last executing test programs: 18m44.133773721s ago: executing program 32 (id=175): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0xffbfffff, &(0x7f0000000480)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x4, r1, 0x0, 0x0, 0x80000000}]) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0xffe3}}}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x40) io_getevents(0x0, 0x6, 0x0, &(0x7f0000000500), 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000380)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') r5 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$sock(r5, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x401, @loopback, 0x4}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=[@mark={{0x14, 0x1, 0x24, 0xa}}], 0x18}, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x40000, &(0x7f0000000200)={[{@xino_on}, {@redirect_dir_off}, {@redirect_dir_off}, {@default_permissions}, {@redirect_dir_off}, {@uuid_on}, {@uuid_auto}, {@index_on}], [{@dont_appraise}], 0x3a}) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000001a40)=""/102385, 0xfffffffffffffea8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000090000000000", @ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', r4, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x177) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x244040, 0x0) 18m20.123194303s ago: executing program 33 (id=206): r0 = socket$inet6(0x10, 0x3, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000180)=@dstopts={0x32, 0xc, '\x00', [@ra={0x5, 0x2, 0x1ff}, @pad1, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @jumbo={0xc2, 0x4, 0x9}, @hao={0xc9, 0x10, @loopback}, @ra={0x5, 0x2, 0x5}, @generic={0x2, 0x2a, "c9ad8267b1e14076bacd4ed1043662eaaa9e1b2f40e78446732e318aacfe3360b83260c45d1bb8fc57cf"}, @pad1]}, 0x70) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) r2 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r2, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001880)="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", 0x61a}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3964f", 0xe5}, {&(0x7f0000001640)="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", 0x218}, {&(0x7f0000000cc0)="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", 0x12d}], 0x4, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) (async, rerun: 32) socket(0x29, 0x3, 0x3a) (rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x10) sendto$inet6(r0, &(0x7f0000000000)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 16m42.154646349s ago: executing program 1 (id=563): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000280)=[{0x401, 0x9001, 0x0, 0x0}], 0x1}) r2 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xb0000) preadv2(r2, &(0x7f0000000780)=[{&(0x7f0000000540)=""/132, 0x84}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f0000000600)=""/220, 0xdc}], 0x3, 0xf, 0x2, 0x11) syz_emit_ethernet(0x0, 0x0, 0x0) setitimer(0x1, &(0x7f0000000180)={{}, {0x0, 0xea60}}, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, 0x0) timer_create(0x0, &(0x7f0000000480)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) ioperm(0x0, 0xf1, 0x7) preadv2(r4, &(0x7f0000000440)=[{&(0x7f0000000300)=""/33, 0x21}, {&(0x7f0000000700)=""/123, 0x7b}, {&(0x7f00000003c0)=""/121, 0x79}], 0x3, 0x80, 0x8000, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x403, 0x0) clock_gettime(0x0, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) futimesat(r5, &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)={{}, {r6, r7/1000+10000}}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) keyctl$instantiate(0xc, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e656c7420757365723a73797a203030307950dca32565fdde303030303430393600756e034ba9debeefc5e8aae0ccad825dd89f4a73751a803250dc0fb4587d9ba90ef1d1c40ca7b36bdbb6a75e4e3fff20c61e6230d698e454495c38bfe87fc4fb35fc2b0d17eb906b51d6d196a1d2a144de2b881854d5893a1271665cf27eb110c9e426ecc9527f9f58fa62dd4c699ed687e42503d3f380d6bad565ca1a495a099fa9df6888c5db2b5797224c941b8c13313da588f2a4974e8078b4f471d4ad3ff233486c4b976245b95e1fb7d3b2c6066c181f350ce377642e4b41"], 0x2a, 0xfffffffffffffff9) r8 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r9, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r9, 0xc0905664, &(0x7f0000000280)={0x0, 0x0, '\x00', @raw_data=[0x5, 0x10001, 0x8000, 0x7, 0x6, 0x13, 0x0, 0x0, 0x9, 0x9, 0x6, 0x400, 0x80000001, 0x6, 0xa, 0x10, 0xffff, 0x0, 0xf, 0x3ff, 0x400, 0x3, 0x3e, 0x1, 0x7, 0x4, 0x7, 0x3, 0x0, 0x6, 0x0, 0x3]}) keyctl$update(0x2, r8, 0x0, 0x0) timer_settime(r3, 0x1, &(0x7f0000000040), 0x0) setitimer(0x1, 0x0, 0x0) r10 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) write$FUSE_INIT(r10, &(0x7f00000001c0)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x2b, 0x2, 0x42, 0xf92, 0x40, 0xfffff800, 0x7, 0x0, 0x0, 0x1, 0x401}}, 0x50) 16m37.943079801s ago: executing program 1 (id=579): socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a37", @ANYRES32, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYRES16=r0, @ANYRES32=r0], 0x1f}}, 0x2000800) 16m36.689035261s ago: executing program 1 (id=583): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_delete(0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default trusted:syz -9223372036854779533'], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) socket$inet6(0x10, 0x3, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000080)='./cgroup/../file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x8}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x301, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff, 0x0, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2800000009000000000000000000000001"], 0x28) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000780)={0x98, 0x12, 0x800, 0x70bd28, 0x25dfdbfc, {0x2, 0x7, 0x6, 0x1, {0x4e20, 0x4e23, [0x9, 0x6, 0x2, 0x101], [0x1, 0x7, 0x0, 0x8], 0x0, [0x6, 0x7]}, 0xfffffffe, 0x9}, [@INET_DIAG_REQ_BYTECODE={0x4a, 0x1, "1e99e1aa9479adf810c23b0aea9134f35f33c3a043beb24ebe8470dcf5555eb729f3970384a63f13fc1d688d2af2515c71a5ddec16cdcb44a079702b2bdeb37918805a6716a1"}]}, 0x98}, 0x1, 0x0, 0x0, 0x400d9}, 0x8800) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$KDGKBDIACR(r5, 0x4b4a, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x400) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 16m35.597254266s ago: executing program 1 (id=591): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}}, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f2, 0x10, 0x70bd27, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000010}, 0x10) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000240)={0x4e, 0xfffffffd, {0x51, 0x1, 0x8000, {0x9, 0x1b}, {0x2, 0x14}, @period={0x5d, 0x0, 0x7c, 0xfffb, 0x200, {0x8, 0x5, 0xe, 0x1}, 0x0, 0x0}}, {0x55, 0x4, 0x2, {0xfffa, 0x1ff}, {0x2de0, 0x401}, @ramp={0x4, 0x8, {0x200, 0x0, 0x8, 0x4}}}}) 16m34.802358529s ago: executing program 1 (id=593): r0 = socket(0x2b, 0x2, 0x0) sendmsg$nl_route(r0, 0x0, 0x5) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x1, 0x3}}, 0x10) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0xff8c) r4 = fsmount(r3, 0x0, 0xb) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) fstatfs(r6, &(0x7f0000000140)=""/166) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x1, {{0x40}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4048821}, 0x44c5) 16m34.147972785s ago: executing program 1 (id=596): socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r2 = syz_open_pts(r1, 0x141601) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0xfffffffc, 0x0, 0x0, "682341f2fd71a6a76177920ea7e60c0ac7a4a5"}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 16m18.866759605s ago: executing program 34 (id=596): socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r2 = syz_open_pts(r1, 0x141601) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0xfffffffc, 0x0, 0x0, "682341f2fd71a6a76177920ea7e60c0ac7a4a5"}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 10m51.549023208s ago: executing program 4 (id=1740): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x32) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0xf000000) 10m50.822503076s ago: executing program 4 (id=1741): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x243, 0x0) ptrace(0x11, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3f000000}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r3, 0xfeffffff, 0x7}, 0x38) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) getdents64(0xffffffffffffffff, 0x0, 0x0) 10m49.549861782s ago: executing program 4 (id=1746): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = io_uring_setup(0x669, &(0x7f00000002c0)) close_range(r2, 0xffffffffffffffff, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e24}, 0x67) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r7 = socket$netlink(0x10, 0x3, 0xb) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r8, @ANYBLOB='\x00\x00g\x00\b\x00\b\x00', @ANYRES8=r8], 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r9, &(0x7f0000000400)={0xa, 0x4e20, 0x1fe, @mcast1, 0x7}, 0x1c) (async) r10 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000380)='\xde:8iq\x8a\xb9', 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000002c00070100000000ffd84c4b40d31a909e07de03e65cdbdf25017c000008000180d52a6a160300028004000280"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0xc010) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r7) (async) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/schedstat\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r11, 0x5437, 0x0) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000440)=0x11) (async) ioctl$TCSETS(r12, 0x404c4701, &(0x7f0000000040)={0x1, 0x3000000, 0x0, 0x0, 0x14, "3eccd8fd0000000000000010000000040100"}) 10m48.347774288s ago: executing program 4 (id=1747): r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x8, 0x3, 0x7f, 0x20000006, 0x4d, 0x4, 0x5f, 0xa, 0x5, 0xffff2d37, 0xffffff01, 0x3dd1, 0xff, 0xfff, 0x5, 0x4, 0x0, 0x8, 0x3c57, 0x0, 0x24, 0x9, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x9, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x400, 0x7, 0x17, 0x21, 0x7, 0x7, 0x3e, 0x8e, 0x6, 0x6, 0x0, 0x85, 0x6, 0xffff8001, 0x3ff, 0x83, 0x0, 0x20005, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0x388000, 0x2b8, 0x0, 0x9, 0xfffffffc, 0x3, 0x2, 0x0, 0x5, 0x2b, 0xe, 0x312, 0x78, 0xea4, 0x0, 0xfff, 0x7, 0x7fff, 0x6, 0x400, 0x7, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xf, 0xd86, 0x2, 0x4, 0x8, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x2bc2, 0x1, 0xfe000000, 0x8, 0x2, 0x200007, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xb, 0x48c93690, 0x42, 0x8], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0xff, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x9, 0x8, 0x86, 0x3, 0x3038, 0xff, 0xc93, 0x2, 0x2, 0x2, 0x7, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x601, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x7, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x3, 0x805, 0x1b, 0x6, 0x3, 0x2006, 0x80a2ed, 0x4, 0x80000000], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x5, 0x2, 0x57, 0x5, 0x3, 0x3, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x10000016, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x1, 0x8, 0x6, 0x226, 0x3, 0x100, 0x8, 0x30b1d690, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0x40b1e, 0xd7, 0x10202, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x8) sendto(r5, &(0x7f0000000980)="00506b3129b1af86e5223e5c6a69e8f2b4a718c14f5571ce1a448c06c4ca8fb40969b51f3d5398dd8399ad7b32dbdf84cdf13d254b22d9079ca616894a3461267121b4cec5e831ff0855dde9b4a1ddaba6a3795e1018804a8ba491e0b97b0a8f703d7383f0de33ee738758436a41e2d7cdd45b0e64567b9ce886272d2c6e9a3f0015a90c9167f4cac6f1ff324dbde35160a5", 0x92, 0xc0d1, &(0x7f00000002c0)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80) sched_setscheduler(0x0, 0x1, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x3, 0xc3, &(0x7f0000000880)=""/195, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) r8 = socket$kcm(0x2, 0x1, 0x0) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000000180)) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r8, r7}) 10m47.319401285s ago: executing program 4 (id=1751): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x4000, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x138, 0xc8, 0x8, 0x0, 0x5803, 0x220, 0x2e8, 0x2e8, 0x220, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x138, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@limit={{0x48}, {0xfffffffc, 0x0, 0x8, 0x7, 0x7, 0x4, 0x8000000000000000}}, @common=@inet=@socket1={{0x28}, 0x4c}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x6, 0x3, 0x7, 0xfffff800, 0x96542ae, 0x217, 0x44dc, 0x7]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000040)={0x0, 0x73, 0x0, 0x5, 0x0, "5ee691000200000017e0054200", 0x1000, 0x4}) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xf5}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0xf5}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) splice(r3, 0x0, r5, 0x0, 0xa, 0x0) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000000480)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x20}, 0x5000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}}]}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r9}, 0x10) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendto$packet(r2, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r1, 0x1, 0xd8, 0x6, @multicast}, 0x14) 10m46.256196622s ago: executing program 4 (id=1754): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) (fail_nth: 1) 10m31.121238843s ago: executing program 35 (id=1754): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) (fail_nth: 1) 8m44.792776188s ago: executing program 0 (id=2166): syz_open_dev$vim2m(0x0, 0x7f, 0x2) socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002240)=""/102400, 0x19000) fsopen(&(0x7f0000000040)='squashfs\x00', 0x1) close(0xffffffffffffffff) r1 = syz_open_procfs$userns(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpid() fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r4}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(0xffffffffffffffff, 0x8, r5) syz_clone3(&(0x7f00000004c0)={0x80010000, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000540), {0x2f}, &(0x7f00000002c0)=""/227, 0xe3, &(0x7f00000003c0)=""/145, &(0x7f0000000480)=[0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x8}, 0x58) r6 = fcntl$getown(0xffffffffffffffff, 0x9) r7 = syz_open_procfs$namespace(r6, &(0x7f0000000040)='ns/mnt\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000640)={0x78, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x35}, @val={0x0, 0x3, r2}, @val={0xc, 0x99, {0x7ff, 0x17}}}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x5c, 0x3, r2}, @NL80211_ATTR_PID={0x8, 0x52, r5}, @NL80211_ATTR_IFINDEX={0x0, 0x3, r2}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x61}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r7}, @NL80211_ATTR_PID={0x8, 0x52, r6}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x401, 0x7c}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8004}, 0x22bff950ddb739ad) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 8m44.656417936s ago: executing program 0 (id=2167): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xbf}]}}}]}, 0x40}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20042, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000022c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "8400", 0x8, 0x2c, 0x0, @remote, @local, {[@dstopts={0x73}]}}}}}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0xfe, 0x23, 0x0, &(0x7f00000004c0)="3d6ee2e04b91ab10141a9abe86ddf2f3b18397ff189d66b3c6b3970f528bd8d6e8e9ea", 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x52, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x7, 0x0, 0x8, 0x8, 0x8, 0x4adff086, 0x6, 0x1, 0x7, 0x5, 0x5, 0xf38, 0x3, 0xffffffff, 0x0, 0x8f98], 0xffffffff, 0x20000}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xa, 0x5d031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r8 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x42003) ioctl$I2C_RDWR(r8, 0x707, &(0x7f0000000340)={&(0x7f0000000280)=[{0x0, 0x2000, 0x0, 0x0}, {0x40, 0x0, 0x0, 0x0}, {0x101, 0x1000, 0x0, 0x0}], 0x3}) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendto$packet(r0, &(0x7f0000000240)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b1", 0x2a, 0x40, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 8m43.711691249s ago: executing program 0 (id=2176): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000009c3f2c03ceb676efb89c9cdf979f01000002602ec058f6eb7c8085c7c474ba0e1a9c8b3ea6b5856b586a1c29023d8eebe9307ede1e95677d5a65142cf261a49458299152b4adb54d906c6e50c0c5d8f98bbaa1988dc7b2821d5ab95fda97b46121ea"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) fanotify_init(0x0, 0x400) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfb, 0x4140045e}, 0xc) r3 = socket(0x1, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x20, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r3}, 0x20) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r6, 0x5402, 0x0) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8m42.394491945s ago: executing program 0 (id=2179): r0 = socket(0x2b, 0x2, 0x0) sendmsg$nl_route(r0, 0x0, 0x5) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x1, 0x3}}, 0x10) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x3000000) r4 = fsmount(r3, 0x0, 0xb) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) fstatfs(r6, &(0x7f0000000140)=""/166) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x1, {{0x40}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4048821}, 0x44c5) 8m42.088806663s ago: executing program 0 (id=2182): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) 8m41.287589076s ago: executing program 0 (id=2184): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000180)={r1, r1, 0x8, 0x0, 0x0, 0x2, 0x4a, 0x15c2, 0x5886, 0x6, 0x0, 0x8, 'syz1\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x106f) r9 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r0, &(0x7f0000000000)={0x30000000}) 8m40.862698987s ago: executing program 36 (id=2184): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000180)={r1, r1, 0x8, 0x0, 0x0, 0x2, 0x4a, 0x15c2, 0x5886, 0x6, 0x0, 0x8, 'syz1\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x106f) r9 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r0, &(0x7f0000000000)={0x30000000}) 1m8.999931323s ago: executing program 6 (id=3640): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) unshare(0x8040600) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time_for_children\x00') sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x52014, 0x2021}, [@IFLA_NET_NS_FD={0x8, 0x1c, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x8841}, 0x280048c6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a90000000060a010400000000000000000a0000010900010073797a310000000064000480500001800b0001007461726765740000400002802c0003007339f2f10455afb9fdd67abad09dfb78c7699c74e891a0c7000000000000000000000000000000000800024000000000080001004c454400100001800a000100696e6e65720000000900020073797a32"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_connect(0x1, 0x484, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x30, 0xb6, 0x56, 0x10, 0x12d1, 0xbc98, 0x6fd3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x472, 0x2, 0x1, 0x9, 0x10, 0xf, [{{0x9, 0x4, 0xc4, 0x8, 0x9, 0xff, 0x2, 0x31, 0x7, [@uac_control={{0xa, 0x24, 0x1, 0x5, 0x2}, [@feature_unit={0xb, 0x24, 0x6, 0x1, 0x1, 0x2, [0x2, 0xa]}, @feature_unit={0x11, 0x24, 0x6, 0x5, 0x3, 0x5, [0xa, 0x8, 0x6, 0x7, 0x4], 0x29}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x300, 0x3, 0x6, 0xce}]}], [{{0x9, 0x5, 0xf, 0x0, 0x400, 0x1, 0x9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0xff81}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0xc1, 0xf7, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x8}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0xf4, 0xb, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x183, 0x1, 0xb}]}}, {{0x9, 0x5, 0xa, 0xc, 0x3ff, 0x8, 0x2, 0x7, [@generic={0x93, 0x31, "e322d85f507ce8bd57bffad2e8aad874928a62d2512b3b81e4d4da55f4f08f3e61f557c2e4bbdfaf52db4f35fd57eaf79346b7a16d875b167d087a3ca093e957374e7d9d268443e4057a3243fc1283107af976bb3fbcb083e359ae2752782c8f80d8c4eda65b37cbd41353f684447500b597e1157f7a53457782da850794f147e3f2f952957f3053b4c36fd7a18ac439c7"}, @generic={0xb8, 0x8, "c6a5560f958997ef004b0548e53fbc7369654394e919d554ae377bfd60958cd90480477994f4c9a0e9981b9d86293b6ff1f4017548798fa9b4541844eee9a47f6d1627d29469c379aa214efe2518f4fa9835680724676777f439bf85cf0d2917d68d689b911933e7377b6e294fd9ddcc0cbc554c39020cc9c8dbf3d0985719b9cce3c97ac97f4ee2d45e03f499538846b74c48be1cc0d5d61ba9f65b6246e30d2e01081ecc96b000a5e27889826faa8302f732830c9e"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x8, 0x6, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x4}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x5, 0x7, 0x9, [@generic={0x2a, 0xa, "7677b11828039677633f8a9ee7cd48fcfbaa6bfc24061e62c8c4e345a56532fa0e673d319283abda"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x3ff, 0x0, 0x4, 0x40, [@generic={0xa, 0x30, "5692b2ce8071f66b"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x418, 0x7a, 0xe, 0xc4, [@uac_iso={0x7, 0x25, 0x1, 0x86, 0x1}]}}, {{0x9, 0x5, 0x80, 0x8, 0x8, 0x3, 0x1, 0x2, [@generic={0x50, 0xc, "b656eb1f10eba6941965c5e2c87a0a4a726b91b019439d50401a623d6c8963306c4254c0205d81b811cd07e633439f3cbe1390202b01971d7fe790adca776baa495a440a393e03e2163c8fb4fb4a"}]}}]}}, {{0x9, 0x4, 0x36, 0x3, 0x2, 0x17, 0xce, 0x7a, 0xfa, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "5914e60d"}, {0x5, 0x24, 0x0, 0x38}, {0xd, 0x24, 0xf, 0x1, 0x7fff, 0x6420, 0x10, 0x9}, [@country_functional={0xc, 0x24, 0x7, 0x13, 0x0, [0x22, 0x6, 0x80]}, @acm={0x4, 0x24, 0x2, 0x9}]}], [{{0x9, 0x5, 0xb, 0x498bebed88e5b60b, 0x3ff, 0x0, 0x2, 0x1, [@generic={0xae, 0x24, "62ced3e6efa676f3ca689212a2e48c4ed7e724bd8d2b422aa0586db824a44ed8e93b132b0b0c6b2b5608d24e3e051adec1bb5100453ac04934a5634fad04d8dcce6f0ee3e513c59dd90e3f0cbe1af6d08fe50e5cdb37138733598ccf8838ce4f5e8ad6de64b8e7d92617c540823aa32ef9c9a18c85c886fedd45adaa136fb6fb70becf8572805c736b69d81a6796f8f6cddc90c8e6ff258d4819aab4266369544bcf32d6ad36cc958dd27c83"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x9, 0xf9, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0xb92d5aef2213f61c, 0x9, 0x40}, @generic={0xf4, 0x7, "91113c25736b59ea9d9537f7c328fc40ea3aa48fbff02468f9bf93a805fbcd868178a582772368d2ad6dbaecfa41abef8cbbde444c53902f617d4a5c1b609314dbf841011487cc1bdc22180b71486dea407ac342b8a568d36189379cc0bc1496d41f2356e76fbcd4084735707041d51f5180dd20f5f2df2ebddf31c6982f9e75bc75ed270cd227119eac6f1c7007068a93a1c6f77cb06257928181257ced8e543f0a32c00dcf8307213892949b99ca235a5c90892495673bfb67beded46aca80da95460ef7f306538989beb55bff7547c0eb0d5d9d3abde1796bd14ce60ca362b537a7749868e463dd2ed355c77ba8a8ff79"}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x9, 0x2, 0x48, 0x20, 0x9}, 0xf, &(0x7f0000000040)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x6, 0x2, 0xfffb}]}, 0xa, [{0xb, &(0x7f0000000100)=@string={0xb, 0x3, "e4a35285deb4ef3cc8"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x41f}}, {0xa3, &(0x7f00000006c0)=@string={0xa3, 0x3, "d40ceb86ef38a8c91459c02f57c47d03d71eaffcb45dee272f290245854fc1e068a2e349df9726dd358c1c21172ae8659b26c3daffb34eb106e59856218748c4d93b132bc3945d11e499fd6a3b3f04dcd494ab55637cdcd92388bdce83e88a5474bbf3a93300c683c0530a435056ddf6e4499ea30028cc9f6c09a92cd9d475fdea9384c151697b556ad22a19dbbce34a84e33743961e76e43c01f2a4baa083968c"}}, {0xd, &(0x7f0000000780)=@string={0xd, 0x3, "ae0149001e316a61bb7380"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x3409}}, {0x5, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1d41188b9c1b411d84e805180fb7a69b5b4a83f6f36e778c366c6643507dd6fa67e07724165894b5778d332a99da2c11535692aa8a4a29479c0d94e6bc2377c6d2b8f3df9930d9d16c05ea28d6ff887353274bf166eab1f80756b6c4d772c497f3fbddd5f04fa1c30d3d8d47ddc63aac8a3652fc71bb21edc3a790"]}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x55, &(0x7f0000000880)=@string={0x55, 0x3, "042fee0bd6b6d8c3f790c19380fcab9a9aba59f9e0e31ce9b4b75934b7324c2f49fa44bd2f6387675cfd2ca952c316d87140bb4694361bd30051d33dd0397e53684f1484d3424f0bac6a40f449227c982b5d1b"}}, {0x94, &(0x7f0000000900)=@string={0x94, 