last executing test programs: 28m5.854912695s ago: executing program 32 (id=707): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000280)=0x40, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 26m33.090146364s ago: executing program 33 (id=1325): socket$qrtr(0x2a, 0x2, 0x0) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1978, &(0x7f0000000040)={0x0, 0xca72, 0x1cc90, 0x0, 0x20002fb}) r1 = socket$inet(0x2, 0x80001, 0x84) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x2, {0x1, 0x0, 0x0, '\x00', {0x9ca7a16b958dcf33, 0x8001, 0xffffffffffffffff, 0xfffffff3, 0x0, 0x0, 0x2000, '\x00', 0xfffffffffffffffe, 0x0, 0xffffffffffffc2f3, 0x0, {0xfffffffffffffffd}, {0x5}, {0x0, 0x4}, {0x5}, 0x61, 0x0, 0x7fff}}}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 21m21.493517672s ago: executing program 4 (id=2714): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd8f51000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000f40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002f80)={0x50, 0x0, r3, {0x7, 0x2d, 0x877, 0x801006, 0x8, 0xff, 0x1, 0xe0000000, 0x0, 0x0, 0x100, 0xdc14}}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0xcb}, @nested={0x4, 0x1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 21m20.082749384s ago: executing program 4 (id=2719): mount(0x0, 0x0, 0x0, 0x8, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V1(0xffffffffffffffff, 0x80705864, &(0x7f0000000340)) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x3}, 0x6) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = syz_open_dev$dvb_demux(0x0, 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x4001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 21m20.049798985s ago: executing program 4 (id=2720): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) pread64(r3, &(0x7f0000002380)=""/249, 0x146, 0x7ff) 21m17.617872572s ago: executing program 4 (id=2726): epoll_create1(0x80000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0) r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r2, 0x1) futex(0x0, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) 21m14.554848627s ago: executing program 4 (id=2736): connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, r4, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) 21m8.1358436s ago: executing program 4 (id=2750): socket$inet6_udp(0xa, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) prlimit64(0x0, 0x7, &(0x7f00000000c0)={0x7, 0x120000000000000}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001dc0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x80) 20m52.201465311s ago: executing program 34 (id=2750): socket$inet6_udp(0xa, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) prlimit64(0x0, 0x7, &(0x7f00000000c0)={0x7, 0x120000000000000}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001dc0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x80) 19m48.691410534s ago: executing program 3 (id=2951): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3, 0x1, {}, 0x0, 0x0, r1}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005400e5ea29bd7000ffffffff07000002", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="01030300ff"], 0x38}, 0x1, 0x0, 0x0, 0x2800}, 0x40084c0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newtaction={0x74, 0x30, 0x9, 0x70bd29, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x6c05}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x10) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xc}], 0x492492492492856, 0x0) 19m46.358086026s ago: executing program 3 (id=2955): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) getpgrp(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mq_getsetattr(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CAP_X86_DISABLE_EXITS(r3, 0x4068aea3, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) 19m46.035584166s ago: executing program 3 (id=2957): r0 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'pim6reg\x00'}) r1 = semget$private(0x0, 0x0, 0x200) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000000)=""/83) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, 'ip_vti0\x00'}}, 0x1e) 19m44.251260107s ago: executing program 3 (id=2964): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r4}) keyctl$KEYCTL_MOVE(0x1e, r4, 0xffffffffffffffff, r5, 0x0) 19m43.335446047s ago: executing program 3 (id=2967): socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 19m42.499179293s ago: executing program 3 (id=2969): unshare(0x6a040000) unshare(0x5a060000) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x2, 0x9}}, 0x20) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x140008d0}, 0x24000840) sendmsg$NFT_BATCH(r5, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0x24048800) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000240)={0xfe, 0x0, [{0x7, 0xfffffffe, 0x0, 0x9, 0x2, 0x6}, {0x40000000, 0x8001, 0x1, 0x3, 0x1000, 0x0, 0xd}]}) close_range(r1, 0xffffffffffffffff, 0x0) 19m27.146663012s ago: executing program 35 (id=2969): unshare(0x6a040000) unshare(0x5a060000) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x2, 0x9}}, 0x20) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x140008d0}, 0x24000840) sendmsg$NFT_BATCH(r5, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0x24048800) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000240)={0xfe, 0x0, [{0x7, 0xfffffffe, 0x0, 0x9, 0x2, 0x6}, {0x40000000, 0x8001, 0x1, 0x3, 0x1000, 0x0, 0xd}]}) close_range(r1, 0xffffffffffffffff, 0x0) 16m0.806607334s ago: executing program 8 (id=3428): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xfffffffffffffd3d, &(0x7f0000000040)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x21, 0x0, &(0x7f00000003c0)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x91b, 0x6}, &(0x7f0000000040)=0x10) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 15m56.964651318s ago: executing program 8 (id=3436): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000140)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040), 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$XFS_IOC_READLINK_BY_HANDLE(r0, 0xc038586c, 0x0) r2 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000080)={0x1, 0x0, {0x3, 0x0, 0x0, 0xa, 0x0, 0x64}}) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) io_uring_enter(r3, 0x63d8, 0xc4fc, 0x17, &(0x7f0000000100)={[0x3]}, 0x8) r4 = socket$inet(0x2, 0x80001, 0x84) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0xffffffff, 0x0}) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r3, 0x56da, 0x7721, 0x16, 0x0, 0x0) 15m54.851530672s ago: executing program 8 (id=3439): getpgrp(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f0000004000)=0x1, 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb0024000) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000300)=0x3, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x1, 0x2, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_EXPECT_FLAGS={0x8}]}, 0x1c}}, 0x20008000) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000000280)={0x30, 0x1, 0x4, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x8}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xfffffffb}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) 15m50.215736703s ago: executing program 8 (id=3448): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2, 0xb, 0x3, 0x9, 0x2, 0x0, 0x70bd25, 0x25dfdbfd}, 0x10}}, 0x4) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{0x2, 0x8, @empty}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, 0x68, {0x2, 0xffff, @empty}}) read$FUSE(r0, &(0x7f0000004140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = fsopen(&(0x7f00000000c0)='bdev\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000200)='lazytime\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r3, {0x7, 0x2b, 0xffffffde, 0x2040d00c, 0x0, 0xfffe, 0x2, 0x1, 0x0, 0x0, 0x100, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x200020, 0x0) 15m41.312390118s ago: executing program 8 (id=3469): close(0x3) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 15m38.306607366s ago: executing program 8 (id=3476): syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x24, 0x0, 0xb, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_TYPE={0x8}]}, 0x24}}, 0xc000) bpf$ITER_CREATE(0x21, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$NILFS_IOCTL_GET_SUINFO(r0, 0x80186e84, &(0x7f0000000140)={&(0x7f0000000100)=[{0x9, 0x101}], 0x1, 0x10, 0x4, 0x6}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4008011) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r2, 0x5411, 0xffffffffffffffff) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x11000) 15m22.065800977s ago: executing program 36 (id=3476): syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x24, 0x0, 0xb, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_TYPE={0x8}]}, 0x24}}, 0xc000) bpf$ITER_CREATE(0x21, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$NILFS_IOCTL_GET_SUINFO(r0, 0x80186e84, &(0x7f0000000140)={&(0x7f0000000100)=[{0x9, 0x101}], 0x1, 0x10, 0x4, 0x6}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4008011) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r2, 0x5411, 0xffffffffffffffff) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x11000) 11m44.440261721s ago: executing program 6 (id=3950): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) clock_adjtime(0x17, &(0x7f0000000000)={0x80ea33, 0x9, 0x379ee6, 0x0, 0x9, 0x9, 0x8c, 0x3, 0xa, 0x7, 0x6, 0x4, 0xb, 0x80000000000002, 0x8001, 0xffffffffffffffff, 0x80, 0x2, 0x9, 0x5, 0x1, 0x3, 0x7, 0x101, 0x40, 0x40009}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0xe}, {0x10, 0x110, 0xe}], 0x20}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$kcm(0x10, 0x2, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x24040081}, 0x20000001) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x160, 0x1170, 0x1398, 0x160, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x13}, @loopback, [0x0, 0xff000000], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x18}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@addrtype1={{0x28}, {0x94, 0x804, 0x9}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) 11m42.828896557s ago: executing program 6 (id=3955): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x22) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wlan0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x40}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r1, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x19607e66}]}, 0x28}, 0x1, 0x0, 0x0, 0x44940}, 0x4000084) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0xd, 0x100) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000400), 0x6, &(0x7f0000002000)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$VIDIOC_ENUMOUTPUT(r4, 0xc0485630, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') pipe(&(0x7f0000000240)) writev(r6, &(0x7f00000003c0), 0x100000000000022d) write$tun(r6, &(0x7f0000000080)={@void, @void, @arp=@generic={0x118, 0x0, 0x6, 0x10, 0xa, @empty, "b92055c81e182963103a2363b0b9296f", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, "914e1a"}}, 0x27) ioctl$XFS_IOC_INUMBERS(r4, 0x80405880, &(0x7f0000000040)={{0x8, 0x6, 0x8000, 0x0, 0x2}}) ioctl$VIDIOC_SUBDEV_G_CROP(r4, 0xc038563b, &(0x7f00000002c0)={0x0, 0x0, {0x3, 0xc, 0x1, 0x6}}) 11m38.278090909s ago: executing program 6 (id=3962): socket$inet6(0xa, 0x80802, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="fc89049533e2818bab6dff1a6afacc217ae23abd8a240d0e6a2cd4f700b7cd82971d5d2c4441a698e4b020a0d244e5", 0x2f}], 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@ipv4_delrule={0x1c, 0x21, 0x400, 0x70bd26, 0x25dfdbfe, {0x2, 0x14, 0x20, 0x0, 0x5, 0x0, 0x0, 0x8, 0x14}}, 0x1c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x28a02, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x15) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x5, 0x4, 0x7, 0x0, 0xe, "5e4f7e32d44c00000000f498b8bdaa903b321d"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$mouse(0x0, 0x0, 0x2042) write$P9_RMKNOD(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x70bd28, 0x25dfdbfe, {0x81, 0x80, 0x80}, [@FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x38}}]}, 0x30}}, 0x884) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000008c0)="d8000000180081000181f782db4cb904021d0800ff007c05e8fe50a10a000500014002020c600e41b0001200ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5a02000000ca9ec855eff0eb3f365d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505dba36efab70cdb67e8d1cc5c7b06b1eab31f7b05da962834cedde6fdfcf45add8e51ff159ca9680d0", 0xd8}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 11m37.431635047s ago: executing program 6 (id=3964): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_open_procfs(0x0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(r2, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r1, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) bind$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1, 0x2}, 0x37060142604312dd) r6 = socket$rds(0x15, 0x5, 0x0) set_mempolicy(0x3, &(0x7f0000000080)=0x7, 0x8) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r6, 0x114, 0xa, &(0x7f00000000c0)=ANY=[], 0x4) syz_clone(0xa0002000, &(0x7f0000000000), 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="06c52844179100a06bf39db86f2598e7d8cab179c68d928559200294dd2506f1827b94b0389f5edc72bced7f4999d740aaa93ea455d911dda3ecb17e8a097c09e119") 11m35.312298041s ago: executing program 6 (id=3966): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x80047441, 0x17) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket(0x9, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x24}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, 0x0, 0x2d, 0xb, @val=@perf_event={0xa}}, 0x18) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r4, 0xc) connect$x25(r4, &(0x7f0000000a80), 0x12) 11m28.670999378s ago: executing program 6 (id=3980): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80202, 0x0) r0 = openat$sndseq(0xffffff9c, &(0x7f0000000140), 0x400) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000400)={0x4, 0x4, 0x1, 'queue0\x00', 0x2}) unlink(&(0x7f0000000000)='./bus/\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000e7000000000000000900000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000065090100000000006600000020207025180100002020702500000000002020207b9a00fe000000005e9100000000000037010000f8ffffffb702000008000000b7030000ffffffff56000000060000002c93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)) fsopen(&(0x7f0000000280)='erofs\x00', 0x0) 11m13.466406759s ago: executing program 37 (id=3980): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80202, 0x0) r0 = openat$sndseq(0xffffff9c, &(0x7f0000000140), 0x400) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000400)={0x4, 0x4, 0x1, 'queue0\x00', 0x2}) unlink(&(0x7f0000000000)='./bus/\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000e7000000000000000900000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000065090100000000006600000020207025180100002020702500000000002020207b9a00fe000000005e9100000000000037010000f8ffffffb702000008000000b7030000ffffffff56000000060000002c93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)) fsopen(&(0x7f0000000280)='erofs\x00', 0x0) 1m46.701044814s ago: executing program 7 (id=5043): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000180)='binfmt_misc\x00', 0x9, 0x0) rename(&(0x7f0000000200)='./file1\x00', &(0x7f0000000280)='./file0\x00') mkdir(0x0, 0x21) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x34) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r3, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x3ffb, 0x0, @loopback, 0x10080bfd}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50dd38fa0200de629163"}, 0x0, 0x8, 0x4}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r3, 0x4734}}, 0x10) close_range(r2, r2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$inet6(0xa, 0x805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 1m42.292187944s ago: executing program 7 (id=5053): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r5, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)='key_or_keyring:') sendmsg$NFT_BATCH(r1, 0x0, 0xc00) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new uefa\t\x00t vrus'], 0x2a, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_USERDATA={0x5, 0xd, 0x1, 0x0, "be"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) 1m40.91866633s ago: executing program 7 (id=5056): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) read$FUSE(0xffffffffffffffff, &(0x7f0000000940)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$cont(0x9, r2, 0x0, 0xff) futex(&(0x7f0000004000)=0x2, 0x5, 0x1, 0x0, &(0x7f00000002c0)=0x2, 0xa7020000) readv(r1, &(0x7f0000000900)=[{0x0}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r5, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r5, {0x0, 0xf}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r7, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r8, r6, 0x3e, r6}, 0x5) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 1m37.396875922s ago: executing program 7 (id=5063): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000180)='binfmt_misc\x00', 0x9, 0x0) rename(&(0x7f0000000200)='./file1\x00', &(0x7f0000000280)='./file0\x00') mkdir(0x0, 0x21) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x34) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r3, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x3ffb, 0x0, @loopback, 0x10080bfd}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50dd38fa0200de629163"}, 0x0, 0x8, 0x4}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r3, 0x4734}}, 0x10) close_range(r2, r2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r4 = socket$inet6(0xa, 0x805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_hci(r4, 0x84, 0x0, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) 1m31.594603285s ago: executing program 7 (id=5073): syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x1a}, 0x28) openat$kvm(0xffffffffffffff9c, 0x0, 0x800d01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x9a6b, 0x8, 0x2f, 0x2006, 0xf1, 0xa, 0x80ff8, 0x2, 0x100, 0x7, 0x40, 0x1000007, 0x1, 0x4, 0xffffffab, 0x7ff, 0x1ef, 0x200009ea, 0x20000012, 0x55, 0x8, 0x8, 0x746f, 0x8, 0xc, 0x6, 0xee, 0x2, 0x7ffd, 0x1]}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) flistxattr(0xffffffffffffffff, &(0x7f0000000040)=""/4, 0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = io_uring_setup(0x1d4c, &(0x7f0000000140)={0x0, 0x64b13e, 0x80, 0x6, 0x58}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) close_range(r1, 0xffffffffffffffff, 0x0) 1m28.927215585s ago: executing program 7 (id=5077): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r2, 0x8940, &(0x7f0000000000)=@buf={0x2, &(0x7f0000000080)="ce6c"}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44000040}, 0x44) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x4001) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x3454, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) 1m13.671611133s ago: executing program 38 (id=5077): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r2, 0x8940, &(0x7f0000000000)=@buf={0x2, &(0x7f0000000080)="ce6c"}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44000040}, 0x44) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x4001) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x3454, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) 24.004118636s ago: executing program 9 (id=5197): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r0, 0x0) 22.547381244s ago: executing program 9 (id=5201): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x7, 0x8, 0x8}, 0x50) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) syz_open_dev$mouse(0x0, 0x6, 0x6ac000) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0xfffffffffffffffc, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000540)={0x1, @sliced={0x6, [0x3, 0x4, 0x401, 0xc, 0x9, 0x4, 0xffff, 0x8, 0xf, 0x800, 0x3ff, 0xb72, 0x40, 0x101, 0xd, 0x3, 0xa, 0x9, 0x1, 0x8, 0x9, 0xfffd, 0x3795, 0x3, 0xb6c1, 0x6, 0x1080, 0x0, 0x3, 0x1, 0x9, 0x3d55, 0x0, 0x3, 0x0, 0xfff, 0x8, 0x0, 0x7, 0x7f45, 0x30b, 0x3c, 0x2, 0x5, 0xbe6, 0x800, 0x1000, 0xd], 0xce7}}) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00'}) r5 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r5, 0x541b, &(0x7f0000000140)) 19.355237424s ago: executing program 9 (id=5209): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$selinux_access(r0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) r6 = openat$cgroup_freezer_state(r4, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f00000000c0)='THAWED\x00', 0x7) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x4, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x40000000}, @sadb_address={0x3, 0x5, 0x32, 0x0, 0x0, @in={0x2, 0x4e21, @remote}}, @sadb_address={0x3, 0x6, 0xff, 0x0, 0xe, @in={0x2, 0x4e22, @local}}]}, 0x50}}, 0x4004) r8 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) 16.897703561s ago: executing program 9 (id=5213): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x220002, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000200)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000340)={0x28, 