last executing test programs: 6m16.736917301s ago: executing program 3 (id=1167): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) preadv(r0, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x4000) 6m16.39053244s ago: executing program 3 (id=1169): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYRESOCT], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)='4', 0xf4240}], 0xb, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c035010000000f300f20d835000000370f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec8ec02d1aa80000460f1c460041ae", 0x41}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f00000002c0)={0x79, 0x0, 0x493}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 6m14.254881418s ago: executing program 3 (id=1177): fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x1, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x82) chdir(&(0x7f00000001c0)='./bus\x00') r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r2, &(0x7f0000000000), 0x4000}]) bind$phonet(r1, &(0x7f0000000040)={0x23, 0x4, 0x1, 0xdf}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtaction={0x78, 0x30, 0xffff, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ife={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x0, 0x0, 0x100, 0x400}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfc}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 6m12.350132115s ago: executing program 3 (id=1184): pipe(0x0) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x1, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000240)='.\x00', 0x82) chdir(&(0x7f00000001c0)='./bus\x00') creat(&(0x7f0000000200)='./file0\x00', 0x0) io_setup(0x200, &(0x7f0000000140)) socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r2, &(0x7f0000000040)={0x23, 0x14}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x30, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1e, 0x0, 0x0, @binary}, @nested={0x18, 0x9, 0x0, 0x1, [@typed={0x14, 0xae, 0x0, 0x0, @ipv6=@local}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 6m10.238121289s ago: executing program 3 (id=1191): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001140)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000001140)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x0) write(r0, &(0x7f00000013c0)="210a02bf0300000000000000941eda550004000000000000bdbc002014f3f680bb93c9a42492971024f9d27fff5e813c03003a78c4747f69deb92a46f627d70058042d444262534bf53be151f9395f04757995226d7087a5ffae83824ad63beb807dae997d180fd97ac0e93bfd4e022a09bf2eacd8328039d85f84b04dff860d1d3e5937c8665bb9acf1ac010db458033fed7e799146aa67bc1644e4501439609c742ddd066e279ddfc21cab48e721dab731731f8e5af0919e568041e09eb1a5b868109640c6a4a8947f52653a0a94de03", 0xd1) socket$kcm(0x23, 0x5, 0x0) (async) r1 = socket$kcm(0x23, 0x5, 0x0) listen(r1, 0x800) (async) listen(r1, 0x800) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x13, 0x0, 0x0, 0x0, 0x9d1, 0x0, 0x0, 0x40f00, 0x78, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000010c0)={0x80000005, 0x6, 0x101, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r3, 0x0}]) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff2424852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff0e0b5a293e3877adc1660edbc9a0307a25720a70e419dc44febf7ddc73fd4a5a0b6c28667f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x90) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000001080)='./proc\x00', &(0x7f0000000040)='autofs\x00', 0x100801, &(0x7f0000000400)) chdir(&(0x7f0000001180)='./proc\x00') (async) chdir(&(0x7f0000001180)='./proc\x00') r5 = open(&(0x7f0000001040)='./proc\x00', 0x80000, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0xc0049364, &(0x7f0000000180)) listen(r0, 0x1003f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() (async) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000005, 0x11, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x8810) (async) sendmsg$key(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x8810) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002fdfcfa8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c5402050000000000000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002fdfcfa8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c5402050000000000000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0) 6m9.948885557s ago: executing program 3 (id=1194): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x13, 0x200, &(0x7f00000003c0)="1ae19327aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a730909000000fd1bd24b7ffc8c1ece85108c1331c774d299a25a70745096cb268cbc6070d680e1be250700f758d02ae11ef24171ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c536689a4a62f872f9ca3b86cf3c645413f4afbcea0c99ded703499d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fadc02f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d1b8186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f95555a5ca6fdf75b86ea6171b046b856168f403b5253a5c0500430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f91ffffffffd51cfd73c1e06fba0900000000000000f95d242d6d05be2ce34dccd6005e944afa92b22ec9a698469c6ece06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a2a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fc5b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176d31b2db18dba54991a9553cedb7f585786388d400600000000000000a1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe021c773a6664b66ae04aa62c564d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000004000000000f800"}) r1 = socket(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x2, 0x8, 0x6, 0x1, 0x6}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x1, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_procfs$pagemap(0x0, 0x0) lseek(r2, 0x40, 0x1) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xd4}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6b00}, 0x80) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x48080}, 0x20004450) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) listen(0xffffffffffffffff, 0x0) syz_usbip_server_init(0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x5, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x20000402, r5}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r5, 0x0, 0x0}, 0x20) 5m59.656335072s ago: executing program 2 (id=1223): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="14001f0010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) 5m59.364018665s ago: executing program 2 (id=1224): r0 = syz_open_dev$vbi(&(0x7f0000000180), 0x0, 0x2) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) prctl$PR_SCHED_CORE(0x3e, 0x3, r1, 0x2, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000006) fcntl$setownex(r4, 0xf, &(0x7f0000000040)={0x0, r1}) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r5, 0x0, 0xffffffffffffff9c, 0x0, 0x267) 5m59.243907836s ago: executing program 2 (id=1225): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000140)=ANY=[@ANYBLOB="12015001000000106b1d010140000102030109029a00030100e0000904000000010100000a24010000000201020c240200000000000e0000000524050000082404030f8bf8ae0c240701050000c80975f9070d24070101000005cf1f0000050924030000000001"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x2c93a000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x10ac9, &(0x7f0000000040)={0x0, 0xa5df, 0x20, 0x2, 0x11b}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r3, &(0x7f00000021c0)={0x1f, 0xd3, @any, 0x3}, 0xe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f00000000c0)=0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 5m55.857571838s ago: executing program 2 (id=1243): io_uring_setup(0x178e, &(0x7f0000000300)={0x0, 0x1443, 0x8, 0xfffffffe, 0xc}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) pipe(0x0) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) openat$rfkill(0xffffffffffffff9c, 0x0, 0x3818c1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000001c0)={0x28, 0x4, r2, 0x0, &(0x7f00007d4000/0x4000)=nil, 0x4000, 0x4000000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f00000002c0)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x48c000, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x2, 0x80805, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x8000000000000001, 0x7d, 0x0, 0x800, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xfffffffffffffeff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) 5m54.888931611s ago: executing program 2 (id=1246): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8013}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m54.861293251s ago: executing program 32 (id=1194): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x13, 0x200, &(0x7f00000003c0)="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"}) r1 = socket(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x2, 0x8, 0x6, 0x1, 0x6}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x1, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_procfs$pagemap(0x0, 0x0) lseek(r2, 0x40, 0x1) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xd4}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6b00}, 0x80) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x48080}, 0x20004450) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) listen(0xffffffffffffffff, 0x0) syz_usbip_server_init(0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x5, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x20000402, r5}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r5, 0x0, 0x0}, 0x20) 5m54.787078496s ago: executing program 2 (id=1248): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @private=0xa010101}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @multicast1}, {0x0, 0x17c1, 0x8}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000df000000bfa300000000000007030000f0ffffff720af0fff8ffffff71a4f0ff000000005d040200000000000d400500000000004704000001ed000062030000000000003f440000000000007a0a00fe00ffffffd703000040000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a1074649c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c0dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6acdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fed000000007baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca485683252b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a0032f37ff559be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee07751532d5e7d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e2fa3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef907000000f01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e015cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb581012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a0000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x45, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000000c000000bca30000000000002403000020feffff620af8fff8ffffff71a4f8ff000000001f03000000000000e5000300000000002604fdffff02000014010000033800001d130000000000007a0af8ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f7"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000180), 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000000000000000000200000009000200737900640000000008000440000000000900010073797a30000000000800034000000001"], 0x64}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r4, &(0x7f0000000280)=ANY=[@ANYRESOCT=r2, @ANYRESDEC=0x0, @ANYRES8=r3, @ANYRES8, @ANYRESHEX=r1], 0x33) sendfile(r4, r3, 0x0, 0x10000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000200000006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1ad}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYRES64=r8], 0x10) mkdir(&(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040110750050000010200010902"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/usb/devices\x00', 0x0, 0x0) read$FUSE(r9, &(0x7f0000000440)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x38, r6, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x20000000) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000005000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 5m39.705325244s ago: executing program 33 (id=1248): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @private=0xa010101}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @multicast1}, {0x0, 0x17c1, 0x8}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000df000000bfa300000000000007030000f0ffffff720af0fff8ffffff71a4f0ff000000005d040200000000000d400500000000004704000001ed000062030000000000003f440000000000007a0a00fe00ffffffd703000040000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a1074649c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c0dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6acdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fed000000007baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca485683252b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a0032f37ff559be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee07751532d5e7d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e2fa3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef907000000f01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e015cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb581012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a0000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x45, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000180), 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000000000000000000200000009000200737900640000000008000440000000000900010073797a30000000000800034000000001"], 0x64}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r4, &(0x7f0000000280)=ANY=[@ANYRESOCT=r2, @ANYRESDEC=0x0, @ANYRES8=r3, @ANYRES8, @ANYRESHEX=r1], 0x33) sendfile(r4, r3, 0x0, 0x10000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000200000006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1ad}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYRES64=r8], 0x10) mkdir(&(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040110750050000010200010902"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/usb/devices\x00', 0x0, 0x0) read$FUSE(r9, &(0x7f0000000440)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x38, r6, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x20000000) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000005000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 10.950186163s ago: executing program 5 (id=2478): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2653c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) getsockopt(r1, 0x8, 0x0, &(0x7f00000002c0)=""/84, &(0x7f0000000340)=0x54) r2 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x6, 0x2, 0x3, 0x177}, &(0x7f0000ffe000), &(0x7f0000ffe000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x2, &(0x7f0000000180), 0xfe) r3 = epoll_create1(0x0) syz_clone3(&(0x7f0000000080)={0x20901400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xe000200d}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00003b2000/0x4000)=nil) r5 = io_uring_setup(0x185c, &(0x7f0000000080)={0x0, 0x3c4b, 0x0, 0x0, 0x34a}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) epoll_pwait(r3, &(0x7f0000000000)=[{}], 0x1, 0xa19, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000aaaaaaaaaabb08004500005a0000000000019078ac1e0001ac1414aa030490781200183f25000000fffe0000000100007f000001ac1414aa"], 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r8, 0x0) preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_usb_connect$uac3(0x0, 0xa0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') 8.830631013s ago: executing program 0 (id=2489): fsopen(&(0x7f0000000080)='autofs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x1, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x82) chdir(&(0x7f00000001c0)='./bus\x00') r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r2, &(0x7f0000000000), 0x4000}]) bind$phonet(r1, &(0x7f0000000040)={0x23, 0x4, 0x1, 0xdf}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtaction={0x14, 0x30, 0xffff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 7.628485728s ago: executing program 0 (id=2495): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) syz_usb_connect(0x6, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r2, @ANYBLOB="0d01000000000000000000000000000000000000787173dbd37137cd734d24be2c5aeee54086cc14e7ee26bbb52e94fc468d2a2aa80d87530ac29bdb4f80ee53c592742690d42ed4220165495d7165da00bdcf0bade81898478d21728dfd7f79980052c2a14e1b65a50ad85ef1dcc7ff0b8a49192b2048c9baf89f5034bc", @ANYRES32=r4, @ANYRES32, @ANYBLOB="03000000040000000200"/28], 0x50) r5 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x8000fb00) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip6erspan0\x00'}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) 7.322339527s ago: executing program 5 (id=2496): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x104085280, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000017dcb4401e040c4098af000000010902120001000000000904"], 0x0) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') read$FUSE(r5, &(0x7f0000000340)={0x2020}, 0x2020) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000240)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000200)={{0xffffffffffffffff, &(0x7f0000000000)='/,\x00', 0x100, &(0x7f0000000040)={@_ha_fsid={[0x3ff, 0x80000001]}, {0x5, 0x9, 0xb3, 0x6}}, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x45ac}, {[0x9, 0x800, 0x1, 0x6]}, 0x4, 0x0, 0x0}) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 5.836319782s ago: executing program 0 (id=2500): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2653c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) getsockopt(r1, 0x8, 0x0, &(0x7f00000002c0)=""/84, &(0x7f0000000340)=0x54) r2 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x6, 0x2, 0x3, 0x177}, &(0x7f0000ffe000), &(0x7f0000ffe000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x2, &(0x7f0000000180), 0xfe) r3 = epoll_create1(0x0) syz_clone3(&(0x7f0000000080)={0x20901400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xe000200d}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00003b2000/0x4000)=nil) r5 = io_uring_setup(0x185c, &(0x7f0000000080)={0x0, 0x3c4b, 0x0, 0x0, 0x34a}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) epoll_pwait(r3, &(0x7f0000000000)=[{}], 0x1, 0xa19, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000aaaaaaaaaabb08004500005a0000000000019078ac1e0001ac1414aa030490781200183f25000000fffe0000000100007f000001ac1414aa"], 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r8, 0x0) preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r8, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x14, 0xa, 0xb9, 0x0, 0x7, 0x10000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_connect$uac3(0x0, 0xa0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') 5.508106013s ago: executing program 4 (id=2503): sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='vegas', 0x5) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="89000000120081ae08060cdc030000fe7f03446b000000000001ffca1bdcfdd9fb0024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000600)="11d6cb557c849601b143d4f4f2fe4b15f1b62db6", 0x14}], 0x2}, 0x4000000) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0xfffffffffffffe50, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="840100001800ff0300000000fbdbe0251d010900500012804c00f88046004680acc71d958e7a34640dcf53c7ef4014e029622ecea4265925177a480e4e3d23180fbf878b1957d36c5250d315341fdcb2b86bfb163bbaaf7381a195d01c3051bc9d300000200106801c80"], 0x184}, 0x1, 0x0, 0x0, 