, r4, 0x100000000) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xff70) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r5, 0x0, 0x4004) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listns(&(0x7f00000010c0)={0x20, 0x0, 0x7}, &(0x7f0000000240), 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x190, 0x0, 0xffffffff, 0x2e0, 0x238, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0xf}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x20) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f0000000080)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002540)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0b002abd7000fedbdf252500000008002c00000001000500290001000000"], 0x24}, 0x1, 0x0, 0x0, 0x10014}, 0x4) 11.40618954s ago: executing program 6 (id=5167): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x104}}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x1, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000600)=0xe8) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000640)={0x0, r2, 0xffffffffffffffff}, 0xc) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback={0x7000000}, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) 11.150304021s ago: executing program 4 (id=5168): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x104}) r1 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x8, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000605000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x3000, 0x3}) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000540)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@rand_addr=0x64010101, @in=@broadcast, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@local}}, 0xe8) r6 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r5) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x42400) sendmsg$key(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x78377cda788f87c6) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000400008002bbd1300fadb050000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) 10.116905889s ago: executing program 6 (id=5169): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x7ff, 0x8, 0x9, 0x410, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x50) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x8000, 0x0, 0xfffffff7, 0x0, {{0x9, 0x4, 0x3, 0x0, 0x24, 0x64, 0x0, 0x7, 0xc724a399977bd3aa, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4}, @end, @lsrr={0x83, 0xb, 0xdf, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x400000, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0xfffff000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mprotect(&(0x7f0000082000/0x3000)=nil, 0x3000, 0x2) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001ac0)={r4, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}}) ioctl$LOOP_CLR_FD(r7, 0x4c01) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x7, 0x81, 0xfffffff1, 0x48058, r1, 0x80, '\x00', r2, r3, 0x3, 0x5, 0x4, 0x7, @value=r8}, 0x50) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$RTC_UIE_ON(r9, 0x7003) ioctl$RTC_ALM_READ(r9, 0x80247008, 0x0) ioctl$RTC_AIE_ON(r9, 0x7001) ioctl$RTC_ALM_SET(r9, 0x40247007, &(0x7f00000001c0)={0x28, 0x12, 0xf, 0x19, 0x4, 0x20000000, 0x3, 0xf8, 0xffffffffffffffff}) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="d40000002600010126bd7000fcffffff1d000000be000e80d84d056d4df237fbc3e61064635daf6fd5302b771a7361351b8a1f7a9ff13f3de5173a259a73493fccad7404f8d85ed77debeb0e80cdf346f96066022c50f07790e56bf96474f8dfdc68372f876a037acd07"], 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x0) r10 = syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x0, 0x101000) ioctl$FE_READ_UNCORRECTED_BLOCKS(r10, 0x80046f49, &(0x7f0000000200)) 9.856087477s ago: executing program 7 (id=5170): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@ipv6_newrule={0x24, 0x20, 0x1, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7, 0x1c}, [@FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24048860}, 0xc0800) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x26e1, 0x80) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000100)={0x9bf1, 0x4, 0xc, 0x614b, 0x56}) sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x3410816be7ad9f, 0x70bd2c, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0xc8, r3, 0x300, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000090}, 0x4) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="02030003130000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2300000007ff010000000000000000000000000001010008800000000002000100000000000000070c0000ffff05000500000000000a004e23000000fffe8000000000000000000000000000aaff01000000000000020013"], 0x98}, 0x1, 0x7}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) 9.219880765s ago: executing program 7 (id=5171): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getgid() bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x101500, 0x0) setreuid(0x0, 0xee01) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001e40)=""/104, 0x45}], 0x20}, 0x2}], 0x1, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000240)="4cdea1bc185e204c8014521788d95cd7f06966f0bb0b5a4a02d0174059b3a8cea566722c424b7eb8cca4f30c3949f93930c9a9eaec562a3471cd73d79c9d3234190fad166e63", 0x46}], 0x1}}], 0x1, 0x20e8086) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x292382) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000080)={{0xf, 0x1}, 0x1, 0x20002, 0x2, {0x0, 0x8}, 0x6, 0x6}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x4, 0x1, 0x2a, @ipv4={'\x00', '\xff\xff', @loopback}, @remote, 0x80, 0x40, 0x3, 0x5}}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1d, 0x400, 0x1, 0x3, 0x140, 0xffffffffffffffff, 0x1, '\x00', r3, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x50) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r7 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r8 = fcntl$dupfd(r6, 0x406, r6) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r7, &(0x7f0000000280)=[{&(0x7f0000000380)=""/171, 0xa0}, {0x0, 0x27}], 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r9 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x24) statx(r5, &(0x7f00000000c0)='./file0\x00', 0x4000, 0x100, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4e22, 0x8, 0x4e22, 0xdb, 0x2, 0xc0, 0x20, 0x2b, 0x0, r10}, {0x6, 0x7fffffff, 0x11, 0x9, 0xfffffffffffffff9, 0xd, 0x9, 0xd9e}, {0x4, 0xd2b, 0x10001, 0x8000}, 0x100, 0x0, 0x3, 0x1, 0x2, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d5, 0x1}, 0x2, @in=@multicast1, 0x3505, 0x1, 0x3, 0x3, 0x0, 0xfffffff7}}, 0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x400, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@loose}, {@msize}, {@cache_loose}, {@msize={'msize', 0x3d, 0x2}}], [{@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, ']'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_eq={'euid', 0x3d, r10}}]}}) 9.022227207s ago: executing program 9 (id=5172): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) pipe(&(0x7f0000000080)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000600), &(0x7f0000000340)={[&(0x7f0000000840)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde6\xfd\vQM`\x8f\xec\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0e}\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13?\x87\'S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(r4, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r6, r7, 0x20000501, 0x4000004}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000000440)={0x50, 0xffffffffffffffda, r5, {0x7, 0x29, 0xc, 0x1086cce0, 0x40, 0x73, 0x400000, 0x0, 0x0, 0x0, 0x93e8969ae59789b3, 0x7ffffffd}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x84400, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe97, 0x2, 0x10000d, 0x7f, 0x44233, 0x8000000000000009, 0xffffffff, 0x941, 0x8, 0x1005, 0x4, 0x44, 0x0, 0xfffffdfffffffffd], 0xb000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x55, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb90402200800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600200001401c00010003580461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3b8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6f4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 8.643367518s ago: executing program 4 (id=5173): userfaultfd(0x80001) accept$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x2000) mq_open(0x0, 0x2, 0x1d0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='coredump_filter\x00') pread64(r0, 0x0, 0x0, 0x2f) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x400, 0xf0, 0x0, 0x384, 0x3, 0x1, 0x8, 0x2, {0xd, 0x44ff, 0x1}, {0x4, 0x10000, 0x1}, {0x7, 0x6, 0x1}, {0xdb98, 0x0, 0x1}, 0x0, 0x1, 0x85, 0x81, 0x1, 0xff, 0xb5, 0x2, 0x6, 0x8001, 0x1cc, 0x8000, 0x0, 0x2, 0x1, 0x8}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x4f, 0x2, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="18050000080400000000000003000002180100002020703e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000bbf5ffff850000000600000085000000d000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82}, 0x94) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) getsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000200)={0x18, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r4, 0x1000) r5 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) poll(&(0x7f0000000040)=[{r5, 0x1}], 0x1, 0x101) syz_usb_connect(0x0, 0x38, &(0x7f00000002c0)=ANY=[@ANYBLOB="120110038121e940e60491553994010203010902260001000000000904000002e515bb0009050402090000000009058802"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.355611988s ago: executing program 37 (id=5132): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0}, 0x68) brk(0x8) r1 = socket$rxrpc(0x21, 0x2, 0xa) sendmmsg$sock(r1, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000d80)=@rc={0x1f, @none, 0x8}, 0x80, 0x0}}], 0x2, 0x20000044) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) bind$alg(r3, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x800) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) syz_emit_ethernet(0x1011, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f0000000180)={0xb5, &(0x7f00000000c0)=""/181}) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$FUSE(r5, &(0x7f0000006540)={0x2020}, 0xfffffce2) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x34) 5.913100268s ago: executing program 6 (id=5175): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r1, 0x9, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x1, 0x3}, 0x20) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') read$FUSE(r3, &(0x7f0000006200)={0x2020}, 0xffe8) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f00000004c0)={0x84, &(0x7f0000000140)={0x40, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.98361215s ago: executing program 7 (id=5176): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r1 = dup(r0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000080)=@req3={0x7, 0x6a60, 0x2, 0x80000000, 0x4, 0x82, 0x7fff}, 0x1c) socket(0x2, 0x80805, 0x0) pipe2(0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r4, &(0x7f0000000080)=ANY=[], 0xff2e) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10045, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r4, 0x540a, 0x2) prlimit64(0x0, 0x1, 0x0, &(0x7f0000000040)) r6 = socket$unix(0x1, 0x5, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000940)={0x28, r7, 0xa39, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x16}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x40010) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$sock_SIOCSPGRP(r6, 0x8902, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x92040, 0x100) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d1) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x3f) 4.74306762s ago: executing program 4 (id=5177): creat(0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f00000024c0)={&(0x7f00000000c0)={0x2, 0x0, @private=0xa014101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f00000016c0)={&(0x7f00000003c0)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000001500)=[{&(0x7f0000000400)='r', 0x1}], 0x1}, 0x80c0) setsockopt$sock_attach_bpf(r1, 0x84, 0x7c, &(0x7f0000000000), 0xc) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x10, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) 4.602867957s ago: executing program 9 (id=5178): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000006c0)={r0, &(0x7f0000000580)="92b41c338722daa1bf1f9d5ae58669201a2b1f665e54852b0771c8d9a62b145e14fee5c9380892aca6b03c80d3b670365e1f1112013b4a149288c7aaf5e1de211c30095479579558a9f61003fd3e1e462d4a6995df057260747ef9c54b8057b39e8f5504beabf15adff12c", 0x0}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="380100001000010027bd700002010000fe8000000000000000000000000000aaff010000000000000000000000000001000100044e230000000000003a000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001a25080000000000020000000000000083000000000000000000000000000000fcffffffffffffffff7f0000000000001f00000000000000ff0100000000000002000000fcffffff00ecff0025bd700000000000020001fd2000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000110001002bbd70ef4100fedbdf257f000001000000000000000000000000000004d402006c00"], 0x28}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x4ff5, r4}, 0x38) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) 3.593962964s ago: executing program 9 (id=5179): r0 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYRES32=r0, @ANYRES16=r0, @ANYRESHEX=r0], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0xa, 0x9}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x7b}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1e, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x30}, 0x94) 3.274826746s ago: executing program 7 (id=5180): creat(&(0x7f0000000180)='./file0\x00', 0x70) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xe, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0xa, 0x4, 0x1, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xffff, 0x42, 0x8, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x16}, {0xffff, 0xfff1}, {0x0, 0xf}}}, 0x24}}, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) epoll_create1(0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmmsg$unix(r10, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r8, 0x0, 0x0) recvmmsg(r9, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r11, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setrlimit(0x3, &(0x7f00000000c0)={0x8000000000000000}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) 689.65864ms ago: executing program 6 (id=5181): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000003c0)={0xc, 0x6, 0x6}) close_range(r0, 0xffffffffffffffff, 0x100000) 510.446944ms ago: executing program 7 (id=5182): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x36, 0x0, &(0x7f0000000380)="3d6ee2e04b91ab10143d9abe86dde5b21365c1ed1785bf79e0f3eb2dba93774cc6b23d0016dd6bd64414ce22c0f77c2158222ff96093", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 424.808762ms ago: executing program 6 (id=5183): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000380), 0x0, &(0x7f0000000200)=ANY=[@ANYRES16]) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000240)='./file1\x00') unlink(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x400003, @mcast1, 0x2}, 0x1c) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018406c256d00000000000001090224"], 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) syz_io_uring_setup(0x3bd8, &(0x7f0000000280)={0x0, 0xcc19, 0x80000, 0x0, 0x41}, 0x0, 0x0, 0x0) inotify_init1(0x800) syz_open_procfs(0x0, &(0x7f0000000300)='net/netlink\x00') openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080), 0x102, 0x0) socket$kcm(0x2, 0x5, 0x84) socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 358.868895ms ago: executing program 7 (id=5184): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x7ff, 0x8, 0x9, 0x410, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x50) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x8000, 0x0, 0xfffffff7, 0x0, {{0x9, 0x4, 0x3, 0x0, 0x24, 0x64, 0x0, 0x7, 0xc724a399977bd3aa, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4}, @end, @lsrr={0x83, 0xb, 0xdf, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x400000, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0xfffff000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mprotect(&(0x7f0000082000/0x3000)=nil, 0x3000, 0x2) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001ac0)={r4, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}}) ioctl$LOOP_CLR_FD(r7, 0x4c01) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x7, 0x81, 0xfffffff1, 0x48058, r1, 0x80, '\x00', r2, r3, 0x3, 0x5, 0x4, 0x7, @value=r8}, 0x50) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$RTC_UIE_ON(r9, 0x7003) ioctl$RTC_ALM_READ(r9, 0x80247008, 0x0) ioctl$RTC_AIE_ON(r9, 0x7001) ioctl$RTC_ALM_SET(r9, 0x40247007, &(0x7f00000001c0)={0x28, 0x12, 0xf, 0x19, 0x4, 0x20000000, 0x3, 0xf8, 0xffffffffffffffff}) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="d40000002600010126bd7000fcffffff1d000000be000e80d84d056d4df237fbc3e61064635daf6fd5302b771a7361351b8a1f7a9ff13f3de5173a259a73493fccad7404f8d85ed77debeb0e80cdf346f96066022c50f07790e56bf96474f8dfdc68372f876a037acd07"], 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x0) r10 = syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x0, 0x101000) ioctl$FE_READ_UNCORRECTED_BLOCKS(r10, 0x80046f49, &(0x7f0000000200)) 198.265056ms ago: executing program 4 (id=5185): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x7ff, 0x8, 0x9, 0x410, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x50) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x8000, 0x0, 0xfffffff7, 0x0, {{0xa, 0x4, 0x3, 0x0, 0x28, 0x64, 0x0, 0x7, 0xc724a399977bd3aa, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4}, @lsrr={0x83, 0xf, 0xdf, [@remote, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x400000, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0xfffff000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mprotect(&(0x7f0000082000/0x3000)=nil, 0x3000, 0x2) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001ac0)={r4, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}}) ioctl$LOOP_CLR_FD(r7, 0x4c01) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x7, 0x81, 0xfffffff1, 0x48058, r1, 0x80, '\x00', r2, r3, 0x3, 0x5, 0x4, 0x7, @value=r8}, 0x50) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$RTC_UIE_ON(r9, 0x7003) ioctl$RTC_ALM_READ(r9, 0x80247008, 0x0) ioctl$RTC_AIE_ON(r9, 0x7001) ioctl$RTC_ALM_SET(r9, 0x40247007, &(0x7f00000001c0)={0x28, 0x12, 0xf, 0x19, 0x4, 