last executing test programs: 2m40.532629067s ago: executing program 4 (id=1169): quotactl_fd$Q_SYNC(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x4, 0x4, 0x1, 0x8, 0x4, @private0, @mcast1, 0x8000, 0x1, 0x3, 0x3}}) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000000)=""/87, 0x57, 0x1, &(0x7f0000000140)={0x11, 0x1a, r0, 0x1, 0x0, 0x6, @broadcast}, 0x14) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) write$cgroup_pid(r1, &(0x7f0000000200)=r2, 0x12) (async) read$char_usb(r1, &(0x7f0000000240)=""/5, 0x5) sync() ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000280)={0x4, 0x79, 0x42f1d295, 0x4, 0xb, "91497d36c530e2e7c58ca0f681b3f072bd8246"}) (async) setsockopt$MRT_TABLE(r1, 0x0, 0xcf, &(0x7f00000002c0)=0x1, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000300)=0x5fb6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)=@mpls_newroute={0x1d8, 0x18, 0x400, 0x70bd2c, 0x25dfdbfc, {0x1c, 0x30, 0x80, 0x7, 0xa0553a6a015e32ea, 0x6, 0xfd, 0xa, 0x2000}, [@RTA_DST={0x8, 0x1, {0xfff, 0x0, 0x1}}, @RTA_NEWDST={0x84, 0x13, [{0x7, 0x0, 0x1}, {0xf3, 0x0, 0x1}, {0x30e0, 0x0, 0x1}, {0x100, 0x0, 0x1}, {0x8}, {0x5}, {0x6, 0x0, 0x1}, {0x40}, {0x2, 0x0, 0x1}, {0xcd}, {0x9, 0x0, 0x1}, {0x7}, {0x2}, {0x6, 0x0, 0x1}, {0xffff1}, {0x5}, {0xff}, {0xc42c}, {0xea4, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0xffff}, {0x40, 0x0, 0x1}, {}, {0x7}, {0xf9ec, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x6}, {0xe70}, {0x5b7e, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x1}, {0x432}]}, @RTA_DST={0x8, 0x1, {0x6}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x9}, @RTA_OIF={0x8, 0x4, r0}, @RTA_NEWDST={0x84, 0x13, [{0x3ff}, {0x324}, {0x1}, {0x2, 0x0, 0x1}, {0x800}, {0x3}, {0x8}, {0x7fff, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x8}, {0x1, 0x0, 0x1}, {0x56, 0x0, 0x1}, {0x40, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x3}, {0x4, 0x0, 0x1}, {0x7}, {0xa6}, {0x8, 0x0, 0x1}, {}, {0x4}, {0xd9, 0x0, 0x1}, {0x6}, {0x9, 0x0, 0x1}, {0x47}, {0x8000}, {0xf7fff, 0x0, 0x1}, {0x4}, {0x6}, {0x5, 0x0, 0x1}]}, @RTA_NEWDST={0x84, 0x13, [{0x0, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xf4, 0x0, 0x1}, {0x8}, {0x6, 0x0, 0x1}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x7}, {0xc, 0x0, 0x1}, {0xfff81}, {0x0, 0x0, 0x1}, {0x6}, {0x8ab8, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x78d2}, {0x101, 0x0, 0x1}, {0x5281}, {0x200, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0xd, 0x0, 0x1}, {0x7fff, 0x0, 0x1}, {0xce, 0x0, 0x1}, {0x6}, {0x10, 0x0, 0x1}, {0x2}, {0x3, 0x0, 0x1}, {0x1000}, {0x35, 0x0, 0x1}, {0xe5b}]}, @RTA_DST={0x8, 0x1, {0x8068, 0x0, 0x1}}, @RTA_DST={0x8, 0x1, {0x2, 0x0, 0x1}}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x40001}, 0x4000884) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000600)={0x0, 0x0, 0xfffffffffffffffe}, &(0x7f0000000640)=0x10) (async) read$msr(r1, &(0x7f0000000680)=""/86, 0x56) (async) ioctl$DVB_DEMUX_DMX_START(r1, 0x6f29) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000700)={{0x0, 0x7fffffffffffffff, 0xfffffffffffffffe, 0x8, 0x64b4, 0x646, 0x100000000, 0x16e, 0x3, 0x5, 0x3, 0x7, 0x2, 0x7, 0x401}, 0x8, [0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000780)={{r5, 0x9, 0x4, 0x100000000, 0x200, 0xc, 0x8, 0x7ff, 0x8, 0x7, 0xfff, 0x80, 0x4, 0xffff, 0x1}, 0x20, [0x0, 0x0, 0x0, 0x0]}) (async) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xac, r6, 0x4, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xee0}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x8}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0x13}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0xac}, 0x1, 0x0, 0x0, 0x40014}, 0x0) (async) fcntl$lock(r1, 0x26, &(0x7f0000000a00)={0x2, 0x1, 0x6, 0x7fffffff, r2}) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), r3) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000b80)={'ip6gre0\x00', &(0x7f0000000b00)={'ip6tnl0\x00', r0, 0x29, 0x16, 0x6, 0xf93, 0x98b1ae4a46b56879, @dev={0xfe, 0x80, '\x00', 0x16}, @private0, 0x80, 0x1, 0x4}}) (async) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000bc0)={0x0, @dev, @remote}, &(0x7f0000000c00)=0xc) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000e40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000c40)={0x1a0, r7, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1a0}}, 0x0) (async) setsockopt$inet_sctp6_SCTP_REMOTE_UDP_ENCAPS_PORT(r1, 0x84, 0x84, &(0x7f0000000e80)={r4, @in6={{0xa, 0x4e23, 0xfffff001, @private1, 0x3}}, 0x4e24}, 0x90) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000001040)={r3, &(0x7f0000000f40)='ethtool\x00', 0xb6947457b4cd71fd, &(0x7f0000000f80)={@_ha_fsid={[0xfffffffd, 0x5]}, {0x6, 0x5, 0x4, 0x6}}, 0x5, &(0x7f0000000fc0), &(0x7f0000001000)=0x9}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r11, 0x84, 0x15, &(0x7f0000001080)={0x3}, 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000010c0)='ip6gretap0\x00', &(0x7f0000001100)='ethtool\x00', 0x0) 2m37.972673589s ago: executing program 1 (id=1175): r0 = openat$nsim_port_qreset(0xffffffffffffff9c, &(0x7f0000000000)={'/sys/kernel/debug/netdevsim/netdevsim', 0x0, '/ports/', 0x32}, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x7, 0x200000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000340), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) ioctl$INCFS_IOC_PERMIT_FILL(r3, 0x40046721, &(0x7f0000000340)={r0}) socket$unix(0x1, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=@newtaction={0xf0, 0x30, 0x51b, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_vlan={0x84, 