0x4045}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.stat\x00', 0x275a, 0x0) fchmod(r4, 0x20049549e2a2d659) write$FUSE_GETXATTR(r4, &(0x7f0000000000)={0x18, 0xfffffffffffffffe, 0x0, {0x7}}, 0x28) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r3], 0x60}, 0x1, 0x0, 0x0, 0x10000082}, 0x41) 5.111713303s ago: executing program 4 (id=2505): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRES8=r0, @ANYBLOB="c8a4ae4af254ae317685f788868f4486610146070374a1d7cd0805efaf40710627e12c", @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRES32, @ANYRES64=r0, @ANYRESHEX=r0, @ANYRES8=r0, @ANYBLOB="04d242e237a420050911b726cb47bb0d7c6647abc060500bd0d5adc8849d26e3d295b57b64026310635c027d50f99749593499b3fabe3224b66bffe249b16f463d0391b75d83c867c239c82538206d7e9eacd4f00fdd0c9215825a2955e10e2bec748b77e49b7c9e6cd250c57970d82766b6bd2bf822238e984119bb5e473e22"], 0x2c}}, 0x2404c894) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = gettid() bpf$MAP_CREATE(0x300000000000011, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r1, @ANYBLOB="000000000000000040000000d77e1ecbeb4dff4ddd1ce528bce90000000000000000315d399f9a3b55f6788fc9d4cd73fe9e6d34646b08d15f25cb8bbfbed314fcd5f3a99aeea2aeb6ad0f3be83bd01599a340d6f687657cf813c3179a28e7e52296060000007642e24e0c5e593933da", @ANYRESDEC, @ANYRESOCT=r1, @ANYBLOB="024000006d76b15b46c73c90b3004773df8a00000000c40400"/44], 0x48) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x1) r3 = fsopen(&(0x7f0000000440)='coda\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x10140, 0x0) ioctl$TIOCSCTTY(r4, 0xc01070ce, 0x7) r5 = fsmount(r3, 0x1, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x1, 0x4) write$sysctl(r5, &(0x7f0000000040)='7\x00', 0x0) openat$sndseq(0xffffff9c, &(0x7f0000000180), 0x723780) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) munlockall() r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 4.960290201s ago: executing program 6 (id=2506): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) socket$pppoe(0x18, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x4004001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r5, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap0 8'], 0xa) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000}) r6 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) 4.21570813s ago: executing program 4 (id=2507): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}], 0x1}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f00000000c0)="400f31660fc735d9a9c99b66450ff4c766460f38822d14000000363e460f01c326260f013e6526470fae6e9866410fc4cc00b9a7030000b8071f0000ba000000000f3066baf80cb8ec470989ef66bafc0c66b83bf466ef"}], 0x18, 0x9, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000d80)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000180)=@newqdisc={0x24, 0x28, 0x701, 0x4003, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x2, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x1}}}, 0x24}}, 0x4000080) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@TCA_RATE={0x6, 0x5, {0xd, 0x2}}, @qdisc_kind_options=@q_mq={0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x40, 0x7, 0xfffffff9, 0x3, {{0x11, 0x4, 0x2, 0x3b, 0x44, 0x66, 0x0, 0x4, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@ssrr={0x89, 0x1b, 0xc, [@multicast1, @rand_addr=0x64010102, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @rand_addr=0x64010101]}, @lsrr={0x83, 0x13, 0xf4, [@rand_addr=0x64010100, @empty, @multicast1, @remote]}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000400)={'tunl0\x00', &(0x7f00000006c0)={'syztnl2\x00', r6, 0x8, 0x7840, 0x7, 0x9, {{0xc, 0x4, 0x0, 0x6, 0x30, 0x67, 0x0, 0x9, 0x29, 0x0, @broadcast, @loopback, {[@timestamp_addr={0x44, 0x14, 0x5f, 0x1, 0x6, [{@remote, 0x10000}, {@remote, 0x4}]}, @ssrr={0x89, 0x7, 0x2, [@multicast2]}]}}}}}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r15, r14, 0x25, 0x0, @void}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x8, 0x9, 0x0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x20, 0x3, 0x4}}) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000880)=ANY=[@ANYBLOB="34020000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf25170000003800018008000100", @ANYRES32=0x0, @ANYBLOB="080003000300000008000300020000001400020070696d7265673000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000100", @ANYRES32=0x0, @ANYBLOB="3000018008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f766972745f776966690008000100", @ANYRES32=0x0, @ANYBLOB="0800030003000000180001801400020076657468305f746f5f626174616476004c00018008000100", @ANYRES32=0x0, @ANYBLOB="1400020069705f7674693000000000000000000008000300020000000a000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="14000200776732000000000000000000000000003400018008000100", @ANYRES32=0x0, @ANYBLOB="140002006d616373656330000000000000000000140002006e7230000000000000000000000000003000018008000100", @ANYRES32=0x0, @ANYBLOB="0800030003000000080003000200000014000200626f6e6430000000000000000000000050000180140002007465616d30000000000000000000000008000100", @ANYRES32=r10, @ANYRESDEC=r0, @ANYRES32=r11, @ANYBLOB="580001800800030003000000140002006970365f76746930000000000000000008000300040000000800030003000000080003000100000008000100", @ANYRES32=r12, @ANYBLOB="080003000000000008000100", @ANYRES32=r14, @ANYBLOB="08000300010000003c000180140002006970766c616e300000000000000000001400020065727370616e3000000000000000000008000100", @ANYRES32=r16, @ANYBLOB="08000300360d684b"], 0x234}}, 0xc010) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.159453262s ago: executing program 5 (id=2508): fsopen(&(0x7f0000000080)='autofs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x1, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x82) chdir(&(0x7f00000001c0)='./bus\x00') r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r2, &(0x7f0000000000), 0x4000}]) bind$phonet(r1, &(0x7f0000000040)={0x23, 0x4, 0x1, 0xdf}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtaction={0x18, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 4.049734516s ago: executing program 6 (id=2509): fcntl$notify(0xffffffffffffffff, 0x402, 0xe3969fb6f74ff6e3) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000000)="470f005b150f07450f0114b95b0200000f32450fafe60f01c864410f3266baf80cb804842581ef66bafc0c66b8a33066efb9800000c00f3235000100000f30b8299ff688ef66bafc0cb097eec4a32d380900", 0x52}], 0x1, 0x14, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.683939116s ago: executing program 1 (id=2510): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, 0x0) 3.534780923s ago: executing program 1 (id=2511): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000108feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000002f1c060008001b00000000001c0016801800018014000b00330005dc"], 0x44}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) readahead(r0, 0xd458, 0x10000a) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r4 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e999000000000000000000000000000000000000ffffac1414bbac1414aa00000000000000000000000000000400100000000a00201084000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000008000000000000000000000000000000000000000000ff07000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000001000000aa09"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}, 0x1, 0x300}, 0x0) fsetxattr$security_capability(r4, &(0x7f0000000080), 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) r7 = openat(r6, &(0x7f0000000240)='.\x00', 0x129000, 0xe) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r7, 0xc0185879, &(0x7f0000000200)={@id={0x2, 0x0, @d}}) getsockopt$IP_SET_OP_GET_BYINDEX(r5, 0x1, 0x53, &(0x7f0000000100)={0x7, 0x7, 0x1}, &(0x7f0000000140)=0x28) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000480)=@gcm_128={{0x304}, "f342e7d65b3e3566", "5e4cc230bbc1f28dca4b96fe0fe73a61", "56edca69", "ac90df382b491a8f"}, 0x28) sendmmsg$inet6(r3, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[], 0x18}}], 0x1, 0x40) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) 3.533700498s ago: executing program 4 (id=2512): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x905, 0x10000) sysfs$2(0x2, 0x2, &(0x7f0000000340)=""/178) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000200)) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$XFS_IOC_FSGEOMETRY(r1, 0x8100587e, &(0x7f00000004c0)) getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000279000/0x4000)=nil, 0x4000}}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)=[0x0, 0x0], &(0x7f0000000300), 0x0, 0x2, 0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000040)={0x0, r5, r4}) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x3, 0x400, @remote, 0x9}, 0x1c) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) r7 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14, 0x800) socket$igmp6(0xa, 0x3, 0x2) accept4$packet(r7, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000600)=0x14, 0x40800) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) 3.400067835s ago: executing program 6 (id=2513): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) ppoll(&(0x7f00000001c0)=[{r0, 0x8a6b6feb38288eb0}], 0x1, &(0x7f0000000240), 0x0, 0x0) 3.184559156s ago: executing program 5 (id=2514): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x49, 0x8a}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000300)={@local, 0x3ff, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x20) ioctl$OCFS2_IOC_GROUP_ADD64(r0, 0x40186f03, &(0x7f0000000240)={0x8, 0x5, 0xb, 0x8}) 2.579303101s ago: executing program 6 (id=2515): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000200000005"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) 2.556113764s ago: executing program 4 (id=2516): socket$nl_generic(0x10, 0x3, 0x10) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000580)="140000001600f963d25a80648456dc921f6b718d", 0x14}], 0x1}, 0x804) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xffffffff, 0x8000000008000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x5, 0xa, 0x42, 0x40, 0xc0, 0xffffffffffffffff, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r7}, 0x38) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003}, 0x38) r8 = fsopen(&(0x7f0000000040)='fusectl\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 2.179609808s ago: executing program 1 (id=2517): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000380)) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0x29}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'das16m1\x00', [0x100, 0x7, 0x4, 0x2, 0x5, 0x200, 0xb3, 0x20000010, 0x800, 0xb, 0x0, 0xfffffffe, 0x1, 0x3ff, 0x10001, 0x1, 0xfffffffd, 0x8, 0xfe9, 0x401, 0x3, 0x2, 0x7, 0x9, 0x48, 0x0, 0x7, 0x6a7a, 0x9, 0x7, 0x8]}) 2.179087054s ago: executing program 6 (id=2518): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000600)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x12, &(0x7f00000006c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0xd1, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000009c0)={'ip6_vti0\x00', &(0x7f0000000940)={'ip6tnl0\x00', 0x0, 0x4, 0xc, 0x3, 0x6, 0x40, @mcast2, @mcast1, 0x8, 0x7, 0x3ff, 0x8d5}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000a00)={0x11, 0x0, 0x0}, &(0x7f0000000a40)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000b00)={'syztnl2\x00', &(0x7f0000000a80)={'syztnl0\x00', 0x0, 0x4, 0x10, 0x5, 0x10001, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x10, 0x20, 0x7, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000bc0)={'ip_vti0\x00', &(0x7f0000000b40)={'sit0\x00', 0x0, 0x7, 0x1, 0x6, 0x3, {{0xb, 0x4, 0x1, 0x4, 0x2c, 0x66, 0x0, 0x40, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@timestamp={0x44, 0x10, 0x65, 0x0, 0x1, [0x40, 0x1, 0x1ff]}, @ssrr={0x89, 0x7, 0x2e, [@multicast2]}]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000e00)={0x160, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x4}, 0x80) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r5, 0x0) sendto$inet_nvme_of_msg(r5, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f00000002c0)={0x3, 0x4}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xeee7, 0x1000, 0x0, 0x2cc}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0xa, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x9d3}}}, 0x0) mq_timedsend(r6, 0x0, 0x0, 0xa, 0x0) mq_timedreceive(r6, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) getdents64(r11, 0x0, 0x0) 2.1514569s ago: executing program 0 (id=2519): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1500}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_TYPE={0x5}}}}]}, 0x38}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mydev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000300)={0x1, 0x2}) io_setup(0x8, 0x0) io_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000140), 0x1, 0x2) r6 = dup(r5) read(r6, &(0x7f0000000040), 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0106401, &(0x7f0000000280)={0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mydev/ttyS0\x00', 0x802, 0x0) ioctl$TIOCMSET(r7, 0x5418, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 2.036514957s ago: executing program 5 (id=2520): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff1}, {0x0, 0xffff}, {0xa, 0xfffa}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x1, "531303c8e6158eb6c30c33d810d86aff"}}}, @qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3, 0xd0ae}}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1000}]}, 0x70}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000180)="221b2b57e1b0963c39dd24326f6a3fc09366e4cd67515006400e8196fd78c3f0b51006f528b30bfc12cee9134a151266c23b1c150b4314bf3717a696b0d6638df1f537885caeb093eacc3bbddbcda76a18004ae1b32cc458003e0c3e8d133ca384df38efd98ffc59f29775dc5f2c4fcb40986b2ed53bd4", 0x77}, {&(0x7f00000002c0)="a9833529350c257bf074ddcd392b541b7394156fe6fc700082e90f0c2a613ee707605ca25623483409ea8b1101bc9b50537eb32a1fef19cb34e276a99191bb779e54e965c06698a6e83673363ec692438adf3f7129f153ab0ebf6438675e7114d7dfd51aafaa9684be6dddcab04895947f47d1d990c690df6f70fe38265e9ed5e52b03ead55847275be9e1326743142ff0a8a82836ab04193bb0060c80e005841cdfd3af8e393bd3f9a42b7c", 0xac}, {&(0x7f0000000380)="1e69dae47004943ee893e95cb62a9134c2eb20c8380ed419717d8adb7c08fe7fd48d5d13d6d8", 0x26}], 0x3) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x24040084) openat$kvm(0xffffffffffffff9c, 0x0, 0x515000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000002500)=[{{&(0x7f0000000440)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/21, 0x15}, {&(0x7f0000000780)=""/1, 0x1}, {&(0x7f00000007c0)=""/83, 0x53}, {&(0x7f0000000840)=""/166, 0xa6}, {&(0x7f0000000900)=""/229, 0xe5}], 0x5, &(0x7f0000001300)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000002300)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000002480)=[{&(0x7f0000002380)=""/214, 0xd6}], 0x0, &(0x7f00000024c0)=""/53, 0x35}, 0x6}], 0x2, 0x12001, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="60010000100001000000000800000000ac1e0001000000000000000000000000fc01000000000000000000000000000100000000000000000000200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x160}}, 0x0) pwritev(r3, &(0x7f0000000700)=[{&(0x7f0000000540)="618a2ba9f8d784efc857b9268bd4e1f60a04fa8fa0dac9cb889043bc5768dd49935ce25e971874862595daecc62de19690498efe7c9e0db12c4f31771701d228f78dcf1782b5799d170555aa4c6f6209a9138ac060ac6b5256aa607baa7d2a050dc1c0e6eace602ee5dae63f94f97d7a19ba84183cc8bd1705c52ced9c431b24c57fc5a132fa6f56aafa8273b138104916b5d303194a882549f55aa15fff2742c6c038ab1d9f17e299c19ba10eacfd774efb057ecdfa747d8e0a937c8f97866a6d", 0xc1}, {&(0x7f0000000640)="336bf02b360dcb7ff4b32901e65f81b6bd4a4e771e4ddc866eabd71c7b19b4d63390639345af5c1c77d1c8b6a1f4bd1d9dea65749f1ea54b9646cd2edcd0d34bfa265d87d05db861fd44916065e56a6498d2668048baee2e03ea0031c14a9c65be75159d2b123dec408d911356b8d7d3d274e5adb27ab14d80dc9dc893004a10e88bab38126b3738d774a4284b40c1d9020ec77a59b255a828ff9982f8c2debfa2d655fce31122fed093e2ea6ca6", 0xae}], 0x2, 0x0, 0x7ff) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000080)={0x2000000, 0x0, 0x0, 0x1, 0x4000003}) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xf00, 0x480, 0x1, 0x1, 0xd59f7d, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0xf, 0xd1, 0xc, 0x30, {0x8, 0xfffffff7}, 0xd0, 0x9}}) 1.90446707s ago: executing program 1 (id=2521): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, 0x0) 1.887635649s ago: executing program 1 (id=2522): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) r3 = open(&(0x7f00000003c0)='.\x00', 0x0, 0x166) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0xa9525000) chmod(&(0x7f0000000040)='.