0x20000000, 0x3, 0xf8, 0xffffffffffffffff}) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="d40000002600010126bd7000fcffffff1d000000be000e80d84d056d4df237fbc3e61064635daf6fd5302b771a7361351b8a1f7a9ff13f3de5173a259a73493fccad7404f8d85ed77debeb0e80cdf346f96066022c50f07790e56bf96474f8dfdc68372f876a037acd076a68c201ffc2b6fb6747c16213a3b10a90fdbd0828386e5bcc17d75e01b1cc81bc18333fffc722d4f8a69d271befc2082b5ef50d3e2758891d3792ec6cef09e2632a0427cda07ea8c52462000559d5797f4e7b79e96411cd00"/211], 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x0) r10 = syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x0, 0x101000) ioctl$FE_READ_UNCORRECTED_BLOCKS(r10, 0x80046f49, &(0x7f0000000200)) 0s ago: executing program 4 (id=5186): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0, 0xfc}}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000094c0)=[{{&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, 0x80, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f00000005c0)=""/74, 0x4a}], 0x2, &(0x7f0000001f80)=""/4096, 0x1000}, 0xffff11bc}, {{&(0x7f0000002f80)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000004280)=[{&(0x7f0000003000)=""/11, 0xb}, {&(0x7f0000003040)=""/213, 0xd5}, {&(0x7f0000003140)=""/158, 0x9e}, {&(0x7f0000003200)=""/103, 0x67}, {&(0x7f0000003280)=""/4096, 0x1000}], 0x5, &(0x7f0000004300)=""/212, 0xd4}, 0xc}, {{&(0x7f0000004400)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000058c0)=[{&(0x7f0000004480)=""/255, 0xff}, {&(0x7f0000004580)=""/4096, 0x1000}, {&(0x7f0000005580)=""/207, 0xcf}, {&(0x7f0000005680)=""/15, 0xf}, {&(0x7f00000056c0)=""/75, 0x4b}, {&(0x7f0000005740)=""/93, 0x5d}, {&(0x7f00000057c0)=""/45, 0x2d}, {&(0x7f0000005800)=""/32, 0x20}, {&(0x7f0000005840)=""/109, 0x6d}], 0x9, &(0x7f0000005980)=""/74, 0x4a}, 0x777}, {{&(0x7f0000005a00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000780)=[{&(0x7f0000005a80)=""/96, 0x60}, {&(0x7f0000005b00)=""/134, 0x86}, {&(0x7f0000000680)=""/250}], 0x2, &(0x7f0000005c00)=""/68, 0x44}, 0x7}, {{&(0x7f0000000900)=@can, 0x80, &(0x7f0000005f40)=[{&(0x7f0000005d00)=""/251, 0xfb}, {&(0x7f0000005e00)=""/27, 0x1b}, {&(0x7f0000005e40)=""/135, 0x87}, {&(0x7f0000005f00)=""/59, 0x3b}], 0x4, &(0x7f0000005f80)=""/30, 0x1e}, 0x7fffffff}, {{&(0x7f0000005fc0)=@un=@abs, 0x80, &(0x7f0000007140)=[{&(0x7f0000006040)=""/223, 0xdf}, {&(0x7f0000006140)=""/4096, 0x1000}], 0x2}, 0x100}, {{0x0, 0x0, &(0x7f00000075c0)=[{&(0x7f0000007180)=""/28, 0x1c}, {&(0x7f00000071c0)=""/122, 0x7a}, {&(0x7f0000007240)=""/188, 0xbc}, {&(0x7f0000007300)=""/44, 0x2c}, {&(0x7f0000007340)=""/68, 0x44}, {&(0x7f00000073c0)=""/1, 0x1}, {&(0x7f0000007400)=""/34, 0x22}, {&(0x7f0000007440)=""/226, 0xe2}, {&(0x7f0000007540)=""/120, 0x78}], 0x9, &(0x7f0000007680)=""/103, 0x67}, 0x10001}, {{&(0x7f0000007700)=@un=@abs, 0x80, &(0x7f0000007d40)=[{&(0x7f0000007780)=""/153, 0x99}, {&(0x7f0000007840)=""/74, 0x4a}, {&(0x7f00000078c0)=""/68, 0xffffffc6}, {&(0x7f0000007940)=""/78, 0x4e}, {&(0x7f00000079c0)=""/1, 0x1}, {&(0x7f00000007c0)=""/193, 0xc1}, {&(0x7f0000007b00)=""/207, 0xcf}, {&(0x7f0000007c00)=""/232, 0xe8}, {&(0x7f0000007d00)=""/14, 0xe}], 0x9}, 0xc}, {{&(0x7f0000007e00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000009340)=[{&(0x7f0000007e80)=""/4096, 0x1000}, {&(0x7f0000008e80)=""/246, 0xf6}, {&(0x7f0000008f80)=""/216, 0xd8}, {&(0x7f0000009080)=""/111, 0x6f}, {&(0x7f0000009100)=""/221, 0xdd}, {&(0x7f0000009200)=""/210, 0xd2}, {&(0x7f0000009300)=""/7, 0x7}], 0x7, &(0x7f00000093c0)=""/249, 0xf9}, 0x572}], 0x9, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) syz_open_dev$video(0x0, 0x7, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x80580, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000080)={0x6, "abacd2110800170063377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) (async) r7 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000100)) (async) r8 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r8, 0x80045017, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) (async) close_range(r4, r6, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r9, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000200)=0x2110, 0x4) (async) sendmmsg$inet6(r9, &(0x7f0000000180)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) (async) sendmsg$NFNL_MSG_CTHELPER_DEL(r3, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r2], 0x50}, 0x1, 0x0, 0x0, 0x20040011}, 0x40408c0) kernel console output (not intermixed with test programs): f length 0, skipping remainder of the config [ 1428.311416][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1428.344856][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1429.981273][ T24] usb 2-1: USB disconnect, device number 13 [ 1431.737266][T22873] overlayfs: failed to resolve './file1': -2 [ 1431.774379][T22877] FAULT_INJECTION: forcing a failure. [ 1431.774379][T22877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1431.848069][T22877] CPU: 1 UID: 0 PID: 22877 Comm: syz.3.4397 Tainted: G L syzkaller #0 PREEMPT(full) [ 1431.848096][T22877] Tainted: [L]=SOFTLOCKUP [ 1431.848102][T22877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1431.848113][T22877] Call Trace: [ 1431.848119][T22877] [ 1431.848125][T22877] dump_stack_lvl+0x100/0x190 [ 1431.848154][T22877] should_fail_ex.cold+0x5/0xa [ 1431.848178][T22877] strncpy_from_user+0x3b/0x2d0 [ 1431.848201][T22877] do_getname+0x271/0x390 [ 1431.848230][T22877] __x64_sys_chdir+0xaa/0x280 [ 1431.848249][T22877] ? ksys_write+0x1ac/0x250 [ 1431.848265][T22877] ? __pfx___x64_sys_chdir+0x10/0x10 [ 1431.848292][T22877] do_syscall_64+0x115/0x870 [ 1431.848316][T22877] ? clear_bhb_loop+0x40/0x90 [ 1431.848338][T22877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1431.848356][T22877] RIP: 0033:0x7f432179ce59 [ 1431.848370][T22877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1431.848386][T22877] RSP: 002b:00007f4322718028 EFLAGS: 00000246 ORIG_RAX: 0000000000000050 [ 1431.848403][T22877] RAX: ffffffffffffffda RBX: 00007f4321a16090 RCX: 00007f432179ce59 [ 1431.848414][T22877] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 1431.848424][T22877] RBP: 00007f4322718090 R08: 0000000000000000 R09: 0000000000000000 [ 1431.848434][T22877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1431.848444][T22877] R13: 00007f4321a16128 R14: 00007f4321a16090 R15: 00007fff12830eb8 [ 1431.848459][T22877] [ 1432.283721][T22855] Bluetooth: hci0: command 0x1003 tx timeout [ 1432.300674][ T5609] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1433.076874][T22890] netlink: 'syz.5.4403': attribute type 14 has an invalid length. [ 1433.236559][T12625] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1433.365465][T22895] netlink: 'syz.4.4405': attribute type 10 has an invalid length. [ 1433.373314][T22895] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4405'. [ 1433.404113][T12625] usb 3-1: Using ep0 maxpacket: 8 [ 1433.413507][T12625] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1433.443102][T12625] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.466588][T12625] usb 3-1: Product: syz [ 1433.488591][T12625] usb 3-1: Manufacturer: syz [ 1433.509597][T12625] usb 3-1: SerialNumber: syz [ 1433.540437][T12625] usb 3-1: config 0 descriptor?? [ 1433.571688][T22898] netlink: 'syz.4.4407': attribute type 10 has an invalid length. [ 1433.579724][T22898] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4407'. [ 1433.869840][T12625] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1434.387406][T22906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4401'. [ 1434.396522][T22906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4401'. [ 1434.819145][T22915] FAULT_INJECTION: forcing a failure. [ 1434.819145][T22915] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1434.982075][T22915] CPU: 0 UID: 0 PID: 22915 Comm: syz.1.4412 Tainted: G L syzkaller #0 PREEMPT(full) [ 1434.982105][T22915] Tainted: [L]=SOFTLOCKUP [ 1434.982112][T22915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1434.982122][T22915] Call Trace: [ 1434.982129][T22915] [ 1434.982139][T22915] dump_stack_lvl+0x100/0x190 [ 1434.982169][T22915] should_fail_ex.cold+0x5/0xa [ 1434.982191][T22915] ? prepare_alloc_pages+0x16d/0x5f0 [ 1434.982218][T22915] should_fail_alloc_page+0xeb/0x140 [ 1434.982242][T22915] prepare_alloc_pages+0x1f0/0x5f0 [ 1434.982270][T22915] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 1434.982303][T22915] ? stack_trace_save+0x8e/0xc0 [ 1434.982325][T22915] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1434.982345][T22915] ? bpf_ksym_find+0x128/0x1c0 [ 1434.982375][T22915] ? kasan_save_stack+0x3f/0x50 [ 1434.982395][T22915] ? kasan_save_stack+0x30/0x50 [ 1434.982415][T22915] ? kasan_save_track+0x14/0x30 [ 1434.982435][T22915] ? __kasan_kmalloc+0xaa/0xb0 [ 1434.982454][T22915] ? __kmalloc_noprof+0x322/0x820 [ 1434.982479][T22915] ? copy_splice_read+0x1a3/0xbb0 [ 1434.982498][T22915] ? do_splice_read+0x2bd/0x370 [ 1434.982516][T22915] ? splice_direct_to_actor+0x2a1/0xa30 [ 1434.982536][T22915] ? do_splice_direct+0x174/0x240 [ 1434.982555][T22915] ? do_sendfile+0xadc/0xe20 [ 1434.982580][T22915] ? __x64_sys_sendfile64+0x1d8/0x220 [ 1434.982619][T22915] alloc_pages_bulk_noprof+0x5de/0x13c0 [ 1434.982648][T22915] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1434.982667][T22915] ? rcu_is_watching+0x12/0xc0 [ 1434.982694][T22915] ? trace_kmalloc+0xeb/0x110 [ 1434.982717][T22915] ? __kasan_kmalloc+0xaa/0xb0 [ 1434.982741][T22915] ? copy_splice_read+0x1a3/0xbb0 [ 1434.982765][T22915] copy_splice_read+0x1e1/0xbb0 [ 1434.982792][T22915] ? __pfx_copy_splice_read+0x10/0x10 [ 1434.982814][T22915] ? look_up_lock_class+0x64/0x120 [ 1434.982844][T22915] ? lockdep_init_map_type+0x5c/0x250 [ 1434.982869][T22915] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1434.982888][T22915] ? __pfx_filemap_splice_read+0x10/0x10 [ 1434.982908][T22915] do_splice_read+0x2bd/0x370 [ 1434.982931][T22915] splice_direct_to_actor+0x2a1/0xa30 [ 1434.982954][T22915] ? __pfx_direct_splice_actor+0x10/0x10 [ 1434.982977][T22915] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1434.983004][T22915] do_splice_direct+0x174/0x240 [ 1434.983025][T22915] ? __pfx_do_splice_direct+0x10/0x10 [ 1434.983044][T22915] ? avc_policy_seqno+0x9/0x20 [ 1434.983061][T22915] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1434.983083][T22915] ? bpf_lsm_file_permission+0x9/0x10 [ 1434.983110][T22915] ? security_file_permission+0x76/0x210 [ 1434.983138][T22915] ? rw_verify_area+0xce/0x6d0 [ 1434.983166][T22915] do_sendfile+0xadc/0xe20 [ 1434.983197][T22915] ? __pfx_do_sendfile+0x10/0x10 [ 1434.983222][T22915] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1434.983249][T22915] ? __fget_files+0x21f/0x3d0 [ 1434.983275][T22915] __x64_sys_sendfile64+0x1d8/0x220 [ 1434.983296][T22915] ? ksys_write+0x1ac/0x250 [ 1434.983312][T22915] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1434.983341][T22915] do_syscall_64+0x115/0x870 [ 1434.983367][T22915] ? clear_bhb_loop+0x40/0x90 [ 1434.983390][T22915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1434.983408][T22915] RIP: 0033:0x7fcfdeb9ce59 [ 1434.983425][T22915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1434.983442][T22915] RSP: 002b:00007fcfdcdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1434.983460][T22915] RAX: ffffffffffffffda RBX: 00007fcfdee15fa0 RCX: 00007fcfdeb9ce59 [ 1434.983472][T22915] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1434.983488][T22915] RBP: 00007fcfdcdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1434.983499][T22915] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000001 [ 1434.983510][T22915] R13: 00007fcfdee16038 R14: 00007fcfdee15fa0 R15: 00007ffc55c2f408 [ 1434.983535][T22915] [ 1435.917203][T12625] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1436.691855][T12625] usb 3-1: USB disconnect, device number 14 [ 1437.384611][T12625] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1437.564332][T12625] usb 3-1: Using ep0 maxpacket: 32 [ 1437.587714][T12625] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1437.616845][T12625] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 1437.643519][T12625] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 1437.671556][T12625] usb 3-1: config 14 has no interface number 0 [ 1437.683717][ T5723] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1437.729589][T12625] usb 3-1: config 14 has no interface number 1 [ 1437.755893][T12625] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1437.793750][T12625] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1437.837237][T12625] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1437.864866][ T5723] usb 4-1: Using ep0 maxpacket: 8 [ 1437.929986][T12625] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1437.932812][ T5723] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1437.992703][ T5723] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1438.026310][T12625] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1438.057900][ T5723] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1438.092347][T12625] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1438.093606][ T5723] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1438.127347][T22936] netlink: 'syz.5.4417': attribute type 10 has an invalid length. [ 1438.135395][T22936] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4417'. [ 1438.148839][T22936] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1438.230025][T12625] usb 3-1: config 14 interface 57 has no altsetting 0 [ 1438.261548][T12625] usb 3-1: config 14 interface 228 has no altsetting 0 [ 1438.307338][T12625] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1438.344545][T12625] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.382672][T12625] usb 3-1: Product: syz [ 1438.400296][T12625] usb 3-1: Manufacturer: syz [ 1438.415979][T12625] usb 3-1: SerialNumber: syz [ 1438.978922][T12625] legousbtower 3-1:14.57: interrupt endpoints not found [ 1439.219208][ T30] audit: type=1400 audit(2000001363.703:1757): avc: denied { setattr } for pid=22946 comm="syz.1.4421" name="vcsa" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 1439.228806][T22947] input: syz0 as /devices/virtual/input/input43 [ 1439.387082][T12625] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 1439.438023][T12625] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1439.735735][ T5795] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1439.817725][T22939] IPv6: NLM_F_CREATE should be specified when creating new route [ 1439.907502][ T5795] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1439.916799][ T5723] usb 4-1: USB disconnect, device number 123 [ 1439.936676][T22957] fuse: fd is not a fuse device [ 1439.941688][ T5795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1439.965156][ T5795] usb 2-1: Product: syz [ 1439.972233][T22957] netlink: 'syz.4.4423': attribute type 9 has an invalid length. [ 1439.982968][T22960] usb 3-1: LEGO USB Tower reset control request failed [ 1439.993618][ T5795] usb 2-1: Manufacturer: syz [ 1440.004103][ T5795] usb 2-1: SerialNumber: syz [ 1440.017523][ T5795] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1440.040924][ T24] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1440.181307][ T5795] usb 3-1: USB disconnect, device number 15 [ 1440.221575][ T5795] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected [ 1440.250010][T22963] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1440.296724][T22963] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1440.362387][T22963] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1440.877205][ T5723] usb 2-1: USB disconnect, device number 14 [ 1441.408125][ T24] usb 2-1: Service connection timeout for: 256 [ 1441.547094][ T24] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1441.583083][ T24] ath9k_htc: Failed to initialize the device [ 1441.623887][ T5723] usb 2-1: ath9k_htc: USB layer deinitialized [ 1441.773264][T22972] fuse: Bad value for 'fd' [ 1443.073723][ T5795] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1444.451363][T22994] overlayfs: failed to clone upperpath [ 1444.461983][T22997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4434'. [ 1444.961108][T22990] loop6: detected capacity change from 0 to 2640 [ 1445.010745][T22990] buffer_io_error: 11 callbacks suppressed [ 1445.010756][T22990] Buffer I/O error on dev loop6, logical block 0, async page read [ 1445.129652][T22990] Buffer I/O error on dev loop6, logical block 0, async page read [ 1445.163862][T22855] Bluetooth: hci2: command 0x0c1a tx timeout [ 1445.224706][T22990] Buffer I/O error on dev loop6, logical block 0, async page read [ 1445.279543][T22990] Buffer I/O error on dev loop6, logical block 0, async page read [ 1445.326940][T22990] Buffer I/O error on dev loop6, logical block 0, async page read [ 1445.365133][T22990] Buffer I/O error on dev loop6, logical block 0, async page read [ 1445.394885][T23006] syzkaller0: entered promiscuous mode [ 1445.411721][T22990] Buffer I/O error on dev loop6, logical block 0, async page read [ 1445.424091][T23006] syzkaller0: entered allmulticast mode [ 1445.476213][T22990] Buffer I/O error on dev loop6, logical block 0, async page read [ 1445.516503][T22990] ldm_validate_partition_table(): Disk read failed. [ 1445.546826][T22990] Buffer I/O error on dev loop6, logical block 0, async page read [ 1445.572269][T22990] Buffer I/O error on dev loop6, logical block 0, async page read [ 1445.601959][T22990] Dev loop6: unable to read RDB block 0 [ 1445.626760][T22990] loop6: unable to read partition table [ 1445.649757][T22990] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1449.191473][T20869] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1450.713911][ T5736] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1450.884715][ T5736] usb 3-1: Using ep0 maxpacket: 32 [ 1451.199201][ T5736] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 1451.207473][ T5736] usb 3-1: config 0 has no interface number 0 [ 1451.222185][ T5736] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1451.265200][ T5736] usb 3-1: config 0 interface 89 has no altsetting 0 [ 1451.292489][ T5736] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1451.312316][ T5736] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.322435][T23048] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4448'. [ 1451.352023][ T5736] usb 3-1: Product: syz [ 1451.362042][ T5736] usb 3-1: Manufacturer: syz [ 1451.375196][ T5736] usb 3-1: SerialNumber: syz [ 1451.394302][ T5736] usb 3-1: config 0 descriptor?? [ 1451.432878][ T5736] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1451.463695][ T5736] em28xx 3-1:0.89: Video interface 89 found: [ 1452.687930][ T5736] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 1453.320835][ T5736] em28xx 3-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=236) [ 1453.343759][ T5736] em28xx 3-1:0.89: board has no eeprom [ 1453.793664][ T5736] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 1453.801735][ T5736] em28xx 3-1:0.89: analog set to bulk mode. [ 1453.825521][ T5342] em28xx 3-1:0.89: Registering V4L2 extension [ 1453.845774][ T5736] usb 3-1: USB disconnect, device number 16 [ 1453.868429][ T5736] em28xx 3-1:0.89: Disconnecting em28xx [ 1453.957596][ T5342] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 1453.973471][ T5342] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 1453.991649][ T5342] em28xx 3-1:0.89: No AC97 audio processor [ 1454.025774][ T5342] usb 3-1: Decoder not found [ 1454.046079][ T5342] em28xx 3-1:0.89: failed to create media graph [ 1454.077759][ T5342] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 1454.133354][ T5342] em28xx 3-1:0.89: Registering snapshot button... [ 1454.296387][ T5342] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input44 [ 1454.381404][ T5342] em28xx 3-1:0.89: Remote control support is not available for this card. [ 1454.411303][ T5736] em28xx 3-1:0.89: Closing input extension [ 1454.437479][ T5736] em28xx 3-1:0.89: Deregistering snapshot button [ 1454.494411][ T5736] em28xx 3-1:0.89: Freeing device [ 1457.634255][T23091] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 1457.887794][ T5342] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1458.053773][ T5342] usb 2-1: device descriptor read/64, error -71 [ 1458.303725][ T5342] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1458.444295][ T5342] usb 2-1: device descriptor read/64, error -71 [ 1458.565871][ T5342] usb usb2-port1: attempt power cycle [ 1458.904140][ T5342] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1459.015246][ T5342] usb 2-1: device descriptor read/8, error -71 [ 1459.584286][ T5342] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1459.594625][T23108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4466'. [ 1459.634494][ T5342] usb 2-1: device descriptor read/8, error -71 [ 1459.754500][ T5342] usb usb2-port1: unable to enumerate USB device [ 1459.986661][T23111] xt_NFQUEUE: number of queues (1025) out of range (got 66559) [ 1460.220469][T23113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4462'. [ 1461.003511][T23121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4470'. [ 1462.483625][ T5737] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1462.492370][T23148] 9p: Bad value for 'rfdno' [ 1462.644659][ T5737] usb 2-1: Using ep0 maxpacket: 8 [ 1462.656154][ T5737] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1462.664977][ T5737] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1462.688470][ T5737] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1462.716977][ T5737] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1462.736804][ T5737] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1462.762901][ T5737] usbtmc 2-1:16.0: bulk endpoints not found [ 1465.518727][T23164] xt_hashlimit: size too large, truncated to 1048576 [ 1465.730285][T23171] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4485'. [ 1465.852177][T23174] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4485'. [ 1466.141753][ T5723] usb 2-1: USB disconnect, device number 19 [ 1466.162625][T23180] netlink: 'syz.1.4488': attribute type 9 has an invalid length. [ 1468.233922][ T5737] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1468.411512][ T5737] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1468.651788][ T5737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1468.753705][T23206] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4484'. [ 1468.753918][T23178] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1468.769651][ T5737] usb 4-1: Product: syz [ 1468.803297][ T5737] usb 4-1: Manufacturer: syz [ 1468.869760][ T5737] usb 4-1: SerialNumber: syz [ 1470.620360][ T5737] rtl8150 4-1:1.0: couldn't reset the device [ 1470.649638][ T5737] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 1470.774433][ T5737] usb 4-1: USB disconnect, device number 125 [ 1470.831573][T23228] SELinux: Context system_u:object_r:setfiles_exec_t:s0 is not valid (left unmapped). [ 1470.913189][ T30] audit: type=1400 audit(2000001395.393:1758): avc: denied { relabelto } for pid=23224 comm="syz.5.4497" name="file1" dev="tmpfs" ino=2811 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:setfiles_exec_t:s0" [ 1471.018941][ T30] audit: type=1400 audit(2000001395.393:1759): avc: denied { associate } for pid=23224 comm="syz.5.4497" name="file1" dev="tmpfs" ino=2811 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:setfiles_exec_t:s0" [ 1471.213610][ T5737] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1471.363743][ T5737] usb 4-1: Using ep0 maxpacket: 8 [ 1471.378010][ T5737] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1471.563229][T23240] fuse: Unknown parameter '00000000000000000000' [ 1471.722167][ T5737] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1471.742763][ T5737] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1471.767279][ T5737] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 173 [ 1471.784822][ T5737] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1471.803592][ T5737] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.958687][ T5737] usb 4-1: config 0 descriptor?? [ 1471.972316][T23230] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1472.212597][T23230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1472.271576][T23230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1472.388904][T23245] SELinux: Context z is not valid (left unmapped). [ 1472.395691][ T30] audit: type=1400 audit(2000001396.873:1760): avc: denied { relabelfrom } for pid=23244 comm="syz.4.4505" name="XDP" dev="sockfs" ino=88553 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1472.469520][ T30] audit: type=1400 audit(2000001396.913:1761): avc: denied { relabelto } for pid=23244 comm="syz.4.4505" name="XDP" dev="sockfs" ino=88553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=xdp_socket permissive=1 trawcon="z" [ 1472.554547][ T5609] Bluetooth: hci0: Opcode 0x0c03 failed: -71 [ 1472.559597][ T5736] usb 4-1: USB disconnect, device number 126 [ 1473.777987][T23256] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4508'. [ 1474.138782][T23258] x_tables: unsorted underflow at hook 3 [ 1474.622738][T23261] binder: 23260:23261 ioctl c0306201 0 returned -14 [ 1474.779555][ T30] audit: type=1400 audit(2000001399.263:1762): avc: denied { unlink } for pid=15493 comm="syz-executor" name="file1" dev="tmpfs" ino=2811 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:setfiles_exec_t:s0" [ 1474.787145][T23266] fuse: Bad value for 'fd' [ 1474.916111][T23266] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4511'. [ 1474.928788][T23266] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23266 comm=syz.4.4511 [ 1474.944304][T23266] 9pnet_fd: Insufficient options for proto=fd [ 1474.950688][T23266] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4511'. [ 1475.128575][ T30] audit: type=1326 audit(2000001399.583:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23270 comm="syz.2.4513" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee9d9ce59 code=0x7ffc0000 [ 1475.404903][T23281] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1475.449966][ T30] audit: type=1326 audit(2000001399.583:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23270 comm="syz.2.4513" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee9d9ce59 code=0x7ffc0000 [ 1475.622117][ T30] audit: type=1326 audit(2000001399.583:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23270 comm="syz.2.4513" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f6ee9d9ce59 code=0x7ffc0000 [ 1475.883695][T23271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1475.979911][ T30] audit: type=1326 audit(2000001399.583:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23270 comm="syz.2.4513" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee9d9ce59 code=0x7ffc0000 [ 1476.089974][ T30] audit: type=1326 audit(2000001399.593:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23270 comm="syz.2.4513" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee9d9ce59 code=0x7ffc0000 [ 1476.328919][ T30] audit: type=1326 audit(2000001399.703:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23276 comm="syz.4.4515" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504299ce59 code=0x7ffc0000 [ 1476.352482][T23290] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4518'. [ 1476.389642][ T30] audit: type=1326 audit(2000001399.703:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23276 comm="syz.4.4515" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504299ce59 code=0x7ffc0000 [ 1476.451130][ T30] audit: type=1326 audit(2000001399.723:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23276 comm="syz.4.4515" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504299ce59 code=0x7ffc0000 [ 1476.513620][ T30] audit: type=1326 audit(2000001399.723:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23276 comm="syz.4.4515" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504299ce59 code=0x7ffc0000 [ 1476.573614][ T30] audit: type=1326 audit(2000001399.723:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23276 comm="syz.4.4515" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f504299ce59 code=0x7ffc0000 [ 1476.623626][ T30] audit: type=1326 audit(2000001399.723:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23276 comm="syz.4.4515" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504299ce59 code=0x7ffc0000 [ 1476.683621][ T5342] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1476.683960][ T30] audit: type=1326 audit(2000001399.723:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23276 comm="syz.4.4515" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504299ce59 code=0x7ffc0000 [ 1476.743824][ T30] audit: type=1326 audit(2000001399.723:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23276 comm="syz.4.4515" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504299ce59 code=0x7ffc0000 [ 1477.233704][ T5342] usb 3-1: Using ep0 maxpacket: 16 [ 1477.440522][ T5342] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1477.475091][ T5342] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1477.503390][ T5342] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1477.533909][ T5342] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1477.569239][ T5342] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1477.618035][ T5342] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1477.651737][ T5342] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1477.681260][ T5342] usb 3-1: Manufacturer: syz [ 1477.702622][ T5342] usb 3-1: config 0 descriptor?? [ 1477.741934][T23308] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4524'. [ 1477.808348][T23310] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4525'. [ 1477.852713][T23310] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4525'. [ 1477.944045][T23290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1477.997003][T23290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1478.064412][T23290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1478.102600][T23290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1478.195716][T23291] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1478.684197][ T5342] rc_core: IR keymap rc-hauppauge not found [ 1478.694634][ T5342] Registered IR keymap rc-empty [ 1478.711596][ T5342] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1478.845064][ T5342] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1478.859437][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1478.866921][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1478.877780][ T5342] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1479.312730][ T5342] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input45 [ 1479.373851][ T5342] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1479.405813][ T5342] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1479.434020][ T5342] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1479.484739][ T5342] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1479.545134][ T5342] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1479.594042][ T5342] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1479.654221][ T5342] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1479.707594][ T5342] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1479.743263][T23337] xt_HMARK: proto mask must be zero with L3 mode [ 1479.765750][ T5342] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1479.807516][ T5342] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1480.875805][ T5342] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1480.893587][ T5342] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1481.016829][T15405] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1481.046294][T23360] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4536'. [ 1481.320752][ T5342] usb 3-1: USB disconnect, device number 17 [ 1481.385286][T23356] netlink: 'syz.4.4537': attribute type 1 has an invalid length. [ 1481.558988][T23293] udevd[23293]: setting owner of /dev/bus/usb/003/017 to uid=0, gid=0 failed: No such file or directory [ 1481.802332][T23379] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1482.248712][ T5795] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1484.094063][T12625] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1484.273793][T12625] usb 2-1: Using ep0 maxpacket: 8 [ 1484.306897][T12625] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 1484.346012][T12625] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1484.555022][T12625] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 1484.722204][T12625] input: xirlink-cit as /devices/platform/dummy_hcd.1/usb2/2-1/input/input46 [ 1484.835213][T23390] trusted_key: encrypted_key: master key parameter 'c0‚:ØHû*N”Ê…™ÐfïeúÂ<‘5Ž•w€èê^n0&À–±š8çÉJÍ' is invalid [ 1485.009283][T23390] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4543'. [ 1485.018471][T23390] openvswitch: netlink: Flow key attr not present in new flow. [ 1485.120410][T23390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4543'. [ 1485.163897][ T5795] usb 4-1: Using ep0 maxpacket: 8 [ 1485.434633][ T5795] usb 4-1: device descriptor read/all, error -71 [ 1485.462074][ T24] usb 2-1: USB disconnect, device number 20 [ 1486.304996][ T5736] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1486.401610][T23406] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4551'. [ 1486.535291][ T5736] usb 3-1: Using ep0 maxpacket: 8 [ 1486.555282][ T5736] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1486.583652][ T5736] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1486.614835][ T5736] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1486.652996][ T5736] usb 3-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1486.702270][ T5736] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1486.745783][ T5736] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1486.772795][ T5736] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1486.808678][ T5736] usbtmc 3-1:16.0: bulk endpoints not found [ 1488.623660][ T5737] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1488.803578][ T5737] usb 2-1: Using ep0 maxpacket: 32 [ 1488.813009][ T5737] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1488.824361][ T5737] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1488.841131][ T5737] usb 2-1: config 0 descriptor?? [ 1488.856744][ T5737] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1488.993937][ T5795] usb 3-1: USB disconnect, device number 18 [ 1489.370723][T22855] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1489.661607][T23431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1489.688075][T23431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1489.893997][ T5737] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 1489.964892][ T5737] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 1489.999798][T23455] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4564'. [ 1490.007059][ T5737] usb 2-1: USB disconnect, device number 21 [ 1490.056610][T23458] IPVS: set_ctl: invalid protocol: 22 224.0.0.1:21 [ 1490.191640][T23448] vivid-007: ================= START STATUS ================= [ 1490.203265][T23448] vivid-007: Enable Output Cropping: true [ 1490.231357][T23448] vivid-007: Enable Output Composing: true [ 1490.665243][T23448] vivid-007: Enable Output Scaler: true [ 1490.675985][T23448] vivid-007: Tx RGB Quantization Range: Automatic [ 1490.776599][T23448] vivid-007: Transmit Mode: HDMI [ 1490.799626][T23448] vivid-007: Hotplug Present: 0x00000000 [ 1490.819124][T23448] vivid-007: RxSense Present: 0x00000000 [ 1490.825410][T23448] vivid-007: EDID Present: 0x00000000 [ 1490.839049][T23448] vivid-007: ================== END STATUS ================== [ 1490.903086][T23468] fuse: fd is not a fuse device [ 1490.998577][T23468] vlan2: entered allmulticast mode [ 1491.023639][T23468] bond0: entered allmulticast mode [ 1491.047187][T23468] bond_slave_0: entered allmulticast mode [ 1491.086658][T23468] bond_slave_1: entered allmulticast mode [ 1491.110804][T23468] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 1492.996775][T23502] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4578'. [ 1494.457441][ T30] kauditd_printk_skb: 135 callbacks suppressed [ 1494.457456][ T30] audit: type=1400 audit(2000001418.923:1911): avc: denied { watch_mount } for pid=23514 comm="syz.4.4582" path="/252" dev="tmpfs" ino=1383 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1495.538471][T23536] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4590'. [ 1495.758602][T23542] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1496.739290][T23552] overlayfs: failed to clone upperpath [ 1497.457585][T23573] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4601'. [ 1497.687114][T23580] ieee802154 phy0 wpan0: encryption failed: -22 [ 1497.780179][T23583] fuse: fd is not a fuse device [ 1499.530835][T23597] overlayfs: failed to clone upperpath [ 1502.327641][T23625] fuse: fd is not a fuse device [ 1502.337541][T23631] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4618'. [ 1502.346428][T23631] tipc: Enabling of bearer rejected, media not registered [ 1503.213361][ T5609] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1503.231499][ T5609] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1503.242304][ T5609] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1503.250088][ T5609] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1503.258133][ T5609] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1504.075290][ T5737] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 1504.235974][ T5737] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 1504.246346][ T5737] usb 3-1: config 0 has an invalid interface number: 255 but max is 2 [ 1504.270305][ T5737] usb 3-1: config 0 has no interface number 0 [ 1504.294379][ T5737] usb 3-1: config 0 has no interface number 1 [ 1504.601116][ T5737] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1504.622339][ T5737] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1504.675485][ T5737] usb 3-1: config 0 interface 255 has no altsetting 0 [ 1504.700168][ T5737] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1504.721041][ T5737] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1504.754293][ T5737] usb 3-1: config 0 descriptor?? [ 1504.831963][T23647] lo speed is unknown, defaulting to 1000 [ 1504.902775][T23679] overlayfs: failed to clone upperpath [ 1504.982426][T23657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1504.994371][T23657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1505.022500][T23680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1505.063909][T23680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1505.078721][T23657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1505.108515][T23657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1505.235562][T12625] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1505.243678][ T5737] usb 3-1: Could not set interface, error -71 [ 1505.261091][ T5737] usb 3-1: selecting invalid altsetting 0 [ 1505.283602][ T5737] usb 3-1: Could not set interface, error -22 [ 1505.292606][ T5737] usb 3-1: USB disconnect, device number 19 [ 1505.329969][T22855] Bluetooth: hci0: command tx timeout [ 1505.815293][T12625] usb 2-1: Using ep0 maxpacket: 32 [ 1505.831022][T12625] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1505.851454][T12625] usb 2-1: config 0 has no interface number 0 [ 1505.872192][T12625] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1505.947703][T12625] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1505.996163][T12625] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1506.066893][T23687] fuse: Unknown parameter 'user_id00000000000000000000' [ 1506.077916][T12625] usb 2-1: Product: syz [ 1506.546511][T23694] fuse: fd is not a fuse device [ 1506.691875][T12625] usb 2-1: Manufacturer: syz [ 1506.706132][T12625] usb 2-1: SerialNumber: syz [ 1506.726019][T12625] usb 2-1: config 0 descriptor?? [ 1507.411648][T22855] Bluetooth: hci0: command tx timeout [ 1508.387418][T12625] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1508.409325][T12625] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1508.450000][T12625] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1508.506283][T23722] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4640'. [ 1508.520036][T12625] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1508.556283][T12625] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1508.604124][T12625] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1508.664402][T12625] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 1508.715192][T23647] bridge0: port 1(bridge_slave_0) entered blocking state [ 1508.733240][T12625] usb 2-1: USB disconnect, device number 22 [ 1508.733723][T23647] bridge0: port 1(bridge_slave_0) entered disabled state [ 1508.756713][T23647] bridge_slave_0: entered allmulticast mode [ 1508.805535][T23647] bridge_slave_0: entered promiscuous mode [ 1508.813281][T23732] fuse: fd is not a fuse device [ 1508.847904][T23647] bridge0: port 2(bridge_slave_1) entered blocking state [ 1508.906828][T23647] bridge0: port 2(bridge_slave_1) entered disabled state [ 1508.924322][T23647] bridge_slave_1: entered allmulticast mode [ 1508.935421][T23736] fuse: fd is not a fuse device [ 1508.950076][T23647] bridge_slave_1: entered promiscuous mode [ 1509.059767][T23647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1509.084052][ T5723] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1509.119336][T23647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1509.270805][ T5723] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1509.484091][T22855] Bluetooth: hci0: command tx timeout [ 1509.589986][ T5723] usb 3-1: config 1 has an invalid descriptor of length 104, skipping remainder of the config [ 1509.611281][ T5723] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1509.634804][ T5723] usb 3-1: string descriptor 0 read error: -22 [ 1509.647351][ T5723] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1509.651179][T23647] team0: Port device team_slave_0 added [ 1509.674443][ T5723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.752241][T23647] team0: Port device team_slave_1 added [ 1509.839055][T23746] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1509.846308][T23746] IPv6: NLM_F_CREATE should be set when creating new route [ 1509.853496][T23746] IPv6: NLM_F_CREATE should be set when creating new route [ 1509.988105][T23729] bond1: left promiscuous mode [ 1510.050664][T23647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1510.066959][T23647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1510.124786][T23647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1510.149300][T23647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1510.163706][T23647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1510.233609][T23647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1510.265298][T23749] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1510.304633][T23749] Error validating options; rc = [-22] [ 1510.314332][T23752] netlink: 348 bytes leftover after parsing attributes in process `syz.4.4649'. [ 1510.357475][T23647] hsr_slave_0: entered promiscuous mode [ 1510.359744][ T30] audit: type=1400 audit(2000001434.843:1912): avc: denied { getattr } for pid=23733 comm="syz.2.4644" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=90580 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1510.368055][T23647] hsr_slave_1: entered promiscuous mode [ 1510.439011][T23647] debugfs: 'hsr0' already exists in 'hsr' [ 1510.463615][T23647] Cannot create hsr debugfs directory [ 1510.560032][T23758] fuse: fd is not a fuse device [ 1510.625227][T23755] netlink: 'syz.2.4644': attribute type 12 has an invalid length. [ 1510.685121][T23755] netlink: 'syz.2.4644': attribute type 29 has an invalid length. [ 1510.729349][T23755] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4644'. [ 1510.776065][T23755] netlink: 59 bytes leftover after parsing attributes in process `syz.2.4644'. [ 1511.563697][T22855] Bluetooth: hci0: command tx timeout [ 1511.826585][ T5723] usb 3-1: USB disconnect, device number 20 [ 1512.740905][T23647] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1512.761506][T23647] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1512.836804][T23647] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1512.859322][T23647] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1512.877122][T23647] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1512.895640][T23647] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1512.916383][T23647] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1512.978489][T23647] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1514.180917][T23647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1514.329973][T23647] 8021q: adding VLAN 0 to HW filter on device team0 [ 1514.351518][T20875] bridge0: port 1(bridge_slave_0) entered blocking state [ 1514.358614][T20875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1514.840103][T20875] bridge0: port 2(bridge_slave_1) entered blocking state [ 1514.847463][T20875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1515.911929][T20867] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1516.463362][T23862] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 1516.874235][T23647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1517.466669][T23869] sctp: [Deprecated]: syz.4.4673 (pid 23869) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1517.466669][T23869] Use struct sctp_sack_info instead [ 1518.017199][T23647] veth0_vlan: entered promiscuous mode [ 1518.047749][T23647] veth1_vlan: entered promiscuous mode [ 1518.146346][T23647] veth0_macvtap: entered promiscuous mode [ 1518.185387][T23647] veth1_macvtap: entered promiscuous mode [ 1518.224009][T23647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1518.259653][T23647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1518.290963][T20875] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1518.313705][T20875] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1518.344997][T20885] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1518.398073][T20885] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1518.516840][T23901] netlink: 'syz.2.4680': attribute type 1 has an invalid length. [ 1518.525720][T20879] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1518.553588][T20879] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1518.630430][T23902] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4680'. [ 1518.736575][T20879] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1518.771342][T20879] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1519.067924][T22855] Bluetooth: hci2: unexpected event for opcode 0x0004 [ 1519.744325][ T5723] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1519.987145][ T5723] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1519.998099][ T5723] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1520.015196][ T5723] usb 7-1: Product: syz [ 1520.026865][ T5723] usb 7-1: Manufacturer: syz [ 1520.055519][ T5723] usb 7-1: SerialNumber: syz [ 1521.173323][T23941] fuse: fd is not a fuse device [ 1521.459283][T23950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4692'. [ 1521.505157][T23950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4692'. [ 1521.539164][T23950] netlink: 'syz.4.4692': attribute type 7 has an invalid length. [ 1521.610375][T20881] netdevsim netdevsim4 ªªªªª»: set [0, 0] type 1 family 0 port 8472 - 0 [ 1521.628643][T20881] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1521.649217][T20881] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1521.670544][T20881] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1521.861808][ T5723] rtl8150 7-1:1.0: couldn't reset the device [ 1521.880323][ T5723] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 1522.216012][ T5736] usb 7-1: USB disconnect, device number 2 [ 1522.896692][T23961] vivid-007: ================= START STATUS ================= [ 1522.919005][T23961] vivid-007: Enable Output Cropping: true [ 1522.935010][T23961] vivid-007: Enable Output Composing: true [ 1522.946176][T23961] vivid-007: Enable Output Scaler: true [ 1522.957414][T23961] vivid-007: Tx RGB Quantization Range: Automatic [ 1522.966519][T23961] vivid-007: Transmit Mode: HDMI [ 1522.979596][T23961] vivid-007: Hotplug Present: 0x00000000 [ 1523.023741][T23961] vivid-007: RxSense Present: 0x00000000 [ 1523.054546][T23961] vivid-007: EDID Present: 0x00000000 [ 1523.079034][T23961] vivid-007: ================== END STATUS ================== [ 1523.083774][T22855] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1523.096697][T22855] Bluetooth: hci2: Injecting HCI hardware error event [ 1523.107883][ T5609] Bluetooth: hci2: hardware error 0x00 [ 1523.221595][T23973] overlayfs: failed to clone upperpath [ 1524.786652][T23993] netlink: zone id is out of range [ 1524.791877][T23993] netlink: zone id is out of range [ 1524.797104][T23993] netlink: zone id is out of range [ 1524.802272][T23993] netlink: zone id is out of range [ 1524.807457][T23993] netlink: zone id is out of range [ 1524.812556][T23993] netlink: zone id is out of range [ 1524.817700][T23993] netlink: zone id is out of range [ 1524.822832][T23993] netlink: zone id is out of range [ 1524.828061][T23993] netlink: zone id is out of range [ 1524.833249][T23993] netlink: zone id is out of range [ 1525.273794][ T5609] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1527.793601][ T5737] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1527.844461][T12625] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1527.944926][ T5737] usb 3-1: Using ep0 maxpacket: 16 [ 1527.958062][ T5737] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1527.968873][ T5737] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.990553][ T5737] usb 3-1: Product: syz [ 1527.999976][ T5737] usb 3-1: Manufacturer: syz [ 1528.005004][T12625] usb 7-1: Using ep0 maxpacket: 8 [ 1528.014825][T12625] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1528.023350][ T5737] usb 3-1: SerialNumber: syz [ 1528.029391][T12625] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1528.047770][ T5737] usb 3-1: config 0 descriptor?? [ 1528.063262][T12625] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1528.083880][T12625] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1528.104355][T12625] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1528.121634][ T5737] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 1528.151200][T12625] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1528.190909][T12625] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1528.233236][T12625] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1528.268517][T24023] Bluetooth: MGMT ver 1.23 [ 1528.287094][T12625] usbtmc 7-1:16.0: probe with driver usbtmc failed with error -22 [ 1529.372772][T24023] lo speed is unknown, defaulting to 1000 [ 1529.746617][T10938] usb 7-1: USB disconnect, device number 3 [ 1530.136669][T24050] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 1530.180694][T24049] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4722'. [ 1530.480191][T24055] overlayfs: failed to clone upperpath [ 1531.292128][ T5737] usb 3-1: clie_3_5_startup: get interface number failed: -71 [ 1531.327034][ T5737] visor 3-1:0.0: probe with driver visor failed with error -71 [ 1531.373759][ T5737] usb 3-1: USB disconnect, device number 21 [ 1531.774686][T24064] lo speed is unknown, defaulting to 1000 [ 1532.885906][T22855] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1532.905746][T22855] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1532.917799][T22855] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1532.931455][T22855] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1532.941931][T22855] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1533.045736][T18214] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1533.213623][T18214] usb 3-1: device descriptor read/64, error -71 [ 1533.513980][T18214] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1533.717611][T18214] usb 3-1: device descriptor read/64, error -71 [ 1533.864357][T18214] usb usb3-port1: attempt power cycle [ 1534.233607][T18214] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1534.544249][T24085] lo speed is unknown, defaulting to 1000 [ 1534.575352][T18214] usb 3-1: device descriptor read/8, error -71 [ 1534.823856][T18214] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1534.866593][T18214] usb 3-1: device descriptor read/8, error -71 [ 1534.983880][T18214] usb usb3-port1: unable to enumerate USB device [ 1535.084531][T22855] Bluetooth: hci6: command tx timeout [ 1535.395048][T24121] overlayfs: failed to clone upperpath [ 1535.648815][T24117] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4743'. [ 1535.916230][ T30] audit: type=1400 audit(2000001460.404:1913): avc: denied { accept } for pid=24131 comm="syz.2.4749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1536.294821][T24153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4752'. [ 1536.309211][T24085] bridge0: port 1(bridge_slave_0) entered blocking state [ 1536.324047][T24085] bridge0: port 1(bridge_slave_0) entered disabled state [ 1536.347254][T24085] bridge_slave_0: entered allmulticast mode [ 1536.374924][T24085] bridge_slave_0: entered promiscuous mode [ 1536.393788][ T5737] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1536.412406][T24085] bridge0: port 2(bridge_slave_1) entered blocking state [ 1536.426824][T24085] bridge0: port 2(bridge_slave_1) entered disabled state [ 1536.445888][T24085] bridge_slave_1: entered allmulticast mode [ 1536.468096][T24085] bridge_slave_1: entered promiscuous mode [ 1536.549157][T24085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1536.573463][T24085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1536.604012][ T5737] usb 7-1: Using ep0 maxpacket: 8 [ 1536.611940][ T5737] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1536.622923][ T5737] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1536.649106][ T5737] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1536.672172][ T5737] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1536.700091][ T5737] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1536.714785][T24085] team0: Port device team_slave_0 added [ 1536.720192][ T5737] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1536.741940][T24085] team0: Port device team_slave_1 added [ 1536.750731][ T5737] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1536.790816][ T5737] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1536.828502][ T5737] usbtmc 7-1:16.0: probe with driver usbtmc failed with error -22 [ 1537.191451][T22855] Bluetooth: hci6: command tx timeout [ 1538.749617][ T24] usb 7-1: USB disconnect, device number 4 [ 1538.867089][T24185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4758'. [ 1538.887254][T24186] IPVS: set_ctl: invalid protocol: 255 172.20.20.170:20000 [ 1539.214537][T24189] kvm: kvm [24188]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1539.243593][T22855] Bluetooth: hci6: command tx timeout [ 1540.301371][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1540.307958][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1541.333597][T22855] Bluetooth: hci6: command tx timeout [ 1543.394614][ T30] audit: type=1400 audit(2000001467.884:1914): avc: denied { search } for pid=24199 comm="syz.6.4763" name="/" dev="configfs" ino=1049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1543.460553][T24172] pim6reg: entered allmulticast mode [ 