0x3, "c58ebc402cd45f993759ecad185492fc0519f7c7dc362864c285199e009e5fca8ed217e2a746154f95def89b049615f9d36ce463246c4fef2405967199b1b4da8c534b7524427eecd026bf947f8b5b1f57ba854b118851c7c95656adf37c28128b86c74e37b969ef23de49c1914c38660c0a9a0d2d890841363f91872792e3c9c54ad953518b6ecbe55d16f3949e5984253c"}}, {0xcc, &(0x7f0000000b80)=ANY=[@ANYBLOB="cc03bd8652616e0f19832553a2f34f0f1acaff45ba34f95c9b85df3219f61dbdddbda8885cb61226e11129406181acecc108c7bd97a7f75793b7c25d88ba009d66d719e883d7be93aca19341b53bb2c5a751fac38f0e0a70729c59099b6dd911eb0c4a6fd1b1aa3fcb3708f1c7228cc5d936907067bf4f90c985c16b42a23f3cbfd879b4e2a3df83abdc93e38dfb24dbca7cba17b05629e44cc659728e7375696885fb058c5ecab5ef6ec085615d56b9700ff33e27cccfaaca59e00c9f0a572294d43f324abe4deebe81d1e1b9c30cd5a8c435716d06943a42d731aee94c"]}]}) (async) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000800)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0xc0, 0x1, [{{0x9, 0x4, 0x0, 0x80, 0x1, 0x7, 0x1, 0x3, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x2c, 0xff, 0x37}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x65, 0x9, 0xb9}}]}}}]}}]}}, &(0x7f0000001040)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x101, 0x4, 0x0, 0x8, 0xff, 0x80}, 0xf7, &(0x7f0000000c80)={0x5, 0xf, 0xf7, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0xb, "9c7c7a6a00494aca73c6e8d4431c802c"}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x1, 0x0, 0x8000}, @generic={0xb6, 0x10, 0xb, "4afdc84b6cb5bc8ab435f75e0a4ddb2ed380928ee99f47f0a8948bf660ace2f77d6e941f09dc13087d02208df343c0b61ac8149d756b6f865d36d2305cb00837b7ad9d116bb7712da27b21724b3b4d42f3a4f062cec785ebb6bb752e5a65d4027a192acb924084d69fcf30c1955e0dddd1ddd74d62bd0f146304875f2d8599f2454f8bfc801aa62d02096d26a6d27395f9ec6f388771b7f8fd4ed55cdcb07e48e63af8611cf3fdb2fa61db2fc171735173688e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x9, 0x1, 0xfff8}, @ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0x644, 0xf0f, 0x400, [0xcf, 0xc00f]}, @ptm_cap={0x3}]}, 0x6, [{0x83, &(0x7f0000000a00)=@string={0x83, 0x3, "55367a7c00390e472aa21e6f8293a000eec3be169768b010fe63e393974f38855361a72661877e09843bdd6acc448c556147dc2477c2dcbef8a3fa24997bc920903b389cb21067696909c2ee3a4537a30becc2b20afd20976f8406aca4217605e4e0db8f128d0e04bb6a58ebba89a89b98d7289b629d9748b376c00a66e6c90b97"}}, {0x75, &(0x7f0000000e40)=@string={0x75, 0x3, "8159a8e85a4aca3919fa7d72f2f315ce39e76d53475f31e2eae921bf81a9fdf23f310a59f5f85991e8a9de70dec29125f2ef1099c03ed18a689fe42cf715d270e4a818a68d166384dc93245d3d3186380c0493ee37a2ddf8f389c657ebc599fe1eb92b3af6273aa8cfe2a7813abe500a60df86"}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x40c}}, {0xe9, &(0x7f0000000f00)=@string={0xe9, 0x3, "072331214111ed82817cea07299d9e233d310296790347143d08a191e9091cfa419e091dd15423646e9b188d04f14913b30eb4ca0dd8c2160366d8adba3ac8467f29f81a0e580a2f832944469b5ec915ebb96ba9da57ade8ffca300c1ead8ab345bdc66c35137b504f62ed48603f606c728fa36726ba065048563ddebe0994efc303fd0ad72bda5f0f96ca06cfafb30dbd5dc4e363e48dbef7c992e5fefa7dcc6024300eba384cdfcf960c01799e5f90f3e73da81ce429f8170cc59a921896e30d5637befaa12756e3f01220454085c824d5fd9e7d3db0175aef2ce7143bc6056189164587af18"}}, {0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x100c}}]}) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) getpgid(0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "1a3952b5"}]}}, 0x0}, 0x0) (async, rerun: 32) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) (rerun: 32) 1m7.181698334s ago: executing program 6 (id=3646): syz_open_dev$tty1(0xc, 0x4, 0x3) r0 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x5, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2100, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) (async, rerun: 32) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0445624, &(0x7f0000000340)={0x140980001, 0x0, "ff5dff0f251ed700f60065c214525ae572ce1c20019c3fc2486b06fa080033ae", 0xfffffffffffffffa, 0x10, 0x8000000001, 0x800, 0x31, 0x4, 0x7, 0x2000000, [0x6, 0x6, 0x2a3, 0x101000]}) (async, rerun: 32) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000000)={0x5b8d, [0x8, 0x800, 0x6, 0x5, 0xe316, 0x92a, 0x0, 0x1, 0x1, 0x7, 0x8869, 0x25, 0x8, 0xd, 0xa220, 0x2, 0xfff, 0x7, 0x8, 0x7ff, 0x4, 0x4, 0x5, 0xff, 0x5, 0x6, 0x9, 0x2, 0x53b, 0x4, 0x7, 0x8, 0x4, 0x305, 0x9, 0x100, 0xc, 0x5, 0x9, 0x1, 0xfffd, 0xbd40, 0x8, 0x5, 0xb, 0xffff, 0x2, 0x8001], 0x1}) 1m6.187800959s ago: executing program 6 (id=3650): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000180)=0x2, 0x4) socket$kcm(0x11, 0x3, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000100)) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000004280)) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000200)={0x9, 0x0, {0x2, 0x0, 0x266, 0x2, 0x9}, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x10048900, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) mq_open(&(0x7f0000000180)='.\\\x00', 0x2, 0x40, 0x0) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000018000100000000000000000002001000fe0000090000000006001500040000001400168010"], 0x38}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) timer_create(0x0, &(0x7f000001b080)={0x0, 0x29, 0x4}, &(0x7f000001b0c0)) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 1m5.644980362s ago: executing program 6 (id=3653): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x300, 0x0, 0x1000, 0x0, 0xa, 0x20, 0x0, 0x2b}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}, 0x200, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 1m1.843541518s ago: executing program 7 (id=3666): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x10080000, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {0x8, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c065}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m1.288399785s ago: executing program 7 (id=3670): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0xfffffffd, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r2, &(0x7f0000006340)="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", 0x2023, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18, 0xfffffffffffffff5, 0x7, {0x800}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fallocate(r4, 0x10, 0x460e, 0x3) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000a40)={&(0x7f00000004c0)={0x7e, 0x0, 0x8, {0x7, 0x2b, 0x100, 0x48600c6a, 0x7, 0x1fe, 0xd, 0xa, 0x0, 0x0, 0x20, 0xd1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m0.593070294s ago: executing program 6 (id=3672): syz_emit_ethernet(0x46, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60e90e5b00101100000000000000006f117f39fffffffffffe8000000000000000000000000000bb00000000001090780200000000000000"], 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000100b060a5000000000000109022400010000500009040002010300000009210000000122f80409058103"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200)={0x200000, 0x0, 0x2b}, 0x18) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000000040)={0x1d, r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) syz_emit_ethernet(0x7e, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa00080045000070000000000001907864010100ac1414aa0b009078032c000045000000000000000089000000000000ac1414aaa40300863a0000000000074b6cefc500000cdf61168c24ac88ad078c000a2189ea43a2149b840008f7d11634eea20002000dccf0294e2a3bdb4aa40b24000000"], 0x0) ioctl$USBDEVFS_BULK(r5, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r5, 0x5521) r6 = fsopen(&(0x7f00000000c0)='adfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r6, 0x3, &(0x7f0000000100)='vet\x84\xc6\x00\x00\x00\x00\x00\x00ap\x00', &(0x7f0000000240)='./file0/../file0\x00', r1) syz_usb_control_io(r0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_ATTR(r8, &(0x7f0000000180)={0x78, 0x0, 0x0, {0x4db, 0x19, 0x0, {0x3, 0x2c, 0x0, 0x200, 0x5, 0x4, 0x8, 0x9, 0x5, 0x0, 0x1, 0xee00, 0x0, 0xb3, 0x1}}}, 0x78) splice(0xffffffffffffffff, 0x0, r9, 0x0, 0xf3a, 0x0) vmsplice(r9, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x0) tee(r7, r9, 0x8f5, 0x100000000000000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 1m0.169320514s ago: executing program 7 (id=3676): openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x6, 0x3ff, 0xb49, 0x9, 0x80000000007, 0x2, 0x391f88a2}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000400faffffffffffffff000001000000d7855e27e0160dea321fd2aa46de0876b06711d11c761eb2f80e6441feb9d327c97ff3378ef2149079eac36b60f29214d1314b1b634428979b11b8ac25ea5c3930773e83aeee7b17e80ae90b000000000000008031289c33ffa916a66c925692ec8c79952a2e0e6ef6806eabfc4b9bb003e6", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300)="3d413caf14ba6751f4d6f937ff5888a75d56ddf311cc4f5d790faadec4b544867ad1fd5f34ab1ee4178f8e923f3bbd50b1b867d5b0bd3b95ebb73c19a868438213a83a17de5c9842b07b7da48298a1158ef7ddd36d0715723967c133", 0x0, 0x2, r2}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300)="3d413caf14ba6751f4d6f937ff5888a75d56ddf311cc4f5d790faadec4b544867ad1fd5f34ab1ee4178f8e923f3bbd50b1b867d5b0bd3b95ebb73c19a868438213a83a17de5c9842b07b7da48298a1158ef7ddd36d0715723967c133", 0x0, 0x2, r2}, 0x38) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) (async) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r3 = userfaultfd(0x1) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x11) (async) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TCGETS(r4, 0x8910, &(0x7f00000002c0)) (async) ioctl$TCGETS(r4, 0x8910, &(0x7f00000002c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x8, &(0x7f0000000200)=[{0x80, 0x5, 0x9, 0x6}, {0x4, 0xe, 0x3, 0x1}, {0x8, 0x0, 0x5, 0x400}, {0x508, 0x30, 0x9, 0x8}, {0x8, 0x14, 0x67, 0x84}, {0x6, 0x1, 0x8, 0x6}, {0xfffa, 0x4, 0x7, 0x7f}, {0x8, 0x0, 0x2}]}) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000100)={'virt_wifi0\x00', {0x2, 0x4e20, @loopback}}) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x1, 0x80) (async) r6 = fsmount(r5, 0x1, 0x80) fchdir(r6) mlockall(0x2) shmget$private(0x0, 0x2000, 0x4, &(0x7f0000511000/0x2000)=nil) (async) r7 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000511000/0x2000)=nil) shmat(r7, &(0x7f0000776000/0x4000)=nil, 0x5000) r8 = open_tree(r6, &(0x7f0000000640)='\x00', 0x0) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) 57.726649937s ago: executing program 7 (id=3683): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000280)=0xdfd, 0x4) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2120, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = openat$incfs(0xffffffffffffff9c, 0x0, 0x400000, 0x110) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x800, 0x9) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000180)={0x6, 0x37d5, {r3}, {0xffffffffffffffff}, 0x9, 0x3}) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x892031, &(0x7f0000000740)=ANY=[@ANYBLOB="7472616e733d756e69782c6e6f657874656e642c646972656374696f2c6163636573733d636c69656e742c6163636573733d636c69656e742c6c6f6f73652c7063723d30303030303030303030303030303030303032302c7375626a5f726f6c653d2e2f6367726f75702e6370752f73797a31002c6173796e632c7569643d544740637b07d36b4d81d86595c43d3a367e77317470e311888b1c99399caa472ed417b927c783030ca89492bad501f48089f01e091edf4e05444e632856e55924aab2f5dc360c272ade79a5aedd48c84dcb1cc0a3a86f4f5b3086c3ed3bcaec1bfce8c3e9046e4ad5c13613f14e8021bf42707498bd1154f1874acc67fcccea8a97607754e0938f31f71bc55e4da2fedf8b73f84118dda6a368d8dc9783d7c594879c2337eea468cf47", @ANYRESDEC=r6, @ANYBLOB=',appraise_type=imasig,smackfsroot=,dont_hash,\x00']) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x1046, 0x0, 0x0) setfsgid(0xee00) syz_open_procfs(0x0, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000640)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f0000000401a800080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d93337568b26948fc700870ec38edc9761fdc32b67c", 0xdb}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000400)=0xe) sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) 57.463132673s ago: executing program 6 (id=3685): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet(0x2, 0x2, 0x41db) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x4, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x3, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r4) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000300)={0xffffffffffffff5e, 0x0, 0x0}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x64, 0x21c) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000180)='u', 0x1}], 0x1) r7 = getpid() sched_setattr(r7, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x1000000000007, 0x921, 0x9, 0x3, 0x5507}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) sendmsg$NFT_BATCH(r8, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r9, 0x1, 0x1, &(0x7f0000000380)=0xfffff272, 0x4) 56.522230005s ago: executing program 7 (id=3688): r0 = socket(0x2b, 0x2, 0x0) sendmsg$nl_route(r0, 0x0, 0x5) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x1, 0x3}}, 0x10) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0xffffff8c) r4 = fsmount(r3, 0x0, 0xb) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) fstatfs(r6, &(0x7f0000000140)=""/166) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x1, {{0x40}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4048821}, 0x44c5) 56.044461236s ago: executing program 7 (id=3690): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x30, r1, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x12}, @val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x4}}}}}, 0x30}}, 0x8840) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) r5 = eventfd(0xd8) ioctl$KVM_IOEVENTFD(r4, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x4000, 0x0, r5}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x480, 0x0) readv(r6, &(0x7f0000000680)=[{&(0x7f0000000440)=""/11, 0xb}, {&(0x7f0000000300)=""/153, 0x99}], 0x2) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f0000000000)={0xffff1000, 0x1d000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f0000000140)={0xffff0000, 0x106000}) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.swap.events\x00', 0x0, 0x0) ioctl$SIOCNRDECOBS(r7, 0x89e2) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r4, 0x4068aea3, &(0x7f00000000c0)={0xed, 0x0, 0x738}) 40.832863912s ago: executing program 37 (id=3685): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet(0x2, 0x2, 0x41db) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x4, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x3, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r4) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000300)={0xffffffffffffff5e, 0x0, 0x0}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x64, 0x21c) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000180)='u', 0x1}], 0x1) r7 = getpid() sched_setattr(r7, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x1000000000007, 0x921, 0x9, 0x3, 0x5507}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) sendmsg$NFT_BATCH(r8, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r9, 0x1, 0x1, &(0x7f0000000380)=0xfffff272, 0x4) 39.515231572s ago: executing program 38 (id=3690): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x30, r1, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x12}, @val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x4}}}}}, 0x30}}, 0x8840) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) r5 = eventfd(0xd8) ioctl$KVM_IOEVENTFD(r4, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x4000, 0x0, r5}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x480, 0x0) readv(r6, &(0x7f0000000680)=[{&(0x7f0000000440)=""/11, 0xb}, {&(0x7f0000000300)=""/153, 0x99}], 0x2) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f0000000000)={0xffff1000, 0x1d000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f0000000140)={0xffff0000, 0x106000}) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.swap.events\x00', 0x0, 0x0) ioctl$SIOCNRDECOBS(r7, 0x89e2) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r4, 0x4068aea3, &(0x7f00000000c0)={0xed, 0x0, 0x738}) 14.518363304s ago: executing program 5 (id=3808): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) unshare(0x66000080) r1 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r3 = gettid() setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000280)=0x8, 0x4) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000f10000100"/20, @ANYRES32=r2, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r3], 0x28}}, 0x0) 12.403620629s ago: executing program 5 (id=3815): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000780)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1ae7, 0x9001, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xe, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x2, 0x89, {0x9, 0x21, 0x2, 0x0, 0x1, {0x22, 0x9b6}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x9, 0xf1, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x81, 0x9f, 0x9a}}]}}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x110, 0x0, 0x7, 0x9, 0x10, 0x81}, 0x16, &(0x7f0000000800)={0x5, 0xf, 0x16, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x2, 0x7b, 0xb, 0x10, 0x6}, @ptm_cap={0x3}]}, 0x3, [{0xc8, &(0x7f0000000840)=@string={0xc8, 0x3, "c9be34a415896cb293da8c8c9a441515cd8fcd39c4594b298b75567b4cea97e584f29367c960c411d957eab639d920094a784edc53905584e70ae641b43d806ec076a04e3e87b2bff36f0f666ac51495cb5d1346af508f5f39254bed46dda169682cba1c9d0f8d106d73fb2740ba9663a5929dee27519b88434a8e5ad92e8b178931ba4b62b438f616159dc27ea531804b7669af89636070b5626fe6620159cfe29b465d0a4f7e63a8ed0d4a5f9fdcf19645d153a046dd596489c953eb144a0eac9e6419c0c6"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x41b}}]}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect$uac1(0x6, 0xb6, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x0, 0xfe, 0xd, 0x8, 0xff, 0x7}, 0xf, &(0x7f0000000140)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x4, 0x0, 0x8}]}, 0x5, [{0x4a, &(0x7f0000000180)=@string={0x4a, 0x3, "8d922982c6cbfbed756cf7f33605e39cb04802d0ea17f398386519c378ff03b31d3ee5927a5337c0013e2ced9a081eaa0cc14dae03f7a4efc0240e7878047fed521cd1ed6b92ee74"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x382a}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1004}}]}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001080)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce60300c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35179bd223ec839bc16ee78076e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e898d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f192daa94a0c556f3218ce740068725c37074e468ee207d0f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9f74fbe9c3c6fca5cbfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e26183524cf5cc1b83d34889f40159e800ea2474b540500a30b23bcee46762e2c93bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ff80e87adf394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0b2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869ba2f3caba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958ad009995ae166deb9856291a43a6f7eb2e32cefbf463789e1f79b8d4c22be89f44b032dad13007b82e6044f643fc8cd0e30c378b4a88c39c117d27326850a7c3b570863f532c218b10af13d7be949870c9920c2d2a53b384e88862ee92fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a25468e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361f399d7c091d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0fd9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8fc90f000000000000eef2e5eb804b9d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e84256f2d62d03cab53aa50c3e6000000000000000000000000000000000000283cbeeb000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edf0a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b404797056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab517124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612aa25d6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e030000000000000000000000e14908d973262569d0d6ce62cf3a30aa342f960e838fa39b97e0bf1bc6482bb99717d37b7a54d1e9d794b527a8317efbb1d5f9988e00283c36089e9ab5ee537124396e2964776eb5f02b739260b1371c97158d84ecfd6fadede98c608f4fab805c43e8eaa367f1bf2fad8ccdb058e16c810ddcc543ae417a92f0de850d4180ff08bd2857ebfef435ad23a0cc7bfe8a7928cd9d4ed249cdfc7fcdcf5275c93483be5ebb81af35375e441b09c908e45df79d3b00f031b0ec1e9f3683ded75b1fc9f72af8d690356f9bd26e8ee631b5775b60659ef1aeb789b54aad2004eea0ff225f69a62632574a2a135aa6313aabb5a7fe3ed2a77579ceb4d4af57252a4e8b3aa2a1edb8d6e79eb4aa8b9e9c470d7b53d6d2fd095119a441e19d348e8a774808dbde6b1d4ff83ff3ba6ebfaa4d48f8ce0577e20ea2fe2213946e416d0e08c15016b39eeac426be0a69014bd81d9adb00"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x7a, 0x0, &(0x7f0000000380)="b9ff03316844268cb89e14f086dd65e0ffff00122c35832e90db79af4eb4c1e009150075bc31e5d512e076fe7723b1466b9d0d5f06c6c061cf2449817ed6b2f32483435a3135ff72555d0af044b2998d4f000882be19aaa98e4f129ed97cacc4ffa6269a21e3b97cf51638861469f61660e21a13dbad5d62d46a", 0x0, 0xcc, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x700}, 0x26) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r2, 0x0, 0x9d, 0x2, &(0x7f0000000480)="7ea253959c2c03b3e0478d55a0b0130bcfe83e4046393e57f6a94787020b1c85d78d8d720ad05020deb910d7f333fcb35330ddd2d28026fa54fac3f0b42c2c34af5c27e94e93ec083fc5f382c9578b85a64f051cddae75d5afc1df88750282374e2358209e0d8241ec5dcb78324c43c18e8fa0242545d4a029b3a6d645a3af6af65fbc83d689702b7c061956c797c7274a3d4b1cb73513deed11fe03be", &(0x7f0000000380)=""/2, 0x9, 0x0, 0x7f, 0xb, &(0x7f0000000540)="b18698959c5d9fab7026f2b27d9164fafe416903db891d3ebd25ae50d457c9ca56def18260fd7a43eababb0a1875c2ae1986a2f8877cca5903c1bba24d62b42657657fde4bfa349fb011489c521d1ac2eefb3d7700a93a1dfa7bd9aad150e5b70482a6d3a33049bf054c0856c7724120a73ae5092aef21d9751f1349e4f0b4", &(0x7f00000003c0)="27255142500888768362e6", 0x3}, 0x50) 9.997399402s ago: executing program 2 (id=3829): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='reiserfs\x00', 0x80, &(0x7f00000000c0)='grpquota') r1 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r1, 0xffffffff80000601, 0xee01, &(0x7f0000000300)={0xffffffffffff8001, 0x7, 0x0, 0x7}) (async) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000340)={&(0x7f00000002c0)=""/37, 0x25}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x80) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) capset(0x0, 0x0) (async) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, 0x0, 0x82}], 0x1, 0x0, &(0x7f0000001100), 0x1) (async) socket(0x10, 0x803, 0x0) (async) tgkill(0x0, 0x0, 0x27) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r1, 0x58, &(0x7f0000000200)}, 0x10) 9.649293928s ago: executing program 3 (id=3833): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1, 0x0, 0x0, 0x40001080}}], 0x1, 0x20008000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) 9.61105766s ago: executing program 5 (id=3834): openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x4a01, 0x0) io_uring_setup(0x13d4, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x2000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x4}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000019300)=@newtfilter={0x84, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_EMATCHES={0x50, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x30, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0xe, 0x3, [@TCF_META_TYPE_VAR="8bac55f9689aecaec9e8"]}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR='3']}]}}]}]}]}}]}, 0x84}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000300)=""/102392, 0x18ff8) r5 = syz_open_dev$dri(0x0, 0x4, 0x14000) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000240)={0x0, 0x2a, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000680)={r7, 0x10000201, 0x0, 0x81, 0x3, [0x0], [0x3fd86826], [0x8000000, 0x7, 0x9], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000100)={r8}) r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r9, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @host, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006, 0x9}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r9, 0x7a4, &(0x7f0000000540)={{@local, 0x2}, 0x0, 0x9, 0xffffffff, 0x42}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071122780000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 8.612564455s ago: executing program 2 (id=3837): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc082}, 0xc000) ftruncate(r0, 0x6000000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2b) fanotify_init(0x4, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000000400000000000000000000004000"/91], 