\x00', 0x35e) 1.632542874s ago: executing program 6 (id=2523): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) syz_usb_connect(0x6, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0d01000000000000000000000000000000000000787173dbd37137cd734d24be2c5aeee54086cc14e7ee26bbb52e94fc468d2a2aa80d87530ac29bdb4f80ee53c592742690d42ed4220165495d7165da00bdcf0bade81898478d21728dfd7f79980052c2a14e1b65a50ad85ef1dcc7ff0b8a49192b2048c9baf89f5034bc", @ANYRES32=r4, @ANYRES32, @ANYBLOB="03000000040000000200"/28], 0x50) r5 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r2, r5, 0x0, 0x8000fb00) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'ip6erspan0\x00'}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) 1.129259236s ago: executing program 4 (id=2524): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0700000004000000080000000280000000000000", @ANYBLOB="713e0019cb240d57f86b0000004000"/25, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) 943.782397ms ago: executing program 5 (id=2525): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = inotify_init() sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x40881, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r9, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r10, r10, 0x19, 0x0, @val=@netfilter={0x0, 0x0, 0x6}}, 0x20) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="330e7997c7e85f005f4c6f41bb0f13b99500fb0e6ab6de27957cb1b1f408939272d8f787e4bb3d34ce3150f3d3630a78ce29ad0ce81f2693c0b0885f86a07ef40e6ae49a708f51f8487b62370849f38fb43c2a4a605a02338606cd6898ae9d45e8fcd06fdd12d2ec9306d30ad29384bbb229af2b512df3fbff7d4619b6670caca345ea42e994211917ba6248ce4a58115d9c6c56e45c0d0d477efda5c3bf386e26904d45530541c2ee0893c39c0625c6861443b33b1167244ce6a7d23f4d70e47129e367a65f9f97dc7408d644273f4de68a9aaddc7c781a98663ca4d1bec8128afdb5e55624d32902ae1438a244b836a31c788725490771db99b56aecaa139b1f85ea3b4d118c6351f7c8d56a1cb341904809fa522042b9e3699705021db5485149ecc1a2bbb12499f9767cfc7189480f88d6c78e7a34275aae8ae03aacbc121e42f0b0d78431689df11f5d1e27021062a462555277510ba1b851f7787339319a415bc3a4d9f818dffd931e318086afdd33b42cf4c4b3fcab96e29f9b391c361a77a27f0137df70696a690a42e98a4a33386a7d69fe9fbec0369b0686285857244ac7b16e3aa2bc46e3a55a95d783e657368022f64e26eee6f5a2c4127cc032c60be89febbbdfd194268c61ef639504a543900f5a0a1fa9dd994a23d4ecdfb034a73e368bf66db99c9977d2f8423b6afa6482167d3cf2a1c14a03a34e90ec0f2ef69d66e8819080ad1c44f362af99187aff4f4b3e32eb730adf40f664e0ff5885a1f6d27e54bd60cbb7a69a6066b4b46c38fe4b7f8ad73f14ac22f39df1c721e966f77c54742309abe2fa9d889cfc925fdaf6e1c970c191f95cee452bb3ed361fdc3b293db177b05811f90c078b2dcf319550c57a83018e9591ae8826c413f888d5ba99e831f8822efc89b602a5b1eb60c7838a9e28ca9f20f1caefabc1dd98b417d2db0dbaf7e83a226ea4507ab70d944f95270c716e28c2134b3e09321d6be327a55e35c83bbaf4b90074579638725b76363acddfb6df4fda3f43c9fb1039498f8679a47b23366340e1196e2dfe3d4ca0fe23939804b437993f3a9231b162fb47a9d61cbfffe1a9550ea0aa7357732471a9d87850a5dd6654ef8341d2940a415e66f5aadecac8e713b6841da42ee5e21f4fd24ff76e56c7075c775928793fb1211e546f52b4daee29e4c43756286b3d61ee1cc65ce5fea3604de6489b381c18491644f355d41389c1315862dff57d7e28d68e4a7f6a5b1aef17fc29bcd47f181e56f2802ca89b880b0eabf9b00d23815e9c48131d595231b8dcc463beb7d02d50775a0fcf9068913f4fe917add2403c176c24535ec598a08b1ae6178aab524eef133a0104894d2656327cbe90e2fb9f97549a22e8c4e650d6589bad74cd52e9fef53872ac4f204ab8e5822c53454371b40def77433ae36cff476842c685228714516d5d35554b98ddf4d412151808987c6a9f2543ade5d64b19201c6aa51e7e0d11959458223903f3b5dee7d7d6394ed16ec1ffc987a86132378a70fd54628d2156dbc9bcb00bf03ed955ba959374a334389b9162f37624f1cc335524665661dbc8d79d57dc921be754af96e1b3b31b67945577dfc8def2c9b8963961377b1f74fa55e208e03513c08a7763de7140b81669d57d586cbd47aaffac9cc1d1f68978dbf0bd362604352b566461605116ab243241cbd1618ac480857b9c05e3f11d7840aad6ca0f1daa9a9821724559dce79eb58dbd02931fdfd5df5841d1896ad059303dcc1a6bf2e2da8d5b405f5f2d1a6d8993613c4c6f1214a891430aebfa5b448f1aaa6f2b7406dba397e2f9d419721d3b5ddecb5d185fe31bfe073081fb303eda9f6760fda19ed6bf71b755dd0194b548df744b37711443377edaf81020c9d44a133d23ffebe8434ba5b86e3aa1028c44e973ce71e8a52f796c876bf78fbb4d0a545b90439dcc339277a6ac978ac80bb34127433443e70b6b95822aecf411825d3f3441a7b0f2a84ed63a67461a9b6f47494c515fa73d6f38e39fdc1d2261d66bd92831325ae62c6f3702c52c0e587794a24da235ca6482129e00997c6960c26926969fe4ea4cf6d8e75a91826119f4068b294026290dc196c1de46c572fa3e9136ba659d1b2aed80d8084ef40ac86ca2445a256c9caabe9ff019f7308d7e92c89863f1a5ddaf61fdbf3e154a2811c869e2787007ccff21c1bb218d4b220985573c626819836f9160da8fe92b209385d8fd882c474e78f6726de584a8c7008aeeba8cc46c812afac563d2203b82d4d6c4c25677076cea2fab8d6c3d91c2b554f9a21ec91909c69a048c819f74900b26ec2f9708751ae8e653afe24ccb1697daa048994a7d38379ce9536c58643bc680435c08bbe909e32933bfd38fcad43bf14a1106fd5c4fe617c4f2793350c0579972fc3b1ba8574cb35fc45b691b8ee9214e32f9293551b2b932a87fb34c98d1f518e0065f7ed7b4048c1248920da2d61449e893097639ea9738faa04f877e8864140e8e2622e5c52a991d99da457e82a45d5f7b8129a2c8012300506b0edcb1b1d4936ac57c695d34dd99c4210668a052723fad888eb166974234017a6a33c1be13143ff587f8584ee9a1ac1854fb79c3c2a417f41e2a290551b2cd45b2c334891d4ff7d8337e96d28b086ebe1a97c764f16e3182ec0d478ec68e87405704dff1b1d76e7ce178ede1980bbc029ba5cee6c5549095aa14f1a8570b04bf4e60cce0b91594d1bc917b6e1bc44b7d792d101093818008a7e54c2eceeb2e0e30cc6080dbbddf77e6027e5f834b5e71c20c0d62eecd8d7fb8748ade2a0671f3f3e4", 0x7d0, 0x40015, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bpf$BPF_GET_PROG_INFO(0x15, &(0x7f0000000c00)={r2, 0xffffffffffffff5f, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0xd) mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x3000007, 0x401d032, 0xffffffffffffffff, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) 942.516516ms ago: executing program 0 (id=2526): gettid() openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r0 = open(&(0x7f0000000e00)='./file0\x00', 0x0, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x50000, 0x0) write$dsp(r1, &(0x7f0000000400)="ba6252e88610d36c889bd8470ac4daafd44ef210eb1fe4ebdfd62ee2ecf83a1a13d43dad4098f27ca9428b3b35ff1d059331ff869342d49adf9e00b598ec6b8b7af196a0f4dfc5ad9f5d76c1a991917b796b08f0f31dd251cb7f83713209547739a581510c47742b42788962d3007f0afd43872f0be15e9a5f5e32238acfa9bcc446e96c54ee4e96fdae9b6ab3072e127488eb9ce5aefc8a5e486a1ba790263cb71b537a9304abf91f5114150d4e5075345dab35351fba83c7aa99b9b6c7f40f12d6bb207136d54cd8e37a679509e0a7504817e30b10bf42ec9371cf11ce38ddb360c06b608ecdb100"/267, 0x98) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'gretap0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r2, 0x0, 0x20, 0x0, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x1000}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18026800700000000700000000000000980000005000f1d69d29"], 0x0, 0x0, 0x0, 0x0, 0x6dd30ecb6f81936c, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r5, 0x68, &(0x7f0000000200)}, 0x10) 106.289271ms ago: executing program 1 (id=2527): r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x6484c2, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaab0c9420343758864450000280022000000069078acd2e2954b"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) prlimit64(r0, 0xe, &(0x7f0000000140)={0xa, 0x4000004897}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @empty}], 0x10) sendto$inet6(r7, &(0x7f0000000000)="f7", 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r7, 0x84, 0x20, &(0x7f0000000180)=0xb, 0x4) recvmmsg(r7, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x143, 0x0) setns(0xc9, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)="e9", 0x2f}, 0x1, 0x0, 0x0, 0x810}, 0x24004014) fcntl$notify(r6, 0x402, 0x26) unshare(0x22020600) fcntl$notify(r6, 0x402, 0x80000042) 0s ago: executing program 0 (id=2528): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./debug\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/kvm/exits\x00', 0x0, 0x0) read(r6, 0x0, 0x0) lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0) close(0x3) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) kernel console output (not intermixed with test programs): .787747][ T5626] Bluetooth: hci5: command 0x0406 tx timeout [ 583.787834][ T5801] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 583.799941][ T5801] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 584.017850][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.258099][ T6178] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 584.270915][ T6178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.421407][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.425038][ T6206] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 584.908982][ T6179] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 584.919665][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.461350][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.857752][ T5801] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 585.858067][ T5626] Bluetooth: hci1: command 0x0406 tx timeout [ 585.864384][ T5801] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 586.077183][T10858] usb 6-1: USB disconnect, device number 10 [ 586.092291][T12887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.104966][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.133452][T12887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.342666][T12893] netlink: 'syz.5.1830': attribute type 9 has an invalid length. [ 586.383891][T12886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.400658][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.520711][ T5722] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 586.565439][T12886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.579205][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.597529][T12886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.656536][T12895] overlayfs: failed to resolve './cgroup': -2 [ 586.769241][ T5722] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.785211][ T5722] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.795352][ T5722] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 586.805077][ T5722] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.819882][ T5722] usb 1-1: config 0 descriptor?? [ 587.331003][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.360498][T12895] netlink: 'syz.4.1832': attribute type 9 has an invalid length. [ 587.753108][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.761763][ T5722] usbhid 1-1:0.0: can't add hid device: -32 [ 587.779924][ T5722] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 587.803342][T12905] netlink: 'syz.1.1834': attribute type 10 has an invalid length. [ 587.853775][T12905] ipvlan0: entered allmulticast mode [ 587.874381][T12905] veth0_vlan: entered allmulticast mode [ 587.916713][T12905] team0: Device ipvlan0 failed to register rx_handler [ 588.035687][ T46] usb 1-1: USB disconnect, device number 36 [ 588.169604][ T88] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 588.336769][T12914] overlayfs: failed to resolve './cgroup': -2 [ 588.431394][ T88] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 588.450097][ T88] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.467402][ T88] usb 6-1: config 0 descriptor?? [ 588.505939][T12919] netlink: 'syz.6.1838': attribute type 9 has an invalid length. [ 588.587788][T10858] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 588.734667][T12923] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=12923 comm=syz.0.1840 [ 588.754766][T10858] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 588.764234][T10858] usb 2-1: config 0 has no interface number 0 [ 588.770758][T10858] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 12336, setting to 64 [ 588.783847][T10858] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 588.802286][T10858] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 588.814568][T10858] usb 2-1: Manufacturer: syz [ 588.830674][T10858] usb 2-1: SerialNumber: syz [ 588.842563][T10858] usb 2-1: config 0 descriptor?? [ 589.314638][T12905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.339438][T12905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.374426][ T5722] usb 2-1: USB disconnect, device number 44 [ 589.383523][ T1174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 589.537825][ T88] ath6kl: Failed to submit usb control message: -110 [ 589.547032][ T88] ath6kl: unable to send the bmi data to the device: -110 [ 589.567751][ T88] ath6kl: Unable to send get target info: -110 [ 589.589740][ T88] ath6kl: Failed to init ath6kl core: -110 [ 589.599811][ T88] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 589.626943][T12946] netlink: 'syz.4.1845': attribute type 6 has an invalid length. [ 589.665884][ T88] usb 6-1: USB disconnect, device number 11 [ 589.838999][T12956] overlayfs: failed to resolve './cgroup': -2 [ 589.883165][T12956] netlink: 'syz.4.1848': attribute type 9 has an invalid length. [ 590.018668][ T6206] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 590.092834][ T29] audit: type=1400 audit(1785839114.885:1622): avc: denied { bind } for pid=12959 comm="syz.1.1849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 591.558326][ T88] net_ratelimit: 8 callbacks suppressed [ 591.558345][ T88] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.783144][T10858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.581443][ T5810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.218010][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.227959][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.923989][T12998] trusted_key: encrypted_key: keylen parameter is missing [ 594.192002][ T5810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.482987][ T46] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 594.679130][ T46] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 594.688171][ T46] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 594.698734][ T46] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 594.710282][ T46] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 594.731963][ T46] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 594.790027][ T46] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 594.812401][ T46] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 594.822904][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.850313][ T46] usb 7-1: Product: syz [ 594.864056][ T46] usb 7-1: Manufacturer: syz [ 594.881445][ T46] cdc_wdm 7-1:1.0: skipping garbage [ 594.891888][ T46] cdc_wdm 7-1:1.0: skipping garbage [ 594.898869][ T46] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 594.905352][ T46] cdc_wdm 7-1:1.0: Unknown control protocol [ 595.101115][T13027] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1869'. [ 595.109597][ T5801] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 595.122665][T13027] openvswitch: netlink: Flow actions attr not present in new flow. [ 595.138259][ T1174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 595.138259][ T6178] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 595.152220][ T6178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.171422][ T1174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.196423][T13027] usb usb8: usbfs: process 13027 (syz.5.1869) did not claim interface 0 before use [ 595.269292][ T5801] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 595.287795][ T5801] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 595.297303][ T29] audit: type=1400 audit(1785839120.085:1623): avc: denied { read write } for pid=13000 comm="syz.6.1861" name="cdc-wdm0" dev="devtmpfs" ino=6008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 595.318268][ T5801] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 595.334552][ T5801] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 595.393181][ T5801] usb 2-1: SerialNumber: syz [ 595.400335][ T29] audit: type=1400 audit(1785839120.085:1624): avc: denied { open } for pid=13000 comm="syz.6.1861" path="/dev/cdc-wdm0" dev="devtmpfs" ino=6008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 595.638469][ T5723] usb 7-1: USB disconnect, device number 11 [ 595.683522][ T5801] usb 2-1: 0:2 : does not exist [ 595.703186][ T5801] usb 2-1: unit 255 not found! [ 595.791975][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807b92e800: rx timeout, send abort [ 595.803016][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88807b92e800: 0x3f002: (3) A timeout occurred and this is the connection abort to close the session. [ 595.835608][T13038] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 596.068033][ T29] audit: type=1400 audit(1785839120.835:1625): avc: denied { read } for pid=4959 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 596.125654][ T29] audit: type=1400 audit(1785839120.835:1626): avc: denied { search } for pid=4959 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 596.207794][ T29] audit: type=1400 audit(1785839120.835:1627): avc: denied { append } for pid=4959 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 596.319092][ T29] audit: type=1400 audit(1785839120.835:1628): avc: denied { open } for pid=4959 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 596.422229][ T5801] usb 2-1: USB disconnect, device number 45 [ 596.513495][ T29] audit: type=1400 audit(1785839120.845:1629): avc: denied { getattr } for pid=4959 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 596.639322][T11246] udevd[11246]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 596.713577][ T29] audit: type=1326 audit(1785839121.505:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13052 comm="syz.5.1874" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ddf19e019 code=0x0 [ 597.233803][T13063] overlayfs: workdir and upperdir must reside under the same mount [ 597.299657][ T88] net_ratelimit: 7 callbacks suppressed [ 597.299671][ T88] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.858145][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.972648][ T88] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 598.507835][ T5810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.728172][ T46] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 598.775788][ T88] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 598.848609][ T88] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.871111][ T88] usb 2-1: config 0 descriptor?? [ 598.895065][T13084] netlink: 'syz.4.1885': attribute type 6 has an invalid length. [ 598.933999][ T46] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 598.979830][ T46] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 599.020110][ T46] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 599.031052][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 599.040762][ T46] usb 6-1: SerialNumber: syz [ 599.053498][T13089] netlink: 'syz.4.1886': attribute type 9 has an invalid length. [ 599.301795][T13068] team0 (unregistering): Port device team_slave_0 removed [ 599.337757][ T46] usb 6-1: 0:2 : does not exist [ 599.346620][T13068] team0 (unregistering): Port device team_slave_1 removed [ 599.354389][ T46] usb 6-1: unit 255 not found! [ 599.393308][T13094] netlink: 'syz.4.1888': attribute type 1 has an invalid length. [ 599.522332][ T46] usb 6-1: USB disconnect, device number 12 [ 599.522865][T13097] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1888'. [ 599.542182][ T5810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.622847][T11246] udevd[11246]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 599.652224][T13105] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1888'. [ 599.738981][T13105] 8021q: adding VLAN 0 to HW filter on device bond10 [ 599.742678][T13107] FAULT_INJECTION: forcing a failure. [ 599.742678][T13107] name failslab, interval 1, probability 0, space 0, times 0 [ 599.760106][T13107] CPU: 1 UID: 0 PID: 13107 Comm: syz.6.1890 Tainted: G L syzkaller #0 PREEMPT(full) [ 599.760144][T13107] Tainted: [L]=SOFTLOCKUP [ 599.760150][T13107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 599.760159][T13107] Call Trace: [ 599.760165][T13107] [ 599.760172][T13107] dump_stack_lvl+0x100/0x190 [ 599.760200][T13107] should_fail_ex.cold+0x5/0xa [ 599.760222][T13107] should_failslab+0xc2/0x120 [ 599.760243][T13107] __kmalloc_noprof+0xfc/0x820 [ 599.760262][T13107] ? tomoyo_encode2+0xfb/0x3c0 [ 599.760283][T13107] tomoyo_encode2+0xfb/0x3c0 [ 599.760304][T13107] tomoyo_encode+0x29/0x50 [ 599.760320][T13107] tomoyo_realpath_from_path+0x18c/0x690 [ 599.760344][T13107] tomoyo_check_open_permission+0x2af/0x3c0 [ 599.760371][T13107] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 599.760406][T13107] ? hook_file_open+0x24f/0x8f0 [ 599.760446][T13107] ? path_get+0x61/0x80 [ 599.760469][T13107] tomoyo_file_open+0x6b/0x90 [ 599.760491][T13107] security_file_open+0xb5/0x1e0 [ 599.760511][T13107] do_dentry_open+0x588/0x14d0 [ 599.760536][T13107] vfs_open+0x82/0x3f0 [ 599.760561][T13107] path_openat+0x2873/0x4280 [ 599.760590][T13107] ? __pfx_path_openat+0x10/0x10 [ 599.760616][T13107] do_file_open+0x20e/0x430 [ 599.760636][T13107] ? __pfx_do_file_open+0x10/0x10 [ 599.760672][T13107] ? alloc_fd+0x471/0x7a0 [ 599.760698][T13107] ? do_getname+0x191/0x390 [ 599.760723][T13107] do_sys_openat2+0x10f/0x1e0 [ 599.760746][T13107] ? __pfx_do_sys_openat2+0x10/0x10 [ 599.760777][T13107] __x64_sys_openat+0x12d/0x210 [ 599.760800][T13107] ? __pfx___x64_sys_openat+0x10/0x10 [ 599.760833][T13107] do_syscall_64+0x115/0x870 [ 599.760856][T13107] ? clear_bhb_loop+0x40/0x90 [ 599.760880][T13107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.760898][T13107] RIP: 0033:0x7f1a31b5e84e [ 599.760914][T13107] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 599.760930][T13107] RSP: 002b:00007f1a32a1cb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 599.760948][T13107] RAX: ffffffffffffffda RBX: 00007f1a32a1d6c0 RCX: 00007f1a31b5e84e [ 599.760959][T13107] RDX: 0000000000002002 RSI: 00007f1a32a1cc00 RDI: ffffffffffffff9c [ 599.760970][T13107] RBP: 00007f1a32a1cc00 R08: 0000000000000000 R09: 0000000000000000 [ 599.760979][T13107] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 599.760989][T13107] R13: 00007f1a31e26038 R14: 00007f1a31e25fa0 R15: 00007fffa2dbd428 [ 599.761014][T13107] [ 599.761153][T13107] ERROR: Out of memory at tomoyo_realpath_from_path. [ 599.838901][ T88] ath6kl: Failed to submit usb control message: -71 [ 600.097765][ T88] ath6kl: unable to send the bmi data to the device: -71 [ 600.126641][ T88] ath6kl: Unable to send get target info: -71 [ 600.190782][ T88] ath6kl: Failed to init ath6kl core: -71 [ 600.217350][ T29] audit: type=1326 audit(1785839125.005:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13108 comm="syz.5.1892" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ddf19e019 code=0x0 [ 600.231410][T13111] siw: device registration error -23 [ 600.246444][ T88] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 600.275406][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 600.286132][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.303035][ T88] usb 2-1: USB disconnect, device number 46 [ 600.581371][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.595717][T13121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.804360][T13127] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 600.855015][T13127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.866893][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.009722][ T932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.060054][ T6207] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 601.209621][T13128] netlink: 'syz.1.1896': attribute type 9 has an invalid length. [ 601.354999][ T29] audit: type=1800 audit(1785839126.145:1632): pid=13138 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1902" name="nullb0" dev="tmpfs" ino=2251 res=0 errno=0 [ 601.626508][T13145] netlink: 'syz.5.1904': attribute type 9 has an invalid length. [ 602.148070][ T88] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 602.158998][T13156] siw: device registration error -23 [ 602.300057][T13157] netlink: 277 bytes leftover after parsing attributes in process `syz.5.1908'. [ 602.358314][ T88] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 602.403434][ T88] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.548470][ T88] usb 7-1: config 0 descriptor?? [ 603.001793][ T5810] net_ratelimit: 3 callbacks suppressed [ 603.001823][ T5810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.501473][ T29] audit: type=1326 audit(1785839128.245:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13165 comm="syz.4.1911" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f38b159e019 code=0x0 [ 603.549031][ T88] ath6kl: Failed to submit usb control message: -71 [ 603.559774][ T88] ath6kl: unable to send the bmi data to the device: -71 [ 603.571532][ T88] ath6kl: Unable to send get target info: -71 [ 603.590742][ T88] ath6kl: Failed to init ath6kl core: -71 [ 603.598035][ T88] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 603.621723][ T88] usb 7-1: USB disconnect, device number 12 [ 603.908501][T13182] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 604.018593][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.026730][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.170868][T13187] netlink: 'syz.5.1916': attribute type 6 has an invalid length. [ 604.303120][T13186] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1915'. [ 605.151903][T13191] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 605.187119][T13189] lo speed is unknown, defaulting to 1000 [ 605.810738][T13191] netlink: 277 bytes leftover after parsing attributes in process `syz.6.1917'. [ 605.844227][ T5723] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 606.018243][ T587] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 606.092590][ T5723] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 607.254389][ T5723] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 607.273675][ T6207] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 607.315557][ T5723] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 607.339945][ T5723] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 607.416140][ T5723] usb 2-1: SerialNumber: syz [ 607.665924][T13209] netlink: 'syz.5.1923': attribute type 6 has an invalid length. [ 607.811358][ T5810] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 607.863160][ T5723] usb 2-1: 0:2 : does not exist [ 607.872861][ T5723] usb 2-1: unit 255 not found! [ 607.880064][T13212] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 607.941250][ T5723] usb 2-1: USB disconnect, device number 47 [ 608.014933][T13213] netlink: 277 bytes leftover after parsing attributes in process `syz.6.1924'. [ 608.030794][ T5810] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.147160][ T5810] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 608.173711][T11246] udevd[11246]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 608.246457][ T5810] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 608.375820][ T5810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.678671][ T5810] usb 1-1: config 0 descriptor?? [ 609.230000][ T5810] usbhid 1-1:0.0: can't add hid device: -32 [ 609.236003][ T5810] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 609.260523][ T932] usb 1-1: USB disconnect, device number 37 [ 609.329208][ T46] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 609.521415][ T46] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 609.530774][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.554695][ T46] usb 2-1: config 0 descriptor?? [ 609.760185][T13232] netlink: 'syz.6.1931': attribute type 1 has an invalid length. [ 609.813221][T13235] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1931'. [ 610.114052][ T29] audit: type=1400 audit(1785839134.905:1634): avc: denied { remount } for pid=13236 comm="syz.4.1933" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 610.312679][T13232] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1931'. [ 610.332130][T13232] 8021q: adding VLAN 0 to HW filter on device bond3 [ 610.521055][ T46] ath6kl: Failed to submit usb control message: -71 [ 610.626664][ T46] ath6kl: unable to send the bmi data to the device: -71 [ 610.697326][ T46] ath6kl: Unable to send get target info: -71 [ 610.874225][ T46] ath6kl: Failed to init ath6kl core: -71 [ 610.946908][ T46] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 611.035381][ T46] usb 2-1: USB disconnect, device number 48 [ 611.388963][T13254] netlink: 'syz.6.1934': attribute type 9 has an invalid length. [ 612.433152][T13271] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 612.464777][ T6207] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 612.565885][T13271] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1939'. [ 612.741003][T13279] overlayfs: failed to resolve './cgroup': -2 [ 612.870014][T13282] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 613.066874][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 613.264832][T13289] overlayfs: failed to resolve './cgroup': -2 [ 613.295916][T13289] netlink: 'syz.4.1946': attribute type 9 has an invalid length. [ 613.327740][ T5723] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 613.371056][T13292] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 613.519696][T13293] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 613.535443][T13293] netlink: 'syz.5.1948': attribute type 9 has an invalid length. [ 613.614651][T13294] netlink: 277 bytes leftover after parsing attributes in process `syz.6.1947'. [ 615.263750][ T5723] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 615.511162][ T5723] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 615.521048][ T5723] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 615.533827][ T5723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.552515][ T5723] usb 1-1: config 0 descriptor?? [ 615.559811][T13303] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1951'. [ 615.639368][T13307] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1951'. [ 615.659551][T13307] netlink: 'syz.5.1951': attribute type 3 has an invalid length. [ 615.674316][T13306] netlink: 'syz.4.1954': attribute type 6 has an invalid length. [ 615.694014][T13307] netlink: 'syz.5.1951': attribute type 5 has an invalid length. [ 615.709194][T13307] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1951'. [ 615.781335][T13307] geneve2: entered promiscuous mode [ 615.786620][T13307] geneve2: entered allmulticast mode [ 615.918678][ T48] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 47568 - 0 [ 615.927870][ T48] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 47568 - 0 [ 615.982407][ T48] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 47568 - 0 [ 616.007399][ T48] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 47568 - 0 [ 616.065412][ T5723] usbhid 1-1:0.0: can't add hid device: -32 [ 616.084407][T13318] netlink: 'syz.6.1956': attribute type 6 has an invalid length. [ 616.102166][ T5723] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 616.312624][ T5723] usb 1-1: USB disconnect, device number 38 [ 617.242289][T13332] netlink: 'syz.6.1958': attribute type 9 has an invalid length. [ 617.733183][T13337] netlink: 'syz.0.1961': attribute type 1 has an invalid length. [ 617.832162][T13340] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1961'. [ 617.885945][T13337] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1961'. [ 618.856332][ T6207] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 618.858217][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 618.881105][T13337] 8021q: adding VLAN 0 to HW filter on device bond7 [ 619.085974][ T29] audit: type=1326 audit(1785839143.875:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13347 comm="syz.1.1963" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f930799e019 code=0x0 [ 619.324324][T13356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1965'. [ 619.333926][T13356] bridge_slave_1: left allmulticast mode [ 619.339830][T13356] bridge_slave_1: left promiscuous mode [ 619.348927][T13356] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.380189][T13356] bridge_slave_0: left allmulticast mode [ 619.386488][T13356] bridge_slave_0: left promiscuous mode [ 619.394206][T13356] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.162488][T13348] Set syz1 is full, maxelem 4096 reached [ 620.600953][T13372] overlayfs: failed to resolve './cgroup': -2 [ 620.767849][ T46] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 620.824765][T13378] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 620.846292][T13376] netlink: 'syz.4.1973': attribute type 9 has an invalid length. [ 620.894350][T13378] netlink: 'syz.5.1971': attribute type 9 has an invalid length. [ 620.965996][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.998845][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 621.015103][ T46] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 621.024877][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.058982][ T46] usb 2-1: config 0 descriptor?? [ 621.727514][ T29] audit: type=1400 audit(1785839146.515:1636): avc: denied { bind } for pid=13387 comm="syz.5.1975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 621.991038][T13388] lo speed is unknown, defaulting to 1000 [ 622.153240][ T46] usbhid 2-1:0.0: can't add hid device: -32 [ 622.169309][ T46] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 622.305304][T13367] siw: device registration error -23 [ 622.343508][ T5810] usb 2-1: USB disconnect, device number 49 [ 622.439085][T13395] netlink: 'syz.0.1976': attribute type 1 has an invalid length. [ 622.515525][T13399] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1976'. [ 622.575715][T13395] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1976'. [ 622.732706][T13395] 8021q: adding VLAN 0 to HW filter on device bond8 [ 623.028714][ T29] audit: type=1800 audit(1785839147.815:1637): pid=13405 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1978" name="nullb0" dev="tmpfs" ino=2251 res=0 errno=0 [ 623.175686][ T29] audit: type=1326 audit(1785839147.965:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13408 comm="syz.5.1980" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ddf19e019 code=0x0 [ 623.942548][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.591707][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 624.611659][ T1115] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 625.098595][T13432] affs: No valid root block on device nullb0 [ 625.947858][T13441] netlink: 'syz.5.1987': attribute type 6 has an invalid length. [ 627.432979][T13450] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 627.900242][T13452] netlink: 277 bytes leftover after parsing attributes in process `syz.6.1989'. [ 628.001639][T13454] netlink: 'syz.5.1991': attribute type 1 has an invalid length. [ 628.062668][T13457] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1991'. [ 628.400064][T13460] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1991'. [ 628.545418][ T932] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 628.712847][T13458] bond1: (slave gretap1): making interface the new active one [ 628.728207][T13458] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 628.751894][T13460] 8021q: adding VLAN 0 to HW filter on device bond1 [ 628.788115][ T932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.799081][ T932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 628.825538][ T932] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 628.859614][ T29] audit: type=1400 audit(1785839153.655:1639): avc: denied { read } for pid=13462 comm="syz.5.1993" path="socket:[54496]" dev="sockfs" ino=54496 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 628.912965][ T932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.003443][ T932] usb 1-1: config 0 descriptor?? [ 629.138039][ T88] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 629.360794][ T88] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 629.372773][ T88] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 629.387425][ T88] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 629.412255][ T88] usb 6-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 629.432525][ T88] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.444431][ T29] audit: type=1326 audit(1785839154.235:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13467 comm="syz.6.1995" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a31b9e019 code=0x0 [ 629.445242][ T932] usbhid 1-1:0.0: can't add hid device: -32 [ 629.496175][ T88] usb 6-1: config 0 descriptor?? [ 629.506449][T13471] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 629.516542][T13468] Set syz1 is full, maxelem 4096 reached [ 629.524398][T13463] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 629.546473][ T932] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 629.563537][ T88] smsusb:smsusb_probe: board id=8, interface number 0 [ 629.575138][ T932] usb 1-1: USB disconnect, device number 39 [ 629.575528][T13471] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1996'. [ 629.616771][ T88] smsusb:smsusb_probe: Device initialized with return code -19 [ 629.689842][T13479] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 629.763507][T13479] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 629.778576][T13479] overlayfs: failed to look up (tracing) for ino (-66) [ 629.781083][T10858] usb 6-1: USB disconnect, device number 13 [ 631.309986][ T6208] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 631.322560][ T6206] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 631.770253][T13498] netlink: 'syz.0.2003': attribute type 1 has an invalid length. [ 631.851605][T13504] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2003'. [ 632.579313][T13512] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 632.775241][T13514] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 632.866639][T13498] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2003'. [ 632.878686][T13514] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2007'. [ 632.921576][T13498] 8021q: adding VLAN 0 to HW filter on device bond9 [ 633.832084][T13526] netlink: 'syz.0.2010': attribute type 6 has an invalid length. [ 634.332090][T13530] syz_tun: refused to change device tx_queue_len [ 634.708954][ T29] audit: type=1800 audit(1785839159.505:1641): pid=13528 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2012" name="nullb0" dev="tmpfs" ino=2251 res=0 errno=0 [ 635.427838][ T932] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 635.810065][ T932] usb 1-1: Using ep0 maxpacket: 8 [ 635.867862][ T932] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 635.939626][T13550] netlink: 'syz.1.2018': attribute type 1 has an invalid length. [ 635.963779][ T932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.074252][ T932] usb 1-1: Product: syz [ 636.099695][ T932] usb 1-1: Manufacturer: syz [ 636.122527][ T932] usb 1-1: SerialNumber: syz [ 636.150092][T13556] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2018'. [ 636.174052][ T932] usb 1-1: config 0 descriptor?? [ 636.257697][ T932] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 636.316567][ T932] pctv452e: pctv452e_power_ctrl: 1 [ 636.316567][ T932] [ 636.329261][T13557] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2018'. [ 636.361652][ T932] usb 1-1: selecting invalid altsetting 3 [ 636.380432][T13557] 8021q: adding VLAN 0 to HW filter on device bond8 [ 636.388610][ T932] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 636.388610][ T932] [ 636.434793][ T29] audit: type=1400 audit(1785839161.225:1642): avc: denied { write } for pid=13536 comm="syz.0.2015" name="cgroup.procs" dev="cgroup" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 636.439939][T13540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2015'. [ 636.479745][ T932] dvb-usb: bulk message failed: -22 (5/0) [ 636.491815][ T932] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 636.522897][ T932] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 636.614488][ T932] usb 1-1: media controller created [ 636.701205][ T932] dvb-usb: bulk message failed: -22 (8/0) [ 636.742205][ T6206] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 636.772696][ T6179] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 636.776461][ T932] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 636.826927][ T932] dvb-usb: MAC address reading failed. [ 636.956732][ T932] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 637.066042][T13564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2020'. [ 637.105481][T13564] SET target dimension over the limit! [ 637.169860][T13564] loop6: detected capacity change from 0 to 2640 [ 637.182312][T13564] buffer_io_error: 14 callbacks suppressed [ 637.182335][T13564] Buffer I/O error on dev loop6, logical block 0, async page read [ 637.233983][T13565] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 637.243853][T13565] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 637.254408][T13565] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 637.300182][T13565] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 637.322369][T13565] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 637.332431][T13565] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 637.342445][T13565] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 637.352474][T13565] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 637.370086][T13564] Buffer I/O error on dev loop6, logical block 0, async page read [ 637.378215][T13564] Buffer I/O error on dev loop6, logical block 0, async page read [ 637.386347][T13564] Buffer I/O error on dev loop6, logical block 0, async page read [ 637.394526][T13564] Buffer I/O error on dev loop6, logical block 0, async page read [ 637.406848][T13564] Buffer I/O error on dev loop6, logical block 0, async page read [ 637.415168][T13564] Buffer I/O error on dev loop6, logical block 0, async page read [ 637.423274][T13564] Buffer I/O error on