last executing test programs: 3m1.959951539s ago: executing program 32 (id=116): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) (async) sendmsg$nl_xfrm(r1, 0x0, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x0, 0x2]}, 0x8, 0x0) read$FUSE(r2, &(0x7f0000001b40)={0x2020}, 0x205c) (async) read$FUSE(r2, &(0x7f0000001b40)={0x2020}, 0x205c) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) socket(0x10, 0xa, 0x200) syz_emit_ethernet(0x3e, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000ded30045000030030000000001907864010100ac1414aa0b009078032ee00045000001000000006ac52a4c00000000ac1414aa924de3221e1f4d9207"], 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000ded30045000030030000000001907864010100ac1414aa0b009078032ee00045000001000000006ac52a4c00000000ac1414aa924de3221e1f4d9207"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4810}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006540)={0x2020}, 0xfffffce2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x2000000000000034, &(0x7f0000001080)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000000)={0x2}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000004c0)='\x00'/14, 0x0, 0x6500, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) fsmount(r3, 0x1, 0xa) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14004bcd8d2c51f1fe8e0000bd7275e0f69d3d24a4f169abb316579417ebd6c1549c61407bf8fbf93c4a92f15cc99d0e7e98e698b2307627f8d3e76c51d23d5d6ef2c190cce613d7ec72a527f26d3ac7272faddd8f1c703322b6ec99b4e88b8fe2fccfbd71bd68895bc212d4362772c36242f3f88ff872d6e4136fa3c0801c66f2eaeaea21bc131b378f08e6e42a70f021009b4b53cb4f2c32c89d996edadcf906edd46106cebf10d7a9812a55c8ae71eb2330d05a4a1f867df57efcad9caf5b900645a273", @ANYRES16=r7, @ANYBLOB="430b29bd7000fbdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x2400c846}, 0x4004004) (async) sendmsg$IPVS_CMD_GET_SERVICE(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14004bcd8d2c51f1fe8e0000bd7275e0f69d3d24a4f169abb316579417ebd6c1549c61407bf8fbf93c4a92f15cc99d0e7e98e698b2307627f8d3e76c51d23d5d6ef2c190cce613d7ec72a527f26d3ac7272faddd8f1c703322b6ec99b4e88b8fe2fccfbd71bd68895bc212d4362772c36242f3f88ff872d6e4136fa3c0801c66f2eaeaea21bc131b378f08e6e42a70f021009b4b53cb4f2c32c89d996edadcf906edd46106cebf10d7a9812a55c8ae71eb2330d05a4a1f867df57efcad9caf5b900645a273", @ANYRES16=r7, @ANYBLOB="430b29bd7000fbdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x2400c846}, 0x4004004) 2m46.452515018s ago: executing program 33 (id=178): socket$nl_sock_diag(0x10, 0x3, 0x4) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000004fc0)=[{{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000000500)="26ef26da06fcc43959ccc53ee926b47804ba3281fcac63bf954c857621deb501478081", 0x23}, {&(0x7f0000001c40)="65e3d6347d4e5a56100bf4c4f9e05214c8f2d4656aea29151d3ca7f936d66855822d51bf7deed302d625ab319825893b4a84e477c08f8f7afbc81b14", 0x3c}], 0x2}}], 0x1, 0xc840) (async) sendmmsg(r0, &(0x7f0000004fc0)=[{{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000000500)="26ef26da06fcc43959ccc53ee926b47804ba3281fcac63bf954c857621deb501478081", 0x23}, {&(0x7f0000001c40)="65e3d6347d4e5a56100bf4c4f9e05214c8f2d4656aea29151d3ca7f936d66855822d51bf7deed302d625ab319825893b4a84e477c08f8f7afbc81b14", 0x3c}], 0x2}}], 0x1, 0xc840) sendto$inet(r0, &(0x7f00000002c0), 0x0, 0x5e, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000005000), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000005000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x15) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0xeb0, 0x30, 0xb, 0x0, 0x0, {}, [{0xe9c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x1, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x5}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x0, 0xfffffffc, 0x100, 0x4, 0x1000000}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x7, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0x8, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x2, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x6, 0x40000003, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0x3, 0x3, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x1000000, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000, 0xcb06}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x1, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945b, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x2, 0x0, 0x1}, {0x2, 0x8, 0x10000002, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0x1}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x9, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x7347}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x800003, 0xfffffffa, 0x736d}, {0x7f, 0x19a, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0xffffffff, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x6, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x7ff}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x5}, {0x7f, 0x9, 0x6, 0xffffffff, 0x2, 0x8}, {0xfffffff7, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x21, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x9, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x8000004, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x61c5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc652, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0xfffffffe, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xae82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x9, 0xdc}, {0x6, 0x6, 0x29b3, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0xa859, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x70a0, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x7, 0x7dc, 0x5, 0x8000, 0xffff, 0x7}, {0x80000000, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x202, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xfffffff9}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb0}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000100)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) setrlimit(0x6, &(0x7f0000000040)={0x2, 0x9}) close_range(r3, r6, 0x0) (async) close_range(r3, r6, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) (async) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r8, 0x0, 0x0) (async) write$rfkill(r8, 0x0, 0x0) 2m37.59864413s ago: executing program 34 (id=197): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f00000014c0)=ANY=[@ANYBLOB="18010000756c6c2500000000002020207b1af8ff00000000bfa1000000000000070100001cfeffffb702000008000000b7"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x40) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000005c0)={0x2, 0x0, [{0x0, 0x1, 0x1, 0x0, @msi={0x5, 0x1, 0x2, 0x3}}, {0x3, 0x5, 0x0, 0x0, @sint={0x1, 0x81}}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000080)}], 0x1) poll(&(0x7f0000000140)=[{r6, 0x44}], 0x1, 0xe6) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xf, 0xd, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x7fffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ldst={0x3, 0x3, 0x4, 0x9, 0x8, 0xc, 0xfffffffffffffffc}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) 2m32.543427925s ago: executing program 6 (id=287): r0 = socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x90, 0x1, [@m_ct={0x44, 0x11, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x0, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb635773f06ebbeed, 0x50, 0xffffffffffffffff, 0x0) pipe2$watch_queue(0x0, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000000e00)={0xfc, {"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", 0x1000}}, 0x1006) write(r0, &(0x7f0000000e80)="1300000032001f00320300f9002304000a04d6", 0x13) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r5) r7 = socket(0x21, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e21, 0x2003, @private1={0xfc, 0x1, '\x00', 0x10}, 0x6}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4, 0x2, @loopback, 0xfffffffc}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000300)={0x0, 0x56, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="a3000000", @ANYRES16=r6, @ANYBLOB="010100000000ffdbdf252b00000008000300", @ANYRES32=r8, @ANYBLOB="0c733b64cb9f75a84dd9009900080000001700000004003400"], 0x2c}}, 0x20004800) setsockopt$sock_int(r7, 0x1, 0x2a, &(0x7f0000000100)=0x8, 0x4) 2m32.323703505s ago: executing program 6 (id=290): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x40000080}]}) 2m32.245381365s ago: executing program 6 (id=293): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x1000000, 0x0, {0xa, 0x0, 0x404}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x8890}, 0x20000000) 2m32.123348139s ago: executing program 6 (id=294): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf85, 0x3}, 0x1c) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0x1a, r1, 0xfffffeff, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x0, r1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) r2 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r2, &(0x7f00000009c0)={&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f0000000880)=[{&(0x7f0000000b40)=""/228, 0xe4}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000540)=""/160, 0xa0}, {&(0x7f0000000640)=""/225, 0xe1}, {&(0x7f0000000740)=""/177, 0xb1}, {&(0x7f0000000800)=""/82, 0x52}], 0x6, &(0x7f00000008c0)=""/218, 0xda}, 0x102) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x1, 0x5, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000300), 0x280, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0xb, 0x4, 0xfffffffd, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x740, 0x1800, 0x1, 0xac, 0x5}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r9 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0xfe33) io_submit(r7, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r6, 0x0}]) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000740)={'ip_vti0\x00', &(0x7f0000000640)={'tunl0\x00', 0x0, 0x7, 0x20, 0xf9, 0x9, {{0x5, 0x4, 0x2, 0x4, 0x14, 0x67, 0x0, 0x86, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}) write(r3, &(0x7f0000000b00)='0x', 0x2) 2m32.067536659s ago: executing program 6 (id=295): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c0000000c00018008000100", @ANYRES32=r2, @ANYBLOB="200003800400010010000400004017b402000000000000000800020049"], 0x40}}, 0x0) (async) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x6, 0x370, &(0x7f0000000800)={{0x12, 0x1, 0x300, 0x34, 0x35, 0xdc, 0x20, 0x3f0, 0x4016, 0x834b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x35e, 0x1, 0x4, 0xfd, 0x80, 0x6, "", [{{0x9, 0x4, 0xda, 0x3, 0xb, 0x8b, 0x94, 0xd, 0x40, [], [{{0x9, 0x5, 0x7, 0x10, 0x200, 0x90, 0x5, 0xa0}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0xab, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xfa, 0x3}]}}, {{0x9, 0x5, 0x7, 0x3, 0x400, 0x2, 0x57, 0x0, [@generic={0xb1, 0x31, "fe8b3fa98950c97be7ffa1671e1605b9acbd2810ec9701bb61ed6f30fe1aed90ff7b80bb21253340e8551e22c52a44b67ca52b53f9539cd2b6aaedae985692d66b91e479a8e3de2db557bf7a50b8b95843c1839c0c1778a3f0cb37ec05614680b3c6ebec8c9978798efe3c5b35167e069860fff3ac978085b9aa95a20b385ca7fab16dddfb6650fa108e34fa4b8929e47295ff3752b77349fe36d92d163c4daef68937ff1deb52e9e15098538e25bb"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x8b, 0xfa, 0x8, [@generic={0xb8, 0x27, "4f0ec173259c545b7593eae1651940b69232c3c015424ffa6bbbeb7e3b71881c76415137555a65bd35cff11aae68a7def7b84f98db51028f9ac4df2b1ee7e39e83cf6253cd769c7c08c1f18645882504a91c7fe077927d34a46024e56d9e0fadc1a02210888afe8f129926681af0264b96ef91ec53d0deff7255c188f0e490e40fe4c6a96079c61ae5718b2cbcd08fb1ef3f3901ef069df6dbb26ea916e1d9b29deb83fe44d4d953c4a182520221032bff0683705a3f"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x0, 0x5, 0x1, 0x87, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x4911}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x8, 0xf1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x80, 0x4}]}}, {{0x9, 0x5, 0x9, 0x6, 0x400, 0xea, 0x5, 0xd, [@generic={0xd6, 0x23, "f8882c65ad289ee014d81936382df14d4e41400efd8c4351876b654c0534180792b598e8e010b642a862fce2ab43db0cb79af34b8e31454414a8c5525b80c9b0b49c9453a37c5adb96c4a5a038167e26602577f5c21e11c301f872357138fd46968c4b31bc76379743af27abf4dcaaf04d1bd6fa68c6c0fc131e3d0ba29c13fad9766017958f2b4da0237f364160ba76d2a60099da301ed3ade535c85b6d58cc7133090ab0c987c91e2666e0c2044e1cd751f8d9d5a029b43a4d4c61a0774a38c5edd2f2ba6daca882d461e6b502d4e1c4ba1481"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x48, 0x99, 0x10, 0x3}}, {{0x9, 0x5, 0x6, 0x8, 0x400, 0x9, 0x3, 0x5}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x6, 0x76, 0x6, [@generic={0x1c, 0xf, "ce66a5ff2b23539e35ce98acb316b3e3245587f37e91523bb22b"}, @generic={0x64, 0x2, "3b90ca03d2f73f24e94b83a602a892dd821937e15ec05ca731a247a2f468d26017eb2edd9af7ea12b2acd66fd7ddecd1daf6259b58cfb2c924b918e22e6fa34f7e3cc4d014b6dc63bd651d7e505bf6cad34d2975e6dc47ba69c34174d6f1d76eac0a"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x200, 0x3, 0x7f, 0x54, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x7}]}}]}}]}}]}}, &(0x7f0000000dc0)={0xa, &(0x7f0000000b80)={0xa, 0x6, 0x110, 0xff, 0x69, 0x7, 0x10, 0x1}, 0xd6, &(0x7f0000000c80)=ANY=[@ANYBLOB="050fd60001d11003e02d5bb67938344da14d265f236d26b7f3fc4173721e142f3f6e45e7eeac65744e56140b2df04fab2d4d0509856febf22c51faadc1dd8b995c1c89da6718d9cf8baaf94de5f3486882175113374d22758fd52e6d0edee3b7323e740100458841598a4b5665b50c5ac63a9534eb36a1e4f21a847fa33f2d5bc0d54ff463066ca113f478f214448794bbeb313a2dd125db76e17f49ce2b3b0b4a700b73277877e0fbd9b78519836288b51ee5dc3429164dfe26ccb4c275951e379a1aa8c3face6721703a5ea6b8046ae75aa9ec08cb"], 0x1, [{0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x413}}]}) (async) syz_usb_control_io$sierra_net(r3, &(0x7f00000003c0)={0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="000b020000000265", @ANYRES64=r3], 0x0}, 0x0) (async) r4 = syz_open_dev$dri(&(0x7f0000000240), 0xfffffffa, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f0000000140)) (async) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r6) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) r7 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_PROPERTY(r7, 0x80106f53, &(0x7f00000001c0)={0x1e, 0x0}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@enum={0x9, 0x1, 0x0, 0xf, 0x4, [{0xa, 0x3}]}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x30, 0x0, 0x1}, 0x28) ioctl$EVIOCGMASK(r5, 0x5b02, 0x0) 2m30.613738762s ago: executing program 6 (id=299): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) (async) bind$bt_hci(0xffffffffffffffff, 0x0, 0x39) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a00000"], 0xa8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)=0x0) ptrace$getregset(0x4204, r4, 0x3, &(0x7f0000000340)={&(0x7f0000000280)=""/48, 0x30}) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) (async) recvmmsg(r3, &(0x7f0000007700), 0x318, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @local}}, [0x9e8, 0x7, 0x0, 0x7, 0x9, 0x5a305173, 0x10ff, 0xfffffffffffffff9, 0x8, 0x0, 0x4, 0x100, 0x6, 0x7, 0x7]}, &(0x7f0000000600)=0x9d) (async) sendfile(r5, r5, 0x0, 0x23) 2m30.576086772s ago: executing program 35 (id=299): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) (async) bind$bt_hci(0xffffffffffffffff, 0x0, 0x39) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a00000"], 0xa8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)=0x0) ptrace$getregset(0x4204, r4, 0x3, &(0x7f0000000340)={&(0x7f0000000280)=""/48, 0x30}) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) (async) recvmmsg(r3, &(0x7f0000007700), 0x318, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @local}}, [0x9e8, 0x7, 0x0, 0x7, 0x9, 0x5a305173, 0x10ff, 0xfffffffffffffff9, 0x8, 0x0, 0x4, 0x100, 0x6, 0x7, 0x7]}, &(0x7f0000000600)=0x9d) (async) sendfile(r5, r5, 0x0, 0x23) 1m51.648357906s ago: executing program 7 (id=537): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) recvmsg(r0, &(0x7f00000009c0)={&(0x7f0000000380)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000940)=[{&(0x7f00000006c0)=""/213, 0xd5}, {&(0x7f0000000840)=""/101, 0x65}, {&(0x7f00000008c0)=""/119, 0x77}], 0x3, &(0x7f0000000980)}, 0x10000) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/ehci-pci/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)='0000:00:1d.7', 0xc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/drivers/ehci-pci/bind\x00', 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x6, 0x4, 0x4, 0x56}, {0x5, 0x8, 0x50, 0x1001}, {0x902b, 0x7, 0xd0, 0xc}]}) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) write(r5, &(0x7f00000002c0)='0000:00:1d.7', 0xc) 1m50.456160862s ago: executing program 7 (id=546): r0 = shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/63) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$dri(&(0x7f0000000000), 0xb, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x2}) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x2000004, 0x4004012, r2, 0x100300) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r1], 0xe8}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000c40)={0x3, &(0x7f0000000040)=[{0x16, 0x0, 0x5, 0x7fff0000}, {0x0, 0x0, 0x3f, 0x4}, {0x4, 0xeb, 0x2, 0x388587da}]}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r3, &(0x7f0000000c00)=[{0x9, 0x10, 0x1, 0xd, @tick=0x9, {0x7, 0x3}, {0x0, 0x8}, @quote={{0x5}, 0x100, &(0x7f0000000bc0)={0xfa, 0x15, 0x73, 0x8, @time={0x1ff, 0x7ff}, {0xf7, 0xea}, {0xfb, 0x7}, @quote={{0x3, 0x2}, 0x7, &(0x7f0000000b80)={0x0, 0x30, 0xa, 0x1, @tick=0xf364, {0x7f, 0xff}, {0xb, 0x6}, @connect={{0x5, 0xa1}, {0x7, 0x30}}}}}}}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f0000000080)={0x0, 0x1, {0x2, 0x0, 0x100005, 0x1}, 0x7}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000003540)=[{{&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000080)="93", 0x1}, {&(0x7f0000002400)="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", 0x4e4}], 0x2}}, {{&(0x7f0000000740)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000000780)="e4", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000000), 0x4) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x1f, 0x6, 0x520, 0x0, 0x358, 0x14c, 0x3f8, 0x0, 0x48c, 0x48c, 0x48c, 0x48c, 0x48c, 0x6, &(0x7f00000001c0), {[{{@ip={@multicast2, @remote, 0xff, 0xffffffff, 'veth0_to_batadv\x00', 'macvlan0\x00', {}, {}, 0x5c, 0x5, 0x41}, 0x0, 0x70, 0x94}, @TTL={0x24, 'TTL\x00', 0x0, {0x1, 0x2d}}}, {{@ip={@remote, @remote, 0xffffffff, 0xffffff00, 'batadv0\x00', 'caif0\x00', {}, {0xff}, 0x29, 0x0, 0x14}, 0x0, 0x94, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x24}, {{0xffffffffffffffff, 0x1, 0x1}}}]}, @ECN={0x24, 'ECN\x00', 0x0, {0x1, 0x7, 0x1}}}, {{@uncond, 0x0, 0x1e8, 0x20c, 0x0, {}, [@common=@inet=@policy={{0x154}, {[{@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, [0xffffffff, 0xff, 0xff000000, 0xffffffff], @ipv6=@mcast1, [0xff000000, 0xffffff00, 0xff000000, 0xff0000ff], 0x4d6, 0x3505, 0x3b, 0x1, 0x2}, {@ipv6=@private1, [0xff, 0xff000000, 0xff000000], @ipv4=@remote, [0xff000000, 0xffffffff, 0x0, 0xffffff00], 0x4d2, 0x3502, 0xff, 0x1, 0x0, 0x1}, {@ipv6=@remote, [0x0, 0xffffffff, 0xff000000, 0xffffff00], @ipv4=@empty, [0xff000000, 0xffffff00, 0xff, 0xff], 0x4d5, 0x3505, 0x29, 0x0, 0xa, 0x10}, {@ipv4=@dev={0xac, 0x14, 0x14, 0x2a}, [0x0, 0x0, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0xffffffff, 0xffffff00, 0x101ffff00], 0x4d5, 0xe, 0xfa, 0x0, 0x5}], 0xc, 0x2}}, @inet=@rpfilter={{0x24}}]}, @TTL={0x24, 'TTL\x00', 0x0, {0x2, 0x8}}}, {{@ip={@private=0xa010101, @remote, 0xff000000, 0xffffffff, 'tunl0\x00', 'rose0\x00', {0xff}, {}, 0x2e, 0x1, 0x28}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x7fffffff, @broadcast, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x94}, @ECN={0x24, 'ECN\x00', 0x0, {0x10, 0x3}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x57c) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, &(0x7f0000000240)={[{}, {@subsystem='freezer'}]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a00)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000325a47000ffdbdf256600000008000300", @ANYRES32=r7, @ANYBLOB="08009f000400000005001901090000000800a000080000000400b800"], 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000891) r8 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) r9 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x83, 0x3af}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r10, r11, 0x2c, 0x1000) io_uring_enter(r9, 0x7fffffe, 0x5, 0x5, 0x0, 0x0) landlock_restrict_self(r8, 0xd) r12 = openat$vcsu(0xffffff9c, &(0x7f0000000a80), 0x14002, 0x0) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r12, 0x3b70, &(0x7f0000000ac0)={0x90, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}}) rt_sigsuspend(0x0, 0x63744a3cdf01fe7c) 1m49.402160278s ago: executing program 7 (id=550): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x5dd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) socketpair(0x1e, 0x1, 0x7, &(0x7f0000000000)) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) close(r1) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000000)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/220, &(0x7f00000000c0)=""/80, &(0x7f0000000780)=""/82}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000340)=0x1) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 1m48.431747115s ago: executing program 7 (id=553): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0xa0) mount$9p_virtio(&(0x7f0000000200), &(0x7f00000001c0)='./file0\x00', &(0x7f00000004c0), 0x2, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x149442, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="10000000f5ffffff4fc1dd04c87cd3e8edda0bebe6dbd35d8f314b6f7b189c903783d0a355e1a39ef61c4568e959ffe82100df3ba8ba5d377e8bf235bfb2f916ebe81b6e2d62b4956a80a58123c0216ca8dec23cf5647549a4dd196d023b60d9d5220dba3557a757d71820464dd2d366ef4ed22da8797f1f346f7b802c55d39e30c23dd92488f41761a59b", @ANYRES64=0x0], 0x10) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r4 = openat$cgroup(r0, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f00001e7000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x100, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$cgroup_procs(r4, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r5 = openat$sr(0xffffff9c, &(0x7f0000000100), 0xa0002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r5, 0xc0bc5310, &(0x7f0000000480)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}}, 0x404c840) connect(0xffffffffffffffff, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9, 0x1}, 0x80) 1m47.333135059s ago: executing program 7 (id=555): socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x210, 0x8440) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0xc2e02, 0x37) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000780)={r2, 0x0, {0x0, 0x0, 0x0, 0x32, 0x4000000000001001, 0x0, 0x0, 0x1c, 0x1d, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "3207000000061a74df2cfc06e89f3d9e234b30c50997d3bef40976ff7bfe55cd4a4783ed4a524bd3ff1fcaed1e831fa79a0000000000e000", "675237d90800080000000018090000000000000061b7ad3300", [0x3, 0x6]}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00'}) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x7f, &(0x7f0000000040)="03020000008002ff", 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xb}, @hci_ev_le_remote_conn_param_req={{}, {0xc8, 0x5b67, 0x3, 0x7b05, 0xfffc}}}}, 0xe) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r7, 0xae03, 0x42) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x102, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x24e, 0x0, 0x8}]}) syz_kvm_setup_cpu$x86(r7, r10, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, &(0x7f00000004c0)="64400f01c5410f01cb66b873000f00d0f3f0450fc74935b9800000c00f3235001000000f30c7442400e2000000c744240203000000ff2c240f01f866baf80cb8aac4d78bef66bafc0c66b80f0066efc401f96e2766ba610066ed", 0x5a}], 0x1, 0x4, &(0x7f0000000580)=[@dstype0={0x6, 0x5}], 0x1) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x40}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000180)={'netdevsim0\x00'}) 1m46.613265173s ago: executing program 7 (id=558): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000500)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}, @in={0x2, 0x4e23, @rand_addr=0x64010102}, @in={0x2, 0x4e24, @private=0xa010100}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e21, 0xff, @empty, 0xcaa}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x31}}], 0x98) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r3, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8a5d9c50cb711a2d0800000c8be172a0258844f008b6", @ANYRES16=r3, @ANYBLOB="01002dbd7000fcdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x40090}, 0x44000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000300)={'wg1\x00'}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="04002abd7000fb9bdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x11) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x5, 0x10}, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f00000014c0)=ANY=[@ANYBLOB="18010000756c6c2500000000002020207b1af8ff00000000bfa1000000000000070100001cfeffffb702000008000000b7"], &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x3, 0x9, 0x0, 0x6}, 0x20) setresuid(0x0, 0xee01, 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00', 0x300, 0x0, 0x3, 0x9, 0x3, 0x6}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) 1m46.299731085s ago: executing program 36 (id=558): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000500)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}, @in={0x2, 0x4e23, @rand_addr=0x64010102}, @in={0x2, 0x4e24, @private=0xa010100}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e21, 0xff, @empty, 0xcaa}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x31}}], 0x98) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r3, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8a5d9c50cb711a2d0800000c8be172a0258844f008b6", @ANYRES16=r3, @ANYBLOB="01002dbd7000fcdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x40090}, 0x44000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000300)={'wg1\x00'}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="04002abd7000fb9bdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x11) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x5, 0x10}, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f00000014c0)=ANY=[@ANYBLOB="18010000756c6c2500000000002020207b1af8ff00000000bfa1000000000000070100001cfeffffb702000008000000b7"], &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x3, 0x9, 0x0, 0x6}, 0x20) setresuid(0x0, 0xee01, 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00', 0x300, 0x0, 0x3, 0x9, 0x3, 0x6}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) 1m27.173138284s ago: executing program 5 (id=636): syz_open_dev$media(0x0, 0x3, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000000)=0xfffffffe, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x2, &(0x7f00000001c0)=[{0x6, 0x3, 0x0, 0x7fff0000}, {0x401, 0x8, 0xa, 0x5}]}) fanotify_init(0x200, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x0, @remote, 0x1}, 0x1c, 0x0}}], 0x2, 0x0) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x7, 0x30, 0x2, 0x5}, &(0x7f00000000c0)=0x18) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000010"], 0xfe44, 0x0) r5 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x501000) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x4c, 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r8 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r8, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r7, 0x0, 0x0}) ioctl$VIDIOC_G_INPUT(r8, 0x80045626, &(0x7f0000000180)) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f0000000200)=[{0x106, 0x3, 0x0, 0x5fff2000}, {0x6, 0xa3, 0x54, 0xffffff01}]}) close_range(r9, 0xffffffffffffffff, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) io_setup(0xffff, &(0x7f0000000140)) ioctl$TIOCPKT(r10, 0x5420, &(0x7f00000000c0)=0x6) 1m26.749887666s ago: executing program 5 (id=638): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r2, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) r3 = fsopen(&(0x7f0000000040)='fuse\x00', 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f0000000040)='\x04]{!