0x68) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8}, 0x94) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="180700000000000000000c000000000018320000", @ANYRES32, @ANYBLOB="0000000000000000b703000000001000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x8, 0x801000, 0x8, 0x0, 0x0}}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008000, &(0x7f00000001c0)={0xa, 0x2, 0x20398, @empty, 0xffffffff}, 0x1c) shutdown(0xffffffffffffffff, 0x1) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x2008087, 0x0) 8.544039037s ago: executing program 3 (id=3838): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) rt_tgsigqueueinfo(r2, r2, 0x2a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(&(0x7f0000002740), 0x80080) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') socket$inet6(0xa, 0x2, 0x0) ptrace(0x10, 0x1) syz_emit_ethernet(0x6e, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a300000"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="6000000002060502000000000000000000000000140007800800114000000000050015000600000005000100060000e0050005000200000005000400000000000900020073797a310000000011000300686173683a69702c706f7274"], 0x60}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r7, 0x103, 0x3, 0x0, &(0x7f0000000540)) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x0, 0x0, {0x37}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 8.236242381s ago: executing program 5 (id=3839): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x16, 0x0, 0x1b) openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183242, 0x1f1) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000340)=ANY=[], 0x700, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = add_key$user(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000700)="a6b6", 0x2, 0xfffffffffffffffe) keyctl$chown(0x4, r3, 0xffffffffffffffff, 0xee01) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x53b4, &(0x7f00000000c0)={0x0, 0x2607, 0x800, 0x3, 0x44}, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x5408, &(0x7f0000000300)={0xff, 0x3ee, 0xfffffffe, 0x7fffffef, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0x1002, 0x3ff}) 7.278223626s ago: executing program 2 (id=3840): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x620082, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x161281, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r6, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x2}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={0x0}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b80)=@migrate={0xec, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x9c, 0x11, [{@in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@local, 0x32, 0x3, 0x0, 0x2, 0x2, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @in6=@empty, @in6=@private2, 0x2b, 0x0, 0x0, 0x0, 0x8, 0x8}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x42000) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2adc0, 0x1c1}, 0x18) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) r9 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$binfmt_register(r9, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x9, 0x3a, 'M', 0x3a, 'N', 0x3a, './file0', 0x3a, [0x43, 0x43, 0x46, 0x46, 0x43]}, 0x2e) dup3(r8, 0xffffffffffffffff, 0x0) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x13) ioctl$KVM_IOEVENTFD(r10, 0x4040ae79, &(0x7f0000000040)={0x8000000000000001, 0x0, 0x0, 0xffffffffffffffff, 0xe}) 7.254091734s ago: executing program 8 (id=3841): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x620082, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x161281, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r6, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x2}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b80)=@migrate={0xec, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x9c, 0x11, [{@in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@local, 0x32, 0x3, 0x0, 0x2, 0x2, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @in6=@empty, @in6=@private2, 0x2b, 0x0, 0x0, 0x0, 0x8, 0x8}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x42000) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2adc0, 0x1c1}, 0x18) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) r9 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$binfmt_register(r9, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x9, 0x3a, 'M', 0x3a, 'N', 0x3a, './file0', 0x3a, [0x43, 0x43, 0x46, 0x46, 0x43]}, 0x2e) dup3(r8, 0xffffffffffffffff, 0x0) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x13) ioctl$KVM_IOEVENTFD(r10, 0x4040ae79, &(0x7f0000000040)={0x8000000000000001, 0x0, 0x0, 0xffffffffffffffff, 0xe}) 6.600165831s ago: executing program 3 (id=3842): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611866000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1d1b9b2a96f3dec, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newsa={0x1ac, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in6=@loopback}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x58, 0x14, {{'cmac(aes)\x00'}, 0x60, 0x0, "b74a27a4f44bd05db8f139a0"}}]}, 0x1ac}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/binder-control\x00', 0x2, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000280)=@o_path={&(0x7f00000000c0)='./file0\x00', r4, 0x4000, r7}, 0x18) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x4, 0x2a, 0xa, 0x1, 0x52, @dev={0xfe, 0x80, '\x00', 0xe}, @mcast2, 0x7f20, 0xb6cfa4117767c35d, 0x9, 0x3}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000440)={'tunl0\x00', r8, 0x20, 0x781c, 0x6, 0x3, {{0xb, 0x4, 0x2, 0x5, 0x2c, 0x64, 0x0, 0x5, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@timestamp_prespec={0x44, 0x4, 0xa2, 0x3, 0x4}, @generic={0x94, 0xe, "9bd247e09578cd167aa45456"}, @ra={0x94, 0x4}]}}}}}) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r9, &(0x7f0000000080)="29000300010003", 0x7) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x2458a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r12 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(r12, 0x103, 0x2, &(0x7f0000000000)=0x3572d0f6, 0x4) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x884) 6.149915793s ago: executing program 2 (id=3843): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) umount2(0x0, 0x0) 6.103120594s ago: executing program 8 (id=3844): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0xff, 0x2, 0x7fff7ffc}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) r1 = gettid() prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs$namespace(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES64=r1, @ANYRES32=r4, @ANYRES16=r3], &(0x7f0000000440)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$I2C(0x0, 0x1, 0x402) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000300)=@abs, 0x6e) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) pidfd_getfd(r7, r5, 0x0) sendmmsg$unix(r5, &(0x7f0000000440), 0x0, 0x44040) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x84}, @in=@local, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x10, 0x9}, {}, 0x1, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x33}, 0x0, @in=@private=0xa010100, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9}}, 0xe8) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000080), &(0x7f0000000280)=r5}, 0x20) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000004c0)={0x0, 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, r10, 0x25, 0x13, @val=@uprobe_multi={&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=[0x3, 0x100000000, 0x307], &(0x7f0000000380)=[0x2, 0x4, 0x4, 0x2, 0x4, 0x3], 0x2, 0x3, 0x0, r11}}, 0x40) syz_emit_ethernet(0x7a, &(0x7f0000000580)=ANY=[], 0x0) 6.051564043s ago: executing program 5 (id=3845): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x8, 0x7, 0xb, 0x11, 0x2, 0xfe, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x57, 0xb, 0x8, 0x8e, 0x4}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x4000003, 0xfc, 0x2, 0xc, 0xff, 0x8, 0x6, 0x1, 0x0, 0x7, 0x5, 0x4, 0x72, 0x7, 0xfa, '\x00', 0x3, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xffffffffffffffe0}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f00000001c0)=@ready={0x0, 0x0, 0x8, "e2ffffff", {0x1, 0x0, 0x6, 0x7, 0x8}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x10, 0x0) 5.561024675s ago: executing program 3 (id=3847): unshare(0x6a040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6, @multicast}, 0x10) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x3, 0x0, 0x3fb, 0x0, 0xb0, 0xb7d4}, 0xfffffffffffffd85) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000000c0)=0x9d, 0x4) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff, 0x400, 0x18}, 0xc) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a90000000000000000000000000000000d000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000020000000000000000000000044000500ac1414aa000000000000000000000000000000003c004a0000000000ffffffff0000000000000000000000000000000000030000000000000000000000000000022ee50228deba567c40762b1aaff703034bb07fce1ade98e1cbcafca0cb0852473b36d0771b729c9476a70cfc0447ee5739baa4d3a0dc054f3faad5f7735ff1d0b5c6858e47d264bf99461328609ddd4f6ed72a5f861d2b28a0f0393b1b8a319389c5ffc523e53265f8c38c274d5e3e14b7abe6b9114c5e81bf4f"], 0xfc}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b00100002100010000000000fefffffffc020000000000000000000000000000fc020000000000000000000000000001fffc0000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000034011100fe80000000000000000000000000001164010102000000000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb3c000000000000000a000a00fc020000000000000000000000000001e0000002000000000000000000000000fe880000000000000000000000000101200100000000000000000000000000022b030000043500000a0002000a"], 0x1b0}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40002) writev(r8, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x9, 0x9, 0x0, 0x4800, r5, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="fbff0400", @ANYRES32=r3, @ANYBLOB="000000003db30000185900000200"/24], &(0x7f0000000280)='GPL\x00', 0xc, 0x1000, &(0x7f0000002000)=""/4096, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000440)=[0xffffffffffffffff, r4, r5, r8, r9], &(0x7f0000000480)=[{0x5, 0x1, 0x7, 0xa}], 0x10, 0x101}, 0x94) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c) 5.024668981s ago: executing program 2 (id=3848): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x401, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000005c0)={'comedi_test\x00', [0xa, 0x7fe, 0x1, 0x0, 0x0, 0x80000000, 0x8, 0xb, 0x2000000a, 0xfc, 0x5, 0x8, 0xa, 0x4, 0x3, 0x80, 0x1, 0x1a449, 0x3, 0x40000007, 0x100, 0x2, 0xf27, 0x6, 0x2, 0x0, 0x5, 0x10007, 0x4, 0x10000, 0x8]}) socket$isdn(0x22, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="d3000000000000007b11b800000000008510000002000000850000000500000095003300000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b0300000000006c1d0010047e0c8131a6080c000af32c6e020075f800250002000f00e5aa000017d34460bc24eab556a705251e6182949a36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x1c1202, 0x0) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000540)='user\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)=',$:@^@,\x00\xc51\xe0\xbf\x13/cZk!z\xbb\xad\x83D#S\x14\x05\xce\x9b\xe5\xae\x8f\xd7\xe11I\x04\xd4r\x832\xcf\xf9\x03;$ \x80?0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f00000000c0)={[{@subsystem='cpu'}, {@subsystem='memory'}, {@xattr}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) r3 = socket(0x1, 0x2, 0x0) r4 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_mreqn(r4, 0x84, 0x20, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x11, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f670600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe326c2ed0a432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1b172191d359645fae2d074ea5724ab77ea04fe507938b1213cdd4a92860e59808689382734d24b3123dd40c6d612c8a19948cd257748b1e7324adddbe61d51013f7d6b313c6df7b7b29678d70fc94dcc3e99e2472e78968ed94e7a54988656e8fff6b1d9b9993c71edd5cc10a2bea8d94d751b77fa7c48c712af35a9ffe670e8fa451942f48741119496bc30137e1202aed6bb5cd5c2d0256d049e4a335e2ea5545e5624be2391c37c0a2ae3bbb5b58778b85424bcdb84358359b2cb2782fc0e82f17b12d641ce6a72ab0ac794f878140897703bebe4420115d26675f27598841965fa"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r3}, 0x20) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0) r6 = socket(0x1, 0x803, 0x0) sendto$unix(r6, 0x0, 0x0, 0x8000000, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) 4.9319899s ago: executing program 8 (id=3850): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='GPL\x00'}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$netlink(0x10, 0x3, 0x8000000004) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f00000001c0)={0x28, 0x4, r9, 0x0, &(0x7f000060c000/0x3000)=nil, 0x3000, 0x1}) writev(r7, &(0x7f0000000080)=[{0x0}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000280)={r10, 0x3ff}, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000800)=@newtaction={0x124, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x110, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3f00}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xc8, 0x3, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e1}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x124}}, 0x0) 3.648019976s ago: executing program 8 (id=3851): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc082}, 0xc000) ftruncate(r0, 0x6000000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2b) fanotify_init(0x4, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000000400000000000000000000004000"/85], 0x68) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8}, 0x94) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="180700000000000000000c000000000018320000", @ANYRES32, @ANYBLOB="0000000000000000b703000000001000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x8, 0x801000, 0x8, 0x0, 0x0}}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008000, &(0x7f00000001c0)={0xa, 0x2, 0x20398, @empty, 0xffffffff}, 0x1c) shutdown(0xffffffffffffffff, 0x1) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x2008087, 0x0) 3.550364286s ago: executing program 9 (id=3852): socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) rt_sigprocmask(0x3, &(0x7f0000000000)={[0x9]}, 0x0, 0x8) (async, rerun: 64) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) openat$incfs(0xffffffffffffff9c, 0x0, 0x200000, 0x180) (async) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, 0x0, 0x0) (async) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0xfea7) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) (rerun: 64) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x190, 0x300, 0x140, 0x800, 0x3ff, 0x0, 0x0, 0x0, {0x4, 0x2}, {0xfffffffd, 0xfffffff7}, {0x0, 0x4}, {0x0, 0xfffffffa, 0x8}, 0x1, 0x3f0, 0x5, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x7, 0x0, 0x0, 0xe6, 0x34, 0x100, 0x3, 0xc}) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) eventfd2(0x10000, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x240100) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r5, &(0x7f00000040c0)={0x2020}, 0x2020) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) (async) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(0xffffffffffffffff, 0x3b8b, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xa3f58dc55767b1b9, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) (async) socket$kcm(0x10, 0x2, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) 2.784093707s ago: executing program 9 (id=3853): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000005c0)={r4, 0x6}, 0x8) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) 2.734373804s ago: executing program 9 (id=3854): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x620082, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x161281, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r6, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x2}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={0x0}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b80)=@migrate={0xec, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x9c, 0x11, [{@in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@local, 0x32, 0x3, 0x0, 0x2, 0x2, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @in6=@empty, @in6=@private2, 0x2b, 0x0, 0x0, 0x0, 0x8, 0x8}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x42000) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2adc0, 0x1c1}, 0x18) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) r9 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$binfmt_register(r9, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x9, 0x3a, 'M', 0x3a, 'N', 0x3a, './file0', 0x3a, [0x43, 0x43, 0x46, 0x46, 0x43]}, 0x2e) dup3(r8, 0xffffffffffffffff, 0x0) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x13) ioctl$KVM_IOEVENTFD(r10, 0x4040ae79, &(0x7f0000000040)={0x8000000000000001, 0x0, 0x0, 0xffffffffffffffff, 0xe}) 2.499668493s ago: executing program 8 (id=3855): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9fe3010019"], 0x0, 0x1a}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x2000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f0000000100)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x58}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) 1.98321796s ago: executing program 5 (id=3856): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000001340)=ANY=[], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0xe9, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x10, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 1.29858765s ago: executing program 9 (id=3857): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448d4, &(0x7f00000002c0)={0x4, 0x2, '\x00', 0x0, 0x4}) socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000280), 0x5, 0x204000) ioctl$SG_BLKSECTGET(r4, 0x1267, &(0x7f00000002c0)) openat$userio(0xffffffffffffff9c, &(0x7f0000001540), 0x4000, 0x0) 1.269388463s ago: executing program 3 (id=3858): write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000000), 0x0}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (rerun: 32) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'veth0_to_team\x00', {}, 0x4}) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) (async) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) (async, rerun: 64) ioctl$VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) (async, rerun: 64) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1b}, {0x6, 0x0, 0x7, 0x0, 0x0, 0x200, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x7}}}, 0xb8}}, 0x4004) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000fdfffffffffffffffbffffffffffffff00"/112], 0xb8}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150001000000000000000000e000000200000000000000000000000000000000000003"], 0xb8}}, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1.17572116s ago: executing program 2 (id=3859): newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000001c0), 0x800) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, 0x0, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) syz_emit_ethernet(0x5d, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3f, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @remote, @multicast1=0xe0000300}, @address_request}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@multicast2, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1d48fc3c7b00000000000000000400", 0xf3, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 982.200411ms ago: executing program 8 (id=3860): prlimit64(0x0, 0xe, &(0x7f0000000700)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000200002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000880), 0x0, 0x8001, 0x0, 0x0, 0x66, 0x0, &(0x7f0000000980)="1bdb67822fa83392e4bbaadad3534a99670be0f176381c9e11fb2dc1c0ba331e9217585a08ca8cf3f80c27c71d7e3c7b8c1e92534e6b30287e85cdb7236e904cc2aaa8ebd2fd27ace5fdbbe8c5394b699149dd7ff0ebf52fec3657bf5adefbe01a8138db362b", 0x4, 0x0, 0x6bd}, 0x50) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}}, 0x20}}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20000023896) 176.016197ms ago: executing program 9 (id=3861): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1000000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4800, 0x0, 0x6}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, 0x1e, 0xa01, 0x0, 0x0, {0x8}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x1c}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000002140)={{}, 0x7, 0xff, 0x2}) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f00000002c0)=""/68) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000b32000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x40) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r4, 0x80845663, &(0x7f00000004c0)) madvise(&(0x7f0000735000/0x1000)=nil, 0x1000, 0x65) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r6, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}}, 0x3, 0x3}, &(0x7f0000000040)=0x90) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x50, 0x1, 0x9, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x10001}}]}, 0x50}, 0x1, 0x0, 0x0, 0x48801}, 0x4040090) ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0x10000) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r7, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) r8 = socket(0x10, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x7e, 0x21, 0x1, 0x60, @dev={0xfe, 0x80, '\x00', 0x2a}, @loopback={0x300, 0x460c6}, 0x1, 0x8, 0x25a1, 0x40}}) 0s ago: executing program 3 (id=3862): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) (async) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') fcntl$lock(r0, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x60d3, 0x2, 0xffffffffffffffff}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)='c', 0x1}], 0x1}}], 0x1, 0x20000001) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) (async) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) (async) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x7}, 0x18) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x401, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x40000) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x5e) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e204e22"], 0x0) (async) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): _read_tagged: read failed, block=512, location=512 [ 1090.870002][T18915] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1090.880666][T18915] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1090.890771][T18915] UDF-fs: warning (device nbd9): udf_fill_super: No partition found (1) [ 1091.551280][ T5883] usbhid 6-1:0.0: can't add hid device: -71 [ 1091.574685][ T5883] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1091.699455][T18932] block device autoloading is deprecated and will be removed. [ 1091.714420][ T5883] usb 6-1: USB disconnect, device number 57 [ 1091.723954][ T30] audit: type=1400 audit(1768376075.951:916): avc: denied { append } for pid=18923 comm="syz.9.3327" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1092.198395][ T30] audit: type=1400 audit(1768376076.431:917): avc: denied { read } for pid=18942 comm="syz.5.3332" dev="nsfs" ino=4026533834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1092.221370][ T30] audit: type=1400 audit(1768376076.431:918): avc: denied { open } for pid=18942 comm="syz.5.3332" path="net:[4026533834]" dev="nsfs" ino=4026533834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1092.252090][T18943] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3332'. [ 1092.578797][T18951] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3335'. [ 1092.619341][T18949] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3334'. [ 1092.709685][ T30] audit: type=1400 audit(1768376076.941:919): avc: denied { bind } for pid=18950 comm="syz.7.3335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1092.735991][T18956] overlayfs: failed to clone upperpath [ 1092.902100][ T2984] net_ratelimit: 19 callbacks suppressed [ 1092.902113][ T2984] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1093.035906][ T3002] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1093.384101][ T7468] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1093.602430][ T3002] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1093.617596][ T30] audit: type=1400 audit(1768376077.841:920): avc: denied { read } for pid=18967 comm="syz.5.3341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1093.821546][ T4080] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1093.845606][T18974] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3342'. [ 1093.864412][T18974] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3342'. [ 1093.934041][T18976] 9p: Bad value for 'rfdno' [ 1093.951916][T18976] fuse: Bad value for 'fd' [ 1093.963965][ T2984] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1094.075259][ T3002] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1094.197811][T18987] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3340'. [ 1094.246262][T13555] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1094.254833][ T3002] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1094.526606][T18989] fuse: Unknown parameter 'HŽ' [ 1094.634207][ T7110] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1094.676489][T13555] usb 6-1: config index 0 descriptor too short (expected 65504, got 72) [ 1094.692864][T13555] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1094.756682][ T3002] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1095.358667][T13555] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.450989][T13555] usb 6-1: Product: syz [ 1095.466422][T13555] usb 6-1: Manufacturer: syz [ 1095.485459][T13555] usb 6-1: SerialNumber: syz [ 1095.512041][T13555] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1095.589273][ T30] audit: type=1326 audit(1768376079.821:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19000 comm="syz.6.3351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3217d8f749 code=0x7ffc0000 [ 1095.616059][ T5944] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1095.824712][T19013] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1095.836057][T19013] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1095.851707][T19013] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1095.862852][T19013] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1095.877632][T19013] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1095.888561][T19013] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1095.901629][T19013] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1095.912441][T19013] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1095.923075][T19013] UDF-fs: warning (device nbd9): udf_fill_super: No partition found (1) [ 1096.254535][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1096.268154][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1096.279612][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1096.288540][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1096.298337][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1096.377093][T19017] lo speed is unknown, defaulting to 1000 [ 1096.509290][ T7891] usb 6-1: USB disconnect, device number 58 [ 1096.559038][T19020] overlayfs: missing 'workdir' [ 1096.772649][T19017] chnl_net:caif_netlink_parms(): no params data found [ 1096.813930][T13555] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1096.925312][T19017] bridge0: port 1(bridge_slave_0) entered blocking state [ 1096.941282][T19017] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.959974][T19017] bridge_slave_0: entered allmulticast mode [ 1096.983926][T13555] usb 10-1: Using ep0 maxpacket: 16 [ 1096.994810][T19017] bridge_slave_0: entered promiscuous mode [ 1097.008728][T13555] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.026607][T19017] bridge0: port 2(bridge_slave_1) entered blocking state [ 1097.617170][ T5944] usb 6-1: Service connection timeout for: 256 [ 1097.628001][ T5944] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1097.637005][T13555] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1097.648855][T19017] bridge0: port 2(bridge_slave_1) entered disabled state [ 1097.657430][ T5944] ath9k_htc: Failed to initialize the device [ 1097.664502][T19017] bridge_slave_1: entered allmulticast mode [ 1097.670431][T13555] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1097.681844][ T7891] usb 6-1: ath9k_htc: USB layer deinitialized [ 1097.692040][T19017] bridge_slave_1: entered promiscuous mode [ 1097.698048][T13555] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1097.766630][T13555] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1097.784225][T13555] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1097.794567][T13555] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1097.802660][T13555] usb 10-1: Manufacturer: syz [ 1097.811611][T13555] usb 10-1: config 0 descriptor?? [ 1097.874499][T19017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1097.897995][T19017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1098.089840][T19017] team0: Port device team_slave_0 added [ 1098.100729][T19017] team0: Port device team_slave_1 added [ 1098.126924][T13555] rc_core: IR keymap rc-hauppauge not found [ 1098.137074][T13555] Registered IR keymap rc-empty [ 1098.147301][T13555] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1098.160171][T19017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1098.168548][T19017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1098.196590][T13555] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1098.204452][T19017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1098.217893][T19041] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3361'. [ 1098.239270][T19017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1098.247805][T13555] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1098.261599][T19017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1098.290260][T13555] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input68 [ 1098.305536][T19017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1098.308492][T13555] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1098.324719][ T5827] Bluetooth: hci3: command tx timeout [ 1098.364327][T13555] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1098.394048][T13555] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1098.430531][T13555] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1098.473715][T13555] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1098.504653][T13555] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1098.524139][T13555] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1098.526589][ T4080] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.560612][ T4080] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1098.573920][T13555] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1098.599047][T19017] hsr_slave_0: entered promiscuous mode [ 1098.614613][T13555] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1098.720597][T13555] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1098.736486][T19017] hsr_slave_1: entered promiscuous mode [ 1098.750998][T19017] debugfs: 'hsr0' already exists in 'hsr' [ 1098.757638][T13555] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1098.762936][T19017] Cannot create hsr debugfs directory [ 1098.768309][T13555] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1099.205236][T13555] usb 10-1: USB disconnect, device number 27 [ 1100.356903][ T4080] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.385874][ T4080] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1100.465060][ T5827] Bluetooth: hci3: command tx timeout [ 1100.519694][T19073] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3370'. [ 1100.548342][T19072] netlink: 25 bytes leftover after parsing attributes in process `syz.5.3369'. [ 1100.626304][ T4080] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.644467][ T4080] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1100.787651][ T4080] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.799184][ T4080] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1100.964334][ T60] net_ratelimit: 9 callbacks suppressed [ 1100.964353][ T60] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1101.254892][ T4080] bridge0: port 3(batadv0) entered disabled state [ 1101.262268][T19092] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3375'. [ 1101.275920][ T4080] bridge_slave_1: left allmulticast mode [ 1101.281592][ T4080] bridge_slave_1: left promiscuous mode [ 1101.312005][ T4080] bridge0: port 2(bridge_slave_1) entered disabled state [ 1101.326595][ T4080] bridge_slave_0: left allmulticast mode [ 1101.332564][ T4080] bridge_slave_0: left promiscuous mode [ 1101.338982][ T4080] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.383137][T19086] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3373'. [ 1102.246034][ T30] audit: type=1400 audit(1768376086.481:922): avc: denied { allowed } for pid=19106 comm="syz.9.3381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1102.485900][ T5827] Bluetooth: hci3: command tx timeout [ 1102.499114][ T4080] bond0 (unregistering): left promiscuous mode [ 1102.505996][ T4080] bond_slave_0: left promiscuous mode [ 1102.511450][ T4080] bond_slave_1: left promiscuous mode [ 1102.518381][ T4080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1102.530054][ T4080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1102.540083][ T4080] bond0 (unregistering): Released all slaves [ 1102.641255][ T4080] bond1 (unregistering): Released all slaves [ 1102.652069][ T4080] bond2 (unregistering): Released all slaves [ 1102.662882][ T4080] bond3 (unregistering): Released all slaves [ 1102.674002][T19088] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3374'. [ 1102.714466][ T4207] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1102.931797][ T4080] tipc: Left network mode [ 1102.937076][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1103.088884][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1104.221899][T19126] netlink: 25 bytes leftover after parsing attributes in process `syz.7.3384'. [ 1104.564651][ T5827] Bluetooth: hci3: command tx timeout [ 1104.652917][ T4207] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1104.765214][ T30] audit: type=1400 audit(1768376089.001:923): avc: denied { map } for pid=19134 comm="syz.5.3390" path="/dev/urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 1104.805905][ T4207] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1104.824541][T19141] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3390'. [ 1105.537068][T19148] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.825370][T19148] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.853629][ T6369] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1105.870587][T19158] FAULT_INJECTION: forcing a failure. [ 1105.870587][T19158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1105.932473][T19158] CPU: 0 UID: 0 PID: 19158 Comm: syz.5.3393 Tainted: G L syzkaller #0 PREEMPT(full) [ 1105.932502][T19158] Tainted: [L]=SOFTLOCKUP [ 1105.932507][T19158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1105.932518][T19158] Call Trace: [ 1105.932524][T19158] [ 1105.932531][T19158] dump_stack_lvl+0x16c/0x1f0 [ 1105.932559][T19158] should_fail_ex+0x512/0x640 [ 1105.932588][T19158] strncpy_from_user+0x3b/0x2e0 [ 1105.932614][T19158] getname_flags.part.0+0x8f/0x550 [ 1105.932632][T19158] ? __pfx_ksys_write+0x10/0x10 [ 1105.932655][T19158] getname_flags+0x93/0xf0 [ 1105.932676][T19158] __x64_sys_unlinkat+0xb4/0x130 [ 1105.932701][T19158] do_syscall_64+0xcd/0xf80 [ 1105.932725][T19158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1105.932742][T19158] RIP: 0033:0x7fdc8ad8f749 [ 1105.932756][T19158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1105.932773][T19158] RSP: 002b:00007fdc8bb91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 1105.932790][T19158] RAX: ffffffffffffffda RBX: 00007fdc8afe5fa0 RCX: 00007fdc8ad8f749 [ 1105.932801][T19158] RDX: 0000000000000000 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 1105.932811][T19158] RBP: 00007fdc8bb91090 R08: 0000000000000000 R09: 0000000000000000 [ 1105.932822][T19158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1105.932832][T19158] R13: 00007fdc8afe6038 R14: 00007fdc8afe5fa0 R15: 00007ffc19a9ac08 [ 1105.932855][T19158] [ 1106.065579][T19017] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1106.201838][T19148] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.243850][T19017] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1106.255327][T19163] overlayfs: failed to clone upperpath [ 1106.297323][T19017] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1106.329175][T19017] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1106.402749][T19148] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.420686][ T4080] team0: left promiscuous mode [ 1106.428116][ T4080] team_slave_0: left promiscuous mode [ 1106.461668][ T4080] team_slave_1: left promiscuous mode [ 1106.911770][ T4080] hsr_slave_0: left promiscuous mode [ 1106.924637][ T4080] hsr_slave_1: left promiscuous mode [ 1106.937126][ T4080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1106.953412][ T4080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1106.971731][ T4080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1106.976996][T19172] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3388'. [ 1106.986872][ T4080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1107.021524][ T4080] veth0_macvtap: left promiscuous mode [ 1107.030314][ T4080] veth0_vlan: left promiscuous mode [ 1107.605957][T19174] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3397'. [ 1108.245623][T19183] netlink: 16186 bytes leftover after parsing attributes in process `syz.9.3400'. [ 1108.255525][T19183] netlink: 16186 bytes leftover after parsing attributes in process `syz.9.3400'. [ 1108.743896][ T5917] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1108.934072][ T5917] usb 10-1: Using ep0 maxpacket: 32 [ 1108.974912][ T5917] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1108.996476][ T5917] usb 10-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1109.005893][ T5917] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.014106][ T5917] usb 10-1: Product: syz [ 1109.018474][ T5917] usb 10-1: Manufacturer: syz [ 1109.023165][ T5917] usb 10-1: SerialNumber: syz [ 1109.040398][ T5917] usb 10-1: config 0 descriptor?? [ 1109.265668][ T4080] team0 (unregistering): Port device team_slave_1 removed [ 1109.376400][ T4080] team0 (unregistering): Port device team_slave_0 removed [ 1109.484935][ T5917] gs_usb 10-1:0.0: Couldn't get device config: (err=-121) [ 1109.505072][ T5917] gs_usb 10-1:0.0: probe with driver gs_usb failed with error -121 [ 1110.410065][T19188] netlink: 'syz.9.3401': attribute type 10 has an invalid length. [ 1110.420552][T19188] bond0: option actor_port_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1110.446658][T13650] usb 10-1: USB disconnect, device number 28 [ 1110.788115][T19207] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1110.926428][ T36] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.935365][ T36] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.488639][ T6369] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.516689][ T6369] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.629426][T19017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1111.672247][ T4080] IPVS: stop unused estimator thread 0... [ 1111.704359][ T2984] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1111.725164][T19017] 8021q: adding VLAN 0 to HW filter on device team0 [ 1111.755527][ T2984] bridge0: port 1(bridge_slave_0) entered blocking state [ 1111.762617][ T2984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1111.803877][ T5883] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1111.805132][ T2984] bridge0: port 2(bridge_slave_1) entered blocking state [ 1111.818570][ T2984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1111.893875][ T60] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1112.004783][ T6702] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1112.113481][T19228] netlink: 25 bytes leftover after parsing attributes in process `syz.9.3409'. [ 1112.555676][ T5883] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1112.563593][ T2984] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1112.588050][ T5883] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1112.611489][ T5883] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1112.632254][ T5883] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1112.657006][ T5883] usb 6-1: Manufacturer: syz [ 1112.672569][ T5883] usb 6-1: config 0 descriptor?? [ 1112.730041][ T6048] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1112.762252][T19017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1112.866889][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1113.147866][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1113.356655][ T6702] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1113.430598][T19243] syzkaller0: entered promiscuous mode [ 1113.437370][T19243] syzkaller0: entered allmulticast mode [ 1113.483412][ T7466] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1113.570375][T19017] veth0_vlan: entered promiscuous mode [ 1113.581803][T19246] tipc: Enabling of bearer rejected, failed to enable media [ 1113.596003][T19017] veth1_vlan: entered promiscuous mode [ 1113.623939][ T6048] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1113.670895][T19249] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3412'. [ 1113.686756][T19017] veth0_macvtap: entered promiscuous mode [ 1113.824764][ T5883] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.001C/input/input69 [ 1113.857846][T19017] veth1_macvtap: entered promiscuous mode [ 1114.024607][T19257] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3413'. [ 1114.369909][T19017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1114.455491][ T5883] uclogic 0003:256C:006D.001C: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 1114.457572][T19017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1114.474102][ T5883] usb 6-1: USB disconnect, device number 59 [ 1114.602908][T18472] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.648547][T18472] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.662701][T19260] fido_id[19260]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1114.667113][T18472] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.696027][T18472] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.889274][T18472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1114.910632][T18472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1114.946968][T18472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1114.972182][T18472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1115.084793][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.093802][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.133807][ T30] audit: type=1400 audit(1768376099.371:924): avc: denied { mounton } for pid=19017 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1116.841610][ T6369] net_ratelimit: 8 callbacks suppressed [ 1116.841627][ T6369] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1116.878567][T19282] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3416'. [ 1117.056992][T17836] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1117.150806][T19286] syzkaller0: entered promiscuous mode [ 1117.677031][T19286] syzkaller0: entered allmulticast mode [ 1117.781387][T17836] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1118.005130][T17836] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1118.113529][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1118.223461][ T7468] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1118.343417][ T7468] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1118.463453][ T6702] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1118.598900][T13507] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1118.763530][T13507] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1119.109309][T19311] netlink: 207952 bytes leftover after parsing attributes in process `syz.7.3431'. [ 1119.125652][ T30] audit: type=1400 audit(1768376103.361:925): avc: denied { getopt } for pid=19306 comm="syz.5.3429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1119.258960][ T30] audit: type=1400 audit(1768376103.471:926): avc: denied { map } for pid=19312 comm="syz.6.3432" path="/dev/video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1119.571763][ T30] audit: type=1400 audit(1768376103.501:927): avc: denied { ioctl } for pid=19312 comm="syz.6.3432" path="socket:[68306]" dev="sockfs" ino=68306 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1120.841736][T19330] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3434'. [ 1121.608022][T19337] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3425'. [ 1121.960908][ T4080] net_ratelimit: 14 callbacks suppressed [ 1121.960922][ T4080] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1122.164042][ T6048] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1122.293869][ T7466] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1122.444056][ T2984] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1122.564358][ T2984] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1122.904083][ T2984] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1123.015284][ T6289] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1123.124651][T19348] netlink: 25 bytes leftover after parsing attributes in process `syz.9.3439'. [ 1123.150053][T15626] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1123.623923][ T6289] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1123.674826][T19350] syzkaller0: entered promiscuous mode [ 1123.683664][T19350] syzkaller0: entered allmulticast mode [ 1123.801684][T19345] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3441'. [ 1123.824530][T18472] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1124.371692][T19362] tipc: Started in network mode [ 1124.387060][T19362] tipc: Node identity 5e595291d53c, cluster identity 4711 [ 1124.424911][T19362] tipc: Enabled bearer , priority 0 [ 1124.608141][T19361] tipc: Disabling bearer [ 1125.702233][ T30] audit: type=1400 audit(1768376109.931:928): avc: denied { sqpoll } for pid=19389 comm="syz.9.3454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1126.875787][T19413] kAFS: unable to lookup cell '(,' [ 1126.894132][T19413] netlink: 100 bytes leftover after parsing attributes in process `syz.9.3461'. [ 1126.905963][T19415] tipc: Enabling of bearer rejected, failed to enable media [ 1126.933701][T13555] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 1126.974391][ T30] audit: type=1400 audit(1768376111.211:929): avc: denied { write } for pid=19416 comm="syz.8.3463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1127.055940][T18472] net_ratelimit: 21 callbacks suppressed [ 1127.055953][T18472] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1127.106865][T13555] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1127.209106][T13507] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1127.223472][T13555] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1127.241957][T13555] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1127.260420][T13555] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.295611][T13555] usb 7-1: config 0 descriptor?? [ 1127.340940][T19425] No control pipe specified [ 1127.349167][T13507] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1127.434885][T19428] netlink: 'syz.9.3464': attribute type 10 has an invalid length. [ 1127.466628][T19428] team0: Device veth1_vlan failed to register rx_handler [ 1127.677370][T18472] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1127.967127][T12995] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1128.166848][T13555] cp2112 0003:10C4:EA90.001D: unknown main item tag 0x0 [ 1128.168997][T19408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1128.241040][T13555] cp2112 0003:10C4:EA90.001D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 1128.307310][T19408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1128.477636][T15626] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1128.969780][T13555] cp2112 0003:10C4:EA90.001D: error requesting version [ 1129.010533][T13555] cp2112 0003:10C4:EA90.001D: probe with driver cp2112 failed with