1543.615055][T24085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1543.632769][T24085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1543.702669][T24085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1543.744155][T24085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1543.766779][T24085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1543.822382][T24210] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4767'. [ 1543.855515][T24085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1544.055689][T24221] overlayfs: failed to clone lowerpath [ 1544.064985][T24085] hsr_slave_0: entered promiscuous mode [ 1544.083322][T24085] hsr_slave_1: entered promiscuous mode [ 1544.099984][T24085] debugfs: 'hsr0' already exists in 'hsr' [ 1544.116014][T24085] Cannot create hsr debugfs directory [ 1545.008567][T24239] netlink: 'syz.4.4773': attribute type 4 has an invalid length. [ 1545.362206][T24248] /dev/nullb0: Can't lookup blockdev [ 1545.382973][T24085] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1545.409630][T24085] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1545.424166][T24085] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1545.441225][T24085] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1545.462982][T24085] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1545.468721][T24252] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4778'. [ 1545.485560][T24085] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1545.503004][T24085] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1545.522697][T24085] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1545.736739][T24085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1545.776304][T24085] 8021q: adding VLAN 0 to HW filter on device team0 [ 1545.799455][T20879] bridge0: port 1(bridge_slave_0) entered blocking state [ 1545.806605][T20879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1545.848179][T20879] bridge0: port 2(bridge_slave_1) entered blocking state [ 1545.855295][T20879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1546.950030][T24085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1547.120116][T24304] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4789'. [ 1547.159817][T24304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4789'. [ 1547.186882][T20879] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1547.192891][T24304] x_tables: duplicate underflow at hook 3 [ 1547.539792][T24314] vlan1: entered allmulticast mode [ 1547.564367][T24314] veth0_vlan: entered allmulticast mode [ 1547.670286][T24085] veth0_vlan: entered promiscuous mode [ 1547.701865][T24085] veth1_vlan: entered promiscuous mode [ 1547.895264][T24085] veth0_macvtap: entered promiscuous mode [ 1547.926058][T24085] veth1_macvtap: entered promiscuous mode [ 1548.008877][T24085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1548.083235][T24085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1548.130906][T20875] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1548.161093][T20875] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1548.191812][T20875] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1548.219207][T20875] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1548.262018][T24319] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1548.289635][T24319] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1548.311190][T24319] bond0 (unregistering): Released all slaves [ 1548.544828][T20876] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1548.581573][T20876] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1548.692684][T20876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1548.721094][T20876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1548.850369][T24324] syzkaller0: entered promiscuous mode [ 1548.860604][T24324] syzkaller0: entered allmulticast mode [ 1549.238692][T24328] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4732'. [ 1549.869197][T24338] random: crng reseeded on system resumption [ 1549.878481][ T30] audit: type=1400 audit(2000001474.354:1915): avc: denied { write } for pid=24337 comm="syz.6.4798" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1549.883800][ T5609] Bluetooth: hci6: command 0x0405 tx timeout [ 1550.022841][T24340] Invalid ELF header type: 3 != 1 [ 1550.619406][T24343] Restarting kernel threads ... [ 1550.625094][T24343] Done restarting kernel threads. [ 1550.952087][T24349] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1551.098431][ T30] audit: type=1400 audit(2000001475.584:1916): avc: denied { setopt } for pid=24348 comm="syz.2.4801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1551.349556][T24356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4803'. [ 1551.358853][T24356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4803'. [ 1551.463582][ T5737] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 1551.613631][ T5737] usb 3-1: device descriptor read/64, error -71 [ 1551.931282][ T5737] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 1552.174276][ T5737] usb 3-1: device descriptor read/64, error -71 [ 1552.299943][ T5737] usb usb3-port1: attempt power cycle [ 1552.663582][ T5737] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 1552.695956][ T5737] usb 3-1: device descriptor read/8, error -71 [ 1552.943582][ T5737] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 1552.965640][ T5737] usb 3-1: device descriptor read/8, error -71 [ 1553.080454][T24377] loop6: detected capacity change from 0 to 2640 [ 1553.089905][ T5737] usb usb3-port1: unable to enumerate USB device [ 1553.097159][T24377] buffer_io_error: 6 callbacks suppressed [ 1553.097172][T24377] Buffer I/O error on dev loop6, logical block 0, async page read [ 1553.135533][T24377] Buffer I/O error on dev loop6, logical block 0, async page read [ 1553.152090][T24377] Buffer I/O error on dev loop6, logical block 0, async page read [ 1553.187152][T24377] Buffer I/O error on dev loop6, logical block 0, async page read [ 1553.218046][T24377] Buffer I/O error on dev loop6, logical block 0, async page read [ 1553.224259][ T24] IPVS: starting estimator thread 0... [ 1553.247914][T24381] fuse: Bad value for 'fd' [ 1553.255523][T24377] Buffer I/O error on dev loop6, logical block 0, async page read [ 1553.275093][T24377] Buffer I/O error on dev loop6, logical block 0, async page read [ 1553.306066][T24377] Buffer I/O error on dev loop6, logical block 0, async page read [ 1553.323646][T24382] IPVS: using max 42 ests per chain, 100800 per kthread [ 1553.332334][T24377] ldm_validate_partition_table(): Disk read failed. [ 1553.376992][T24377] Buffer I/O error on dev loop6, logical block 0, async page read [ 1553.409695][T24377] Buffer I/O error on dev loop6, logical block 0, async page read [ 1553.454190][T24377] Dev loop6: unable to read RDB block 0 [ 1553.475804][T24377] loop6: unable to read partition table [ 1553.508376][T24377] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1555.011933][T24410] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1556.314574][ T30] audit: type=1400 audit(2000001480.794:1917): avc: denied { mount } for pid=24427 comm="syz.1.4824" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1557.320742][T24440] lo speed is unknown, defaulting to 1000 [ 1557.564154][T24446] FAULT_INJECTION: forcing a failure. [ 1557.564154][T24446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1557.577297][T24446] CPU: 0 UID: 0 PID: 24446 Comm: syz.6.4827 Tainted: G L syzkaller #0 PREEMPT(full) [ 1557.577324][T24446] Tainted: [L]=SOFTLOCKUP [ 1557.577330][T24446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1557.577341][T24446] Call Trace: [ 1557.577348][T24446] [ 1557.577356][T24446] dump_stack_lvl+0x100/0x190 [ 1557.577385][T24446] should_fail_ex.cold+0x5/0xa [ 1557.577410][T24446] _copy_from_iter+0x1f4/0x1690 [ 1557.577437][T24446] ? __asan_memset+0x23/0x50 [ 1557.577456][T24446] ? __pfx__copy_from_iter+0x10/0x10 [ 1557.577479][T24446] ? __pfx___alloc_skb+0x10/0x10 [ 1557.577507][T24446] netlink_sendmsg+0x808/0xda0 [ 1557.577538][T24446] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1557.577562][T24446] ? __might_fault+0x60/0x140 [ 1557.577589][T24446] ____sys_sendmsg+0xa4d/0xbe0 [ 1557.577612][T24446] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1557.577639][T24446] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1557.577680][T24446] ___sys_sendmsg+0x190/0x1e0 [ 1557.577706][T24446] ? __pfx____sys_sendmsg+0x10/0x10 [ 1557.577729][T24446] ? __lock_acquire+0x49f/0x1a40 [ 1557.577753][T24446] ? get_pid_task+0x106/0x250 [ 1557.577797][T24446] __sys_sendmsg+0x160/0x210 [ 1557.577817][T24446] ? __pfx___sys_sendmsg+0x10/0x10 [ 1557.577849][T24446] do_syscall_64+0x115/0x870 [ 1557.577875][T24446] ? clear_bhb_loop+0x40/0x90 [ 1557.577897][T24446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1557.577915][T24446] RIP: 0033:0x7f795e39ce59 [ 1557.577931][T24446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1557.577949][T24446] RSP: 002b:00007f795f290028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1557.577966][T24446] RAX: ffffffffffffffda RBX: 00007f795e616180 RCX: 00007f795e39ce59 [ 1557.577978][T24446] RDX: 0000000000040000 RSI: 0000200000000280 RDI: 0000000000000005 [ 1557.577989][T24446] RBP: 00007f795f290090 R08: 0000000000000000 R09: 0000000000000000 [ 1557.578000][T24446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1557.578011][T24446] R13: 00007f795e616218 R14: 00007f795e616180 R15: 00007ffda0285948 [ 1557.578035][T24446] [ 1558.688562][T24462] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24462 comm=syz.6.4831 [ 1560.480234][T24482] fuse: Unknown parameter '0x000000000000000b' [ 1560.508530][T24492] overlayfs: failed to clone upperpath [ 1561.139629][ T5736] kernel write not supported for file /input/event2 (pid: 5736 comm: kworker/0:7) [ 1561.799113][T24513] FAULT_INJECTION: forcing a failure. [ 1561.799113][T24513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1561.827701][ T5737] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1561.836110][T24513] CPU: 0 UID: 0 PID: 24513 Comm: syz.2.4848 Tainted: G L syzkaller #0 PREEMPT(full) [ 1561.836134][T24513] Tainted: [L]=SOFTLOCKUP [ 1561.836139][T24513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1561.836154][T24513] Call Trace: [ 1561.836159][T24513] [ 1561.836166][T24513] dump_stack_lvl+0x100/0x190 [ 1561.836193][T24513] should_fail_ex.cold+0x5/0xa [ 1561.836216][T24513] _copy_from_iter+0x1f4/0x1690 [ 1561.836239][T24513] ? __asan_memset+0x23/0x50 [ 1561.836257][T24513] ? __pfx__copy_from_iter+0x10/0x10 [ 1561.836278][T24513] ? __pfx___alloc_skb+0x10/0x10 [ 1561.836294][T24513] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 1561.836319][T24513] netlink_sendmsg+0x808/0xda0 [ 1561.836338][T24513] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1561.836352][T24513] ? __might_fault+0x60/0x140 [ 1561.836368][T24513] ____sys_sendmsg+0xa4d/0xbe0 [ 1561.836382][T24513] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1561.836399][T24513] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1561.836419][T24513] ___sys_sendmsg+0x190/0x1e0 [ 1561.836435][T24513] ? __pfx____sys_sendmsg+0x10/0x10 [ 1561.836449][T24513] ? __lock_acquire+0x49f/0x1a40 [ 1561.836463][T24513] ? get_pid_task+0x106/0x250 [ 1561.836488][T24513] __sys_sendmsg+0x160/0x210 [ 1561.836500][T24513] ? __pfx___sys_sendmsg+0x10/0x10 [ 1561.836519][T24513] do_syscall_64+0x115/0x870 [ 1561.836535][T24513] ? clear_bhb_loop+0x40/0x90 [ 1561.836548][T24513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1561.836559][T24513] RIP: 0033:0x7f6ee9d9ce59 [ 1561.836569][T24513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1561.836580][T24513] RSP: 002b:00007f6eeac9c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1561.836592][T24513] RAX: ffffffffffffffda RBX: 00007f6eea015fa0 RCX: 00007f6ee9d9ce59 [ 1561.836599][T24513] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 1561.836605][T24513] RBP: 00007f6eeac9c090 R08: 0000000000000000 R09: 0000000000000000 [ 1561.836611][T24513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1561.836618][T24513] R13: 00007f6eea016038 R14: 00007f6eea015fa0 R15: 00007ffe04830708 [ 1561.836631][T24513] [ 1562.543620][ T5737] usb 7-1: Using ep0 maxpacket: 8 [ 1562.550227][ T5737] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1562.562333][ T5737] usb 7-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1562.576786][ T5737] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1562.604116][ T5737] usb 7-1: Product: syz [ 1562.624261][ T5737] usb 7-1: Manufacturer: syz [ 1562.636009][ T5737] usb 7-1: SerialNumber: syz [ 1562.656097][ T5737] usb 7-1: config 0 descriptor?? [ 1562.674762][ T5737] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1562.823598][ T24] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1562.985087][ T24] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1563.005250][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1563.033601][ T24] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1563.053560][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1563.092003][ T24] usb 3-1: config 0 descriptor?? [ 1563.108641][T24520] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1563.116475][T24525] lo speed is unknown, defaulting to 1000 [ 1563.539533][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 1563.559393][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1563.596503][ T24] usb 3-1: USB disconnect, device number 30 [ 1564.613694][ T5723] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1564.816923][ T5723] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1564.882754][ T5723] usb 3-1: config 0 has no interfaces? [ 1564.907744][ T5737] gspca_zc3xx: reg_r err -71 [ 1564.935784][ T5723] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1565.006603][ T5723] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1565.111520][ T5723] usb 3-1: config 0 descriptor?? [ 1565.430435][T18214] usb 3-1: USB disconnect, device number 31 [ 1565.863625][ T5737] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1565.942534][ T5737] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1565.976502][ T5737] usb 7-1: USB disconnect, device number 5 [ 1566.967033][T24566] netdevsim netdevsim7 ªªªªª»: renamed from netdevsim0 (while UP) [ 1567.039745][T18994] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1567.343585][T18994] usb 3-1: Using ep0 maxpacket: 8 [ 1567.351748][T18994] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1567.362029][T18994] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1567.389981][T18994] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1567.421908][T18994] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1567.503661][T18994] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1567.549696][T18994] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1567.577339][T24574] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1567.616239][T18994] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1567.616266][T18994] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1567.655447][T24578] IPVS: stopping master sync thread 24050 ... [ 1567.669011][T18994] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 1568.313212][ T30] audit: type=1400 audit(2000001492.794:1918): avc: denied { setattr } for pid=24588 comm="syz.7.4870" name="dsp1" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 1569.951074][ T24] usb 3-1: USB disconnect, device number 32 [ 1570.425636][T24621] overlayfs: failed to clone upperpath [ 1570.930220][T24635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4883'. [ 1570.939620][ T30] audit: type=1400 audit(2000001495.414:1919): avc: denied { getopt } for pid=24633 comm="syz.4.4883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1571.007828][T24635] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4883'. [ 1571.026849][T24641] netlink: 'syz.6.4885': attribute type 21 has an invalid length. [ 1571.052611][T24641] netlink: 'syz.6.4885': attribute type 6 has an invalid length. [ 1571.198311][T24641] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4885'. [ 1572.083079][T24635] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1572.704771][T24659] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4888'. [ 1573.695325][T24680] netdevsim netdevsim6 ªªªªª»: renamed from netdevsim0 (while UP) [ 1573.874054][ T24] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1574.044100][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1574.350107][ T24] usb 3-1: config 0 has no interfaces? [ 1574.367131][ T24] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1574.387833][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1574.416054][ T24] usb 3-1: config 0 descriptor?? [ 1574.452874][T24687] fuse: fd is not a fuse device [ 1574.670687][T23939] usb 3-1: USB disconnect, device number 33 [ 1575.053620][T18994] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 1575.643571][T18994] usb 7-1: device descriptor read/64, error -71 [ 1575.913853][T18994] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 1576.280319][T24715] net_ratelimit: 530 callbacks suppressed [ 1576.280335][T24715] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1576.358785][ T30] audit: type=1400 audit(2000001500.844:1920): avc: denied { map } for pid=24714 comm="syz.4.4904" path="/326/file0" dev="tmpfs" ino=1777 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1576.385007][T18994] usb 7-1: device descriptor read/64, error -71 [ 1576.504231][T18994] usb usb7-port1: attempt power cycle [ 1576.539450][T24719] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1576.854213][T18994] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 1576.884021][T18994] usb 7-1: device descriptor read/8, error -71 [ 1577.273603][T18994] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 1577.304383][T18994] usb 7-1: device descriptor read/8, error -71 [ 1577.426232][T18994] usb usb7-port1: unable to enumerate USB device [ 1577.601411][ T30] audit: type=1804 audit(2000001502.084:1921): pid=24728 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.4909" name="bus" dev="ramfs" ino=96279 res=1 errno=0 [ 1577.809288][ T30] audit: type=1326 audit(2000001502.294:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24733 comm="syz.7.4911" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd59479ce59 code=0x0 [ 1578.931922][T22855] Bluetooth: hci6: command 0x0405 tx timeout [ 1579.646730][T24752] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1580.795346][T24772] netlink: 'syz.1.4922': attribute type 21 has an invalid length. [ 1581.015794][ T5737] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 1581.186231][ T5737] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1581.207198][ T5737] usb 7-1: config 0 has no interface number 0 [ 1581.225847][ T5737] usb 