0x10, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x267}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0xccfc}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x28, 0x6, "2a26fbba43952a5d5a9d7752e6622374f8d6b862e3d2211700aaa4977d3ed681df99eee0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5, 0x3}}}}, @m_skbmod={0x54, 0x2, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x4, 0x10000000, 0x0, 0x8}, 0x6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xf0}}, 0x0) fanotify_init(0x200, 0x0) socket$inet(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x2, 0x0) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000004c0), 0x22802, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000500)=0xd) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000800)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000840)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000880)={0x0, 0x2be0, 0x0, 0x80000005, 0x3b4}, &(0x7f0000000900)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x1, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x8, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x8000, 0x2, 0xe4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x200, 0x0, 0x80000250}}], 0x1, &(0x7f0000000b80)={0x2e, 0x41, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r6, '\x00', {0xfff4, 0x0, 0x0, 0x0}}, 0x0) 2m37.105703048s ago: executing program 1 (id=1176): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x72f, 0x100, 0x8, 0x3b5}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000004c0)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x3, 0x30f, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x252}}}, &(0x7f0000000300)=0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/virtio/devices/virtio0/device\x00', 0x0, 0x0) read(r6, &(0x7f0000000500), 0x100) syz_genetlink_get_family_id$nbd(&(0x7f0000000500), 0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r7 = io_uring_setup(0x4de8, &(0x7f0000000800)={0x0, 0xd661, 0x400, 0x0, 0x2ff}) syz_emit_ethernet(0x66, &(0x7f0000000140)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0xf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0xc}, {[@noop, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1, 0x1}, {@loopback, 0x200}, {@local}]}]}}}}}}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) socket(0x10, 0x4, 0x80) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, r8) syz_ublk_setup_queues(r5, r4, &(0x7f0000000880)={0x0, 0x49cf, 0x400, 0x0, 0x23, 0x0, r6}, &(0x7f0000000900)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x367d, 0x80, 0x2, 0x14f, 0x0, r6}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9848, 0x10, 0x2, 0x311, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8024, 0x1, 0x1, 0x1dc, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7959, 0x4000, 0x1, 0x172, 0x0, r6}}], 0x4, &(0x7f0000002540)={0x2e, 0x45, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, r8, '\x00', {0x2, 0x847, 0x0, &(0x7f0000001540)=@buf_512="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"}}, &(0x7f00000025c0)) syz_ublk_setup_queues(r5, r4, &(0x7f0000000340)={0x0, 0x6ddb, 0x8, 0x1, 0x2e3, 0x0, r6}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdd52, 0x8, 0x0, 0x22a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf72, 0x8c, 0x5, 0xb3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x40, 0x0, 0x9d7c, 0x0, r9}}], 0x1, &(0x7f00000014c0)={0x2e, 0x12, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r8, '\x00', {0x2, 0x5, 0x0, 0x0}}, 0x0) r10 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi3\x00', 0x40400, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r11, &(0x7f0000000dc0)={0x1f, 0xfffe}, 0xe) listen(r11, 0x0) getsockopt$bt_BT_DEFER_SETUP(r11, 0x112, 0x7, &(0x7f0000000e00), &(0x7f0000000e40)=0x4) ioctl$COMEDI_INSN(r10, 0x8028640c, &(0x7f00000002c0)={0x4000000, 0x92, 0x0, 0x0, 0x2}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0) writev(r12, &(0x7f0000000c80)=[{&(0x7f0000000cc0), 0x86}], 0x2) syz_clone(0xc1100, 0x0, 0x19, 0x0, 0x0, 0x0) 2m34.600830389s ago: executing program 1 (id=1179): setns(0xc9, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_socket_connect_nvme_tcp() write(r0, &(0x7f00000008c0)="75257f533b3bdff290defa5481163ddfa60baef86413ade0245a21945db5302b5445268949ffb1eefd5cfd670a989196e1376f1da00075eb2108510933ebbb3e08d76e6f4bdc01776ecb8e6d8cd04cc3b249a48a4f7c3fede009c01d488e1d34cecc34a11f7a1f", 0x67) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r2, 0xaec7) r3 = syz_ublk_setup_io_uring(0x4de5, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000a80)=ANY=[@ANYRES32=0x1, @ANYBLOB="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"], 0x8c) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000007, 0x401d031, r3, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0x40502, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r6, 0xc0046d00, &(0x7f0000000380)=0x3) getsockopt$ARPT_SO_GET_ENTRIES(r5, 0x0, 0x61, &(0x7f0000000480)={'filter\x00', 0x3b8, '\x00'/952}, &(0x7f0000000880)=0x3e0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x81c0, 0x7) execve(&(0x7f0000000080)='./file2\x00', 