error -71 [ 1129.053805][T13555] usb 7-1: USB disconnect, device number 69 [ 1129.093522][ T7468] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1129.749082][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1129.761385][T19436] fido_id[19436]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1129.859075][T19446] lo speed is unknown, defaulting to 1000 [ 1130.203898][ T60] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1130.343509][T15622] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1132.086679][ T7468] net_ratelimit: 12 callbacks suppressed [ 1132.086693][ T7468] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1132.783407][T17836] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1132.923420][T13650] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1133.213939][ T6702] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1133.223544][T13650] usb 7-1: Using ep0 maxpacket: 16 [ 1133.327757][T13650] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1133.744167][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1133.763343][T13650] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1133.785881][T13650] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1133.792753][T13650] usb 7-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1133.839601][T13650] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.853712][ T6702] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1133.880343][T13650] usb 7-1: config 0 descriptor?? [ 1133.952191][T19502] tmpfs: Bad value for 'size' [ 1133.976689][T17836] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1134.076611][T19504] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 1134.263667][ T7468] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1134.353879][ T5883] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1134.546087][ T6702] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1134.703892][ T5883] usb 10-1: Using ep0 maxpacket: 16 [ 1134.956815][ T5883] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1134.977417][ T6369] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1135.472434][ T5883] usb 10-1: config 1 interface 0 altsetting 10 bulk endpoint 0x1 has invalid maxpacket 8 [ 1135.484070][ T5883] usb 10-1: config 1 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1135.497081][ T5883] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1135.532668][ T5883] usb 10-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1135.921134][ T5883] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.048455][T13650] usbhid 7-1:0.0: can't add hid device: -71 [ 1136.063471][ T5883] usb 10-1: Product: 〠[ 1136.068032][ T5883] usb 10-1: Manufacturer: ç£ [ 1136.074742][ T5883] usb 10-1: SerialNumber: 릶欖ë¬å¿¬æ­ªã“Ÿà·¥ã¼ ï´çœ®æµ á¯–ቅ鋒풚ࣨﯧ짌痎鬫钃ä¡ä½‡ï«ŒéŒ—䳩緇憗娩î˜á¨µì‚€ê¿«å„¶ì”æºê¨â¨®î¤¯ê½‡á©‹é¬­ê¸Žç´†áˆ•å˜™î…¸ë½·ä¤–賲삙廳娰堦탔樹䖮ﬖã’໌툎ꊀ᪋⚭á·í‹«ê©¥ë¬‡éšœá“¤æº¾î¬„䯕밭嶽℟ᴌ჆膷î’겼纃웄髆檅Ꭾ໨啸æ²æ€î©‘싾ﬧ頋á¿ï´µê”‰áµ„ɴ䴭ꟼﱚÕቦ嚫瀠䉲ì ã§«çš¯îµå¥¬æ‡¶èˆ¨ï”榊꥓ [ 1136.176287][T19524] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3491'. [ 1136.524170][T13650] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1136.578590][T13650] usb 7-1: USB disconnect, device number 70 [ 1136.592392][T19503] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1136.930700][T19531] netlink: 25 bytes leftover after parsing attributes in process `syz.8.3492'. [ 1137.616737][T18472] net_ratelimit: 7 callbacks suppressed [ 1137.616756][T18472] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1137.974208][ T60] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1138.114766][ T5883] usb 10-1: USB disconnect, device number 29 [ 1138.143378][ T60] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1138.295283][ T7468] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1138.487938][ T4207] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1138.705129][T17836] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1139.013830][ T5883] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1139.094542][T17836] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1139.185346][ T5883] usb 6-1: config index 0 descriptor too short (expected 65504, got 72) [ 1139.263820][T17836] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1139.304182][ T5883] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1139.333989][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.369960][ T5883] usb 6-1: Product: syz [ 1139.383443][T13507] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1139.394049][ T5883] usb 6-1: Manufacturer: syz [ 1139.398677][ T5883] usb 6-1: SerialNumber: syz [ 1139.431427][ T5883] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1139.470744][ T6954] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1139.524564][ T4207] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1139.607672][T19566] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3500'. [ 1140.125812][ T5944] usb 6-1: USB disconnect, device number 60 [ 1140.225288][ T6954] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1140.252255][ T6954] ath9k_htc: Failed to initialize the device [ 1140.280678][ T5944] usb 6-1: ath9k_htc: USB layer deinitialized [ 1140.397206][T16072] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1140.407464][T16072] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1140.417171][T16072] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1140.424937][T16072] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1140.432875][T16072] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1140.471314][T19570] lo speed is unknown, defaulting to 1000 [ 1140.634941][T19574] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 1140.707416][T19576] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3504'. [ 1141.373424][ T5944] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1141.507135][ T30] audit: type=1400 audit(1768376125.741:930): avc: denied { mount } for pid=19590 comm="syz.5.3509" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1141.583065][ T30] audit: type=1400 audit(1768376125.771:931): avc: denied { unmount } for pid=19590 comm="syz.5.3509" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1141.615886][T19597] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3511'. [ 1141.626092][ T5944] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1141.635518][ T5944] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.693978][ T5944] usb 10-1: config 0 descriptor?? [ 1141.776652][ T60] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.852644][ T60] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1141.878437][T13555] IPVS: starting estimator thread 0... [ 1141.908053][ T5944] udl 10-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1141.939367][T19570] chnl_net:caif_netlink_parms(): no params data found [ 1141.984990][T19603] IPVS: using max 52 ests per chain, 124800 per kthread [ 1142.128052][ T60] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.145104][ T60] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1142.160536][ T5944] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 2 [ 1142.192749][ T5944] [drm] Initialized udl on minor 2 [ 1142.305852][T13555] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1142.331871][ T60] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.346095][ T5944] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1142.356961][ T60] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1142.375907][ T5944] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 1142.394502][T13650] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1142.408642][ T5944] usb 10-1: USB disconnect, device number 30 [ 1142.419474][T13650] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 1142.483502][ T5827] Bluetooth: hci5: command tx timeout [ 1142.496863][T13555] usb 6-1: config index 0 descriptor too short (expected 65504, got 72) [ 1142.535843][T13555] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1142.573455][T13555] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.584616][ T60] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.603641][T13555] usb 6-1: Product: syz [ 1142.616064][T13555] usb 6-1: Manufacturer: syz [ 1142.622572][ T60] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1142.644104][T13555] usb 6-1: SerialNumber: syz [ 1142.663619][T13555] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1142.724408][T19570] bridge0: port 1(bridge_slave_0) entered blocking state [ 1142.741841][T13555] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1142.753456][T19570] bridge0: port 1(bridge_slave_0) entered disabled state [ 1142.760654][T19570] bridge_slave_0: entered allmulticast mode [ 1142.779565][T19570] bridge_slave_0: entered promiscuous mode [ 1142.793456][T17836] net_ratelimit: 15 callbacks suppressed [ 1142.793475][T17836] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1142.817273][T19570] bridge0: port 2(bridge_slave_1) entered blocking state [ 1142.832523][T19570] bridge0: port 2(bridge_slave_1) entered disabled state [ 1142.840056][T19570] bridge_slave_1: entered allmulticast mode [ 1142.900308][T19570] bridge_slave_1: entered promiscuous mode [ 1143.014647][T19570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1143.144942][T19570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1143.273009][T19623] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1143.284211][T19623] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1143.296121][T19623] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1143.306698][T19623] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1143.318075][T19623] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1143.328432][T19623] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1143.339681][T19623] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1143.350222][T19623] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1143.360125][T19623] UDF-fs: warning (device nbd9): udf_fill_super: No partition found (1) [ 1143.752893][T19567] usb 6-1: USB disconnect, device number 61 [ 1144.054452][T13555] usb 6-1: Service connection timeout for: 256 [ 1144.066434][T13555] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1144.095123][T13555] ath9k_htc: Failed to initialize the device [ 1144.125129][T19567] usb 6-1: ath9k_htc: USB layer deinitialized [ 1144.240665][T19570] team0: Port device team_slave_0 added [ 1144.530921][T19634] 9p: Bad value for 'rfdno' [ 1144.564082][ T5827] Bluetooth: hci5: command tx timeout [ 1144.803794][T19644] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3523'. [ 1145.062903][ T60] bond3 (unregistering): (slave gretap1): Releasing active interface [ 1145.189685][ T60] dvmrp6 (unregistering): left allmulticast mode [ 1145.536317][ T60] bond2 (unregistering): (slave geneve2): Releasing active interface [ 1146.379621][ T60] bond0 (unregistering): Released all slaves [ 1146.390919][ T60] bond1 (unregistering): Released all slaves [ 1146.511661][ T60] bond2 (unregistering): Released all slaves [ 1146.524299][ T60] bond3 (unregistering): Released all slaves [ 1146.535266][ T60] bond4 (unregistering): Released all slaves [ 1146.546782][ T60] bond5 (unregistering): Released all slaves [ 1146.559250][ T60] bond6 (unregistering): Released all slaves [ 1146.571180][ T60] bond7 (unregistering): Released all slaves [ 1146.585011][T19570] team0: Port device team_slave_1 added [ 1146.653766][ T5827] Bluetooth: hci5: command tx timeout [ 1146.741449][T19570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1146.750123][T19570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1146.789538][T19570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1146.892761][T19570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1146.922329][T19570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1147.000639][T19570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1147.018391][T19680] netlink: 'syz.9.3532': attribute type 1 has an invalid length. [ 1147.695859][ T60] hsr_slave_0: left promiscuous mode [ 1147.707046][ T60] hsr_slave_1: left promiscuous mode [ 1147.740609][ T60] veth0_vlan: left promiscuous mode [ 1147.753563][T13555] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1147.867627][ T60] pimreg3 (unregistering): left allmulticast mode [ 1147.948452][T13555] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1147.983634][T13555] usb 10-1: config 1 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1148.013499][T13555] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1148.034912][T13555] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1148.053464][T13555] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.072373][T13555] usb 10-1: Product: syz [ 1148.081390][T13555] usb 10-1: Manufacturer: syz [ 1148.093332][T13555] usb 10-1: SerialNumber: syz [ 1148.134728][T13555] cdc_mbim 10-1:1.0: skipping garbage [ 1148.140284][T13555] usb 10-1: selecting invalid altsetting 1 [ 1148.723943][ T5827] Bluetooth: hci5: command tx timeout [ 1149.707111][T19570] hsr_slave_0: entered promiscuous mode [ 1149.719005][T19570] hsr_slave_1: entered promiscuous mode [ 1149.765190][ T2984] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1149.811466][T19685] macvlan2: entered promiscuous mode [ 1149.816888][T19685] macvlan2: entered allmulticast mode [ 1149.842602][T19685] bond2: entered promiscuous mode [ 1149.854263][T19685] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1149.881804][T19685] bond2: left promiscuous mode [ 1150.146768][T13555] cdc_mbim 10-1:1.0: bind() failure [ 1150.197396][T13555] usb 10-1: USB disconnect, device number 31 [ 1150.395085][T19728] ptrace attach of ""[19729] was attempted by "./syz-executor exec"[19728] [ 1150.475316][T17836] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1150.663695][ T7468] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1150.665910][ T60] IPVS: stop unused estimator thread 0... [ 1150.803732][T13715] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1150.983682][T13715] usb 10-1: Using ep0 maxpacket: 32 [ 1150.996417][T19752] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3546'. [ 1151.065202][T19753] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3546'. [ 1151.066721][T13715] usb 10-1: config 0 has an invalid interface number: 62 but max is 0 [ 1151.101085][ T6954] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1151.116716][T13715] usb 10-1: config 0 has no interface number 0 [ 1151.142481][T13715] usb 10-1: config 0 interface 62 has no altsetting 0 [ 1151.171353][T13715] usb 10-1: New USB device found, idVendor=0930, idProduct=910d, bcdDevice=59.86 [ 1151.199510][T13715] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.208340][ T60] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1151.236600][T13715] usb 10-1: Product: syz [ 1151.257267][T13715] usb 10-1: Manufacturer: syz [ 1151.277895][ T6954] usb 7-1: config index 0 descriptor too short (expected 65504, got 72) [ 1151.303682][T13715] usb 10-1: SerialNumber: syz [ 1151.316478][ T6954] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1151.331658][T13715] usb 10-1: config 0 descriptor?? [ 1151.374828][ T6702] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1151.413854][ T6954] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.445112][ T6954] usb 7-1: Product: syz [ 1151.449359][ T6954] usb 7-1: Manufacturer: syz [ 1151.513210][ T6954] usb 7-1: SerialNumber: syz [ 1151.580040][ T6954] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1151.661691][ T5916] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1151.883825][ T6702] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1152.114404][ T5827] Bluetooth: hci1: unexpected event for opcode 0x2060 [ 1152.614169][T15626] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1152.725592][ T7468] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1152.884517][ T5916] usb 7-1: Service connection timeout for: 256 [ 1152.906881][T12995] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1152.917053][ T5916] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1152.976795][ T5916] ath9k_htc: Failed to initialize the device [ 1153.025900][ T5916] usb 7-1: ath9k_htc: USB layer deinitialized [ 1153.138410][T19570] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1153.404175][ T4207] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1153.509621][T19570] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1153.576240][T19570] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1153.620710][T19570] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1153.734118][T13555] usb 10-1: USB disconnect, device number 32 [ 1153.851528][T13715] usb 7-1: USB disconnect, device number 71 [ 1154.142854][T19570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1154.278979][T19570] 8021q: adding VLAN 0 to HW filter on device team0 [ 1154.438731][T19570] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1154.450410][T19570] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1154.595298][ T6048] bridge0: port 1(bridge_slave_0) entered blocking state [ 1154.602496][ T6048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1154.665466][ T6048] bridge0: port 2(bridge_slave_1) entered blocking state [ 1154.672646][ T6048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1154.780372][ T30] audit: type=1326 audit(1768376139.011:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19798 comm="syz.5.3552" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc8ad8f749 code=0x0 [ 1154.816115][ T7468] net_ratelimit: 2 callbacks suppressed [ 1154.816132][ T7468] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1154.909297][ T30] audit: type=1400 audit(1768376139.111:933): avc: denied { read } for pid=19798 comm="syz.5.3552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1154.944476][ T60] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1154.981055][ T30] audit: type=1400 audit(1768376139.111:934): avc: denied { write } for pid=19798 comm="syz.5.3552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1155.037812][ T30] audit: type=1400 audit(1768376139.191:935): avc: denied { setopt } for pid=19804 comm="syz.6.3553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1155.086205][ T2984] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1155.113076][T19570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1155.204762][ T2984] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1155.212306][T13650] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1155.356669][ T60] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1155.393380][T13650] usb 10-1: Using ep0 maxpacket: 8 [ 1155.401211][T13650] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1155.414622][T13650] usb 10-1: config 8 has an invalid interface number: 255 but max is 8 [ 1155.448640][T13650] usb 10-1: config 8 has 1 interface, different from the descriptor's value: 9 [ 1155.481491][T13650] usb 10-1: config 8 has no interface number 0 [ 1155.493829][T15626] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1155.505308][T13650] usb 10-1: config 8 interface 255 has no altsetting 0 [ 1155.527150][T13650] usb 10-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice= 0.00 [ 1155.556307][T13650] usb 10-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 1155.578507][T13650] usb 10-1: Product: syz [ 1155.593340][T13650] usb 10-1: Manufacturer: syz [ 1155.598190][T13650] usb 10-1: SerialNumber: syz [ 1155.623351][ T6048] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1155.660487][T19570] veth0_vlan: entered promiscuous mode [ 1155.707794][T19570] veth1_vlan: entered promiscuous mode [ 1155.727830][T19835] netlink: 'syz.5.3556': attribute type 1 has an invalid length. [ 1155.810206][T19837] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1155.822061][T19837] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1155.896688][T13507] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1155.928674][T19570] veth0_macvtap: entered promiscuous mode [ 1155.952537][T19570] veth1_macvtap: entered promiscuous mode [ 1155.991604][T19570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1156.029718][T19570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1156.064815][T13650] catc 10-1:8.255: Can't set altsetting 1. [ 1156.068100][ T6289] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.098137][T13650] catc 10-1:8.255: probe with driver catc failed with error -5 [ 1156.101562][ T6289] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.116510][ T5883] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1156.144413][ T60] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1156.166411][T13650] usb 10-1: USB disconnect, device number 33 [ 1156.167441][ T6289] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.242087][ T6289] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.294549][T19849] fuse: Bad value for 'group_id' [ 1156.299558][T19849] fuse: Bad value for 'group_id' [ 1156.375723][ T5883] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1156.393073][ T5883] usb 6-1: config 1 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1156.419415][ T5883] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1156.521156][ T5883] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1156.632791][T13715] libceph: connect (1)[c::]:6789 error -101 [ 1156.639871][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.654980][T13715] libceph: mon0 (1)[c::]:6789 connect error [ 1156.778025][ T5883] usb 6-1: Product: syz [ 1156.813963][ T7468] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1156.822994][ T5883] usb 6-1: Manufacturer: syz [ 1156.832375][ T5883] usb 6-1: SerialNumber: syz [ 1156.845685][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1156.870802][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1156.886389][ T5883] cdc_mbim 6-1:1.0: skipping garbage [ 1156.900515][ T5883] usb 6-1: selecting invalid altsetting 1 [ 1156.926993][ T6289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1156.937026][ T6289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1157.004329][ T5930] libceph: connect (1)[c::]:6789 error -101 [ 1157.010683][ T5930] libceph: mon0 (1)[c::]:6789 connect error [ 1157.108835][T19853] ceph: No mds server is up or the cluster is laggy [ 1157.505365][T19871] netlink: 'syz.9.3559': attribute type 2 has an invalid length. [ 1157.623703][T19871] netlink: 224 bytes leftover after parsing attributes in process `syz.9.3559'. [ 1157.852520][T19837] bond2: (slave gretap1): making interface the new active one [ 1157.864115][T19837] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1157.865038][ T30] audit: type=1400 audit(1768376142.028:936): avc: denied { read } for pid=19876 comm="syz.8.3562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1158.694715][ T5883] cdc_mbim 6-1:1.0: bind() failure [ 1158.722353][ T5883] usb 6-1: USB disconnect, device number 62 [ 1160.021438][ T4080] net_ratelimit: 14 callbacks suppressed [ 1160.021456][ T4080] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1160.086065][T19905] loop3: detected capacity change from 0 to 1 [ 1160.103793][T19905] Dev loop3: unable to read RDB block 1 [ 1160.111220][T19905] loop3: unable to read partition table [ 1160.145946][T19905] loop3: partition table beyond EOD, truncated [ 1160.150660][T19908] fuse: Bad value for 'group_id' [ 1160.155947][T19905] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1160.161556][T19908] fuse: Bad value for 'group_id' [ 1160.262559][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1160.374327][T19910] SELinux: policydb magic number 0xe47cff8c does not match expected magic number 0xf97cff8c [ 1160.384721][T19910] SELinux: failed to load policy [ 1160.395642][ T4080] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1160.512713][ T4080] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1160.655362][ T4080] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1160.823656][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1160.985209][T15623] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1161.048376][T13650] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1161.134680][ T6048] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1161.180574][T19914] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3575'. [ 1161.282460][T13650] usb 7-1: Using ep0 maxpacket: 8 [ 1161.321679][T13650] usb 7-1: config index 0 descriptor too short (expected 6427, got 27) [ 1161.437765][ T4080] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1161.469376][T13650] usb 