\x00', 0x5) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='user_id', 0x0, 0xffffffffffffff9c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008031, 0xffffffffffffffff, 0x300) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x0, 0x0, 0x0, 0x8, 0x2}]}}, 0x0, 0x26, 0x0, 0x1, 0x4}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f3fdc20221802324a130102030109021b0001000010000904cdf100d3"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, 0x0, &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 1m22.908367408s ago: executing program 5 (id=653): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fanotify_init(0xa01388d7af6e45ad, 0x400) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000005f40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002600)=[{&(0x7f0000002280)="c4", 0x1}], 0x1}}, {{&(0x7f0000002780)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000002e80)=[{&(0x7f00000027c0)='I', 0x1}], 0x1}}], 0x2, 0x4050000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000380)={0xf, 0x2, 0x80000000, 0xffff, r2}, 0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r2, 0x98}, &(0x7f00000000c0)=0x8) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x94) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0c000180080006", @ANYRES32, @ANYBLOB="0c000280050023000000000008000500", @ANYRES32=r7], 0x318}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) splice(r3, 0x0, r5, 0x0, 0x7, 0x4) vmsplice(r4, &(0x7f00000003c0)=[{&(0x7f00000002c0)='\"', 0x1}], 0x1, 0x3) 1m22.041466429s ago: executing program 5 (id=656): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x600, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0xb, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x80, 0x8, 0x8, 0x8, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}}, 0x44) write(0xffffffffffffffff, &(0x7f0000000240)="14000000140005b7ffcc", 0xa) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$nci(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200330000002f1eafbcf706e1050000008864000f1102ee16005782973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24f14ab78fd718947077ea736251c7b8eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c9", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) write$nci(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="e87d1120c34370074c8c3159e585e1e7d9d64a51aed756c6943ef9fd32f2845cbdf2adf9b97e6be3d8dea2bee1471e88037c2ffb589116b46549ed728fa80200000000000000565d0879d80203c98a72320180f58b97c9e7006bc20e6abd9264e308eca7ef78d98a2d6b410d2b15e6e085cca6a169fd5801b79b5e5dd5ca55277a42df"], 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6, 0x5, 0x80000001}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000540)='.\x00', 0x850003d1) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$snapshot(0xffffff9c, &(0x7f0000000280), 0x2a000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f00000000c0)={0x500, 0x80600}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1m20.887952972s ago: executing program 5 (id=667): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x31) mount(0x0, 0x0, &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000007000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='10 1 1\x00', 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim10/sriov_numvfs\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='1\x00', 0x2) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[@ANYBLOB="3800000012000100010000000000000000000000000000000000000000000000100003006e657464657673696d31300008001d0001000000"], 0x38}}, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1}, 0x14) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/heartbeat/dead_threshold\x00', 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x4, 0x7f}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x14, 0x0, 0x0, 0x8000, 0x240c8, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x40000, 0x3}, 0x50) 1m19.692479473s ago: executing program 5 (id=672): creat(&(0x7f0000000400)='./file0\x00', 0x128) open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) r0 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x100005, 0xa}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, 0x0) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r5 = syz_open_procfs$pagemap(0x0, 0x0) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x4004000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setregid(0xee00, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000240)=[{&(0x7f0000000100)="eb", 0x1}], 0x1, 0x0) r8 = openat$mixer(0xffffffffffffff9c, 0x0, 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r8, 0x40086603, &(0x7f0000000040)) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) r9 = openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x1) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x5f7dd531}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r9, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={r10, 0x200}, 0x8) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000240)={0x3, 0x0, 0x2000, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) openat$dlm_monitor(0xffffff9c, &(0x7f0000000340), 0x8000, 0x0) 1m10.945397931s ago: executing program 8 (id=709): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000540), 0x40, 0x0) (rerun: 64) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000002028)="01000000000000000030000000000000", 0x10) (async) write(0xffffffffffffffff, &(0x7f0000003000)="efbeadde", 0x4) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x1, 0x0, 0x1000, 0x4000, &(0x7f0000000000/0x4000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000000c0)={0x2, 0x0, [{0x40000001, 0x5, 0x2, 0x31237648, 0x2, 0x1, 0x80}, {0x1, 0x2, 0x2, 0x7, 0x4, 0x7fffffff, 0x4e38}]}) (async) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r3, 0x4068aea3, &(0x7f0000000240)={0xa3, 0x0, &(0x7f0000000300)}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000002540)={0x9, 0x0, [{0x884, 0x0, 0x9}, {0x880, 0x0, 0x7}, {0x642, 0x0, 0x7f}, {0xa25, 0x0, 0x8}, {0x384, 0x0, 0x3}, {0xa77, 0x0, 0x3}, {0x201, 0x0, 0x7}, {0x2a3, 0x0, 0x1d5e000000}, {0x1db, 0x0, 0x9}]}) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x59}, [@jmp={0x5, 0x0, 0xe}]}, &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x3}, 0x94) (async, rerun: 32) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f00000004c0)=@vmx={0x4, 0x0, 0x2080, {0x1000}, {"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f00"}}) (async) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000180)=0xc) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000200), 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m10.390014388s ago: executing program 8 (id=712): r0 = socket$igmp(0x2, 0x3, 0x2) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000080)=0x10) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00'}) 1m10.082855226s ago: executing program 8 (id=714): r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket(0x2b, 0x1, 0x1) listen(r1, 0x5) accept4$phonet_pipe(r1, 0x0, 0x0, 0x80000) socket(0x1e, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r2 = syz_ublk_setup_io_uring(0xd30, &(0x7f0000000100)={0x0, 0x11aa, 0x400, 0x2, 0x313}, &(0x7f0000000180), &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f00000003c0)={&(0x7f0000002000)={[{&(0x7f0000000340)="f2816b4da9bc64351dbd293ca3bbe9804a894729259fd6f6c97458f103cd9dd1f6123032a690d2add5e3bdb51c34e67d2da6bf30ea63865a034014dfc25b7f80d950e1d8617e8ae15e3e03094b91462997dfc6bd530d94871bcaef40691565e3bdadeab43575208bbeac1a69771233", 0x6f}]}, 0x1}, 0x1) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000000fe800000000700000000000000000000fe8000000000000000000000000000aa000000000000000000"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c010000160001000000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa4e240000000000000000a0003b00", @ANYRESOCT, @ANYRESHEX, @ANYRES16], 0x11c}, 0x1, 0x0, 0x0, 0x804}, 0x0) socket(0x28, 0x3, 0x6) syz_open_dev$dri(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)=@newtaction={0x768, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0xf4, 0x1, [@m_ct={0xa8, 0x5, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe48, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x68, 0x6, "66bd19aab6cda8a5aa771a6d1cc22610592feb55d67242f88700810709bcfabdbdec17155b0f1db4431bb74c8679bcbb36c3da9ab27fadafd993a8611fb47890090c4f783ff02d0da38730734887590e86eb35c93cea86d390cd9dbdfc5262ba31b1f68c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x4, 0x4}, 0xfffe}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}, {0x660, 0x1, [@m_simple={0x168, 0xe, 0x0, 0x0, {{0xb}, {0xb8, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x1a, 0x3, '\x00\xdc\x11\xfb4p3y\'\xd5\x81\xc2\"\xbb\x19*\xa4\xf3\x8c#!W'}, @TCA_DEF_DATA={0x12, 0x3, 'freezer.state\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x446, 0x6, 0x8, 0x7}}, @TCA_DEF_PARMS={0x18, 0x2, {0x34e60c46, 0xc1c, 0x5, 0x7, 0xd04}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xd33, 0xb1, 0x3, 0x3, 0x18000000}}, @TCA_DEF_DATA={0x12, 0x3, 'freezer.state\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xff, 0x4c51716f, 0x6, 0x8001, 0xd2}}]}, {0x88, 0x6, "33871414e71020da1533dd2aca967d84a0878a401c2f67b2476652deca2799c183f2558ffa5b45cc86132faab845fbc959e1f3475d562f0af0cad6438d140b98a3ac0c91cbeda4e90ed7ab40abf3e91fdc05dd05d88e280ac16da899f66172eb0a6e60f48e223840545c79005cd3035ddb3139ca755056ddaa841eae78a5d3e28eaadc79"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_skbedit={0x110, 0x1, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x12000000, 0x0, 0xffffffffffffffff, 0x7, 0x9}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffffd}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x10001, 0xa, 0x3, 0x9, 0x8}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}]}, {0x9c, 0x6, "ed2d72820f3470af9f13a24e975e81669e7bbcb3b7f85672c511127ecd7de4f8b49b862e4c47bac642aa243a6d7ed932f76870cdf6759165b5d88c889f9580623d378eadb1e18cf88f6b687b774b339bbd9089d915d617ce66350eb737769471ffe7c4de86a6d13aeaeefbdca3fcfd0dba675d7a19ad67abc1ed4510d498186411dd3a71eff9b3400e281840c6e0da20a720b90aa40dc0e6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ct={0xe4, 0x5, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "b18748205939d176b3b4738bead04b97"}]}, {0xa8, 0x6, "1f5d314d3dec7aff2cf771df10e1c00c11b33a351a607ffb608b6f28fbbf9cf7bee334f192c3b3fdc4f6e6dbcb7820281c3533739940500abf7abbc9979deda004296a86d773a3581399b432331b39be04a3be257bdaac8edcfea9d46ecb7ea3cc278356ef72057e0b28641556249d10003682ea31d860864ed6c1ab7f8a051f6d8cd434c0fe8555962b73e100b9d13b651d1e334f75e062fba3f2aad68803c61d643cf4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ctinfo={0x58, 0xb, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xffffffff}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x1ff}]}, {0x1b, 0x6, "9a927377ccfa746d44d05d368528dcdcb5f0ee7a183794"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mirred={0x1cc, 0x17, 0x0, 0x0, {{0xb}, {0x124, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x8, 0x0, 0x523555df, 0x9}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x350000, 0x4, 0x6, 0x40}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x50, 0x401, 0x8, 0x2, 0x2}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x237, 0x9, 0x10000000, 0x26, 0x7fffffff}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffb, 0x1, 0x7, 0xb, 0x6}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xe3bf, 0x7, 0x0, 0x6}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0xffffffff, 0x3, 0xe7b0, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x9, 0x10000000, 0x2, 0x80}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6244, 0x0, 0xffffffffffffffff, 0xa815, 0x7a}}}]}, {0x7d, 0x6, "a85ac613805cabd6357964e891063e0ef51b17e1418e9f87b39cbb80db57e21bdd60a3f1434461411a455ad12810779a099c1feeb7e6bedd0d901aae07ae6f18e72594360dac77d0df49e6fc4061b8bb89327e99b6923820ae219179f5c46e58e124dddfb8a8082c82ef4c8a3eee9b9a4956892acc01ae5af5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x7, 0x2}}}}, @m_ife={0xdc, 0xf, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x20, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x9a73}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x81}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x1}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_TYPE={0x6, 0x5, 0xffd5}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x8001, 0x20000000, 0x5, 0x800}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, {0x58, 0x6, "cf4c894b541e8ebbb08f82da12a3878de9643afda85377849c1c09c9f60d1746eb834391eb2be1a6fbe73a2bc8c2a24e344a0a2f2beabe725d569bd5bdea8255b2f354dd1d6ed632325c04b40995892249fafbf8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x768}, 0x1, 0x0, 0x0, 0x8820}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x6, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000500)) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000000)=ANY=[]) chdir(&(0x7f0000000100)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x141842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.state\x00', 0x275a, 0x0) 1m9.739939301s ago: executing program 4 (id=715): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x429c1ca9e85966f4}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000f40)={0x0, 0x8000000000000000, 0x0, [0x401, 0x8, 0x92, 0x8, 0x53], [0x1, 0x4, 0x9, 0x4, 0x2, 0x1, 0x1, 0x3, 0x8, 0x8, 0x5, 0x7, 0x7, 0x1, 0x0, 0x8001, 0xfc68, 0x2, 0x3d6, 0x6, 0xa318, 0x8, 0x6, 0x7, 0x7a5, 0x7, 0x64, 0x3, 0x7a, 0x81, 0x0, 0xfffffffffffff246, 0x0, 0xc, 0x7, 0x6, 0x6, 0x4, 0x5, 0x20bd35c, 0xffffffffffffb6f6, 0x200, 0xc63, 0x2, 0x5c, 0xd, 0x2, 0x8, 0xffffffffffff8000, 0x6, 0x9, 0x100000000, 0x4, 0x7, 0x8, 0x5, 0x7, 0x0, 0x2, 0x2, 0x3, 0x6, 0x9b6, 0x3, 0x5f7, 0x2, 0x7fffffffffffffff, 0x461, 0x1, 0xfffffffffffffff2, 0x4, 0x9, 0xf, 0x5, 0x100, 0x6, 0x200, 0x400, 0xffffffffffffc018, 0x575, 0xfa6, 0x7, 0x0, 0xf631, 0x0, 0x3ff, 0x47, 0x8, 0x7, 0xffffffffffffffff, 0x6, 0xa2ac, 0x6, 0x1, 0x1, 0x7, 0x6bd, 0xffff, 0xe377, 0x9, 0x0, 0xfffffffffffffffb, 0x100000000, 0x100, 0x5, 0x2, 0x9, 0x9, 0x1, 0x9, 0x200, 0x10001, 0x6, 0x9, 0xd84a, 0x800, 0xc, 0x4, 0xfffffffffffffe01, 0x0, 0x8ac]}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) write$P9_RREADLINK(r3, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad7, 0x10000, 0x3, 0xfffffffe}, &(0x7f0000000040), &(0x7f0000000280), &(0x7f0000000480)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000440)={0xfffffe7b}) close(r6) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r9, @ANYBLOB="dc196c174c0f622e019df2d7fcc0c6e67e55dd353e5b54dbb5c89c1e1f4a22120475c8cdd9a545554eab5c90c9583f399da9afac43bb3186c0baf3fa64ff2c4c70f0c0ea424307be53"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg$unix(r4, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/156, 0x9c}], 0x1}}], 0x2, 0x40000000, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, 0x0) 1m8.642734261s ago: executing program 4 (id=717): rt_sigsuspend(&(0x7f0000000000)={[0x5, 0xaf]}, 0x8) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0xa, 0x0, 0x8, 0x3, 0x2}, 0x30, 0x1) landlock_restrict_self(r0, 0x2) read(r0, &(0x7f0000000080)=""/144, 0x90) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x20080, 0x100) r2 = openat$incfs(r1, &(0x7f0000000180)='.log\x00', 0xa000, 0x107) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r5, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r6, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2c040004}, 0x0) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x78, r7, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010102}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, ',\x04\xef*[.\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x1c001}, 0x88081) r8 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000540), r5) sendmsg$NET_DM_CMD_STOP(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r8, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000640)={'vlan1\x00', 0x0}) openat$dir(0xffffff9c, &(0x7f0000000680)='./file0\x00', 0x40, 0x2) ioctl$TCSETS(r3, 0x5402, &(0x7f00000006c0)={0xffffffff, 0x8, 0x0, 0x6, 0x10, "1625a20490f80456dd0020f1b47589b5519b7e"}) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r5) sendmsg$IEEE802154_ASSOCIATE_REQ(r5, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x44, r10, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x34}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xf}]}, 0x44}, 0x1, 0x0, 0x0, 0x40005}, 0x20004040) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000900)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r5, &(0x7f0000000a00)={&(0x7f0000000880), 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x4c, r11, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000840}, 0x408d5) sendmsg$NLBL_MGMT_C_REMOVE(r5, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x74, r7, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}]}, 0x74}, 0x1, 0x0, 0x0, 0x48884}, 0x40010) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000b80)) memfd_create(&(0x7f0000000bc0)='wpan0\x00', 0xd155f343d161f17b) ioctl$XFS_IOC_INUMBERS(r3, 0x80405880, &(0x7f0000000c00)={{0xffffffffffffffff, 0x7, 0xc, 0xe4, 0xd}, [{0x6, 0x4, 0x7}, {0x1, 0x3, 0x9, 0x7}, {0x7, 0x2, 0xd, 0x80}]}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000cc0)={'\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000ec0)={&(0x7f0000000d00), 0xc, &(0x7f0000000e80)={&(0x7f0000000d40)={0x124, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x20004000}, 0x4005) chown(&(0x7f0000000f00)='./file0\x00', 0x0, 0xee00) 1m7.742522242s ago: executing program 8 (id=719): openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0xa0000012}) (fail_nth: 8) 1m7.652695032s ago: executing program 4 (id=720): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000070000000000000000000000850000004100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000aa4f0000850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x10, 0x0, &(0x7f00000000c0)="f1f18e90311982b8c72a31eb12c6768a", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) ioctl$PTP_ENABLE_PPS(r1, 0x40043d04, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) r7 = socket(0x2d, 0x2, 0x0) bind$xdp(r7, &(0x7f0000000080)={0x2d, 0x0, r6, 0xc}, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r4, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x44, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000080}, 0x4008881) 1m7.582932067s ago: executing program 4 (id=721): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000040)='./file0\x00') socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket(0x1e, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pimreg\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r1, 0x0, 0x52) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x1, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x24, r3, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0xaa3a}}}, 0x24}, 0x1, 0x0, 0x0, 0xc4}, 0x20000818) stat(&(0x7f0000000180)='./file2\x00', &(0x7f00000001c0)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@ipv4={""/10, ""/2, @private}, @in=@multicast2}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f0000000380)=0xe4) socket$nl_route(0x10, 0x3, 0x0) ioctl$CDROMVOLCTRL(0xffffffffffffffff, 0x31f, &(0x7f0000000040)={0xb0, 0x7, 0x7, 0x3}) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="008000"}) ioctl(r4, 0x8b2a, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip_vti0\x00'}) 1m7.282054754s ago: executing program 4 (id=722): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fanotify_init(0xa01388d7af6e45ad, 0x400) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000005f40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002600)=[{&(0x7f0000002280)="c4", 0x1}], 0x1}}, {{&(0x7f0000002780)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000002e80)=[{&(0x7f00000027c0)='I', 0x1}], 0x1}}], 0x2, 0x4050000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000380)={0xf, 0x2, 0x80000000, 0xffff, r2}, 0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r2, 0x98}, &(0x7f00000000c0)=0x8) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x94) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="180300003f0007012bbd700000000000017c0000e402fc80b00215806a4b4767ef29e5317dbe81cb7de0203ee72ec55ce049121c273120d45f7f360500109f58472b6d5371afc5ca2de5a1c14cbfedfa5363edd2ccc02813c08d1df81c7c15f732285519470ddf35cf5cf5fc8c71b4aa5351828f2f57af12e5d98e2eb4a849e4328e2cb8e61c024296f5ad2d351a5c7960dca8d98cc8fe8e8a48809ea287b746136d79be7cf397275f5d5cddc331f54ff9f7bc97dbc71329085b28dadfd8d25dc1b1f0036e96cef4a01d64e238c23e29774334769f32fe03806535641f5d37003d1d74881c9e9b73792b7c5f5871b49f3dac0ef126e466cb349bf67e5459bb69c6014780", @ANYRES32, @ANYBLOB="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", @ANYBLOB="0c00018008000600", @ANYRES32, @ANYBLOB="0c000280050023000000000008000500", @ANYRES32=r7], 0x318}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) splice(r3, 0x0, r5, 0x0, 0x7, 0x4) vmsplice(r4, &(0x7f00000003c0)=[{&(0x7f00000002c0)='\"', 0x1}], 0x1, 0x3) 1m7.249072814s ago: executing program 8 (id=723): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x31) mount(0x0, 0x0, &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000007000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='10 1 1\x00', 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim10/sriov_numvfs\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='1\x00', 0x2) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[@ANYBLOB="3800000012000100010000000000000000000000000000000000000000000000100003006e657464657673696d31300008001d0001000000"], 0x38}}, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1}, 0x14) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/heartbeat/dead_threshold\x00', 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x4, 0x7f}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x14, 0x0, 0x0, 0x8000, 0x240c8, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x40000, 0x3}, 0x50) 1m6.962663238s ago: executing program 4 (id=725): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x0, {0x3, 0xd, 0x7, 0x8, 0x3, 0xcb8}}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000054000001b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c3090000f1000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xd}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x200, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x1, 