dev loop6, logical block 0, async page read [ 637.431136][T13564] ldm_validate_partition_table(): Disk read failed. [ 637.438001][T13564] Buffer I/O error on dev loop6, logical block 0, async page read [ 637.446162][T13564] Buffer I/O error on dev loop6, logical block 0, async page read [ 637.454382][T13564] Dev loop6: unable to read RDB block 0 [ 637.461435][T13564] loop6: unable to read partition table [ 637.469223][T13564] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 637.900713][ T932] DVB: Unable to find symbol stb0899_attach() [ 637.916472][ T932] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 637.941886][T13577] netlink: 'syz.4.2024': attribute type 9 has an invalid length. [ 638.409630][T13581] netlink: 'syz.5.2025': attribute type 9 has an invalid length. [ 638.695115][T13582] netlink: 'syz.0.2023': attribute type 9 has an invalid length. [ 639.068054][ T5810] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 639.097883][ T932] rc_core: IR keymap rc-tt-1500 not found [ 639.103741][ T932] Registered IR keymap rc-empty [ 639.109410][ T932] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 639.121916][T13589] overlayfs: failed to resolve './cgroup': -2 [ 639.148118][ T932] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input40 [ 639.176197][ T932] dvb-usb: schedule remote query interval to 100 msecs. [ 639.204871][ T932] pctv452e: pctv452e_power_ctrl: 0 [ 639.204871][ T932] [ 639.208387][ T5810] usb 7-1: device descriptor read/64, error -71 [ 639.241294][ T932] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 639.295925][ T932] usb 1-1: USB disconnect, device number 40 [ 639.504799][ T24] dvb-usb: bulk message failed: -22 (4/0) [ 639.525099][ T24] dvb-usb: error -22 while querying for an remote control event. [ 639.534991][ T5810] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 639.656698][ T932] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 639.670192][T13603] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3800 sclass=netlink_route_socket pid=13603 comm=syz.5.2033 [ 639.687781][ T5810] usb 7-1: device descriptor read/64, error -71 [ 639.770600][T13604] affs: No valid root block on device nullb0 [ 640.365889][ T5810] usb usb7-port1: attempt power cycle [ 640.589423][T13610] netlink: 'syz.4.2035': attribute type 1 has an invalid length. [ 640.867873][ T5810] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 640.869015][T13621] netlink: 'syz.0.2038': attribute type 9 has an invalid length. [ 640.887945][T13610] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2035'. [ 641.022969][ T5810] usb 7-1: device descriptor read/8, error -71 [ 641.072279][T13615] 8021q: adding VLAN 0 to HW filter on device bond12 [ 641.085214][T13615] bond11: (slave bond12): making interface the new active one [ 641.105303][T13615] bond11: (slave bond12): Enslaving as an active interface with an up link [ 641.154704][T13610] 8021q: adding VLAN 0 to HW filter on device bond11 [ 641.281490][T13626] syzkaller0: entered promiscuous mode [ 641.292221][T13626] syzkaller0: entered allmulticast mode [ 641.503883][T13642] netlink: 'syz.0.2041': attribute type 9 has an invalid length. [ 641.514683][ T29] audit: type=1800 audit(1785839166.305:1643): pid=13640 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2044" name="nullb0" dev="tmpfs" ino=2251 res=0 errno=0 [ 641.641894][T13646] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2045'. [ 642.498207][ T6208] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 642.509478][ T6208] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 644.438555][ C0] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 644.865193][T13667] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 644.929903][T13667] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 644.941227][T13667] overlayfs: failed to look up (tracing) for ino (-66) [ 645.259473][T13645] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 645.439282][T13674] netlink: 'syz.6.2051': attribute type 1 has an invalid length. [ 645.588896][T13674] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2051'. [ 645.673951][T13678] 8021q: adding VLAN 0 to HW filter on device bond5 [ 645.686902][T13678] bond4: (slave bond5): making interface the new active one [ 645.710551][T13678] bond4: (slave bond5): Enslaving as an active interface with an up link [ 645.778761][T13694] random: crng reseeded on system resumption [ 645.818014][ T29] audit: type=1400 audit(1785839170.565:1644): avc: denied { write } for pid=13681 comm="syz.1.2054" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 646.051728][T13674] 8021q: adding VLAN 0 to HW filter on device bond4 [ 646.290980][ T29] audit: type=1400 audit(1785839171.085:1645): avc: denied { create } for pid=13697 comm="syz.6.2057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 646.460831][ T29] audit: type=1326 audit(1785839171.255:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13705 comm="syz.1.2060" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f930799e019 code=0x0 [ 646.487116][T13708] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 646.534218][T13708] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2059'. [ 646.780316][T13730] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 646.882214][T13733] overlayfs: failed to resolve './cgroup': -2 [ 646.893584][T13723] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 646.905246][T13723] overlayfs: failed to look up (tracing) for ino (-66) [ 646.951135][T13733] netlink: 'syz.4.2067': attribute type 9 has an invalid length. [ 647.353897][T13743] trusted_key: encrypted_key: master key parameter 'defaul†' is invalid [ 647.365335][T13743] random: crng reseeded on system resumption [ 647.722340][ T6208] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 647.807883][T13750] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2071'. [ 647.835387][T13752] overlayfs: failed to resolve './cgroup': -2 [ 647.878958][T13750] bond2: entered promiscuous mode [ 647.887248][T13750] 8021q: adding VLAN 0 to HW filter on device bond2 [ 647.906045][T13752] netlink: 'syz.4.2073': attribute type 9 has an invalid length. [ 648.090809][T13754] netlink: 'syz.1.2072': attribute type 9 has an invalid length. [ 648.289546][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 648.756482][T13780] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2080'. [ 648.825827][T13780] nbd: must specify a device to reconfigure [ 649.080419][T13793] trusted_key: encrypted_key: keylen parameter is missing [ 649.090539][T13793] random: crng reseeded on system resumption [ 649.159016][T13792] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2085'. [ 649.452182][T13792] fuse: Bad value for 'fd' [ 649.914007][T13805] fuse: Unknown parameter 'f' [ 650.070855][T13805] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2088'. [ 650.220155][ T88] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 650.530112][ T88] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 650.675303][ T88] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 650.685327][ T88] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 650.694955][ T88] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.706012][ T88] usb 1-1: config 0 descriptor?? [ 650.951195][ T29] audit: type=1400 audit(1785839175.735:1647): avc: denied { getattr } for pid=13795 comm="syz.4.2086" name="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 651.031856][T13830] lo speed is unknown, defaulting to 1000 [ 651.204468][ T88] usbhid 1-1:0.0: can't add hid device: -32 [ 651.216982][ T88] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 651.244788][ T88] usb 1-1: USB disconnect, device number 41 [ 651.397842][ T5723] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 651.488222][T13842] xfrm0: entered allmulticast mode [ 651.530929][T13842] binder: 13841:13842 ioctl 4018620d 0 returned -22 [ 651.559976][ T5723] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 651.568585][ T5723] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 651.576695][ T5723] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 651.602783][ T5723] usb 2-1: config 0 has no interface number 0 [ 651.613651][ T5723] usb 2-1: config 0 has no interface number 1 [ 651.643568][ T5723] usb 2-1: New USB device found, idVendor=cc35, idProduct=693f, bcdDevice=e7.0f [ 651.658298][ T5723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.675144][ T5723] usb 2-1: Product: syz [ 651.685617][ T5723] usb 2-1: Manufacturer: syz [ 651.700682][ T5723] usb 2-1: SerialNumber: syz [ 651.714127][ T5723] usb 2-1: config 0 descriptor?? [ 651.727885][ T5723] cdc_acm 2-1:0.51: probe with driver cdc_acm failed with error -22 [ 651.941544][ T5723] usb 2-1: USB disconnect, device number 50 [ 652.005238][ T29] audit: type=1400 audit(1785839176.775:1648): avc: denied { write } for pid=13852 comm="syz.0.2105" name="functions" dev="configfs" ino=10077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 652.095371][ T29] audit: type=1400 audit(1785839176.785:1649): avc: denied { write } for pid=13852 comm="syz.0.2105" name="c.1" dev="configfs" ino=11657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 653.183980][ T6178] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 653.294435][ T29] audit: type=1400 audit(1785839176.785:1650): avc: denied { write } for pid=13852 comm="syz.0.2105" name="c.1" dev="configfs" ino=11657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 653.318207][ T29] audit: type=1326 audit(1785839176.785:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13856 comm="syz.6.2107" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a31b9e019 code=0x7ffc0000 [ 653.345084][ T29] audit: type=1326 audit(1785839176.785:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13856 comm="syz.6.2107" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a31b9e019 code=0x7ffc0000 [ 653.453379][ T29] audit: type=1326 audit(1785839176.795:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13856 comm="syz.6.2107" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1a31b9e019 code=0x7ffc0000 [ 653.594853][ T29] audit: type=1326 audit(1785839176.795:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13856 comm="syz.6.2107" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a31b9e019 code=0x7ffc0000 [ 653.643481][T13867] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 653.663188][ T29] audit: type=1326 audit(1785839176.795:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13856 comm="syz.6.2107" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1a31b9e019 code=0x7ffc0000 [ 653.699553][ T29] audit: type=1326 audit(1785839176.795:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13856 comm="syz.6.2107" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a31b9e019 code=0x7ffc0000 [ 653.806687][T13871] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2108'. [ 653.925987][T13873] loop6: detected capacity change from 0 to 2640 [ 653.932791][T13873] buffer_io_error: 6 callbacks suppressed [ 653.932801][T13873] Buffer I/O error on dev loop6, logical block 0, async page read [ 653.946495][T13873] Buffer I/O error on dev loop6, logical block 0, async page read [ 653.954345][T13873] Buffer I/O error on dev loop6, logical block 0, async page read [ 653.962184][T13873] Buffer I/O error on dev loop6, logical block 0, async page read [ 653.970024][T13873] Buffer I/O error on dev loop6, logical block 0, async page read [ 653.977962][T13873] Buffer I/O error on dev loop6, logical block 0, async page read [ 653.985824][T13873] Buffer I/O error on dev loop6, logical block 0, async page read [ 653.993667][T13873] Buffer I/O error on dev loop6, logical block 0, async page read [ 654.001502][T13873] ldm_validate_partition_table(): Disk read failed. [ 654.008200][T13873] Buffer I/O error on dev loop6, logical block 0, async page read [ 654.016028][T13873] Buffer I/O error on dev loop6, logical block 0, async page read [ 654.023971][T13873] Dev loop6: unable to read RDB block 0 [ 654.029736][T13873] loop6: unable to read partition table [ 654.035463][T13873] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 654.074912][ T5956] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 654.160726][T13873] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 1 [ 654.170775][T13873] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 1 [ 654.180522][T13873] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 1 [ 654.190562][T13873] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 1 [ 654.200898][T13873] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 1 [ 654.210648][T13873] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 1 [ 654.220411][T13873] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 1 [ 654.230258][T13873] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 1 [ 655.098074][ T5723] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 655.332077][ T5723] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 655.375943][T13895] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.2118'. [ 655.387041][T13895] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.2118'. [ 655.434871][ T5723] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 655.458762][ T5723] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 655.459910][ T5801] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 655.491989][ T5723] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.525000][ T5723] usb 2-1: config 0 descriptor?? [ 655.648355][ T5801] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 655.730040][ T5801] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.915347][ T5801] usb 7-1: config 0 descriptor?? [ 656.275102][ T5723] usbhid 2-1:0.0: can't add hid device: -32 [ 656.285534][T13886] siw: device registration error -23 [ 656.293374][ T5723] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 656.317056][ T5723] usb 2-1: USB disconnect, device number 51 [ 656.451600][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 656.451618][ T29] audit: type=1326 audit(1785839181.245:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13913 comm="syz.4.2126" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f38b159e019 code=0x0 [ 656.743187][ T5801] ath6kl: Failed to submit usb control message: -71 [ 656.767090][ T5801] ath6kl: unable to send the bmi data to the device: -71 [ 656.787649][ T5801] ath6kl: Unable to send get target info: -71 [ 656.840464][ T5801] ath6kl: Failed to init ath6kl core: -71 [ 656.863261][ T5801] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 656.914197][ T5801] usb 7-1: USB disconnect, device number 17 [ 657.328361][T13929] netlink: 'syz.1.2127': attribute type 9 has an invalid length. [ 657.991717][T13934] sock: sock_set_timeout: `syz.5.2129' (pid 13934) tries to set negative timeout [ 658.189139][T13940] loop5: detected capacity change from 0 to 7 [ 658.196421][ T29] audit: type=1400 audit(1785839182.985:1692): avc: denied { setopt } for pid=13939 comm="syz.0.2130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 658.464063][T13940] Dev loop5: unable to read RDB block 7 [ 658.485948][T13940] loop5: AHDI p2 [ 658.498108][T13940] loop5: partition table partially beyond EOD, truncated [ 658.747793][ T5801] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 658.969818][ T5801] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 658.988438][ T5801] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.007461][ T5801] usb 6-1: config 0 descriptor?? [ 659.138827][ T6179] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 659.167770][ T24] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 659.327780][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 659.351043][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 659.382565][ T24] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 659.399474][T13962] netlink: 'syz.0.2138': attribute type 6 has an invalid length. [ 659.423527][ T24] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 659.458854][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.483474][ T24] usb 2-1: Product: syz [ 659.502333][ T24] usb 2-1: Manufacturer: syz [ 659.523667][ T24] usb 2-1: SerialNumber: syz [ 659.666773][T13970] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 659.781650][ T5956] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 659.811879][T13972] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2139'. [ 660.176086][ T24] usb 2-1: Limiting number of CPorts to U8_MAX [ 660.459958][ T5801] ath6kl: Failed to submit usb control message: -110 [ 660.562388][ T24] usb 2-1: Not enough endpoints found in device, aborting! [ 660.569757][ T5801] ath6kl: unable to send the bmi data to the device: -110 [ 660.587445][ T5801] ath6kl: Unable to send get target info: -110 [ 660.640938][ T5801] ath6kl: Failed to init ath6kl core: -110 [ 660.648506][ T5801] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 660.654440][ T5723] usb 2-1: USB disconnect, device number 52 [ 660.740546][ T5343] usb 6-1: USB disconnect, device number 14 [ 662.288123][T13990] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 662.288780][T13993] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 662.301492][T13990] Error validating options; rc = [-22] [ 662.320270][T13993] Error validating options; rc = [-22] [ 662.639849][T13997] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 662.642042][ T29] audit: type=1400 audit(1785839187.435:1693): avc: denied { ioctl } for pid=13996 comm="syz.4.2147" path="socket:[56110]" dev="sockfs" ino=56110 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 663.501372][T14016] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 664.007140][T14016] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2152'. [ 664.265957][ T6178] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 664.313373][T14024] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2155'. [ 665.359175][T14029] FAULT_INJECTION: forcing a failure. [ 665.359175][T14029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 665.373849][ T29] audit: type=1400 audit(1785839191.157:1694): avc: denied { ioctl } for pid=14027 comm="syz.6.2156" path="socket:[56184]" dev="sockfs" ino=56184 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 665.420543][T14030] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 665.444091][T14029] CPU: 0 UID: 0 PID: 14029 Comm: syz.6.2156 Tainted: G L syzkaller #0 PREEMPT(full) [ 665.444119][T14029] Tainted: [L]=SOFTLOCKUP [ 665.444124][T14029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 665.444135][T14029] Call Trace: [ 665.444141][T14029] [ 665.444148][T14029] dump_stack_lvl+0x100/0x190 [ 665.444175][T14029] should_fail_ex.cold+0x5/0xa [ 665.444198][T14029] _copy_from_user+0x2e/0xd0 [ 665.444224][T14029] copy_msghdr_from_user+0x9f/0x4c0 [ 665.444244][T14029] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 665.444273][T14029] ___sys_sendmsg+0x106/0x1e0 [ 665.444293][T14029] ? __pfx____sys_sendmsg+0x10/0x10 [ 665.444310][T14029] ? __lock_acquire+0x49f/0x1a40 [ 665.444331][T14029] ? get_pid_task+0x106/0x250 [ 665.444372][T14029] __sys_sendmsg+0x160/0x210 [ 665.444396][T14029] ? __pfx___sys_sendmsg+0x10/0x10 [ 665.444430][T14029] do_syscall_64+0x115/0x870 [ 665.444452][T14029] ? clear_bhb_loop+0x40/0x90 [ 665.444474][T14029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.444491][T14029] RIP: 0033:0x7f1a31b9e019 [ 665.444505][T14029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 665.444521][T14029] RSP: 002b:00007f1a32a1d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 