0x1, r2, 0x0, &(0x7f00000002c0), 0x0, 0x7}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r3}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x3, r3, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x100}}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb}, {0x0, 0xfff3}, {0xd, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0xfff9, 0x4, 0x4}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) accept$phonet_pipe(r4, &(0x7f0000000440), &(0x7f0000000480)=0x10) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) syz_open_procfs(0x0, &(0x7f00000003c0)='net/netfilter\x00') ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0xfffffffffffffe05, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) 14.696466573s ago: executing program 2 (id=5217): socket$nl_netfilter(0x10, 0x3, 0xc) mount(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000180)='binfmt_misc\x00', 0x9, 0x0) rename(&(0x7f0000000200)='./file1\x00', &(0x7f0000000280)='./file0\x00') mkdir(0x0, 0x21) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x34) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r3, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x3ffb, 0x0, @loopback, 0x10080bfd}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50dd38fa0200de629163"}, 0x0, 0x8, 0x4}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r3, 0x4734}}, 0x10) close_range(r2, r2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r4 = socket$inet6(0xa, 0x805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_hci(r4, 0x84, 0x0, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) 14.288578939s ago: executing program 2 (id=5218): syz_emit_ethernet(0xde, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) syz_open_dev$usbfs(0x0, 0x6, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3f, &(0x7f0000000040)={0x0, 0x0}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1000003) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0xffff56f0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0xc08c5336, &(0x7f0000000180)={0x6, 0x9, 0x1, 'queue1\x00', 0xfffff5a0}) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r4, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="403027000000272104000000ffffff7f4aefa7976e5cac487ab83442afe096a72c5bbc331d70497abbaf6f8e00"], 0x0, 0x0, 0x0}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000540), 0x6000, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000092df5510ac05269289b201020301090222000100000000090400000103e900000905a1e74b11af0c80602a"], 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 10.238548865s ago: executing program 1 (id=5225): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000008c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r4, 0x3, 0x0) getdents64(r4, &(0x7f0000003440)=""/99, 0x63) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) read$FUSE(r6, &(0x7f0000007fc0)={0x2020}, 0x2020) r8 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x2, 0x1e2}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f00000003c0)={0x2e, 0x45, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x6, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) 10.196984798s ago: executing program 2 (id=5226): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="9b5800"/14, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/11], 0x50) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f00000003c0)={r3, &(0x7f0000000280)='--\x00', 0x20340, &(0x7f0000000300)={@_ha_fsid={[0x4, 0x9e]}, {0x7, 0x8, 0xfffffff8, 0x6}}, 0x6, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x7, [@func_proto, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4}}, @var={0x5, 0x0, 0x0, 0x11}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000fc0)=""/140, 0x6b, 0x8c, 0x1}, 0x20) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETBE(r5, 0x400454de, &(0x7f00000001c0)=0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r6 = io_uring_setup(0x36b5, &(0x7f0000000040)={0x0, 0xc8df, 0x8d8c0d455a48d2a, 0x2, 0x20002f4}) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='minix\x00', 0x0, 0x0) 9.047706261s ago: executing program 1 (id=5227): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) shmctl$IPC_INFO(0x0, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{0x0}], 0x1) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f00000004c0)={r5, 0x100005, 0x5, 0x0, 0x2, [0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffe]}) r7 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r7, 0x3ba0, &(0x7f0000000b80)={0x48}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0xffc, 0xc, 0x5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r8}) 8.552517153s ago: executing program 1 (id=5229): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000180)='binfmt_misc\x00', 0x9, 0x0) rename(&(0x7f0000000200)='./file1\x00', &(0x7f0000000280)='./file0\x00') mkdir(0x0, 0x21) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x34) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r3, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x3ffb, 0x0, @loopback, 0x10080bfd}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50dd38fa0200de629163"}, 0x0, 0x8, 0x4}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r3, 0x4734}}, 0x10) close_range(r2, r2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r4 = socket$inet6(0xa, 0x805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_hci(r4, 0x84, 0x0, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) 7.447520069s ago: executing program 1 (id=5230): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x8, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100a0500231201002c0012800b00010062726964675800001c0002800c00210001040000000000000c0022008400000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r2 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'erspan0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) connect$l2tp6(r0, 0x0, 0x0) r3 = syz_clone3(&(0x7f0000000300)={0x1080000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x29}, &(0x7f00000003c0), 0x0, &(0x7f0000000240)=""/78, &(0x7f00000002c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x4}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, &(0x7f0000000380)) getsockname$l2tp6(r2, 0x0, &(0x7f00000000c0)) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x40040, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40040) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$MSR(&(0x7f0000000080), 0x40, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}, 0x1, 0x0, 0x0, 0x4050}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) 7.270136776s ago: executing program 5 (id=5231): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) close(r2) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000000400)) r4 = getpid() socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(r4, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000003}, 0x20008000) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd8322"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x8f}]}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_FEATURES(r7, 0x40309439, &(0x7f0000000100)={0x2, 0x2, 0x14}) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, r9, 0x917, 0x70bd28, 0x0, {0x1, 0x0, 0xffff}}, 0x14}, 0x1, 0x620b}, 0x0) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000980)=0x1) 6.94979488s ago: executing program 0 (id=5233): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x1, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x304}, "2aa435124a2c34a4", "4aad75ca7eef0281b903065b9b23026f749ee4466a56076adb24eab3a5f7acb0", "1fd2ef75", "e2305c3154b755b1"}, 0x38) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff004) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002a000701fcffffff00000000057c000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0xc000) openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) close(0x3) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r4, 0x2000000000000091, &(0x7f0000000200)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) 6.830651082s ago: executing program 9 (id=5234): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x24, r1, 0x1, 0x7c, 0x40000, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0xc082}, 0x4000800) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') syz_usb_connect_ath9k(0x3, 0x56, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e402, [{{0x9, 0x2, 0xfffffffffffffd08}}]}}, 0x7fe782539b0b) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@userxattr}], [], 0x2c}) lseek(r3, 0x10001, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="400601000004b3"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100002aafee08f00a51678b750000000109021b0001000000000904"], 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r4 = socket(0x10, 0x3, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x20001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x100080}, [@generic={0x73, 0x1, 0x1, 0x37}]}, &(0x7f0000000240)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) 6.786581778s ago: executing program 2 (id=5235): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) close(r2) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000000400)) r4 = getpid() socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(r4, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000003}, 0x20008000) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd8322"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x8f}]}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_FEATURES(r7, 0x40309439, &(0x7f0000000100)={0x2, 0x2, 0x14}) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r9, 0x917, 0x70bd28, 0x0, {0x1, 0x0, 0xffff}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8}]}, 0x3c}, 0x1, 0x620b}, 0x0) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000980)=0x1) 6.433024643s ago: executing program 1 (id=5236): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000180)='binfmt_misc\x00', 0x9, 0x0) rename(&(0x7f0000000200)='./file1\x00', &(0x7f0000000280)='./file0\x00') mkdir(0x0, 0x21) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x34) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r3, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x3ffb, 0x0, @loopback, 0x10080bfd}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50dd38fa0200de629163"}, 0x0, 0x8, 0x4}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r3, 0x4734}}, 0x10) close_range(r2, r2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r4 = socket$inet6(0xa, 0x805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_hci(r4, 0x84, 0x0, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) 5.891676894s ago: executing program 1 (id=5237): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x220002, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000200)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000340)={0x28, 0x1, r2, 0x0, &(0x7f00000002c0), 0x0, 0x7}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r3}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x3, r3, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x100}}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb}, {0x0, 0xfff3}, {0xd, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0xfff9, 0x4, 0x4}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) accept$phonet_pipe(r4, &(0x7f0000000440), &(0x7f0000000480)=0x10) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) syz_open_procfs(0x0, &(0x7f00000003c0)='net/netfilter\x00') ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0xfffffffffffffe05, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) 5.689814399s ago: executing program 0 (id=5238): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3ad"], 0x10b8}, 0x106) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f00000002c0)='E', 0x1, 0x400c0d4, 0x0, 0x0) close(r3) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x9, 0x0, 0x3, @SEQ_NOTEON=@note=0x7e, 0xa, 0x7f, 0x2}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000100)={0x24, r1, 0x1, 0x70bd26, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}]]}, 0x24}, 0x1, 0x0, 0x0, 0x4020000}, 0x800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r8, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_SET_USERDATA={0x66, 0xd, 0x1, 0x0, "762f9f4c2dad1fbe5f3da8e2b8bb14d4e790761a97bab6faae95ab0966645e2a93c45265673a60610a4ea7547b5eff4a26bee6990ed176cb0fcd4b1a4cc8ca50f8ef8c86f446cd46767250ac88bab11f0cdd18ad4a0048141d85b5abb68cb2430a9e"}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 4.574448985s ago: executing program 0 (id=5239): socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2, 0x80805, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x80002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000000440)=ANY=[], 0x0) 4.20623668s ago: executing program 5 (id=5240): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000180)='binfmt_misc\x00', 0x9, 0x0) rename(&(0x7f0000000200)='./file1\x00', &(0x7f0000000280)='./file0\x00') mkdir(0x0, 0x21) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x34) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r3, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x3ffb, 0x0, @loopback, 0x10080bfd}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50dd38fa0200de629163"}, 0x0, 0x8, 0x4}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r3, 0x4734}}, 0x10) close_range(r2, r2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r4 = socket$inet6(0xa, 0x805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_hci(r4, 0x84, 0x0, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) 4.116117459s ago: executing program 5 (id=5241): socket$kcm(0x11, 0x3, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0xa, 0x1, 0x106) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x20, r3, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x24068810) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000300)={'syztnl0\x00', r5, 0x0, 0x8, 0x0, 0x10001, {{0x14, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x29, 0x0, @local, @multicast2, {[@timestamp={0x44, 0x18, 0x13, 0x0, 0x6, [0xffffffff, 0x8000, 0xffffff0d, 0x81, 0x8ad]}, @noop, @end, @cipso={0x86, 0x20, 0x3, [{0x6, 0x5, "e94ea2"}, {0x0, 0x2}, {0x0, 0x6, "5ffed727"}, {0x7, 0x8, "103f43dc0e7f"}, {0x6, 0x3, 'Y'}, {0x2, 0x2}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f6, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000000)={'syztnl0\x00', r6, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @broadcast}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newlink={0x9c, 0x10, 0x403, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x7c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x6c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x40}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xe33, 0x100}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x2}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x8}}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x401}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x418f, 0x18}}]}]}}}]}, 0x9c}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000040)={@loopback, @rand_addr=0x64010102, 0xb, 0x4}}) sendmsg$L2TP_CMD_SESSION_DELETE(r7, 0x0, 0x30) 4.062887514s ago: executing program 0 (id=5242): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) shutdown(r3, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = syz_open_dev$usbfs(&(0x7f0000000200), 0xa2, 0x103901) ioctl$USBDEVFS_SETINTERFACE(r5, 0x80085504, &(0x7f0000000000)={0x3, 0x7}) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000000140)={0x1d, r6}, 0x10) sendmsg$can_bcm(r4, 0x0, 0x4004844) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000180)={0x100071, 0xb, 0x100000}, 0x20) close(r4) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0xb, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x200000}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x800) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, &(0x7f0000000040)={[{@name={'name', 0x3d, '_))%['}}]}) 3.168424069s ago: executing program 5 (id=5243): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2024) 3.093325984s ago: executing program 0 (id=5244): socket$inet6_sctp(0xa, 0x5, 0x84) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) unshare(0x2a020480) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_RANGEINFO(r3, 0x80106408, &(0x7f0000000280)={0x7, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0xd01, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003740)={r4, 0x0, 0x40, 0x1000, &(0x7f00000000c0)="7dd53cbd3194ca5fdf819f26407baee211bc663e897588e401f0e4a0fb45b71d7774162147dbec7f16b9ad3ac658833ca3a65d0cce88271044d28f364b55ad3b", &(0x7f0000002600)=""/4096, 0x5, 0x0, 0x1b, 0xde, &(0x7f0000003600)="16c66ad813ddc0658a773fd590c0c56a9103da2dff52ac06df05d1", &(0x7f0000003640)="229659ccd6f855f1bd40fd739fde0cf1ea3f2f73819162675a1ad240b49256c8b5ad664c93136c96f3edc592119ca3df9a80f378d8a74b6a002cad87c687c57201c01f48a4b96bc64e86aafbe22b123676a913d47292c8b81cb7f354a8bbe56b6801d91ea0f5a62faf0660d63f0f204da7c2eb0ff4276ef0f673fc3e0daa8a633c74a34e82949b401a6f5649f683612afb19668bedd2eec7ed2766b9f69557646f981aeb9342e4fbd9ee239c7e20caa8beb6b9a56f39c059b4723325cfee09e5c09269845ea686525461429559d4b3dcbb51aeda91ac9e4287b6403281f3", 0x2, 0x0, 0x3}, 0x50) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r5, &(0x7f0000000240)={0x23, 0x30, 0x0, 0x36}, 0x10) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r6, &(0x7f0000000100)={0x23, 0x30}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.723354627s ago: executing program 5 (id=5245): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x40f00, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2a) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000540)={0x1, 0x0, [{0xc0000080}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r6, 0x0, 0x20008000) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) 1.652283956s ago: executing program 2 (id=5246): r0 = msgget$private(0x0, 0x3ac) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4) socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r5, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) shutdown(r5, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)=""/4096, &(0x7f0000001040)=0x1000) msgsnd(r0, &(0x7f00000001c0)={0x1}, 0x8, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000680)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x9}, 0x0, 0x0, 0x0, 0xffffffffc412890b, 0x1, 0xfffffffffffffffa, 0x0, 0x8, 0x200, 0x1}) 1.605959276s ago: executing program 9 (id=5247): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0xffffffff}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x128, 0x111, 0x4b4, 0x128, 0xd4feffff, 0x1f8, 0x20a, 0x278, 0x1f8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0x0, 0x0, 0x2}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@tcp={{0x30}, {[0x0, 0x4], [], 0x0, 0x0, 0x82}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) socket$inet6_tcp(0xa, 0x1, 0x0) open$dir(0x0, 0x0, 0x8) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r4 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r5, 0xc0884123, &(0x7f0000000280)={0x1, "728d0a484585ec93a59baeb6831b8ef110181595fe49bc4ac10b67b1b99eeeaa18e15a525115cc71983456358ceb7e1a6f926168ce0c3c2b0f3513a5f2674185", {0x800000000000004, 0x50000000000}}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r5, 0xc06c4124, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) 4.865245ms ago: executing program 0 (id=5248): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009980708b5192100c798000000010902"], 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x571f68543cec8180) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x12, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYRES32], 0x1c}}, 0x840) close_range(r3, 0xffffffffffffffff, 0x0) 422.378µs ago: executing program 5 (id=5258): syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f00000003c0)={0x10000000}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000340)={0x2, 0x0, 0x7ff, 0x80000}) sched_setscheduler(0x0, 0x1, 0x0) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3000000, 0x13, r3, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0xfffffffc, {"00000000000000000000000000000001"}, 0x2000000000001005, 0x19dff, 0x4}}}, 0x90) r4 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x921e, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0), 0x0) wait4(r0, &(0x7f0000000200), 0x2, &(0x7f0000000400)) 0s ago: executing program 2 (id=5249): socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000ac0)=""/102392, 0x18ff8) getdents64(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x0) rmdir(&(0x7f0000000040)='./control\x00') r4 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x0) getdents(r4, &(0x7f0000000400)=""/189, 0xbd) r5 = fanotify_init(0xf00, 0x0) fanotify_mark(r5, 0x1, 0x10001011, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x8) renameat2(r4, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./control\x00', 0x2) socket(0x10, 0x803, 0x0) kernel console output (not intermixed with test programs): device number 20 using dummy_hcd [ 1537.594620][T23713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4675'. [ 