0x1003, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x0, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0xc) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)=ANY=[@ANYBLOB="f14d00", @ANYRES16=r2, @ANYBLOB="010000000000000000004c0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000f00b2007365636f6e646e616d650000"], 0x44}}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00', 0x7f}) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000180)={0x217, @time={0x65757100, 0x5}, 0x0, {}, 0x67, 0x2}) 1m6.799060376s ago: executing program 37 (id=725): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x0, {0x3, 0xd, 0x7, 0x8, 0x3, 0xcb8}}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000054000001b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c3090000f1000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xd}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x200, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x1, 0x1003, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x0, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0xc) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)=ANY=[@ANYBLOB="f14d00", @ANYRES16=r2, @ANYBLOB="010000000000000000004c0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000f00b2007365636f6e646e616d650000"], 0x44}}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00', 0x7f}) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000180)={0x217, @time={0x65757100, 0x5}, 0x0, {}, 0x67, 0x2}) 1m6.751190448s ago: executing program 8 (id=727): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0x5000000}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = creat(0x0, 0xd931d3864d39dcca) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, &(0x7f0000000800)={0x3000000000000000, 0x40e, 0x6, 0x3}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x54, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x8, 0x6, 0x3, 0x1, 0xcb70, 0x7}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x48850) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = dup(r6) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000796000/0x3000)=nil) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x5c, 0x10, 0x401, 0x70bd2a, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0x3, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc4}, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x200, 0x4) 1m4.478182928s ago: executing program 38 (id=672): creat(&(0x7f0000000400)='./file0\x00', 0x128) open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) r0 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x100005, 0xa}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, 0x0) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r5 = syz_open_procfs$pagemap(0x0, 0x0) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x4004000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setregid(0xee00, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000240)=[{&(0x7f0000000100)="eb", 0x1}], 0x1, 0x0) r8 = openat$mixer(0xffffffffffffff9c, 0x0, 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r8, 0x40086603, &(0x7f0000000040)) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) r9 = openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x1) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x5f7dd531}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r9, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={r10, 0x200}, 0x8) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000240)={0x3, 0x0, 0x2000, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) openat$dlm_monitor(0xffffff9c, &(0x7f0000000340), 0x8000, 0x0) 1m3.502050954s ago: executing program 2 (id=730): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000004000000020000000000000800000000000000000000000200000000000000000000000b02000000020000000000000e0300000000000000005f61"], 0x0, 0x50}, 0x28) (fail_nth: 8) 1m3.402676934s ago: executing program 2 (id=731): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x62, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r5, r5) keyctl$get_persistent(0x16, r5, r3) mount$pvfs2(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x2100000, &(0x7f0000000200)={[{'GPL\x00'}], [{@smackfshat={'smackfshat', 0x3d, '+\t,,%'}}, {@appraise}, {@obj_type={'obj_type', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}, {@fsname={'fsname', 0x3d, '\x00'}}, {@fowner_eq={'fowner', 0x3d, r5}}]}) syz_emit_ethernet(0x5e, &(0x7f0000000540)={@random="b12a73e9dc0f", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @initdev={0xfe, 0x4, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private0, @loopback}}}}}}, 0x0) 1m3.332754089s ago: executing program 2 (id=732): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x5dd}]}, 0x28}}, 0x0) socketpair(0x1e, 0x1, 0x7, &(0x7f0000000000)) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) close(r1) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000000)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/220, &(0x7f00000000c0)=""/80, &(0x7f0000000780)=""/82}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000340)=0x1) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 1m2.275040287s ago: executing program 2 (id=733): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fanotify_init(0xa01388d7af6e45ad, 0x400) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000005f40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002600)=[{&(0x7f0000002280)="c4", 0x1}], 0x1}}, {{&(0x7f0000002780)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000002e80)=[{&(0x7f00000027c0)='I', 0x1}], 0x1}}], 0x2, 0x4050000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000380)={0xf, 0x2, 0x80000000, 0xffff, r2}, 0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r2, 0x98}, &(0x7f00000000c0)=0x8) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x94) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="0c00018008000600", @ANYRES32, @ANYBLOB="0c000280050023000000000008000500", @ANYRES32=r7], 0x318}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) splice(r3, 0x0, r5, 0x0, 0x7, 0x4) vmsplice(r4, &(0x7f00000003c0)=[{&(0x7f00000002c0)='\"', 0x1}], 0x1, 0x3) 1m1.352263733s ago: executing program 2 (id=734): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x31) mount(0x0, 0x0, &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000007000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='10 1 1\x00', 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim10/sriov_numvfs\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='1\x00', 0x2) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[@ANYBLOB="3800000012000100010000000000000000000000000000000000000000000000100003006e657464657673696d31300008001d0001000000"], 0x38}}, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1}, 0x14) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/heartbeat/dead_threshold\x00', 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x4, 0x7f}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x14, 0x0, 0x0, 0x8000, 0x240c8, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x40000, 0x3}, 0x50) 1m1.147106822s ago: executing program 2 (id=735): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000ec0)={0x18, 0x0, {0x1, @random="34c2f584311b", 'vxcan1\x00'}}, 0x1e) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x80c}, 0x4) 51.430484119s ago: executing program 39 (id=727): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0x5000000}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = creat(0x0, 0xd931d3864d39dcca) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, &(0x7f0000000800)={0x3000000000000000, 0x40e, 0x6, 0x3}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x54, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x8, 0x6, 0x3, 0x1, 0xcb70, 0x7}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x48850) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = dup(r6) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000796000/0x3000)=nil) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x5c, 0x10, 0x401, 0x70bd2a, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0x3, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc4}, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x200, 0x4) 45.943417073s ago: executing program 40 (id=735): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000ec0)={0x18, 0x0, {0x1, @random="34c2f584311b", 'vxcan1\x00'}}, 0x1e) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x80c}, 0x4) 5.252723513s ago: executing program 1 (id=929): socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x210, 0x8440) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0xc2e02, 0x37) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000780)={r2, 0x0, {0x0, 0x0, 0x0, 0x32, 0x4000000000001001, 0x0, 0x0, 0x1c, 0x1d, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "3207000000061a74df2cfc06e89f3d9e234b30c50997d3bef40976ff7bfe55cd4a4783ed4a524bd3ff1fcaed1e831fa79a0000000000e000", "675237d90800080000000018090000000000000061b7ad3300", [0x3, 0x6]}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00'}) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x7f, &(0x7f0000000040)="03020000008002ff", 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xb}, @hci_ev_le_remote_conn_param_req={{}, {0xc8, 0x5b67, 0x3, 0x7b05, 0xfffc}}}}, 0xe) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x42) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 4.905871142s ago: executing program 1 (id=930): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x34, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/power/control\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='auto\x00', 0x5) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x3f9, 0x200, 0x70bd29, 0x25dfdbfb, {0x1, 0x1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x4004050}, 0x4000884) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x34, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/power/control\x00', 0x1, 0x0) (async) write(r1, &(0x7f0000000140)='auto\x00', 0x5) (async) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x3f9, 0x200, 0x70bd29, 0x25dfdbfb, {0x1, 0x1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x4004050}, 0x4000884) (async) 4.842127413s ago: executing program 1 (id=931): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x40001, 0xfffffffc, 0x0, 0x6}, 0x10) write(r2, &(0x7f0000000040)="240000001e005f0214f9f407200904001f00000000000000005cfb0cfc5970db108fd3e8", 0x24) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e005", 0x26}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158", 0x65}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/73, 0x49}], 0x2}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpid() socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000180)={0x0, "f1ffffffffff63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee04200"}) r5 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) ftruncate(r5, 0x2000000) fcntl$addseals(r5, 0x409, 0x7) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={r5, 0x1f, 0x0, 0x1000000}) 4.826401718s ago: executing program 0 (id=932): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x14, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='\x00\x00', 0x2) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [{0x8b, 0x0, 0x27}, {0x360, 0x0, 0x5}]}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r2}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080)=')\x00', 0x2}], 0x1) mount$nfs(&(0x7f0000000080)='[27.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,soft,timeo=1,retrans=1\x00', 0x5e}]}) 4.741049836s ago: executing program 0 (id=933): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='0', 0x1) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) r2 = syz_io_uring_setup(0xf08, &(0x7f0000000400)={0x0, 0x8000595d, 0x1000, 0x20002, 0x1000051, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x110a}, 0x1}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x12) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) connect$pppl2tp(r7, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x4e21, @local}, 0x2, 0x0, 0x4}}, 0x2e) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) 4.63271732s ago: executing program 0 (id=934): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000980)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)="97", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (fail_nth: 8) 4.433409863s ago: executing program 0 (id=935): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) socket$unix(0x1, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @local, 0xb}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000700)=ANY=[], 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) r3 = socket$xdp(0x2c, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="588d0902aaf9715eb8511a555322196fbfda61499a95ac22ad277070dd348e78de1259a6de749261aaf1ecc9fdb5f4f2bd143ea2fe02daac7bc94ccafd75da23aeae55ffdfba7595a924e9135130", @ANYRESOCT=r2, @ANYRES8=r3], &(0x7f0000000080)='GPL\x00', 0x4, 0xb5, &(0x7f00000000c0)=""/181, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') 3.995391875s ago: executing program 0 (id=938): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x700, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000feffffff00"/62]}, 0x8e) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b00000000000119078640101000000000000004e20009c907801000000001000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad50ae79eabc5c8c82b8af584cbf2649a50f2dbc43efa869"], 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="012ee75a795920cd1886463f4a88c1f8598c54246057181850419a11db4967d77890a0ed34a1d122a84ba2b26a63678cbd1a6bd8da29fcafb55dff4be2e1e4b139f6cce8e3896ef04e045e4fa6189915e2c024ff2a33eff4f86ef712024f1d594e85a6d9ca82f3a8c9361c1004996cfb7476749918a3", @ANYBLOB="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"/300, @ANYRES16=r1], 0x1c}}, 0x40080) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x50000, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x200000) 3.936137124s ago: executing program 1 (id=939): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) recvmsg(r0, &(0x7f00000009c0)={&(0x7f0000000380)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000940)=[{&(0x7f00000006c0)=""/213, 0xd5}, {&(0x7f0000000840)=""/101, 0x65}, {&(0x7f00000008c0)=""/119, 0x77}], 0x3, &(0x7f0000000980)}, 0x10000) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/ehci-pci/unbind\x00', 0x1, 0x0) write(r5, &(0x7f0000000240)='0000:00:1d.7', 0xc) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/drivers/ehci-pci/bind\x00', 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x6, 0x4, 0x4, 0x56}, {0x5, 0x8, 0x50, 0x1001}, {0x902b, 0x7, 0xd0, 0xc}]}) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) write(r6, &(0x7f00000002c0)='0000:00:1d.7', 0xc) 1.831186463s ago: executing program 3 (id=946): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) socket$unix(0x1, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @local, 0xb}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000700)=ANY=[], 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) r3 = socket$xdp(0x2c, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="588d0902aaf9715eb8511a555322196fbfda61499a95ac22ad277070dd348e78de1259a6de749261aaf1ecc9fdb5f4f2bd143ea2fe02daac7bc94ccafd75da23aeae55ffdfba7595a924e9135130", @ANYRESOCT=r2, @ANYRES8=r3], &(0x7f0000000080)='GPL\x00', 0x4, 0xb5, &(0x7f00000000c0)=""/181, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x8000, 0x1000}, 0x20) mbind(&(0x7f00001be000/0x4000)=nil, 0x4000, 0x2, 0x0, 0x3b5518fb, 0x7) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(r4, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000940)=""/32, 0x20, 0x4, 0xffffffff, 0x0, 0x0, 0x3}}, 0x120) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = dup(r5) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, 0x0, 0x0) 1.514356228s ago: executing program 3 (id=948): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000100), 0x1) memfd_create(&(0x7f0000000000)='(&$#::\x0f\x00', 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000980)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x0, 0x0, 0x8, &(0x7f0000000140)={0x1, "96e67ad2d329458afe83c910c40800000000000000000000000000f000"}}) sendto$inet6(r0, &(0x7f0000000040)="97", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x3b, [0x2, 0x8, 0x4, 0x12, 0x0, 0xff, 0x7, 0x1a]}, 0x14) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$key(0xf, 0x3, 0x2) openat$mice(0xffffff9c, &(0x7f00000000c0), 0x1f3200) sendmsg$key(r3, &(0x7f0000000300)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0xa, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @private=0xa010100}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}}]}, 0x50}, 0x1, 0x7}, 0x0) sendmsg$inet_sctp(r2, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0xfffffffc, @mcast2, 0x8}, 0x1c, &(0x7f0000000100), 0x0, &(0x7f0000000180)=[@dstaddrv4={0x10, 0x84, 0x7, @broadcast}, @authinfo={0x10, 0x84, 0x6, {0x99}}, @prinfo={0x14, 0x84, 0x5, {0x30, 0x5}}, @authinfo={0x10, 0x84, 0x6, {0xfe01}}, @authinfo={0x10, 0x84, 0x6, {0x3}}], 0x54}, 0x4000) 1.405591246s ago: executing program 3 (id=949): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xbf}]}}}]}, 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000240)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc966", 0x27, 0x40, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = openat$cdrom(0xffffff9c, &(0x7f0000000040), 0x220100, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(r4, 0x5396, &(0x7f0000000100)={0x7, 0x1}) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xbf}]}}}]}, 0x40}}, 0x0) (async) sendto$packet(r0, &(0x7f0000000240)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc966", 0x27, 0x40, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) openat$cdrom(0xffffff9c, &(0x7f0000000040), 0x220100, 0x0) (async) ioctl$CDROM_TIMED_MEDIA_CHANGE(r4, 0x5396, &(0x7f0000000100)={0x7, 0x1}) (async) 1.250388577s ago: executing program 3 (id=951): socket$inet_mptcp(0x2, 0x1, 0x106) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x80580, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800e4ff", @ANYRES16=r4, @ANYBLOB="5d848fe94b8405ad7e40a54eea7372deae534b391aba8b4007f73f03b150aefb87dacae87c9c9d897893e474caf7f0be3d770800f58d151e92c2aa9da375ad195b58573251f16db44cd801bd6690bcb4682c10db58ae", @ANYRES32=r5, @ANYBLOB="0c00990008000000300000001400040067726530000000000000000000000000080005000400000004001780"], 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x8a0fa8a305708e9e) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) lseek(r0, 0x9, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008c}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000100001e456b8aa00000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) prlimit64(0x0, 0xc, &(0x7f00000001c0)={0x9}, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x1000800, 0x0) 1.111555961s ago: executing program 9 (id=952): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x700, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000feffffff00"/63]}, 0x8f) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xf, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r2, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0xffff, 0xfffffffe}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@allocspi={0x104, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x2, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x2, 0x2, 0x6, 0x1}, 0x8, 0x74f}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0xf}}]}, 0x104}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) 1.059126135s ago: executing program 0 (id=953): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x0}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x48, 0x30, 0x9, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x3fff, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0xa, {0x0, 0x1}}, {0xc, 0x9}}}]}]}, 0x48}}, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000300)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffd, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x118f}, 0x0) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r3) syz_open_dev$video(0x0, 0x1d24, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a30000000120a090000000000000000000200000008000440000000000900010073797a30000000000800034000000005140000001100014ae5ee15b77aef59000000000a"], 0x58}, 0x1, 0x0, 0x0, 0x890}, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f00000012c0)=0x2) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000140)={0xd85, 0x1, 0x2, 0x0, 0x1}) mremap(&(0x7f000081e000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) 1.05829195s ago: executing program 9 (id=954): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='proc\x00', &(0x7f0000000200)='./proc_mnt\x00', &(0x7f0000000300)='proc\x00', 0x0, &(0x7f0000000400)='\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc_mnt/version\x00', 0x0, 0x0) read(r0, &(0x7f0000000600)=""/256, 0x100) mkdirat(0xffffffffffffff9c, 0x0, 0x777) write(0xffffffffffffffff, &(0x7f0000000180)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)='\x00', 0x1) socket$nl_rdma(0x10, 0x3, 0x14) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r3, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x2000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROTECT={0x5, 0x6, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x2004c010}, 0x4040) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 858.881946ms ago: executing program 1 (id=955): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000300000000000000190000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) (async) sendmsg$nl_route(r0, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x19, 0x4, 0x4, 0x1ffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c01000000", 0x5f}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c01000000", 0x5f}], 0x1, 0x0, 0x0, 0x7400}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@random={'osx.', '9p\x00'}) chdir(&(0x7f0000000100)='./file0\x00') openat$dir(0xffffff9c, &(0x7f0000000040)='./bus\x00', 0x0, 0x100) (async) r4 = openat$dir(0xffffff9c, &(0x7f0000000040)='./bus\x00', 0x0, 0x100) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) (async) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r5, 0x7003) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f0000000100)={0x29, 0x22, 0x0, 0x2, 0x8, 0x1000a9, 0x5, 0x2, 0x1}) mkdirat(r4, &(0x7f0000000080)='./file0\x00', 0x20) open(&(0x7f0000000000)='./bus\x00', 0x4427e, 0x9a) (async) open(&(0x7f0000000000)='./bus\x00', 0x4427e, 0x9a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x510}]}, 0x34}}, 0x0) 785.103246ms ago: executing program 9 (id=956): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18080000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000002f000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) 685.160111ms ago: executing program 9 (id=957): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) socket$unix(0x1, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @local, 0xb}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000700)=ANY=[], 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) r3 = socket$xdp(0x2c, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="588d0902aaf9715eb8511a555322196fbfda61499a95ac22ad277070dd348e78de1259a6de749261aaf1ecc9fdb5f4f2bd143ea2fe02daac7bc94ccafd75da23aeae55ffdfba7595a924e9135130", @ANYRESOCT=r2, @ANYRES8=r3], &(0x7f0000000080)='GPL\x00', 0x4, 0xb5, &(0x7f00000000c0)=""/181, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x8000, 0x1000}, 0x20) mbind(&(0x7f00001be000/0x4000)=nil, 0x4000, 0x2, 0x0, 0x3b5518fb, 0x7) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(r4, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000940)=""/32, 0x20, 0x4, 0xffffffff, 0x0, 0x0, 0x3}}, 0x120) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) dup(r5) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) 352.544304ms ago: executing program 3 (id=958): socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x210, 0x8440) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0xc2e02, 0x37) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000780)={r2, 0x0, {0x0, 0x0, 0x0, 0x32, 0x4000000000001001, 0x0, 0x0, 0x1c, 0x1d, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "3207000000061a74df2cfc06e89f3d9e234b30c50997d3bef40976ff7bfe55cd4a4783ed4a524bd3ff1fcaed1e831fa79a0000000000e000", "675237d90800080000000018090000000000000061b7ad3300", [0x3, 0x6]}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00'}) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xb}, @hci_ev_le_remote_conn_param_req={{}, {0xc8, 0x5b67, 0x3, 0x7b05, 0xfffc}}}}, 0xe) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x42) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 352.126985ms ago: executing program 1 (id=959): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r1) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xcb, 0x0, 0x0) bind$802154_raw(r1, &(0x7f0000000080)={0x24, @none={0x0, 0x3}}, 0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000140)={0x4}, 0x4) r5 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000100), 0x400, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x3b, 