7-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1581.235488][ T5737] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1581.245122][ T5737] usb 7-1: Product: syz [ 1581.249431][ T5737] usb 7-1: Manufacturer: syz [ 1581.260176][T24783] xt_connbytes: Forcing CT accounting to be enabled [ 1581.265301][ T5737] usb 7-1: SerialNumber: syz [ 1581.284084][ T5737] usb 7-1: config 0 descriptor?? [ 1581.296428][ T5737] usb 7-1: selecting invalid altsetting 1 [ 1581.304940][T24783] set match dimension is over the limit! [ 1581.335228][ T5737] dvb_ttusb_budget: ttusb_init_controller: error [ 1581.344048][ T5737] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1581.435956][ T5737] DVB: Unable to find symbol stv0299_attach() [ 1581.499196][T24774] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1581.513836][T24774] overlayfs: overlapping lowerdir path [ 1581.515374][ T5737] DVB: Unable to find symbol tda8083_attach() [ 1581.535260][T24774] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1581.535267][ T5737] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1581.566646][T24774] overlayfs: overlapping lowerdir path [ 1582.007682][ T5342] usb 7-1: USB disconnect, device number 10 [ 1582.917692][ T30] audit: type=1400 audit(2000001507.404:1923): avc: denied { read } for pid=24817 comm="syz.4.4937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1583.257632][T24817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1583.934852][T24833] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4943'. [ 1584.333862][ T30] audit: type=1326 audit(2000001508.814:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24846 comm="syz.1.4949" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfdeb9ce59 code=0x7ffc0000 [ 1584.848610][ T30] audit: type=1326 audit(2000001508.814:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24846 comm="syz.1.4949" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfdeb9ce59 code=0x7ffc0000 [ 1584.910247][ T30] audit: type=1326 audit(2000001508.814:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24846 comm="syz.1.4949" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfdeb9ce59 code=0x7ffc0000 [ 1584.986704][ T30] audit: type=1326 audit(2000001508.814:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24846 comm="syz.1.4949" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7fcfdeb9ce59 code=0x7ffc0000 [ 1585.072612][ T30] audit: type=1326 audit(2000001508.814:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24846 comm="syz.1.4949" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfdeb9ce59 code=0x7ffc0000 [ 1585.173574][ T30] audit: type=1326 audit(2000001508.824:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24846 comm="syz.1.4949" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfdeb9ce59 code=0x7ffc0000 [ 1585.943577][ T30] audit: type=1326 audit(2000001508.824:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24846 comm="syz.1.4949" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfdeb9ce59 code=0x7ffc0000 [ 1585.989597][ T30] audit: type=1326 audit(2000001508.854:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24846 comm="syz.1.4949" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcfdeb5d68e code=0x7ffc0000 [ 1586.043579][ T30] audit: type=1326 audit(2000001508.854:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24846 comm="syz.1.4949" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfdeb9ce59 code=0x7ffc0000 [ 1586.210175][T24869] fuse: Bad value for 'fd' [ 1586.500873][T24864] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4953'. [ 1586.625568][T24876] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4958'. [ 1587.353582][ T5342] IPVS: starting estimator thread 0... [ 1587.464296][T24894] IPVS: using max 73 ests per chain, 175200 per kthread [ 1588.155505][T24909] 9p: Bad value for 'rfdno' [ 1590.149763][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 1590.149779][ T30] audit: type=1400 audit(2000001514.634:1989): avc: denied { map } for pid=24930 comm="syz.6.4976" path="socket:[96707]" dev="sockfs" ino=96707 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1590.215226][ T30] audit: type=1400 audit(2000001514.634:1990): avc: denied { accept } for pid=24930 comm="syz.6.4976" path="socket:[96707]" dev="sockfs" ino=96707 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1591.643862][ T24] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1591.853863][ T24] usb 7-1: device descriptor read/64, error -71 [ 1592.093826][ T24] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1592.263854][ T24] usb 7-1: device descriptor read/64, error -71 [ 1592.410650][ T24] usb usb7-port1: attempt power cycle [ 1592.863794][ T24] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1593.079770][T24948] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4983'. [ 1593.228876][ T24] usb 7-1: device descriptor read/8, error -71 [ 1593.235169][ T30] audit: type=1400 audit(2000001517.674:1991): avc: denied { connect } for pid=24947 comm="syz.4.4983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1593.504790][ T30] audit: type=1326 audit(2000001517.994:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24956 comm="syz.4.4987" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504299ce59 code=0x7ffc0000 [ 1593.534862][ T24] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1593.563649][ T30] audit: type=1326 audit(2000001518.024:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24956 comm="syz.4.4987" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504299ce59 code=0x7ffc0000 [ 1593.597946][ T24] usb 7-1: device descriptor read/8, error -71 [ 1593.640503][ T30] audit: type=1326 audit(2000001518.024:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24956 comm="syz.4.4987" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504299ce59 code=0x7ffc0000 [ 1593.733879][ T24] usb usb7-port1: unable to enumerate USB device [ 1593.735065][ T30] audit: type=1326 audit(2000001518.024:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24956 comm="syz.4.4987" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f504299ce59 code=0x7ffc0000 [ 1593.817280][T24968] fuse: fd is not a fuse device [ 1593.842168][ T30] audit: type=1326 audit(2000001518.024:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24956 comm="syz.4.4987" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504299ce59 code=0x7ffc0000 [ 1593.928157][ T30] audit: type=1326 audit(2000001518.024:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24956 comm="syz.4.4987" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504299ce59 code=0x7ffc0000 [ 1593.950395][T24974] bad cache= option: none : no [ 1593.950395][T24974] blocksize : 16 [ 1593.950395][T24974] min keysize : 32 [ 1593.950395][T24974] max keysize : 64 [ 1593.950395][T24974] ivsize : 16 [ 1593.950395][T24974] chunksize : 16 [ 1593.950395][T24974] walksize : 16 [ 1593.950395][T24974] statesize : 0 [ 1593.950395][T24974] [ 1593.950395][T24974] name : cbcmac(camellia) [ 1593.950395][T24974] driver : cbcmac(camellia-generic) [ 1593.950395][T24974] module : kernel [ 1593.950395][T24974] priority : 100 [ 1593.950395][T24974] refcnt : 1 [ 1593.950395][T24974] selftest : passed [ 1593.950395][T24974] internal : no [ 1593.950395][T24974] type : shash [ 1593.950395][T24974] blocksize : 16 [ 1593.950395][T24974] digestsize : 16 [ 1593.950395][T24974] [ 1593.950395][T24974] name : authencesn(wp512 [ 1593.950395][T24974] [ 1594.059673][ T30] audit: type=1326 audit(2000001518.024:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24956 comm="syz.4.4987" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504299ce59 code=0x7ffc0000 [ 1594.208917][T24974] CIFS: VFS: bad cache= option: none : no [ 1594.208917][T24974] blocksize : 16 [ 1594.208917][T24974] min keysize : 32 [ 1594.208917][T24974] max keysize : 64 [ 1594.208917][T24974] ivsize : 16 [ 1594.208917][T24974] chunksize : 16 [ 1594.208917][T24974] walksize : 16 [ 1594.208917][T24974] statesize : 0 [ 1594.208917][T24974] [ 1594.208917][T24974] name : cbcmac(camellia) [ 1594.208917][T24974] driver : cbcmac(camellia-generic) [ 1594.208917][T24974] module : kernel [ 1594.208917][T24974] priority : 100 [ 1594.208917][T24974] refcnt : 1 [ 1594.208917][T24974] selftest : passed [ 1594.208917][T24974] internal : no [ 1594.208917][T24974] type : shash [ 1594.208917][T24974] blocksize : 16 [ 1594.208917][T24974] digestsize : 16 [ 1594.208917][T24974] [ 1594.208917][T24974] name : authencesn(wp512 [ 1594.559991][T24984] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1596.562374][ T5609] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1596.579018][ T5609] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1596.586758][ T5609] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1596.594567][ T5609] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1596.607760][ T5609] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1597.203367][T25014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5002'. [ 1597.267971][T25018] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5002'. [ 1597.306774][T25014] erspan0: entered promiscuous mode [ 1597.330986][T25014] macvtap1: entered promiscuous mode [ 1597.344782][T25014] macvtap1: entered allmulticast mode [ 1597.359496][T25014] erspan0: entered allmulticast mode [ 1597.417621][T25000] lo speed is unknown, defaulting to 1000 [ 1598.221572][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 1598.221607][ T30] audit: type=1400 audit(2000001522.704:2032): avc: denied { mount } for pid=25026 comm="syz.4.5006" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 1598.684074][T22855] Bluetooth: hci7: command tx timeout [ 1600.614586][T25046] use of bytesused == 0 is deprecated and will be removed in the future, [ 1600.660560][T25046] use the actual size instead. [ 1600.763695][T22855] Bluetooth: hci7: command tx timeout [ 1601.591644][ T30] audit: type=1326 audit(2000001526.054:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25054 comm="syz.7.5011" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd59479ce59 code=0x0 [ 1601.725416][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1601.731742][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1602.057577][T25000] bridge0: port 1(bridge_slave_0) entered blocking state [ 1602.072421][T25000] bridge0: port 1(bridge_slave_0) entered disabled state [ 1602.089741][T25000] bridge_slave_0: entered allmulticast mode [ 1602.108769][T25000] bridge_slave_0: entered promiscuous mode [ 1602.126303][T25000] bridge0: port 2(bridge_slave_1) entered blocking state [ 1602.142784][T25000] bridge0: port 2(bridge_slave_1) entered disabled state [ 1602.160985][T25000] bridge_slave_1: entered allmulticast mode [ 1602.184720][T25000] bridge_slave_1: entered promiscuous mode [ 1602.307483][T25000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1602.346134][T25000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1602.843876][T22855] Bluetooth: hci7: command tx timeout [ 1603.034414][T25000] team0: Port device team_slave_0 added [ 1603.056192][T25000] team0: Port device team_slave_1 added [ 1603.117595][T25000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1603.132137][T25000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1603.200723][T25000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1603.233647][T25000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1603.250907][T25000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1603.313964][T25000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1603.438973][T25067] netlink: 1648 bytes leftover after parsing attributes in process `syz.7.5011'. [ 1603.532215][T25000] hsr_slave_0: entered promiscuous mode [ 1603.549116][T25000] hsr_slave_1: entered promiscuous mode [ 1603.567045][T25000] debugfs: 'hsr0' already exists in 'hsr' [ 1603.585718][T25000] Cannot create hsr debugfs directory [ 1604.283458][T25000] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1604.312696][T25000] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1604.342790][T25000] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1604.361352][T25000] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1604.379068][T25000] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1604.412461][T25000] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1604.433354][T25000] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1604.456796][T25000] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1604.650125][T25093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5020'. [ 1604.694423][T25000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1604.787528][T25093] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1604.848558][T25000] 8021q: adding VLAN 0 to HW filter on device team0 [ 1604.902729][T15236] bridge0: port 1(bridge_slave_0) entered blocking state [ 1604.909875][T15236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1604.924037][T22855] Bluetooth: hci7: command tx timeout [ 1604.991611][T15236] bridge0: port 2(bridge_slave_1) entered blocking state [ 1604.998683][T15236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1607.018117][T25000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1607.203559][T12625] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1607.753871][T12625] usb 7-1: Using ep0 maxpacket: 8 [ 1607.799581][T12625] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1607.816545][T12625] usb 7-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1607.829832][T12625] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1607.854061][T12625] usb 7-1: Product: syz [ 1607.873231][T12625] usb 7-1: Manufacturer: syz [ 1607.891653][T12625] usb 7-1: SerialNumber: syz [ 1607.910862][T12625] usb 7-1: config 0 descriptor?? [ 1607.936768][T12625] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1607.945771][T25000] veth0_vlan: entered promiscuous mode [ 1607.980217][T25000] veth1_vlan: entered promiscuous mode [ 1608.121108][T25000] veth0_macvtap: entered promiscuous mode [ 1608.172320][T25000] veth1_macvtap: entered promiscuous mode [ 1608.273205][T25000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1608.304903][T25000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1608.343929][T20869] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1608.368339][T20869] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1608.399491][T20869] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1608.438358][T20869] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1608.929914][T25155] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5034'. [ 1609.158523][T20869] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1609.190573][T20869] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1609.265653][T20869] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1609.283883][T20869] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1610.538945][T12625] gspca_zc3xx: reg_r err -71 [ 1611.173705][T12625] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1611.210481][T25170] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5037'. [ 1611.264234][T12625] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1611.586528][T12625] usb 7-1: USB disconnect, device number 15 [ 1612.855591][T25191] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5040'. [ 1613.228021][T25191] bridge0: port 2(bridge_slave_1) entered disabled state [ 1613.235652][T25191] bridge0: port 1(bridge_slave_0) entered disabled state [ 1613.607890][T25196] netlink: 'syz.6.5044': attribute type 64 has an invalid length. [ 1613.636397][T25196] netlink: 5 bytes leftover after parsing attributes in process `syz.6.5044'. [ 1613.807873][T25196] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=25196 comm=syz.6.5044 [ 1613.906081][T25208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5045'. [ 1614.436887][ T5609] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1614.453469][ T5609] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1614.465845][ T5609] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1614.473884][ T5609] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1614.481274][ T5609] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1616.046039][T25229] netlink: 1047 bytes leftover after parsing attributes in process `syz.6.5050'. [ 1616.233722][T12625] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1616.345609][T18214] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1616.404382][T12625] usb 9-1: Using ep0 maxpacket: 16 [ 1616.427129][T12625] usb 9-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1616.448856][T12625] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1616.492261][T12625] usb 9-1: Product: syz [ 1616.515055][T12625] usb 9-1: Manufacturer: syz [ 1616.523642][T22855] Bluetooth: hci8: command tx timeout [ 1616.530679][T18214] usb 7-1: Using ep0 maxpacket: 8 [ 1616.538494][T12625] usb 9-1: SerialNumber: syz [ 1616.559887][T18214] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1616.570196][T12625] usb 9-1: config 0 descriptor?? [ 1616.593034][T18214] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1616.615746][T12625] visor 9-1:0.0: Sony Clie 3.5 converter detected [ 1616.637210][T18214] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1616.667516][T18214] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1616.706665][T18214] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1616.748586][T18214] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1616.773183][T25207] lo speed is unknown, defaulting to 1000 [ 1617.032042][T18214] usb 7-1: GET_CAPABILITIES returned ff [ 1618.435637][T18214] usbtmc 7-1:16.0: can't read capabilities [ 1618.607845][T22855] Bluetooth: hci8: command tx timeout [ 1619.463541][T18214] usb 7-1: USB disconnect, device number 16 [ 1619.470424][T25253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5054'. [ 1619.985079][T12625] usb 9-1: clie_3_5_startup: get interface number failed: -110 [ 1620.008798][T12625] visor 9-1:0.0: probe with driver visor failed with error -110 [ 1620.059953][T12625] usb 9-1: USB disconnect, device number 2 [ 1620.683823][T25266] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5057'. [ 1620.693584][T22855] Bluetooth: hci8: command tx timeout [ 1621.003630][T12625] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1621.343884][T12625] usb 9-1: Using ep0 maxpacket: 8 [ 1621.362474][T12625] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1621.515065][T12625] usb 9-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1621.532486][T12625] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1621.555560][T12625] usb 9-1: Product: syz [ 