7-1: config 0 has an invalid interface number: 21 but max is 0 [ 1161.490377][T13650] usb 7-1: config 0 has no interface number 0 [ 1161.505382][T13650] usb 7-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1161.603058][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1161.659036][T13650] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1161.690053][T13650] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1161.711012][T13650] usb 7-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1161.720318][T13650] usb 7-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 1161.732256][T13650] usb 7-1: Product: syz [ 1161.736873][T13650] usb 7-1: Manufacturer: syz [ 1161.747585][T19925] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3577'. [ 1161.762072][T13650] usb 7-1: config 0 descriptor?? [ 1161.774710][T19926] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3577'. [ 1161.824029][T19925] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 1161.885919][T19925] netlink: 'syz.5.3577': attribute type 1 has an invalid length. [ 1162.385577][T19941] overlay: Unknown parameter 'obj_user' [ 1162.955892][T19963] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3585'. [ 1163.096427][T19971] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3588'. [ 1163.375612][T19979] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1163.386186][T19979] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1163.398942][T19979] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1163.409216][T19979] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1163.420540][T19979] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1163.430535][T19979] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1163.441766][T19979] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1163.451894][T19979] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1163.461738][T19979] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 1163.853621][T13650] usb 7-1: USB disconnect, device number 72 [ 1164.410446][T20007] netlink: 'syz.7.3598': attribute type 1 has an invalid length. [ 1164.447650][T13650] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1164.617416][T13650] usb 6-1: Using ep0 maxpacket: 32 [ 1164.630818][T13650] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1164.649229][T13650] usb 6-1: New USB device strings: Mfr=115, Product=0, SerialNumber=0 [ 1164.666699][T13650] usb 6-1: Manufacturer: syz [ 1164.687029][T20012] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3597'. [ 1164.716040][T13650] usb 6-1: config 0 descriptor?? [ 1164.975545][T13650] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1165.015269][T13650] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1165.043977][T13650] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1165.069471][T13650] usb 6-1: media controller created [ 1165.105218][T13650] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1165.254737][T13650] az6027: usb out operation failed. (-71) [ 1165.266322][T13650] az6027: usb out operation failed. (-71) [ 1165.283287][T13650] stb0899_attach: Driver disabled by Kconfig [ 1165.484908][ T3923] net_ratelimit: 24 callbacks suppressed [ 1165.484941][ T3923] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1165.668581][T13650] az6027: no front-end attached [ 1165.668581][T13650] [ 1165.688916][T13650] az6027: usb out operation failed. (-71) [ 1165.707618][T13650] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1165.715778][T13650] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input71 [ 1165.775538][T13650] dvb-usb: schedule remote query interval to 400 msecs. [ 1165.798070][T13650] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1165.816004][ T7466] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1165.844799][T13650] usb 6-1: USB disconnect, device number 63 [ 1165.943157][ T3923] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1166.034811][T20025] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3602'. [ 1166.067663][T13650] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1166.115800][ T7110] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1166.246160][ T7110] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1166.764640][T20039] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1167.173379][T20044] netlink: 'syz.9.3607': attribute type 1 has an invalid length. [ 1167.370259][T20033] mac80211_hwsim hwsim33 wlan0: entered promiscuous mode [ 1167.427570][ T3923] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1167.772446][ T6954] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1167.841031][T20048] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1167.869633][T20048] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 1167.931533][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1167.967072][ T6954] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1167.976986][T20061] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3612'. [ 1167.981258][ T6954] usb 10-1: config 1 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1167.998551][ T6954] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1168.008111][ T6954] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1168.017790][ T6954] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.025873][ T6954] usb 10-1: Product: syz [ 1168.030847][ T6954] usb 10-1: Manufacturer: syz [ 1168.035637][ T6954] usb 10-1: SerialNumber: syz [ 1168.048257][ T6954] cdc_mbim 10-1:1.0: skipping garbage [ 1168.054217][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1168.054618][ T6954] usb 10-1: selecting invalid altsetting 1 [ 1168.210052][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1168.328227][ T3923] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1168.345451][T20070] tipc: Enabled bearer , priority 0 [ 1168.492038][T20048] bond3: (slave gretap1): making interface the new active one [ 1168.503913][T20048] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 1168.792687][ T6954] cdc_mbim 10-1:1.0: bind() failure [ 1168.799652][ T30] audit: type=1400 audit(1768376152.328:937): avc: denied { read } for pid=20073 comm="syz.5.3617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1168.831358][ T6954] usb 10-1: USB disconnect, device number 34 [ 1168.866046][ T30] audit: type=1326 audit(1768376152.384:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20071 comm="syz.6.3618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53178f749 code=0x7fc00000 [ 1169.535024][ T6954] tipc: Node number set to 2338673297 [ 1169.657446][ T30] audit: type=1326 audit(1768376153.123:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20071 comm="syz.6.3618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc53178f749 code=0x7fc00000 [ 1169.755819][ T30] audit: type=1326 audit(1768376153.123:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20071 comm="syz.6.3618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53178f749 code=0x7fc00000 [ 1170.066743][T20096] netlink: 'syz.9.3624': attribute type 4 has an invalid length. [ 1170.074593][T20096] netlink: 17 bytes leftover after parsing attributes in process `syz.9.3624'. [ 1170.928084][ T7469] net_ratelimit: 12 callbacks suppressed [ 1170.928103][ T7469] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1171.153557][T20101] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3623'. [ 1171.542235][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1171.651854][T20107] IPv4: Oversized IP packet from 127.202.26.0 [ 1171.683022][T19994] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1171.822364][T19994] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1171.849788][ T7891] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 1172.005873][ T7469] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1172.388409][ T7891] usb 7-1: Using ep0 maxpacket: 16 [ 1172.398751][ T7891] usb 7-1: config 0 has an invalid interface number: 156 but max is 0 [ 1172.418969][ T7891] usb 7-1: config 0 has no interface number 0 [ 1172.436462][ T7891] usb 7-1: config 0 interface 156 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1172.449055][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1172.470819][ T7891] usb 7-1: config 0 interface 156 has no altsetting 0 [ 1172.533229][ T7891] usb 7-1: New USB device found, idVendor=1234, idProduct=0002, bcdDevice=c8.36 [ 1172.556069][ T7891] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.580853][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1172.589482][ T7891] usb 7-1: Product: syz [ 1172.600339][ T7891] usb 7-1: Manufacturer: syz [ 1172.613407][ T7891] usb 7-1: SerialNumber: syz [ 1172.640052][ T7891] usb 7-1: config 0 descriptor?? [ 1172.703861][T20099] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1172.713699][T19994] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1172.797954][T20116] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3632'. [ 1172.838988][T20121] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3633'. [ 1172.848135][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1172.956205][ T7891] usbtouchscreen 7-1:0.156: probe with driver usbtouchscreen failed with error -71 [ 1172.991501][ T7891] usb 7-1: USB disconnect, device number 73 [ 1173.232625][T20127] FAULT_INJECTION: forcing a failure. [ 1173.232625][T20127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1173.258587][T20127] CPU: 0 UID: 0 PID: 20127 Comm: syz.9.3635 Tainted: G L syzkaller #0 PREEMPT(full) [ 1173.258616][T20127] Tainted: [L]=SOFTLOCKUP [ 1173.258621][T20127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1173.258631][T20127] Call Trace: [ 1173.258637][T20127] [ 1173.258645][T20127] dump_stack_lvl+0x16c/0x1f0 [ 1173.258672][T20127] should_fail_ex+0x512/0x640 [ 1173.258699][T20127] _copy_from_user+0x2e/0xd0 [ 1173.258724][T20127] ucma_write+0x128/0x330 [ 1173.258745][T20127] ? __pfx_ucma_write+0x10/0x10 [ 1173.258760][T20127] ? bpf_lsm_file_permission+0x9/0x10 [ 1173.258772][T20127] ? security_file_permission+0x71/0x210 [ 1173.258788][T20127] ? rw_verify_area+0xcf/0x6c0 [ 1173.258802][T20127] ? __pfx_ucma_write+0x10/0x10 [ 1173.258816][T20127] vfs_write+0x2a0/0x11d0 [ 1173.258832][T20127] ? __pfx_vfs_write+0x10/0x10 [ 1173.258844][T20127] ? find_held_lock+0x2b/0x80 [ 1173.258862][T20127] ? __fget_files+0x204/0x3c0 [ 1173.258881][T20127] ? __fget_files+0x20e/0x3c0 [ 1173.258894][T20127] ? __kvm_handle_async_pf+0x20/0xa0 [ 1173.258912][T20127] ksys_write+0x1f8/0x250 [ 1173.258925][T20127] ? __pfx_ksys_write+0x10/0x10 [ 1173.258942][T20127] do_syscall_64+0xcd/0xf80 [ 1173.258958][T20127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.258970][T20127] RIP: 0033:0x7ff2f8d8f749 [ 1173.258980][T20127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1173.258991][T20127] RSP: 002b:00007ff2f6ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1173.259002][T20127] RAX: ffffffffffffffda RBX: 00007ff2f8fe6090 RCX: 00007ff2f8d8f749 [ 1173.259009][T20127] RDX: 0000000000000018 RSI: 0000200000000240 RDI: 0000000000000007 [ 1173.259016][T20127] RBP: 00007ff2f6ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1173.259022][T20127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1173.259028][T20127] R13: 00007ff2f8fe6128 R14: 00007ff2f8fe6090 R15: 00007fffaab8aee8 [ 1173.259042][T20127] [ 1176.007172][ T5916] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1176.134898][T20152] batman_adv: batadv0: Adding interface: gretap1 [ 1176.170196][T20152] batman_adv: batadv0: Interface activated: gretap1 [ 1176.204953][ T5916] usb 7-1: Using ep0 maxpacket: 16 [ 1176.232699][ T5916] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1176.299629][ T5916] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1176.343879][ T4080] net_ratelimit: 16 callbacks suppressed [ 1176.343895][ T4080] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1176.357509][ T5916] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1176.430924][ T5916] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1176.491593][ T5916] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.528630][ T60] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1176.590199][ T5916] usb 7-1: config 0 descriptor?? [ 1176.675039][T14440] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1176.803359][ T7110] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1176.963498][ T7110] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1177.033826][T20167] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3645'. [ 1177.488755][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1177.525668][ T5916] usbhid 7-1:0.0: can't add hid device: -71 [ 1177.577241][ T5916] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1177.615913][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1177.641990][ T5916] usb 7-1: USB disconnect, device number 74 [ 1177.754636][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1177.836294][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.842972][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.036274][T19991] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1178.311828][T19997] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1178.450545][T20189] netlink: 'syz.5.3648': attribute type 10 has an invalid length. [ 1178.466366][T20189] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3648'. [ 1178.936489][ T30] audit: type=1400 audit(1768376161.412:941): avc: denied { setopt } for pid=20190 comm="syz.6.3650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1179.090077][T20193] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20003 [ 1179.235757][T20198] syzkaller0: entered promiscuous mode [ 1179.281917][T20198] syzkaller0: entered allmulticast mode [ 1179.799399][T20212] netlink: 'syz.7.3656': attribute type 30 has an invalid length. [ 1179.854682][T20214] netlink: 'syz.7.3656': attribute type 30 has an invalid length. [ 1179.927844][T20213] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3653'. [ 1179.953917][T20215] 9pnet_virtio: no channels available for device syz [ 1181.037594][T20225] 9p: Bad value for 'wfdno' [ 1181.753402][T19994] net_ratelimit: 16 callbacks suppressed [ 1181.753423][T19994] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1181.912543][ T60] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1182.052001][ T7469] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1182.201307][T19994] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1182.445880][ T3002] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1182.632994][T20245] IPVS: stopping backup sync thread 20246 ... [ 1182.644402][T20245] overlayfs: missing 'lowerdir' [ 1182.650712][ T3002] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1182.789200][ T6289] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1182.918099][ T60] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1183.058669][ T60] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1183.092077][T20249] syzkaller0: entered promiscuous mode [ 1183.111608][T20249] syzkaller0: entered allmulticast mode [ 1183.217025][ T3002] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1183.320414][T20255] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3668'. [ 1183.751687][ T5930] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1183.924152][ T5930] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1183.973832][ T5930] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1184.044237][ T5930] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1184.098154][ T5930] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1184.134259][ T5930] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1184.145145][ T5930] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1184.172404][ T5930] usb 10-1: Manufacturer: syz [ 1184.192538][ T5930] usb 10-1: config 0 descriptor?? [ 1184.424693][ T8259] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 1184.454138][ T5930] usbhid 10-1:0.0: can't add hid device: -71 [ 1184.461861][ T5930] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1184.473078][ T5930] usb 10-1: USB disconnect, device number 35 [ 1184.940321][T20275] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5664 sclass=netlink_route_socket pid=20275 comm=syz.5.3674 [ 1185.002903][ T8259] usb 7-1: Using ep0 maxpacket: 16 [ 1185.009486][ T8259] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1185.021248][ T8259] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1185.031409][ T8259] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1185.038339][ T8259] usb 7-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1185.048367][ T8259] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.148118][ T8259] usb 7-1: config 0 descriptor?? [ 1186.600372][ T8259] usbhid 7-1:0.0: can't add hid device: -71 [ 1186.609272][ T8259] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1186.648393][ T8259] usb 7-1: USB disconnect, device number 75 [ 1187.219351][ T4080] net_ratelimit: 25 callbacks suppressed [ 1187.219369][ T4080] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1187.371451][T20317] netlink: 'syz.7.3683': attribute type 21 has an invalid length. [ 1187.515205][ T3434] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1187.848370][ T4080] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1188.273096][ T60] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1188.689585][ T3002] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1188.830574][ T3923] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1188.967818][ T7469] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1189.320641][ T3002] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1189.491628][ T7469] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1189.566723][ T5930] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1189.694812][ T7110] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1189.726769][ T5930] usb 6-1: device descriptor read/64, error -71 [ 1189.983366][ T5930] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1190.123570][ T5930] usb 6-1: device descriptor read/64, error -71 [ 1190.261536][ T5930] usb usb6-port1: attempt power cycle [ 1190.624589][ T5930] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1190.657240][ T5930] usb 6-1: device descriptor read/8, error -71 [ 1190.810511][ T30] audit: type=1326 audit(1768376172.919:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20356 comm="syz.9.3695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2f8d8f749 code=0x7ffc0000 [ 1190.863790][ T30] audit: type=1326 audit(1768376172.919:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20356 comm="syz.9.3695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2f8d8f749 code=0x7ffc0000 [ 1190.913161][ T5930] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1190.921022][ T30] audit: type=1326 audit(1768376172.919:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20356 comm="syz.9.3695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7ff2f8d8f749 code=0x7ffc0000 [ 1190.969592][ T5930] usb 6-1: device descriptor read/8, error -71 [ 1190.980042][ T30] audit: type=1326 audit(1768376172.919:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20356 comm="syz.9.3695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2f8d8f749 code=0x7ffc0000 [ 1191.023917][ T30] audit: type=1326 audit(1768376172.919:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20356 comm="syz.9.3695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2f8d8f749 code=0x7ffc0000 [ 1191.069780][ T30] audit: type=1326 audit(1768376172.966:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20356 comm="syz.9.3695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7ff2f8d8f749 code=0x7ffc0000 [ 1191.098740][ T30] audit: type=1326 audit(1768376172.966:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20356 comm="syz.9.3695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2f8d8f749 code=0x7ffc0000 [ 1191.102293][ T5930] usb usb6-port1: unable to enumerate USB device [ 1191.143945][ T30] audit: type=1326 audit(1768376173.012:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20356 comm="syz.9.3695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2f8d8f749 code=0x7ffc0000 [ 1191.201737][T19994] wlan0: Trigger new scan to find an IBSS to join [ 1192.143237][T20360] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3696'. [ 1192.553775][T20372] ubi31: attaching mtd0 [ 1192.625509][ T7110] net_ratelimit: 24 callbacks suppressed [ 1192.625527][ T7110] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1192.644114][T20372] ubi31: scanning is finished [ 1192.654002][T20372] ubi31: empty MTD device detected [ 1192.772771][ T7110] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1192.901472][T14440] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1193.082794][T14440] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1193.226567][T14440] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1193.351352][ T3434] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1193.489449][ T4080] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1193.582205][T20372] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 1193.607037][ T7469] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1193.724575][ T7110] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1193.802796][T20381] fuse: Unknown parameter 'grou00000000000000000000' [ 1193.863508][ T7469] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1194.810394][ T30] audit: type=1400 audit(1768376176.652:950): avc: denied { recv } for pid=19570 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.134 dest=54576 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1195.196694][T20398] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3706'. [ 1195.966699][T20404] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1195.977337][T20404] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1195.990273][T20404] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1196.000696][T20404] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1196.011844][T20404] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1196.021772][T20404] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1196.033010][T20404] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1196.042920][T20404] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1196.052507][T20404] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 1196.503345][T19991] wlan0: Trigger new scan to find an IBSS to join [ 1196.902811][T20414] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3709'. [ 1196.920746][ T30] audit: type=1400 audit(1768376178.616:951): avc: denied { create } for pid=20405 comm="syz.8.3709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1196.954090][ T30] audit: type=1400 audit(1768376178.616:952): avc: denied { write } for pid=20405 comm="syz.8.3709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1196.975612][ T30] audit: type=1400 audit(1768376178.616:953): avc: denied { nlmsg_write } for pid=20405 comm="syz.8.3709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1197.908936][T20421] usb usb9: usbfs: process 20421 (syz.9.3708) did not claim interface 0 before use [ 1198.061258][ T3923] net_ratelimit: 25 callbacks suppressed [ 1198.061276][ T3923] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1198.203440][T13507] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1198.321034][T13507] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1198.438496][ T60] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1198.446277][ T3923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1198.490337][T20423] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3711'. [ 1198.577062][ T6289] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1198.748442][ T3434] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1198.893171][ T60] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1199.069521][ T3434] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1199.247343][ T3434] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1199.459814][ T3002] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1199.718840][T20434] 9p: Bad value for 'wfdno' [ 1199.864030][T20439] fuse: Unknown parameter 'grou00000000000000000000' [ 1201.138885][T20456] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3718'. [ 1201.463184][ T8259] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1202.309740][ T8259] usb 10-1: Using ep0 maxpacket: 16 [ 