0x1, 0x70b52b, 0x4, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x8094) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f00000000c0)="83d2ff5f00000080d2b6db0cc6d6703b87eb28f77b09bc7e64f918fa3be4664d327d90424d5503002800"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r9, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r9, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r9, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000014c0)='\x00', 0x1}], 0x1}}], 0x1, 0x400c405) exit(0x0) sendmmsg$inet6(r9, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x22, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r11, r10, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xe, &(0x7f0000000800)={@remote, @multicast, @void, {@mpls_uc}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x28, r4, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x14) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) 118.368087ms ago: executing program 9 (id=960): r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x2, 0x80) r1 = fsmount(r0, 0x1, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/51, 0x33}, {&(0x7f0000000080)=""/203, 0xcb}, {&(0x7f0000000180)=""/253, 0xfd}], 0x3) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x101, 0x5, 0x3, 0x5201, 0xd, 0x2}, 0x30, 0x1) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x12) r3 = openat$sndseq(0xffffff9c, &(0x7f0000000300), 0x100) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={r1, 0xffffffffffffffff}, 0x4) quotactl_fd$Q_SETINFO(r4, 0xffffffff80000602, 0x0, &(0x7f0000000380)={0xa7, 0x5, 0x1, 0x5}) (async) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0xc0000) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000440)={r5}, &(0x7f0000000480)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000004c0)={0x5, 0x209, 0x0, 0xfffffffb, r6}, 0x10) (async) r7 = getuid() getpeername$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000580)=0x14) sendmsg$nl_xfrm(r1, &(0x7f0000000880)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f00000005c0)=@expire={0x24c, 0x18, 0x200, 0x70bd29, 0x25dfdbfc, {{{@in=@private=0xa010102, @in=@rand_addr=0x64010102, 0x4e20, 0x7, 0x4e20, 0xf, 0x2, 0x0, 0x80, 0x3a, 0x0, r7}, {@in6=@loopback, 0x4d3, 0x6c}, @in=@broadcast, {0x80, 0x3, 0x0, 0x4, 0x2, 0x1, 0x8b, 0x8}, {0x2, 0xffff, 0x3, 0x7}, {0xb6, 0x7fff, 0x5}, 0x70bd2b, 0x3505, 0xa, 0x3, 0x0, 0x12}, 0x4}, [@etimer_thresh={0x8, 0xc, 0x7fff}, @proto={0x5, 0x19, 0x6c}, @replay_val={0x10, 0xa, {0x70bd2a, 0x70bd27, 0x3}}, @algo_auth={0x5c, 0x1, {{'sha224-ssse3\x00'}, 0xa0, "4160b3fccdb5876010fdbd43c966e547b06ab061"}}, @proto={0x5, 0x19, 0x3f}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @address_filter={0x28, 0x1a, {@in=@empty, @in=@loopback, 0x2, 0x7f, 0x4}}, @policy={0xa8, 0x7, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0x4e20, 0xfffb, 0x4e22, 0x2, 0x2, 0x20, 0x20, 0x67, r8, 0xee01}, {0x30adba24, 0x2, 0x6, 0x7, 0x732c, 0x81, 0x3, 0x100000000}, {0x10000, 0x2, 0x8, 0x400000000000000}, 0x38000000, 0x6e6bbf, 0x1, 0x1, 0x2, 0x3}}]}, 0x24c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) (async) r9 = semget(0x3, 0x0, 0x400) semctl$SETALL(r9, 0x0, 0x11, &(0x7f00000008c0)=[0x2]) (async) r10 = openat(r0, &(0x7f0000000900)='./file0\x00', 0x400, 0x10) ioctl$NILFS_IOCTL_RESIZE(r3, 0x40086e8b, &(0x7f0000000940)=0xeb9) semctl$SETVAL(r9, 0x1, 0x10, &(0x7f0000000980)=0x81b6) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000009c0)={r5, @in={{0x2, 0x4e23, @empty}}, 0x3ff, 0x3, 0x3, 0x2, 0x55, 0x3, 0x7}, &(0x7f0000000a80)=0x9c) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000bc0)={@cgroup=r0, 0x6, 0x0, 0x5, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000b00)=[0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000c00)={@fallback=r2, r1, 0x5, 0x2008, 0x0, @value=r10, @void, @void, @void, r11}, 0x20) (async) openat$fb0(0xffffff9c, &(0x7f0000000c40), 0x6f703d508f161770, 0x0) (async) openat$dsp(0xffffff9c, &(0x7f0000000c80), 0x282080, 0x0) pipe2$watch_queue(&(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SIOCX25GSUBSCRIP(r12, 0x89e0, &(0x7f0000000d00)={'bridge_slave_1\x00', 0x1, 0x6}) (async) ioctl$DVB_DEMUX_DMX_EXPBUF(r0, 0xc00c6f3e, &(0x7f0000000e00)={0x24, 0x80000, r3}) (async) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000e40)={r6, 0x4, 0x8, 0xf, 0x6, 0x2}, 0x14) (async) migrate_pages(0x0, 0x3ff, &(0x7f0000000ec0)=0xa6a5, &(0x7f0000000f00)=0xa) 58.291716ms ago: executing program 3 (id=961): openat(0xffffffffffffffff, 0x0, 0x2a0400, 0x0) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:1d.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:1d.7/remove\x00', 0x1, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000040)=0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='1', 0x1) 0s ago: executing program 9 (id=962): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200282, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x0, 0x30000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f08c40f009b27000000f2e10a8e690f3271008000c90f30b80e0000000f23d80f215035800000a0c9b9490300000f60b932c00a00b9730200000f32328fe8587db697602fb92dbf0002e6e6006880000000000000000f30", 0x64}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00') preadv(r3, &(0x7f0000000640)=[{&(0x7f0000000b00)=""/152, 0x98}], 0x1, 0x300100, 0x1000000) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') ioctl$TUNSETLINK(r3, 0x400454cd, 0x206) exit(0xffff) lseek(r4, 0xb5, 0x1) creat(&(0x7f0000000040)='./file1\x00', 0x1ff) mkdir(&(0x7f0000000100)='my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000d00)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r8 = dup3(r7, r6, 0x0) r9 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r9, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000500)=[@request_death], 0x0, 0x0, 0x0}) mount(&(0x7f0000000640)=@nullb, &(0x7f0000001080)='./file0\x00', 0x0, 0x81001, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0/lun.0/file\x00', 0x1, 0x0) write(r10, &(0x7f0000000f00)='file0', 0x5) kernel console output (not intermixed with test programs): op8: partition table beyond EOD, truncated [ 238.701290][ T9463] loop_reread_partitions: partition scan of loop8 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 238.814993][ T9464] Dev loop5: unable to read RDB block 7 [ 238.817437][ T9464] loop5: unable to read partition table [ 238.819620][ T9464] loop5: partition table beyond EOD, truncated [ 238.836875][ T9464] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 238.919819][ T24] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 238.995928][ T9468] loop8: detected capacity change from 0 to 7 [ 239.009959][ T9468] ldm_validate_partition_table(): Disk read failed. [ 239.012581][ T9468] Dev loop8: unable to read RDB block 0 [ 239.015084][ T9468] loop8: unable to read partition table [ 239.017043][ T9468] loop8: partition table beyond EOD, truncated [ 239.019065][ T9468] loop_reread_partitions: partition scan of loop8 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 239.081111][ T24] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 239.084268][ T24] usb 6-1: config 0 has no interface number 0 [ 239.086362][ T24] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 239.090367][ T24] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 239.094006][ T24] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 239.097124][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.115450][ T24] usb 6-1: config 0 descriptor?? [ 239.118475][ T9465] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 239.129423][ T24] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 239.237486][ T9470] ehci-pci 0000:00:1d.7: remove, state 1 [ 239.239393][ T9470] usb usb1: USB disconnect, device number 1 [ 239.243952][ T9470] usb 1-1: USB disconnect, device number 2 [ 239.333544][ T9470] ehci-pci 0000:00:1d.7: USB bus 1 deregistered [ 239.589996][ T8705] usb 2-1: new full-speed USB device number 15 using uhci_hcd [ 239.756363][ T8705] usb 2-1: not running at top speed; connect to a high speed hub [ 239.788139][ T8705] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 239.792383][ T8705] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 239.795859][ T8705] usb 2-1: Product: QEMU USB Tablet [ 239.798015][ T8705] usb 2-1: Manufacturer: QEMU [ 239.800667][ T8705] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 239.833237][ T8705] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1:1.0/0003:0627:0001.001E/input/input47 [ 239.917003][ T8705] hid-generic 0003:0627:0001.001E: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 239.960079][ T9471] usb 2-1: USB disconnect, device number 15 [ 240.033952][ T9476] fido_id[9476]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb2/2-1/report_descriptor': No such file or directory [ 240.187295][ T5756] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 240.198012][ T5756] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 240.202358][ T5756] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 240.210518][ T5756] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 240.213328][ T5756] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 240.275610][ T9471] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 240.288141][ T9471] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1 [ 240.310761][ T9471] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 240.333657][ T9471] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 240.344529][ T9471] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 240.354832][ T9471] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 240.365238][ T9471] usb usb1: Product: EHCI Host Controller [ 240.369944][ T9471] usb usb1: Manufacturer: Linux syzkaller ehci_hcd [ 240.376700][ T9471] usb usb1: SerialNumber: 0000:00:1d.7 [ 240.412705][ T9471] hub 1-0:1.0: USB hub found [ 240.423666][ T9471] hub 1-0:1.0: 6 ports detected [ 240.502547][ T9471] hub 2-0:1.0: USB hub found [ 240.506667][ T9471] hub 2-0:1.0: 2 ports detected [ 240.530801][ T9471] hub 3-0:1.0: USB hub found [ 240.533081][ T9471] hub 3-0:1.0: 2 ports detected [ 240.562363][ T9471] hub 4-0:1.0: USB hub found [ 240.564789][ T9471] hub 4-0:1.0: 2 ports detected [ 240.576561][ C0] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 240.581054][ T8705] usb 6-1: USB disconnect, device number 4 [ 240.660579][ T9492] FAULT_INJECTION: forcing a failure. [ 240.660579][ T9492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.666028][ T9492] CPU: 0 UID: 0 PID: 9492 Comm: syz.9.749 Tainted: G L syzkaller #0 PREEMPT(full) [ 240.666064][ T9492] Tainted: [L]=SOFTLOCKUP [ 240.666071][ T9492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 240.666082][ T9492] Call Trace: [ 240.666089][ T9492] [ 240.666096][ T9492] dump_stack_lvl+0x100/0x190 [ 240.666129][ T9492] should_fail_ex.cold+0x5/0xa [ 240.666155][ T9492] _copy_to_user+0x32/0xd0 [ 240.666188][ T9492] simple_read_from_buffer+0xcb/0x170 [ 240.666224][ T9492] proc_fail_nth_read+0x1af/0x230 [ 240.666254][ T9492] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 240.666280][ T9492] ? rw_verify_area+0xce/0x6d0 [ 240.666308][ T9492] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 240.666332][ T9492] vfs_read+0x1e4/0xb40 [ 240.666354][ T9492] ? __pfx_vfs_read+0x10/0x10 [ 240.666369][ T9492] ? find_held_lock+0x2b/0x80 [ 240.666393][ T9492] ? __fget_files+0x215/0x3d0 [ 240.666416][ T9492] ? __fget_files+0x21f/0x3d0 [ 240.666440][ T9492] ksys_read+0x12a/0x250 [ 240.666457][ T9492] ? __pfx_ksys_read+0x10/0x10 [ 240.666482][ T9492] do_int80_emulation+0x14b/0x720 [ 240.666512][ T9492] asm_int80_emulation+0x1a/0x20 [ 240.666531][ T9492] RIP: 0023:0xf71873eb [ 240.666547][ T9492] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 240.666563][ T9492] RSP: 002b:00000000f54464bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 240.666583][ T9492] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54465d0 [ 240.666594][ T9492] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 240.666604][ T9492] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 240.666615][ T9492] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 240.666625][ T9492] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 240.666650][ T9492] [ 240.699791][ T5756] Bluetooth: hci3: command tx timeout [ 240.810040][ T5612] usb 1-1: new high-speed USB device number 2 using ehci-pci [ 240.863393][ T9497] netlink: 80 bytes leftover after parsing attributes in process `syz.9.750'. [ 240.960597][ T13] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.036339][ T5612] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 241.041092][ T5612] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 241.045680][ T5612] usb 1-1: Product: QEMU USB Tablet [ 241.047344][ T9501] loop8: detected capacity change from 0 to 7 [ 241.049385][ T5612] usb 1-1: Manufacturer: QEMU [ 241.051089][ T5612] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 241.071871][ T9501] ldm_validate_partition_table(): Disk read failed. [ 241.075758][ T9501] Dev loop8: unable to read RDB block 0 [ 241.078241][ T9501] loop8: unable to read partition table [ 241.080689][ T9501] loop8: partition table beyond EOD, truncated [ 241.086014][ T9501] loop_reread_partitions: partition scan of loop8 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 241.087942][ T5612] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.001F/input/input48 [ 241.101612][ T5612] hid-generic 0003:0627:0001.001F: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 241.192455][ T13] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.239110][ T9480] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.247729][ T9480] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.251320][ T9480] bridge_slave_0: entered allmulticast mode [ 241.255742][ T9480] bridge_slave_0: entered promiscuous mode [ 241.276347][ T9480] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.287693][ T9480] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.290997][ T9480] bridge_slave_1: entered allmulticast mode [ 241.295187][ T9480] bridge_slave_1: entered promiscuous mode [ 241.328309][ T9480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.337320][ T9480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.377107][ T9480] team0: Port device team_slave_0 added [ 241.456821][ T13] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.484249][ T9480] team0: Port device team_slave_1 added [ 241.516216][ T9480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.519178][ T9480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.534316][ T9480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.541689][ T9480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.544783][ T9480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.555767][ T9480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.590659][ T13] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.653125][ T43] kauditd_printk_skb: 89 callbacks suppressed [ 241.653144][ T43] audit: type=1800 audit(1785736352.244:2792): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 241.678452][ T9524] FAULT_INJECTION: forcing a failure. [ 241.678452][ T9524] name failslab, interval 1, probability 0, space 0, times 0 [ 241.696816][ T9524] CPU: 2 UID: 0 PID: 9524 Comm: syz.9.752 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.696838][ T9524] Tainted: [L]=SOFTLOCKUP [ 241.696841][ T9524] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 241.696848][ T9524] Call Trace: [ 241.696853][ T9524] [ 241.696859][ T9524] dump_stack_lvl+0x100/0x190 [ 241.696877][ T9524] should_fail_ex.cold+0x5/0xa [ 241.696891][ T9524] should_failslab+0xc2/0x120 [ 241.696909][ T9524] __kmalloc_noprof+0xfc/0x820 [ 241.696925][ T9524] ? ethnl_default_notify+0x178/0x9f0 [ 241.696942][ T9524] ethnl_default_notify+0x178/0x9f0 [ 241.696956][ T9524] ? __pfx_ethnl_default_notify+0x10/0x10 [ 241.696974][ T9524] ? ethnl_set_coalesce+0xd2/0x160 [ 241.696994][ T9524] ? __pfx_ethnl_default_notify+0x10/0x10 [ 241.697007][ T9524] ethnl_notify+0x17c/0x360 [ 241.697022][ T9524] ethnl_default_set_doit+0x5aa/0x1050 [ 241.697043][ T9524] genl_family_rcv_msg_doit+0x214/0x300 [ 241.697068][ T9524] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 241.697087][ T9524] ? genl_get_cmd+0x3e7/0x760 [ 241.697111][ T9524] ? bpf_lsm_capable+0x9/0x10 [ 241.697130][ T9524] ? security_capable+0x80/0x260 [ 241.697152][ T9524] ? ns_capable+0xd2/0xf0 [ 241.697172][ T9524] genl_rcv_msg+0x560/0x800 [ 241.697203][ T9524] ? __pfx_genl_rcv_msg+0x10/0x10 [ 241.697225][ T9524] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 241.697250][ T9524] netlink_rcv_skb+0x159/0x420 [ 241.697269][ T9524] ? __pfx_genl_rcv_msg+0x10/0x10 [ 241.697292][ T9524] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 241.697321][ T9524] ? netlink_deliver_tap+0x1ae/0xcc0 [ 241.697344][ T9524] genl_rcv+0x28/0x40 [ 241.697360][ T9524] netlink_unicast+0x585/0x850 [ 241.697376][ T9524] ? __pfx_netlink_unicast+0x10/0x10 [ 241.697402][ T9524] netlink_sendmsg+0x8b0/0xda0 [ 241.697425][ T9524] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.697448][ T9524] ? apparmor_socket_sendmsg+0x15b/0x270 [ 241.697471][ T9524] ____sys_sendmsg+0xa4d/0xbe0 [ 241.697486][ T9524] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.697507][ T9524] ? __pfx_____sys_sendmsg+0x10/0x10 [ 241.697536][ T9524] ___sys_sendmsg+0x190/0x1e0 [ 241.697558][ T9524] ? __pfx____sys_sendmsg+0x10/0x10 [ 241.697583][ T9524] ? find_held_lock+0x2b/0x80 [ 241.697619][ T9524] __sys_sendmsg+0x160/0x210 [ 241.697644][ T9524] ? __pfx___sys_sendmsg+0x10/0x10 [ 241.697671][ T9524] ? __pfx_ksys_write+0x10/0x10 [ 241.697712][ T9524] __do_fast_syscall_32+0xe7/0x970 [ 241.697752][ T9524] ? lockdep_hardirqs_on+0x78/0x100 [ 241.697776][ T9524] do_fast_syscall_32+0x32/0x70 [ 241.697796][ T9524] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 241.697818][ T9524] RIP: 0023:0xf7f85fec [ 241.697838][ T9524] Code: Unable to access opcode bytes at 0xf7f85fc2. [ 241.697846][ T9524] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 241.697863][ T9524] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000540 [ 241.697874][ T9524] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 241.697882][ T9524] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 241.697889][ T9524] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 241.697899][ T9524] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 241.697922][ T9524] [ 242.150673][ T9480] hsr_slave_0: entered promiscuous mode [ 242.187338][ T9480] hsr_slave_1: entered promiscuous mode [ 242.206463][ T9480] debugfs: 'hsr0' already exists in 'hsr' [ 242.215091][ T9480] Cannot create hsr debugfs directory [ 242.223645][ T9527] netlink: 16 bytes leftover after parsing attributes in process `syz.9.753'. [ 242.299968][ T5756] Bluetooth: hci1: command tx timeout [ 242.410051][ T43] audit: type=1800 audit(1785736352.314:2793): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 242.625884][ T43] audit: type=1800 audit(1785736353.214:2794): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 242.691597][ T43] audit: type=1800 audit(1785736353.274:2795): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=193897 res=0 errno=0 [ 242.730287][ T43] audit: type=1800 audit(1785736353.284:2796): pid=6120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=193902 res=0 errno=0 [ 242.739604][ T43] audit: type=1800 audit(1785736353.284:2797): pid=6120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=193906 res=0 errno=0 [ 242.747966][ T43] audit: type=1800 audit(1785736353.284:2798): pid=6120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=193905 res=0 errno=0 [ 242.760508][ T43] audit: type=1800 audit(1785736353.284:2799): pid=6120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=193908 res=0 errno=0 [ 242.790995][ T5756] Bluetooth: hci3: command tx timeout [ 242.804945][ T43] audit: type=1800 audit(1785736353.394:2800): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 242.825214][ T9540] loop8: detected capacity change from 0 to 7 [ 242.839877][ T43] audit: type=1800 audit(1785736353.414:2801): pid=9540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.754" name="pm_freeze_timeout" dev="sysfs" ino=587 res=0 errno=0 [ 242.853049][ T9540] ldm_validate_partition_table(): Disk read failed. [ 242.856302][ T9540] Dev loop8: unable to read RDB block 0 [ 242.859987][ T9540] loop8: unable to read partition table [ 242.862177][ T9540] loop8: partition table beyond EOD, truncated [ 242.867298][ T9540] loop_reread_partitions: partition scan of loop8 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 243.111814][ T9544] hfs: can't find a HFS filesystem on dev sr0 [ 243.189891][ T5756] Bluetooth: hci4: command tx timeout [ 243.218509][ T9544] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 243.754644][ T9561] netlink: 4 bytes leftover after parsing attributes in process `syz.9.757'. [ 243.768746][ T13] bond0 (unregistering): Released all slaves [ 243.798355][ T5454] 8021q: adding VLAN 0 to HW filter on device eth1 [ 243.807536][ T9560] netlink: 'syz.9.757': attribute type 12 has an invalid length. [ 243.819630][ T9560] netlink: 132 bytes leftover after parsing attributes in process `syz.9.757'. [ 243.908456][ T13] tipc: Left network mode [ 244.081183][ T5454] 8021q: adding VLAN 0 to HW filter on device eth2 [ 244.252739][ T9589] syzkaller0: entered promiscuous mode [ 244.255350][ T9589] syzkaller0: entered allmulticast mode [ 244.264661][ T9589] FAULT_INJECTION: forcing a failure. [ 244.264661][ T9589] name failslab, interval 1, probability 0, space 0, times 0 [ 244.282824][ T9589] CPU: 3 UID: 0 PID: 9589 Comm: syz.1.761 Tainted: G L syzkaller #0 PREEMPT(full) [ 244.282856][ T9589] Tainted: [L]=SOFTLOCKUP [ 244.282862][ T9589] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 244.282872][ T9589] Call Trace: [ 244.282878][ T9589] [ 244.282886][ T9589] dump_stack_lvl+0x100/0x190 [ 244.282938][ T9589] should_fail_ex.cold+0x5/0xa [ 244.282961][ T9589] should_failslab+0xc2/0x120 [ 244.282987][ T9589] __kmalloc_noprof+0xfc/0x820 [ 244.283016][ T9589] ? __tipc_nl_compat_doit+0xe6/0x3d0 [ 244.283043][ T9589] __tipc_nl_compat_doit+0xe6/0x3d0 [ 244.283062][ T9589] ? kmem_cache_free+0x127/0x6b0 [ 244.283081][ T9589] ? kfree_skbmem+0x19a/0x210 [ 244.283104][ T9589] ? __pfx___tipc_nl_compat_doit+0x10/0x10 [ 244.283124][ T9589] ? __dev_queue_xmit+0x1bbf/0x4970 [ 244.283147][ T9589] ? netlink_deliver_tap+0xa4d/0xcc0 [ 244.283167][ T9589] ? netlink_unicast+0x62b/0x850 [ 244.283199][ T9589] ? bpf_lsm_capable+0x9/0x10 [ 244.283221][ T9589] ? security_capable+0x80/0x260 [ 244.283250][ T9589] tipc_nl_compat_doit+0x11e/0x290 [ 244.283274][ T9589] tipc_nl_compat_recv+0x908/0xc40 [ 244.283299][ T9589] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 244.283321][ T9589] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 244.283349][ T9589] ? __pfx_tipc_nl_compat_bearer_enable+0x10/0x10 [ 244.283380][ T9589] ? trace_contention_end+0x126/0x160 [ 244.283401][ T9589] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 244.283432][ T9589] genl_family_rcv_msg_doit+0x214/0x300 [ 244.283462][ T9589] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 244.283487][ T9589] ? genl_get_cmd+0x3e7/0x760 [ 244.283516][ T9589] ? __dev_queue_xmit+0xa33/0x4970 [ 244.283537][ T9589] ? __radix_tree_lookup+0x217/0x2b0 [ 244.283564][ T9589] genl_rcv_msg+0x560/0x800 [ 244.283590][ T9589] ? __pfx_genl_rcv_msg+0x10/0x10 [ 244.283613][ T9589] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 244.283641][ T9589] netlink_rcv_skb+0x159/0x420 [ 244.283662][ T9589] ? __pfx_genl_rcv_msg+0x10/0x10 [ 244.283685][ T9589] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 244.283716][ T9589] ? netlink_deliver_tap+0x1ae/0xcc0 [ 244.283740][ T9589] genl_rcv+0x28/0x40 [ 244.283759][ T9589] netlink_unicast+0x585/0x850 [ 244.283782][ T9589] ? __pfx_netlink_unicast+0x10/0x10 [ 244.283809][ T9589] netlink_sendmsg+0x8b0/0xda0 [ 244.283834][ T9589] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.283858][ T9589] ? apparmor_socket_sendmsg+0x15b/0x270 [ 244.283885][ T9589] ____sys_sendmsg+0xa4d/0xbe0 [ 244.283903][ T9589] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.283926][ T9589] ? __pfx_____sys_sendmsg+0x10/0x10 [ 244.283957][ T9589] ___sys_sendmsg+0x190/0x1e0 [ 244.283980][ T9589] ? __pfx____sys_sendmsg+0x10/0x10 [ 244.284019][ T9589] ? find_held_lock+0x2b/0x80 [ 244.284059][ T9589] __sys_sendmsg+0x160/0x210 [ 244.284086][ T9589] ? __pfx___sys_sendmsg+0x10/0x10 [ 244.284119][ T9589] ? __pfx_ksys_write+0x10/0x10 [ 244.284141][ T9589] __do_fast_syscall_32+0xe7/0x970 [ 244.284165][ T9589] ? lockdep_hardirqs_on+0x78/0x100 [ 244.284190][ T9589] do_fast_syscall_32+0x32/0x70 [ 244.284214][ T9589] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 244.284237][ T9589] RIP: 0023:0xf706efec [ 244.284260][ T9589] Code: Unable to access opcode bytes at 0xf706efc2. [ 244.284268][ T9589] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 244.284286][ T9589] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800002c0 [ 244.284297][ T9589] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 244.284337][ T9589] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 244.284347][ T9589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.284357][ T9589] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 