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r7) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001400070010000800130008000300080012"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="ec05000068bc30974e98a734acdc8bf5185302efd86b8365774220db5458b75d014788e7a630bc67d68a5b7e05b78440e25600ba19b89b3caeaeb72f0dcaf297c9787a6cf12b732226719aebc83ecf60131bac23b52eff917124225a68705ae7b32408b8c17cd4f45c85024228b771ced58d13455397be6996920f1f602de2f2a8ace976df58a0a53f676766083e96272c6c116598340d8a830100a7533d78374761cb2f85b63109751133e51e7b2da8b611a26413373fc9b04456a8024c44d25ff4a9c7bf7986fd822ca0b40a73d7a157e86fb54ad570a7ccb1b7a41529538b305b7004e2ead731afde62", @ANYRES16=r8, @ANYBLOB="000428bd7000fedbdf250e00000074020280a400038028000180040003000800010004000000080001000300000004000300080001000d000000040003001800018010000200402e242f3a3a7d292c5c7b000400030044000180080001000300000004000300040003000400030008000100ff7f0000040003000900020070726f630000000008000100040000000c00020008cf4df3020000001c000180140002002f6465762f73657175656e6365723200040003002c0003802800018008000100f80500000800010001040000080001007f00000004000300080001000e000000230005001e35127f4feaab06a2b9cb1593f3d3264fc25846bc441a2187aab59fc1c73f001c010380100001800400030008000100040000001c0001800a000200776c616e310000000900020070726f63000000001c00018008000100000000000800010005000000080001000700000014000180040003000b00020066696c74657200002c000180040003000400030008000100080000000c0002006e6c3830323131000900020070726f63000000000c00018008000100080000003c000180040003000800010008000000080001000800000008000100060000000c0002003a255d285e2d5b0008000100ff0100000800010005000000240001800400030004000300080002002c2e2a0005000200000000000400030004000300240001800a000200776c616e31000000140002002f6465762f73657175656e6365723200600003801800018008000100ff0000000a0002002f242f29230000001800018008000100090000000400030004000300040003002c00018004000300080001000100000008000100fe0000000e0002006e65742f69705f7673000000040003004400018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000300030000000800030000000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="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"], 0x5ec}, 0x1, 0x0, 0x0, 0x10}, 0x1) r9 = syz_open_procfs(0x0, &(0x7f00000003c0)='task\x00') fchdir(r9) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000200)=0x8) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{}, {0x0, 0x989680}}, 0x0) r10 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000400)='.\x00', &(0x7f0000000440)='proc\x00', 0x8, 0x0) syz_open_procfs(r10, &(0x7f0000000140)='mountinfo\x00') 2m31.121716847s ago: executing program 32 (id=1154): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004300000000000000000000009500000000000000"], &(0x7f0000000400)='syzkaller\x00', 0x100}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x20) write(r1, &(0x7f0000000540)=')Vv\x00\x00\x00', 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r3, 0x25, 0x0, @val=@perf_event={0xe533}}, 0x18) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000280)={0x0, 0x4, 0x1, 0x7fff, @vifc_lcl_addr=@local, @local}, 0x10) syz_emit_ethernet(0x2f9, &(0x7f00000005c0)=ANY=[], 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r7, 0x0, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) r9 = socket$kcm(0xa, 0x3, 0x3a) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4800000000000000000a0000040900010073797a31000000000900020073797a32000000801c000480180001800d00010073796e70726f78790000000004000280140000001100010000000000000000000100000a28eddeaaed82161ce5141c198b00000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$kcm(r9, &(0x7f00000009c0)={&(0x7f0000000a00)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000ac0)="897a20ccf604", 0x6}, {&(0x7f0000000b00)="12eef4", 0x3}], 0x2, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r8, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) 2m25.807066375s ago: executing program 33 (id=1165): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x72f, 0x100, 0x8, 0x3b5}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000004c0)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x3, 0x30f, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x252}}}, &(0x7f0000000300)=0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/virtio/devices/virtio0/device\x00', 0x0, 0x0) read(r6, &(0x7f0000000500), 0x100) syz_genetlink_get_family_id$nbd(&(0x7f0000000500), 0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r7 = io_uring_setup(0x4de8, &(0x7f0000000800)={0x0, 0xd661, 0x400, 0x0, 0x2ff}) syz_emit_ethernet(0x66, &(0x7f0000000140)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0xf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0xc}, {[@noop, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1, 0x1}, {@loopback, 0x200}, {@local}]}]}}}}}}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) socket(0x10, 0x4, 0x80) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, r8) syz_ublk_setup_queues(r5, r4, &(0x7f0000000880)={0x0, 0x49cf, 0x400, 0x0, 0x23, 0x0, r6}, &(0x7f0000000900)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x367d, 0x80, 0x2, 0x14f, 0x0, r6}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9848, 0x10, 0x2, 0x311, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8024, 0x1, 0x1, 0x1dc, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7959, 0x4000, 0x1, 0x172, 0x0, r6}}], 0x4, &(0x7f0000002540)={0x2e, 0x45, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, r8, '\x00', {0x2, 0x847, 