1202.316987][ T8259] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1202.328714][ T8259] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1202.339901][ T8259] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1202.346634][ T8259] usb 10-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1202.414031][ T8259] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.473392][ T8259] usb 10-1: config 0 descriptor?? [ 1202.835565][T20468] sctp: [Deprecated]: syz.5.3723 (pid 20468) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1202.835565][T20468] Use struct sctp_sack_info instead [ 1203.465967][T14440] net_ratelimit: 27 callbacks suppressed [ 1203.466057][T14440] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1203.826280][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1203.886415][ T8259] usbhid 10-1:0.0: can't add hid device: -71 [ 1203.897729][ T8259] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1203.974186][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1204.015280][ T8259] usb 10-1: USB disconnect, device number 36 [ 1204.136016][ T2984] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1204.209770][T20490] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3727'. [ 1204.244017][T16072] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1204.259138][T16072] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1204.268634][T16072] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1204.276515][T20490] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3727'. [ 1204.298235][T16072] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1204.306761][T14440] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1204.308585][T16072] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1204.377591][T20491] lo speed is unknown, defaulting to 1000 [ 1204.480796][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1205.162055][T19997] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1205.220601][T20491] chnl_net:caif_netlink_parms(): no params data found [ 1205.338590][ T5827] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1205.349558][ T5827] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1205.359860][ T5827] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1205.370145][ T5827] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1205.378626][ T5827] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1205.566634][T20512] comedi comedi1: comedi_config --init_data is deprecated [ 1205.617935][T20512] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20512 comm=syz.9.3731 [ 1205.630889][T20491] bridge0: port 1(bridge_slave_0) entered blocking state [ 1205.631006][T20491] bridge0: port 1(bridge_slave_0) entered disabled state [ 1205.657136][T20491] bridge_slave_0: entered allmulticast mode [ 1205.698319][T20491] bridge_slave_0: entered promiscuous mode [ 1205.738876][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1205.759696][T20491] bridge0: port 2(bridge_slave_1) entered blocking state [ 1205.809746][T20491] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.912456][T20491] bridge_slave_1: entered allmulticast mode [ 1205.919211][T20491] bridge_slave_1: entered promiscuous mode [ 1206.445048][T15626] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1206.508588][ T5827] Bluetooth: hci2: command tx timeout [ 1206.716036][ T6289] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.743908][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1206.824093][ T6289] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.871449][T20507] lo speed is unknown, defaulting to 1000 [ 1207.047718][T20491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1207.073754][T20491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1207.158916][T20533] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3733'. [ 1207.205041][ T6289] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.330100][T20491] team0: Port device team_slave_0 added [ 1207.482962][ T6289] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.521094][T20491] team0: Port device team_slave_1 added [ 1207.664395][ T5827] Bluetooth: hci6: command tx timeout [ 1208.137720][T20491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1208.171135][T20491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1208.254950][T20491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1208.369834][T20491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1208.376793][T20491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1208.383405][T20540] netlink: 'syz.5.3737': attribute type 1 has an invalid length. [ 1208.483304][T20491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1208.554883][T20541] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1208.583573][T20541] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 1208.732153][ T5827] Bluetooth: hci2: command tx timeout [ 1208.838756][T13555] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1208.897542][T20491] hsr_slave_0: entered promiscuous mode [ 1208.920724][T20491] hsr_slave_1: entered promiscuous mode [ 1208.933988][T20491] debugfs: 'hsr0' already exists in 'hsr' [ 1208.955042][T20491] Cannot create hsr debugfs directory [ 1208.961260][T20507] chnl_net:caif_netlink_parms(): no params data found [ 1209.000656][T13555] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1209.023207][T13555] usb 6-1: config 1 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1209.069662][T13555] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1209.080368][ T6289] bridge_slave_1: left allmulticast mode [ 1209.089678][ T6289] bridge_slave_1: left promiscuous mode [ 1209.091439][T13555] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1209.106919][ T6289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.122269][T13555] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.136735][ T6289] bridge_slave_0: left allmulticast mode [ 1209.141318][T13555] usb 6-1: Product: syz [ 1209.146379][ T6289] bridge_slave_0: left promiscuous mode [ 1209.147190][T13555] usb 6-1: Manufacturer: syz [ 1209.159992][ T6289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.165605][T13555] usb 6-1: SerialNumber: syz [ 1209.175110][T20558] overlayfs: failed to clone upperpath [ 1209.176027][ T6289] batman_adv: batadv0: Interface deactivated: gretap1 [ 1209.184667][T13555] cdc_mbim 6-1:1.0: skipping garbage [ 1209.193996][T13555] usb 6-1: selecting invalid altsetting 1 [ 1209.440447][ T30] audit: type=1400 audit(1768376190.348:954): avc: denied { node_bind } for pid=20564 comm="syz.8.3745" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1209.794038][ T6289] batman_adv: batadv0: Removing interface: gretap1 [ 1209.844011][ T5827] Bluetooth: hci6: command tx timeout [ 1210.071282][ T6289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1210.081726][ T6289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1210.092962][ T6289] bond0 (unregistering): Released all slaves [ 1210.145663][T13555] cdc_mbim 6-1:1.0: bind() failure [ 1210.163010][T13555] usb 6-1: USB disconnect, device number 68 [ 1210.273826][T20571] tipc: Enabled bearer , priority 0 [ 1210.353686][T20507] bridge0: port 1(bridge_slave_0) entered blocking state [ 1210.365818][T20507] bridge0: port 1(bridge_slave_0) entered disabled state [ 1210.375693][T20507] bridge_slave_0: entered allmulticast mode [ 1210.383333][T20507] bridge_slave_0: entered promiscuous mode [ 1210.457672][T20507] bridge0: port 2(bridge_slave_1) entered blocking state [ 1210.473746][T20507] bridge0: port 2(bridge_slave_1) entered disabled state [ 1210.481517][T20507] bridge_slave_1: entered allmulticast mode [ 1210.489066][T20507] bridge_slave_1: entered promiscuous mode [ 1210.497321][T20571] tipc: Resetting bearer [ 1210.551760][T20570] tipc: Disabling bearer [ 1210.639556][ T6289] hsr_slave_0: left promiscuous mode [ 1210.647053][ T6289] hsr_slave_1: left promiscuous mode [ 1210.652727][ T6289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1210.663080][ T6289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1210.675966][ T6289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1210.689927][ T6289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1210.719515][ T6289] veth1_macvtap: left promiscuous mode [ 1210.730438][ T6289] veth0_macvtap: left promiscuous mode [ 1210.736911][ T6289] veth1_vlan: left promiscuous mode [ 1210.742458][ T6289] veth0_vlan: left promiscuous mode [ 1210.955969][ T5827] Bluetooth: hci2: command tx timeout [ 1212.069032][ T5827] Bluetooth: hci6: command tx timeout [ 1213.128547][ T6289] team0 (unregistering): Port device team_slave_1 removed [ 1213.179546][ T5827] Bluetooth: hci2: command tx timeout [ 1213.213727][ T6289] team0 (unregistering): Port device team_slave_0 removed [ 1214.183759][ T5916] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1214.290724][ T5827] Bluetooth: hci6: command tx timeout [ 1214.354904][ T5916] usb 6-1: Using ep0 maxpacket: 16 [ 1214.361796][ T5916] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1214.379099][ T5916] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1214.384993][T20507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1214.394782][ T5916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.406583][ T5916] usb 6-1: Product: syz [ 1214.412377][ T5916] usb 6-1: Manufacturer: syz [ 1214.417176][ T5916] usb 6-1: SerialNumber: syz [ 1214.558246][ T2984] net_ratelimit: 2 callbacks suppressed [ 1214.558262][ T2984] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1214.581399][T20507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1214.773869][ T5916] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1214.921815][ T5916] usb 6-1: USB disconnect, device number 69 [ 1214.922417][T20507] team0: Port device team_slave_0 added [ 1214.991412][T20454] udevd[20454]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1215.046757][T20507] team0: Port device team_slave_1 added [ 1215.202212][T20507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1215.210281][T20507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1215.243498][T20507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1215.268985][T20507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1215.283882][T20507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1215.341117][T20507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1215.682685][ T6289] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.755242][T20507] hsr_slave_0: entered promiscuous mode [ 1215.772451][T20507] hsr_slave_1: entered promiscuous mode [ 1215.944235][ T6289] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.045274][ T6289] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.215535][ T6289] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.253986][T20659] FAULT_INJECTION: forcing a failure. [ 1216.253986][T20659] name failslab, interval 1, probability 0, space 0, times 0 [ 1216.282453][T20491] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1216.289247][T20659] CPU: 0 UID: 0 PID: 20659 Comm: syz.9.3765 Tainted: G L syzkaller #0 PREEMPT(full) [ 1216.289275][T20659] Tainted: [L]=SOFTLOCKUP [ 1216.289281][T20659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1216.289290][T20659] Call Trace: [ 1216.289297][T20659] [ 1216.289303][T20659] dump_stack_lvl+0x16c/0x1f0 [ 1216.289329][T20659] should_fail_ex+0x512/0x640 [ 1216.289354][T20659] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 1216.289374][T20659] should_failslab+0xc2/0x120 [ 1216.289396][T20659] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 1216.289412][T20659] ? __d_lookup+0x25c/0x4a0 [ 1216.289432][T20659] ? __d_alloc+0x35/0xa80 [ 1216.289450][T20659] ? __d_alloc+0x35/0xa80 [ 1216.289462][T20659] __d_alloc+0x35/0xa80 [ 1216.289479][T20659] d_alloc+0x4a/0x1e0 [ 1216.289496][T20659] lookup_one_qstr_excl+0x175/0x250 [ 1216.289512][T20659] ? mnt_want_write+0x161/0x450 [ 1216.289536][T20659] do_rmdir+0x31c/0x560 [ 1216.289559][T20659] ? __pfx_do_rmdir+0x10/0x10 [ 1216.289585][T20659] ? strncpy_from_user+0x203/0x2e0 [ 1216.289610][T20659] ? getname_flags.part.0+0x1c5/0x550 [ 1216.289626][T20659] ? __pfx_ksys_write+0x10/0x10 [ 1216.289649][T20659] __x64_sys_unlinkat+0xef/0x130 [ 1216.289672][T20659] do_syscall_64+0xcd/0xf80 [ 1216.289694][T20659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1216.289711][T20659] RIP: 0033:0x7ff2f8d8f749 [ 1216.289726][T20659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1216.289741][T20659] RSP: 002b:00007ff2f9b5c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 1216.289757][T20659] RAX: ffffffffffffffda RBX: 00007ff2f8fe5fa0 RCX: 00007ff2f8d8f749 [ 1216.289768][T20659] RDX: 0000000000000200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1216.289784][T20659] RBP: 00007ff2f9b5c090 R08: 0000000000000000 R09: 0000000000000000 [ 1216.289794][T20659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1216.289803][T20659] R13: 00007ff2f8fe6038 R14: 00007ff2f8fe5fa0 R15: 00007fffaab8aee8 [ 1216.289829][T20659] [ 1216.546523][T20491] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1216.570537][ T60] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1216.586638][T20491] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1216.609489][T20491] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1216.958221][T20675] netlink: 'syz.5.3768': attribute type 1 has an invalid length. [ 1216.983282][T20673] netlink: 2 bytes leftover after parsing attributes in process `syz.8.3767'. [ 1217.004099][ T30] audit: type=1400 audit(1768376197.411:955): avc: denied { sys_admin } for pid=20672 comm="syz.8.3767" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1217.260288][ T6289] bridge_slave_1: left allmulticast mode [ 1217.278709][ T6289] bridge_slave_1: left promiscuous mode [ 1217.288721][ T6289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.296174][T13555] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1217.319767][ T6289] bridge_slave_0: left allmulticast mode [ 1217.332125][ T6289] bridge_slave_0: left promiscuous mode [ 1217.347833][ T6289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.477886][T13555] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1217.499415][T13555] usb 6-1: config 1 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1217.532949][T13555] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1217.552822][T13555] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1217.585651][T13555] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.597127][T13555] usb 6-1: Product: syz [ 1217.601928][T13555] usb 6-1: Manufacturer: syz [ 1217.635893][T13555] usb 6-1: SerialNumber: syz [ 1217.664370][T13555] cdc_mbim 6-1:1.0: skipping garbage [ 1217.700798][T13555] usb 6-1: selecting invalid altsetting 1 [ 1218.764521][ T6289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1218.792143][ T6289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1218.818987][ T6289] bond0 (unregistering): Released all slaves [ 1219.064138][ T5827] Bluetooth: hci0: unexpected event for opcode 0x1001 [ 1219.286999][T20675] macvlan2: entered promiscuous mode [ 1219.292350][T20675] macvlan2: entered allmulticast mode [ 1219.298899][T20675] bond4: entered promiscuous mode [ 1219.305194][T20675] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1219.313289][T20675] bond4: left promiscuous mode [ 1219.426685][ T6289] tipc: Disabling bearer [ 1219.435875][T13555] cdc_mbim 6-1:1.0: bind() failure [ 1219.450359][ T6289] tipc: Left network mode [ 1219.450373][T20710] lo: entered promiscuous mode [ 1219.462191][T13555] usb 6-1: USB disconnect, device number 70 [ 1219.476068][T20710] tunl0: entered promiscuous mode [ 1219.483531][T20710] gre0: entered promiscuous mode [ 1219.519567][T20710] gretap0: entered promiscuous mode [ 1219.526193][T20710] erspan0: entered promiscuous mode [ 1219.535166][T20710] ip_vti0: entered promiscuous mode [ 1219.542387][T20710] ip6_vti0: entered promiscuous mode [ 1219.549064][T20710] sit0: entered promiscuous mode [ 1219.559148][T20710] ip6tnl0: entered promiscuous mode [ 1219.568250][T20710] ip6gre0: entered promiscuous mode [ 1219.576779][T20710] syz_tun: entered promiscuous mode [ 1219.584386][T20710] ip6gretap0: entered promiscuous mode [ 1219.596500][T20710] bridge0: port 3(batadv0) entered blocking state [ 1219.603107][T20710] bridge0: port 3(batadv0) entered forwarding state [ 1219.609864][T20710] bridge0: port 2(bridge_slave_1) entered blocking state [ 1219.617016][T20710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1219.624420][T20710] bridge0: port 1(bridge_slave_0) entered blocking state [ 1219.631505][T20710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1219.646986][T20710] bridge0: entered promiscuous mode [ 1219.653575][T20710] vcan0: entered promiscuous mode [ 1219.659521][T20710] bond0: entered promiscuous mode [ 1219.667063][T20710] bond_slave_0: entered promiscuous mode [ 1219.672987][T20710] bond_slave_1: entered promiscuous mode [ 1219.681090][T20710] team0: entered promiscuous mode [ 1219.686262][T20710] team_slave_0: entered promiscuous mode [ 1219.692770][T20710] team_slave_1: entered promiscuous mode [ 1219.700192][T20710] dummy0: entered promiscuous mode [ 1219.709266][T20710] nlmon0: entered promiscuous mode [ 1219.716211][T20710] caif0: entered promiscuous mode [ 1219.721913][T20710] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1219.792497][T20713] --map-set only usable from mangle table [ 1219.998915][ T3434] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1220.192201][ T6289] hsr_slave_0: left promiscuous mode [ 1220.205669][ T6289] hsr_slave_1: left promiscuous mode [ 1220.222333][ T6289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1220.236380][ T30] audit: type=1400 audit(1768376200.433:956): avc: denied { setcheckreqprot } for pid=20718 comm="syz.5.3777" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1220.242006][ T6289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1220.273889][ T6289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1220.282365][ T6289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1220.317515][ T6289] veth1_macvtap: left promiscuous mode [ 1220.324306][ T6289] veth0_macvtap: left promiscuous mode [ 1220.330911][ T6289] veth1_vlan: left promiscuous mode [ 1220.336544][ T6289] veth0_vlan: left promiscuous mode [ 1221.437721][ T6289] team0 (unregistering): Port device team_slave_1 removed [ 1221.592680][ T6289] team0 (unregistering): Port device team_slave_0 removed [ 1222.948670][T20746] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3781'. [ 1222.957575][T20746] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3781'. [ 1223.541245][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1223.639039][T20749] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3783'. [ 1223.713104][T20491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1223.802848][T20491] 8021q: adding VLAN 0 to HW filter on device team0 [ 1223.836668][ T60] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1224.031723][T13507] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1224.070517][T13507] bridge0: port 1(bridge_slave_0) entered blocking state [ 1224.077700][T13507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1224.333286][T20507] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1224.417566][T20507] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1224.441409][T20507] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1224.485286][T13507] bridge0: port 2(bridge_slave_1) entered blocking state [ 1224.492401][T13507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1224.531603][T20507] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1224.658899][ T60] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1224.688553][ T6289] IPVS: stop unused estimator thread 0... [ 1225.110036][T20796] tipc: Enabling of bearer rejected, failed to enable media [ 1225.131439][T19994] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1225.258925][T19997] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1225.825123][ T60] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1225.898415][T20811] syzkaller0: entered promiscuous mode [ 1225.914809][T20811] syzkaller0: entered allmulticast mode [ 1226.076348][T20822] fuse: Unknown parameter 'group_id00000000000000000000' [ 1226.175013][T20507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1226.245286][T20491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1226.271859][T20507] 8021q: adding VLAN 0 to HW filter on device team0 [ 1226.304107][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1226.311293][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1226.343126][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1226.350284][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1226.500868][T20491] veth0_vlan: entered promiscuous mode [ 1226.544265][T20491] veth1_vlan: entered promiscuous mode [ 1226.623612][T20491] veth0_macvtap: entered promiscuous mode [ 1226.636927][T20491] veth1_macvtap: entered promiscuous mode [ 1226.653046][T20838] syz_tun: entered allmulticast mode [ 1226.693324][T20491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1226.738908][T20824] syz_tun: left allmulticast mode [ 1226.761969][T20491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1226.801719][ T7466] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.843934][ T7466] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.894427][ T7466] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.937693][ T7466] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.337293][ T4080] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1227.452576][T20864] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.3798'. [ 1227.928020][T20507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1228.058543][ T4080] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1228.207751][ T3434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1228.216263][ T7466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1228.224361][ T7469] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1228.238764][ T3434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1228.250679][ T7466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1228.270769][T20877] tipc: Started in network mode [ 1228.288709][T20877] tipc: Node identity 2ea681424402, cluster identity 4711 [ 1228.296843][T20877] tipc: Enabled bearer , priority 0 [ 1229.012064][T20871] syzkaller0: entered promiscuous mode [ 1229.032704][T20871] syzkaller0: entered allmulticast mode [ 1229.052474][ T4080] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1229.313413][T20871] tipc: Resetting bearer [ 1229.448824][T20869] tipc: Resetting bearer [ 1229.668843][T20869] tipc: Disabling bearer [ 1229.804422][ T60] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1229.826690][T13650] tipc: Node number set to 1789165890 [ 1229.851065][T20891] netlink: 9 bytes leftover after parsing attributes in process `syz.8.3805'. [ 1229.869042][T20891] netlink: 9 bytes leftover after parsing attributes in process `syz.8.3805'. [ 1230.010990][T20507] veth0_vlan: entered promiscuous mode [ 1230.116620][T20507] veth1_vlan: entered promiscuous mode [ 1230.139291][T20902] fuse: Unknown parameter '0x0000000000000003' [ 1230.239763][T20507] veth0_macvtap: entered promiscuous mode [ 1230.251602][ T7466] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1230.265782][T20507] veth1_macvtap: entered promiscuous mode [ 1230.316993][T20908] lo speed is unknown, defaulting to 1000 [ 1230.318474][T20507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1230.400563][T20507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1230.416223][T20914] fuse: Bad value for 'rootmode' [ 1230.421521][T13555] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1230.481491][T19994] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.492228][T19994] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.513764][T19994] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.518623][T20917] netlink: 'syz.8.3810': attribute type 1 has an invalid length. [ 1230.525892][T19994] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.593187][ T5923] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1230.597345][ T60] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1230.613542][T13555] usb 4-1: Using ep0 maxpacket: 16 [ 