1622.358876][T12625] usb 9-1: Manufacturer: syz [ 1622.380910][T12625] usb 9-1: SerialNumber: syz [ 1622.416251][T12625] usb 9-1: config 0 descriptor?? [ 1622.542109][T12625] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1622.639506][T25291] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5061'. [ 1622.763609][T22855] Bluetooth: hci8: command tx timeout [ 1623.122733][T12625] gspca_zc3xx: reg_w_i err -110 [ 1623.486326][T25293] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1623.704091][T25207] bridge0: port 1(bridge_slave_0) entered blocking state [ 1623.740131][T25207] bridge0: port 1(bridge_slave_0) entered disabled state [ 1623.774923][T25207] bridge_slave_0: entered allmulticast mode [ 1623.804272][T12625] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1623.819752][T25207] bridge_slave_0: entered promiscuous mode [ 1623.849666][T12625] gspca_zc3xx 9-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1623.893680][T25207] bridge0: port 2(bridge_slave_1) entered blocking state [ 1623.911440][T25207] bridge0: port 2(bridge_slave_1) entered disabled state [ 1624.116925][T25207] bridge_slave_1: entered allmulticast mode [ 1624.220729][T25207] bridge_slave_1: entered promiscuous mode [ 1624.272484][ T5342] usb 9-1: USB disconnect, device number 3 [ 1624.284258][T10938] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1624.414945][ T30] audit: type=1400 audit(2000001548.904:2034): avc: denied { map } for pid=25310 comm="syz.8.5068" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1624.467659][T25207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1624.477372][T10938] usb 7-1: Using ep0 maxpacket: 16 [ 1624.482381][ T30] audit: type=1400 audit(2000001548.934:2035): avc: denied { execute } for pid=25310 comm="syz.8.5068" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1624.488580][T10938] usb 7-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1624.553246][T25207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1624.590956][T10938] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1624.634011][T10938] usb 7-1: Product: syz [ 1624.651569][T10938] usb 7-1: Manufacturer: syz [ 1624.673433][T10938] usb 7-1: SerialNumber: syz [ 1624.689598][T25207] team0: Port device team_slave_0 added [ 1624.711111][T25207] team0: Port device team_slave_1 added [ 1624.720958][T10938] usb 7-1: config 0 descriptor?? [ 1624.773999][T10938] visor 7-1:0.0: Sony Clie 3.5 converter detected [ 1624.842801][T25315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5069'. [ 1625.219040][T14284] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1625.236357][T25207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1625.263457][T25207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1625.319692][T25207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1625.345025][T25207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1625.359196][T25207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1625.413623][T14284] usb 9-1: Using ep0 maxpacket: 8 [ 1625.425356][T14284] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1625.434609][T25207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1625.449721][T14284] usb 9-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1625.475091][T14284] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1625.495129][T14284] usb 9-1: Product: syz [ 1625.503972][T14284] usb 9-1: Manufacturer: syz [ 1625.516650][T14284] usb 9-1: SerialNumber: syz [ 1625.554413][T14284] usb 9-1: config 0 descriptor?? [ 1625.576110][T25207] hsr_slave_0: entered promiscuous mode [ 1625.587059][T14284] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1625.604724][T25207] hsr_slave_1: entered promiscuous mode [ 1625.625985][T25207] debugfs: 'hsr0' already exists in 'hsr' [ 1625.643905][T25207] Cannot create hsr debugfs directory [ 1626.232656][T14284] gspca_zc3xx: reg_w_i err -110 [ 1626.594420][T25304] lo speed is unknown, defaulting to 1000 [ 1626.834056][T14284] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1626.849627][T14284] gspca_zc3xx 9-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1626.942171][T25207] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1626.985740][T25207] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1627.016516][T25207] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1627.046128][T25207] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1627.069184][T25207] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1627.096237][T25207] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1627.111294][T25207] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1627.141334][T25207] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1627.471651][T25207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1627.770307][ T5342] usb 9-1: USB disconnect, device number 4 [ 1627.778496][T25207] 8021q: adding VLAN 0 to HW filter on device team0 [ 1627.832918][T15399] bridge0: port 1(bridge_slave_0) entered blocking state [ 1627.840075][T15399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1627.897134][T15399] bridge0: port 2(bridge_slave_1) entered blocking state [ 1627.904275][T15399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1628.107736][T25358] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5080'. [ 1628.296689][T10938] usb 7-1: clie_3_5_startup: get interface number failed: -110 [ 1628.312022][T10938] visor 7-1:0.0: probe with driver visor failed with error -110 [ 1628.585059][ T5723] usb 7-1: USB disconnect, device number 17 [ 1629.403764][T12184] Bluetooth: hci0: command 0x0406 tx timeout [ 1629.572867][T25371] binder: 25370:25371 ioctl 4018620d 0 returned -22 [ 1629.626650][T25371] binder: 25370:25371 ioctl c0306201 2000000003c0 returned -14 [ 1630.862706][ T5609] Bluetooth: hci8: command 0x0405 tx timeout [ 1630.885143][ T5342] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1631.103966][T25388] tmpfs: Bad value for 'mpol' [ 1631.208833][T25207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1631.263573][ T5342] usb 9-1: Using ep0 maxpacket: 8 [ 1631.269980][ T5342] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1631.296688][ T5342] usb 9-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1631.313722][ T5342] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1631.342544][ T5342] usb 9-1: Product: syz [ 1631.360973][ T5342] usb 9-1: Manufacturer: syz [ 1631.383717][ T5342] usb 9-1: SerialNumber: syz [ 1631.404749][T18214] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1631.406859][ T5342] usb 9-1: config 0 descriptor?? [ 1631.426500][T25392] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5087'. [ 1631.452734][T25392] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5087'. [ 1631.473161][ T5342] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1631.613381][T25392] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1631.635040][T18214] usb 7-1: config 255 has too many interfaces: 224, using maximum allowed: 32 [ 1631.659493][T18214] usb 7-1: config 255 has 1 interface, different from the descriptor's value: 224 [ 1631.707892][T18214] usb 7-1: config 255 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1631.792381][T18214] usb 7-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 1631.818774][T18214] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1631.857483][T18214] usb 7-1: Product: syz [ 1631.866775][T18214] usb 7-1: Manufacturer: syz [ 1631.889397][T18214] usb 7-1: SerialNumber: syz [ 1631.906786][T18214] uvcvideo 7-1:255.0: Found UVC 0.00 device syz (18ec:3288) [ 1631.938929][T18214] uvcvideo 7-1:255.0: No valid video chain found. [ 1632.426372][ T5723] usb 7-1: USB disconnect, device number 18 [ 1632.622379][T25207] veth0_vlan: entered promiscuous mode [ 1632.730601][T25207] veth1_vlan: entered promiscuous mode [ 1632.874751][T25207] veth0_macvtap: entered promiscuous mode [ 1633.004458][T25207] veth1_macvtap: entered promiscuous mode [ 1633.047401][T25417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5091'. [ 1633.077862][T25207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1633.124200][T25207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1633.608342][ T5342] gspca_zc3xx: reg_r err -71 [ 1634.011518][T20875] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1634.069488][T20875] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1634.131229][T20875] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1634.171212][T20875] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1634.314263][ T5342] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1634.479291][ T5342] gspca_zc3xx 9-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1634.495580][T25431] fuse: fd is not a fuse device [ 1634.569099][ T5342] usb 9-1: USB disconnect, device number 5 [ 1634.826610][T20881] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1634.867729][T20881] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1635.004435][T20876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1635.036783][T20876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1635.220985][T25450] lo speed is unknown, defaulting to 1000 [ 1635.705270][ T29] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1635.914920][ T29] usb 10-1: Using ep0 maxpacket: 32 [ 1635.940487][ T29] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1635.998416][ T29] usb 10-1: config 14 has an invalid interface number: 57 but max is 1 [ 1636.039044][ T29] usb 10-1: config 14 has an invalid interface number: 228 but max is 1 [ 1636.222723][ T29] usb 10-1: config 14 has no interface number 0 [ 1636.286636][ T29] usb 10-1: config 14 has no interface number 1 [ 1636.422146][ T29] usb 10-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1636.497466][ T29] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1636.553420][ T29] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1636.713780][ T29] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1636.794433][ T29] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1636.861277][ T29] usb 10-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1636.955975][ T29] usb 10-1: config 14 interface 57 has no altsetting 0 [ 1636.994989][ T29] usb 10-1: config 14 interface 228 has no altsetting 0 [ 1637.021617][ T29] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1637.049767][ T29] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1637.075733][ T29] usb 10-1: Product: syz [ 1637.086618][ T29] usb 10-1: Manufacturer: syz [ 1637.100253][ T29] usb 10-1: SerialNumber: syz [ 1637.326698][T25496] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5101'. [ 1637.429983][T25500] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5102'. [ 1637.581722][ T29] legousbtower 10-1:14.57: interrupt endpoints not found [ 1637.990715][ T29] legousbtower 10-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 1638.109242][ T29] legousbtower 10-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1638.473324][ T30] audit: type=1400 audit(2000001562.954:2036): avc: denied { execstack } for pid=25513 comm="syz.6.5106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1638.842186][T25519] usb 10-1: LEGO USB Tower reset control request failed [ 1639.277955][T25519] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1640.492785][ T5342] usb 10-1: USB disconnect, device number 2 [ 1640.559196][ T5342] legousbtower 10-1:14.228: LEGO USB Tower #-160 now disconnected [ 1642.084492][T25575] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5115'. [ 1642.428527][T25576] lo speed is unknown, defaulting to 1000 [ 1643.301926][T25586] netdevsim netdevsim8 ªªªªª»: renamed from netdevsim0 (while UP) [ 1644.264976][T25604] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1644.533648][ T5609] Bluetooth: hci8: command 0x0405 tx timeout [ 1646.575646][T25624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5128'. [ 1647.213598][T25608] IPv6: NLM_F_CREATE should be specified when creating new route [ 1647.719049][T25632] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1648.087022][T25643] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1648.404407][T25647] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(11) [ 1648.410996][T25647] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1648.419280][T25647] vhci_hcd vhci_hcd.0: Device attached [ 1648.426561][T25651] vhci_hcd: connection closed [ 1648.426865][T20888] vhci_hcd vhci_hcd.6: stop threads [ 1648.469994][T20888] vhci_hcd vhci_hcd.6: release socket [ 1648.496110][T20888] vhci_hcd vhci_hcd.6: disconnect device [ 1649.213711][ T5736] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1649.260063][T25665] FAULT_INJECTION: forcing a failure. [ 1649.260063][T25665] name failslab, interval 1, probability 0, space 0, times 0 [ 1649.318575][T25665] CPU: 1 UID: 0 PID: 25665 Comm: syz.6.5139 Tainted: G L syzkaller #0 PREEMPT(full) [ 1649.318601][T25665] Tainted: [L]=SOFTLOCKUP [ 1649.318607][T25665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1649.318617][T25665] Call Trace: [ 1649.318623][T25665] [ 1649.318630][T25665] dump_stack_lvl+0x100/0x190 [ 1649.318658][T25665] should_fail_ex.cold+0x5/0xa [ 1649.318683][T25665] should_failslab+0xc2/0x120 [ 1649.318707][T25665] __kmalloc_noprof+0xfc/0x820 [ 1649.318727][T25665] ? rcu_is_watching+0x12/0xc0 [ 1649.318754][T25665] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1649.318786][T25665] tomoyo_realpath_from_path+0xb6/0x690 [ 1649.318818][T25665] tomoyo_path_number_perm+0x23c/0x580 [ 1649.318840][T25665] ? tomoyo_path_number_perm+0x22e/0x580 [ 1649.318865][T25665] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1649.318911][T25665] ? find_held_lock+0x2b/0x80 [ 1649.318929][T25665] ? __fget_files+0x215/0x3d0 [ 1649.318946][T25665] ? hook_file_ioctl_common+0x140/0x440 [ 1649.318964][T25665] ? __fget_files+0x215/0x3d0 [ 1649.318985][T25665] ? __fget_files+0x21f/0x3d0 [ 1649.319007][T25665] security_file_ioctl+0xd3/0x230 [ 1649.319033][T25665] __x64_sys_ioctl+0xb7/0x210 [ 1649.319061][T25665] do_syscall_64+0x115/0x870 [ 1649.319087][T25665] ? clear_bhb_loop+0x40/0x90 [ 1649.319109][T25665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1649.319133][T25665] RIP: 0033:0x7f795e39ce59 [ 1649.319147][T25665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1649.319163][T25665] RSP: 002b:00007f795f2d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1649.319180][T25665] RAX: ffffffffffffffda RBX: 00007f795e615fa0 RCX: 00007f795e39ce59 [ 1649.319191][T25665] RDX: 0000200000000240 RSI: 00000000c02c640e RDI: 0000000000000003 [ 1649.319202][T25665] RBP: 00007f795f2d2090 R08: 0000000000000000 R09: 0000000000000000 [ 1649.319212][T25665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1649.319222][T25665] R13: 00007f795e616038 R14: 00007f795e615fa0 R15: 00007ffda0285948 [ 1649.319247][T25665] [ 1649.319253][T25665] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1649.383595][ T5736] usb 10-1: Using ep0 maxpacket: 8 [ 1649.564729][ T5736] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1649.617914][ T5736] usb 10-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1649.650507][ T5736] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1649.682715][ T5736] usb 10-1: Product: syz [ 1649.702407][ T5736] usb 10-1: Manufacturer: syz [ 1649.726018][ T5736] usb 10-1: SerialNumber: syz [ 1649.755535][ T5736] usb 10-1: config 0 descriptor?? [ 1649.794512][ T5736] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1650.556796][ T5736] gspca_zc3xx: reg_w_i err -110 [ 1651.156349][ T5736] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1651.184661][ T5736] gspca_zc3xx 10-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1651.557471][T25678] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1651.741332][T25683] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5144'. [ 1651.758657][T12625] usb 10-1: USB disconnect, device number 3 [ 1651.790143][T25683] netlink: set zone limit has 4 unknown bytes [ 1651.871453][T25685] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1651.970963][T25688] IPVS: set_ctl: invalid protocol: 47 100.1.1.2:20014 [ 1652.213577][ T5609] Bluetooth: hci8: command 0x0405 tx timeout [ 1652.245660][T10938] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1652.454545][T10938] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1652.489360][T10938] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1652.526182][T10938] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1652.572722][T10938] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1652.619626][T10938] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1652.667726][T10938] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1652.719615][T10938] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1652.773835][T10938] usb 10-1: Product: syz [ 1652.791091][T10938] usb 10-1: Manufacturer: syz [ 1652.820143][T10938] cdc_wdm 10-1:1.0: skipping garbage [ 1652.840153][T10938] cdc_wdm 10-1:1.0: skipping garbage [ 1652.880359][T10938] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1652.895377][ T30] audit: type=1400 audit(2000001577.374:2037): avc: denied { read } for pid=25696 comm="syz.4.5149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1652.898380][T10938] cdc_wdm 10-1:1.0: Unknown control protocol [ 1653.397955][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -EPIPE [ 1653.478645][T25704] blkio.reset_stats is deprecated [ 1653.603706][ T5736] usb 10-1: USB disconnect, device number 4 [ 1654.065648][T25710] program syz.6.5153 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1654.824591][T25713] loop6: detected capacity change from 0 to 2640 [ 1654.847395][T25713] buffer_io_error: 6 callbacks suppressed [ 1654.847409][T25713] Buffer I/O error on dev loop6, logical block 0, async page read [ 1654.888249][T25713] Buffer I/O error on dev loop6, logical block 0, async page read [ 1654.927311][T25713] Buffer I/O error on dev loop6, logical block 0, async page read [ 1654.953978][T25713] Buffer I/O error on dev loop6, logical block 0, async page read [ 1654.987170][T25713] Buffer I/O error on dev loop6, logical block 0, async page read [ 1655.252008][T25713] Buffer I/O error on dev loop6, logical block 0, async page read [ 1655.271134][T25713] Buffer I/O error on dev loop6, logical block 0, async page read [ 1655.293674][T25713] Buffer I/O error on dev loop6, logical block 0, async page read [ 1655.306342][T25713] ldm_validate_partition_table(): Disk read failed. [ 1655.322132][T25713] Buffer I/O error on dev loop6, logical block 0, async page read [ 1655.343823][T25713] Buffer I/O error on dev loop6, logical block 0, async page read [ 1655.363734][T25713] Dev loop6: unable to read RDB block 0 [ 