0x0, &(0x7f0000001540)=@buf_512="209149e1da94242bd42f251b04c269d59ab0d4a8382ae145256baa37b9449bea2cad31367720a872ad8dba2d3c2a8417a231fac7d7e7a4581421a547cdab42fd253503c1927362f716f8cf2212caab60542db1fc3a38899583c661b3fd935aa09106ce0c7474bc498c07190220340c84c9b6ce6cc9041663dbae496d2a3d0dfd6fc5a867117354215c174496fe69941fddcdc3d035074385ea7ce50f33b7ec3f6c401e09b750d6aed1c90278db533280ab53afb792ebce1602e0dd88e0b7abe5c73279e02499a549125e83c4830cb90f50a94ccdd74da9cbfedb9f8c33ad953d044a0895854bc6a3e0b6f41f18eadce9fb4c151bfa1830d5c42fa7316ab04f2e3608d5615bacd6bc50fe6ad5e47f0177318f1d9f1f8b3093e8913c3422ac00a3247137da2ad611eded8394ea07850a39ba685c18d3bbef200a4700b70e56309f50cefd807247fdcea6ff48635fc2382224a31cfa8ed527f9b1a30125085d5109ba59c13251167cb4d9333e078df99aff7b1df271ead99176d1b04c312575961270219e5aca99afd8c07e73be9c6b9a32bcd7b0490d535446dbe60fbfe8e700a4869273266d2e8131cdb181e62ba0cd77ae1663388a77b0e9fe499ee49766da4b7744565b51cf11333ff9f59777b9b143d64770f8ffae74a087523d5f34e5d4e06954b83eb05fe94c2afb42127b753183196535d7a66b43ccc70f7cbce10fce72"}}, &(0x7f00000025c0)) syz_ublk_setup_queues(r5, r4, &(0x7f0000000340)={0x0, 0x6ddb, 0x8, 0x1, 0x2e3, 0x0, r6}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdd52, 0x8, 0x0, 0x22a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf72, 0x8c, 0x5, 0xb3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x40, 0x0, 0x9d7c, 0x0, r9}}], 0x1, &(0x7f00000014c0)={0x2e, 0x12, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r8, '\x00', {0x2, 0x5, 0x0, 0x0}}, 0x0) r10 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi3\x00', 0x40400, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r11, &(0x7f0000000dc0)={0x1f, 0xfffe}, 0xe) listen(r11, 0x0) getsockopt$bt_BT_DEFER_SETUP(r11, 0x112, 0x7, &(0x7f0000000e00), &(0x7f0000000e40)=0x4) ioctl$COMEDI_INSN(r10, 0x8028640c, &(0x7f00000002c0)={0x4000000, 0x92, 0x0, 0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xc, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) syz_usb_disconnect(0xffffffffffffffff) syz_clone(0xc1100, 0x0, 0x19, 0x0, 0x0, 0x0) 2m25.263780102s ago: executing program 34 (id=1169): quotactl_fd$Q_SYNC(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x4, 0x4, 0x1, 0x8, 0x4, @private0, @mcast1, 0x8000, 0x1, 0x3, 0x3}}) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000000)=""/87, 0x57, 0x1, &(0x7f0000000140)={0x11, 0x1a, r0, 0x1, 0x0, 0x6, @broadcast}, 0x14) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) write$cgroup_pid(r1, &(0x7f0000000200)=r2, 0x12) (async) read$char_usb(r1, &(0x7f0000000240)=""/5, 0x5) sync() ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000280)={0x4, 0x79, 0x42f1d295, 0x4, 0xb, "91497d36c530e2e7c58ca0f681b3f072bd8246"}) (async) setsockopt$MRT_TABLE(r1, 0x0, 0xcf, &(0x7f00000002c0)=0x1, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000300)=0x5fb6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)=@mpls_newroute={0x1d8, 0x18, 0x400, 0x70bd2c, 0x25dfdbfc, {0x1c, 0x30, 0x80, 0x7, 0xa0553a6a015e32ea, 0x6, 0xfd, 0xa, 0x2000}, [@RTA_DST={0x8, 0x1, {0xfff, 0x0, 0x1}}, @RTA_NEWDST={0x84, 0x13, [{0x7, 0x0, 0x1}, {0xf3, 0x0, 0x1}, {0x30e0, 0x0, 0x1}, {0x100, 0x0, 0x1}, {0x8}, {0x5}, {0x6, 0x0, 0x1}, {0x40}, {0x2, 0x0, 0x1}, {0xcd}, {0x9, 0x0, 0x1}, {0x7}, {0x2}, {0x6, 0x0, 0x1}, {0xffff1}, {0x5}, {0xff}, {0xc42c}, {0xea4, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0xffff}, {0x40, 0x0, 0x1}, {}, {0x7}, {0xf9ec, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x6}, {0xe70}, {0x5b7e, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x1}, {0x432}]}, @RTA_DST={0x8, 0x1, {0x6}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x9}, @RTA_OIF={0x8, 0x4, r0}, @RTA_NEWDST={0x84, 0x13, [{0x3ff}, {0x324}, {0x1}, {0x2, 0x0, 0x1}, {0x800}, {0x3}, {0x8}, {0x7fff, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x8}, {0x1, 0x0, 0x1}, {0x56, 0x0, 0x1}, {0x40, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x3}, {0x4, 0x0, 0x1}, {0x7}, {0xa6}, {0x8, 0x0, 0x1}, {}, {0x4}, {0xd9, 0x0, 0x1}, {0x6}, {0x9, 0x0, 0x1}, {0x47}, {0x8000}, {0xf7fff, 0x0, 0x1}, {0x4}, {0x6}, {0x5, 0x0, 0x1}]}, @RTA_NEWDST={0x84, 0x13, [{0x0, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xf4, 0x0, 0x1}, {0x8}, {0x6, 0x0, 0x1}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x7}, {0xc, 0x0, 0x1}, {0xfff81}, {0x0, 0x0, 0x1}, {0x6}, {0x8ab8, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x78d2}, {0x101, 0x0, 0x1}, {0x5281}, {0x200, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0xd, 0x0, 0x1}, {0x7fff, 0x0, 0x1}, {0xce, 0x0, 0x1}, {0x6}, {0x10, 0x0, 0x1}, {0x2}, {0x3, 0x0, 0x1}, {0x1000}, {0x35, 0x0, 0x1}, {0xe5b}]}, @RTA_DST={0x8, 0x1, {0x8068, 0x0, 0x1}}, @RTA_DST={0x8, 0x1, {0x2, 0x0, 0x1}}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x40001}, 0x4000884) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000600)={0x0, 0x0, 0xfffffffffffffffe}, &(0x7f0000000640)=0x10) (async) read$msr(r1, &(0x7f0000000680)=""/86, 0x56) (async) ioctl$DVB_DEMUX_DMX_START(r1, 0x6f29) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000700)={{0x0, 0x7fffffffffffffff, 0xfffffffffffffffe, 0x8, 0x64b4, 0x646, 0x100000000, 0x16e, 0x3, 0x5, 0x3, 0x7, 0x2, 0x7, 0x401}, 0x8, [0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000780)={{r5, 0x9, 0x4, 0x100000000, 0x200, 0xc, 0x8, 0x7ff, 0x8, 0x7, 0xfff, 0x80, 0x4, 0xffff, 0x1}, 0x20, [0x0, 0x0, 0x0, 0x0]}) (async) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xac, r6, 0x4, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xee0}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x8}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0x13}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0xac}, 0x1, 0x0, 0x0, 0x40014}, 0x0) (async) fcntl$lock(r1, 0x26, &(0x7f0000000a00)={0x2, 0x1, 0x6, 0x7fffffff, r2}) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), r3) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000b80)={'ip6gre0\x00', &(0x7f0000000b00)={'ip6tnl0\x00', r0, 0x29, 0x16, 0x6, 0xf93, 0x98b1ae4a46b56879, @dev={0xfe, 0x80, '\x00', 0x16}, @private0, 0x80, 0x1, 