665.444539][T14029] RAX: ffffffffffffffda RBX: 00007f1a31e25fa0 RCX: 00007f1a31b9e019 [ 665.444552][T14029] RDX: 0000000000002014 RSI: 0000200000000000 RDI: 0000000000000004 [ 665.444562][T14029] RBP: 00007f1a32a1d090 R08: 0000000000000000 R09: 0000000000000000 [ 665.444573][T14029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 665.444583][T14029] R13: 00007f1a31e26038 R14: 00007f1a31e25fa0 R15: 00007fffa2dbd428 [ 665.444607][T14029] [ 665.703798][T14031] netlink: 277 bytes leftover after parsing attributes in process `syz.5.2157'. [ 666.431045][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 667.026075][T14043] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2161'. [ 667.202579][T14051] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 667.336362][T14055] netlink: 277 bytes leftover after parsing attributes in process `syz.6.2163'. [ 668.258577][T14060] netlink: 'syz.0.2166': attribute type 6 has an invalid length. [ 669.748948][ T29] audit: type=1326 audit(1785839195.547:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14084 comm="syz.1.2174" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f930799e019 code=0x0 [ 669.990384][T14089] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 670.252799][ T6208] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 670.482366][T14095] netlink: 'syz.6.2177': attribute type 9 has an invalid length. [ 671.318692][T14115] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 671.347386][T14115] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2185'. [ 671.701305][T14132] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2190'. [ 671.744612][ T29] audit: type=1326 audit(1785839197.537:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14133 comm="syz.1.2192" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f930799e019 code=0x0 [ 671.938675][ T6179] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 671.966338][T14132] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2190'. [ 672.123561][T14141] netlink: 'syz.0.2193': attribute type 9 has an invalid length. [ 672.153301][T14142] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2194'. [ 672.463915][T14150] kvm_intel: kvm [14149]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xb8300f0000010035 [ 672.508881][ T5343] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 672.679052][ T5343] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 672.697682][ T5343] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 672.792697][T14161] smc: removing ib device syz2 [ 672.851523][ T5343] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 672.856698][T14161] smbdirect: ib_dev[syz2] removed [ 673.712771][ T5343] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.760511][ T5343] usb 6-1: config 0 descriptor?? [ 674.412526][ T29] audit: type=1400 audit(1785839200.207:1697): avc: denied { mounton } for pid=14171 comm="syz.4.2204" path="/file0" dev="ramfs" ino=57861 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 674.444298][T14172] netlink: 'syz.4.2204': attribute type 5 has an invalid length. [ 674.517675][ T5343] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 674.601374][T14175] FAULT_INJECTION: forcing a failure. [ 674.601374][T14175] name failslab, interval 1, probability 0, space 0, times 0 [ 674.614783][T14175] CPU: 0 UID: 0 PID: 14175 Comm: syz.6.2205 Tainted: G L syzkaller #0 PREEMPT(full) [ 674.614813][T14175] Tainted: [L]=SOFTLOCKUP [ 674.614819][T14175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 674.614829][T14175] Call Trace: [ 674.614835][T14175] [ 674.614843][T14175] dump_stack_lvl+0x100/0x190 [ 674.614873][T14175] should_fail_ex.cold+0x5/0xa [ 674.614895][T14175] should_failslab+0xc2/0x120 [ 674.614919][T14175] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 674.614942][T14175] ? copy_process+0x69a/0x8030 [ 674.614971][T14175] copy_process+0x69a/0x8030 [ 674.615009][T14175] ? __pfx_copy_process+0x10/0x10 [ 674.615033][T14175] ? __kasan_kmalloc+0xaa/0xb0 [ 674.615055][T14175] ? lockdep_init_map_type+0x5c/0x250 [ 674.615080][T14175] ? lockdep_init_map_type+0x5c/0x250 [ 674.615103][T14175] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 674.615126][T14175] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 674.615156][T14175] vhost_task_create+0x1db/0x370 [ 674.615177][T14175] ? __pfx_vhost_task_create+0x10/0x10 [ 674.615205][T14175] ? __pfx_vhost_task_fn+0x10/0x10 [ 674.615227][T14175] ? __pfx___mutex_lock+0x10/0x10 [ 674.615248][T14175] ? kasan_quarantine_put+0x104/0x240 [ 674.615275][T14175] kvm_mmu_post_init_vm+0x1b3/0x360 [ 674.615303][T14175] kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 674.615328][T14175] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 674.615353][T14175] kvm_vcpu_ioctl+0x730/0x1700 [ 674.615376][T14175] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 674.615396][T14175] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 674.615420][T14175] ? do_vfs_ioctl+0x226/0x13e0 [ 674.615445][T14175] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 674.615470][T14175] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 674.615505][T14175] ? __fget_files+0x215/0x3d0 [ 674.615519][T14175] ? hook_file_ioctl_common+0x140/0x440 [ 674.615535][T14175] ? selinux_file_ioctl+0x13b/0x290 [ 674.615552][T14175] ? selinux_file_ioctl+0xb6/0x290 [ 674.615569][T14175] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 674.615582][T14175] __x64_sys_ioctl+0x18e/0x210 [ 674.615599][T14175] do_syscall_64+0x115/0x870 [ 674.615612][T14175] ? clear_bhb_loop+0x40/0x90 [ 674.615626][T14175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.615637][T14175] RIP: 0033:0x7f1a31b9e019 [ 674.615647][T14175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 674.615658][T14175] RSP: 002b:00007f1a32a1d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 674.615672][T14175] RAX: ffffffffffffffda RBX: 00007f1a31e25fa0 RCX: 00007f1a31b9e019 [ 674.615679][T14175] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 674.615686][T14175] RBP: 00007f1a32a1d090 R08: 0000000000000000 R09: 0000000000000000 [ 674.615692][T14175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 674.615698][T14175] R13: 00007f1a31e26038 R14: 00007f1a31e25fa0 R15: 00007fffa2dbd428 [ 674.615712][T14175] [ 674.939302][ T5343] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 674.948516][ T5343] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.613523][ T5343] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 675.778866][ T6207] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 675.914040][ T24] usb 6-1: USB disconnect, device number 15 [ 676.032182][T10858] usb 2-1: USB disconnect, device number 53 [ 676.110731][ T29] audit: type=1326 audit(1785839201.907:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14191 comm="syz.6.2209" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a31b9e019 code=0x0 [ 676.240007][T14196] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 676.286211][T14196] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2211'. [ 676.980420][T14211] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 677.271794][T14214] netlink: 'syz.1.2218': attribute type 9 has an invalid length. [ 677.729036][ T6178] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 678.644027][T14221] kvm_intel: kvm [14220]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xb8300f0000010035 [ 678.657730][ T29] audit: type=1400 audit(1785839204.447:1699): avc: denied { read write } for pid=14222 comm="syz.1.2220" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 678.722401][ T29] audit: type=1400 audit(1785839204.457:1700): avc: denied { open } for pid=14222 comm="syz.1.2220" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 678.776857][ T29] audit: type=1400 audit(1785839204.457:1701): avc: denied { ioctl } for pid=14222 comm="syz.1.2220" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 679.005162][T14240] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 679.090790][T14241] xt_hashlimit: size too large, truncated to 1048576 [ 679.664316][T14245] netlink: 277 bytes leftover after parsing attributes in process `syz.6.2224'. [ 680.519085][ T5343] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 680.661109][T14254] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2229'. [ 680.689821][ T5343] usb 1-1: config 0 has an invalid interface number: 176 but max is 0 [ 680.718059][ T5343] usb 1-1: config 0 has no interface number 0 [ 681.002403][ T6206] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 681.029564][ T5343] usb 1-1: config 0 interface 176 has no altsetting 0 [ 681.103935][ T5343] usb 1-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=eb.de [ 681.180405][ T5343] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.244094][ T5343] usb 1-1: Product: syz [ 681.284769][ T5343] usb 1-1: Manufacturer: syz [ 681.320360][ T5343] usb 1-1: SerialNumber: syz [ 681.501517][ T5343] usb 1-1: config 0 descriptor?? [ 682.005441][T14262] overlayfs: failed to resolve './cgroup': -2 [ 682.034016][T14266] netlink: 'syz.6.2232': attribute type 1 has an invalid length. [ 682.043076][T14265] netlink: 'syz.4.2231': attribute type 9 has an invalid length. [ 682.134331][T14270] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2232'. [ 682.260850][T14276] MTD: Couldn't look up '/dev/sg0': -15 [ 682.267147][T14266] 8021q: adding VLAN 0 to HW filter on device bond7 [ 682.284232][T14266] bond6: (slave bond7): making interface the new active one [ 682.310790][T14266] bond6: (slave bond7): Enslaving as an active interface with an up link [ 682.465447][T14271] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2230'. [ 682.722587][T14270] 8021q: adding VLAN 0 to HW filter on device bond6 [ 683.118583][ T5343] pcwd_usb: The device isn't a Human Interface Device [ 683.168798][ T5343] usb 1-1: USB disconnect, device number 42 [ 683.226010][ T29] audit: type=1326 audit(1785839209.017:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14282 comm="syz.4.2235" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f38b159e019 code=0x0 [ 683.370324][T14289] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 683.501271][T14293] netlink: 277 bytes leftover after parsing attributes in process `syz.5.2237'. [ 683.553288][T10858] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 683.810140][T10858] usb 7-1: Using ep0 maxpacket: 16 [ 683.931283][T10858] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.057317][T10858] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.134050][ T6207] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 684.212940][T10858] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 684.296007][T10858] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 684.333010][T10858] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.380647][T10858] usb 7-1: config 0 descriptor?? [ 684.406787][ T29] audit: type=1400 audit(1785839210.197:1703): avc: denied { setopt } for pid=14296 comm="syz.0.2239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 684.630862][T14306] netlink: 'syz.5.2241': attribute type 10 has an invalid length. [ 684.668843][T14306] bridge0: port 3(dummy0) entered disabled state [ 684.675352][T14306] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.684009][T14306] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.707823][ T29] audit: type=1400 audit(1785839210.497:1704): avc: denied { listen } for pid=14305 comm="syz.0.2242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 684.735126][ T29] audit: type=1400 audit(1785839210.497:1705): avc: denied { accept } for pid=14305 comm="syz.0.2242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 684.768268][T14306] bridge0: port 3(dummy0) entered blocking state [ 684.774675][T14306] bridge0: port 3(dummy0) entered forwarding state [ 684.781409][T14306] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.788692][T14306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.796051][T14306] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.803224][T14306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.846378][T14306] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 684.898595][T14308] bridge0: port 3(dummy0) entered disabled state [ 684.910988][T10858] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0018/input/input41 [ 684.962630][T14313] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2243'. [ 685.031289][T14308] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.043338][T14308] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.380334][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.473534][T14310] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 685.489286][T14311] lo: entered promiscuous mode [ 685.561913][T14311] tunl0: entered promiscuous mode [ 685.643704][T14311] gre0: entered promiscuous mode [ 685.704787][T14311] gretap0: entered promiscuous mode [ 685.820867][T14311] erspan0: entered promiscuous mode [ 685.929396][T14311] ip_vti0: entered promiscuous mode [ 685.982919][T14311] ip6_vti0: entered promiscuous mode [ 686.019905][T14311] sit0: entered promiscuous mode [ 686.025326][T14311] ip6tnl0: entered promiscuous mode [ 686.031972][T10858] microsoft 0003:045E:07DA.0018: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 686.094681][T14311] ip6gre0: entered promiscuous mode [ 686.116474][T10858] usb 7-1: USB disconnect, device number 18 [ 686.124593][T14311] syz_tun: entered promiscuous mode [ 686.133424][T14311] ip6gretap0: entered promiscuous mode [ 686.181635][T14311] bridge0: entered promiscuous mode [ 686.191004][T14320] overlayfs: failed to resolve './cgroup': -2 [ 686.204781][T14311] vcan0: entered promiscuous mode [ 686.238656][T14311] bond0: entered promiscuous mode [ 686.256873][T14311] bond_slave_0: entered promiscuous mode [ 686.266486][T14311] bond_slave_1: entered promiscuous mode [ 686.275971][T14311] nlmon0: entered promiscuous mode [ 686.291871][T14311] batadv0: entered promiscuous mode [ 686.298063][T14311] vxcan0: entered promiscuous mode [ 686.306514][T14311] vxcan1: entered promiscuous mode [ 686.322998][T14311] veth0: entered promiscuous mode [ 686.348114][T14311] veth1: entered promiscuous mode [ 686.374534][T14311] wg0: entered promiscuous mode [ 686.394895][T14311] wg1: entered promiscuous mode [ 686.410816][T14311] wg2: entered promiscuous mode [ 686.428314][T14311] veth0_to_bridge: entered promiscuous mode [ 686.456615][T14311] veth1_to_bridge: entered promiscuous mode [ 686.475950][T14311] veth0_to_bond: entered promiscuous mode [ 686.499707][T14311] veth1_to_bond: entered promiscuous mode [ 686.524634][T14311] veth0_to_team: entered promiscuous mode [ 686.539602][T14324] fido_id[14324]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 686.661463][T14330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2247'. [ 686.671784][ T6178] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 686.690978][T14311] team_slave_0: entered promiscuous mode [ 686.745910][T14311] veth1_to_team: entered promiscuous mode [ 686.967735][T14311] team_slave_1: entered promiscuous mode [ 687.083638][T14311] veth0_to_batadv: entered promiscuous mode [ 687.226779][T14311] batadv_slave_0: entered promiscuous mode [ 687.329352][T14311] veth1_to_batadv: entered promiscuous mode [ 687.358948][T14311] batadv_slave_1: entered promiscuous mode [ 687.383114][T14311] xfrm0: entered promiscuous mode [ 687.419880][T14311] xfrm0: left allmulticast mode [ 687.460263][T14311] veth0_to_hsr: entered promiscuous mode [ 687.481004][T14311] veth1_to_hsr: entered promiscuous mode [ 687.502219][T14311] hsr0: entered promiscuous mode [ 687.518789][T14311] veth1_virt_wifi: entered promiscuous mode [ 687.528858][T14311] veth0_virt_wifi: entered promiscuous mode [ 687.536895][T14311] virt_wifi0: entered promiscuous mode [ 687.546546][T14311] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 689.859421][ T587] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 689.949221][ T29] audit: type=1400 audit(1785839215.717:1706): avc: denied { mounton } for pid=14361 comm="syz.5.2255" path="/186/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 690.554117][T14365] xt_hashlimit: size too large, truncated to 1048576 [ 691.057764][ T5723] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 691.090784][T14386] overlayfs: failed to resolve './cgroup': -2 [ 691.469465][ T5723] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 691.480623][ T5723] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 691.505339][ T5723] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 691.529709][ T5723] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.552487][ T5723] usb 7-1: config 0 descriptor?? [ 691.785079][ T29] audit: type=1400 audit(1785839217.567:1707): avc: denied { watch_reads } for pid=14388 comm="syz.5.2261" path="/188/bus" dev="tmpfs" ino=1080 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 692.341993][ T5723] usbhid 7-1:0.0: can't add hid device: -32 [ 692.349077][ T5723] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 692.361673][T14380] siw: device registration error -23 [ 692.569090][ T1115] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 692.794145][ T5723] usb 7-1: USB disconnect, device number 19 [ 692.876589][ T29] audit: type=1326 audit(1785839218.667:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14405 comm="syz.0.2265" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9241d9e019 code=0x0 [ 693.306988][T14408] overlayfs: failed to resolve './cgroup': -2 [ 693.800613][T14420] overlayfs: failed to resolve './cgroup': -2 [ 695.634217][T14442] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2267'. [ 695.711898][ T587] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 696.492036][ T29] audit: type=1326 audit(1785839222.287:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14448 comm="syz.4.2277" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b159e019 code=0x7ffc0000 [ 696.533957][T14450] fuse: Unknown parameter '#! [ 696.533957][T14450] ' [ 696.707059][ T29] audit: type=1326 audit(1785839222.287:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14448 comm="syz.4.2277" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b159e019 code=0x7ffc0000 [ 697.047216][ T29] audit: type=1326 audit(1785839222.287:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14448 comm="syz.4.2277" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b159e019 code=0x7ffc0000 [ 697.113879][ T29] audit: type=1326 audit(1785839222.287:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14448 comm="syz.4.2277" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b159e019 code=0x7ffc0000 [ 697.159542][ T29] audit: type=1326 audit(1785839222.287:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14448 comm="syz.4.2277" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b159e019 code=0x7ffc0000 [ 697.218177][T14463] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 697.288245][T14456] syzkaller0: entered promiscuous mode [ 697.293855][T14456] syzkaller0: entered allmulticast mode [ 698.131021][ T29] audit: type=1326 audit(1785839222.287:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14448 comm="syz.4.2277" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f38b159e019 code=0x7ffc0000 [ 698.185683][ T5956] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 698.490602][ T29] audit: type=1326 audit(1785839222.287:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14448 comm="syz.4.2277" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b159e019 code=0x7ffc0000 [ 698.669586][ T29] audit: type=1326 audit(1785839222.287:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14448 comm="syz.4.2277" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b159e019 code=0x7ffc0000 [ 698.705351][T14463] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 698.717057][ T29] audit: type=1326 audit(1785839222.287:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14448 comm="syz.4.2277" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b159e019 code=0x7ffc0000 [ 698.746923][T14463] overlayfs: failed to look up (tracing) for ino (-66) [ 698.755607][ T29] audit: type=1326 audit(1785839222.317:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14448 comm="syz.4.2277" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f38b159e019 code=0x7ffc0000 [ 698.957184][T14482] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2285'. [ 700.572063][T14497] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2288'. [ 701.486959][ T1115] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 701.888174][T14510] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2291'. [ 702.226807][T14527] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2298'. [ 702.392011][T14530] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 702.419422][ T932] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 702.602151][T14534] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2299'. [ 702.733694][ T932] usb 7-1: Using ep0 maxpacket: 8 [ 703.365949][ T5810] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 703.487676][ T932] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 703.496995][ T932] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.505313][ T932] usb 7-1: Product: syz [ 703.509654][ T932] usb 7-1: Manufacturer: syz [ 703.514270][ T932] usb 7-1: SerialNumber: syz [ 703.545691][ T932] usb 7-1: config 0 descriptor?? [ 703.561848][ T932] gspca_main: se401-2.14.0 probing 047d:5003 [ 703.631819][ T5810] usb 1-1: descriptor type invalid, skip [ 703.638751][ T5810] usb 1-1: not running at top speed; connect to a high speed hub [ 703.664019][ T5810] usb 1-1: config 0 has an invalid interface number: 144 but max is 1 [ 703.672478][ T5810] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 703.683477][ T5810] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 703.706316][ T5810] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 703.729389][ T5810] usb 1-1: config 0 has no interface number 0 [ 703.741970][ T5810] usb 1-1: config 0 interface 144 altsetting 26 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 703.769485][ T5810] usb 1-1: config 0 interface 144 has no altsetting 0 [ 703.789094][ T5810] usb 1-1: language id specifier not provided by device, defaulting to English [ 703.800604][ T5810] usb 1-1: New USB device found, idVendor=0bb4, idProduct=0a95, bcdDevice= f.43 [ 703.809970][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.818401][ T5810] usb 1-1: Product: syz [ 703.824477][ T5810] usb 1-1: Manufacturer: syz [ 703.837621][ T5810] usb 1-1: SerialNumber: syz [ 703.851292][ T5810] usb 1-1: config 0 descriptor?? [ 703.948405][ T6178] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 703.970309][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 703.970329][ T29] audit: type=1400 audit(1785839229.767:1801): avc: denied { execute } for pid=14523 comm="syz.6.2297" path="/dev/audio1" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 703.977110][ T932] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 704.038965][ T932] se401 7-1:0.0: probe with driver se401 failed with error -71 [ 704.060246][ T932] usb 7-1: USB disconnect, device number 20 [ 704.784222][ T5810] usb 1-1: USB disconnect, device number 43 [ 704.892704][ T29] audit: type=1400 audit(1785839230.687:1802): avc: denied { accept } for pid=14555 comm="syz.6.2307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_socket permissive=1 [ 704.921609][T14556] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2307'. [ 705.130202][T14561] netlink: 'syz.5.2306': attribute type 4 has an invalid length. [ 707.582437][ T1115] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 707.797690][ T5810] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 707.937788][ T5810] usb 7-1: device descriptor read/64, error -71 [ 708.088268][ T5343] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 708.315252][T14586] netlink: 'syz.1.2315': attribute type 9 has an invalid length. [ 708.387792][ T5810] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 708.409027][ T5343] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 708.428547][ T5343] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 708.444331][T14590] netlink: 'syz.6.2317': attribute type 1 has an invalid length. [ 708.452312][ T5343] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 708.480794][ T5343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.515604][ T5343] usb 1-1: config 0 descriptor?? [ 708.602995][T14594] 8021q: adding VLAN 0 to HW filter on device bond9 [ 708.622567][T14594] bond8: (slave bond9): making interface the new active one [ 708.633579][T14590] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2317'. [ 708.645103][T14594] bond8: (slave bond9): Enslaving as an active interface with an up link [ 708.686840][T14590] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2317'. [ 708.704784][T14590] 8021q: adding VLAN 0 to HW filter on device bond8 [ 708.842191][T14604] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2321'. [ 708.870009][T14604] bridge_slave_0: left allmulticast mode [ 708.876148][T14604] bridge_slave_0: left promiscuous mode [ 708.886778][T14604] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.470128][T14632] netlink: 'syz.1.2329': attribute type 1 has an invalid length. [ 709.493833][T14630] siw: device registration error -23 [ 709.593817][T14634] 8021q: adding VLAN 0 to HW filter on device bond10 [ 709.607846][T14632] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2329'. [ 709.626523][T14634] bond9: (slave bond10): making interface the new active one [ 709.655011][T14634] bond9: (slave bond10): Enslaving as an active interface with an up link [ 709.685908][T14638] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2329'. [ 709.727741][T14638] 8021q: adding VLAN 0 to HW filter on device bond9 [ 710.046234][T14647] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 710.107639][ T932] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 710.125308][T14644] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 710.136511][T14649] netlink: 'syz.4.2332': attribute type 1 has an invalid length. [ 710.145089][T14644] overlayfs: failed to look up (tracing) for ino (-66) [ 710.242386][T14649] 8021q: adding VLAN 0 to HW filter on device bond14 [ 710.253431][T14652] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2332'. [ 710.279022][ T932] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 710.298265][T14649] bond13: (slave bond14): making interface the new active one [ 710.310713][ T932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.334878][T14655] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2332'. [ 710.347812][ T932] usb 2-1: config 0 descriptor?? [ 710.365845][T14649] bond13: (slave bond14): Enslaving as an active interface with an up link [ 710.381473][T14655] 8021q: adding VLAN 0 to HW filter on device bond13 [ 710.410855][T14656] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2333'. [ 710.870399][T14661] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 711.388188][ T932] ath6kl: Failed to submit usb control message: -110 [ 711.403837][T14666] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=27412 sclass=netlink_xfrm_socket pid=14666 comm=syz.6.2334 [ 711.701317][ T932] ath6kl: unable to send the bmi data to the device: -110 [ 711.708631][ T932] ath6kl: Unable to send get target info: -110 [ 711.772620][ T932] ath6kl: Failed to init ath6kl core: -110 [ 712.264312][ T932] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 712.475762][ T24] usb 1-1: USB disconnect, device number 44 [ 712.778021][T14680] xt_hashlimit: size too large, truncated to 1048576 [ 712.788830][ T932] usb 2-1: USB disconnect, device number 54 [ 712.827715][ T5810] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 712.845577][T14685] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2342'. [ 712.870786][T14685] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2342'. [ 712.899744][ T1115] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 712.916671][T14685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=14685 comm=syz.4.2342 [ 712.983339][ T5810] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 713.053391][T14694] lo: Caught tx_queue_len zero misconfig [ 713.114759][ T5810] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 713.131333][T14685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=14685 comm=syz.4.2342 [ 713.185365][ T5810] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.251912][ T5810] usb 6-1: Product: syz [ 713.288334][ T5810] usb 6-1: Manufacturer: syz [ 713.335397][ T5810] usb 6-1: SerialNumber: syz [ 713.357699][T14685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=14685 comm=syz.4.2342 [ 713.544955][T14685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=14685 comm=syz.4.2342 [ 713.630540][T14685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=14685 comm=syz.4.2342 [ 713.659121][ T5810] usb 6-1: config 0 descriptor?? [ 713.786475][T14685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=14685 comm=syz.4.2342 [ 713.871432][T14685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=14685 comm=syz.4.2342 [ 713.935842][T14685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=14685 comm=syz.4.2342 [ 714.022493][T14685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=14685 comm=syz.4.2342 [ 714.992591][T14698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.023459][T14698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.459549][ T6208] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 715.926042][T14713] bond15: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 715.986923][T14713] bond15 (unregistering): Released all slaves [ 716.121691][ T29] audit: type=1400 audit(1785839241.917:1803): avc: denied { read } for pid=14732 comm="syz.1.2350" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 716.145461][ T29] audit: type=1400 audit(1785839241.937:1804): avc: denied { open } for pid=14732 comm="syz.1.2350" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 716.504886][ T5723] usb 6-1: USB disconnect, device number 16 [ 717.178134][T14764] kvm_intel: kvm [14763]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xb8300f0000010035 [ 717.522794][T14773] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2360'. [ 718.080491][ T1115] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 718.429118][T14786] vlan2: entered promiscuous mode [ 718.434394][T14786] hsr0: entered promiscuous mode [ 718.440146][T14786] vlan2: entered allmulticast mode [ 718.445645][T14786] hsr0: entered allmulticast mode [ 718.456536][T14786] hsr_slave_0: entered allmulticast mode [ 718.465310][T14786] hsr_slave_1: entered allmulticast mode [ 718.620705][T14786] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2363'. [ 718.633421][T14790] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2364'. [ 718.685210][T14786] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2363'. [ 718.703189][T14786] hsr_slave_0: left promiscuous mode [ 718.796204][T14786] hsr_slave_1: left promiscuous mode [ 718.967687][ T5723] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 719.928553][ T29] audit: type=1400 audit(1785839245.727:1805): avc: denied { mount } for pid=14795 comm="syz.5.2366" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 719.956289][ T29] audit: type=1400 audit(1785839245.747:1806): avc: denied { search } for pid=14795 comm="syz.5.2366" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 719.978518][ T29] audit: type=1400 audit(1785839245.747:1807): avc: denied { write } for pid=14795 comm="syz.5.2366" name="exports" dev="nfsd" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 720.001074][ T29] audit: type=1400 audit(1785839245.747:1808): avc: denied { open } for pid=14795 comm="syz.5.2366" path="/207/nfsd/exports" dev="nfsd" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 720.040113][ T5723] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 720.052373][ T5723] usb 7-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 720.063066][ T5723] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.084867][ T29] audit: type=1400 audit(1785839245.877:1809): avc: denied { unmount } for pid=10415 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 720.370580][T14786] sg_write: data in/out 117331068/6 bytes for SCSI command 0x3-- guessing data in; [ 720.370580][T14786] program syz.6.2363 not setting count and/or reply_len properly [ 720.502845][T14807] bridge1: entered promiscuous mode [ 720.824845][ T1115] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 721.117947][T14818] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 721.222318][T14819] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2374'. [ 722.219093][ T5723] qmi_wwan 7-1:1.0: probe with driver qmi_wwan failed with error -71 [ 722.272755][ T5723] usb 7-1: USB disconnect, device number 23 [ 722.450713][T14836] can: request_module (can-proto-0) failed. [ 722.466300][ T24] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 722.649669][ T24] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0 [ 722.666677][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 722.779638][ T24] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 722.794492][T14851] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 722.811250][ T24] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 723.144848][ T932] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 723.245298][ T24] usb 1-1: Product: syz [ 723.253315][ T24] usb 1-1: Manufacturer: syz [ 723.262125][ T24] usb 1-1: SerialNumber: syz [ 723.285317][ T24] usb 1-1: config 0 descriptor?? [ 723.297900][ T24] usb 1-1: selecting invalid altsetting 0 [ 723.397624][ T932] usb 2-1: Using ep0 maxpacket: 16 [ 723.411221][ T932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 723.479374][ T932] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 723.545253][ T932] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 723.563255][ T932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.591548][ T932] usb 2-1: config 0 descriptor?? [ 723.610932][T14861] overlayfs: failed to resolve './cgroup': -2 [ 723.641908][ T5723] usb 1-1: USB disconnect, device number 45 [ 723.734125][T14863] Set syz1 is full, maxelem 4096 reached [ 723.778384][ T1115] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 723.873419][T14868] netlink: 'syz.4.2392': attribute type 21 has an invalid length. [ 723.890330][T14868] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2392'. [ 723.906792][T14868] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2392'. [ 724.011613][ T932] HID 045e:07da: Invalid code 65791 type 1 [ 724.037133][ T932] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0019/input/input42 [ 724.080652][ T932] microsoft 0003:045E:07DA.0019: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 726.008274][ T5723] usb 2-1: USB disconnect, device number 55 [ 726.353871][ T1115] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 726.532318][T14899] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 727.133071][ T932] IPVS: starting estimator thread 0... [ 727.248538][T14903] IPVS: using max 42 ests per chain, 100800 per kthread [ 727.714948][T14918] netlink: 'syz.5.2405': attribute type 1 has an invalid length. [ 729.187678][ T5723] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 729.201035][T14946] kvm_intel: kvm [14944]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xb8300f0000010035 [ 729.232642][T14953] netlink: 'syz.5.2416': attribute type 9 has an invalid length. [ 729.383201][ T5723] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 729.401551][ T5723] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 729.427462][ T5723] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 729.444316][ T5723] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.482437][ T5723] usb 7-1: config 0 descriptor?? [ 729.544077][T14965] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2419'. [ 729.553568][ T1115] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 729.604005][T14965] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2419'. [ 729.622134][T14965] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2419'. [ 729.901146][ T5723] usbhid 7-1:0.0: can't add hid device: -32 [ 729.919490][ T5723] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 729.931188][T14945] siw: device registration error -23 [ 729.965978][ T932] usb 7-1: USB disconnect, device number 24 [ 730.311897][T14976] loop5: detected capacity change from 0 to 7 [ 730.339618][T14976] loop5: p1 < > p3 p4 [ 730.347503][T14976] loop5: partition table partially beyond EOD, truncated [ 730.368736][T14976] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 732.051094][T14998] netlink: 'syz.4.2428': attribute type 1 has an invalid length. [ 732.065127][T14993] binder_alloc: 14992: pid 14992 spamming oneway? 