1655.373886][T25713] loop6: unable to read partition table [ 1655.391157][T25713] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1655.991969][T25736] /dev/nullb0: Can't open blockdev [ 1656.674446][T25739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5161'. [ 1656.810303][T25728] loop6: detected capacity change from 0 to 2640 [ 1656.872682][T25728] ldm_validate_partition_table(): Disk read failed. [ 1656.951119][T25728] Dev loop6: unable to read RDB block 0 [ 1657.031512][T25728] loop6: unable to read partition table [ 1657.044591][T25728] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1657.519419][T25750] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5163'. [ 1660.023883][T25765] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1660.123566][ T5609] Bluetooth: hci6: command 0x0405 tx timeout [ 1660.382482][T25774] netlink: 56 bytes leftover after parsing attributes in process `syz.7.5170'. [ 1660.620210][T25770] loop6: detected capacity change from 0 to 2640 [ 1660.669661][T25770] buffer_io_error: 27 callbacks suppressed [ 1660.669675][T25770] Buffer I/O error on dev loop6, logical block 0, async page read [ 1660.693662][T25770] Buffer I/O error on dev loop6, logical block 0, async page read [ 1660.739579][T25770] Buffer I/O error on dev loop6, logical block 0, async page read [ 1660.787598][T25770] Buffer I/O error on dev loop6, logical block 0, async page read [ 1660.823087][T25770] Buffer I/O error on dev loop6, logical block 0, async page read [ 1660.860534][T25770] Buffer I/O error on dev loop6, logical block 0, async page read [ 1660.889188][T25770] Buffer I/O error on dev loop6, logical block 0, async page read [ 1660.909912][T25770] Buffer I/O error on dev loop6, logical block 0, async page read [ 1660.958537][T25770] ldm_validate_partition_table(): Disk read failed. [ 1660.997349][T25770] Buffer I/O error on dev loop6, logical block 0, async page read [ 1661.041270][T25770] Buffer I/O error on dev loop6, logical block 0, async page read [ 1661.075308][T25770] Dev loop6: unable to read RDB block 0 [ 1661.099826][T25770] loop6: unable to read partition table [ 1661.127596][T25770] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1663.166765][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1663.193880][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1663.963223][ T5609] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1663.983207][ T5609] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1663.991737][ T5609] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1664.006465][ T5609] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1664.015002][ T5609] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1664.795341][T25806] netlink: 'syz.9.5172': attribute type 21 has an invalid length. [ 1664.829368][T25806] netlink: 132 bytes leftover after parsing attributes in process `syz.9.5172'. [ 1664.860808][T25806] netlink: 'syz.9.5172': attribute type 1 has an invalid length. [ 1664.914233][ T5736] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1665.084775][ T5736] usb 7-1: Using ep0 maxpacket: 8 [ 1665.096402][ T5736] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1665.132559][ T5736] usb 7-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1665.173708][ T5736] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1665.207192][ T5736] usb 7-1: Product: syz [ 1665.222990][ T5736] usb 7-1: Manufacturer: syz [ 1665.260457][ T5736] usb 7-1: SerialNumber: syz [ 1665.285610][ T5736] usb 7-1: config 0 descriptor?? [ 1665.320757][ T5736] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1665.732499][T25798] lo speed is unknown, defaulting to 1000 [ 1666.289046][ T5609] Bluetooth: hci9: command tx timeout [ 1666.298033][ T5736] gspca_zc3xx: reg_w_i err -110 [ 1666.913526][ T5736] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1666.930030][ T5736] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1668.363659][ T5609] Bluetooth: hci9: command tx timeout [ 1669.409422][T23939] usb 7-1: USB disconnect, device number 19 [ 1670.019814][T25798] bridge0: port 1(bridge_slave_0) entered blocking state [ 1670.048317][T25798] bridge0: port 1(bridge_slave_0) entered disabled state [ 1670.087651][T25798] bridge_slave_0: entered allmulticast mode [ 1670.113933][T23939] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1670.143432][T25798] bridge_slave_0: entered promiscuous mode [ 1670.176023][T25798] bridge0: port 2(bridge_slave_1) entered blocking state [ 1670.206297][ T31] INFO: task syz.5.4678:23889 blocked for more than 143 seconds. [ 1670.212241][T25798] bridge0: port 2(bridge_slave_1) entered disabled state [ 1670.219031][ T31] Tainted: G L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1670.250048][T25798] bridge_slave_1: entered allmulticast mode [ 1670.266229][ T30] audit: type=1400 audit(2000001594.754:2038): avc: denied { write } for pid=5593 comm="syz-executor" path="pipe:[4487]" dev="pipefs" ino=4487 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1670.313446][T25798] bridge_slave_1: entered promiscuous mode [ 1670.377173][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1670.390834][T23939] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1670.423608][ T31] task:syz.5.4678 state:D stack:27864 pid:23889 tgid:23887 ppid:15493 task_flags:0x400140 flags:0x00080002 [ 1670.437271][T23939] usb 7-1: config 0 has no interfaces? [ 1670.445218][T22855] Bluetooth: hci9: command tx timeout [ 1670.448656][T23939] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1670.465977][ T31] Call Trace: [ 1670.473560][ T31] [ 1670.476769][T23939] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1670.480285][T23939] usb 7-1: config 0 descriptor?? [ 1670.575978][ T31] __schedule+0x125c/0x6730 [ 1670.590484][ T31] ? __pfx___schedule+0x10/0x10 [ 1670.623525][ T31] ? find_held_lock+0x2b/0x80 [ 1670.642555][ T31] ? schedule+0x225/0x2c0 [ 1670.648391][ T31] schedule+0xdd/0x2c0 [ 1670.663524][ T31] super_lock+0x283/0x3f0 [ 1670.670743][ T31] ? __pfx_super_lock+0x10/0x10 [ 1670.682996][ T31] ? __pfx_var_wake_function+0x10/0x10 [ 1670.690757][T25856] loop6: detected capacity change from 0 to 2640 [ 1670.703519][ T31] ? __iterate_supers+0x1b6/0x330 [ 1670.714292][T25856] buffer_io_error: 6 callbacks suppressed [ 1670.714304][T25856] Buffer I/O error on dev loop6, logical block 0, async page read [ 1670.716852][ T31] __iterate_supers+0x1e0/0x330 [ 1670.733649][T25856] Buffer I/O error on dev loop6, logical block 0, async page read [ 1670.743537][ T31] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 1670.749709][ T31] ksys_sync+0x87/0xf0 [ 1670.763541][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 1670.763634][T25856] Buffer I/O error on dev loop6, logical block 0, async page read [ 1670.768332][ T31] ? do_syscall_64+0x90/0x870 [ 1670.804281][ T31] __do_sys_sync+0xe/0x20 [ 1670.806716][T25856] Buffer I/O error on dev loop6, logical block 0, async page read [ 1670.808636][ T31] do_syscall_64+0x115/0x870 [ 1670.833560][ T31] ? clear_bhb_loop+0x40/0x90 [ 1670.833670][T25856] Buffer I/O error on dev loop6, logical block 0, async page read [ 1670.843572][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1670.853984][T25856] Buffer I/O error on dev loop6, logical block 0, async page read [ 1670.863694][ T31] RIP: 0033:0x7f84dfd9ce59 [ 1670.869502][ T31] RSP: 002b:00007f84e0ce4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1670.873578][T25856] Buffer I/O error on dev loop6, logical block 0, async page read [ 1670.887692][ T31] RAX: ffffffffffffffda RBX: 00007f84e0015fa0 RCX: 00007f84dfd9ce59 [ 1670.904333][T25856] Buffer I/O error on dev loop6, logical block 0, async page read [ 1670.913642][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1670.923562][ T31] RBP: 00007f84e0015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1670.930882][T25856] ldm_validate_partition_table(): Disk read failed. [ 1670.938344][T25856] Buffer I/O error on dev loop6, logical block 0, async page read [ 1670.939748][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1670.963727][T25856] Buffer I/O error on dev loop6, logical block 0, async page read [ 1670.971974][T25856] Dev loop6: unable to read RDB block 0 [ 1670.973666][ T31] R13: 00007f84e0016038 R14: 00007f84e0015fa0 R15: 00007ffe059146a8 [ 1670.983788][T25856] loop6: unable to read partition table [ 1670.993601][ T31] [ 1671.003785][T25856] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1671.007195][ T31] INFO: task syz.5.4678:23892 blocked for more than 144 seconds. [ 1671.043538][ T31] Tainted: G L syzkaller #0 [ 1671.050060][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1671.073502][ T31] task:syz.5.4678 state:D stack:28856 pid:23892 tgid:23887 ppid:15493 task_flags:0x400040 flags:0x00080002 [ 1671.089979][ T31] Call Trace: [ 1671.117699][ T31] [ 1671.122114][ T31] __schedule+0x125c/0x6730 [ 1671.136329][ T31] ? __pfx___schedule+0x10/0x10 [ 1671.148506][ T31] ? find_held_lock+0x2b/0x80 [ 1671.171758][ T31] ? schedule+0x225/0x2c0 [ 1671.176403][ T31] schedule+0xdd/0x2c0 [ 1671.186639][ T31] super_lock+0x283/0x3f0 [ 1671.203620][ T31] ? __pfx_super_lock+0x10/0x10 [ 1671.208506][ T31] ? __pfx_var_wake_function+0x10/0x10 [ 1671.223698][ T31] ? __iterate_supers+0x1b6/0x330 [ 1671.230147][ T31] __iterate_supers+0x1e0/0x330 [ 1671.244114][ T31] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 1671.251159][ T31] ksys_sync+0x87/0xf0 [ 1671.263516][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 1671.269754][ T31] ? kcov_ioctl+0x17a/0x750 [ 1671.283536][ T31] ? do_syscall_64+0x90/0x870 [ 1671.288238][ T31] __do_sys_sync+0xe/0x20 [ 1671.292567][ T31] do_syscall_64+0x115/0x870 [ 1671.313557][ T31] ? clear_bhb_loop+0x40/0x90 [ 1671.318267][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1671.333636][ T31] RIP: 0033:0x7f84dfd9ce59 [ 1671.338066][ T31] RSP: 002b:00007f84e0cc3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1671.363517][ T31] RAX: ffffffffffffffda RBX: 00007f84e0016090 RCX: 00007f84dfd9ce59 [ 1671.371511][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1671.393525][ T31] RBP: 00007f84e0016090 R08: 0000000000000000 R09: 0000000000000000 [ 1671.405282][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1671.423984][ T31] R13: 00007f84e0016128 R14: 00007f84e0016090 R15: 00007ffe059146a8 [ 1671.447669][ T31] [ 1671.450791][ T31] [ 1671.450791][ T31] Showing all locks held in the system: [ 1671.723573][ T31] 3 locks held by kworker/1:1/29: [ 1671.740935][ T31] #0: ffff88813fe2b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 1671.772274][ T31] #1: ffffc90000a57d08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 1671.824024][ T31] #2: ffffffff8e9f1b68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1671.865661][ T31] 1 lock held by khungtaskd/31: [ 1671.889316][ T31] #0: ffffffff8e9e60c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1671.925051][ T31] 2 locks held by getty/5357: [ 1671.935006][ T31] #0: ffff8880349000a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1671.965245][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 1671.995734][ T31] 5 locks held by kworker/0:6/5716: [ 1672.013565][ T31] 1 lock held by syz.4.3361/18809: [ 1672.027954][ T31] #0: ffff8880886d8ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 1672.059008][ T31] 1 lock held by syz.3.4554/23435: [ 1672.074302][ T31] #0: ffff888032a2c0d8 (&type->s_umount_key#75/1){+.+.}-{4:4}, at: sget_fc+0x3c8/0x1d80 [ 1672.104577][ T31] 4 locks held by kworker/1:2/23939: [ 1672.121713][ T31] 4 locks held by kworker/0:1/25436: [ 1672.139400][ T31] 1 lock held by syz.6.5183/25846: [ 1672.153455][ T31] 1 lock held by syz.7.5184/25856: [ 1672.173980][ T31] 5 locks held by syz.9.5179/25850: [ 1672.189458][ T31] #0: ffff88802d0d8ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 1672.213993][ T31] #1: ffff88802d0d80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x37e/0x13c0 [ 1672.235078][ T31] #2: ffffffff90ac9220 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 1672.254950][ T31] #3: ffff888052e3daf8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x95/0x710 [ 1672.273509][ T31] #4: ffffffff8e9f1b68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 1672.303699][ T31] [ 1672.344178][ T31] ============================================= [ 1672.344178][ T31] [ 1672.363552][ T31] NMI backtrace for cpu 1 [ 1672.363569][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1672.363593][ T31] Tainted: [L]=SOFTLOCKUP [ 1672.363600][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1672.363611][ T31] Call Trace: [ 1672.363617][ T31] [ 1672.363624][ T31] dump_stack_lvl+0x100/0x190 [ 1672.363652][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1672.363679][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1672.363706][ T31] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 1672.363730][ T31] sys_info+0x141/0x190 [ 1672.363749][ T31] watchdog+0xcb1/0x1030 [ 1672.363776][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1672.363799][ T31] ? __pfx_watchdog+0x10/0x10 [ 1672.363820][ T31] ? __kthread_parkme+0x18c/0x230 [ 1672.363849][ T31] ? kthread+0x13a/0x450 [ 1672.363865][ T31] ? __pfx_watchdog+0x10/0x10 [ 1672.363884][ T31] kthread+0x370/0x450 [ 1672.363900][ T31] ? __pfx_kthread+0x10/0x10 [ 1672.363919][ T31] ret_from_fork+0x72b/0xd50 [ 1672.363943][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1672.363967][ T31] ? __switch_to+0x800/0x10f0 [ 1672.363987][ T31] ? __pfx_kthread+0x10/0x10 [ 1672.364006][ T31] ret_from_fork_asm+0x1a/0x30 [ 1672.364034][ T31] [ 1672.364041][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1672.496793][ C0] NMI backtrace for cpu 0 [ 1672.496808][ C0] CPU: 0 UID: 0 PID: 5716 Comm: kworker/0:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 1672.496828][ C0] Tainted: [L]=SOFTLOCKUP [ 1672.496833][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1672.496843][ C0] Workqueue: events team_mcast_rejoin_work [ 1672.496866][ C0] RIP: 0010:trace_hardirqs_off+0x4/0x170 [ 1672.496886][ C0] Code: 22 68 00 e9 5b ff ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <41> 54 55 53 48 8b 7c 24 18 e8 2e fd 8a 09 65 8b 05 83 45 23 12 85 [ 1672.496899][ C0] RSP: 0018:ffffc900044cf3e0 EFLAGS: 00000006 [ 1672.496911][ C0] RAX: 0000000003c40537 RBX: ffffffff89749230 RCX: 0000000018d3623e [ 1672.496920][ C0] RDX: 0000000000000015 RSI: 00000000485c044f RDI: ffffffff81753b4a [ 1672.496934][ C0] RBP: ffff888045b26190 R08: 0000000000d8a5c0 R09: 000000006ccd8a5c [ 1672.496943][ C0] R10: 0000000000000200 R11: 000000000000753b R12: 0000000000000000 [ 1672.496952][ C0] R13: 0000000000000200 R14: 000000000000000e R15: ffff88805854f444 [ 1672.496961][ C0] FS: 0000000000000000(0000) GS:ffff8881240e0000(0000) knlGS:0000000000000000 [ 1672.496976][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1672.496985][ C0] CR2: 0000560633e80a78 CR3: 000000007d939000 CR4: 00000000003526f0 [ 1672.496995][ C0] Call Trace: [ 1672.496999][ C0] [ 1672.497005][ C0] __call_rcu_common.constprop.0+0x48b/0x9b0 [ 1672.497027][ C0] dst_release+0x259/0x330 [ 1672.497048][ C0] __dev_queue_xmit+0x156c/0x4940 [ 1672.497068][ C0] ? ip6mr_fib_lookup+0x133/0x1a0 [ 1672.497090][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1672.497111][ C0] ? __lock_acquire+0x49f/0x1a40 [ 1672.497136][ C0] ip6_finish_output2+0xfd4/0x1ce0 [ 1672.497153][ C0] __ip6_finish_output+0x357/0xdf0 [ 1672.497168][ C0] ip6_output+0x2aa/0xa60 [ 1672.497181][ C0] ? __pfx_ip6_output+0x10/0x10 [ 1672.497195][ C0] ? __pfx_ip6_finish_output+0x10/0x10 [ 1672.497208][ C0] ? NF_HOOK.constprop.0+0x277/0x5a0 [ 1672.497223][ C0] ? NF_HOOK.constprop.0+0x277/0x5a0 [ 1672.497239][ C0] ? __pfx_ip6_output+0x10/0x10 [ 1672.497251][ C0] NF_HOOK.constprop.0+0x115/0x5a0 [ 1672.497265][ C0] ? __pfx_NF_HOOK.constprop.0+0x10/0x10 [ 1672.497281][ C0] ? __pfx_dst_output+0x10/0x10 [ 1672.497303][ C0] mld_sendpack+0x8f7/0xec0 [ 1672.497318][ C0] ? __pfx_mld_sendpack+0x10/0x10 [ 1672.497339][ C0] mld_send_report+0xd7/0x3c0 [ 1672.497354][ C0] ipv6_mc_netdev_event+0x2b8/0x3a0 [ 1672.497369][ C0] notifier_call_chain+0x99/0x3f0 [ 1672.497385][ C0] call_netdevice_notifiers_info+0xbe/0x110 [ 1672.497403][ C0] call_netdevice_notifiers+0x7c/0xb0 [ 1672.497431][ C0] ? __pfx_call_netdevice_notifiers+0x10/0x10 [ 1672.497450][ C0] team_mcast_rejoin_work+0xd6/0x210 [ 1672.497470][ C0] process_one_work+0xa23/0x1940 [ 1672.497490][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1672.497508][ C0] ? __pfx_team_mcast_rejoin_work+0x10/0x10 [ 1672.497528][ C0] worker_thread+0x5ef/0xe50 [ 1672.497547][ C0] ? kthread+0x13a/0x450 [ 1672.497559][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1672.497573][ C0] kthread+0x370/0x450 [ 1672.497586][ C0] ? __pfx_kthread+0x10/0x10 [ 1672.497600][ C0] ret_from_fork+0x72b/0xd50 [ 1672.497619][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1672.497638][ C0] ? __switch_to+0x800/0x10f0 [ 1672.497652][ C0] ? __pfx_kthread+0x10/0x10 [ 1672.497666][ C0] ret_from_fork_asm+0x1a/0x30 [ 1672.497685][ C0] [ 1673.234801][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1673.241681][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1673.252351][ T31] Tainted: [L]=SOFTLOCKUP [ 1673.256660][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1673.266701][ T31] Call Trace: [ 1673.269966][ T31] [ 1673.272883][ T31] dump_stack_lvl+0x100/0x190 [ 1673.277566][ T31] vpanic+0x552/0x970 [ 1673.281539][ T31] ? __pfx_vpanic+0x10/0x10 [ 1673.286037][ T31] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 1673.292194][ T31] panic+0xd1/0xe0 [ 1673.295906][ T31] ? __pfx_panic+0x10/0x10 [ 1673.300320][ T31] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 1673.306466][ T31] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 1673.312612][ T31] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 1673.318759][ T31] ? watchdog.cold+0x1ec/0x234 [ 1673.323517][ T31] ? watchdog+0xcc1/0x1030 [ 1673.327931][ T31] watchdog.cold+0x1fd/0x234 [ 1673.332516][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1673.338319][ T31] ? __pfx_watchdog+0x10/0x10 [ 1673.342997][ T31] ? __kthread_parkme+0x18c/0x230 [ 1673.348029][ T31] ? kthread+0x13a/0x450 [ 1673.352263][ T31] ? __pfx_watchdog+0x10/0x10 [ 1673.356935][ T31] kthread+0x370/0x450 [ 1673.360993][ T31] ? __pfx_kthread+0x10/0x10 [ 1673.365576][ T31] ret_from_fork+0x72b/0xd50 [ 1673.370164][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1673.375273][ T31] ? __switch_to+0x800/0x10f0 [ 1673.379940][ T31] ? __pfx_kthread+0x10/0x10 [ 1673.384524][ T31] ret_from_fork_asm+0x1a/0x30 [ 1673.389289][ T31] [ 1673.392488][ T31] Kernel Offset: disabled [ 1673.396784][ T31] Rebooting in 86400 seconds..