0x4}}) (async) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000bc0)={0x0, @dev, @remote}, &(0x7f0000000c00)=0xc) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000e40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000c40)={0x1a0, r7, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1a0}}, 0x0) (async) setsockopt$inet_sctp6_SCTP_REMOTE_UDP_ENCAPS_PORT(r1, 0x84, 0x84, &(0x7f0000000e80)={r4, @in6={{0xa, 0x4e23, 0xfffff001, @private1, 0x3}}, 0x4e24}, 0x90) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000001040)={r3, &(0x7f0000000f40)='ethtool\x00', 0xb6947457b4cd71fd, &(0x7f0000000f80)={@_ha_fsid={[0xfffffffd, 0x5]}, {0x6, 0x5, 0x4, 0x6}}, 0x5, &(0x7f0000000fc0), &(0x7f0000001000)=0x9}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r11, 0x84, 0x15, &(0x7f0000001080)={0x3}, 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000010c0)='ip6gretap0\x00', &(0x7f0000001100)='ethtool\x00', 0x0) 2m18.917356528s ago: executing program 35 (id=1179): setns(0xc9, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_socket_connect_nvme_tcp() write(r0, &(0x7f00000008c0)="75257f533b3bdff290defa5481163ddfa60baef86413ade0245a21945db5302b5445268949ffb1eefd5cfd670a989196e1376f1da00075eb2108510933ebbb3e08d76e6f4bdc01776ecb8e6d8cd04cc3b249a48a4f7c3fede009c01d488e1d34cecc34a11f7a1f", 0x67) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r2, 0xaec7) r3 = syz_ublk_setup_io_uring(0x4de5, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000a80)=ANY=[@ANYRES32=0x1, @ANYBLOB="02008400b994d571d3bf85d484dea02bb939e0b8d91877e029719e8e18b4224fe9510014bd61ac9a5de97088e61a20a25399ba7956e598d3b9af268e2903965f33ef5bfda42ef5ebabb1da8c466421828964456b3f56b7614da0a9df4ee954b597ccf42e6d68a109abb954dbc688c4a4c9a8a469c145bb2c5db2f48a63d5d42a0d752b055c934b5a7aafbdecfbcb81cd903d6b2db5f32a14a54fd2cfdc9b0eb82a3c8e3664b3f36232901bb24303f9b965f29264c6116e48dc8cd8aab6b0ed8ade5ab4281282546aa8e3707092ddda38d84f8eddba776791213f806c4c62265f348745e5f53739e700ddd54c1e590e77a69adfc099f886c61bf9ca21482a0d57b18a27b426f227209dc7f4964e1b81166dd3c005ea9ee14e8e8c57ef80e457437e76508557ab5605904472bb71fd8bc928fc94f8b0a44bbea5"], 0x8c) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000007, 0x401d031, r3, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0x40502, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r6, 0xc0046d00, &(0x7f0000000380)=0x3) getsockopt$ARPT_SO_GET_ENTRIES(r5, 0x0, 0x61, &(0x7f0000000480)={'filter\x00', 0x3b8, '\x00'/952}, &(0x7f0000000880)=0x3e0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x81c0, 0x7) execve(&(0x7f0000000080)='./file2\x00', 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r7) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001400070010000800130008000300080012"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="ec05000068bc30974e98a734acdc8bf5185302efd86b8365774220db5458b75d014788e7a630bc67d68a5b7e05b78440e25600ba19b89b3caeaeb72f0dcaf297c9787a6cf12b732226719aebc83ecf60131bac23b52eff917124225a68705ae7b32408b8c17cd4f45c85024228b771ced58d13455397be6996920f1f602de2f2a8ace976df58a0a53f676766083e96272c6c116598340d8a830100a7533d78374761cb2f85b63109751133e51e7b2da8b611a26413373fc9b04456a8024c44d25ff4a9c7bf7986fd822ca0b40a73d7a157e86fb54ad570a7ccb1b7a41529538b305b7004e2ead731afde62", @ANYRES16=r8, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000300030000000800030000000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="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"], 0x5ec}, 0x1, 0x0, 0x0, 0x10}, 0x1) r9 = syz_open_procfs(0x0, &(0x7f00000003c0)='task\x00') fchdir(r9) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000200)=0x8) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{}, {0x0, 0x989680}}, 0x0) r10 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000400)='.\x00', &(0x7f0000000440)='proc\x00', 0x8, 0x0) syz_open_procfs(r10, &(0x7f0000000140)='mountinfo\x00') 2m14.327914959s ago: executing program 36 (id=1183): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'gre0\x00', 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) setrlimit(0x7, &(0x7f0000000040)) r5 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f00000000c0)={'/sys/block/md', @num=0x0, '/md/', @array='new_dev\x00'}, 0x1, 0x0) write$md_sysfs(r5, 0x0, 0x0) r6 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000100)={'/sys/block/md', @num=0x0, '/md/', @rdev={@ram={'dev-ram', 0x0}, 'recovery_start\x00'}}, 0x1, 0x0) write$md_sysfs(r6, &(0x7f0000000140)=@str='active', 0x6) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000080)={0x4}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@bridge_dellink={0x34, 0x11, 0x5, 0x0, 0xfffffffe, {0x7, 0x0, 0x0, r8, 0x3000, 0x100a0}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x8, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0x70}]}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800c800}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000280)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@bridge_newneigh={0x34, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r10, 0x80, 0x6, 0x7}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, @NDA_FDB_EXT_ATTRS={0xc, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c880}, 0x9840) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="64000000520001002cbd7000fedbdf251c08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="080006000200000008000100", @ANYRES32=r2, @ANYBLOB="080006000500000008000600660c000008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="0ba4962375e97f09d5a5b9f514e38be8725f4b9739e32e06e69949b0f44115326d389cf2c049863b8a4e47e663a80a850c04c8ade2a59f43e9c80740693736f98d87e492c69c649e48b1ab911de170cc59644bd0d7272101857db8877233d92d1aeeda60cf0bbdcdd78ead3b65605bcf0e3c61f2a7a1cdb90af69e2462217ab9c3fc5fdde8fdeec4e5280b71ccf01152e5c086d63c66e9db414c6d9dc62a1d4cff0b0fa97a33605fb98a2c4a884ac66c4fd5ad6904382d01528bbd4dd14a2ef03da21878e19fb6d594d4"], 