1 buffers allocated for a total size of 4096 [ 732.095241][T14993] binder: BC_ATTEMPT_ACQUIRE not supported [ 732.101476][ T6179] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 732.112975][T14993] binder: 14992:14993 ioctl c0306201 200000004a40 returned -22 [ 732.165187][T15000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2428'. [ 732.202710][T15000] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2428'. [ 732.242554][T15004] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2428'. [ 732.278280][ T5723] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 732.498251][ T932] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 732.526952][ T5723] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 732.559048][ T5723] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.596377][ T5723] usb 1-1: Product: syz [ 732.626342][ T5723] usb 1-1: Manufacturer: syz [ 732.689824][ T5723] usb 1-1: SerialNumber: syz [ 733.024201][ T5723] usb 1-1: config 0 descriptor?? [ 733.161348][ T5723] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 733.299351][ T932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 733.310828][ T932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 733.324334][ T932] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 733.334017][ T932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.355081][ T932] usb 6-1: config 0 descriptor?? [ 733.371654][T14999] 8021q: adding VLAN 0 to HW filter on device bond16 [ 733.426938][T14999] bond15: (slave bond16): making interface the new active one [ 733.454587][T14999] bond15: (slave bond16): Enslaving as an active interface with an up link [ 733.487153][T15004] 8021q: adding VLAN 0 to HW filter on device bond15 [ 733.501528][ T5810] usb 1-1: USB disconnect, device number 46 [ 733.896051][ T932] usbhid 6-1:0.0: can't add hid device: -32 [ 733.907175][ T932] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 735.301891][ T6179] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 735.461088][T15005] siw: device registration error -23 [ 735.562789][ T24] usb 6-1: USB disconnect, device number 17 [ 735.725459][T15042] sg_write: data in/out 1836017931/74 bytes for SCSI command 0x0-- guessing data in; [ 735.725459][T15042] program syz.6.2441 not setting count and/or reply_len properly [ 735.746515][ T29] audit: type=1400 audit(1785839261.537:1810): avc: denied { setopt } for pid=15038 comm="syz.4.2442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 735.749633][T15040] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2442'. [ 735.895767][T15051] netlink: 'syz.6.2444': attribute type 1 has an invalid length. [ 736.029397][ T29] audit: type=1800 audit(1785839261.737:1811): pid=15055 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2446" name="nullb0" dev="tmpfs" ino=2251 res=0 errno=0 [ 737.536900][T15051] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2444'. [ 737.587053][T15060] 8021q: adding VLAN 0 to HW filter on device bond11 [ 737.602752][T15060] bond10: (slave bond11): making interface the new active one [ 737.613070][T15060] bond10: (slave bond11): Enslaving as an active interface with an up link [ 737.631835][T15051] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2444'. [ 737.716406][T15060] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2444'. [ 737.746469][ T29] audit: type=1400 audit(1785839263.537:1812): avc: denied { read } for pid=15063 comm="syz.5.2448" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 737.776149][T15060] 8021q: adding VLAN 0 to HW filter on device bond10 [ 737.809294][ T29] audit: type=1400 audit(1785839263.537:1813): avc: denied { open } for pid=15063 comm="syz.5.2448" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 737.845616][ T29] audit: type=1400 audit(1785839263.567:1814): avc: denied { map } for pid=15063 comm="syz.5.2448" path="socket:[63558]" dev="sockfs" ino=63558 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 738.035972][ T29] audit: type=1400 audit(1785839263.567:1815): avc: denied { read } for pid=15063 comm="syz.5.2448" path="socket:[63558]" dev="sockfs" ino=63558 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 738.075409][ T29] audit: type=1400 audit(1785839263.587:1816): avc: denied { ioctl } for pid=15063 comm="syz.5.2448" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0xaa01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 738.285108][ T29] audit: type=1400 audit(1785839263.587:1817): avc: denied { accept } for pid=15063 comm="syz.5.2448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 738.333011][T15086] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 738.512756][T15086] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 738.555311][T15086] overlayfs: failed to look up (tracing) for ino (-66) [ 740.667143][T15114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 741.231293][ T6207] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 742.017807][T15134] loop6: detected capacity change from 0 to 2640 [ 742.031258][T15134] buffer_io_error: 6 callbacks suppressed [ 742.031280][T15134] Buffer I/O error on dev loop6, logical block 0, async page read [ 742.045398][T15134] Buffer I/O error on dev loop6, logical block 0, async page read [ 742.053601][T15134] Buffer I/O error on dev loop6, logical block 0, async page read [ 742.088857][T15135] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 742.099198][T15135] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 742.109189][T15135] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 742.119161][T15135] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 742.231131][T15135] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 742.241239][T15135] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 742.251543][T15135] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 742.261733][T15135] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 742.278939][T15134] Buffer I/O error on dev loop6, logical block 0, async page read [ 742.287097][T15134] Buffer I/O error on dev loop6, logical block 0, async page read [ 742.295435][T15134] Buffer I/O error on dev loop6, logical block 0, async page read [ 742.303669][T15134] Buffer I/O error on dev loop6, logical block 0, async page read [ 742.311765][T15134] Buffer I/O error on dev loop6, logical block 0, async page read [ 742.319731][T15134] ldm_validate_partition_table(): Disk read failed. [ 742.326722][T15134] Buffer I/O error on dev loop6, logical block 0, async page read [ 742.334915][T15134] Buffer I/O error on dev loop6, logical block 0, async page read [ 742.345447][T15134] Dev loop6: unable to read RDB block 0 [ 742.351954][T15134] loop6: unable to read partition table [ 742.360396][T15134] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 742.389162][T14728] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 742.720552][T15139] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2472'. [ 742.786118][T15139] bridge_slave_1: left allmulticast mode [ 742.792679][T15139] bridge_slave_1: left promiscuous mode [ 742.801328][T15139] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.988419][T15139] bridge_slave_0: left allmulticast mode [ 742.994174][T15139] bridge_slave_0: left promiscuous mode [ 743.019050][T15142] dyndbg: bad flag-op Ø, at start of ØÁñmÆUJ@Úä [ 743.027513][T15142] dyndbg: flags parse failed [ 743.063171][T15139] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.094684][T15146] fuse: Unknown parameter 'fO' [ 744.171123][T15146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2473'. [ 744.542273][T15156] comedi comedi1: pcl724: I/O base address or length out of range [ 745.124237][ T29] audit: type=1400 audit(1785839270.917:1818): avc: denied { read } for pid=15145 comm="syz.0.2473" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 745.946515][T15146] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 746.617677][ T932] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 746.777647][ T932] usb 2-1: Using ep0 maxpacket: 8 [ 746.794528][ T932] usb 2-1: unable to get BOS descriptor or descriptor too short [ 746.813468][ T932] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 746.823272][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.846355][T15191] overlayfs: missing 'lowerdir' [ 746.861436][ T932] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 746.881070][T15191] netlink: 'syz.6.2483': attribute type 9 has an invalid length. [ 746.928696][ T932] usb 2-1: string descriptor 0 read error: -22 [ 746.941971][ T932] usb 2-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40 [ 747.050296][ T932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.088351][ T932] usb 2-1: 0:1 : does not exist [ 747.159565][T15196] CacheFiles: Failed to register: -95 [ 747.183578][ T29] audit: type=1400 audit(1785839272.947:1819): avc: denied { ioctl } for pid=15192 comm="syz.0.2484" path="/dev/ptp0" dev="devtmpfs" ino=1266 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 747.348556][ T29] audit: type=1400 audit(1785839272.947:1820): avc: denied { write } for pid=15192 comm="syz.0.2484" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 747.459388][ T6179] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 747.525163][ T932] usb 2-1: USB disconnect, device number 56 [ 747.953630][T15209] trusted_key: encrypted_key: insufficient parameters specified [ 748.108924][ T587] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 748.938526][T15227] siw: device registration error -23 [ 749.227804][ T932] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 749.257664][ T5723] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 749.410393][ T5723] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 749.419803][ T5723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.427904][ T932] usb 2-1: Using ep0 maxpacket: 32 [ 749.430354][ T932] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 749.438058][ T5723] usb 1-1: config 0 descriptor?? [ 749.441676][ T932] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 749.456699][ T932] usb 2-1: config 0 has no interface number 0 [ 749.787978][ T5810] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 749.863354][ T932] usb 2-1: config 0 interface 196 altsetting 29 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 749.950289][ T932] usb 2-1: config 0 interface 196 has no altsetting 0 [ 749.959626][ T932] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 749.963307][ T5810] usb 6-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 749.969170][ T932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.986291][ T932] usb 2-1: Product: syz [ 749.991054][ T932] usb 2-1: Manufacturer: syz [ 749.995676][ T932] usb 2-1: SerialNumber: syz [ 750.002252][T15230] team0 (unregistering): Port device team_slave_0 removed [ 750.013856][ T932] usb 2-1: config 0 descriptor?? [ 750.031842][ T932] ipheth 2-1:0.196: Unable to find alternate settings interface [ 750.043679][ T5810] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.050409][T15230] team0 (unregistering): Port device team_slave_1 removed [ 750.085261][ T5810] usb 6-1: config 0 descriptor?? [ 750.110429][ T5810] pwc: Creative Labs Webcam 5 detected. [ 750.125416][T15242] tipc: Started in network mode [ 750.132983][T15242] tipc: Node identity 8e2c17468613, cluster identity 4711 [ 750.141799][T15242] tipc: Enabled bearer , priority 0 [ 750.151764][ T5723] ath6kl: Failed to submit usb control message: -71 [ 750.160234][ T5723] ath6kl: unable to send the bmi data to the device: -71 [ 750.167354][ T5723] ath6kl: Unable to send get target info: -71 [ 750.174889][T15242] syzkaller0: entered promiscuous mode [ 750.184866][ T5723] ath6kl: Failed to init ath6kl core: -71 [ 750.190821][T15242] syzkaller0: entered allmulticast mode [ 750.213730][ T5723] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 750.224436][T15242] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 750.240205][ T5723] usb 1-1: USB disconnect, device number 47 [ 750.398226][T15247] bridge_slave_0: Caught tx_queue_len zero misconfig [ 750.477236][T15242] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=15242 comm=syz.6.2498 [ 750.510385][T15242] netlink: 116 bytes leftover after parsing attributes in process `syz.6.2498'. [ 750.579236][T15242] tipc: Resetting bearer [ 750.767816][T15241] tipc: Resetting bearer [ 750.831294][T15241] tipc: Disabling bearer [ 751.530350][T15265] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2504'. [ 751.956374][ T29] audit: type=1400 audit(1785839277.707:1821): avc: denied { write } for pid=15275 comm="syz.6.2506" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 752.422434][ T5810] pwc: recv_control_msg error -71 req 02 val 2700 [ 752.477893][ T5810] pwc: recv_control_msg error -71 req 04 val 1600 [ 752.495690][T15282] veth1_to_batadv: Caught tx_queue_len zero misconfig [ 752.571827][ T5810] pwc: recv_control_msg error -71 req 02 val 2c00 [ 752.597942][ T5810] pwc: recv_control_msg error -71 req 04 val 1000 [ 752.722844][T15286] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 752.919893][ T5810] pwc: recv_control_msg error -71 req 04 val 1300 [ 752.934744][ T88] usb 2-1: USB disconnect, device number 57 [ 752.946927][ T5810] pwc: recv_control_msg error -71 req 04 val 1400 [ 752.972817][ T5810] pwc: recv_control_msg error -71 req 02 val 2000 [ 752.984966][ T5810] pwc: recv_control_msg error -71 req 02 val 2100 [ 752.995562][ T5810] pwc: recv_control_msg error -71 req 06 val 0600 [ 753.008967][ T5810] pwc: recv_control_msg error -71 req 04 val 1500 [ 753.024794][ T5810] pwc: recv_control_msg error -71 req 02 val 2500 [ 753.068630][ T5810] pwc: recv_control_msg error -71 req 02 val 2400 [ 753.086631][ T5810] pwc: recv_control_msg error -71 req 02 val 2600 [ 753.106946][ T5810] pwc: recv_control_msg error -71 req 02 val 2900 [ 753.123118][ T5810] pwc: recv_control_msg error -71 req 02 val 2800 [ 753.134065][ T5810] pwc: recv_control_msg error -71 req 04 val 1100 [ 753.142487][ T5810] pwc: recv_control_msg error -71 req 04 val 1200 [ 753.144413][T15297] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 753.166219][ T5810] pwc: Failed to power off camera (-71) [ 753.219000][ T5956] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 753.293903][T15300] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2511'. [ 753.894867][ T6179] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 754.043460][ T5810] pwc: Registered as video103. [ 754.213816][ T5810] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input43 [ 754.501398][ T5810] usb 6-1: USB disconnect, device number 18 [ 755.791256][ T88] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 755.829849][ T29] audit: type=1326 audit(1785839281.617:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15344 comm="syz.0.2526" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9241d9e019 code=0x0 [ 756.074111][ T88] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 756.130742][ T88] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.278965][ T88] usb 7-1: config 0 descriptor?? [ 756.588858][T15353] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 756.627436][T15353] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 756.671996][T15353] BUG: unable to handle page fault for address: fffffffffffffc10 [ 756.679738][T15353] #PF: supervisor read access in kernel mode [ 756.685711][T15353] #PF: error_code(0x0000) - not-present page [ 756.691680][T15353] PGD e997067 P4D e997067 PUD e999067 PMD 0 [ 756.697679][T15353] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 756.703222][T15353] CPU: 0 UID: 0 PID: 15353 Comm: syz.1.2527 Tainted: G L syzkaller #0 PREEMPT(full) [ 756.714152][T15353] Tainted: [L]=SOFTLOCKUP [ 756.718468][T15353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 756.728520][T15353] RIP: 0010:strnlen+0x4b/0x80 [ 756.733212][T15353] Code: 49 89 fc 48 89 f8 eb 09 48 83 c0 01 48 39 e8 74 1e 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 0f b6 14 1a 38 ca 7f 04 84 d2 75 15 <80> 38 00 75 d9 4c 29 e0 48 83 c4 08 5b 5d 41 5c e9 40 87 07 00 48 [ 756.752821][T15353] RSP: 0018:ffffc90006b4f0d8 EFLAGS: 00010246 [ 756.758906][T15353] RAX: fffffffffffffc10 RBX: dffffc0000000000 RCX: 0000000000000000 [ 756.766876][T15353] RDX: 0000000000000000 RSI: 0000000000000010 RDI: fffffffffffffc10 [ 756.774848][T15353] RBP: fffffffffffffc20 R08: 0000000000000007 R09: 0000000000000000 [ 756.782817][T15353] R10: 0000000000000000 R11: 0000000000000000 R12: fffffffffffffc10 [ 756.790783][T15353] R13: ffff88801bcc3e00 R14: 0000000000000006 R15: 0000000000000010 [ 756.798750][T15353] FS: 00007f930888e6c0(0000) GS:ffff888123dd8000(0000) knlGS:0000000000000000 [ 756.807683][T15353] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 756.814264][T15353] CR2: fffffffffffffc10 CR3: 0000000059432000 CR4: 00000000003526f0 [ 756.822235][T15353] Call Trace: [ 756.825507][T15353] [ 756.828430][T15353] ? look_up_lock_class+0x64/0x120 [ 756.833547][T15353] trace_event_raw_event_drv_net_setup_tc+0x100/0x5d0 [ 756.840322][T15353] ? __pfx_trace_event_raw_event_drv_net_setup_tc+0x10/0x10 [ 756.847624][T15353] ? __pfx___might_resched+0x10/0x10 [ 756.852923][T15353] ? __mutex_lock+0x26d/0x1bd0 [ 756.857700][T15353] ieee80211_netdev_setup_tc+0x2c6/0x3e0 [ 756.863369][T15353] ? __pfx_ieee80211_netdev_setup_tc+0x10/0x10 [ 756.869550][T15353] tcf_block_offload_cmd.isra.0+0x1c4/0x310 [ 756.875449][T15353] ? __pfx_tcf_block_offload_cmd.isra.0+0x10/0x10 [ 756.881953][T15353] ? __pfx_down_write+0x10/0x10 [ 756.886801][T15353] tcf_block_get_ext+0x7ed/0x1950 [ 756.891810][T15353] tcf_block_get+0xa8/0x100 [ 756.896288][T15353] ? __pfx_tcf_block_get+0x10/0x10 [ 756.901373][T15353] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 756.907593][T15353] ? __pfx_qdisc_watchdog+0x10/0x10 [ 756.912766][T15353] ? __hrtimer_setup+0x208/0x330 [ 756.917686][T15353] cake_init+0x306/0xac0 [ 756.921931][T15353] ? qdisc_alloc+0x81b/0xb30 [ 756.926534][T15353] ? __pfx_cake_init+0x10/0x10 [ 756.931304][T15353] qdisc_create+0x47b/0x1060 [ 756.935895][T15353] tc_modify_qdisc+0xdcf/0x2120 [ 756.940775][T15353] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 756.946095][T15353] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 756.951387][T15353] rtnetlink_rcv_msg+0x3c9/0xe90 [ 756.956337][T15353] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 756.961844][T15353] ? __lock_acquire+0x49f/0x1a40 [ 756.966795][T15353] netlink_rcv_skb+0x159/0x420 [ 756.971589][T15353] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 756.977061][T15353] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 756.982342][T15353] ? netlink_deliver_tap+0x1ae/0xcc0 [ 756.987628][T15353] netlink_unicast+0x585/0x850 [ 756.992398][T15353] ? __pfx_netlink_unicast+0x10/0x10 [ 756.997717][T15353] ? __pfx_sock_has_perm+0x10/0x10 [ 757.002976][T15353] netlink_sendmsg+0x8b0/0xda0 [ 757.007742][T15353] ? __pfx_netlink_sendmsg+0x10/0x10 [ 757.013013][T15353] ? selinux_socket_sendmsg+0x198/0x2f0 [ 757.018552][T15353] ____sys_sendmsg+0xa4d/0xbe0 [ 757.023307][T15353] ? __pfx_netlink_sendmsg+0x10/0x10 [ 757.028578][T15353] ? __pfx_____sys_sendmsg+0x10/0x10 [ 757.033850][T15353] ? futex_hash+0x311/0x400 [ 757.038341][T15353] ? plist_del+0x308/0x510 [ 757.042745][T15353] ___sys_sendmsg+0x190/0x1e0 [ 757.047425][T15353] ? __pfx____sys_sendmsg+0x10/0x10 [ 757.052602][T15353] ? __lock_acquire+0x49f/0x1a40 [ 757.057701][T15353] ? futex_wake+0x220/0x5e0 [ 757.062192][T15353] __sys_sendmsg+0x160/0x210 [ 757.066766][T15353] ? __pfx___sys_sendmsg+0x10/0x10 [ 757.071866][T15353] do_syscall_64+0x115/0x870 [ 757.076442][T15353] ? clear_bhb_loop+0x40/0x90 [ 757.081103][T15353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.086983][T15353] RIP: 0033:0x7f930799e019 [ 757.091407][T15353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 757.110997][T15353] RSP: 002b:00007f930888e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 757.119394][T15353] RAX: ffffffffffffffda RBX: 00007f9307c25fa0 RCX: 00007f930799e019 [ 757.127359][T15353] RDX: 0000000000004890 RSI: 00002000000003c0 RDI: 0000000000000005 [ 757.135327][T15353] RBP: 00007f9307a3500c R08: 0000000000000000 R09: 0000000000000000 [ 757.143286][T15353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 757.151260][T15353] R13: 00007f9307c26038 R14: 00007f9307c25fa0 R15: 00007ffc3a4d4998 [ 757.159233][T15353] [ 757.162232][T15353] Modules linked in: [ 757.166104][T15353] CR2: fffffffffffffc10 [ 757.170237][T15353] ---[ end trace 0000000000000000 ]--- [ 757.175670][T15353] RIP: 0010:strnlen+0x4b/0x80 [ 757.180335][T15353] Code: 49 89 fc 48 89 f8 eb 09 48 83 c0 01 48 39 e8 74 1e 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 0f b6 14 1a 38 ca 7f 04 84 d2 75 15 <80> 38 00 75 d9 4c 29 e0 48 83 c4 08 5b 5d 41 5c e9 40 87 07 00 48 [ 757.199923][T15353] RSP: 0018:ffffc90006b4f0d8 EFLAGS: 00010246 [ 757.205973][T15353] RAX: fffffffffffffc10 RBX: dffffc0000000000 RCX: 0000000000000000 [ 757.213941][T15353] RDX: 0000000000000000 RSI: 0000000000000010 RDI: fffffffffffffc10 [ 757.221891][T15353] RBP: fffffffffffffc20 R08: 0000000000000007 R09: 0000000000000000 [ 757.229850][T15353] R10: 0000000000000000 R11: 0000000000000000 R12: fffffffffffffc10 [ 757.237800][T15353] R13: ffff88801bcc3e00 R14: 0000000000000006 R15: 0000000000000010 [ 757.245752][T15353] FS: 00007f930888e6c0(0000) GS:ffff888123dd8000(0000) knlGS:0000000000000000 [ 757.254660][T15353] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 757.261238][T15353] CR2: fffffffffffffc10 CR3: 0000000059432000 CR4: 00000000003526f0 [ 757.269195][T15353] Kernel panic - not syncing: Fatal exception [ 757.275453][T15353] Kernel Offset: disabled [ 757.279758][T15353] Rebooting in 86400 seconds..