1538.373493][T18402] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1538.382517][T18402] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1538.393243][T18402] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1538.404924][T18402] usb 8-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 1538.414466][T18402] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.423481][T14793] net_ratelimit: 16 callbacks suppressed [ 1538.423496][T14793] bond4: (slave bridge3): failed to get link speed/duplex [ 1538.465186][T18402] usb 8-1: Product: syz [ 1538.488543][T18402] usb 8-1: Manufacturer: syz [ 1538.520755][T18402] usb 8-1: SerialNumber: syz [ 1539.913933][ T8267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1539.922656][T14793] bond4: (slave bridge3): failed to get link speed/duplex [ 1540.036901][ T30] audit: type=1400 audit(1539.775:3112): avc: denied { append } for pid=23716 comm="syz.1.4677" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1540.084009][ T8267] bond4: (slave bridge3): failed to get link speed/duplex [ 1540.299222][T23727] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 1540.326172][T14793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1540.404518][ T8282] bond4: (slave bridge3): failed to get link speed/duplex [ 1540.632458][ T8282] bond4: (slave bridge3): failed to get link speed/duplex [ 1540.801821][T14793] bond4: (slave bridge3): failed to get link speed/duplex [ 1540.972808][T19136] bond4: (slave bridge3): failed to get link speed/duplex [ 1541.185872][T14795] bond4: (slave bridge3): failed to get link speed/duplex [ 1542.674162][T18402] usb 8-1: cannot find UAC_HEADER [ 1542.828940][ T30] audit: type=1400 audit(1542.605:3113): avc: denied { connect } for pid=23737 comm="syz.1.4682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1542.918133][ T30] audit: type=1400 audit(1542.665:3114): avc: denied { read } for pid=23737 comm="syz.1.4682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1542.965521][T18402] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1542.988530][T18402] usb 8-1: USB disconnect, device number 20 [ 1543.078721][T23641] udevd[23641]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1543.156745][T23742] netlink: 'syz.5.4685': attribute type 10 has an invalid length. [ 1543.164901][T23742] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4685'. [ 1543.627352][T23742] bridge0: port 4(veth1_macvtap) entered blocking state [ 1543.634490][T23742] bridge0: port 4(veth1_macvtap) entered disabled state [ 1543.642005][T23742] veth1_macvtap: entered allmulticast mode [ 1543.649071][T23742] veth1_macvtap: left allmulticast mode [ 1543.654953][T23742] net_ratelimit: 18 callbacks suppressed [ 1543.654964][T23742] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 1543.713010][T14795] bond4: (slave bridge3): failed to get link speed/duplex [ 1543.720623][ T8267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1543.821375][ T13] bond4: (slave bridge3): failed to get link speed/duplex [ 1544.016630][T14789] bond4: (slave bridge3): failed to get link speed/duplex [ 1544.272680][ T13] bond4: (slave bridge3): failed to get link speed/duplex [ 1544.401289][ T13] bond4: (slave bridge3): failed to get link speed/duplex [ 1544.521296][ T13] bond4: (slave bridge3): failed to get link speed/duplex [ 1544.998664][ T13] bond4: (slave bridge3): failed to get link speed/duplex [ 1544.999141][T14793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1545.813632][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.676617][T23790] bond15: option lp_interval: invalid value (0) [ 1547.683007][T23790] bond15: option lp_interval: allowed values 1 - 2147483647 [ 1547.949729][T23790] bond15 (unregistering): Released all slaves [ 1548.235082][T23792] input: syz0 as /devices/virtual/input/input38 [ 1548.700823][ T8270] net_ratelimit: 16 callbacks suppressed [ 1548.700896][ T8270] bond4: (slave bridge3): failed to get link speed/duplex [ 1548.933729][ T8270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1548.997678][T19460] bond4: (slave bridge3): failed to get link speed/duplex [ 1549.321463][ T8270] bond4: (slave bridge3): failed to get link speed/duplex [ 1549.509445][T19136] bond4: (slave bridge3): failed to get link speed/duplex [ 1549.651725][ T8270] bond4: (slave bridge3): failed to get link speed/duplex [ 1549.661548][T19136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1550.187825][T23814] xt_hashlimit: size too large, truncated to 1048576 [ 1550.308257][T14793] bond4: (slave bridge3): failed to get link speed/duplex [ 1550.329721][T19460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1550.738773][T14793] bond4: (slave bridge3): failed to get link speed/duplex [ 1551.181293][T23822] siw: device registration error -23 [ 1551.209843][ T30] audit: type=1400 audit(1550.995:3115): avc: denied { bind } for pid=23819 comm="syz.5.4700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1554.092478][T19136] net_ratelimit: 13 callbacks suppressed [ 1554.092501][T19136] bond4: (slave bridge3): failed to get link speed/duplex [ 1554.202142][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1554.332163][T14793] bond4: (slave bridge3): failed to get link speed/duplex [ 1554.413429][T23837] openvswitch: netlink: IP tunnel dst address not specified [ 1554.471355][T19136] bond4: (slave bridge3): failed to get link speed/duplex [ 1554.581814][T19460] bond4: (slave bridge3): failed to get link speed/duplex [ 1554.692936][ T8282] bond4: (slave bridge3): failed to get link speed/duplex [ 1554.903760][T19467] bond4: (slave bridge3): failed to get link speed/duplex [ 1555.094294][T14793] bond4: (slave bridge3): failed to get link speed/duplex [ 1556.215286][T14789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1557.445299][T18402] libceph: connect (1)[c::]:6789 error -101 [ 1557.513667][T18402] libceph: mon0 (1)[c::]:6789 connect error [ 1557.954763][T18402] libceph: connect (1)[c::]:6789 error -101 [ 1557.986336][T18402] libceph: mon0 (1)[c::]:6789 connect error [ 1558.075018][T23861] ceph: No mds server is up or the cluster is laggy [ 1559.171434][ T8282] net_ratelimit: 20 callbacks suppressed [ 1559.171456][ T8282] bond4: (slave bridge3): failed to get link speed/duplex [ 1561.131095][ T8270] bond4: (slave bridge3): failed to get link speed/duplex [ 1561.362357][ T8270] bond4: (slave bridge3): failed to get link speed/duplex [ 1561.501397][T19460] bond4: (slave bridge3): failed to get link speed/duplex [ 1561.784874][T14789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1561.814640][T19136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1561.822765][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1562.112345][T19136] bond4: (slave bridge3): failed to get link speed/duplex [ 1562.631303][T19136] bond4: (slave bridge3): failed to get link speed/duplex [ 1562.779292][ T13] bond4: (slave bridge3): failed to get link speed/duplex [ 1563.965955][T23923] netlink: 324 bytes leftover after parsing attributes in process `syz.5.4724'. [ 1564.251548][ T8270] net_ratelimit: 6 callbacks suppressed [ 1564.251572][ T8270] bond4: (slave bridge3): failed to get link speed/duplex [ 1564.389554][T23888] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1564.545330][T23923] Cannot find add_set index 65532 as target [ 1564.582223][T19467] bond4: (slave bridge3): failed to get link speed/duplex [ 1564.820122][ T13] bond4: (slave bridge3): failed to get link speed/duplex [ 1564.963732][T23925] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1565.043416][T14795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1565.093170][T23934] fuse: fd is not a fuse device [ 1565.095297][ T8270] bond4: (slave bridge3): failed to get link speed/duplex [ 1565.261275][ T8270] bond4: (slave bridge3): failed to get link speed/duplex [ 1565.423983][ T8270] bond4: (slave bridge3): failed to get link speed/duplex [ 1565.431232][T23939] futex_wake_op: syz.2.4726 tries to shift op by 144; fix this program [ 1565.535072][T23940] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1566.436735][ T8282] bond4: (slave bridge3): failed to get link speed/duplex [ 1566.591622][T19460] bond4: (slave bridge3): failed to get link speed/duplex [ 1566.741202][T19136] bond4: (slave bridge3): failed to get link speed/duplex [ 1567.786266][ T30] audit: type=1400 audit(1566.615:3116): avc: denied { append } for pid=23946 comm="syz.2.4728" name="video4" dev="devtmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1569.383776][T14793] net_ratelimit: 14 callbacks suppressed [ 1569.383796][T14793] bond4: (slave bridge3): failed to get link speed/duplex [ 1569.497810][ T8270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1569.505964][ T8270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1569.551263][T19460] bond4: (slave bridge3): failed to get link speed/duplex [ 1569.656523][ T30] audit: type=1800 audit(1569.435:3117): pid=23970 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.4735" name="nullb0" dev="tmpfs" ino=3161 res=0 errno=0 [ 1570.210591][T14789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1570.770416][T23968] lo speed is unknown, defaulting to 1000 [ 1570.778958][T23968] wg1 speed is unknown, defaulting to 1000 [ 1572.087317][T14789] bond4: (slave bridge3): failed to get link speed/duplex [ 1573.354851][ T8267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1573.357474][T14795] bond4: (slave bridge3): failed to get link speed/duplex [ 1573.363888][ T8270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1573.463436][T14789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1574.327864][ T30] audit: type=1400 audit(1573.945:3118): avc: denied { sys_admin } for pid=24002 comm="syz.9.4743" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1574.472479][T19136] net_ratelimit: 4 callbacks suppressed [ 1574.472493][T19136] bond4: (slave bridge3): failed to get link speed/duplex [ 1574.492541][T24001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4742'. [ 1574.543232][T24011] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4742'. [ 1574.613304][ T8267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1574.643797][T14789] bond4: (slave bridge3): failed to get link speed/duplex [ 1574.862918][ T8267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1574.881797][ T8270] bond4: (slave bridge3): failed to get link speed/duplex [ 1575.339913][ T8270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1575.431752][T14789] bond4: (slave bridge3): failed to get link speed/duplex [ 1576.111879][ T8282] bond4: (slave bridge3): failed to get link speed/duplex [ 1576.253317][T19460] bond4: (slave bridge3): failed to get link speed/duplex [ 1576.402244][T24024] netlink: 'syz.2.4747': attribute type 49 has an invalid length. [ 1576.675481][T24024] bond_slave_0: entered promiscuous mode [ 1576.694103][T24024] bond_slave_0: entered allmulticast mode [ 1576.930309][T19460] bond4: (slave bridge3): failed to get link speed/duplex [ 1577.229476][T24037] overlayfs: failed to clone lowerpath [ 1577.434606][T18402] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1577.571414][T24045] netlink: 'syz.5.4754': attribute type 1 has an invalid length. [ 1577.607638][T24046] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4753'. [ 1577.621839][T18402] usb 10-1: Using ep0 maxpacket: 16 [ 1577.629450][T24045] tipc: Enabling of bearer rejected, failed to enable media [ 1577.658318][T24045] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1577.678371][T18402] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1577.847385][T18402] usb 10-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1578.816788][T18402] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1578.825963][T18402] usb 10-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 1578.841248][T18402] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1579.235161][T18402] usb 10-1: config 0 descriptor?? [ 1579.574919][T14789] net_ratelimit: 11 callbacks suppressed [ 1579.574942][T14789] bond4: (slave bridge3): failed to get link speed/duplex [ 1579.899899][T24036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1579.929641][T19136] bond4: (slave bridge3): failed to get link speed/duplex [ 1579.938295][T19460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1580.012542][T24036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1580.256448][T19460] bond4: (slave bridge3): failed to get link speed/duplex [ 1580.854000][T19460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1580.899839][T14795] bond4: (slave bridge3): failed to get link speed/duplex [ 1581.013721][ T8270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1581.081284][T14793] bond4: (slave bridge3): failed to get link speed/duplex [ 1581.221420][T14793] bond4: (slave bridge3): failed to get link speed/duplex [ 1581.381533][ T8267] bond4: (slave bridge3): failed to get link speed/duplex [ 1581.425796][T24080] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.4760'. [ 1581.527332][ T30] audit: type=1400 audit(1581.315:3119): avc: denied { write } for pid=24039 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1581.910123][T18402] usbhid 10-1:0.0: can't add hid device: -71 [ 1582.077227][T18402] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1582.296751][T18402] usb 10-1: USB disconnect, device number 13 [ 1582.323648][T24088] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.4760'. [ 1582.488135][ T30] audit: type=1400 audit(1582.275:3120): avc: denied { write } for pid=24091 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1583.756595][T24093] lo speed is unknown, defaulting to 1000 [ 1583.763428][T24093] wg1 speed is unknown, defaulting to 1000 [ 1584.672645][ T13] net_ratelimit: 2 callbacks suppressed [ 1584.672659][ T13] bond4: (slave bridge3): failed to get link speed/duplex [ 1584.851821][T14793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1584.910437][ T8267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1585.474718][T24113] erofs (device nullb0): cannot find valid erofs superblock [ 1585.910321][T14789] bond4: (slave bridge3): failed to get link speed/duplex [ 1586.202458][ T8267] bond4: (slave bridge3): failed to get link speed/duplex [ 1586.311264][T19136] bond4: (slave bridge3): failed to get link speed/duplex [ 1587.254546][T15038] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1587.273828][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1587.283342][T14789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1587.754693][T14789] bond4: (slave bridge3): failed to get link speed/duplex [ 1587.816028][T24099] lo speed is unknown, defaulting to 1000 [ 1587.852435][ T8267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1588.212877][T15038] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1588.266859][T15038] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1588.286412][T24099] wg1 speed is unknown, defaulting to 1000 [ 1588.294620][T15038] usb 3-1: can't read configurations, error -71 [ 1589.422700][T24147] 9p: Bad value for 'rfdno' [ 1589.753138][ T8267] net_ratelimit: 2 callbacks suppressed [ 1589.753177][ T8267] bond4: (slave bridge3): failed to get link speed/duplex [ 1590.161278][T19460] bond4: (slave bridge3): failed to get link speed/duplex [ 1590.588053][T24158] syzkaller0: left promiscuous mode [ 1590.593370][T24158] syzkaller0: left allmulticast mode [ 1590.801807][ T8282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1590.820860][T19460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1590.836073][ T8282] bond4: (slave bridge3): failed to get link speed/duplex [ 1591.095608][T19460] bond4: (slave bridge3): failed to get link speed/duplex [ 1591.198079][T18402] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1591.714465][T19136] bond4: (slave bridge3): failed to get link speed/duplex [ 1591.741503][ T30] audit: type=1400 audit(1591.525:3121): avc: denied { write } for pid=24127 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1591.808773][T18402] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1591.831901][T18402] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1591.855448][T18402] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1591.876644][T18402] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1591.892491][ T8270] bond4: (slave bridge3): failed to get link speed/duplex [ 1592.008018][T18402] usb 2-1: Product: syz [ 1592.012665][T18402] usb 2-1: Manufacturer: syz [ 1592.017269][T18402] usb 2-1: SerialNumber: syz [ 1592.039165][T18402] usb 2-1: config 0 descriptor?? [ 1592.044463][ T30] audit: type=1400 audit(1591.705:3122): avc: denied { read } for pid=24167 comm="syz.7.4776" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1592.070596][ T30] audit: type=1400 audit(1591.865:3123): avc: denied { write } for pid=24173 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1592.092656][ T8282] bond4: (slave bridge3): failed to get link speed/duplex [ 1592.595677][ T13] bond4: (slave bridge3): failed to get link speed/duplex [ 1592.624676][T18402] usb 2-1: selecting invalid altsetting 0 [ 1592.682880][T24170] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1594.279790][T24198] siw: device registration error -23 [ 1594.691383][ T5625] Bluetooth: hci3: command 0x0406 tx timeout [ 1594.795126][T19460] net_ratelimit: 11 callbacks suppressed [ 1594.795145][T19460] bond4: (slave bridge3): failed to get link speed/duplex [ 1594.951642][T14795] bond4: (slave bridge3): failed to get link speed/duplex [ 1595.082767][T14789] bond4: (slave bridge3): failed to get link speed/duplex [ 1595.182431][ T8282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1595.272073][T14789] bond4: (slave bridge3): failed to get link speed/duplex [ 1595.471330][T19460] bond4: (slave bridge3): failed to get link speed/duplex [ 1595.591340][ T8267] bond4: (slave bridge3): failed to get link speed/duplex [ 1595.702110][T14789] bond4: (slave bridge3): failed to get link speed/duplex [ 1595.720638][T24208] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1595.811856][T14789] bond4: (slave bridge3): failed to get link speed/duplex [ 1595.861162][T18402] usb 2-1: USB disconnect, device number 10 [ 1595.924174][T14789] bond4: (slave bridge3): failed to get link speed/duplex [ 1596.292423][ T30] audit: type=1400 audit(1596.015:3124): avc: denied { setopt } for pid=24212 comm="syz.1.4784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1598.260604][T24238] : renamed from bond_slave_0 (while UP) [ 1599.325102][T24244] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4791'. [ 1599.973092][T24253] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1600.427637][ T8282] net_ratelimit: 29 callbacks suppressed [ 1600.427656][ T8282] bond4: (slave bridge3): failed to get link speed/duplex [ 1600.445772][T19136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1600.704570][T24258] ieee802154 phy1 wpan1: encryption failed: -22 [ 1601.169652][T19466] bond4: (slave bridge3): failed to get link speed/duplex [ 1601.311221][T19460] bond4: (slave bridge3): failed to get link speed/duplex [ 1601.441962][ T8270] bond4: (slave bridge3): failed to get link speed/duplex [ 1601.461285][T15037] usb 8-1: new full-speed USB device number 21 using dummy_hcd [ 1601.491664][ T8270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1601.582069][ T13] bond4: (slave bridge3): failed to get link speed/duplex [ 1601.624605][T15037] usb 8-1: config 0 has an invalid interface number: 255 but max is 1 [ 1601.643348][T15037] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1601.672382][T15037] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1601.695247][T15037] usb 8-1: config 0 has no interface number 0 [ 1601.711158][T15037] usb 8-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1601.725730][ T8267] bond4: (slave bridge3): failed to get link speed/duplex [ 1601.741852][T15037] usb 8-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1601.771167][T15037] usb 8-1: config 0 interface 255 has no altsetting 0 [ 1601.788148][T15037] usb 8-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 1601.806680][T15037] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.822879][T15037] usb 8-1: Product: syz [ 1601.831622][T15037] usb 8-1: Manufacturer: syz [ 1601.841159][T15037] usb 8-1: SerialNumber: syz [ 1601.851306][ T8267] bond4: (slave bridge3): failed to get link speed/duplex [ 1601.853672][T15037] usb 8-1: config 0 descriptor?? [ 1601.864906][T15038] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1601.886774][T24269] binder_alloc: 24265: binder_alloc_buf, no vma [ 1601.971909][ T8270] bond4: (slave bridge3): failed to get link speed/duplex [ 1603.056837][T15038] usb 10-1: device descriptor read/64, error -71 [ 1603.403448][T24260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1603.412561][T24260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1603.425251][T24260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1603.434106][T24260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1603.446823][T24271] usb 8-1: USB disconnect, device number 21 [ 1604.023030][T15038] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1604.181237][T15038] usb 10-1: device descriptor read/64, error -71 [ 1604.301678][T15038] usb usb10-port1: attempt power cycle [ 1604.868137][T24287] lo speed is