244.284382][ T9589] [ 244.389805][ T5756] Bluetooth: hci1: command tx timeout [ 244.542946][ T5454] 8021q: adding VLAN 0 to HW filter on device eth3 [ 244.552420][ T13] hsr_slave_0: left promiscuous mode [ 244.555470][ T13] hsr_slave_1: left promiscuous mode [ 244.567455][ T13] veth1_macvtap: left promiscuous mode [ 244.571206][ T13] veth0_macvtap: left promiscuous mode [ 244.573666][ T13] veth1_vlan: left promiscuous mode [ 244.575893][ T13] veth0_vlan: left promiscuous mode [ 245.211421][ T9606] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 245.544253][ T5755] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 245.550718][ T5454] 8021q: adding VLAN 0 to HW filter on device eth28 [ 245.552845][ T5755] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 245.572279][ T5755] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 245.575393][ T5755] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 245.581079][ T5755] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 245.595127][ T13] IPVS: stop unused estimator thread 0... [ 245.654827][ T9480] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 245.679221][ T9480] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 245.687763][ T9480] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 245.709906][ T9480] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 245.719970][ T9480] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 245.742713][ T9480] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 245.952469][ T9641] tipc: Started in network mode [ 245.954341][ T9641] tipc: Node identity 76f1c3ea7e5f, cluster identity 4711 [ 245.956821][ T9641] tipc: Enabled bearer , priority 0 [ 245.980561][ T9480] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 245.998273][ T9480] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 246.042767][ T9626] syzkaller0: entered promiscuous mode [ 246.044820][ T9626] syzkaller0: entered allmulticast mode [ 246.064456][ T9622] tipc: Resetting bearer [ 246.115222][ T9622] tipc: Disabling bearer [ 246.151620][ T6169] bond0: (slave syz_tun): Releasing backup interface [ 246.157394][ T6169] syz_tun (unregistering): left allmulticast mode [ 246.312748][ T9480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.343948][ T9480] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.407911][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.410277][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.459803][ T5756] Bluetooth: hci1: command tx timeout [ 246.463791][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.466130][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.669367][ T9480] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 246.675393][ T43] kauditd_printk_skb: 33 callbacks suppressed [ 246.675412][ T43] audit: type=1800 audit(1785736357.264:2835): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 246.698952][ T43] audit: type=1800 audit(1785736357.284:2836): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 246.788671][ T43] audit: type=1800 audit(1785736357.374:2837): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=198973 res=0 errno=0 [ 246.788876][ T7812] libceph: connect (1)[c::]:6789 error -101 [ 246.802387][ T7812] libceph: mon0 (1)[c::]:6789 connect error [ 246.832764][ T9615] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.835749][ T9615] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.838848][ T9615] bridge_slave_0: entered allmulticast mode [ 246.843460][ T9615] bridge_slave_0: entered promiscuous mode [ 246.851652][ T9615] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.854715][ T9615] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.857912][ T9615] bridge_slave_1: entered allmulticast mode [ 246.862399][ T9615] bridge_slave_1: entered promiscuous mode [ 246.879475][ T9615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.884399][ T9615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.896104][ T9684] ceph: No mds server is up or the cluster is laggy [ 246.913913][ T9615] team0: Port device team_slave_0 added [ 246.917941][ T9615] team0: Port device team_slave_1 added [ 246.968108][ T9615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.970504][ T9615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.979380][ T43] audit: type=1800 audit(1785736357.564:2838): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 246.980073][ T9615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.985339][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 246.992174][ T9615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.994960][ T9615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.005996][ T9615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.046453][ T9615] hsr_slave_0: entered promiscuous mode [ 247.048771][ T9615] hsr_slave_1: entered promiscuous mode [ 247.120605][ T9480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.129488][ T43] audit: type=1800 audit(1785736357.714:2839): pid=9615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=27371 res=0 errno=0 [ 247.143263][ T9] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 247.147260][ T9] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 247.155258][ T9] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 247.160181][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.162920][ T9] usb 6-1: Product: syz [ 247.164219][ T9] usb 6-1: Manufacturer: syz [ 247.166786][ T9] usb 6-1: SerialNumber: syz [ 247.170461][ T9480] veth0_vlan: entered promiscuous mode [ 247.172048][ T43] audit: type=1800 audit(1785736357.764:2840): pid=6120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=202564 res=0 errno=0 [ 247.173460][ T9] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 247.183570][ T43] audit: type=1800 audit(1785736357.764:2841): pid=6120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=202596 res=0 errno=0 [ 247.186735][ T9480] veth1_vlan: entered promiscuous mode [ 247.202581][ T43] audit: type=1800 audit(1785736357.764:2842): pid=6120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=202571 res=0 errno=0 [ 247.206210][ T9] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 247.214050][ T43] audit: type=1800 audit(1785736357.764:2843): pid=6120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=202572 res=0 errno=0 [ 247.239130][ T9] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 247.287725][ T43] audit: type=1800 audit(1785736357.874:2844): pid=6120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=202593 res=0 errno=0 [ 247.419860][ T9480] veth0_macvtap: entered promiscuous mode [ 247.435055][ T9480] veth1_macvtap: entered promiscuous mode [ 247.510015][ T9480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.519226][ T9480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.571882][ T5794] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.667240][ T5756] Bluetooth: hci2: command tx timeout [ 247.699869][ T5794] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.702671][ T5794] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.705429][ T5794] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.723916][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.728784][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.812172][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.815905][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.482135][ T9685] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 248.491680][ T9685] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 248.498331][ T9685] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 248.530664][ T9685] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 248.539840][ T5756] Bluetooth: hci1: command tx timeout [ 248.540712][ T9615] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 248.545822][ T41] usb 6-1: USB disconnect, device number 5 [ 248.554197][ T9615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 248.564457][ T9615] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 248.582694][ T9615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 248.592445][ T9615] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 248.613555][ T9615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 248.617672][ T41] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 248.623995][ T9615] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 248.654360][ T41] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 248.661443][ T9615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 248.666271][ T41] ti_usb_3410_5052 6-1:2.0: device disconnected [ 248.776584][ T9615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.797253][ T9615] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.805116][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.807875][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.820606][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.822930][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.940315][ T5750] usb 14-1: new full-speed USB device number 3 using dummy_hcd [ 249.093657][ T5750] usb 14-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 249.097491][ T5750] usb 14-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 249.104720][ T5750] usb 14-1: Product: syz [ 249.106182][ T5750] usb 14-1: Manufacturer: syz [ 249.115464][ T5750] usb 14-1: SerialNumber: syz [ 249.127286][ T5750] usb 14-1: config 0 descriptor?? [ 249.217523][ T9615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.245094][ T9795] kvm: pic: single mode not supported [ 249.249806][ T9795] kvm: pic: level sensitive irq not supported [ 249.257812][ T9795] kvm: pic: non byte read [ 249.267693][ T9795] kvm: pic: single mode not supported [ 249.267923][ T9795] kvm: pic: non byte read [ 249.290563][ T9615] veth0_vlan: entered promiscuous mode [ 249.292017][ T9795] kvm: pic: non byte read [ 249.294212][ T9795] kvm: pic: single mode not supported [ 249.294222][ T9795] kvm: pic: level sensitive irq not supported [ 249.296507][ T9795] kvm: pic: non byte read [ 249.305090][ T9795] kvm: pic: non byte read [ 249.307901][ T9795] kvm: pic: non byte read [ 249.311806][ T9795] kvm: pic: non byte read [ 249.313979][ T9795] kvm: pic: single mode not supported [ 249.313997][ T9795] kvm: pic: level sensitive irq not supported [ 249.317422][ T9615] veth1_vlan: entered promiscuous mode [ 249.317432][ T9795] kvm: pic: non byte read [ 249.337147][ T9795] kvm: pic: non byte read [ 249.347105][ T9795] kvm: pic: single mode not supported [ 249.347119][ T9795] kvm: pic: level sensitive irq not supported [ 249.351816][ T9795] kvm: pic: non byte read [ 249.371824][ T9795] kvm: pic: single mode not supported [ 249.371843][ T9795] kvm: pic: level sensitive irq not supported [ 249.384252][ T9615] veth0_macvtap: entered promiscuous mode [ 249.385295][ T9795] kvm: pic: level sensitive irq not supported [ 249.394712][ T9615] veth1_macvtap: entered promiscuous mode [ 249.399012][ T9795] kvm: pic: single mode not supported [ 249.399030][ T9795] kvm: pic: level sensitive irq not supported [ 249.413089][ T9795] kvm: pic: single mode not supported [ 249.415124][ T9795] kvm: pic: level sensitive irq not supported [ 249.416149][ T9615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.426560][ T9795] kvm: pic: single mode not supported [ 249.426579][ T9795] kvm: pic: level sensitive irq not supported [ 249.429396][ T9795] kvm: pic: single mode not supported [ 249.432065][ T9795] kvm: pic: level sensitive irq not supported [ 249.442261][ T9615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.592591][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.594925][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.620721][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.623922][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.649942][ T9279] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.656619][ T9279] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.662165][ T9279] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.665937][ T9279] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.745284][ T9297] usb 14-1: USB disconnect, device number 3 [ 249.749861][ T5756] Bluetooth: hci2: command tx timeout [ 249.816546][ T9818] /dev/nbd0: Can't lookup blockdev [ 250.135743][ T9826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.775'. [ 250.145598][ T9826] syzkaller0: entered promiscuous mode [ 250.148044][ T9826] syzkaller0: entered allmulticast mode [ 250.156034][ T9826] syz_tun: entered allmulticast mode [ 250.362021][ T9833] syzkaller0: entered promiscuous mode [ 250.364809][ T9833] syzkaller0: entered allmulticast mode [ 250.583594][ T9846] netlink: 28 bytes leftover after parsing attributes in process `syz.0.779'. [ 250.583653][ T9847] netlink: 28 bytes leftover after parsing attributes in process `syz.0.779'. [ 250.655540][ T9847] lo speed is unknown, defaulting to 1000 [ 250.664776][ T9847] lo speed is unknown, defaulting to 1000 [ 250.678576][ T9847] lo speed is unknown, defaulting to 1000 [ 250.799767][ T9297] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 250.934101][ T9846] infiniband syz1: set active [ 250.937813][ T9846] infiniband syz1: added syz_tun [ 250.960363][ T9846] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 250.963403][ T9297] usb 14-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.965932][ T9846] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 250.972697][ T9297] usb 14-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 250.976702][ T9846] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 250.989748][ T9297] usb 14-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 250.993725][ T9297] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.998165][ T9297] usb 14-1: config 0 descriptor?? [ 251.140602][ T9846] RDS/IB: syz1: added [ 251.146740][ T9846] smc: adding ib device syz1 with port count 1 [ 251.146863][ T9846] smc: ib device syz1 port 1 has no pnetid [ 251.318750][ T9876] netlink: 'syz.3.782': attribute type 12 has an invalid length. [ 251.487252][ T9876] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 251.820374][ T5755] Bluetooth: hci2: command tx timeout [ 251.965396][ T5612] usb 14-1: USB disconnect, device number 4 [ 251.975875][ T9897] netlink: 20 bytes leftover after parsing attributes in process `syz.1.784'. [ 252.008806][ T9897] bond0: entered promiscuous mode [ 252.011684][ T9897] bond_slave_0: entered promiscuous mode [ 252.014514][ T9897] bond_slave_1: entered promiscuous mode [ 252.023862][ T9897] batadv0: entered promiscuous mode [ 252.032524][ T9897] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 252.052624][ T9897] bond0: left promiscuous mode [ 252.057128][ T9897] bond_slave_0: left promiscuous mode [ 252.063289][ T9897] bond_slave_1: left promiscuous mode [ 252.083056][ T9897] batadv0: left promiscuous mode [ 252.202316][ T43] kauditd_printk_skb: 95 callbacks suppressed [ 252.202421][ T43] audit: type=1800 audit(1785736362.794:2940): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 252.713610][ T9847] infiniband sz1: set active [ 252.715615][ T5750] lo speed is unknown, defaulting to 1000 [ 252.717436][ T43] audit: type=1800 audit(1785736363.304:2941): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=204122 res=0 errno=0 [ 252.723241][ T9847] infiniband sz1: added lo [ 252.729593][ T9847] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 252.733983][ T9847] infiniband sz1: Couldn't open port 1 [ 252.742818][ T9847] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 252.747906][ T9847] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 252.753805][ T9847] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 252.762687][ T43] audit: type=1800 audit(1785736363.354:2942): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=226226 res=0 errno=0 [ 252.775643][ T9847] RDS/IB: sz1: added [ 252.776996][ T9847] smc: adding ib device sz1 with port count 1 [ 252.780183][ T43] audit: type=1800 audit(1785736363.364:2943): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=226240 res=0 errno=0 [ 252.781935][ T9847] smc: ib device sz1 port 1 has no pnetid [ 252.793526][ T5750] lo speed is unknown, defaulting to 1000 [ 252.800203][ T43] audit: type=1800 audit(1785736363.374:2944): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=226254 res=0 errno=0 [ 252.803684][ T9847] lo speed is unknown, defaulting to 1000 [ 252.851568][ T43] audit: type=1800 audit(1785736363.434:2945): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 252.891819][ T9919] FAULT_INJECTION: forcing a failure. [ 252.891819][ T9919] name failslab, interval 1, probability 0, space 0, times 0 [ 252.898487][ T43] audit: type=1800 audit(1785736363.484:2946): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=228088 res=0 errno=0 [ 252.898840][ T9919] CPU: 3 UID: 0 PID: 9919 Comm: syz.1.786 Tainted: G L syzkaller #0 PREEMPT(full) [ 252.898869][ T9919] Tainted: [L]=SOFTLOCKUP [ 252.898874][ T9919] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 252.898881][ T9919] Call Trace: [ 252.898886][ T9919] [ 252.898891][ T9919] dump_stack_lvl+0x100/0x190 [ 252.898909][ T9919] should_fail_ex.cold+0x5/0xa [ 252.898922][ T9919] should_failslab+0xc2/0x120 [ 252.898939][ T9919] __kmalloc_cache_noprof+0x91/0x6c0 [ 252.898951][ T9919] ? __xa_alloc_cyclic+0x1f2/0x330 [ 252.898973][ T9919] ? __xdp_reg_mem_model+0x134/0x6a0 [ 252.898998][ T9919] __xdp_reg_mem_model+0x134/0x6a0 [ 252.899011][ T9919] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 252.899023][ T9919] ? page_pool_list+0x223/0x2a0 [ 252.899043][ T9919] xdp_reg_mem_model+0x22/0x70 [ 252.899055][ T9919] bpf_test_run_xdp_live+0x1cb/0x760 [ 252.899075][ T9919] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 252.899099][ T9919] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 252.899129][ T9919] ? _copy_from_user+0x59/0xd0 [ 252.899148][ T9919] ? bpf_test_init.isra.0+0x51/0x100 [ 252.899168][ T9919] bpf_prog_test_run_xdp+0xd7d/0x1670 [ 252.899185][ T9919] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 252.899202][ T9919] ? fput+0x79/0x100 [ 252.899216][ T9919] ? __bpf_prog_get+0x97/0x2a0 [ 252.899233][ T9919] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 252.899245][ T9919] __sys_bpf+0x2a12/0x4e80 [ 252.899261][ T9919] ? __pfx___sys_bpf+0x10/0x10 [ 252.899274][ T9919] ? find_held_lock+0x2b/0x80 [ 252.899289][ T9919] ? get_pid_task+0xfc/0x250 [ 252.899303][ T9919] ? get_pid_task+0xfc/0x250 [ 252.899321][ T9919] ? proc_fail_nth_write+0x9f/0x220 [ 252.899337][ T9919] ? find_held_lock+0x2b/0x80 [ 252.899354][ T9919] ? rcu_read_lock_any_held+0x6a/0xa0 [ 252.899370][ T9919] ? find_held_lock+0x2b/0x80 [ 252.899383][ T9919] ? ksys_write+0x190/0x250 [ 252.899393][ T9919] ? ksys_write+0x190/0x250 [ 252.899414][ T9919] ? fput+0x79/0x100 [ 252.899428][ T9919] ? __ia32_sys_bpf+0xcc/0x170 [ 252.899440][ T9919] __ia32_sys_bpf+0xcc/0x170 [ 252.899453][ T9919] ? __do_fast_syscall_32+0x98/0x970 [ 252.899469][ T9919] __do_fast_syscall_32+0xe7/0x970 [ 252.899485][ T9919] ? lockdep_hardirqs_on+0x78/0x100 [ 252.899501][ T9919] do_fast_syscall_32+0x32/0x70 [ 252.899517][ T9919] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 252.899532][ T9919] RIP: 0023:0xf706efec [ 252.899546][ T9919] Code: Unable to access opcode bytes at 0xf706efc2. [ 252.899551][ T9919] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 252.899562][ T9919] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000340 [ 252.899569][ T9919] RDX: 000000000000004c RSI: 0000000000000000 RDI: 0000000000000000 [ 252.899576][ T9919] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 252.899582][ T9919] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 252.899588][ T9919] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 252.899602][ T9919] [ 252.905937][ T43] audit: type=1800 audit(1785736363.494:2947): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=228129 res=0 errno=0 [ 252.911193][ T43] audit: type=1800 audit(1785736363.504:2948): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=228346 res=0 errno=0 [ 252.987791][ T9847] lo speed is unknown, defaulting to 1000 [ 253.105370][ T43] audit: type=1800 audit(1785736363.694:2949): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 253.155587][ T9930] netlink: 16 bytes leftover after parsing attributes in process `syz.1.791'. [ 253.200391][ T9847] lo speed is unknown, defaulting to 1000 [ 253.262947][ T9937] veth0: entered promiscuous mode [ 253.340904][ T9937] netlink: 4 bytes leftover after parsing attributes in process `syz.9.793'. [ 253.403939][ T9937] bond0: (slave bond_slave_1): Releasing backup interface [ 253.446417][ T9847] lo speed is unknown, defaulting to 1000 [ 253.505310][ T9936] veth0: left promiscuous mode [ 253.759556][ T9847] lo speed is unknown, defaulting to 1000 [ 253.829940][ T7141] hid_parser_main: 98 callbacks suppressed [ 253.829964][ T7141] hid-generic 0004:FFFFFFFF:0000.0020: unknown main item tag 0x0 [ 253.842543][ T7141] hid-generic 0004:FFFFFFFF:0000.0020: unknown main item tag 0x0 [ 253.848025][ T7141] hid-generic 0004:FFFFFFFF:0000.0020: unknown main item tag 0x0 [ 253.855666][ T7141] hid-generic 0004:FFFFFFFF:0000.0020: unknown main item tag 0x0 [ 253.863345][ T7141] hid-generic 0004:FFFFFFFF:0000.0020: unknown main item tag 0x0 [ 253.869055][ T7141] hid-generic 0004:FFFFFFFF:0000.0020: unknown main item tag 0x0 [ 253.875216][ T7141] hid-generic 0004:FFFFFFFF:0000.0020: unknown main item tag 0x0 [ 253.883071][ T7141] hid-generic 0004:FFFFFFFF:0000.0020: unknown main item tag 0x0 [ 253.889853][ T7141] hid-generic 0004:FFFFFFFF:0000.0020: unknown main item tag 0x0 [ 253.895798][ T7141] hid-generic 0004:FFFFFFFF:0000.0020: unknown main item tag 0x0 [ 253.900150][ T5755] Bluetooth: hci2: command tx timeout [ 253.923925][ T7141] hid-generic 0004:FFFFFFFF:0000.0020: hidraw1: HID v0.00 Device [syz0] on syz0 [ 253.990971][ T9949] fido_id[9949]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 254.017762][ T9950] Invalid ELF header magic: != ELF [ 254.773203][ T9968] tipc: Enabled bearer , priority 0 [ 254.778827][ T9968] syzkaller0: entered promiscuous mode [ 254.784875][ T9968] syzkaller0: entered allmulticast mode [ 254.789879][ T9968] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 254.806890][ T9968] syzkaller0: mtu greater than device maximum [ 254.810899][ T9967] tipc: Resetting bearer [ 254.825879][ T9967] tipc: Disabling bearer [ 255.503102][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.506295][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.710081][ T9979] program syz.9.805 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 255.735585][ T9979] netlink: 'syz.9.805': attribute type 8 has an invalid length. [ 255.748152][ T9979] netlink: 4 bytes leftover after parsing attributes in process `syz.9.805'. [ 255.775650][ T9979] bond0: entered promiscuous mode [ 255.783906][ T9979] bond_slave_0: entered promiscuous mode [ 255.794713][ T9979] gretap0: entered promiscuous mode [ 255.802628][ T9979] veth0_to_bridge: entered promiscuous mode [ 255.810247][ T9979] hsr1: entered promiscuous mode [ 256.900569][ T9999] xt_ipcomp: unknown flags 1D [ 257.010543][T10001] syzkaller0: entered allmulticast mode [ 257.290208][T10001] gadgetfs: bound to dummy_udc driver [ 257.534116][ T43] kauditd_printk_skb: 21 callbacks suppressed [ 257.534131][ T43] audit: type=1800 audit(1785736368.124:2971): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 257.559835][ T9] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 257.567458][ C0] gadgetfs: connected [ 257.575315][ T9] gadgetfs: disconnected [ 257.770125][ T43] audit: type=1800 audit(1785736368.354:2972): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 257.881411][ T43] audit: type=1800 audit(1785736368.474:2973): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 257.912402][ T43] audit: type=1800 audit(1785736368.504:2974): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 257.922379][T10017] FAULT_INJECTION: forcing a failure. [ 257.922379][T10017] name failslab, interval 1, probability 0, space 0, times 0 [ 257.928588][T10017] CPU: 2 UID: 0 PID: 10017 Comm: syz.9.815 Tainted: G L syzkaller #0 PREEMPT(full) [ 257.928619][T10017] Tainted: [L]=SOFTLOCKUP [ 257.928626][T10017] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 257.928637][T10017] Call Trace: [ 257.928644][T10017] [ 257.928651][T10017] dump_stack_lvl+0x100/0x190 [ 257.928681][T10017] should_fail_ex.cold+0x5/0xa [ 257.928704][T10017] should_failslab+0xc2/0x120 [ 257.928730][T10017] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 257.928754][T10017] ? __alloc_skb+0x140/0x710 [ 257.928785][T10017] __alloc_skb+0x140/0x710 [ 257.928806][T10017] ? __alloc_skb+0x5b7/0x710 [ 257.928830][T10017] ? __pfx___alloc_skb+0x10/0x10 [ 257.928854][T10017] ? genl_rcv_msg+0x4be/0x800 [ 257.928881][T10017] netlink_ack+0x117/0xb80 [ 257.928907][T10017] netlink_rcv_skb+0x333/0x420 [ 257.928928][T10017] ? __pfx_genl_rcv_msg+0x10/0x10 [ 257.928954][T10017] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 257.928985][T10017] ? netlink_deliver_tap+0x1ae/0xcc0 [ 257.929011][T10017] genl_rcv+0x28/0x40 [ 257.929032][T10017] netlink_unicast+0x585/0x850 [ 257.929054][T10017] ? __pfx_netlink_unicast+0x10/0x10 [ 257.929083][T10017] netlink_sendmsg+0x8b0/0xda0 [ 