0x64}}, 0x4000) 1m56.280759729s ago: executing program 6 (id=1212): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x63ed, 0x4) sendmmsg$inet(r0, &(0x7f0000000080)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') pread64(r1, &(0x7f0000000840)=""/102400, 0x19000, 0x1000000300) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_usb_connect(0x3, 0x4e, &(0x7f0000000340)=ANY=[@ANYBLOB="12010002000000401107500500000102030109023c0001010080320904000006ff00000007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d0200", @ANYRES16], 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvfrom(r0, &(0x7f0000000180)=""/131, 0xf92e58a67d38802c, 0x2101, 0x0, 0x0) 1m52.058400939s ago: executing program 6 (id=1215): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1a0000000400000000000000010000000080", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"/20, @ANYRES32=r0], 0x50) 1m51.836064584s ago: executing program 6 (id=1217): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x72f, 0x100, 0x8, 0x3b5}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000004c0)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x3, 0x30f, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x252}}}, &(0x7f0000000300)=0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/virtio/devices/virtio0/device\x00', 0x0, 0x0) read(r6, &(0x7f0000000500), 0x100) syz_genetlink_get_family_id$nbd(&(0x7f0000000500), 0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r7 = io_uring_setup(0x4de8, &(0x7f0000000800)={0x0, 0xd661, 0x400, 0x0, 0x2ff}) syz_emit_ethernet(0x66, &(0x7f0000000140)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0xf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0xc}, {[@noop, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1, 0x1}, {@loopback, 0x200}, {@local}]}]}}}}}}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) socket(0x10, 0x4, 0x80) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, r8) syz_ublk_setup_queues(r5, r4, &(0x7f0000000880)={0x0, 0x49cf, 0x400, 0x0, 0x23, 0x0, r6}, &(0x7f0000000900)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x367d, 0x80, 0x2, 0x14f, 0x0, r6}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9848, 0x10, 0x2, 0x311, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8024, 0x1, 0x1, 0x1dc, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7959, 0x4000, 0x1, 0x172, 0x0, r6}}], 0x4, &(0x7f0000002540)={0x2e, 0x45, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, r8, '\x00', {0x2, 0x847, 0x0, &(0x7f0000001540)=@buf_512="209149e1da94242bd42f251b04c269d59ab0d4a8382ae145256baa37b9449bea2cad31367720a872ad8dba2d3c2a8417a231fac7d7e7a4581421a547cdab42fd253503c1927362f716f8cf2212caab60542db1fc3a38899583c661b3fd935aa09106ce0c7474bc498c07190220340c84c9b6ce6cc9041663dbae496d2a3d0dfd6fc5a867117354215c174496fe69941fddcdc3d035074385ea7ce50f33b7ec3f6c401e09b750d6aed1c90278db533280ab53afb792ebce1602e0dd88e0b7abe5c73279e02499a549125e83c4830cb90f50a94ccdd74da9cbfedb9f8c33ad953d044a0895854bc6a3e0b6f41f18eadce9fb4c151bfa1830d5c42fa7316ab04f2e3608d5615bacd6bc50fe6ad5e47f0177318f1d9f1f8b3093e8913c3422ac00a3247137da2ad611eded8394ea07850a39ba685c18d3bbef200a4700b70e56309f50cefd807247fdcea6ff48635fc2382224a31cfa8ed527f9b1a30125085d5109ba59c13251167cb4d9333e078df99aff7b1df271ead99176d1b04c312575961270219e5aca99afd8c07e73be9c6b9a32bcd7b0490d535446dbe60fbfe8e700a4869273266d2e8131cdb181e62ba0cd77ae1663388a77b0e9fe499ee49766da4b7744565b51cf11333ff9f59777b9b143d64770f8ffae74a087523d5f34e5d4e06954b83eb05fe94c2afb42127b753183196535d7a66b43ccc70f7cbce10fce72"}}, &(0x7f00000025c0)) syz_ublk_setup_queues(r5, r4, &(0x7f0000000340)={0x0, 0x6ddb, 0x8, 0x1, 0x2e3, 0x0, r6}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdd52, 0x8, 0x0, 0x22a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf72, 0x8c, 0x5, 0xb3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x40, 0x0, 0x9d7c, 0x0, r9}}], 0x1, &(0x7f00000014c0)={0x2e, 0x12, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r8, '\x00', {0x2, 0x5, 0x0, 0x0}}, 0x0) r10 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi3\x00', 0x40400, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r11, &(0x7f0000000dc0)={0x1f, 0xfffe}, 0xe) listen(r11, 0x0) getsockopt$bt_BT_DEFER_SETUP(r11, 0x112, 0x7, &(0x7f0000000e00), &(0x7f0000000e40)=0x4) ioctl$COMEDI_INSN(r10, 0x8028640c, &(0x7f00000002c0)={0x4000000, 0x92, 0x0, 0x0, 0x2}) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xc, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) writev(r12, &(0x7f0000000c80)=[{&(0x7f0000000cc0), 0x86}], 0x2) syz_clone(0xc1100, 0x0, 0x19, 0x0, 0x0, 0x0) 1m51.540822841s ago: executing program 8 (id=1220): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x109042, 0x0) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x5) syz_io_uring_setup(0x1420, &(0x7f0000000140)={0x0, 0x2af2, 0x1, 0xfffffffe, 0x1a8}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000380)) syz_io_uring_modify_offsets$generic(r2, r3, 0x54, 0x10000) syz_io_uring_modify_offsets$flags(r2, r3, 0x68, 0x1) r4 = mmap$IORING_OFF_SQES(0x0, 0x81, 0x1000000, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, r4, &(0x7f0000001e00)=@IORING_OP_WRITE_FIXED={0x5, 0x16, 0x4004, @fd=r0, 