unknown, defaulting to 1000 [ 1604.875488][T24287] wg1 speed is unknown, defaulting to 1000 [ 1606.060292][ T13] net_ratelimit: 5 callbacks suppressed [ 1606.060310][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1606.074024][ T8270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1606.276519][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1606.288065][T14795] bond4: (slave bridge3): failed to get link speed/duplex [ 1606.471637][ T30] audit: type=1400 audit(1606.195:3125): avc: denied { read } for pid=24291 comm="syz.2.4803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1606.795512][T19136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1606.865616][T24302] netlink: 'syz.7.4804': attribute type 2 has an invalid length. [ 1607.253818][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1607.486162][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.495678][ T8270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1607.692386][T19467] bond4: (slave bridge3): failed to get link speed/duplex [ 1607.864912][ T8282] bond4: (slave bridge3): failed to get link speed/duplex [ 1608.006546][T14789] bond4: (slave bridge3): failed to get link speed/duplex [ 1609.041668][T24323] lo speed is unknown, defaulting to 1000 [ 1609.049137][T24323] wg1 speed is unknown, defaulting to 1000 [ 1611.128775][T19467] net_ratelimit: 8 callbacks suppressed [ 1611.128845][T19467] bond4: (slave bridge3): failed to get link speed/duplex [ 1611.138046][T24330] ksmbd: Unknown IPC event: 4, ignore. [ 1611.471897][T19467] bond4: (slave bridge3): failed to get link speed/duplex [ 1611.514727][T14789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1611.740268][T14795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1611.754566][ T8267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1611.772076][ T8270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1612.145297][ T8267] bond4: (slave bridge3): failed to get link speed/duplex [ 1612.233047][ T30] audit: type=1400 audit(1612.015:3126): avc: denied { write } for pid=24305 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1612.264416][ T8267] bond4: (slave bridge3): failed to get link speed/duplex [ 1612.433008][ T8267] bond4: (slave bridge3): failed to get link speed/duplex [ 1613.081122][T14789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1613.213246][T24354] netlink: 'syz.9.4815': attribute type 5 has an invalid length. [ 1613.256521][T24354] netlink: 207952 bytes leftover after parsing attributes in process `syz.9.4815'. [ 1615.771888][ T30] audit: type=1400 audit(1615.565:3127): avc: denied { write } for pid=24356 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1616.883006][T19467] net_ratelimit: 11 callbacks suppressed [ 1616.883027][T19467] bond4: (slave bridge3): failed to get link speed/duplex [ 1617.040409][T19467] bond4: (slave bridge3): failed to get link speed/duplex [ 1617.285871][ T8270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1617.415977][T19467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1617.451422][ T8270] bond4: (slave bridge3): failed to get link speed/duplex [ 1617.491834][T19467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1617.505883][ T8270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1617.635984][T14795] bond4: (slave bridge3): failed to get link speed/duplex [ 1618.140357][T19467] bond4: (slave bridge3): failed to get link speed/duplex [ 1618.276202][T19467] bond4: (slave bridge3): failed to get link speed/duplex [ 1619.475978][T24394] lo speed is unknown, defaulting to 1000 [ 1619.485084][T24394] wg1 speed is unknown, defaulting to 1000 [ 1619.821543][ T7745] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 1620.469620][ T7745] usb 2-1: too many endpoints for config 0 interface 0 altsetting 254: 223, using maximum allowed: 30 [ 1620.861041][ T7745] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 1620.876119][ T7745] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1620.883596][ T7745] usb 2-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 1620.892893][ T7745] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1620.907000][ T7745] usb 2-1: config 0 descriptor?? [ 1621.375871][T24415] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1621.473999][T24417] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1621.614171][ T7745] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x2 [ 1621.629183][ T7745] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x6 [ 1621.644728][ T7745] lenovo 0003:17EF:60EE.000C: ignoring exceeding usage max [ 1621.686416][ T7745] lenovo 0003:17EF:60EE.000C: hidraw0: USB HID v0.81 Device [HID 17ef:60ee] on usb-dummy_hcd.1-1/input0 [ 1621.895705][ T8270] net_ratelimit: 28 callbacks suppressed [ 1621.895741][ T8270] bond4: (slave bridge3): failed to get link speed/duplex [ 1622.031349][ T8276] bond4: (slave bridge3): failed to get link speed/duplex [ 1622.161517][ T8270] bond4: (slave bridge3): failed to get link speed/duplex [ 1622.349920][ T7745] lenovo 0003:17EF:60EE.000C: Sensitivity setting failed: -71 [ 1622.365678][ T7745] usb 2-1: USB disconnect, device number 11 [ 1623.331042][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1623.354435][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1623.360593][ T8270] bond4: (slave bridge3): failed to get link speed/duplex [ 1623.364336][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1624.602965][T14789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1624.604739][ T8270] bond4: (slave bridge3): failed to get link speed/duplex [ 1624.964615][ T8270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1626.920877][T24461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4843'. [ 1626.961380][T14789] net_ratelimit: 3 callbacks suppressed [ 1626.961425][T14789] bond4: (slave bridge3): failed to get link speed/duplex [ 1627.125141][T19136] bond4: (slave bridge3): failed to get link speed/duplex [ 1627.382625][ T8267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1627.524137][T24461] hsr_slave_1 (unregistering): left promiscuous mode [ 1627.641539][T14789] bond4: (slave bridge3): failed to get link speed/duplex [ 1627.661180][T24271] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1628.046806][ T8267] bond4: (slave bridge3): failed to get link speed/duplex [ 1628.193263][T14789] bond4: (slave bridge3): failed to get link speed/duplex [ 1628.211178][T24271] usb 2-1: Using ep0 maxpacket: 16 [ 1628.217912][T24271] usb 2-1: config 0 has an invalid interface number: 246 but max is 0 [ 1628.231442][T24271] usb 2-1: config 0 has no interface number 0 [ 1628.264812][T24271] usb 2-1: config 0 interface 246 altsetting 255 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 1628.301235][ T8267] bond4: (slave bridge3): failed to get link speed/duplex [ 1628.311409][T24271] usb 2-1: config 0 interface 246 has no altsetting 0 [ 1628.331814][T24271] usb 2-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=35.27 [ 1628.347023][T24271] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1628.367659][T24271] usb 2-1: Product: syz [ 1628.380443][T24271] usb 2-1: Manufacturer: syz [ 1628.390253][T24271] usb 2-1: SerialNumber: syz [ 1628.405789][T24271] usb 2-1: config 0 descriptor?? [ 1628.431249][T14789] bond4: (slave bridge3): failed to get link speed/duplex [ 1628.554361][T19136] bond4: (slave bridge3): failed to get link speed/duplex [ 1628.646620][T24479] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4848'. [ 1628.669118][T24479] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4848'. [ 1628.770044][T19467] bond4: (slave bridge3): failed to get link speed/duplex [ 1629.665864][T24484] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24484 comm=syz.5.4848 [ 1630.739061][T24271] usb 2-1: USB disconnect, device number 12 [ 1631.194244][T24499] netlink: 'syz.2.4849': attribute type 1 has an invalid length. [ 1632.044582][T14797] net_ratelimit: 11 callbacks suppressed [ 1632.044600][T14797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1632.046281][T19468] bond4: (slave bridge3): failed to get link speed/duplex [ 1632.137595][T24513] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1632.241593][T24271] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1632.799429][T24271] usb 2-1: Using ep0 maxpacket: 32 [ 1632.806121][T19467] bond4: (slave bridge3): failed to get link speed/duplex [ 1632.891870][T24271] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1633.517542][T19467] bond4: (slave bridge3): failed to get link speed/duplex [ 1633.703741][T19466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1633.767039][ T8276] bond4: (slave bridge3): failed to get link speed/duplex [ 1634.012908][ T8276] bond4: (slave bridge3): failed to get link speed/duplex [ 1634.278881][ T8282] bond4: (slave bridge3): failed to get link speed/duplex [ 1634.501596][T14789] bond4: (slave bridge3): failed to get link speed/duplex [ 1634.527697][T24271] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1634.539520][T24271] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1634.549197][T24271] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1634.557499][T24271] usb 2-1: Product: syz [ 1634.699075][T24525] lo speed is unknown, defaulting to 1000 [ 1634.713299][T24525] wg1 speed is unknown, defaulting to 1000 [ 1635.149078][T24271] usb 2-1: Manufacturer: syz [ 1635.163548][T24271] usb 2-1: SerialNumber: syz [ 1635.189842][T24271] usb 2-1: config 0 descriptor?? [ 1635.205655][T24271] usb 2-1: can't set config #0, error -71 [ 1635.237681][T24271] usb 2-1: USB disconnect, device number 13 [ 1635.890791][T24540] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.4862'. [ 1636.388471][T24540] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.4862'. [ 1637.112937][T19468] net_ratelimit: 11 callbacks suppressed [ 1637.112958][T19468] bond4: (slave bridge3): failed to get link speed/duplex [ 1637.661462][ T8282] bond4: (slave bridge3): failed to get link speed/duplex [ 1637.999396][T19471] bond4: (slave bridge3): failed to get link speed/duplex [ 1638.171322][T19471] bond4: (slave bridge3): failed to get link speed/duplex [ 1638.281273][T19467] bond4: (slave bridge3): failed to get link speed/duplex [ 1638.411353][T19467] bond4: (slave bridge3): failed to get link speed/duplex [ 1638.534819][ T8282] bond4: (slave bridge3): failed to get link speed/duplex [ 1638.604053][T14789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1638.968003][T24560] overlayfs: failed to clone upperpath [ 1639.512444][ T8267] bond4: (slave bridge3): failed to get link speed/duplex [ 1640.357700][T24564] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4866'. [ 1640.421272][ T8267] bond4: (slave bridge3): failed to get link speed/duplex [ 1640.942308][T24572] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4868'. [ 1641.021447][T24574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4868'. [ 1641.546650][T24576] netlink: 324 bytes leftover after parsing attributes in process `syz.7.4869'. [ 1641.840507][T24577] Cannot find add_set index 65532 as target [ 1642.162569][T19471] net_ratelimit: 8 callbacks suppressed [ 1642.162588][T19471] bond4: (slave bridge3): failed to get link speed/duplex [ 1643.240106][T14789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1644.037944][T19471] bond4: (slave bridge3): failed to get link speed/duplex [ 1644.172378][T19471] bond4: (slave bridge3): failed to get link speed/duplex [ 1644.685674][ T8276] bond4: (slave bridge3): failed to get link speed/duplex [ 1644.871471][ T8276] bond4: (slave bridge3): failed to get link speed/duplex [ 1644.886188][T24592] trusted_key: encrypted_key: master key parameter 'uefa' is invalid [ 1645.671312][T19136] bond4: (slave bridge3): failed to get link speed/duplex [ 1645.790252][T19468] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1645.931410][ T8282] bond4: (slave bridge3): failed to get link speed/duplex [ 1646.644408][T14797] bond4: (slave bridge3): failed to get link speed/duplex [ 1647.221332][T24595] netlink: 88 bytes leftover after parsing attributes in process `syz.7.4874'. [ 1647.251213][T19468] net_ratelimit: 3 callbacks suppressed [ 1647.251231][T19468] bond4: (slave bridge3): failed to get link speed/duplex [ 1647.382012][T19468] bond4: (slave bridge3): failed to get link speed/duplex [ 1647.521659][T19471] bond4: (slave bridge3): failed to get link speed/duplex [ 1648.151450][ T8282] bond4: (slave bridge3): failed to get link speed/duplex [ 1648.241436][T24613] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4880'. [ 1648.682174][T19136] bond4: (slave bridge3): failed to get link speed/duplex [ 1648.842331][T24616] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4880'. [ 1648.954014][ T8282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1649.777799][T19471] bond4: (slave bridge3): failed to get link speed/duplex [ 1650.072535][ T7745] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1650.132844][ T8276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1650.292831][T19471] bond4: (slave bridge3): failed to get link speed/duplex [ 1650.381422][ T7745] usb 3-1: Using ep0 maxpacket: 16 [ 1650.767204][T19471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1650.816263][ T7745] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1650.883595][ T7745] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1650.936357][ T7745] usb 3-1: New USB device found, idVendor=1b96, idProduct=0001, bcdDevice= 0.00 [ 1651.105802][ T7745] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1651.137905][ T7745] usb 3-1: config 0 descriptor?? [ 1652.356466][T19467] net_ratelimit: 3 callbacks suppressed [ 1652.356485][T19467] bond4: (slave bridge3): failed to get link speed/duplex [ 1652.501220][T19136] bond4: (slave bridge3): failed to get link speed/duplex [ 1652.693306][T19467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1652.701442][T19136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1652.710215][T14797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1652.736319][ T8276] bond4: (slave bridge3): failed to get link speed/duplex [ 1652.914351][T19468] bond4: (slave bridge3): failed to get link speed/duplex [ 1653.051745][T19136] bond4: (slave bridge3): failed to get link speed/duplex [ 1653.331968][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1654.348109][ T8276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1654.565410][ T7745] usbhid 3-1:0.0: can't add hid device: -71 [ 1654.597058][ T7745] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1654.636483][ T7745] usb 3-1: USB disconnect, device number 50 [ 1657.377798][T19136] net_ratelimit: 24 callbacks suppressed [ 1657.378121][T19136] bond4: (slave bridge3): failed to get link speed/duplex [ 1658.598141][T24691] trusted_key: encrypted_key: master key parameter 'uefa' is invalid [ 1658.668904][T19136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1658.687276][T14789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1658.704248][T19467] bond4: (slave bridge3): failed to get link speed/duplex [ 1658.709638][ T8276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1658.913311][T19136] bond4: (slave bridge3): failed to get link speed/duplex [ 1659.126570][ T8276] bond4: (slave bridge3): failed to get link speed/duplex [ 1659.293393][ T8276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1659.842571][ T13] bond4: (slave bridge3): failed to get link speed/duplex [ 1660.211412][T24699] loop5: detected capacity change from 0 to 2640 [ 1660.218386][T24699] buffer_io_error: 9 callbacks suppressed [ 1660.218404][T24699] Buffer I/O error on dev loop5, logical block 0, async page read [ 1660.241345][T24699] Buffer I/O error on dev loop5, logical block 0, async page read [ 1660.249261][T24699] Buffer I/O error on dev loop5, logical block 0, async page read [ 1660.257349][T24699] Buffer I/O error on dev loop5, logical block 0, async page read [ 1660.271300][T24699] Buffer I/O error on dev loop5, logical block 0, async page read [ 1660.279931][T24699] Buffer I/O error on dev loop5, logical block 0, async page read [ 1660.311184][T24699] Buffer I/O error on dev loop5, logical block 0, async page read [ 1660.321261][T24699] Buffer I/O error on dev loop5, logical block 0, async page read [ 1660.351304][T24699] ldm_validate_partition_table(): Disk read failed. [ 1660.365513][T24699] Buffer I/O error on dev loop5, logical block 0, async page read [ 1660.383316][T24699] Buffer I/O error on dev loop5, logical block 0, async page read [ 1660.519777][T24699] Dev loop5: unable to read RDB block 0 [ 1660.561642][T24699] loop5: unable to read partition table [ 1660.731270][T24699] loop_reread_partitions: partition scan of loop5 (3 ) failed (rc=-5) [ 1661.244312][T19136] bond4: (slave bridge3): failed to get link speed/duplex [ 1663.254276][T14789] net_ratelimit: 2 callbacks suppressed [ 1663.254295][T14789] bond4: (slave bridge3): failed to get link speed/duplex [ 1663.313322][T24713] netlink: 'syz.1.4888': attribute type 4 has an invalid length. [ 1663.986451][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1663.997269][ T8267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1664.235905][ T8282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1664.799206][T24723] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4903'. [ 1664.808404][T24723] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4903'. [ 1665.170676][T14789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1665.190394][T19466] bond4: (slave bridge3): failed to get link speed/duplex [ 1665.321220][T19467] bond4: (slave bridge3): failed to get link speed/duplex [ 1665.441616][T19466] bond4: (slave bridge3): failed to get link speed/duplex [ 1665.581207][T14789] bond4: (slave bridge3): failed to get link speed/duplex [ 1665.610470][T24725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1667.440209][T24741] 9p: Bad value for 'rfdno' [ 1668.264992][T24747] fuse: Unknown parameter 'group_id00000000000000000000' [ 1668.365757][T24750] netlink: 'syz.7.4910': attribute type 1 has an invalid length. [ 1668.402959][ T13] net_ratelimit: 19 callbacks suppressed [ 1668.402977][ T13] bond4: (slave bridge3): failed to get link speed/duplex [ 1668.652106][T24757] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8 sclass=netlink_xfrm_socket pid=24757 comm=syz.2.4907 [ 1668.721782][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.801330][T24750] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1668.814254][T24753] macvlan2: entered promiscuous mode [ 1668.819558][T24753] macvlan2: entered allmulticast mode [ 1668.825669][T24753] bond3: entered allmulticast mode [ 1668.830812][T24753] bond3: entered promiscuous mode [ 1668.836761][T24753] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1668.849499][T24753] team0: Port device macvlan2 added [ 1669.030753][T24758] bond3: (slave ip6gretap1): making interface the new active one [ 1669.073869][T24758] ip6gretap1: entered promiscuous mode [ 1669.100078][T24758] ip6gretap1: entered allmulticast mode [ 1669.132922][T24758] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1669.809630][ T8276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1669.817776][T19467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1669.884639][T24761] trusted_key: encrypted_key: key user:syz not found [ 1669.999171][T19467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1670.092217][T19471] bond4: (slave bridge3): failed to get link speed/duplex [ 1670.321261][ T8282] bond4: (slave bridge3): failed to get link speed/duplex [ 1670.976581][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1671.716231][T14797] bond4: (slave bridge3): failed to get link speed/duplex [ 1671.981216][T14797] bond4: (slave bridge3): failed to get link speed/duplex [ 1672.106141][T19471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1673.472943][ T8270] net_ratelimit: 12 callbacks suppressed [ 1673.472969][ T8270] bond4: (slave bridge3): failed to get link speed/duplex [ 1673.514742][T19467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1673.972248][T19136] bond4: (slave bridge3): failed to get link speed/duplex [ 1674.091272][ T8276] bond4: (slave bridge3): failed to get link speed/duplex [ 1674.311257][T19471] bond4: (slave bridge3): failed to get link speed/duplex [ 1674.439639][T19467] bond4: (slave bridge3): failed to get link speed/duplex [ 1675.391816][T24800] netlink: 'syz.5.4926': attribute type 21 has an invalid length. [ 1675.399667][T24800] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4926'. [ 1675.532127][ T8282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1675.742963][T24800] netlink: 'syz.5.4926': attribute type 4 has an invalid length. [ 1675.750816][T24800] netlink: 'syz.5.4926': attribute type 5 has an invalid length. [ 1675.758698][T24800] netlink: 3 bytes leftover after parsing attributes in process `syz.5.4926'. [ 1675.912285][T24803] /dev/nullb0: Can't lookup blockdev [ 1676.536793][ T8282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1676.546690][T19466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1676.551461][ T8270] bond4: (slave bridge3): failed to get link speed/duplex [ 1679.315228][ T8270] net_ratelimit: 15 callbacks suppressed [ 1679.315247][ T8270] bond4: (slave bridge3): failed to get link speed/duplex [ 1679.341497][T19460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1679.629896][T24820] netlink: 'syz.9.4925': attribute type 1 has an invalid length. [ 1679.908024][T24831] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4925'. [ 1680.940073][T19136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1680.953250][T19468] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1681.032123][T24829] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1681.169658][T24831] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1681.201284][T24271] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1681.220737][T24831] bond1 (unregistering): Released all slaves [ 1681.255195][T24832] lo speed is unknown, defaulting to 1000 [ 1681.262668][T24832] wg1 speed is unknown, defaulting to 1000 [ 1681.271394][T19471] bond4: (slave bridge3): failed to get link speed/duplex [ 1681.501327][T24271] usb 10-1: Using ep0 maxpacket: 16 [ 1681.603037][T24846] loop5: detected capacity change from 0 to 2640 [ 1681.612047][T24846] buffer_io_error: 11 callbacks suppressed [ 1681.612064][T24846] Buffer I/O error on dev loop5, logical block 0, async page read [ 1681.626233][T24846] Buffer I/O error on dev loop5, logical block 0, async page read [ 1681.634864][T24846] Buffer I/O error on dev loop5, logical block 0, async page read [ 1681.643201][T24846] Buffer I/O error on dev loop5, logical block 0, async page read [ 1681.651696][T24846] Buffer I/O error on dev loop5, logical block 0, async page read [ 1681.660110][T24846] Buffer I/O error on dev loop5, logical block 0, async page read [ 1681.668601][T24846] Buffer I/O error on dev loop5, logical block 0, async page read [ 1681.677269][T24846] Buffer I/O error on dev loop5, logical block 0, async page read [ 1681.685649][T24846] ldm_validate_partition_table(): Disk read failed. [ 1681.692514][T24846] Buffer I/O error on dev loop5, logical block 0, async page read [ 1681.700819][T24846] Buffer I/O error on dev loop5, logical block 0, async page read [ 1681.710027][T24846] Dev loop5: unable to read RDB block 0 [ 1681.719774][T24846] loop5: unable to read partition table [ 1681.726461][T24846] loop_reread_partitions: partition scan of loop5 (3 ) failed (rc=-5) [ 1682.492256][T24271] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1682.502783][T24271] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1682.514277][T24271] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 4 [ 1682.800733][T24271] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1682.820889][T19467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1682.829068][T14789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1682.861231][ T13] bond4: (slave bridge3): failed to get link speed/duplex [ 1682.880066][ T30] audit: type=1800 audit(1682.655:3128): pid=24848 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.4930" name="nullb0" dev="tmpfs" ino=3161 res=0 errno=0 [ 1682.919888][T19466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1682.929451][T24271] usb 10-1: string descriptor 0 read error: -71 [ 1682.946220][T24271] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1682.964696][T24271] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1683.392152][T24271] usb 10-1: config 0 descriptor?? [ 1683.427222][T24271] usb 10-1: can't set config #0, error -71 [ 1683.501649][T24271] usb 10-1: USB disconnect, device number 17 [ 1683.681598][T14789] bond4: (slave bridge3): failed to get link speed/duplex [ 1684.597392][ T8282] net_ratelimit: 3 callbacks suppressed [ 1684.597412][ T8282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1684.621393][T19468] bond4: (slave bridge3): failed to get link speed/duplex [ 1685.093269][ T8282] bond4: (slave bridge3): failed to get link speed/duplex [ 1685.211301][ T13] bond4: (slave bridge3): failed to get link speed/duplex [ 1685.337992][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1685.372311][ T8270] bond4: (slave bridge3): failed to get link speed/duplex [ 1685.445431][T24881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1685.532584][ T8282] bond4: (slave bridge3): failed to get link speed/duplex [ 1685.889944][T24887] 9p: Bad value for 'rfdno' [ 1686.057572][T19471] bond4: (slave bridge3): failed to get link speed/duplex [ 1686.311346][T19471] bond4: (slave bridge3): failed to get link speed/duplex [ 1686.839086][T24897] ceph: No mds server is up or the cluster is laggy [ 1686.886486][T15813] libceph: connect (1)[c::]:6789 error -101 [ 1687.207900][T15813] libceph: mon0 (1)[c::]:6789 connect error [ 1688.805842][T24910] ksmbd: Unknown IPC event: 4, ignore. [ 1689.296546][T24915] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4949'. [ 1689.363656][T24917] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4950'. [ 1689.516286][T24921] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4951'. [ 1689.547908][T24921] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4951'. [ 1689.641737][T14797] net_ratelimit: 16 callbacks suppressed [ 1689.641765][T14797] bond4: (slave bridge3): failed to get link speed/duplex [ 1689.821632][T24921] fuse: Unknown parameter 'fe' [ 1689.892196][T14789] bond4: (slave bridge3): failed to get link speed/duplex [ 1690.021394][ T8267] bond4: (slave bridge3): failed to get link speed/duplex [ 1690.219134][T14789] bond4: (slave bridge3): failed to get link speed/duplex [ 1690.909001][T24929] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1690.927828][T19467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1690.928174][T19460] bond4: (slave bridge3): failed to get link speed/duplex [ 1691.092021][T14795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1691.162255][T19460] bond4: (slave bridge3): failed to get link speed/duplex [ 1691.301727][T14795] bond4: (slave bridge3): failed to get link speed/duplex [ 1691.935039][T14797] bond4: (slave bridge3): failed to get link speed/duplex [ 1693.278959][T24956] lo speed is unknown, defaulting to 1000 [ 1693.922983][T24956] wg1 speed is unknown, defaulting to 1000 [ 1694.114059][T24965] gfs2: error -5 reading superblock [ 1694.796809][T24971] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4961'. [ 1694.806076][T24971] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4961'. [ 1695.076410][T14795] net_ratelimit: 12 callbacks suppressed [ 1695.076428][T14795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1696.368962][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1696.839675][T24271] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1696.855211][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1697.141406][T15037] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1697.165929][T24271] usb 3-1: Using ep0 maxpacket: 16 [ 1697.258140][T24271] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 93, changing to 10 [ 1697.318143][T24271] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1697.361760][T15037] usb 10-1: Using ep0 maxpacket: 32 [ 1697.396514][T15037] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1697.415163][T24271] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1697.454812][T19467] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1697.472383][T24271] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1697.475339][T15037] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1697.585790][T14797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1697.603005][ T8282] bond4: (slave bridge3): failed to get link speed/duplex [ 1697.702946][T14795] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1697.719113][T24271] usb 3-1: config 0 descriptor?? [ 1697.804928][T15037] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1697.822332][T14795] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1697.942146][T15037] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1697.991348][T19471] bond4: (slave bridge3): failed to get link speed/duplex [ 1698.067327][T14795] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1698.097862][T24271] usb 3-1: can't set config #0, error -71 [ 1698.111355][T15037] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1698.300121][T24271] usb 3-1: USB disconnect, device number 51 [ 1698.308194][T19471] bond4: (slave bridge3): failed to get link speed/duplex [ 1698.356657][T15037] usb 10-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1698.547255][T15037] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1698.584454][T14789] bond4: (slave bridge3): failed to get link speed/duplex [ 1698.659281][T15037] usb 10-1: Product: syz [ 1698.696711][T15037] usb 10-1: Manufacturer: syz [ 1698.718918][T15037] usb 10-1: SerialNumber: syz [ 1698.746135][T15037] usb 10-1: config 0 descriptor?? [ 1698.758670][T15037] usb 10-1: can't set config #0, error -71 [ 1698.855364][T14797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1698.865207][ T8267] bond4: (slave bridge3): failed to get link speed/duplex [ 1698.970024][T24985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4963'. [ 1699.724547][T15037] usb 10-1: USB disconnect, device number 18 [ 1700.096663][T24994] loop5: detected capacity change from 0 to 2640 [ 1700.107504][T24994] buffer_io_error: 6 callbacks suppressed [ 1700.107536][T24994] Buffer I/O error on dev loop5, logical block 0, async page read [ 1700.121898][T24994] Buffer I/O error on dev loop5, logical block 0, async page read [ 1700.130273][T24994] Buffer I/O error on dev loop5, logical block 0, async page read [ 1700.138730][T24994] Buffer I/O error on dev loop5, logical block 0, async page read [ 1700.147421][T24994] Buffer I/O error on dev loop5, logical block 0, async page read [ 1700.156060][T24994] Buffer I/O error on dev loop5, logical block 0, async page read [ 1700.164447][T24994] Buffer I/O error on dev loop5, logical block 0, async page read [ 1700.172841][T24994] Buffer I/O error on dev loop5, logical block 0, async page read [ 1700.181004][T24994] ldm_validate_partition_table(): Disk read failed. [ 1700.188221][T24994] Buffer I/O error on dev loop5, logical block 0, async page read [ 1700.196684][T24994] Buffer I/O error on dev loop5, logical block 0, async page read [ 1700.205784][T24994] Dev loop5: unable to read RDB block 0 [ 1700.214106][T24994] loop5: unable to read partition table [ 1700.220806][T24994] loop_reread_partitions: partition scan of loop5 (3 ) failed (rc=-5) [ 1700.933328][T19467] net_ratelimit: 6 callbacks suppressed [ 1700.933346][T19467] bond4: (slave bridge3): failed to get link speed/duplex [ 1701.382035][T19467] bond4: (slave bridge3): failed to get link speed/duplex [ 1701.501478][T24995] netlink: 'syz.9.4967': attribute type 4 has an invalid length. [ 1701.556675][T24995] netlink: 17 bytes leftover after parsing attributes in process `syz.9.4967'. [ 1701.617574][T19471] bond4: (slave bridge3): failed to get link speed/duplex [ 1701.751373][ T13] bond4: (slave bridge3): failed to get link speed/duplex [ 1701.881301][ T13] bond4: (slave bridge3): failed to get link speed/duplex [ 1701.881617][T15037] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1701.906972][T25004] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4971'. [ 1702.273339][T19467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1702.412721][T15037] usb 10-1: Using ep0 maxpacket: 32 [ 1702.428137][T15037] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 1702.436615][T15037] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1702.448425][T15037] usb 10-1: config 0 has no interface number 0 [ 1702.575756][T25013] gfs2: error -5 reading superblock [ 1702.921561][T15037] usb 10-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1702.953555][ T8270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1703.092131][ T8270] bond4: (slave bridge3): failed to get link speed/duplex [ 1703.120660][T15037] usb 10-1: string descriptor 0 read error: -71 [ 1703.257583][T19467] bond4: (slave bridge3): failed to get link speed/duplex [ 1703.268174][T15037] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1703.314837][T15037] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1703.355833][T15037] usb 10-1: config 0 descriptor?? [ 1703.373818][T19471] bond4: (slave bridge3): failed to get link speed/duplex [ 1703.535023][T15037] usb 10-1: can't set config #0, error -71 [ 1704.073427][T15037] usb 10-1: USB disconnect, device number 19 [ 1704.517904][T25024] md: md2 stopped. [ 1704.531226][T25024] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4976'. [ 1706.179284][T25040] loop9: detected capacity change from 0 to 524287936 [ 1706.260152][ T8282] net_ratelimit: 11 callbacks suppressed [ 1706.260205][ T8282] bond4: (slave bridge3): failed to get link speed/duplex [ 1706.424127][T25038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1706.593670][T19471] bond4: (slave bridge3): failed to get link speed/duplex [ 1706.711188][ T7745] usb 8-1: new low-speed USB device number 22 using dummy_hcd [ 1706.712065][ T8282] bond4: (slave bridge3): failed to get link speed/duplex [ 1706.843286][ T8282] bond4: (slave bridge3): failed to get link speed/duplex [ 1706.989079][T19467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1707.026945][ T7745] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1707.040590][ T7745] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1707.055749][ T7745] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1707.073453][ T7745] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1707.455084][ T8282] bond4: (slave bridge3): failed to get link speed/duplex [ 1707.483222][ T7745] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1707.545903][ T7745] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1707.580989][ T7745] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1707.591929][T14797] bond4: (slave bridge3): failed to get link speed/duplex [ 1707.611276][ T7745] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1707.628742][ T7745] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1707.642690][ T7745] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1707.745344][T19471] bond4: (slave bridge3): failed to get link speed/duplex [ 1707.778395][ T7745] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1707.803758][ T7745] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1707.846524][ T7745] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1707.862805][T25039] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1707.873122][ T7745] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1707.881162][T19471] bond4: (slave bridge3): failed to get link speed/duplex [ 1707.893492][T25039] block device autoloading is deprecated and will be removed. [ 1707.904759][ T7745] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1707.944124][ T7745] usb 8-1: string descriptor 0 read error: -22 [ 1707.955543][ T7745] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1707.997657][ T7745] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1708.062184][ T7745] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1708.967055][ T7745] usb 8-1: USB disconnect, device number 22 [ 1709.070524][T25060] hsr0: entered promiscuous mode [ 1709.720566][T25071] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4989'. [ 1709.875233][T25071] lo speed is unknown, defaulting to 1000 [ 1709.890514][T25071] wg1 speed is unknown, defaulting to 1000 [ 1710.835676][T25075] bond1: down delay (5) is not a multiple of miimon (100), value rounded to 0 ms [ 1711.782202][T25089] Can't find a SQUASHFS superblock on nullb0 [ 1712.084773][ T30] audit: type=1400 audit(1711.585:3129): avc: denied { append } for pid=25079 comm="syz.1.4991" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1712.672699][T25086] net_ratelimit: 14 callbacks suppressed [ 1712.672713][T25086] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 1712.757746][T19460] bond4: (slave bridge3): link status up again after 0 ms [ 1712.780644][T19460] bond4: (slave bridge3): failed to get link speed/duplex [ 1712.789607][T25088] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1712.883267][T25088] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1712.909620][T25088] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1712.975055][ T13] bond4: (slave bridge3): failed to get link speed/duplex [ 1713.091855][T19467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1713.131251][ T8270] bond4: (slave bridge3): failed to get link speed/duplex [ 1713.251531][T14789] bond4: (slave bridge3): failed to get link speed/duplex [ 1713.367430][T19467] bond4: (slave bridge3): failed to get link speed/duplex [ 1713.588493][T14789] bond4: (slave bridge3): failed to get link speed/duplex [ 1713.809080][ T13] bond4: (slave bridge3): failed to get link speed/duplex [ 1717.725422][T25141] trusted_key: encrypted_key: key user:syz not found [ 1717.746965][T25141] gfs2: error -5 reading superblock [ 1717.975906][ T8282] net_ratelimit: 7 callbacks suppressed [ 1717.975918][ T8282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1717.995844][T19460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1718.018949][T25143] netlink: 'syz.5.5005': attribute type 2 has an invalid length. [ 1718.073579][T19467] bond4: (slave bridge3): failed to get link speed/duplex [ 1718.241885][T19471] bond4: (slave bridge3): failed to get link speed/duplex [ 1718.354939][T19467] bond4: (slave bridge3): failed to get link speed/duplex [ 1718.510973][T19467] bond4: (slave bridge3): failed to get link speed/duplex [ 1718.738486][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1718.797741][ T8267] bond4: (slave bridge3): failed to get link speed/duplex [ 1718.991702][T19471] bond4: (slave bridge3): failed to get link speed/duplex [ 1719.905899][ T13] bond4: (slave bridge3): failed to get link speed/duplex [ 1720.974598][T25162] binder: BINDER_SET_CONTEXT_MGR already set [ 1720.992725][T25162] binder: 25160:25162 ioctl 4018620d 200000000040 returned -16 [ 1723.003739][T19460] net_ratelimit: 30 callbacks suppressed [ 1723.003760][T19460] bond4: (slave bridge3): failed to get link speed/duplex [ 1723.094217][T14810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1723.112901][T19471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1723.181637][T19460] bond4: (slave bridge3): failed to get link speed/duplex [ 1723.321783][T14793] bond4: (slave bridge3): failed to get link speed/duplex [ 1723.461330][T19460] bond4: (slave bridge3): failed to get link speed/duplex [ 1723.581198][ T7745] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1723.588807][T14793] bond4: (slave bridge3): failed to get link speed/duplex [ 1723.681883][T15037] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1723.797693][T19471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1723.817959][T19136] bond4: (slave bridge3): failed to get link speed/duplex [ 1723.901139][ T7745] usb 8-1: Using ep0 maxpacket: 32 [ 1724.312959][ T8282] bond4: (slave bridge3): failed to get link speed/duplex [ 1724.356251][ T7745] usb 8-1: config 0 has an invalid interface number: 239 but max is 0 [ 1724.366235][ T7745] usb 8-1: config 0 has an invalid descriptor of length 108, skipping remainder of the config [ 1724.382584][ T7745] usb 8-1: config 0 has no interface number 0 [ 1724.383065][T15037] usb 10-1: Using ep0 maxpacket: 32 [ 1724.388817][ T7745] usb 8-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 1724.406135][ T7745] usb 8-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1724.420600][ T7745] usb 8-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 1724.435047][ T7745] usb 8-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 1724.447475][ T7745] usb 8-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 1724.447871][T15037] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1724.462945][ T7745] usb 8-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 1724.482116][ T7745] usb 8-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 107, changing to 10 [ 1724.493808][T15037] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1724.494200][ T7745] usb 8-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid maxpacket 25209, setting to 1024 [ 1724.505826][T15037] usb 10-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1724.528087][T15037] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1724.590271][ T7745] usb 8-1: config 0 interface 239 has no altsetting 0 [ 1724.602276][T15037] usb 10-1: Product: syz [ 1724.606651][T15037] usb 10-1: Manufacturer: syz [ 1724.611402][T15037] usb 10-1: SerialNumber: syz [ 1724.622207][ T7745] usb 8-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 1724.644972][ T7745] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1724.662696][T15037] usb 10-1: config 0 descriptor?? [ 1724.668253][ T7745] usb 8-1: Product: syz [ 1724.677517][ T7745] usb 8-1: Manufacturer: syz [ 1724.817550][ T7745] usb 8-1: SerialNumber: syz [ 1724.861970][ T7745] usb 8-1: config 0 descriptor?? [ 1726.107537][ T30] audit: type=1400 audit(1725.895:3130): avc: denied { accept } for pid=25217 comm="syz.9.5019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1726.151871][T25216] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1726.160988][T25216] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1727.432630][T15813] usb 10-1: USB disconnect, device