257.929105][T10017] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.929131][T10017] ? apparmor_socket_sendmsg+0x15b/0x270 [ 257.929159][T10017] ____sys_sendmsg+0xa4d/0xbe0 [ 257.929177][T10017] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.929202][T10017] ? __pfx_____sys_sendmsg+0x10/0x10 [ 257.929233][T10017] ___sys_sendmsg+0x190/0x1e0 [ 257.929255][T10017] ? __pfx____sys_sendmsg+0x10/0x10 [ 257.929290][T10017] ? find_held_lock+0x2b/0x80 [ 257.929329][T10017] __sys_sendmsg+0x160/0x210 [ 257.929357][T10017] ? __pfx___sys_sendmsg+0x10/0x10 [ 257.929391][T10017] ? __pfx_ksys_write+0x10/0x10 [ 257.929416][T10017] __do_fast_syscall_32+0xe7/0x970 [ 257.929442][T10017] ? lockdep_hardirqs_on+0x78/0x100 [ 257.929478][T10017] do_fast_syscall_32+0x32/0x70 [ 257.929504][T10017] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 257.929527][T10017] RIP: 0023:0xf7f85fec [ 257.929549][T10017] Code: Unable to access opcode bytes at 0xf7f85fc2. [ 257.929558][T10017] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 257.929578][T10017] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080006000 [ 257.929589][T10017] RDX: 0000000000028000 RSI: 0000000000000000 RDI: 0000000000000000 [ 257.929600][T10017] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 257.929611][T10017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.929622][T10017] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 257.929660][T10017] [ 257.938094][ T43] audit: type=1800 audit(1785736368.524:2975): pid=10018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.814" name="file1" dev="tmpfs" ino=59 res=0 errno=0 [ 258.022002][ T43] audit: type=1800 audit(1785736368.554:2976): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 258.083612][ T43] audit: type=1800 audit(1785736368.674:2977): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 258.134357][ T43] audit: type=1800 audit(1785736368.724:2978): pid=10027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.819" name="file1" dev="tmpfs" ino=176 res=0 errno=0 [ 258.157831][T10027] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 258.287098][ T43] audit: type=1800 audit(1785736368.874:2979): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 258.599766][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 258.679325][ T43] audit: type=1800 audit(1785736369.264:2980): pid=6120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=242687 res=0 errno=0 [ 258.755299][ T9] usb 6-1: New USB device found, idVendor=07c4, idProduct=a000, bcdDevice= 0.01 [ 258.759092][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.763272][ T9] usb 6-1: Product: syz [ 258.765021][ T9] usb 6-1: Manufacturer: syz [ 258.768699][ T9] usb 6-1: SerialNumber: syz [ 258.777644][ T9] ums-datafab 6-1:1.0: USB Mass Storage device detected [ 258.825627][ T9] ums-datafab 6-1:1.0: This device (07c4,a000,0001 S 06 P f2) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 258.825627][ T9] Please send a copy of this message to and [ 258.843950][ T9] scsi host6: usb-storage 6-1:1.0 [ 259.089196][T10035] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.139056][T10035] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.292307][T10032] tipc: Enabling of bearer <:syzkaller0> rejected, media not registered [ 259.999555][ T1177] scsi 6:0:0:0: Direct-Access Datafab MDCFE-B USB CF R 0001 PQ: 0 ANSI: 0 CCS [ 260.049371][ T1177] scsi 6:0:0:1: Direct-Access Datafab MDCFE-B USB CF R 0001 PQ: 0 ANSI: 0 CCS [ 260.282581][ T1177] sd 6:0:0:0: Attached scsi generic sg2 type 0 [ 260.343906][ T1177] sd 6:0:0:1: Attached scsi generic sg3 type 0 [ 260.987831][ T5750] usb 6-1: USB disconnect, device number 7 [ 261.058036][ T1167] sd 6:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK [ 261.061391][ T112] sd 6:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 261.079803][ T1167] sd 6:0:0:0: [sdb] Sense not available. [ 261.083781][ T112] sd 6:0:0:1: [sdc] Read Capacity(10) failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 261.084716][ T1167] sd 6:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 261.090032][ T112] sd 6:0:0:1: [sdc] Sense not available. [ 261.102089][ T1167] sd 6:0:0:0: [sdb] 0-byte physical blocks [ 261.103767][ T112] sd 6:0:0:1: [sdc] 0 512-byte logical blocks: (0 B/0 B) [ 261.175117][ T1167] sd 6:0:0:0: [sdb] Write Protect is off [ 261.202249][ T1167] sd 6:0:0:0: [sdb] Asking for cache data failed [ 261.209356][ T1167] sd 6:0:0:0: [sdb] Assuming drive cache: write through [ 261.365296][T10074] ehci-pci 0000:00:1d.7: remove, state 1 [ 261.367846][T10074] usb usb1: USB disconnect, device number 1 [ 261.371968][T10074] usb 1-1: USB disconnect, device number 2 [ 261.486104][ T1167] sd 6:0:0:0: [sdb] Attached SCSI removable disk [ 261.549951][T10074] ehci-pci 0000:00:1d.7: USB bus 1 deregistered [ 261.711193][T10079] FAULT_INJECTION: forcing a failure. [ 261.711193][T10079] name failslab, interval 1, probability 0, space 0, times 0 [ 261.718356][T10079] CPU: 1 UID: 0 PID: 10079 Comm: syz.3.825 Tainted: G L syzkaller #0 PREEMPT(full) [ 261.718401][T10079] Tainted: [L]=SOFTLOCKUP [ 261.718408][T10079] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 261.718419][T10079] Call Trace: [ 261.718427][T10079] [ 261.718437][T10079] dump_stack_lvl+0x100/0x190 [ 261.718469][T10079] should_fail_ex.cold+0x5/0xa [ 261.718492][T10079] should_failslab+0xc2/0x120 [ 261.718519][T10079] __kvmalloc_node_noprof+0x116/0x970 [ 261.718547][T10079] ? seq_read_iter+0x819/0x1270 [ 261.718581][T10079] seq_read_iter+0x819/0x1270 [ 261.718615][T10079] ? aa_file_perm+0x7f3/0x14d0 [ 261.718648][T10079] seq_read+0x344/0x4d0 [ 261.718691][T10079] ? __pfx_seq_read+0x10/0x10 [ 261.718723][T10079] ? lock_acquire+0x1b9/0x370 [ 261.718763][T10079] ? __pfx_seq_read+0x10/0x10 [ 261.718790][T10079] proc_reg_read+0x240/0x330 [ 261.718811][T10079] ? __pfx_proc_reg_read+0x10/0x10 [ 261.718828][T10079] vfs_read+0x1e4/0xb40 [ 261.718851][T10079] ? __pfx_vfs_read+0x10/0x10 [ 261.718865][T10079] ? find_held_lock+0x2b/0x80 [ 261.718887][T10079] ? __fget_files+0x215/0x3d0 [ 261.718910][T10079] ? __fget_files+0x21f/0x3d0 [ 261.718935][T10079] ksys_read+0x12a/0x250 [ 261.718954][T10079] ? __pfx_ksys_read+0x10/0x10 [ 261.718972][T10079] ? rcu_is_watching+0x12/0xc0 [ 261.718999][T10079] __do_fast_syscall_32+0xe7/0x970 [ 261.719028][T10079] ? lockdep_hardirqs_on+0x78/0x100 [ 261.719052][T10079] do_fast_syscall_32+0x32/0x70 [ 261.719078][T10079] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 261.719100][T10079] RIP: 0023:0xf7f04fec [ 261.719123][T10079] Code: Unable to access opcode bytes at 0xf7f04fc2. [ 261.719134][T10079] RSP: 002b:00000000f53a550c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 261.719152][T10079] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080002140 [ 261.719164][T10079] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 261.719174][T10079] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 261.719185][T10079] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 261.719195][T10079] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 261.719219][T10079] [ 261.838254][ T112] sd 6:0:0:1: [sdc] 0-byte physical blocks [ 261.863054][ T112] sd 6:0:0:1: [sdc] Test WP failed, assume Write Enabled [ 261.866884][ T112] sd 6:0:0:1: [sdc] Asking for cache data failed [ 261.869369][ T112] sd 6:0:0:1: [sdc] Assuming drive cache: write through [ 262.040559][ T9277] usb 2-1: new full-speed USB device number 16 using uhci_hcd [ 262.066682][ T112] sd 6:0:0:1: [sdc] Attached SCSI removable disk [ 262.103713][T10086] FAULT_INJECTION: forcing a failure. [ 262.103713][T10086] name failslab, interval 1, probability 0, space 0, times 0 [ 262.109385][T10086] CPU: 3 UID: 0 PID: 10086 Comm: syz.0.828 Tainted: G L syzkaller #0 PREEMPT(full) [ 262.109405][T10086] Tainted: [L]=SOFTLOCKUP [ 262.109409][T10086] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 262.109417][T10086] Call Trace: [ 262.109421][T10086] [ 262.109426][T10086] dump_stack_lvl+0x100/0x190 [ 262.109448][T10086] should_fail_ex.cold+0x5/0xa [ 262.109462][T10086] should_failslab+0xc2/0x120 [ 262.109478][T10086] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 262.109494][T10086] ? __alloc_skb+0x140/0x710 [ 262.109513][T10086] __alloc_skb+0x140/0x710 [ 262.109527][T10086] ? __alloc_skb+0x5b7/0x710 [ 262.109541][T10086] ? __pfx___alloc_skb+0x10/0x10 [ 262.109560][T10086] nl80211_tx_mgmt+0x96f/0xfa0 [ 262.109589][T10086] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 262.109600][T10086] ? __pfx_netdev_run_todo+0x10/0x10 [ 262.109627][T10086] ? nl80211_pre_doit+0x19a/0xae0 [ 262.109659][T10086] genl_family_rcv_msg_doit+0x214/0x300 [ 262.109678][T10086] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 262.109692][T10086] ? genl_get_cmd+0x3e7/0x760 [ 262.109709][T10086] ? bpf_lsm_capable+0x9/0x10 [ 262.109722][T10086] ? security_capable+0x80/0x260 [ 262.109736][T10086] ? ns_capable+0xd2/0xf0 [ 262.109750][T10086] genl_rcv_msg+0x560/0x800 [ 262.109767][T10086] ? __pfx_genl_rcv_msg+0x10/0x10 [ 262.109782][T10086] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 262.109796][T10086] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 262.109806][T10086] ? __pfx_nl80211_post_doit+0x10/0x10 [ 262.109828][T10086] netlink_rcv_skb+0x159/0x420 [ 262.109841][T10086] ? __pfx_genl_rcv_msg+0x10/0x10 [ 262.109857][T10086] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 262.109875][T10086] ? netlink_deliver_tap+0x1ae/0xcc0 [ 262.109889][T10086] genl_rcv+0x28/0x40 [ 262.109902][T10086] netlink_unicast+0x585/0x850 [ 262.109917][T10086] ? __pfx_netlink_unicast+0x10/0x10 [ 262.109934][T10086] netlink_sendmsg+0x8b0/0xda0 [ 262.109954][T10086] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.109969][T10086] ? apparmor_socket_sendmsg+0x15b/0x270 [ 262.109986][T10086] ____sys_sendmsg+0xa4d/0xbe0 [ 262.109997][T10086] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.110011][T10086] ? __pfx_____sys_sendmsg+0x10/0x10 [ 262.110030][T10086] ___sys_sendmsg+0x190/0x1e0 [ 262.110044][T10086] ? __pfx____sys_sendmsg+0x10/0x10 [ 262.110063][T10086] ? find_held_lock+0x2b/0x80 [ 262.110087][T10086] __sys_sendmsg+0x160/0x210 [ 262.110104][T10086] ? __pfx___sys_sendmsg+0x10/0x10 [ 262.110124][T10086] ? __pfx_ksys_write+0x10/0x10 [ 262.110138][T10086] __do_fast_syscall_32+0xe7/0x970 [ 262.110154][T10086] ? lockdep_hardirqs_on+0x78/0x100 [ 262.110171][T10086] do_fast_syscall_32+0x32/0x70 [ 262.110187][T10086] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 262.110202][T10086] RIP: 0023:0xf704efec [ 262.110216][T10086] Code: Unable to access opcode bytes at 0xf704efc2. [ 262.110222][T10086] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 262.110234][T10086] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001380 [ 262.110241][T10086] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 262.110247][T10086] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 262.110253][T10086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.110260][T10086] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 262.110275][T10086] [ 262.221975][ T9277] usb 2-1: not running at top speed; connect to a high speed hub [ 262.267223][ T9277] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 262.286107][ T9277] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 262.303840][ T9277] usb 2-1: Product: QEMU USB Tablet [ 262.320139][ T9277] usb 2-1: Manufacturer: QEMU [ 262.335201][ T9277] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 262.502225][ T6120] sd 6:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 262.555042][ T9277] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1:1.0/0003:0627:0001.0021/input/input50 [ 262.598647][ T43] kauditd_printk_skb: 55 callbacks suppressed [ 262.598666][ T43] audit: type=1800 audit(1785736373.184:3036): pid=6120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=243424 res=0 errno=0 [ 262.602740][ T6129] udevd[6129]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 262.640031][ T43] audit: type=1800 audit(1785736373.194:3037): pid=6120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="vendor" dev="sysfs" ino=243163 res=0 errno=0 [ 262.652392][ T43] audit: type=1800 audit(1785736373.194:3038): pid=6120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="removable" dev="sysfs" ino=243430 res=0 errno=0 [ 262.654122][ T9277] hid-generic 0003:0627:0001.0021: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 262.677132][T10105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.832'. [ 262.688501][T10105] FAULT_INJECTION: forcing a failure. [ 262.688501][T10105] name failslab, interval 1, probability 0, space 0, times 0 [ 262.693946][T10105] CPU: 1 UID: 0 PID: 10105 Comm: syz.1.832 Tainted: G L syzkaller #0 PREEMPT(full) [ 262.693974][T10105] Tainted: [L]=SOFTLOCKUP [ 262.693980][T10105] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 262.693990][T10105] Call Trace: [ 262.693996][T10105] [ 262.694002][T10105] dump_stack_lvl+0x100/0x190 [ 262.694028][T10105] should_fail_ex.cold+0x5/0xa [ 262.694045][T10105] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 262.694068][T10105] should_failslab+0xc2/0x120 [ 262.694092][T10105] kmem_cache_alloc_noprof+0x91/0x6a0 [ 262.694115][T10105] ? skb_clone+0x190/0x400 [ 262.694142][T10105] skb_clone+0x190/0x400 [ 262.694166][T10105] netlink_deliver_tap+0xaed/0xcc0 [ 262.694191][T10105] netlink_unicast+0x6a5/0x850 [ 262.694215][T10105] ? __pfx_netlink_unicast+0x10/0x10 [ 262.694242][T10105] netlink_ack+0x655/0xb80 [ 262.694269][T10105] netlink_rcv_skb+0x333/0x420 [ 262.694291][T10105] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 262.694319][T10105] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 262.694346][T10105] ? netlink_deliver_tap+0x1ae/0xcc0 [ 262.694370][T10105] netlink_unicast+0x585/0x850 [ 262.694392][T10105] ? __pfx_netlink_unicast+0x10/0x10 [ 262.694416][T10105] netlink_sendmsg+0x8b0/0xda0 [ 262.694446][T10105] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.694468][T10105] ? apparmor_socket_sendmsg+0x15b/0x270 [ 262.694492][T10105] ____sys_sendmsg+0xa4d/0xbe0 [ 262.694509][T10105] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.694530][T10105] ? __pfx_____sys_sendmsg+0x10/0x10 [ 262.694558][T10105] ___sys_sendmsg+0x190/0x1e0 [ 262.694579][T10105] ? __pfx____sys_sendmsg+0x10/0x10 [ 262.694609][T10105] ? find_held_lock+0x2b/0x80 [ 262.694646][T10105] __sys_sendmsg+0x160/0x210 [ 262.694670][T10105] ? __pfx___sys_sendmsg+0x10/0x10 [ 262.694700][T10105] ? __pfx_ksys_write+0x10/0x10 [ 262.694721][T10105] __do_fast_syscall_32+0xe7/0x970 [ 262.694745][T10105] ? lockdep_hardirqs_on+0x78/0x100 [ 262.694768][T10105] do_fast_syscall_32+0x32/0x70 [ 262.694791][T10105] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 262.694813][T10105] RIP: 0023:0xf706efec [ 262.694833][T10105] Code: Unable to access opcode bytes at 0xf706efc2. [ 262.694841][T10105] RSP: 002b:00000000f543c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 262.694858][T10105] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800003c0 [ 262.694869][T10105] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 262.694879][T10105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 262.694888][T10105] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 262.694898][T10105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 262.694919][T10105] [ 262.702495][ T43] audit: type=1800 audit(1785736373.284:3039): pid=6078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=243591 res=0 errno=0 [ 262.719747][T10075] usb 2-1: USB disconnect, device number 16 [ 262.722549][ T43] audit: type=1800 audit(1785736373.284:3040): pid=6078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=243592 res=0 errno=0 [ 262.825605][ T43] audit: type=1800 audit(1785736373.284:3041): pid=6078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=243571 res=0 errno=0 [ 262.835215][ T43] audit: type=1800 audit(1785736373.314:3042): pid=6078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=243593 res=0 errno=0 [ 262.843598][ T43] audit: type=1800 audit(1785736373.434:3043): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 262.907451][ T43] audit: type=1800 audit(1785736373.494:3044): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 262.945426][ T43] audit: type=1800 audit(1785736373.514:3045): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 264.034644][T10075] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 264.042148][T10131] fido_id[10131]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb2/report_descriptor': No such file or directory [ 264.049888][T10075] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1 [ 264.061092][T10134] CIFS: Attempting to mount //127.0.0.1/share [ 264.139256][T10134] CIFS: VFS: Error connecting to socket. Aborting operation. [ 264.146062][T10137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.841'. [ 264.148675][T10075] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 264.149615][T10134] CIFS: VFS: cifs_mount failed w/return code = -111 [ 264.190930][T10075] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 264.207472][T10075] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 264.216250][T10075] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 264.222799][T10075] usb usb1: Product: EHCI Host Controller [ 264.226042][T10075] usb usb1: Manufacturer: Linux syzkaller ehci_hcd [ 264.233815][T10075] usb usb1: SerialNumber: 0000:00:1d.7 [ 264.256644][T10075] hub 1-0:1.0: USB hub found [ 264.260456][T10075] hub 1-0:1.0: 6 ports detected [ 264.273581][T10142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.842'. [ 264.339413][T10075] hub 2-0:1.0: USB hub found [ 264.343623][T10075] hub 2-0:1.0: 2 ports detected [ 264.405350][T10075] hub 3-0:1.0: USB hub found [ 264.412408][T10075] hub 3-0:1.0: 2 ports detected [ 264.420885][T10148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.839'. [ 264.464527][T10075] hub 4-0:1.0: USB hub found [ 264.468778][T10075] hub 4-0:1.0: 2 ports detected [ 264.559823][ T7140] usb 1-1: new high-speed USB device number 2 using ehci-pci [ 264.589720][T10151] FAULT_INJECTION: forcing a failure. [ 264.589720][T10151] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 264.605639][T10151] CPU: 0 UID: 0 PID: 10151 Comm: syz.9.845 Tainted: G L syzkaller #0 PREEMPT(full) [ 264.605673][T10151] Tainted: [L]=SOFTLOCKUP [ 264.605679][T10151] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 264.605690][T10151] Call Trace: [ 264.605697][T10151] [ 264.605705][T10151] dump_stack_lvl+0x100/0x190 [ 264.605735][T10151] should_fail_ex.cold+0x5/0xa [ 264.605754][T10151] ? prepare_alloc_pages+0x16d/0x5f0 [ 264.605785][T10151] should_fail_alloc_page+0xeb/0x140 [ 264.605815][T10151] prepare_alloc_pages+0x1f0/0x5f0 [ 264.605845][T10151] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 264.605871][T10151] ? stack_trace_save+0x8e/0xc0 [ 264.605896][T10151] ? __pfx_stack_trace_save+0x10/0x10 [ 264.605921][T10151] ? stack_depot_save_flags+0x27/0x9d0 [ 264.605956][T10151] ? kasan_save_stack+0x3f/0x50 [ 264.605980][T10151] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 264.606005][T10151] ? __lock_acquire+0x49f/0x1a40 [ 264.606033][T10151] ? __do_fast_syscall_32+0xe7/0x970 [ 264.606060][T10151] ? do_fast_syscall_32+0x32/0x70 [ 264.606084][T10151] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 264.606116][T10151] ? __lock_acquire+0x49f/0x1a40 [ 264.606160][T10151] ? rcu_read_unlock+0x17/0x60 [ 264.606188][T10151] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 264.606217][T10151] ? policy_nodemask+0xed/0x4f0 [ 264.606244][T10151] alloc_pages_mpol+0x1fb/0x540 [ 264.606272][T10151] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 264.606299][T10151] ? find_held_lock+0x2b/0x80 [ 264.606321][T10151] ? __anon_vma_prepare+0x2db/0x5e0 [ 264.606338][T10151] ? __anon_vma_prepare+0x2db/0x5e0 [ 264.606359][T10151] folio_alloc_mpol_noprof+0x36/0x260 [ 264.606390][T10151] vma_alloc_folio_noprof+0xed/0x1d0 [ 264.606419][T10151] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 264.606452][T10151] ? __anon_vma_prepare+0x2e2/0x5e0 [ 264.606477][T10151] do_anonymous_page+0xb2b/0x2080 [ 264.606507][T10151] __handle_mm_fault+0x1d2c/0x2a00 [ 264.606531][T10151] ? mt_find+0x45e/0x8e0 [ 264.606558][T10151] ? __pfx___handle_mm_fault+0x10/0x10 [ 264.606577][T10151] ? __pfx_mt_find+0x10/0x10 [ 264.606616][T10151] ? find_vma+0xbf/0x140 [ 264.606639][T10151] ? __pfx_find_vma+0x10/0x10 [ 264.606665][T10151] handle_mm_fault+0x37b/0xa30 [ 264.606690][T10151] do_user_addr_fault+0x74c/0x12f0 [ 264.606723][T10151] exc_page_fault+0x6f/0xd0 [ 264.606748][T10151] asm_exc_page_fault+0x26/0x30 [ 264.606766][T10151] RIP: 0010:_copy_to_user+0x9f/0xd0 [ 264.606795][T10151] Code: 89 ee 48 89 ef e8 31 69 ee fc 4d 85 ff 75 26 e8 47 6f ee fc 89 de 4c 89 e7 e8 ad 04 5e fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 a4 0f 1f 00 0f 01 ca 48 89 cb e8 21 6f ee fc 48 89 d8 5b 5d 41 [ 264.606813][T10151] RSP: 0018:ffffc900038afde8 EFLAGS: 00050246 [ 264.606830][T10151] RAX: 0000000000000001 RBX: 0000000000000010 RCX: 0000000000000010 [ 264.606841][T10151] RDX: 0000000000000001 RSI: ffffc900038afe40 RDI: 0000000080000080 [ 264.606853][T10151] RBP: 0000000080000080 R08: 0000000000000000 R09: fffff52000715fc9 [ 264.606864][T10151] R10: ffffc900038afe4f R11: 0000000000000000 R12: ffffc900038afe40 [ 264.606874][T10151] R13: 0000000080000090 R14: 00007ffffffff000 R15: 0000000000000000 [ 264.606900][T10151] ? _copy_to_user+0x93/0xd0 [ 264.606930][T10151] __ia32_compat_sys_getitimer+0x1ad/0x200 [ 264.606950][T10151] ? __pfx___ia32_compat_sys_getitimer+0x10/0x10 [ 264.606973][T10151] ? fput+0x79/0x100 [ 264.606995][T10151] ? __pfx_ksys_write+0x10/0x10 [ 264.607019][T10151] __do_fast_syscall_32+0xe7/0x970 [ 264.607045][T10151] ? lockdep_hardirqs_on+0x78/0x100 [ 264.607070][T10151] do_fast_syscall_32+0x32/0x70 [ 264.607096][T10151] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 264.607119][T10151] RIP: 0023:0xf7f85fec [ 264.607138][T10151] Code: Unable to access opcode bytes at 0xf7f85fc2. [ 264.607146][T10151] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000069 [ 264.607162][T10151] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000080 [ 264.607172][T10151] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 264.607183][T10151] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 264.607193][T10151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.607203][T10151] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 264.607227][T10151] [ 264.999338][ T7140] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 265.000405][T10160] netlink: 4 bytes leftover after parsing attributes in process `syz.9.847'. [ 265.014818][ T7140] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 265.028344][ T7140] usb 1-1: Product: QEMU USB Tablet [ 265.036976][ T7140] usb 1-1: Manufacturer: QEMU [ 265.043527][ T7140] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 265.288860][ T7140] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0022/input/input51 [ 265.549236][ T7140] hid-generic 0003:0627:0001.0022: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 266.204069][T10176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.851'. [ 266.208161][T10177] netlink: 164 bytes leftover after parsing attributes in process `syz.3.850'. [ 266.217999][T10177] netlink: 16 bytes leftover after parsing attributes in process `syz.3.850'. [ 266.308349][T10184] fuse: Bad value for 'user_id' [ 266.313540][T10184] fuse: Bad value for 'user_id' [ 266.335203][T10187] ehci-pci 0000:00:1d.7: remove, state 1 [ 266.344097][T10187] usb usb1: USB disconnect, device number 1 [ 266.346638][T10187] usb 1-1: USB disconnect, device number 2 [ 266.465082][T10195] netlink: 16 bytes leftover after parsing attributes in process `syz.9.852'. [ 266.503381][T10187] ehci-pci 0000:00:1d.7: USB bus 1 deregistered [ 266.547193][T10200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.555402][T10200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.109733][ T5829] usb 2-1: new full-speed USB device number 17 using uhci_hcd [ 267.227694][T10203] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:1024 [ 267.265673][ T5829] usb 2-1: not running at top speed; connect to a high speed hub [ 267.286399][ T5829] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 267.290412][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 267.293678][ T5829] usb 2-1: Product: QEMU USB Tablet [ 267.295837][ T5829] usb 2-1: Manufacturer: QEMU [ 267.297326][ T5829] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 267.328412][ T5829] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1:1.0/0003:0627:0001.0023/input/input52 [ 267.398127][ T5829] hid-generic 0003:0627:0001.0023: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 267.414632][T10193] usb 2-1: USB disconnect, device number 17 [ 267.606021][T10212] fido_id[10212]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb2/report_descriptor': No such file or directory [ 267.630769][T10193] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 267.698688][ T43] kauditd_printk_skb: 69 callbacks suppressed [ 267.698708][ T43] audit: type=1800 audit(1785736378.284:3115): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=244667 res=0 errno=0 [ 267.701080][T10193] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1 [ 267.790390][T10193] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 