1230.640784][T13555] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1230.684238][T13555] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1230.699540][T20917] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1230.728674][T13555] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1230.738807][T20917] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 1230.748763][T13555] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1230.759790][T13555] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.792196][T13555] usb 4-1: config 0 descriptor?? [ 1230.814723][ T5923] usb 6-1: config 0 has no interfaces? [ 1230.821687][T20929] macvlan2: entered promiscuous mode [ 1230.828644][T20929] macvlan2: entered allmulticast mode [ 1230.835897][ T5923] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1230.850522][T20929] bond9: entered promiscuous mode [ 1230.867062][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.886519][T20929] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1230.888664][ T5923] usb 6-1: Product: syz [ 1230.922616][ T5923] usb 6-1: Manufacturer: syz [ 1230.927246][ T5923] usb 6-1: SerialNumber: syz [ 1230.940188][T20929] bond9: left promiscuous mode [ 1230.952350][T20932] overlayfs: missing 'lowerdir' [ 1230.971843][ T5923] usb 6-1: config 0 descriptor?? [ 1231.012155][ T7466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1231.034309][ T7466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1231.129422][ T7466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1231.138338][ T7466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1231.147405][T19997] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1231.247112][ T7891] usb 6-1: USB disconnect, device number 71 [ 1231.270234][T20945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3730'. [ 1231.279432][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1231.414671][ T3434] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1231.607206][ T7466] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1232.128496][ T3002] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1232.430033][ T7466] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1232.609190][T20970] fuse: Unknown parameter '0x0000000000000003' [ 1232.626946][ T6289] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1232.718901][T19567] usb 6-1: new full-speed USB device number 72 using dummy_hcd [ 1232.784816][ T6289] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1232.912769][T19567] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1232.924609][ T3434] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1232.955515][T19567] usb 6-1: config 0 has no interface number 0 [ 1232.979199][T19567] usb 6-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1233.025619][T19567] usb 6-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1233.066409][T19567] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1233.084865][ T4207] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1233.095781][T20990] fuse: Unknown parameter 'u00000000000000000000' [ 1233.108576][T19567] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.142495][T19567] usb 6-1: Product: syz [ 1233.181978][T19567] usb 6-1: Manufacturer: syz [ 1233.233586][ T4207] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1233.258849][T19567] usb 6-1: SerialNumber: syz [ 1233.452614][T19567] usb 6-1: config 0 descriptor?? [ 1233.497210][T20963] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1233.527375][T20963] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1233.561964][T19567] smsc95xx v2.0.0 [ 1233.728677][T13555] usbhid 4-1:0.0: can't add hid device: -71 [ 1233.745663][ T5916] usb 10-1: new full-speed USB device number 37 using dummy_hcd [ 1233.773806][T13555] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1233.799928][T20963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1233.810795][T13555] usb 4-1: USB disconnect, device number 6 [ 1233.843061][T20963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1233.888692][T20963] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1233.907656][T20963] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1233.926192][ T30] audit: type=1400 audit(1768376213.249:957): avc: denied { ioctl } for pid=21002 comm="syz.3.3825" path="socket:[76500]" dev="sockfs" ino=76500 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1233.985316][T21006] netlink: 'syz.2.3826': attribute type 1 has an invalid length. [ 1233.996973][ T5916] usb 10-1: config 16 has an invalid interface number: 168 but max is 0 [ 1234.020820][ T5916] usb 10-1: config 16 has no interface number 0 [ 1234.033894][ T5916] usb 10-1: config 16 interface 168 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1234.046323][ T5916] usb 10-1: New USB device found, idVendor=0586, idProduct=0102, bcdDevice=14.0a [ 1234.056392][ T5916] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.104390][ T5916] HFC-S_USB 10-1:16.168: probe with driver HFC-S_USB failed with error -5 [ 1234.149352][T19567] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1234.202177][T19567] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1234.327962][ T5916] usb 10-1: USB disconnect, device number 37 [ 1234.468874][T19567] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1234.507690][T19567] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 1234.522130][T19567] usb 6-1: USB disconnect, device number 72 [ 1234.980053][T21046] input: syz1 as /devices/virtual/input/input73 [ 1235.042065][T21048] tipc: Enabled bearer , priority 0 [ 1235.076526][T21048] syzkaller0: entered promiscuous mode [ 1235.092153][T21048] syzkaller0: entered allmulticast mode [ 1235.147614][T21048] tipc: Resetting bearer [ 1235.763565][T21047] tipc: Resetting bearer [ 1235.809827][T21059] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3834'. [ 1235.827754][T21047] tipc: Disabling bearer [ 1235.849917][T21059] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3834'. [ 1236.546146][T21084] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1236.556916][T21084] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1236.569990][T21084] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1236.580490][T21084] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1236.592764][T21084] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1236.603466][T21084] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1236.615588][T21084] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1236.626019][T21084] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1236.636069][T21084] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 1236.787445][T19994] net_ratelimit: 17 callbacks suppressed [ 1236.787459][T19994] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1236.942450][ T7466] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1236.970408][ T30] audit: type=1400 audit(1768376216.093:958): avc: denied { bind } for pid=21069 comm="syz.9.3836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1237.049362][T21094] ptrace attach of "./syz-executor exec"[20491] was attempted by "./syz-executor exec"[21094] [ 1237.064226][T21094] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3838'. [ 1237.466814][ T30] audit: type=1400 audit(1768376216.561:959): avc: denied { accept } for pid=21069 comm="syz.9.3836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1237.639255][T19994] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1238.598232][ T4080] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1238.733540][ T7466] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1238.864981][ T7466] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1239.014674][T19995] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1239.157576][ T7466] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1239.249552][ T5923] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1239.255907][T21132] lo speed is unknown, defaulting to 1000 [ 1239.258922][T21134] tipc: Enabled bearer , priority 0 [ 1239.412318][T21134] syzkaller0: entered promiscuous mode [ 1239.428095][T21134] syzkaller0: entered allmulticast mode [ 1239.447312][T21134] tipc: Resetting bearer [ 1239.488135][T21133] tipc: Resetting bearer [ 1239.497294][ T5923] usb 6-1: config index 0 descriptor too short (expected 65504, got 72) [ 1239.508144][ T5923] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1239.517601][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.525675][ T5923] usb 6-1: Product: syz [ 1239.537983][T21137] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3847'. [ 1239.573441][ T5923] usb 6-1: Manufacturer: syz [ 1239.578763][T21133] tipc: Disabling bearer [ 1239.584631][ T5923] usb 6-1: SerialNumber: syz [ 1239.600689][ T5923] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1239.626280][ T7891] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1239.638906][T14440] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1239.784385][T14440] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1240.672028][ T30] audit: type=1326 audit(1768376219.536:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21142 comm="syz.9.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2f8d8f749 code=0x7ffc0000 [ 1240.800307][ T7891] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1240.978666][ T7891] ath9k_htc: Failed to initialize the device [ 1241.000995][T21155] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 1241.024398][ T30] audit: type=1326 audit(1768376219.536:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21142 comm="syz.9.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2f8d8f749 code=0x7ffc0000 [ 1241.125517][T21149] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 1241.137235][ T30] audit: type=1326 audit(1768376219.536:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21142 comm="syz.9.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff2f8d8f749 code=0x7ffc0000 [ 1241.204740][T21146] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1241.231133][ T7891] usb 6-1: ath9k_htc: USB layer deinitialized [ 1241.259155][T21146] overlayfs: missing 'lowerdir' [ 1241.369734][ T5883] usb 6-1: USB disconnect, device number 73 [ 1241.408289][ T30] audit: type=1400 audit(1768376219.536:963): avc: denied { mounton } for pid=21142 comm="syz.9.3849" path="/syzcgroup/unified/syz9" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 1241.861204][T21143] delete_channel: no stack [ 1241.946021][T21173] tipc: Failed to remove unknown binding: 66,1,1/2886997162:2686095060/2686095062 [ 1242.159021][ T6702] net_ratelimit: 10 callbacks suppressed [ 1242.159040][ T6702] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1242.297526][T19995] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1242.456640][T14440] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1242.792857][T19995] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1243.424841][ T6702] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1243.453638][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1243.642501][T15127] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1244.210295][T21200] syz_tun: entered allmulticast mode [ 1244.541981][T21198] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 1244.550578][T21198] mroute: pending queue full, dropping entries [ 1244.591158][ T6702] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1244.615546][T21200] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 1244.624090][T21200] mroute: pending queue full, dropping entries [ 1244.698124][T21196] syz_tun: left allmulticast mode [ 1244.766722][ T3434] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1357.045109][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1357.052088][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P21220/1:b..l P21200/1:b..l [ 1357.061841][ C1] rcu: (detected by 1, t=10502 jiffies, g=101481, q=563 ncpus=2) [ 1357.069633][ C1] task:syz.2.3859 state:R running task stack:26480 pid:21200 tgid:21196 ppid:20507 task_flags:0x40044c flags:0x00080000 [ 1357.084055][ C1] Call Trace: [ 1357.087332][ C1] [ 1357.090242][ C1] ? __schedule+0x10b9/0x6150 [ 1357.094942][ C1] __schedule+0x1139/0x6150 [ 1357.099423][ C1] ? rcu_is_watching+0x12/0xc0 [ 1357.104261][ C1] ? __pfx___schedule+0x10/0x10 [ 1357.109092][ C1] ? mark_held_locks+0x49/0x80 [ 1357.113848][ C1] preempt_schedule_irq+0x51/0x90 [ 1357.118860][ C1] irqentry_exit+0x1d8/0x8c0 [ 1357.123440][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1357.129428][ C1] RIP: 0010:lock_acquire+0x62/0x330 [ 1357.134629][ C1] Code: b3 18 12 83 f8 07 0f 87 a2 02 00 00 89 c0 48 0f a3 05 52 b1 ee 0e 0f 82 74 02 00 00 8b 35 ea e1 ee 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 69 b3 18 12 0f 85 ad 02 00 00 48 83 c4 [ 1357.154219][ C1] RSP: 0018:ffffc900046df300 EFLAGS: 00000206 [ 1357.160271][ C1] RAX: 0000000000000046 RBX: ffffffff8e3c96a0 RCX: 00000000ace16c1f [ 1357.168317][ C1] RDX: 0000000000000000 RSI: ffffffff8daa8a1d RDI: ffffffff8bf2b400 [ 1357.176274][ C1] RBP: 0000000000000002 R08: 0000000027c185dd R09: 00000000d27c185d [ 1357.184229][ C1] R10: 0000000000000002 R11: ffff888026698b30 R12: 0000000000000000 [ 1357.192172][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1357.200123][ C1] ? unwind_next_frame+0x3fe/0x20b0 [ 1357.205304][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1357.211438][ C1] unwind_next_frame+0xd1/0x20b0 [ 1357.216354][ C1] ? unwind_next_frame+0xbd/0x20b0 [ 1357.221437][ C1] ? stack_trace_save+0x8e/0xc0 [ 1357.226268][ C1] ? __unwind_start+0x45f/0x7f0 [ 1357.231092][ C1] ? unwind_get_return_address+0x59/0xa0 [ 1357.236694][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1357.242826][ C1] arch_stack_walk+0x94/0x100 [ 1357.247493][ C1] ? stack_trace_save+0x8e/0xc0 [ 1357.252334][ C1] stack_trace_save+0x8e/0xc0 [ 1357.256989][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1357.262332][ C1] ? kasan_save_stack+0x42/0x60 [ 1357.267152][ C1] ? kasan_save_stack+0x33/0x60 [ 1357.271971][ C1] kasan_save_stack+0x33/0x60 [ 1357.276642][ C1] kasan_record_aux_stack+0xa7/0xc0 [ 1357.281813][ C1] kmem_cache_free+0x15e/0x770 [ 1357.286546][ C1] ? __put_anon_vma+0x114/0x3a0 [ 1357.291373][ C1] ? __put_anon_vma+0x114/0x3a0 [ 1357.296202][ C1] __put_anon_vma+0x114/0x3a0 [ 1357.300850][ C1] unlink_anon_vmas+0x58a/0x820 [ 1357.305675][ C1] free_pgtables+0x212/0xc10 [ 1357.310240][ C1] ? __pfx_free_pgtables+0x10/0x10 [ 1357.315351][ C1] ? __pfx_down_write+0x10/0x10 [ 1357.320189][ C1] exit_mmap+0x3f1/0xb60 [ 1357.324413][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1357.329170][ C1] ? __lock_acquire+0x436/0x2890 [ 1357.334100][ C1] ? arch_uprobe_clear_state+0x16/0x150 [ 1357.339638][ C1] __mmput+0x12a/0x410 [ 1357.343696][ C1] mmput+0x62/0x70 [ 1357.347418][ C1] do_exit+0x7d7/0x2bd0 [ 1357.351545][ C1] ? __pfx_do_exit+0x10/0x10 [ 1357.356104][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 1357.361099][ C1] ? find_held_lock+0x2b/0x80 [ 1357.365754][ C1] do_group_exit+0xd3/0x2a0 [ 1357.370251][ C1] get_signal+0x2671/0x26d0 [ 1357.374732][ C1] ? vfs_write+0xa38/0x11d0 [ 1357.379215][ C1] ? vfs_write+0x15d/0x11d0 [ 1357.383718][ C1] ? __pfx_get_signal+0x10/0x10 [ 1357.388565][ C1] ? do_futex+0x122/0x350 [ 1357.392885][ C1] arch_do_signal_or_restart+0x8f/0x7e0 [ 1357.398413][ C1] ? __rcu_read_unlock+0x2b5/0x5a0 [ 1357.403500][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1357.409627][ C1] ? fput+0x70/0xf0 [ 1357.413411][ C1] ? __pfx___x64_sys_futex+0x10/0x10 [ 1357.418673][ C1] exit_to_user_mode_loop+0x8c/0x540 [ 1357.423944][ C1] do_syscall_64+0x4ee/0xf80 [ 1357.428510][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1357.434371][ C1] RIP: 0033:0x7f7d83d8f749 [ 1357.438756][ C1] RSP: 002b:00007f7d84c8a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1357.447143][ C1] RAX: fffffffffffffe00 RBX: 00007f7d83fe6098 RCX: 00007f7d83d8f749 [ 1357.455107][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7d83fe6098 [ 1357.463063][ C1] RBP: 00007f7d83fe6090 R08: 0000000000000000 R09: 0000000000000000 [ 1357.471015][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1357.478986][ C1] R13: 00007f7d83fe6128 R14: 00007fff3addb260 R15: 00007fff3addb348 [ 1357.486960][ C1] [ 1357.489963][ C1] task:dhcpcd-run-hook state:R running task stack:28264 pid:21220 tgid:21220 ppid:21182 task_flags:0x400040 flags:0x00080000 [ 1357.503575][ C1] Call Trace: [ 1357.506825][ C1] [ 1357.509726][ C1] ? __schedule+0x10b9/0x6150 [ 1357.514394][ C1] __schedule+0x1139/0x6150 [ 1357.518894][ C1] ? __pfx___schedule+0x10/0x10 [ 1357.523735][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 1357.529100][ C1] preempt_schedule_common+0x44/0xc0 [ 1357.534360][ C1] preempt_schedule_thunk+0x16/0x30 [ 1357.539544][ C1] _raw_spin_unlock+0x3e/0x50 [ 1357.544208][ C1] do_wp_page+0x1818/0x5010 [ 1357.548777][ C1] ? __pfx_do_wp_page+0x10/0x10 [ 1357.553603][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1357.558954][ C1] __handle_mm_fault+0x1bd2/0x2bb0 [ 1357.564042][ C1] ? reacquire_held_locks+0xcd/0x1f0 [ 1357.569306][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 1357.574738][ C1] ? lock_vma_under_rcu+0x176/0x580 [ 1357.580464][ C1] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1357.586866][ C1] handle_mm_fault+0x3fe/0xad0 [ 1357.591614][ C1] do_user_addr_fault+0x60c/0x1370 [ 1357.596702][ C1] ? rcu_is_watching+0x12/0xc0 [ 1357.601438][ C1] exc_page_fault+0x64/0xc0 [ 1357.605917][ C1] asm_exc_page_fault+0x26/0x30 [ 1357.610736][ C1] RIP: 0033:0x7f67ce791458 [ 1357.615118][ C1] RSP: 002b:00007ffea0d3ce50 EFLAGS: 00010206 [ 1357.621160][ C1] RAX: 0000000000000003 RBX: 000056465571e170 RCX: 0000000000000003 [ 1357.629099][ C1] RDX: 0000000000000000 RSI: 000056465571e170 RDI: 000056465571fd00 [ 1357.637048][ C1] RBP: 000056465570f5e0 R08: 0000000000000001 R09: 0000000000000000 [ 1357.644993][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1357.652935][ C1] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000003 [ 1357.660886][ C1] [ 1357.663876][ C1] rcu: rcu_preempt kthread starved for 10557 jiffies! g101481 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1357.675119][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1357.685055][ C1] rcu: RCU grace-period kthread stack dump: [ 1357.690909][ C1] task:rcu_preempt state:R running task stack:28064 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1357.704351][ C1] Call Trace: [ 1357.707603][ C1] [ 1357.710509][ C1] ? __schedule+0x10b9/0x6150 [ 1357.715158][ C1] __schedule+0x1139/0x6150 [ 1357.719650][ C1] ? __pfx___schedule+0x10/0x10 [ 1357.724468][ C1] ? find_held_lock+0x2b/0x80 [ 1357.729119][ C1] ? schedule+0x2d7/0x3a0 [ 1357.733686][ C1] schedule+0xe7/0x3a0 [ 1357.737726][ C1] schedule_timeout+0x123/0x290 [ 1357.742556][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1357.747913][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1357.753171][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1357.758948][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 1357.764379][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 1357.769120][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1357.774470][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1357.779667][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1357.784581][ C1] ? rcu_gp_cleanup+0x7c1/0xe90 [ 1357.789425][ C1] rcu_gp_kthread+0x26d/0x380 [ 1357.794084][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1357.799270][ C1] ? rcu_is_watching+0x12/0xc0 [ 1357.804020][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1357.809221][ C1] ? __kthread_parkme+0x19e/0x250 [ 1357.814226][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1357.819402][ C1] kthread+0x3c5/0x780 [ 1357.823442][ C1] ? __pfx_kthread+0x10/0x10 [ 1357.828008][ C1] ? rcu_is_watching+0x12/0xc0 [ 1357.832739][ C1] ? __pfx_kthread+0x10/0x10 [ 1357.837299][ C1] ret_from_fork+0x983/0xb10 [ 1357.841869][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1357.846949][ C1] ? __switch_to+0x7af/0x10d0 [ 1357.851604][ C1] ? __pfx_kthread+0x10/0x10 [ 1357.856174][ C1] ret_from_fork_asm+0x1a/0x30 [ 1357.860924][ C1] [ 1357.863914][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1357.870205][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1357.875392][ C0] NMI backtrace for cpu 0 [ 1357.875406][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1357.875424][ C0] Tainted: [L]=SOFTLOCKUP [ 1357.875429][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1357.875437][ C0] RIP: 0010:__sanitizer_cov_trace_switch+0x40/0x90 [ 1357.875454][ C0] Code: 48 83 f8 20 74 6b 77 48 48 83 f8 08 74 5b 48 83 f8 10 75 2f 41 bd 03 00 00 00 4c 8b 75 00 31 db 4d 85 f6 74 1e 48 8b 74 dd 10 <48> 8b 4c 24 28 4c 89 e2 4c 89 ef 48 83 c3 01 e8 8c fd ff ff 49 39 [ 1357.875466][ C0] RSP: 0018:ffffc90000007730 EFLAGS: 00000206 [ 1357.875478][ C0] RAX: 0000000000000000 RBX: 0000000000000002 RCX: ffffffff8af30375 [ 1357.875487][ C0] RDX: ffffffff8e097b40 RSI: 0000000000000040 RDI: 0000000000000003 [ 1357.875495][ C0] RBP: ffffffff8ce85c80 R08: 0000000000000003 R09: 0000000000000030 [ 1357.875503][ C0] R10: 0000000000000080 R11: ffffffff8e098670 R12: 0000000000000080 [ 1357.875512][ C0] R13: 0000000000000003 R14: 0000000000000008 R15: 0000000000000080 [ 1357.875520][ C0] FS: 0000000000000000(0000) GS:ffff8881248f4000(0000) knlGS:0000000000000000 [ 1357.875534][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1357.875542][ C0] CR2: 000000110c3577ca CR3: 000000000e184000 CR4: 00000000003526f0 [ 1357.875551][ C0] Call Trace: [ 1357.875556][ C0] [ 1357.875563][ C0] ieee80211_rx_handlers+0x9df5/0xa100 [ 1357.875584][ C0] ? module_get_kallsym+0x3a0/0x7b0 [ 1357.875603][ C0] ? arch_stack_walk+0x94/0x100 [ 1357.875620][ C0] ? __pfx_ieee80211_rx_handlers+0x10/0x10 [ 1357.875635][ C0] ? common_startup_64+0x13e/0x148 [ 1357.875658][ C0] ? stack_trace_save+0x8e/0xc0 [ 1357.875672][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1357.875692][ C0] ieee80211_prepare_and_rx_handle+0x2bb6/0x7830 [ 1357.875715][ C0] ? __pfx_ieee80211_prepare_and_rx_handle+0x10/0x10 [ 1357.875739][ C0] ieee80211_rx_for_interface+0x110/0x770 [ 1357.875754][ C0] ? ieee80211_clean_skb+0x1a6/0x740 [ 1357.875769][ C0] ieee80211_rx_list+0x1141/0x2ed0 [ 1357.875787][ C0] ? __lock_acquire+0x436/0x2890 [ 1357.875802][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1357.875819][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 1357.875833][ C0] ? __lock_acquire+0x436/0x2890 [ 1357.875854][ C0] ieee80211_rx_napi+0xdc/0x410 [ 1357.875868][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 1357.875883][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1357.875899][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1357.875916][ C0] ieee80211_handle_queued_frames+0xcf/0x130 [ 1357.875937][ C0] tasklet_action_common+0x254/0x3f0 [ 1357.875959][ C0] handle_softirqs+0x219/0x950 [ 1357.875978][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1357.875997][ C0] __irq_exit_rcu+0x109/0x170 [ 1357.876014][ C0] irq_exit_rcu+0x9/0x30 [ 1357.876030][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1357.876045][ C0] [ 1357.876050][ C0] [ 1357.876055][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1357.876069][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1357.876086][ C0] Code: 86 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 f9 11 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1357.876097][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 1357.876107][ C0] RAX: 0000000005020ac9 RBX: 0000000000000000 RCX: ffffffff8b7866d9 [ 1357.876115][ C0] RDX: 0000000000000000 RSI: ffffffff8daceab2 RDI: ffffffff8bf2b400 [ 1357.876123][ C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d [ 1357.876132][ C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000 [ 1357.876140][ C0] R13: ffffffff8e097b40 R14: ffffffff9088bdd0 R15: 0000000000000000 [ 1357.876151][ C0] ? ct_kernel_exit+0x139/0x190 [ 1357.876170][ C0] default_idle+0x13/0x20 [ 1357.876186][ C0] default_idle_call+0x6c/0xb0 [ 1357.876204][ C0] do_idle+0x38d/0x510 [ 1357.876222][ C0] ? __pfx_do_idle+0x10/0x10 [ 1357.876243][ C0] cpu_startup_entry+0x4f/0x60 [ 1357.876261][ C0] rest_init+0x16b/0x2b0 [ 1357.876273][ C0] ? acpi_subsystem_init+0x133/0x180 [ 1357.876288][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1357.876303][ C0] start_kernel+0x3ef/0x4d0 [ 1357.876317][ C0] x86_64_start_reservations+0x18/0x30 [ 1357.876330][ C0] x86_64_start_kernel+0x130/0x190 [ 1357.876343][ C0] common_startup_64+0x13e/0x148 [ 1357.876363][ C0]