number 20 [ 1727.566900][ T7745] usb 8-1: USB disconnect, device number 23 [ 1727.574645][ T5625] Bluetooth: hci5: BCM: Reset failed (-71) [ 1727.821252][T25243] trusted_key: encrypted_key: insufficient parameters specified [ 1728.915413][T14810] net_ratelimit: 23 callbacks suppressed [ 1728.915432][T14810] bond4: (slave bridge3): failed to get link speed/duplex [ 1728.957283][T19460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1729.382378][T25251] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1729.418379][T19467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1729.434120][T25251] batadv_slave_1: entered promiscuous mode [ 1729.475465][T19467] bond4: (slave bridge3): failed to get link speed/duplex [ 1729.493373][T14795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1729.626682][T25260] trusted_key: encrypted_key: master key parameter 'uefa' is invalid [ 1729.644799][T19460] bond4: (slave bridge3): failed to get link speed/duplex [ 1730.139723][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.216521][T25258] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5027'. [ 1730.239351][ T30] audit: type=1400 audit(1730.025:3131): avc: denied { lock } for pid=25250 comm="syz.5.5027" path="socket:[94064]" dev="sockfs" ino=94064 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1730.301372][ T30] audit: type=1400 audit(1730.055:3132): avc: denied { lock } for pid=25250 comm="syz.5.5027" path="socket:[94058]" dev="sockfs" ino=94058 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1730.303254][T19471] bond4: (slave bridge3): failed to get link speed/duplex [ 1730.451360][T19471] bond4: (slave bridge3): failed to get link speed/duplex [ 1731.134162][T14810] bond4: (slave bridge3): failed to get link speed/duplex [ 1731.149030][T25269] ceph: No mds server is up or the cluster is laggy [ 1731.155883][ T7745] libceph: connect (1)[c::]:6789 error -99 [ 1731.164129][ T7745] libceph: mon0 (1)[c::]:6789 connect error [ 1731.366965][T19467] bond4: (slave bridge3): failed to get link speed/duplex [ 1732.256919][T25280] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1732.704078][T24271] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1732.725791][T25287] netlink: 1363 bytes leftover after parsing attributes in process `syz.9.5035'. [ 1732.948834][T24271] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1732.991491][T24271] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1733.423431][T24271] usb 8-1: Product: syz [ 1733.436525][T24271] usb 8-1: Manufacturer: syz [ 1733.465056][T24271] usb 8-1: SerialNumber: syz [ 1733.497849][T24271] usb 8-1: config 0 descriptor?? [ 1733.665296][T25294] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1734.771770][T14810] net_ratelimit: 12 callbacks suppressed [ 1734.771790][T14810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1734.776799][T19467] bond4: (slave bridge3): failed to get link speed/duplex [ 1735.080973][T19466] bond4: (slave bridge3): failed to get link speed/duplex [ 1735.275572][T14793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1736.258168][T19467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1736.377124][T19460] bond4: (slave bridge3): failed to get link speed/duplex [ 1736.414962][ T7750] usb 8-1: USB disconnect, device number 24 [ 1736.468121][T25307] 9p: Bad value for 'rfdno' [ 1736.513425][T19467] bond4: (slave bridge3): failed to get link speed/duplex [ 1736.672465][T19467] bond4: (slave bridge3): failed to get link speed/duplex [ 1736.813610][T19460] bond4: (slave bridge3): failed to get link speed/duplex [ 1736.938233][ T7745] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1737.060172][T25318] trusted_key: encrypted_key: master key parameter 'uefa' is invalid [ 1737.600565][ T8282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1738.136094][ T7745] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1738.151162][ T7745] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1738.249709][T25327] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5042'. [ 1738.373099][T25327] lo speed is unknown, defaulting to 1000 [ 1738.391204][T25327] wg1 speed is unknown, defaulting to 1000 [ 1738.748454][ T7745] usb 10-1: config 0 descriptor?? [ 1739.801196][T19136] net_ratelimit: 5 callbacks suppressed [ 1739.801214][T19136] bond4: (slave bridge3): failed to get link speed/duplex [ 1739.933774][T19467] bond4: (slave bridge3): failed to get link speed/duplex [ 1740.021221][T24271] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1740.074809][T19471] bond4: (slave bridge3): failed to get link speed/duplex [ 1741.019672][T19467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1741.020771][ T8282] bond4: (slave bridge3): failed to get link speed/duplex [ 1741.031386][T14810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1741.095100][T24271] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1741.106926][T24271] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1741.124519][T24271] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1741.165114][T24271] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1741.197306][T24271] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1741.206233][T24271] usb 3-1: Product: syz [ 1741.214002][T24271] usb 3-1: Manufacturer: syz [ 1741.218739][T24271] usb 3-1: SerialNumber: syz [ 1741.262378][T19136] bond4: (slave bridge3): failed to get link speed/duplex [ 1741.401849][T19460] bond4: (slave bridge3): failed to get link speed/duplex [ 1741.466236][T24271] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 52 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1741.523072][T19136] bond4: (slave bridge3): failed to get link speed/duplex [ 1741.652063][T19136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1741.999355][T15037] usb 3-1: USB disconnect, device number 52 [ 1742.019382][T25343] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5046'. [ 1742.035136][T15037] usblp0: removed [ 1742.308487][ T7745] udl 10-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1742.343630][ T7745] [drm:udl_init] *ERROR* Selecting channel failed [ 1742.416408][T25356] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5051'. [ 1742.499863][ T7745] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 2 [ 1742.533729][ T7745] [drm] Initialized udl on minor 2 [ 1742.681130][ T7745] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1742.741761][ T7745] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 1742.813948][T25366] trusted_key: encrypted_key: master key parameter 'uefa' is invalid [ 1743.069831][T25369] gfs2: error -5 reading superblock [ 1743.675412][ T7745] usb 10-1: USB disconnect, device number 21 [ 1743.682813][ T29] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1744.203921][ T29] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 1744.735672][T25379] futex_wake_op: syz.7.5056 tries to shift op by 32; fix this program [ 1744.920674][T25385] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5056'. [ 1745.701885][T25385] hsr_slave_1 (unregistering): left promiscuous mode [ 1745.755155][T19471] net_ratelimit: 21 callbacks suppressed [ 1745.755173][T19471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1745.851663][ T8282] bond4: (slave bridge3): failed to get link speed/duplex [ 1745.991500][ T8282] bond4: (slave bridge3): failed to get link speed/duplex [ 1746.513264][ T8282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1746.525164][T19467] bond4: (slave bridge3): failed to get link speed/duplex [ 1746.571318][T18402] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1746.699593][T25404] sysfs: cannot create duplicate filename '/class/ieee80211/1^!l1*$pOcɔr$G' [ 1746.710005][T25404] CPU: 1 UID: 0 PID: 25404 Comm: syz.2.5060 Tainted: G L syzkaller #0 PREEMPT(full) [ 1746.710043][T25404] Tainted: [L]=SOFTLOCKUP [ 1746.710052][T25404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1746.710071][T25404] Call Trace: [ 1746.710080][T25404] [ 1746.710090][T25404] dump_stack_lvl+0x100/0x190 [ 1746.710125][T25404] sysfs_warn_dup.cold+0x1c/0x28 [ 1746.710163][T25404] sysfs_do_create_link_sd+0x113/0x140 [ 1746.710197][T25404] sysfs_create_link+0x61/0xc0 [ 1746.710227][T25404] device_add+0x675/0x1950 [ 1746.710272][T25404] ? __pfx_device_add+0x10/0x10 [ 1746.710309][T25404] ? __pfx___sanitizer_cov_trace_const_cmp1+0x10/0x10 [ 1746.710339][T25404] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 1746.710384][T25404] wiphy_register+0x1edd/0x2d90 [ 1746.710411][T25404] ? __rtnl_unlock+0xb9/0xf0 [ 1746.710447][T25404] ? __pfx_wiphy_register+0x10/0x10 [ 1746.710495][T25404] ieee80211_register_hw+0x3055/0x4570 [ 1746.710548][T25404] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1746.710581][T25404] ? __pfx___debug_object_init+0x10/0x10 [ 1746.710615][T25404] ? kasan_check_range+0x161/0x1e0 [ 1746.710649][T25404] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1746.710678][T25404] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1746.710711][T25404] ? __hrtimer_setup+0x208/0x330 [ 1746.710746][T25404] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 1746.710793][T25404] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1746.710832][T25404] ? __asan_memcpy+0x3c/0x60 [ 1746.710872][T25404] hwsim_new_radio_nl+0xc5f/0x1370 [ 1746.710899][T25404] ? rcu_is_watching+0x12/0xc0 [ 1746.710936][T25404] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1746.710973][T25404] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 1746.711008][T25404] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 1746.711050][T25404] genl_family_rcv_msg_doit+0x214/0x300 [ 1746.711083][T25404] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1746.711128][T25404] ? bpf_lsm_capable+0x9/0x10 [ 1746.711152][T25404] ? security_capable+0x80/0x260 [ 1746.711184][T25404] ? ns_capable+0xd2/0xf0 [ 1746.711218][T25404] genl_rcv_msg+0x560/0x800 [ 1746.711255][T25404] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1746.711285][T25404] ? trace_reschedule_exit.constprop.0+0x6b/0x220 [ 1746.711313][T25404] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1746.711352][T25404] netlink_rcv_skb+0x159/0x420 [ 1746.711381][T25404] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1746.711415][T25404] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1746.711459][T25404] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1746.711492][T25404] genl_rcv+0x28/0x40 [ 1746.711521][T25404] netlink_unicast+0x585/0x850 [ 1746.711555][T25404] ? __pfx_netlink_unicast+0x10/0x10 [ 1746.711594][T25404] netlink_sendmsg+0x8b0/0xda0 [ 1746.711629][T25404] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1746.711656][T25404] ? __might_fault+0x80/0x140 [ 1746.711704][T25404] ____sys_sendmsg+0x9e1/0xb70 [ 1746.711730][T25404] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1746.711762][T25404] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1746.711795][T25404] ? lock_acquire+0x1b1/0x370 [ 1746.711835][T25404] ___sys_sendmsg+0x190/0x1e0 [ 1746.711868][T25404] ? __pfx____sys_sendmsg+0x10/0x10 [ 1746.711896][T25404] ? find_held_lock+0x2b/0x80 [ 1746.711918][T25404] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 1746.711991][T25404] __sys_sendmsg+0x170/0x220 [ 1746.712029][T25404] ? __pfx___sys_sendmsg+0x10/0x10 [ 1746.712075][T25404] ? trace_irq_enable.constprop.0+0x31/0x160 [ 1746.712110][T25404] ? rcu_is_watching+0x12/0xc0 [ 1746.712149][T25404] do_syscall_64+0x115/0x870 [ 1746.712179][T25404] ? clear_bhb_loop+0x40/0x90 [ 1746.712209][T25404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1746.712233][T25404] RIP: 0033:0x7f6a3559ce59 [ 1746.712254][T25404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1746.712277][T25404] RSP: 002b:00007f6a3642c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1746.712301][T25404] RAX: ffffffffffffffda RBX: 00007f6a35816180 RCX: 00007f6a3559ce59 [ 1746.712318][T25404] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000008 [ 1746.712332][T25404] RBP: 00007f6a35632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1746.712346][T25404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1746.712360][T25404] R13: 00007f6a35816218 R14: 00007f6a35816180 R15: 00007ffd7d8bddb8 [ 1746.712395][T25404] [ 1747.258938][T14810] bond4: (slave bridge3): failed to get link speed/duplex [ 1747.323020][T25406] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5062'. [ 1747.371335][ T8282] bond4: (slave bridge3): failed to get link speed/duplex [ 1748.142726][T19467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1748.257943][T18402] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1748.273196][T14810] bond4: (slave bridge3): failed to get link speed/duplex [ 1748.314685][T18402] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1748.473743][T19460] bond4: (slave bridge3): failed to get link speed/duplex [ 1748.697009][T18402] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1748.805816][T18402] usb 2-1: string descriptor 0 read error: -71 [ 1748.843106][T18402] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40 [ 1748.896751][T18402] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1748.976396][T18402] usb 2-1: can't set config #1, error -71 [ 1749.004280][T18402] usb 2-1: USB disconnect, device number 14 [ 1750.549790][T25426] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5068'. [ 1750.577191][T25426] lo speed is unknown, defaulting to 1000 [ 1750.584462][T25426] wg1 speed is unknown, defaulting to 1000 [ 1751.476285][T25437] kAFS: unable to lookup cell '' [ 1751.920125][T14795] net_ratelimit: 15 callbacks suppressed [ 1751.920145][T14795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1751.952011][T14793] bond4: (slave bridge3): failed to get link speed/duplex [ 1752.214796][T14795] bond4: (slave bridge3): failed to get link speed/duplex [ 1752.298477][T25437] netlink: 'syz.9.5069': attribute type 10 has an invalid length. [ 1752.391361][T14795] bond4: (slave bridge3): failed to get link speed/duplex [ 1752.504985][T19460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1752.564367][T19136] bond4: (slave bridge3): failed to get link speed/duplex [ 1754.247759][T19467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1754.457502][T14795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1754.474557][T14789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1755.676265][T25437] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1755.772869][T19466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1755.896594][T25437] team0: Port device netdevsim1 added [ 1755.954637][T25466] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1757.330978][T14795] net_ratelimit: 1 callbacks suppressed [ 1757.330997][T14795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1757.563716][T25478] netlink: 15 bytes leftover after parsing attributes in process `syz.5.5076'. [ 1757.669751][T14795] bond4: (slave bridge3): failed to get link speed/duplex [ 1757.704455][T14795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1757.814647][T25478] netlink: 15995 bytes leftover after parsing attributes in process `syz.5.5076'. [ 1757.854955][T14795] bond4: (slave bridge3): failed to get link speed/duplex [ 1758.101347][T19136] bond4: (slave bridge3): failed to get link speed/duplex [ 1758.134913][T25478] netlink: 'syz.5.5076': attribute type 10 has an invalid length. [ 1758.492046][T14795] bond4: (slave bridge3): failed to get link speed/duplex [ 1759.173552][T25478] bond0: (slave team0): Releasing backup interface [ 1759.297467][T25478] team0 (unregistering): Port device team_slave_0 removed [ 1759.317657][ T8267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1759.379322][T25478] team0 (unregistering): Port device team_slave_1 removed [ 1759.435863][ T8267] bond4: (slave bridge3): failed to get link speed/duplex [ 1759.505179][T25488] trusted_key: encrypted_key: insufficient parameters specified [ 1759.557776][T19471] bond4: (slave bridge3): failed to get link speed/duplex [ 1759.965078][ T8267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1762.414736][ T8282] net_ratelimit: 12 callbacks suppressed [ 1762.414757][ T8282] bond4: (slave bridge3): failed to get link speed/duplex [ 1763.374846][T14789] bond4: (slave bridge3): failed to get link speed/duplex [ 1763.431018][T14789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1763.522991][T14789] bond4: (slave bridge3): failed to get link speed/duplex [ 1763.614389][T14789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1763.688376][T19460] bond4: (slave bridge3): failed to get link speed/duplex [ 1764.186040][T19466] bond4: (slave bridge3): failed to get link speed/duplex [ 1764.260074][T24271] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1764.385412][T14789] bond4: (slave bridge3): failed to get link speed/duplex [ 1764.521321][T14789] bond4: (slave bridge3): failed to get link speed/duplex [ 1764.552390][T25519] netlink: 'syz.2.5088': attribute type 1 has an invalid length. [ 1764.602019][T24271] usb 10-1: Using ep0 maxpacket: 16 [ 1764.618027][T24271] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1764.628617][T24271] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1764.631985][T19467] bond4: (slave bridge3): failed to get link speed/duplex [ 1764.640854][T24271] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1764.657212][T24271] usb 10-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1764.666764][T24271] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1764.676904][T24271] usb 10-1: Product: syz [ 1764.681447][T24271] usb 10-1: Manufacturer: syz [ 1764.686184][T24271] usb 10-1: SerialNumber: syz [ 1764.704861][T24271] usb 10-1: config 0 descriptor?? [ 1764.801198][T15037] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1764.962945][T15037] usb 3-1: Using ep0 maxpacket: 8 [ 1764.972846][T15037] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1764.997692][T15037] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1765.021506][T15037] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1765.040131][T15037] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1765.050459][T15037] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1765.064679][T15037] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1765.074491][T15037] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1765.090913][T15037] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 1765.401932][T25529] xt_policy: neither incoming nor outgoing policy selected [ 1765.968545][T25519] tipc: Enabling of bearer rejected, failed to enable media [ 1765.994020][T25519] syzkaller0: entered promiscuous mode [ 1766.152051][T25519] syzkaller0: entered allmulticast mode [ 1766.172997][T25539] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1767.638433][T25553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5094'. [ 1767.653950][T19467] net_ratelimit: 9 callbacks suppressed [ 1767.653969][T19467] bond4: (slave bridge3): failed to get link speed/duplex [ 1767.735217][T19466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1767.753540][T15037] usb 10-1: USB disconnect, device number 22 [ 1767.797211][T25552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5094'. [ 1767.897134][T24271] usb 3-1: USB disconnect, device number 53 [ 1767.976009][T19471] bond4: (slave bridge3): failed to get link speed/duplex [ 1768.105425][T14789] bond4: (slave bridge3): failed to get link speed/duplex [ 1769.217894][T19467] bond4: (slave bridge3): failed to get link speed/duplex [ 1769.239690][T14810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1769.711737][T14810] bond4: (slave bridge3): failed to get link speed/duplex [ 1769.722481][T25566] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1769.926708][T19467] bond4: (slave bridge3): failed to get link speed/duplex [ 1770.101980][T14789] bond4: (slave bridge3): failed to get link speed/duplex [ 1770.102242][T25572] netlink: 'syz.1.5099': attribute type 21 has an invalid length. [ 1770.117267][T25572] IPv6: NLM_F_CREATE should be specified when creating new route [ 1770.305598][T14810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1770.634314][T25584] CUSE: unknown device info "" [ 1770.639335][T25584] CUSE: unknown device info "" [ 1770.644802][T25584] CUSE: unknown device info "" [ 1770.649742][T25584] CUSE: unknown device info "" [ 1770.654925][T25584] CUSE: unknown device info "+" [ 1770.660220][T25584] CUSE: unknown device info "" [ 1770.665260][T25584] CUSE: unknown device info "" [ 1770.670178][T25584] CUSE: zero length info key specified [ 1772.633874][T22908] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1772.650514][T22908] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1772.666660][T22908] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1772.676849][T22908] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1772.684544][T22908] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1772.754668][T19467] net_ratelimit: 7 callbacks suppressed [ 1772.754686][T19467] bond4: (slave bridge3): failed to get link speed/duplex [ 1773.058041][T14810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1773.070691][T19471] bond4: (slave bridge3): failed to get link speed/duplex [ 1773.513551][T19471] bond4: (slave bridge3): failed to get link speed/duplex [ 1773.644388][T19466] bond4: (slave bridge3): failed to get link speed/duplex [ 1773.799318][T19466] bond4: (slave bridge3): failed to get link speed/duplex [ 1773.931430][T14789] bond4: (slave bridge3): failed to get link speed/duplex [ 1774.112834][T19466] bond4: (slave bridge3): failed to get link speed/duplex [ 1774.424441][T25625] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5111'. [ 1774.776960][ T5625] Bluetooth: hci5: command tx timeout [ 1775.074913][T19467] bond4: (slave bridge3): failed to get link speed/duplex [ 1775.225132][T19467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1775.404193][T25598] lo speed is unknown, defaulting to 1000 [ 1775.582395][T25598] wg1 speed is unknown, defaulting to 1000 [ 1776.567296][T25627] SELinux: policydb magic number 0xe does not match expected magic number 0xf97cff8c [ 1776.577959][T25627] SELinux: failed to load policy [ 1776.710686][T25643] trusted_key: encrypted_key: master key parameter 'uefa' is invalid [ 1776.871189][ T5625] Bluetooth: hci5: command tx timeout [ 1777.991929][T19136] net_ratelimit: 12 callbacks suppressed [ 1777.991951][T19136] bond4: (slave bridge3): failed to get link speed/duplex [ 1778.117770][T25653] netlink: 'syz.2.5117': attribute type 1 has an invalid length. [ 1778.132876][T19466] bond4: (slave bridge3): failed to get link speed/duplex [ 1778.272556][T25655] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5117'. [ 1778.364342][T25653] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1778.606703][ T30] audit: type=1400 audit(1778.395:3133): avc: denied { write } for pid=7778 comm="syz-executor" name="968" dev="tmpfs" ino=5180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 1779.212818][ T5625] Bluetooth: hci5: command tx timeout [ 1779.347844][ T30] audit: type=1400 audit(1778.425:3134): avc: denied { write } for pid=7778 comm="syz-executor" name="968" dev="tmpfs" ino=5180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 1779.379190][T25598] bridge0: port 1(bridge_slave_0) entered blocking state [ 1779.399832][T25598] bridge0: port 1(bridge_slave_0) entered disabled state [ 1779.407652][ T30] audit: type=1400 audit(1778.425:3135): avc: denied { write } for pid=7778 comm="syz-executor" name="968" dev="tmpfs" ino=5180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 1779.432622][T25598] bridge_slave_0: entered allmulticast mode [ 1779.440694][T25598] bridge_slave_0: entered promiscuous mode [ 1779.442691][ T30] audit: type=1400 audit(1778.435:3136): avc: denied { write } for pid=7778 comm="syz-executor" name="968" dev="tmpfs" ino=5180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 1779.486986][ T8267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1779.629731][T25676] openvswitch: netlink: IP tunnel dst address not specified [ 1779.848012][T25598] bridge0: port 2(bridge_slave_1) entered blocking state [ 1779.857619][T25598] bridge0: port 2(bridge_slave_1) entered disabled state [ 1779.870160][T25598] bridge_slave_1: entered allmulticast mode [ 1779.889496][T25598] bridge_slave_1: entered promiscuous mode [ 1780.068206][T25598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1780.389741][T25598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1780.552336][T19136] bond4: (slave bridge3): failed to get link speed/duplex [ 1781.254287][ T5625] Bluetooth: hci5: command tx timeout [ 1781.260519][T25696] kAFS: unable to lookup cell '(,cL' [ 1781.332933][T19466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1781.402965][T25696] lo speed is unknown, defaulting to 1000 [ 1781.409541][T25696] wg1 speed is unknown, defaulting to 1000 [ 1781.492235][T14795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1781.502392][T25598] team0: Port device team_slave_0 added [ 1781.512321][T25598] team0: Port device team_slave_1 added [ 1781.861780][T25707] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1782.029543][T25709] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1782.736391][T14795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1782.950032][ T8267] bond4: (slave bridge3): failed to get link speed/duplex [ 1782.999953][T25598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1783.019580][T25598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1783.089588][ T8267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1783.111194][T25598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1783.207876][T25598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1783.259388][T25598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1783.287180][T19460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1783.295320][T19460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1783.348757][T25598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1783.535759][T25598] hsr_slave_0: entered promiscuous mode [ 1783.549111][T25598] hsr_slave_1: entered promiscuous mode [ 1783.556156][T25598] debugfs: 'hsr0' already exists in 'hsr' [ 1783.576143][T25598] Cannot create hsr debugfs directory [ 1783.591180][T19467] bond4: (slave bridge3): failed to get link speed/duplex [ 1783.841671][T19467] bond4: (slave bridge3): failed to get link speed/duplex [ 1783.951504][T19460] bond4: (slave bridge3): failed to get link speed/duplex [ 1784.282439][T19460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1784.901408][T25598] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1785.009012][T25598] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1785.681166][T25748] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1786.317654][T14795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1786.700454][T25752] SELinux: Context system_u:object_r:mtrr_device_t:s0 is not valid (left unmapped). [ 1786.754287][ T30] audit: type=1400 audit(1786.485:3137): avc: denied { relabelfrom } for pid=25749 comm="syz.1.5133" name="PPPOL2TP" dev="sockfs" ino=96084 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1786.904109][T25753] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5133'. [ 1787.279584][ T8282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1787.625006][ T30] audit: type=1400 audit(1786.505:3138): avc: denied { relabelto } for pid=25749 comm="syz.1.5133" name="PPPOL2TP" dev="sockfs" ino=96084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=pppox_socket permissive=1 trawcon="system_u:object_r:mtrr_device_t:s0" [ 1787.891601][T19467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1788.022445][T25753] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1788.031858][T25753] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1788.035382][T25752] lo speed is unknown, defaulting to 1000 [ 1788.041481][T25753] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1788.060388][T25752] wg1 speed is unknown, defaulting to 1000 [ 1788.112090][T14795] net_ratelimit: 1 callbacks suppressed [ 1788.112109][T14795] bond4: (slave bridge3): failed to get link speed/duplex [ 1788.217561][T25598] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1788.229884][T25598] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1788.451908][T19471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1788.546033][T19467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1788.609918][T25735] syz.2.5131 (25735): drop_caches: 2 [ 1788.643241][T14795] bond4: (slave bridge3): failed to get link speed/duplex [ 1788.674432][T25598] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1788.684639][T25598] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1788.762379][T19467] bond4: (slave bridge3): failed to get link speed/duplex [ 1788.960280][T25598] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1788.970609][T25598] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1789.014928][T14795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1789.061201][T14810] bond4: (slave bridge3): failed to get link speed/duplex [ 1789.285775][T25763] overlayfs: failed to resolve './file1': -2 [ 1790.172827][ T30] audit: type=1326 audit(1789.125:3139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25757 comm="syz.9.5134" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7bab79ce59 code=0x0 [ 1790.210117][T19460] bond4: (slave bridge3): failed to get link speed/duplex [ 1790.375184][T14795] bond4: (slave bridge3): failed to get link speed/duplex [ 1791.004009][T19460] bond4: (slave bridge3): failed to get link speed/duplex [ 1791.236340][T25779] lo speed is unknown, defaulting to 1000 [ 1791.431416][T25779] wg1 speed is unknown, defaulting to 1000 [ 1791.573846][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.818418][T25598] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1791.850358][T25598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1791.870665][T25598] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1791.885844][T25598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1791.895870][T25598] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1791.909900][T25598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1791.921776][T25598] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1791.936487][T25598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1792.426698][T25803] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5139'. [ 1793.149545][ T30] audit: type=1400 audit(1792.935:3140): avc: denied { create } for pid=25804 comm="syz.9.5143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1793.192598][T19468] net_ratelimit: 7 callbacks suppressed [ 1793.192610][T19468] bond4: (slave bridge3): failed to get link speed/duplex [ 1793.396192][T19460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1793.496291][ T8267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1794.133170][T19468] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1794.141903][ T30] audit: type=1400 audit(1792.965:3141): avc: denied { write } for pid=25804 comm="syz.9.5143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1794.166526][T19468] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1794.383060][T25598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1795.008168][T14789] bond4: (slave bridge3): failed to get link speed/duplex [ 1795.033532][T25598] 8021q: adding VLAN 0 to HW filter on device team0 [ 1795.066871][T14789] bridge0: port 1(bridge_slave_0) entered blocking state [ 1795.074090][T14789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1795.143048][T14793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1795.232268][T19471] bridge0: port 2(bridge_slave_1) entered blocking state [ 1795.239406][T19471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1795.781197][T19460] bond4: (slave bridge3): failed to get link speed/duplex [ 1795.921680][T19468] bond4: (slave bridge3): failed to get link speed/duplex [ 1796.048360][T14795] bond4: (slave bridge3): failed to get link speed/duplex [ 1798.276063][ T8270] net_ratelimit: 8 callbacks suppressed [ 1798.276077][ T8270] bond4: (slave bridge3): failed to get link speed/duplex [ 1798.454284][T19466] bond4: (slave bridge3): failed to get link speed/duplex [ 1798.591500][ T8270] bond4: (slave bridge3): failed to get link speed/duplex [ 1798.824382][T19460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1799.159256][T14795] bond4: (slave bridge3): failed to get link speed/duplex [ 1799.242805][T15038] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1799.279038][T25860] loop5: detected capacity change from 0 to 2640 [ 1799.288133][T25860] buffer_io_error: 6 callbacks suppressed [ 1799.288163][T25860] Buffer I/O error on dev loop5, logical block 0, async page read [ 1799.302593][T25860] Buffer I/O error on dev loop5, logical block 0, async page read [ 1799.311005][T25860] Buffer I/O error on dev loop5, logical block 0, async page read [ 1799.319371][T25860] Buffer I/O error on dev loop5, logical block 0, async page read [ 1799.327597][T25860] Buffer I/O error on dev loop5, logical block 0, async page read [ 1799.336663][T25860] Buffer I/O error on dev loop5, logical block 0, async page read [ 1799.345335][T25860] Buffer I/O error on dev loop5, logical block 0, async page read [ 1799.353577][T25860] Buffer I/O error on dev loop5, logical block 0, async page read [ 1799.362122][T25860] ldm_validate_partition_table(): Disk read failed. [ 1799.369227][T25860] Buffer I/O error on dev loop5, logical block 0, async page read [ 1799.377794][T25860] Buffer I/O error on dev loop5, logical block 0, async page read [ 1799.386663][T25860] Dev loop5: unable to read RDB block 0 [ 1799.394163][T25860] loop5: unable to read partition table [ 1799.400759][T25860] loop_reread_partitions: partition scan of loop5 (3 ) failed (rc=-5) [ 1799.477060][T19468] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1799.791935][T14810] bond4: (slave bridge3): failed to get link speed/duplex [ 1799.983582][T19136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1799.993086][T14795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1800.001636][ T8276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1800.497974][T25598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1800.611498][T15038] usb 3-1: Using ep0 maxpacket: 16 [ 1800.676127][T25598] veth0_vlan: entered promiscuous mode [ 1800.690067][T25598] veth1_vlan: entered promiscuous mode [ 1800.717152][T25598] veth0_macvtap: entered promiscuous mode [ 1800.727416][T25598] veth1_macvtap: entered promiscuous mode [ 1801.269410][T15038] usb 3-1: config 0 has an invalid descriptor of length 96, skipping remainder of the config [ 1801.291157][T15038] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1801.319828][T15038] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 175, changing to 11 [ 1801.350218][T25598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1801.362360][T25598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1802.142103][T15038] usb 3-1: string descriptor 0 read error: -71 [ 1802.188832][T15038] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1802.280487][T15038] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1802.291420][T15038] usb 3-1: config 0 descriptor?? [ 1802.297109][T15038] usb 3-1: can't set config #0, error -71 [ 1802.306115][T15038] usb 3-1: USB disconnect, device number 54 [ 1802.340621][T25869] Can't find a SQUASHFS superblock on nullb0 [ 1802.352804][ T8270] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1802.414111][T25875] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22 [ 1802.427824][T25875] netdevsim netdevsim9: Direct firmware load for . failed with error -22 [ 1802.428033][ T8270] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1802.446781][T25875] netdevsim netdevsim9: Falling back to sysfs fallback for: . [ 1803.101825][ T8270] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1803.711754][T19471] net_ratelimit: 6 callbacks suppressed [ 1803.711775][T19471] bond4: (slave bridge3): failed to get link speed/duplex [ 1803.853342][ T8270] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1803.995012][ T8267] bond4: (slave bridge3): failed to get link speed/duplex [ 1804.118155][T25894] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1804.162523][T19466] bond4: (slave bridge3): failed to get link speed/duplex [ 1804.202444][ T8267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1804.212002][T14789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1805.551900][ T8282] bond4: (slave bridge3): failed to get link speed/duplex [ 1805.589767][ T8270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1805.620235][ T8270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1805.652878][T19136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1805.663027][T19467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1805.674372][ T8282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1805.686680][T19471] bond4: (slave bridge3): failed to get link speed/duplex [ 1805.773577][ T8282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1805.816818][ T8282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1807.060929][T25926] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5105'. [ 1807.216435][T25928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5105'. [ 1807.228789][T15037] usb 3-1: new low-speed USB device number 55 using dummy_hcd [ 1807.272675][T25928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5105'. [ 1807.525648][ T30] audit: type=1400 audit(1807.305:3142): avc: denied { create } for pid=25923 comm="syz.0.5105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 1808.750273][ T7225] net_ratelimit: 20 callbacks suppressed [ 1808.750310][ T7225] bond4: (slave bridge3): failed to get link speed/duplex [ 1809.449785][T14789] bond4: (slave bridge3): failed to get link speed/duplex [ 1809.795847][T14795] bond4: (slave bridge3): failed to get link speed/duplex [ 1810.246886][ T30] audit: type=1400 audit(1810.025:3143): avc: denied { write } for pid=5614 comm="syz-executor" name="995" dev="tmpfs" ino=5284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 1810.295195][ T7225] bond4: (slave bridge3): failed to get link speed/duplex [ 1810.441299][ T7225] bond4: (slave bridge3): failed to get link speed/duplex [ 1810.495350][ T30] audit: type=1400 audit(1810.025:3144): avc: denied { write } for pid=5614 comm="syz-executor" name="995" dev="tmpfs" ino=5284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 1810.989560][T19471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1810.998713][T19466] bond4: (slave bridge3): failed to get link speed/duplex [ 1811.093751][ T30] audit: type=1400 audit(1810.025:3145): avc: denied { write } for pid=5614 comm="syz-executor" name="995" dev="tmpfs" ino=5284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 1811.139226][T19471] bond4: (slave bridge3): failed to get link speed/duplex [ 1811.161909][ T30] audit: type=1400 audit(1810.065:3146): avc: denied { write } for pid=5614 comm="syz-executor" name="995" dev="tmpfs" ino=5284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 1811.321176][T19460] bond4: (slave bridge3): failed to get link speed/duplex [ 1811.416458][T19460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1811.483031][T25965] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1813.579983][T25973] trusted_key: encrypted_key: master key parameter 'uefa' is invalid [ 1813.811830][ T8270] net_ratelimit: 12 callbacks suppressed [ 1813.811849][ T8270] bond4: (slave bridge3): failed to get link speed/duplex [ 1813.994297][ T8270] bond4: (slave bridge3): failed to get link speed/duplex [ 1814.026974][ T30] audit: type=1400 audit(1813.805:3147): avc: denied { nlmsg_read } for pid=25975 comm="syz.2.5180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1814.131314][T19460] bond4: (slave bridge3): failed to get link speed/duplex [ 1814.188862][T25371] libceph: connect (1)[c::]:6789 error -101 [ 1814.220731][T25371] libceph: mon0 (1)[c::]:6789 connect error [ 1814.346834][T25986] lo speed is unknown, defaulting to 1000 [ 1814.356957][ T8276] bond4: (slave bridge3): failed to get link speed/duplex [ 1814.536943][T25991] /dev/nullb0: Can't lookup blockdev [ 1814.634745][T18402] libceph: connect (1)[c::]:6789 error -101 [ 1814.768519][T18402] libceph: mon0 (1)[c::]:6789 connect error [ 1814.818047][T25993] (syz.9.5182,25993,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1814.826972][T25993] (syz.9.5182,25993,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 1815.478419][T18402] libceph: connect (1)[c::]:6789 error -101 [ 1815.488984][T25986] wg1 speed is unknown, defaulting to 1000 [ 1815.503762][T25983] ceph: No mds server is up or the cluster is laggy [ 1815.505792][T18402] libceph: mon0 (1)[c::]:6789 connect error [ 1815.828947][T14795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1816.471441][ T8276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1816.532687][T19460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1816.613044][ T8276] bond4: (slave bridge3): failed to get link speed/duplex [ 1816.741904][T19471] bond4: (slave bridge3): failed to get link speed/duplex [ 1816.831266][ T7745] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 1816.924113][ T8276] bond4: (slave bridge3): failed to get link speed/duplex [ 1817.002056][T26020] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5187'. [ 1817.556821][T26023] lo speed is unknown, defaulting to 1000 [ 1817.563948][T26023] wg1 speed is unknown, defaulting to 1000 [ 1818.068978][ T30] audit: type=1400 audit(1817.855:3148): avc: denied { write } for pid=20656 comm="syz-executor" name="223" dev="tmpfs" ino=1206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 1818.106449][ T30] audit: type=1400 audit(1817.855:3149): avc: denied { write } for pid=20656 comm="syz-executor" name="223" dev="tmpfs" ino=1206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 1818.169287][ T30] audit: type=1400 audit(1817.895:3150): avc: denied { write } for pid=20656 comm="syz-executor" name="223" dev="tmpfs" ino=1206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 1818.196456][ T30] audit: type=1400 audit(1817.895:3151): avc: denied { write } for pid=20656 comm="syz-executor" name="223" dev="tmpfs" ino=1206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 1818.300713][T26032] trusted_key: encrypted_key: master key parameter 'uefa' is invalid [ 