267.811352][T10193] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 267.824418][T10215] hfs: can't find a HFS filesystem on dev sr0 [ 267.855964][T10193] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 267.860684][T10193] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 267.864061][T10193] usb usb1: Product: EHCI Host Controller [ 267.867022][T10193] usb usb1: Manufacturer: Linux syzkaller ehci_hcd [ 267.880982][T10193] usb usb1: SerialNumber: 0000:00:1d.7 [ 267.960910][ T43] audit: type=1800 audit(1785736378.554:3116): pid=6120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=244682 res=0 errno=0 [ 268.067731][T10193] hub 1-0:1.0: USB hub found [ 268.073081][T10193] hub 1-0:1.0: 6 ports detected [ 268.084760][T10215] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 268.338441][T10193] hub 2-0:1.0: USB hub found [ 268.341533][T10193] hub 2-0:1.0: 2 ports detected [ 268.445833][T10193] hub 3-0:1.0: USB hub found [ 268.449868][T10193] hub 3-0:1.0: 2 ports detected [ 268.532162][T10193] hub 4-0:1.0: USB hub found [ 268.536415][T10193] hub 4-0:1.0: 2 ports detected [ 268.543854][ T5895] usb 1-1: new high-speed USB device number 2 using ehci-pci [ 268.589211][ T43] audit: type=1800 audit(1785736378.554:3117): pid=6120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=244714 res=0 errno=0 [ 268.603887][ T43] audit: type=1800 audit(1785736378.554:3118): pid=6120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=244689 res=0 errno=0 [ 268.616643][ T43] audit: type=1800 audit(1785736378.554:3119): pid=6120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=244690 res=0 errno=0 [ 268.628294][ T43] audit: type=1800 audit(1785736378.554:3120): pid=6120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=244711 res=0 errno=0 [ 268.638082][ T43] audit: type=1800 audit(1785736378.554:3121): pid=6120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=244712 res=0 errno=0 [ 268.646818][ T43] audit: type=1800 audit(1785736378.554:3122): pid=6120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=244691 res=0 errno=0 [ 268.654815][ T43] audit: type=1800 audit(1785736378.554:3123): pid=6120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=244713 res=0 errno=0 [ 268.663060][ T43] audit: type=1800 audit(1785736378.614:3124): pid=6120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=244744 res=0 errno=0 [ 268.734115][ T5895] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 268.737301][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 268.740377][ T5895] usb 1-1: Product: QEMU USB Tablet [ 268.742126][ T5895] usb 1-1: Manufacturer: QEMU [ 268.743916][ T5895] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 268.764802][ T5895] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0024/input/input53 [ 268.833432][ T5895] hid-generic 0003:0627:0001.0024: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 269.065461][T10223] syzkaller0: entered promiscuous mode [ 269.067905][T10223] syzkaller0: entered allmulticast mode [ 269.141653][T10226] loop8: detected capacity change from 0 to 7 [ 269.155365][ C0] blk_print_req_error: 70 callbacks suppressed [ 269.155379][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 269.161963][ C0] buffer_io_error: 70 callbacks suppressed [ 269.161974][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 269.166760][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 269.170831][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 269.174228][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 269.177338][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 269.180946][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 269.184065][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 269.186820][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 269.190846][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 269.194346][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 269.198519][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 269.202222][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 269.205272][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 269.211631][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 269.214717][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 269.220953][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 269.224069][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 269.226759][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 269.229864][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 269.235568][T10226] ldm_validate_partition_table(): Disk read failed. [ 269.240865][T10226] Dev loop8: unable to read RDB block 0 [ 269.243846][T10226] loop8: unable to read partition table [ 269.247979][T10226] loop8: partition table beyond EOD, truncated [ 269.251288][T10226] loop_reread_partitions: partition scan of loop8 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 269.329951][T10232] netlink: 68 bytes leftover after parsing attributes in process `syz.0.865'. [ 269.642918][T10243] netlink: 8 bytes leftover after parsing attributes in process `syz.9.866'. [ 269.743111][T10239] ntfs3(sr0): Primary boot signature is not NTFS. [ 269.755209][T10239] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 269.828311][T10239] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 271.260043][ T5755] Bluetooth: hci4: command tx timeout [ 272.560679][T10266] ehci-pci 0000:00:1d.7: remove, state 1 [ 272.567114][T10266] usb usb1: USB disconnect, device number 1 [ 272.569068][T10266] usb 1-1: USB disconnect, device number 2 [ 272.574203][T10262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.871'. [ 272.582971][T10262] syzkaller0: entered promiscuous mode [ 272.584945][T10262] syzkaller0: entered allmulticast mode [ 272.636011][T10266] ehci-pci 0000:00:1d.7: USB bus 1 deregistered [ 272.912808][ T43] kauditd_printk_skb: 43 callbacks suppressed [ 272.912820][ T43] audit: type=1800 audit(1785736383.504:3168): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 273.055816][ T43] audit: type=1800 audit(1785736383.644:3169): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 273.129961][ T9277] usb 2-1: new full-speed USB device number 18 using uhci_hcd [ 273.139332][ T43] audit: type=1804 audit(1785736383.724:3170): pid=10283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.875" name="/newroot/24/file1" dev="tmpfs" ino=145 res=1 errno=0 [ 273.214489][ T43] audit: type=1800 audit(1785736383.804:3171): pid=10283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.875" name="unbind" dev="sysfs" ino=27652 res=0 errno=0 [ 273.267277][ T43] audit: type=1800 audit(1785736383.854:3172): pid=10284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.875" name="bind" dev="sysfs" ino=27653 res=0 errno=0 [ 273.433632][ T43] audit: type=1800 audit(1785736384.024:3173): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 273.566358][ T9277] usb 2-1: not running at top speed; connect to a high speed hub [ 273.586931][ T9277] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 273.591098][ T9277] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 273.594639][ T9277] usb 2-1: Product: QEMU USB Tablet [ 273.596766][ T9277] usb 2-1: Manufacturer: QEMU [ 273.598924][ T9277] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 273.606584][ T43] audit: type=1800 audit(1785736384.194:3174): pid=10254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=245870 res=0 errno=0 [ 273.613784][ T43] audit: type=1800 audit(1785736384.194:3175): pid=10254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=245902 res=0 errno=0 [ 273.620313][ T43] audit: type=1800 audit(1785736384.194:3176): pid=10254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=245877 res=0 errno=0 [ 273.626370][ T43] audit: type=1800 audit(1785736384.194:3177): pid=10254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=245878 res=0 errno=0 [ 273.628492][ T9277] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1:1.0/0003:0627:0001.0025/input/input54 [ 273.719327][ T9277] hid-generic 0003:0627:0001.0025: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 273.731957][T10269] usb 2-1: USB disconnect, device number 18 [ 273.770316][T10279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.850903][T10291] fido_id[10291]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb2/report_descriptor': No such file or directory [ 273.885429][T10294] FAULT_INJECTION: forcing a failure. [ 273.885429][T10294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.890858][T10294] CPU: 0 UID: 0 PID: 10294 Comm: syz.9.877 Tainted: G L syzkaller #0 PREEMPT(full) [ 273.890884][T10294] Tainted: [L]=SOFTLOCKUP [ 273.890890][T10294] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 273.890900][T10294] Call Trace: [ 273.890906][T10294] [ 273.890914][T10294] dump_stack_lvl+0x100/0x190 [ 273.890941][T10294] should_fail_ex.cold+0x5/0xa [ 273.890965][T10294] _copy_to_user+0x32/0xd0 [ 273.890997][T10294] simple_read_from_buffer+0xcb/0x170 [ 273.891030][T10294] proc_fail_nth_read+0x1af/0x230 [ 273.891057][T10294] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 273.891083][T10294] ? rw_verify_area+0xce/0x6d0 [ 273.891109][T10294] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 273.891134][T10294] vfs_read+0x1e4/0xb40 [ 273.891155][T10294] ? __pfx_vfs_read+0x10/0x10 [ 273.891170][T10294] ? find_held_lock+0x2b/0x80 [ 273.891194][T10294] ? __fget_files+0x215/0x3d0 [ 273.891216][T10294] ? __fget_files+0x21f/0x3d0 [ 273.891241][T10294] ksys_read+0x12a/0x250 [ 273.891258][T10294] ? __pfx_ksys_read+0x10/0x10 [ 273.891283][T10294] do_int80_emulation+0x14b/0x720 [ 273.891313][T10294] asm_int80_emulation+0x1a/0x20 [ 273.891332][T10294] RIP: 0023:0xf71873eb [ 273.891348][T10294] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 273.891365][T10294] RSP: 002b:00000000f54464bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 273.891384][T10294] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54465d0 [ 273.891396][T10294] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 273.891405][T10294] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 273.891416][T10294] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 273.891426][T10294] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 273.891456][T10294] [ 273.894447][T10269] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 273.975796][T10269] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1 [ 273.982195][T10269] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 273.999869][T10269] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 274.005518][T10269] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 274.009376][T10269] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 274.012860][T10269] usb usb1: Product: EHCI Host Controller [ 274.015251][T10269] usb usb1: Manufacturer: Linux syzkaller ehci_hcd [ 274.018147][T10269] usb usb1: SerialNumber: 0000:00:1d.7 [ 274.031175][T10269] hub 1-0:1.0: USB hub found [ 274.033723][T10269] hub 1-0:1.0: 6 ports detected [ 274.082070][T10269] hub 2-0:1.0: USB hub found [ 274.084521][T10269] hub 2-0:1.0: 2 ports detected [ 274.124450][T10269] hub 3-0:1.0: USB hub found [ 274.127036][T10269] hub 3-0:1.0: 2 ports detected [ 274.163414][T10269] hub 4-0:1.0: USB hub found [ 274.165888][T10269] hub 4-0:1.0: 2 ports detected [ 274.174335][T10283] ehci-pci 0000:00:1d.7: remove, state 1 [ 274.176780][T10283] usb usb1: USB disconnect, device number 1 [ 274.199553][T10283] ehci-pci 0000:00:1d.7: USB bus 1 deregistered [ 274.201923][ T5895] usb 14-1: new high-speed USB device number 5 using dummy_hcd [ 274.371009][ T5895] usb 14-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 274.374136][ T5895] usb 14-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 274.377178][ T5895] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.381864][T10296] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 274.385189][ T5895] opticon 14-1:1.0: opticon converter detected [ 274.388856][ T5895] usb 14-1: opticon converter now attached to ttyUSB0 [ 274.519933][ T5612] usb 2-1: new full-speed USB device number 19 using uhci_hcd [ 274.572323][T10308] hfs: can't find a HFS filesystem on dev sr0 [ 274.643879][T10308] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 274.702568][ T5612] usb 2-1: not running at top speed; connect to a high speed hub [ 274.764128][ T5612] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 274.767891][ T5612] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 274.771361][ T5612] usb 2-1: Product: QEMU USB Tablet [ 274.773471][ T5612] usb 2-1: Manufacturer: QEMU [ 274.775433][ T5612] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 274.811356][ T5612] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1:1.0/0003:0627:0001.0026/input/input55 [ 274.902367][ T5612] hid-generic 0003:0627:0001.0026: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 274.929045][T10312] hfs: can't find a HFS filesystem on dev sr0 [ 274.979821][T10284] usb 2-1: USB disconnect, device number 19 [ 275.020580][T10312] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 275.057575][ T5829] usb 14-1: USB disconnect, device number 5 [ 275.076342][T10313] fido_id[10313]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb2/2-1/report_descriptor': No such file or directory [ 275.087240][ T5829] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 275.102239][ T5829] opticon 14-1:1.0: device disconnected [ 275.411475][T10284] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 275.467297][T10284] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1 [ 275.485445][T10284] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 275.500180][T10284] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 275.512075][T10284] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 275.518748][T10284] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 275.522693][T10284] usb usb1: Product: EHCI Host Controller [ 275.525309][T10284] usb usb1: Manufacturer: Linux syzkaller ehci_hcd [ 275.527768][T10284] usb usb1: SerialNumber: 0000:00:1d.7 [ 275.565814][T10284] hub 1-0:1.0: USB hub found [ 275.569115][T10284] hub 1-0:1.0: 6 ports detected [ 275.767831][T10284] hub 2-0:1.0: USB hub found [ 275.769745][T10284] hub 2-0:1.0: 2 ports detected [ 275.806137][T10284] hub 3-0:1.0: USB hub found [ 275.809117][T10284] hub 3-0:1.0: 2 ports detected [ 275.841781][T10284] hub 4-0:1.0: USB hub found [ 275.845293][T10284] hub 4-0:1.0: 2 ports detected [ 275.930791][T10322] ehci-pci 0000:00:1d.7: remove, state 1 [ 275.933225][T10322] usb usb1: USB disconnect, device number 1 [ 275.970074][ T5895] usb 1-1: new high-speed USB device number 2 using ehci-pci [ 275.988076][ T5895] usb usb1-port1: attempt power cycle [ 276.105021][T10322] ehci-pci 0000:00:1d.7: USB bus 1 deregistered [ 276.210003][T10336] hfs: can't find a HFS filesystem on dev sr0 [ 276.302499][T10336] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 276.469785][ T9277] usb 2-1: new full-speed USB device number 20 using uhci_hcd [ 276.630288][ T9277] usb 2-1: not running at top speed; connect to a high speed hub [ 276.660657][ T9277] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 276.695442][ T9277] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 276.707289][ T9277] usb 2-1: Product: QEMU USB Tablet [ 276.709595][ T9277] usb 2-1: Manufacturer: QEMU [ 276.717447][ T9277] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 277.037815][ T9277] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1:1.0/0003:0627:0001.0027/input/input56 [ 277.165584][ T9277] hid-generic 0003:0627:0001.0027: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 277.212554][T10324] usb 2-1: USB disconnect, device number 20 [ 277.291445][T10355] fido_id[10355]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb2/2-1/report_descriptor': No such file or directory [ 278.192317][ T43] kauditd_printk_skb: 104 callbacks suppressed [ 278.192337][ T43] audit: type=1800 audit(1785736388.784:3282): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 278.237034][T10324] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 278.242342][ T43] audit: type=1800 audit(1785736388.834:3283): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 278.254063][ T43] audit: type=1800 audit(1785736388.844:3284): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=247435 res=0 errno=0 [ 278.254896][T10324] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1 [ 278.266899][T10324] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 278.289979][T10324] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 278.294590][T10324] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 278.298334][T10324] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 278.301821][T10324] usb usb1: Product: EHCI Host Controller [ 278.304227][T10324] usb usb1: Manufacturer: Linux syzkaller ehci_hcd [ 278.306873][T10324] usb usb1: SerialNumber: 0000:00:1d.7 [ 278.321559][T10324] hub 1-0:1.0: USB hub found [ 278.321762][ T43] audit: type=1800 audit(1785736388.884:3285): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 278.323994][T10324] hub 1-0:1.0: 6 ports detected [ 278.371785][T10324] hub 2-0:1.0: USB hub found [ 278.377960][T10324] hub 2-0:1.0: 2 ports detected [ 278.422584][T10324] hub 3-0:1.0: USB hub found [ 278.438297][T10324] hub 3-0:1.0: 2 ports detected [ 278.460432][T10376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.900'. [ 278.561425][T10324] hub 4-0:1.0: USB hub found [ 278.574638][T10324] hub 4-0:1.0: 2 ports detected [ 278.632963][ T9442] usb 1-1: new high-speed USB device number 2 using ehci-pci [ 278.908616][ T9442] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 278.936720][ T9442] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 279.004816][ T9442] usb 1-1: Product: QEMU USB Tablet [ 279.015717][ T9442] usb 1-1: Manufacturer: QEMU [ 279.036389][ T9442] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 279.049876][ T43] audit: type=1800 audit(1785736388.904:3286): pid=10290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=247450 res=0 errno=0 [ 279.320888][ T43] audit: type=1800 audit(1785736388.904:3287): pid=10290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=247482 res=0 errno=0 [ 279.329349][ T43] audit: type=1800 audit(1785736388.904:3288): pid=10290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=247457 res=0 errno=0 [ 279.337585][ T43] audit: type=1800 audit(1785736388.904:3289): pid=10290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=247458 res=0 errno=0 [ 279.344390][ T9442] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0028/input/input57 [ 279.345740][ T43] audit: type=1800 audit(1785736388.934:3290): pid=10290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=247479 res=0 errno=0 [ 279.345785][ T43] audit: type=1800 audit(1785736388.934:3291): pid=10290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=247480 res=0 errno=0 [ 279.547262][T10380] syzkaller0: entered promiscuous mode [ 279.555511][T10380] syzkaller0: entered allmulticast mode [ 279.571779][T10383] hfs: can't find a HFS filesystem on dev sr0 [ 279.576000][T10380] syz.9.901 (10380): /proc/10379/oom_adj is deprecated, please use /proc/10379/oom_score_adj instead. [ 279.682742][T10383] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 279.881690][ T9442] hid-generic 0003:0627:0001.0028: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 279.962680][T10388] lo speed is unknown, defaulting to 1000 [ 280.057049][T10390] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 280.059294][T10390] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 280.065643][T10390] vhci_hcd vhci_hcd.0: Device attached [ 280.350695][ T5829] usb 38-1: SetAddress Request (10) to port 0 [ 280.355843][ T5829] usb 38-1: new SuperSpeed USB device number 10 using vhci_hcd [ 281.272979][T10391] vhci_hcd: connection reset by peer [ 281.372414][ T12] vhci_hcd vhci_hcd.0: stop threads [ 281.394867][ T12] vhci_hcd vhci_hcd.0: release socket [ 281.417061][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 282.094751][T10414] loop8: detected capacity change from 0 to 7 [ 282.101576][ C3] blk_print_req_error: 10 callbacks suppressed [ 282.101594][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 282.108125][ C3] buffer_io_error: 10 callbacks suppressed [ 282.108163][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 282.114433][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 282.117955][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 282.120906][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 282.124807][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 282.128097][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 282.131999][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 282.138663][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 282.142591][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 282.146091][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 282.150140][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 282.160478][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 282.164440][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 282.167654][T10414] ldm_validate_partition_table(): Disk read failed. [ 282.171065][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 282.175149][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 282.178847][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 282.182868][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 282.186904][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 282.190830][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 282.194669][T10414] Dev loop8: unable to read RDB block 0 [ 282.198879][T10414] loop8: unable to read partition table [ 282.202018][T10414] loop8: partition table beyond EOD, truncated [ 282.206999][T10414] loop_reread_partitions: partition scan of loop8 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 282.871108][T10426] 9pnet_virtio: no channels available for device syz [ 282.921507][T10432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.916'. [ 283.112466][T10439] overlayfs: failed to resolve './file0': -2 [ 283.557257][ T43] kauditd_printk_skb: 50 callbacks suppressed [ 283.557431][ T43] audit: type=1800 audit(1785736393.148:3342): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 283.655019][ T43] audit: type=1800 audit(1785736393.248:3343): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 283.676152][ T43] audit: type=1800 audit(1785736393.248:3344): pid=10436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.913" name="/" dev="fuse" ino=1 res=0 errno=0 [ 283.961632][ T43] audit: type=1800 audit(1785736393.558:3345): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 283.985199][T10437] ALSA: mixer_oss: invalid OSS volume 'P' [ 284.169949][ T43] audit: type=1800 audit(1785736393.768:3346): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 284.231905][ T5755] Bluetooth: hci1: command tx timeout [ 284.323221][ T7140] usb 14-1: new high-speed USB device number 6 using dummy_hcd [ 284.455871][ T43] audit: type=1800 audit(1785736394.048:3347): pid=10457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.923" name="attach" dev="sysfs" ino=36642 res=0 errno=0 [ 284.474127][T10457] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 284.476865][T10457] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 284.480406][ T7140] usb 14-1: device descriptor read/64, error -71 [ 284.492624][T10457] vhci_hcd vhci_hcd.0: Device attached [ 284.698938][ T43] audit: type=1800 audit(1785736394.288:3348): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 284.730418][ T7140] usb 14-1: new high-speed USB device number 7 using dummy_hcd [ 284.753650][ T43] audit: type=1800 audit(1785736394.348:3349): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 284.859849][ T7140] usb 14-1: device descriptor read/64, error -71 [ 284.931690][ T43] audit: type=1800 audit(1785736394.528:3350): pid=10470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.924" name="attach" dev="sysfs" ino=36642 res=0 errno=0 [ 284.941488][T10470] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 284.943666][T10470] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 284.947912][T10470] vhci_hcd vhci_hcd.0: Device attached [ 284.965568][ T43] audit: type=1800 audit(1785736394.548:3351): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=255190 res=0 errno=0 [ 284.976330][ T7140] usb usb14-port1: attempt power cycle [ 285.024270][T10458] vhci_hcd: connection closed [ 285.026377][ T5836] vhci_hcd vhci_hcd.0: stop threads [ 285.029541][ T5836] vhci_hcd vhci_hcd.0: release socket [ 285.032754][ T5836] vhci_hcd vhci_hcd.0: disconnect device [ 285.229944][ T9442] usb 40-1: SetAddress Request (2) to port 0 [ 285.232913][ T9442] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 285.319824][ T7140] usb 14-1: new high-speed USB device number 8 using dummy_hcd [ 285.341289][ T7140] usb 14-1: device descriptor read/8, error -71 [ 285.419867][ T5829] usb 38-1: device descriptor read/8, error -110 [ 285.524013][T10471] vhci_hcd: connection reset by peer [ 285.533236][ T5836] vhci_hcd vhci_hcd.1: stop threads [ 285.535340][ T5836] vhci_hcd vhci_hcd.1: release socket [ 285.537699][ T5836] vhci_hcd vhci_hcd.1: disconnect device [ 285.579887][ T7140] usb 14-1: new high-speed USB device number 9 using dummy_hcd [ 285.602389][ T7140] usb 14-1: device descriptor read/8, error -71 [ 285.710065][ T7140] usb usb14-port1: unable to enumerate USB device [ 285.830311][ T5829] usb usb38-port1: attempt power cycle [ 286.210758][T10479] loop8: detected capacity change from 0 to 7 [ 286.216806][T10479] ldm_validate_partition_table(): Disk read failed. [ 286.220395][T10479] Dev loop8: unable to read RDB block 0 [ 286.222890][T10479] loop8: unable to read partition table [ 286.224790][T10479] loop8: partition table beyond EOD, truncated [ 286.226757][T10479] loop_reread_partitions: partition scan of loop8 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 286.401331][ T5829] usb usb38-port1: unable to enumerate USB device [ 286.663857][T10490] netlink: 20 bytes leftover after parsing attributes in process `syz.0.933'. [ 286.733580][T10493] FAULT_INJECTION: forcing a failure. [ 286.733580][T10493] name failslab, interval 1, probability 0, space 0, times 0 [ 286.742014][T10493] CPU: 0 UID: 0 PID: 10493 Comm: syz.0.934 Tainted: G L syzkaller #0 PREEMPT(full) [ 286.742044][T10493] Tainted: [L]=SOFTLOCKUP [ 286.742051][T10493] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 286.742062][T10493] Call Trace: [ 286.742069][T10493] [ 286.742076][T10493] dump_stack_lvl+0x100/0x190 [ 286.742105][T10493] should_fail_ex.cold+0x5/0xa [ 286.742128][T10493] should_failslab+0xc2/0x120 [ 286.742154][T10493] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 286.742179][T10493] ? __alloc_skb+0x140/0x710 [ 286.742209][T10493] __alloc_skb+0x140/0x710 [ 286.742231][T10493] ? __alloc_skb+0x5b7/0x710 [ 286.742254][T10493] ? __pfx___alloc_skb+0x10/0x10 [ 286.742285][T10493] _sctp_make_chunk+0x51/0x270 [ 286.742313][T10493] sctp_make_control+0x2f/0x2d0 [ 286.742337][T10493] sctp_make_init+0x6d0/0xda0 [ 286.742368][T10493] ? __pfx_sctp_make_init+0x10/0x10 [ 286.742402][T10493] ? sctp_sm_lookup_event+0x10e/0x520 [ 286.742427][T10493] ? __pfx_sctp_sm_lookup_event+0x10/0x10 [ 286.742450][T10493] ? stack_depot_save_flags+0x27/0x9d0 [ 286.742484][T10493] sctp_sf_do_prm_asoc+0xbf/0x360 [ 286.742506][T10493] ? __pfx_sctp_pname+0x10/0x10 [ 286.742530][T10493] sctp_do_sm+0x17a/0x5be0 [ 286.742553][T10493] ? sctp_sendmsg+0x1144/0x22e0 [ 286.742572][T10493] ? inet_sendmsg+0x11c/0x140 [ 286.742600][T10493] ? do_fast_syscall_32+0x32/0x70 [ 286.742624][T10493] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 286.742651][T10493] ? __pfx_sctp_do_sm+0x10/0x10 [ 286.742703][T10493] ? __sk_mem_raise_allocated+0x789/0x1570 [ 286.742737][T10493] sctp_primitive_ASSOCIATE+0x9c/0xd0 [ 286.742764][T10493] sctp_sendmsg_to_asoc+0xa6a/0x1c50 [ 286.742792][T10493] ? __asan_memset+0x50/0x50 [ 286.742812][T10493] ? sctp_assoc_set_primary+0x276/0x310 [ 286.742831][T10493] ? sctp_assoc_add_peer+0x256/0x1550 [ 286.742861][T10493] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 286.742889][T10493] ? sctp_connect_new_asoc+0x41e/0x770 [ 286.742912][T10493] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 286.742932][T10493] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 286.742949][T10493] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 286.742972][T10493] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 286.743002][T10493] sctp_sendmsg+0x1144/0x22e0 [ 286.743026][T10493] ? __pfx___might_resched+0x10/0x10 [ 286.743055][T10493] ? __pfx_sctp_sendmsg+0x10/0x10 [ 286.743078][T10493] ? aa_sk_perm+0x309/0xaa0 [ 286.743111][T10493] ? __might_fault+0xc5/0x140 [ 286.743135][T10493] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 286.743157][T10493] ? __pfx_sctp_sendmsg+0x10/0x10 [ 286.743179][T10493] inet_sendmsg+0x11c/0x140 [ 286.743205][T10493] __sys_sendto+0x453/0x4e0 [ 286.743229][T10493] ? __pfx_inet_sendmsg+0x10/0x10 [ 286.743255][T10493] ? __pfx___sys_sendto+0x10/0x10 [ 286.743297][T10493] ? fput+0x79/0x100 [ 286.743320][T10493] ? ksys_write+0x1ac/0x250 [ 286.743340][T10493] __ia32_sys_sendto+0xdd/0x1b0 [ 286.743363][T10493] ? __do_fast_syscall_32+0x98/0x970 [ 286.743387][T10493] ? lockdep_hardirqs_on+0x78/0x100 [ 286.743411][T10493] __do_fast_syscall_32+0xe7/0x970 [ 286.743435][T10493] ? lockdep_hardirqs_on+0x78/0x100 [ 286.743460][T10493] do_fast_syscall_32+0x32/0x70 [ 286.743485][T10493] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 286.743507][T10493] RIP: 0023:0xf704efec [ 286.743531][T10493] Code: Unable to access opcode bytes at 0xf704efc2. [ 286.743539][T10493] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 286.743557][T10493] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 286.743569][T10493] RDX: 0000000000000001 RSI: 000000000400c0d4 RDI: 0000000080000140 [ 286.743580][T10493] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 286.743590][T10493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.743600][T10493] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 286.743624][T10493] [ 287.100920][T10499] netlink: 28 bytes leftover after parsing attributes in process `syz.9.937'. [ 287.208846][ T112] Bluetooth: hci0: Frame reassembly failed (-84) [ 287.212365][ T112] Bluetooth: hci0: Frame reassembly failed (-84) [ 287.598120][T10504] ehci-pci 0000:00:1d.7: remove, state 1 [ 287.600388][T10504] usb usb1: USB disconnect, device number 1 [ 287.602520][T10504] usb 1-1: USB disconnect, device number 2 [ 287.782624][T10504] ehci-pci 0000:00:1d.7: USB bus 1 deregistered [ 288.299796][ T5756] Bluetooth: hci4: command tx timeout [ 288.997643][T10515] netlink: 'syz.3.942': attribute type 178 has an invalid length. [ 289.039259][T10517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.943'. [ 289.077490][T10519] netlink: 'syz.3.944': attribute type 1 has an invalid length. [ 289.198956][ T43] kauditd_printk_skb: 19 callbacks suppressed [ 289.198977][ T43] audit: type=1800 audit(1785736398.788:3371): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 289.259866][ T5756] Bluetooth: hci0: command 0x1003 tx timeout [ 289.259883][ T5755] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 289.282355][ T43] audit: type=1800 audit(1785736398.878:3372): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 289.334887][T10519] 8021q: adding VLAN 0 to HW filter on device bond1 [ 289.361043][T10522] bond1: (slave veth0_to_bond): making interface the new active one [ 289.368311][T10522] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 289.405287][T10524] macvlan2: entered promiscuous mode [ 289.408974][T10524] macvlan2: entered allmulticast mode [ 289.412931][T10524] bond1: entered promiscuous mode [ 289.414833][T10524] veth0_to_bond: entered promiscuous mode [ 289.417642][T10524] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 289.426844][T10524] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 289.433698][T10524] bond1: left promiscuous mode [ 289.435838][T10524] veth0_to_bond: left promiscuous mode [ 289.539375][ T43] audit: type=1800 audit(1785736399.128:3373): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 289.702777][ T5844] hid_parser_main: 22 callbacks suppressed [ 289.702799][ T5844] hid-generic 0004:FFFFFFFF:0000.0029: unknown main item tag 0x0 [ 289.709613][ T43] audit: type=1800 audit(1785736399.298:3374): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=255893 res=0 errno=0 [ 289.709768][ T5829] usb 2-1: new full-speed USB device number 21 using uhci_hcd [ 289.720279][ T5844] hid-generic 0004:FFFFFFFF:0000.0029: unknown main item tag 0x0 [ 289.723160][ T5844] hid-generic 0004:FFFFFFFF:0000.0029: unknown main item tag 0x0 [ 289.725787][ T5844] hid-generic 0004:FFFFFFFF:0000.0029: unknown main item tag 0x0 [ 289.733668][ T5844] hid-generic 0004:FFFFFFFF:0000.0029: unknown main item tag 0x0 [ 289.736441][ T5844] hid-generic 0004:FFFFFFFF:0000.0029: unknown main item tag 0x0 [ 289.740145][ T5844] hid-generic 0004:FFFFFFFF:0000.0029: unknown main item tag 0x0 [ 289.743363][ T5844] hid-generic 0004:FFFFFFFF:0000.0029: unknown main item tag 0x0 [ 289.745967][ T5844] hid-generic 0004:FFFFFFFF:0000.0029: unknown main item tag 0x0 [ 289.748807][ T5844] hid-generic 0004:FFFFFFFF:0000.0029: unknown main item tag 0x0 [ 289.758784][ T43] audit: type=1800 audit(1785736399.348:3375): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=255916 res=0 errno=0 [ 289.769941][ T5844] hid-generic 0004:FFFFFFFF:0000.0029: hidraw0: HID v0.00 Device [syz0] on syz0 [ 289.801112][T10529] fido_id[10529]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 289.820655][ T43] audit: type=1800 audit(1785736399.418:3376): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 289.857924][ T43] audit: type=1800 audit(1785736399.448:3377): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 289.878084][ T5829] usb 2-1: not running at top speed; connect to a high speed hub [ 289.887012][ T43] audit: type=1800 audit(1785736399.478:3378): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 289.896244][ T43] audit: type=1800 audit(1785736399.488:3379): pid=10533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.947" name="pm_freeze_timeout" dev="sysfs" ino=587 res=0 errno=0 [ 289.896428][T10533] loop8: detected capacity change from 0 to 7 [ 289.902932][ T5829] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 289.902968][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 289.902989][ T5829] usb 2-1: Product: QEMU USB Tablet [ 289.903015][ T5829] usb 2-1: Manufacturer: QEMU [ 289.903033][ T5829] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 289.908928][ T43] audit: type=1800 audit(1785736399.498:3380): pid=10290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=255937 res=0 errno=0 [ 289.912430][ C2] blk_print_req_error: 30 callbacks suppressed [ 289.912446][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 289.926330][ T5829] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1:1.0/0003:0627:0001.002A/input/input58 [ 289.928982][ C2] buffer_io_error: 30 callbacks suppressed [ 289.928998][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 289.943789][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 289.947326][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 289.952746][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 289.956418][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 289.959475][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 289.963263][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 289.967890][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 289.970949][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 289.973624][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 289.976778][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 289.979591][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 289.982655][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 289.991600][T10533] ldm_validate_partition_table(): Disk read failed. [ 289.993949][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 289.997408][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 289.999605][ T5829] hid-generic 0003:0627:0001.002A: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 290.004072][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 290.007135][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 290.009985][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 290.014066][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 290.017708][T10533] Dev loop8: unable to read RDB block 0 [ 290.020780][T10533] loop8: unable to read partition table [ 290.023485][T10533] loop8: partition table beyond EOD, truncated [ 290.023940][T10505] usb 2-1: USB disconnect, device number 21 [ 290.026150][T10533] loop_reread_partitions: partition scan of loop8 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 290.153961][T10546] fido_id[10546]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb2/report_descriptor': No such file or directory [ 290.201966][T10505] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 290.206190][T10505] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1 [ 290.212384][T10505] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 290.229836][T10505] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 290.240560][T10505] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 290.244798][T10505] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 290.248306][T10505] usb usb1: Product: EHCI Host Controller [ 290.251014][T10505] usb usb1: Manufacturer: Linux syzkaller ehci_hcd [ 290.253178][T10505] usb usb1: SerialNumber: 0000:00:1d.7 [ 290.264695][T10505] hub 1-0:1.0: USB hub found [ 290.267842][T10505] hub 1-0:1.0: 6 ports detected [ 290.301155][ T9442] usb 40-1: device descriptor read/8, error -110 [ 290.319017][T10549] netlink: 4 bytes leftover after parsing attributes in process `syz.9.952'. [ 290.335977][T10505] hub 2-0:1.0: USB hub found [ 290.350829][T10505] hub 2-0:1.0: 2 ports detected [ 290.401276][T10505] hub 3-0:1.0: USB hub found [ 290.404643][T10505] hub 3-0:1.0: 2 ports detected [ 290.443102][T10505] hub 4-0:1.0: USB hub found [ 290.445433][T10505] hub 4-0:1.0: 2 ports detected [ 290.579774][ T7140] usb 1-1: new high-speed USB device number 2 using ehci-pci [ 290.635700][ T5755] Bluetooth: hci2: link tx timeout [ 290.646658][ T5755] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 290.729771][ T9442] usb usb40-port1: attempt power cycle [ 290.830602][ T7140] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 290.847909][ T7140] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 290.854497][ T7140] usb 1-1: Product: QEMU USB Tablet [ 290.860160][ T7140] usb 1-1: Manufacturer: QEMU [ 290.867016][ T7140] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 290.900784][ T7140] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.002B/input/input59 [ 290.999467][ T9277] hid-generic 0004:FFFFFFFF:0000.002C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 291.004993][ T7140] hid-generic 0003:0627:0001.002B: input,hidraw1: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 291.085551][T10567] fido_id[10567]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 291.226497][T10571] loop8: detected capacity change from 0 to 7 [ 291.236984][T10571] ldm_validate_partition_table(): Disk read failed. [ 291.241737][T10571] Dev loop8: unable to read RDB block 0 [ 291.245034][T10571] loop8: unable to read partition table [ 291.247728][T10571] loop8: partition table beyond EOD, truncated [ 291.250867][T10571] loop_reread_partitions: partition scan of loop8 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 291.297823][T10575] netlink: 'syz.1.959': attribute type 29 has an invalid length. [ 291.313585][ T9442] usb usb40-port1: unable to enumerate USB device [ 291.403114][T10584] uhci_hcd 0000:00:1d.0: remove, state 4 [ 291.416283][T10584] usb usb2: USB disconnect, device number 1 [ 291.439261][T10585] Mass Storage Function, version: 2009/09/11 [ 291.443913][T10585] LUN: removable file: (no medium) [ 291.448613][T10585] binder: 10581:10585 ioctl c0306201 800001c0 returned -14 [ 291.465446][T10585] [ 291.466422][T10585] ====================================================== [ 291.469029][T10585] WARNING: possible circular locking dependency detected [ 291.471570][T10585] syzkaller #0 Tainted: G L [ 291.473889][T10585] ------------------------------------------------------ [ 291.476454][T10585] syz.9.962/10585 is trying to acquire lock: [ 291.478634][T10585] ffff8880268d6450 (sb_writers#5){.+.+}-{0:0}, at: path_openat+0xad9/0x4280 [ 291.481819][T10585] [ 291.481819][T10585] but task is already holding lock: [ 291.484473][T10585] ffff88806ab5a920 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x193/0x450 [ 291.487711][T10585] [ 291.487711][T10585] which lock already depends on the new lock. [ 291.487711][T10585] [ 291.490932][T10585] [ 291.490932][T10585] the existing dependency chain (in reverse order) is: [ 291.494063][T10585] [ 291.494063][T10585] -> #3 (&common->filesem){++++}-{4:4}: [ 291.496575][T10585] lock_acquire+0x1b9/0x370 [ 291.498208][T10585] down_read+0x99/0x4c0 [ 291.499701][T10585] fsg_show_file+0x20/0x180 [ 291.501297][T10585] configfs_read_iter+0x426/0x6f0 [ 291.503088][T10585] __kernel_read+0x397/0xad0 [ 291.504711][T10585] integrity_kernel_read+0x7e/0xb0 [ 291.506511][T10585] ima_calc_file_hash_tfm+0x25e/0x350 [ 291.508417][T10585] ima_calc_file_hash+0x167/0x380 [ 291.510146][T10585] ima_collect_measurement+0x94f/0xb30 [ 291.512048][T10585] process_measurement+0xdfe/0x2350 [ 291.513866][T10585] ima_file_check+0xcc/0x120 [ 291.515472][T10585] security_file_post_open+0xc4/0x210 [ 291.517390][T10585] path_openat+0x985/0x4280 [ 291.519027][T10585] do_file_open+0x20e/0x430 [ 291.520621][T10585] do_sys_openat2+0x10f/0x1e0 [ 291.522280][T10585] __ia32_compat_sys_openat+0x12d/0x210 [ 291.524226][T10585] __do_fast_syscall_32+0xe7/0x970 [ 291.525978][T10585] do_fast_syscall_32+0x32/0x70 [ 291.527712][T10585] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 291.530337][T10585] [ 291.530337][T10585] -> #2 (&p->frag_sem){.+.+}-{4:4}: [ 291.533199][T10585] lock_acquire+0x1b9/0x370 [ 291.535082][T10585] down_read+0x99/0x4c0 [ 291.536742][T10585] __configfs_open_file+0xe8/0x9c0 [ 291.538586][T10585] do_dentry_open+0x6ab/0x14d0 [ 291.540265][T10585] vfs_open+0x82/0x3f0 [ 291.541762][T10585] dentry_open+0x71/0xd0 [ 291.543304][T10585] ima_calc_file_hash+0xe1/0x380 [ 291.544307][T10584] uhci_hcd 0000:00:1d.0: USB bus 2 deregistered [ 291.545039][T10585] ima_collect_measurement+0x94f/0xb30 [ 291.545058][T10585] process_measurement+0xdfe/0x2350 [ 291.545072][T10585] ima_file_check+0xcc/0x120 [ 291.545085][T10585] security_file_post_open+0xc4/0x210 [ 291.555885][T10585] path_openat+0x985/0x4280 [ 291.557565][T10585] do_file_open+0x20e/0x430 [ 291.559171][T10585] do_sys_openat2+0x10f/0x1e0 [ 291.560830][T10585] __ia32_compat_sys_openat+0x12d/0x210 [ 291.562845][T10585] __do_fast_syscall_32+0xe7/0x970 [ 291.564971][T10585] do_fast_syscall_32+0x32/0x70 [ 291.566831][T10585] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 291.569069][T10585] [ 291.569069][T10585] -> #1 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 291.571747][T10585] lock_acquire+0x1b9/0x370 [ 291.573388][T10585] __mutex_lock+0x1a4/0x1bd0 [ 291.574995][T10585] process_measurement+0x5ab/0x2350 [ 291.576788][T10585] ima_file_check+0xcc/0x120 [ 291.578619][T10585] security_file_post_open+0xc4/0x210 [ 291.580491][T10585] path_openat+0x985/0x4280 [ 291.582095][T10585] do_file_open+0x20e/0x430 [ 291.583716][T10585] do_sys_openat2+0x10f/0x1e0 [ 291.585369][T10585] __x64_sys_openat+0x12d/0x210 [ 291.587138][T10585] do_syscall_64+0x115/0x840 [ 291.588846][T10585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.590858][T10585] [ 291.590858][T10585] -> #0 (sb_writers#5){.+.+}-{0:0}: [ 291.593280][T10585] check_prev_add+0xeb/0xe60 [ 291.594899][T10585] __lock_acquire+0x136c/0x1a40 [ 291.596601][T10585] lock_acquire+0x1b9/0x370 [ 291.598259][T10585] mnt_want_write+0x6f/0x410 [ 291.599868][T10585] path_openat+0xad9/0x4280 [ 291.601461][T10585] do_file_open+0x20e/0x430 [ 291.603110][T10585] file_open_name+0x1c3/0x3e0 [ 291.604904][T10585] filp_open+0x2e/0x50 [ 291.606370][T10585] fsg_lun_open+0x6b/0x7b0 [ 291.607957][T10585] fsg_store_file+0x1e7/0x450 [ 291.609651][T10585] configfs_write_iter+0x302/0x4e0 [ 291.611411][T10585] vfs_write+0x6ac/0x1050 [ 291.613052][T10585] ksys_write+0x12a/0x250 [ 291.614593][T10585] __do_fast_syscall_32+0xe7/0x970 [ 291.616384][T10585] do_fast_syscall_32+0x32/0x70 [ 291.618145][T10585] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 291.620304][T10585] [ 291.620304][T10585] other info that might help us debug this: [ 291.620304][T10585] [ 291.623550][T10585] Chain exists of: [ 291.623550][T10585] sb_writers#5 --> &p->frag_sem --> &common->filesem [ 291.623550][T10585] [ 291.627640][T10585] Possible unsafe locking scenario: [ 291.627640][T10585] [ 291.630205][T10585] CPU0 CPU1 [ 291.632104][T10585] ---- ---- [ 291.633883][T10585] lock(&common->filesem); [ 291.635329][T10585] lock(&p->frag_sem); [ 291.637507][T10585] lock(&common->filesem); [ 291.640144][T10585] rlock(sb_writers#5); [ 291.641766][T10585] [ 291.641766][T10585] *** DEADLOCK *** [ 291.641766][T10585] [ 291.644576][T10585] 5 locks held by syz.9.962/10585: [ 291.646367][T10585] #0: ffff8880296070b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 291.649637][T10585] #1: ffff8880222c6450 (sb_writers#15){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 291.652476][T10585] #2: ffff88804a8df080 (&buffer->mutex){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 291.655541][T10585] #3: ffff888071174f70 (&p->frag_sem){.+.+}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 291.658570][T10585] #4: ffff88806ab5a920 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x193/0x450 [ 291.661530][T10585] [ 291.661530][T10585] stack backtrace: [ 291.663547][T10585] CPU: 0 UID: 0 PID: 10585 Comm: syz.9.962 Tainted: G L syzkaller #0 PREEMPT(full) [ 291.663577][T10585] Tainted: [L]=SOFTLOCKUP [ 291.663585][T10585] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 291.663597][T10585] Call Trace: [ 291.663606][T10585] [ 291.663615][T10585] dump_stack_lvl+0x100/0x190 [ 291.663642][T10585] print_circular_bug.cold+0x178/0x1c7 [ 291.663671][T10585] check_noncircular+0x146/0x160 [ 291.663697][T10585] ? __lock_acquire+0xd5b/0x1a40 [ 291.663729][T10585] check_prev_add+0xeb/0xe60 [ 291.663758][T10585] __lock_acquire+0x136c/0x1a40 [ 291.663788][T10585] ? try_to_unlazy+0x296/0x910 [ 291.663812][T10585] lock_acquire+0x1b9/0x370 [ 291.663839][T10585] ? path_openat+0xad9/0x4280 [ 291.663857][T10585] ? __pfx___might_resched+0x10/0x10 [ 291.663887][T10585] mnt_want_write+0x6f/0x410 [ 291.663913][T10585] ? path_openat+0xad9/0x4280 [ 291.663938][T10585] path_openat+0xad9/0x4280 [ 291.663961][T10585] ? __pfx_path_openat+0x10/0x10 [ 291.663979][T10585] ? kasan_save_stack+0x3f/0x50 [ 291.664002][T10585] ? kasan_save_stack+0x30/0x50 [ 291.664020][T10585] ? kasan_save_track+0x14/0x30 [ 291.664039][T10585] ? __kasan_slab_alloc+0x89/0x90 [ 291.664061][T10585] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 291.664082][T10585] ? do_getname_kernel+0x5d/0x250 [ 291.664130][T10585] ? filp_open+0x1d/0x50 [ 291.664154][T10585] ? fsg_lun_open+0x6b/0x7b0 [ 291.664178][T10585] do_file_open+0x20e/0x430 [ 291.664198][T10585] ? __pfx_do_file_open+0x10/0x10 [ 291.664226][T10585] ? rcu_is_watching+0x12/0xc0 [ 291.664249][T10585] file_open_name+0x1c3/0x3e0 [ 291.664273][T10585] ? __pfx_file_open_name+0x10/0x10 [ 291.664296][T10585] ? do_getname_kernel+0x5d/0x250 [ 291.664316][T10585] ? __asan_memcpy+0x3c/0x60 [ 291.664336][T10585] ? do_getname_kernel+0x1be/0x250 [ 291.664358][T10585] filp_open+0x2e/0x50 [ 291.664381][T10585] fsg_lun_open+0x6b/0x7b0 [ 291.664405][T10585] ? __pfx_down_read+0x10/0x10 [ 291.664434][T10585] fsg_store_file+0x1e7/0x450 [ 291.664460][T10585] configfs_write_iter+0x302/0x4e0 [ 291.664481][T10585] vfs_write+0x6ac/0x1050 [ 291.664498][T10585] ? __pfx_configfs_write_iter+0x10/0x10 [ 291.664517][T10585] ? __pfx_vfs_write+0x10/0x10 [ 291.664533][T10585] ? find_held_lock+0x2b/0x80 [ 291.664562][T10585] ksys_write+0x12a/0x250 [ 291.664579][T10585] ? __pfx_ksys_write+0x10/0x10 [ 291.664598][T10585] __do_fast_syscall_32+0xe7/0x970 [ 291.664643][T10585] do_fast_syscall_32+0x32/0x70 [ 291.664683][T10585] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 291.664719][T10585] RIP: 0023:0xf7f85fec [ 291.664764][T10585] Code: Unable to access opcode bytes at 0xf7f85fc2. [ 291.664771][T10585] RSP: 002b:00000000f542550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 291.664798][T10585] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000f00 [ 291.664820][T10585] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000000 [ 291.664854][T10585] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 291.664862][T10585] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 291.664869][T10585] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 291.664904][T10585] [ 291.771941][T10585] mass_storage.usb0/lun.0: unable to open backing file: file0 [ 291.804488][T10586] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 291.816938][T10586] pci 0000:00:1d.0: BAR 4 [io 0xc0e0-0xc0ff] [ 291.824322][T10586] pci 0000:00:1d.0: Adding to iommu group 7 [ 291.834323][T10586] pci 0000:00:1d.0: BAR 4 [io 0x2000-0x201f]: assigned [ 291.885040][T10586] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 45473 usecs [ 291.917854][T10586] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 291.921729][T10586] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 2 [ 291.930634][T10586] uhci_hcd 0000:00:1d.0: detected 2 ports [ 291.935331][T10586] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002000 [ 291.940269][T10586] usb usb2: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 291.943969][T10586] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 291.947176][T10586] usb usb2: Product: UHCI Host Controller [ 291.949507][T10586] usb usb2: Manufacturer: Linux syzkaller uhci_hcd [ 291.952387][T10586] usb usb2: SerialNumber: 0000:00:1d.0 [ 291.958193][T10586] hub 2-0:1.0: USB hub found [ 291.960486][T10586] hub 2-0:1.0: 2 ports detected [ 291.980407][ T5755] Bluetooth: hci3: command tx timeout [ 292.699729][ T5755] Bluetooth: hci2: command 0x0406 tx timeout [ 293.339733][ T5756] Bluetooth: hci1: command tx timeout