0x6, &(0x7f0000001c80)=[{&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000001980)="efb0ff2ea7c52b04e01fa1c743a71bf66ea1b5801872d703f11f4128f064d29d5276e35da8b1a112c65483f0f36758a267ed1d4b97dda2a0d6c80fb279ca942a6e05e105820bd9f2c4f974bebe506d3010cc895f1d6ba0d1d20d7599a0520f5c3790d970275040098bc23c8c9cd11de77abf676826779a1b4cf4dcc2d8828bee05515c6e2e018cb39d3f20b1b038a1b69160d1644a5462c1dc9bd703f27a536dc9fcdf102c1762238d39363744fae6550eb3406da70964c4296d61ad97251f696b9f117a25479a684ff5f797f5edfd52", 0xd0}, {&(0x7f0000001a80)="9f0849828baa4e4d6c7f0c6ade604cc098d9789a8a3f66f103f6220497791a38d0bbf7e3df188f53d81accc0790e9075035687ce9e435e236e5fea27a36b3c909353871323446d3a5c8024f813eb8d8c442cf8f80e55f058555f1515240f1e417958a92e81e4a5b8538a144a3e2722e4855a8d4912003e76d72a29dc48b88a6e4469a3dd0fd5710be06c71903f06e046607638cc25cbf20041b0047b5348fc805c2b9ce24325709698a8ede1e490a4bbf9f791e8", 0xb4}, {&(0x7f0000001b40)="fdb05f9266a996d89f2c08b5d739bd34a5e6ea9a3c3d1bcaa108a192754007523219ae25b21c5b0cd4", 0x29}, {&(0x7f0000001b80)="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", 0xfe}], 0x5, 0x0, 0x0, {0x2, 0x0, 0xc, '\x00', &(0x7f0000001dc0)={0x1, 0xacae, 0xad, &(0x7f0000001d00)="47877fbd66fb2095a01b5f27ae8d9ab61fea48ff343e9c6419776ab130d4500f3c76bba650bfc77252214b94b68691b8c0744b430f52a2fb22841cca24dccd9d0a5ddd6ebaef56c47d225d069ac064b0d7753753d9f39454633a2a1fdd785f69c734381be66ae4a43f95884f414e5f853d73a4f9c8018b63d24c2ef558b4ca9e4066677431d7a790d061390b24b3aa13ca495268986509884a0c9c1cb7ec2b6ad4b973809b538c6d008d57cc5c", 0x78e}, 0x1}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000100)=[@mss={0x2, 0x2aa}], 0x1) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r7, 0x407, 0x0) write$FUSE_INIT(r7, &(0x7f0000000280)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x2, 0xffffffff82048008, 0x0, 0x40, 0x8, 0x0, 0x0, 0x0, 0x104, 0x4}}, 0x50) vmsplice(r7, &(0x7f0000000300)=[{&(0x7f0000000340)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r7, 0x407, 0x2000000) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$AUTOFS_DEV_IOCTL_READY(r7, 0xc0189376, &(0x7f0000000780)={{0x1, 0x1, 0x18, r7, {0x80}}, './file0\x00'}) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, 0x0) write$P9_RSTATu(r0, 0x0, 0x233) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000800)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r8, &(0x7f0000000840)={&(0x7f0000000880)={0x2, 0x4e21, @local}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000900)=""/4, 0xd000}], 0x1, &(0x7f0000000940)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x800}], 0x18}, 0x4000000) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r9, 0xaea2, 0x7a5) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x10, 0x0, 0x1}, {0x10, 0x0, 0x80140f}]}) 1m50.671500941s ago: executing program 8 (id=1222): ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000ec0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000f00)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000f40)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000f80)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x2000, {0x0, 0x0, 0x74, r4, {0x5, 0x10}, {0x1, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x840) connect$unix(r1, &(0x7f0000001000)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001080), 0x651, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x240}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x3000007, 0x401d032, 0xffffffffffffffff, 0x0) ioctl$MEMGETREGIONCOUNT(0xffffffffffffffff, 0x80044d07, 0x0) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x0, 0x8}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r7, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000040)={r5, r5, 0x3e4c, 0x0, 0x0, 0x24, 0x9, 0x46d, 0x8000, 0x5, 0x3, 0x4, 'syz0\x00'}) 1m50.131554873s ago: executing program 6 (id=1225): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) (fail_nth: 2) 1m49.675037956s ago: executing program 8 (id=1226): openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x143102) writev(r1, &(0x7f0000000bc0)=[{&(0x7f0000000c00)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000c40)='./file0\x00', 0x0) chdir(&(0x7f0000000c80)='./file0\x00') symlink(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000dc0)='./file0\x00') write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000ec0)={0x16, 0x98, 0xfa00, {0x0, 0x4, 0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4621, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0xa0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000f80)={@local, 0x18}) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000fc0)=0xffffffc3, 0x4) sendmmsg(r2, &(0x7f0000001000)=[{{&(0x7f0000001040)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x8936, &(0x7f00000010c0)) io_setup(0x8, &(0x7f0000001100)=0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001140), 0x2, 0x0) io_submit(r3, 0x1, &(0x7f0000001180)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0xfffd, r4, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1}]) write$FUSE_NOTIFY_RESEND(r4, &(0x7f0000001200)={0x14}, 0x14) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40050d0}, 0x40) 1m47.647515616s ago: executing program 8 (id=1229): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="42000000212000001c0012800c0001006d6163766c616e000c000280080003000380"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x8000000}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000080)="0f01c30fc7390f01cbb9080b00000f320fc72d1454d498c4c2999aaddd8bceb38fe8eca2a8810000003766baf80cb8303fa984ef66bafc0ced660f38810b", 0x3e}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 