1818.826848][T19466] net_ratelimit: 10 callbacks suppressed [ 1818.826869][T19466] bond4: (slave bridge3): failed to get link speed/duplex [ 1819.363114][ T8270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1819.856684][T19471] bond4: (slave bridge3): failed to get link speed/duplex [ 1820.230240][ T8282] bond4: (slave bridge3): failed to get link speed/duplex [ 1820.422751][T26054] input: syz1 as /devices/virtual/input/input39 [ 1820.544819][ T8276] bond4: (slave bridge3): failed to get link speed/duplex [ 1820.893958][ T8276] bond4: (slave bridge3): failed to get link speed/duplex [ 1821.117942][ T8276] bond4: (slave bridge3): failed to get link speed/duplex [ 1821.408356][T14795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1821.421904][ T8282] bond4: (slave bridge3): failed to get link speed/duplex [ 1821.662577][T19466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1821.747440][ T30] audit: type=1400 audit(1821.475:3152): avc: denied { nlmsg_write } for pid=26057 comm="syz.5.5198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1822.103826][T26074] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1822.246157][T26080] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1823.134223][T26092] trusted_key: encrypted_key: master key parameter 'uefa' is invalid [ 1823.920128][T14795] net_ratelimit: 20 callbacks suppressed [ 1823.920166][T14795] bond4: (slave bridge3): failed to get link speed/duplex [ 1824.440382][T26103] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 1824.473762][T14795] bond4: (slave bridge3): failed to get link speed/duplex [ 1824.639214][T19471] bond4: (slave bridge3): failed to get link speed/duplex [ 1824.686118][ T30] audit: type=1400 audit(1824.475:3153): avc: denied { ioctl } for pid=26104 comm="syz.5.5205" path="socket:[99475]" dev="sockfs" ino=99475 ioctlcmd=0x586b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1824.833868][T14797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1824.899374][T14797] bond4: (slave bridge3): failed to get link speed/duplex [ 1825.067657][T19471] bond4: (slave bridge3): failed to get link speed/duplex [ 1825.297489][ T7225] bond4: (slave bridge3): failed to get link speed/duplex [ 1825.632647][T14789] bond4: (slave bridge3): failed to get link speed/duplex [ 1825.923920][T14795] bond4: (slave bridge3): failed to get link speed/duplex [ 1826.770932][ T8276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1826.850220][ T30] audit: type=1400 audit(1826.625:3154): avc: denied { compute_member } for pid=26119 comm="syz.9.5209" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1828.145492][T26138] trusted_key: encrypted_key: master key parameter 'uefa' is invalid [ 1828.952324][T14789] net_ratelimit: 20 callbacks suppressed [ 1828.952344][T14789] bond4: (slave bridge3): failed to get link speed/duplex [ 1829.151398][T14789] bond4: (slave bridge3): failed to get link speed/duplex [ 1829.303034][ T8276] bond4: (slave bridge3): failed to get link speed/duplex [ 1829.471387][T14789] bond4: (slave bridge3): failed to get link speed/duplex [ 1829.631523][ T8282] bond4: (slave bridge3): failed to get link speed/duplex [ 1829.643401][T19466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1829.811610][T14789] bond4: (slave bridge3): failed to get link speed/duplex [ 1829.958508][T14789] bond4: (slave bridge3): failed to get link speed/duplex [ 1829.983609][T26146] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1830.140536][T14789] bond4: (slave bridge3): failed to get link speed/duplex [ 1830.431872][ T8282] bond4: (slave bridge3): failed to get link speed/duplex [ 1831.061306][T15038] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1831.546122][T26164] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5220'. [ 1831.611534][T15038] usb 3-1: Using ep0 maxpacket: 16 [ 1831.680912][T15038] usb 3-1: config 0 has an invalid descriptor of length 96, skipping remainder of the config [ 1831.849258][T15038] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1832.016398][T15038] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 175, changing to 11 [ 1832.186854][T15038] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1832.270825][T15038] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1832.372224][T15038] usb 3-1: Product: syz [ 1832.455188][T15038] usb 3-1: Manufacturer: syz [ 1832.510628][T15038] usb 3-1: SerialNumber: syz [ 1832.664082][T15038] usb 3-1: config 0 descriptor?? [ 1834.400132][T15038] appledisplay 3-1:0.0: Error while getting initial brightness: -110 [ 1834.407563][T19471] net_ratelimit: 23 callbacks suppressed [ 1834.407584][T19471] bond4: (slave bridge3): failed to get link speed/duplex [ 1834.495366][T15038] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -110 [ 1834.666007][T19136] bond4: (slave bridge3): failed to get link speed/duplex [ 1835.288126][T26198] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1835.637817][T15038] usb 3-1: USB disconnect, device number 56 [ 1835.656041][T14789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1835.679286][T26190] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1835.751289][ T8270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1835.852705][T14797] bond4: (slave bridge3): failed to get link speed/duplex [ 1835.961536][T14797] bond4: (slave bridge3): failed to get link speed/duplex [ 1836.653534][ T8267] bond4: (slave bridge3): failed to get link speed/duplex [ 1836.792302][T14789] bond4: (slave bridge3): failed to get link speed/duplex [ 1837.108410][T19466] bond4: (slave bridge3): failed to get link speed/duplex [ 1838.231144][ T7745] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1838.431153][ T7745] usb 10-1: Using ep0 maxpacket: 32 [ 1838.654337][ T7745] usb 10-1: config 0 has an invalid interface number: 132 but max is 0 [ 1838.690928][ T7745] usb 10-1: config 0 has no interface number 0 [ 1838.728849][ T7745] usb 10-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1838.823460][ T7745] usb 10-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1838.885770][ T7745] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1838.899922][ T7745] usb 10-1: Product: syz [ 1838.904905][ T7745] usb 10-1: Manufacturer: syz [ 1838.916162][ T7745] usb 10-1: SerialNumber: syz [ 1838.975561][ T7745] usb 10-1: config 0 descriptor?? [ 1839.046356][ T7745] em28xx 10-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1839.170653][ T7745] em28xx 10-1:0.132: Video interface 132 found: [ 1839.824256][ T7745] em28xx 10-1:0.132: unknown em28xx chip ID (0) [ 1839.828976][T19466] net_ratelimit: 21 callbacks suppressed [ 1839.828993][T19466] bond4: (slave bridge3): failed to get link speed/duplex [ 1839.851266][T19136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1840.042327][T19466] bond4: (slave bridge3): failed to get link speed/duplex [ 1840.193131][T14789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1840.201609][T19136] bond4: (slave bridge3): failed to get link speed/duplex [ 1840.252168][T26224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1840.308748][T26224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1840.391328][T19466] bond4: (slave bridge3): failed to get link speed/duplex [ 1840.432396][ T7745] em28xx 10-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 1840.484859][T26248] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1840.498829][ T7745] em28xx 10-1:0.132: board has no eeprom [ 1840.561251][T19466] bond4: (slave bridge3): failed to get link speed/duplex [ 1840.778063][ T7745] em28xx 10-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1840.809722][ T7745] em28xx 10-1:0.132: analog set to bulk mode. [ 1840.816028][ T8267] bond4: (slave bridge3): failed to get link speed/duplex [ 1840.831526][T18402] em28xx 10-1:0.132: Registering V4L2 extension [ 1840.849940][T26224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1841.020422][T26259] cgroup: Invalid name [ 1841.296538][T26224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1841.332211][T19136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1841.362545][T19466] bond4: (slave bridge3): failed to get link speed/duplex [ 1841.740484][T26224] trusted_key: encrypted_key: insufficient parameters specified [ 1842.370702][T26269] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1842.387328][T26269] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1842.397998][T26269] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1842.705202][T25371] usb 10-1: USB disconnect, device number 23 [ 1842.875588][T25371] em28xx 10-1:0.132: Disconnecting em28xx [ 1842.885166][T18402] em28xx 10-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1844.555902][T18402] em28xx 10-1:0.132: Config register raw data: 0xffffffed [ 1844.569455][T18402] em28xx 10-1:0.132: AC97 chip type couldn't be determined [ 1844.616133][T18402] em28xx 10-1:0.132: No AC97 audio processor [ 1844.894699][T19136] net_ratelimit: 18 callbacks suppressed [ 1844.894720][T19136] bond4: (slave bridge3): failed to get link speed/duplex [ 1844.943055][T19471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1844.943464][T18402] usb 10-1: Decoder not found [ 1845.038391][T18402] em28xx 10-1:0.132: failed to create media graph [ 1845.101788][T18402] em28xx 10-1:0.132: V4L2 device video103 deregistered [ 1845.126880][T19471] bond4: (slave bridge3): failed to get link speed/duplex [ 1845.581502][ T8267] bond4: (slave bridge3): failed to get link speed/duplex [ 1845.693339][T19136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1845.754028][T14789] bond4: (slave bridge3): failed to get link speed/duplex [ 1845.861873][T18402] em28xx 10-1:0.132: Remote control support is not available for this card. [ 1845.876326][T26290] ================================================================== [ 1845.884387][T26290] BUG: KASAN: slab-use-after-free in v4l2_open+0x351/0x490 [ 1845.891571][T26290] Read of size 4 at addr ffff888066bc0860 by task v4l_id/26290 [ 1845.899085][T26290] [ 1845.901392][T26290] CPU: 1 UID: 0 PID: 26290 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 1845.901411][T26290] Tainted: [L]=SOFTLOCKUP [ 1845.901415][T26290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1845.901423][T26290] Call Trace: [ 1845.901428][T26290] [ 1845.901433][T26290] dump_stack_lvl+0x100/0x190 [ 1845.901450][T26290] print_report+0x13d/0x4b0 [ 1845.901467][T26290] ? __virt_addr_valid+0x239/0x430 [ 1845.901480][T26290] ? v4l2_open+0x351/0x490 [ 1845.901495][T26290] kasan_report+0xdf/0x1d0 [ 1845.901509][T26290] ? v4l2_open+0x351/0x490 [ 1845.901526][T26290] v4l2_open+0x351/0x490 [ 1845.901540][T26290] ? __pfx_v4l2_open+0x10/0x10 [ 1845.901556][T26290] chrdev_open+0x234/0x6a0 [ 1845.901572][T26290] ? __pfx_chrdev_open+0x10/0x10 [ 1845.901586][T26290] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1845.901608][T26290] do_dentry_open+0x6ab/0x14d0 [ 1845.901621][T26290] ? __pfx_chrdev_open+0x10/0x10 [ 1845.901637][T26290] vfs_open+0x82/0x3f0 [ 1845.901654][T26290] path_openat+0x208c/0x31a0 [ 1845.901672][T26290] ? __pfx_path_openat+0x10/0x10 [ 1845.901689][T26290] do_file_open+0x20e/0x430 [ 1845.901704][T26290] ? __pfx_do_file_open+0x10/0x10 [ 1845.901725][T26290] ? alloc_fd+0x476/0x790 [ 1845.901741][T26290] ? do_getname+0x191/0x390 [ 1845.901759][T26290] do_sys_openat2+0x10d/0x1e0 [ 1845.901776][T26290] ? __pfx_do_sys_openat2+0x10/0x10 [ 1845.901791][T26290] ? lapic_next_event+0x10/0x20 [ 1845.901808][T26290] __x64_sys_openat+0x12d/0x210 [ 1845.901825][T26290] ? __pfx___x64_sys_openat+0x10/0x10 [ 1845.901842][T26290] ? do_raw_spin_unlock+0x145/0x1e0 [ 1845.901859][T26290] ? rcu_is_watching+0x12/0xc0 [ 1845.901877][T26290] do_syscall_64+0x115/0x870 [ 1845.901893][T26290] ? clear_bhb_loop+0x40/0x90 [ 1845.901906][T26290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1845.901919][T26290] RIP: 0033:0x7f7ada8a7407 [ 1845.901929][T26290] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1845.901940][T26290] RSP: 002b:00007fff311d0d50 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1845.901952][T26290] RAX: ffffffffffffffda RBX: 00007f7adafe4880 RCX: 00007f7ada8a7407 [ 1845.901960][T26290] RDX: 0000000000000000 RSI: 00007fff311d2f17 RDI: ffffffffffffff9c [ 1845.901968][T26290] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1845.901975][T26290] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1845.901982][T26290] R13: 00007fff311d0fa0 R14: 00007f7adb14b000 R15: 000055bd385274d8 [ 1845.901994][T26290] [ 1845.901998][T26290] [ 1846.152966][T26290] Allocated by task 18402: [ 1846.157353][T26290] kasan_save_stack+0x30/0x50 [ 1846.162004][T26290] kasan_save_track+0x14/0x30 [ 1846.166659][T26290] __kasan_kmalloc+0xaa/0xb0 [ 1846.171237][T26290] em28xx_v4l2_init.cold+0x94/0x3a40 [ 1846.176493][T26290] em28xx_init_extension+0x13a/0x200 [ 1846.181766][T26290] request_module_async+0x61/0x80 [ 1846.186769][T26290] process_one_work+0xa0e/0x1980 [ 1846.191682][T26290] worker_thread+0x5ef/0xe50 [ 1846.196243][T26290] kthread+0x370/0x450 [ 1846.200282][T26290] ret_from_fork+0x72b/0xd50 [ 1846.204855][T26290] ret_from_fork_asm+0x1a/0x30 [ 1846.209595][T26290] [ 1846.211891][T26290] Freed by task 18402: [ 1846.215929][T26290] kasan_save_stack+0x30/0x50 [ 1846.220578][T26290] kasan_save_track+0x14/0x30 [ 1846.225226][T26290] kasan_save_free_info+0x3b/0x70 [ 1846.230229][T26290] __kasan_slab_free+0x5f/0x80 [ 1846.234965][T26290] kfree+0x223/0x6c0 [ 1846.238839][T26290] kref_put.isra.0+0x53/0x75 [ 1846.243400][T26290] em28xx_v4l2_init.cold+0x280/0x3a40 [ 1846.248749][T26290] em28xx_init_extension+0x13a/0x200 [ 1846.254014][T26290] request_module_async+0x61/0x80 [ 1846.259015][T26290] process_one_work+0xa0e/0x1980 [ 1846.263926][T26290] worker_thread+0x5ef/0xe50 [ 1846.268490][T26290] kthread+0x370/0x450 [ 1846.272537][T26290] ret_from_fork+0x72b/0xd50 [ 1846.277102][T26290] ret_from_fork_asm+0x1a/0x30 [ 1846.281841][T26290] [ 1846.284135][T26290] The buggy address belongs to the object at ffff888066bc0000 [ 1846.284135][T26290] which belongs to the cache kmalloc-8k of size 8192 [ 1846.298156][T26290] The buggy address is located 2144 bytes inside of [ 1846.298156][T26290] freed 8192-byte region [ffff888066bc0000, ffff888066bc2000) [ 1846.312102][T26290] [ 1846.314399][T26290] The buggy address belongs to the physical page: [ 1846.320777][T26290] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x66bc0 [ 1846.329517][T26290] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1846.337984][T26290] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1846.345505][T26290] page_type: f5(slab) [ 1846.349465][T26290] raw: 00fff00000000040 ffff88813fe2f280 dead000000000100 dead000000000122 [ 1846.358028][T26290] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 1846.366584][T26290] head: 00fff00000000040 ffff88813fe2f280 dead000000000100 dead000000000122 [ 1846.375226][T26290] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 1846.383875][T26290] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1846.392522][T26290] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1846.401164][T26290] page dumped because: kasan: bad access detected [ 1846.407573][T26290] page_owner tracks the page as allocated [ 1846.413259][T26290] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 16363, tgid 16363 (syz-executor), ts 746533880111, free_ts 746318617908 [ 1846.434764][T26290] post_alloc_hook+0xfd/0x120 [ 1846.439424][T26290] get_page_from_freelist+0x11a6/0x3410 [ 1846.444947][T26290] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 1846.450818][T26290] new_slab+0xa6/0x6c0 [ 1846.451881][T22908] Bluetooth: hci5: command 0x0405 tx timeout [ 1846.454862][T26290] refill_objects+0x277/0x420 [ 1846.454894][T26290] __pcs_replace_empty_main+0x375/0x650 [ 1846.471005][T26290] __kvmalloc_node_noprof+0x7da/0xa00 [ 1846.476370][T26290] pfifo_fast_init+0x177/0x3b0 [ 1846.481116][T26290] qdisc_create_dflt+0x128/0x4b0 [ 1846.486030][T26290] dev_activate+0x64f/0xce0 [ 1846.490504][T26290] __dev_open+0x490/0x8f0 [ 1846.494805][T26290] __dev_change_flags+0x596/0x850 [ 1846.499803][T26290] netif_change_flags+0x8d/0x160 [ 1846.504726][T26290] do_setlink.isra.0+0x1ac4/0x3e60 [ 1846.509819][T26290] rtnl_newlink+0x11c2/0x2380 [ 1846.514472][T26290] rtnetlink_rcv_msg+0x95e/0xe90 [ 1846.519380][T26290] page last free pid 16484 tgid 16484 stack trace: [ 1846.525847][T26290] __free_frozen_pages+0x794/0x10a0 [ 1846.531037][T26290] qlist_free_all+0x47/0xf0 [ 1846.535539][T26290] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1846.540984][T26290] __kasan_slab_alloc+0x69/0x90 [ 1846.545817][T26290] kmem_cache_alloc_lru_noprof+0x246/0x6e0 [ 1846.551603][T26290] __d_alloc+0x34/0xa40 [ 1846.555735][T26290] d_alloc_parallel+0x111/0x14e0 [ 1846.560642][T26290] __lookup_slow+0x193/0x460 [ 1846.565208][T26290] lookup_slow+0x50/0x70 [ 1846.569427][T26290] link_path_walk+0x1712/0x1cc0 [ 1846.574247][T26290] path_openat+0x1be/0x31a0 [ 1846.578723][T26290] do_file_open+0x20e/0x430 [ 1846.583200][T26290] do_sys_openat2+0x10d/0x1e0 [ 1846.587854][T26290] __x64_sys_openat+0x12d/0x210 [ 1846.592696][T26290] do_syscall_64+0x115/0x870 [ 1846.597262][T26290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1846.603131][T26290] [ 1846.605427][T26290] Memory state around the buggy address: [ 1846.611029][T26290] ffff888066bc0700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1846.619074][T26290] ffff888066bc0780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1846.627107][T26290] >ffff888066bc0800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1846.635134][T26290] ^ [ 1846.642298][T26290] ffff888066bc0880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1846.650346][T26290] ffff888066bc0900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1846.658396][T26290] ================================================================== [ 1846.671520][T25371] em28xx 10-1:0.132: Closing input extension [ 1846.783951][T19136] bond4: (slave bridge3): failed to get link speed/duplex [ 1846.994218][T19136] bond4: (slave bridge3): failed to get link speed/duplex [ 1847.161737][T14789] bond4: (slave bridge3): failed to get link speed/duplex [ 1847.275864][T14789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1847.340719][T25371] em28xx 10-1:0.132: Freeing device [ 1847.586230][T26290] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1847.593459][T26290] CPU: 1 UID: 0 PID: 26290 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 1847.604051][T26290] Tainted: [L]=SOFTLOCKUP [ 1847.608371][T26290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1847.618419][T26290] Call Trace: [ 1847.621675][T26290] [ 1847.624583][T26290] dump_stack_lvl+0x100/0x190 [ 1847.629238][T26290] vpanic+0x552/0x970 [ 1847.633195][T26290] ? __pfx_vpanic+0x10/0x10 [ 1847.637673][T26290] ? v4l2_open+0x351/0x490 [ 1847.642072][T26290] panic+0xd1/0xe0 [ 1847.645790][T26290] ? __pfx_panic+0x10/0x10 [ 1847.650203][T26290] ? v4l2_open+0x351/0x490 [ 1847.654625][T26290] ? preempt_schedule_common+0x42/0xc0 [ 1847.660086][T26290] ? check_panic_on_warn+0x1f/0x90 [ 1847.665176][T26290] check_panic_on_warn.cold+0x19/0x34 [ 1847.670523][T26290] end_report.part.0+0x3a/0x90 [ 1847.675268][T26290] kasan_report.cold+0xe/0x18 [ 1847.679931][T26290] ? v4l2_open+0x351/0x490 [ 1847.684331][T26290] v4l2_open+0x351/0x490 [ 1847.688566][T26290] ? __pfx_v4l2_open+0x10/0x10 [ 1847.693335][T26290] chrdev_open+0x234/0x6a0 [ 1847.697744][T26290] ? __pfx_chrdev_open+0x10/0x10 [ 1847.702669][T26290] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1847.708992][T26290] do_dentry_open+0x6ab/0x14d0 [ 1847.713741][T26290] ? __pfx_chrdev_open+0x10/0x10 [ 1847.718668][T26290] vfs_open+0x82/0x3f0 [ 1847.722730][T26290] path_openat+0x208c/0x31a0 [ 1847.727317][T26290] ? __pfx_path_openat+0x10/0x10 [ 1847.732248][T26290] do_file_open+0x20e/0x430 [ 1847.736743][T26290] ? __pfx_do_file_open+0x10/0x10 [ 1847.741766][T26290] ? alloc_fd+0x476/0x790 [ 1847.746083][T26290] ? do_getname+0x191/0x390 [ 1847.750580][T26290] do_sys_openat2+0x10d/0x1e0 [ 1847.755252][T26290] ? __pfx_do_sys_openat2+0x10/0x10 [ 1847.760443][T26290] ? lapic_next_event+0x10/0x20 [ 1847.765287][T26290] __x64_sys_openat+0x12d/0x210 [ 1847.770131][T26290] ? __pfx___x64_sys_openat+0x10/0x10 [ 1847.775495][T26290] ? do_raw_spin_unlock+0x145/0x1e0 [ 1847.780684][T26290] ? rcu_is_watching+0x12/0xc0 [ 1847.785440][T26290] do_syscall_64+0x115/0x870 [ 1847.790020][T26290] ? clear_bhb_loop+0x40/0x90 [ 1847.794683][T26290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1847.800558][T26290] RIP: 0033:0x7f7ada8a7407 [ 1847.804958][T26290] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1847.824547][T26290] RSP: 002b:00007fff311d0d50 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1847.832944][T26290] RAX: ffffffffffffffda RBX: 00007f7adafe4880 RCX: 00007f7ada8a7407 [ 1847.840897][T26290] RDX: 0000000000000000 RSI: 00007fff311d2f17 RDI: ffffffffffffff9c [ 1847.848857][T26290] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1847.856830][T26290] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1847.864799][T26290] R13: 00007fff311d0fa0 R14: 00007f7adb14b000 R15: 000055bd385274d8 [ 1847.872775][T26290] [ 1847.876012][T26290] Kernel Offset: disabled [ 1847.880313][T26290] Rebooting in 86400 seconds..