1m47.340844184s ago: executing program 8 (id=1232): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x72f, 0x100, 0x8, 0x3b5}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000004c0)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x3, 0x30f, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x252}}}, &(0x7f0000000300)=0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/virtio/devices/virtio0/device\x00', 0x0, 0x0) read(r6, &(0x7f0000000500), 0x100) syz_genetlink_get_family_id$nbd(&(0x7f0000000500), 0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r7 = io_uring_setup(0x4de8, &(0x7f0000000800)={0x0, 0xd661, 0x400, 0x0, 0x2ff}) syz_emit_ethernet(0x66, &(0x7f0000000140)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0xf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0xc}, {[@noop, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1, 0x1}, {@loopback, 0x200}, {@local}]}]}}}}}}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) socket(0x10, 0x4, 0x80) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, r8) syz_ublk_setup_queues(r5, r4, &(0x7f0000000880)={0x0, 0x49cf, 0x400, 0x0, 0x23, 0x0, r6}, &(0x7f0000000900)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x367d, 0x80, 0x2, 0x14f, 0x0, r6}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9848, 0x10, 0x2, 0x311, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8024, 0x1, 0x1, 0x1dc, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7959, 0x4000, 0x1, 0x172, 0x0, r6}}], 0x4, &(0x7f0000002540)={0x2e, 0x45, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, r8, '\x00', {0x2, 0x847, 0x0, &(0x7f0000001540)=@buf_512="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"}}, &(0x7f00000025c0)) syz_ublk_setup_queues(r5, r4, &(0x7f0000000340)={0x0, 0x6ddb, 0x8, 0x1, 0x2e3, 0x0, r6}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdd52, 0x8, 0x0, 0x22a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf72, 0x8c, 0x5, 0xb3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x40, 0x0, 0x9d7c, 0x0, r9}}], 0x1, &(0x7f00000014c0)={0x2e, 0x12, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r8, '\x00', {0x2, 0x5, 0x0, 0x0}}, 0x0) r10 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi3\x00', 0x40400, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r11, &(0x7f0000000dc0)={0x1f, 0xfffe}, 0xe) listen(r11, 0x0) getsockopt$bt_BT_DEFER_SETUP(r11, 0x112, 0x7, &(0x7f0000000e00), &(0x7f0000000e40)=0x4) ioctl$COMEDI_INSN(r10, 0x8028640c, &(0x7f00000002c0)={0x4000000, 0x92, 0x0, 0x0, 0x2}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xc1100, 0x0, 0x19, 0x0, 0x0, 0x0) 1m43.900586244s ago: executing program 8 (id=1239): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x80054) r1 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) syz_emit_ethernet(0x22, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffff3f02aaaaaaaaaabb080601184b14d571f866a4f63654b186dd0600ae6ebae5"], 0x0) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000280)="94", 0xf000}, {0x0}], 0x2) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000000001000001c00128009000100626f6e64000000000c000280fa00090000000000a84896426b0297b1e91c90a4c047fb35897173d71ed8059c0a8b23456f2cb5ca"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) r4 = socket$inet6_sctp(0xa, 0x94008d1befcee113, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, &(0x7f0000000400)) ioctl$SOUND_MIXER_WRITE_RECSRC(r1, 0xc0044dff, &(0x7f0000000440)=0x4) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000480)={0x0, {{0xa, 0x4e23, 0x2, @remote, 0x7ff}}, {{0xa, 0x4e1f, 0x4, @loopback}}}, 0x108) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f00000006c0)=0xfffffffffffffea7) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x230, 0x0, 0x700001b, 0x148, 0xe8, 0x148, 0x198, 0x206, 0x240, 0x198, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xc0, 0xe8, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x3}}}, {{@ip={@loopback, @rand_addr=0x64010102, 0xffffffff, 0xff, 'caif0\x00', 'wg0\x00', {}, {0xff}, 0x1d, 0x0, 0x78}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0xff, {0x9184}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) mkdir(0x0, 0xa5) mount$overlay(0x0, &(0x7f0000000a40)='./bus\x00', &(0x7f0000000a80), 0x0, &(0x7f0000000ac0)) sendmsg$netlink(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000b80)=ANY=[@ANYBLOB="140100002f00010000000000fbdbdf250401f2800d0018006e6c383032313534000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b00a9ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac6433"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg(r5, &(0x7f0000000c80)=[{{&(0x7f0000000cc0)=@generic={0x23, "41ef70a6493f96548c6772e991d2e709da2174d41450df614c7b98d688e661a1b29a8c059b706bc70885b2ff0f4ead40bdbeb46337ca989e950ae12331f19267f8f0ea634b47a8030073e1ec94e2410ce8287e5487e11994c1fa84627b0281e74be1465e31017d6986fb97fcaeda121d2d887c410e05f321a441404adf67"}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000d80)="102788a807ad28d8ec7a40e42a53ebff62a7cebf53fcaebc6c24d10b80846a7102f14cabd9c713036e115a23d1653ac43dc90af4b713546f290b80aa22d9e3", 0x3f}], 0x1, &(0x7f00000018c0)=ANY=[@ANYBLOB="10010000000000000a01000004000000d0431b8e55659b2a33c3a435b2a88770aeb72c2f39c4c3217d02ec293da916a9053094d38d8ac372c126533e8f6fb2a80b47f662d65bc31192b9d7661f6199c9439676e4a3524594932429109f47bd8fd78a3c2975cb82d07647f25ef6912cd0e93b2413e50b87aa7a0723a5da9a87a4519c7ddaea11025c7b3c4a742e04bbf080b0094f810423b725e881ba6c3afbc54308c853cedb4d3f048249a3585b5038f37a210d89ee6899da7b08ff1f804367ada46bf5cd5e1c4dbd250166d1fd38db96f40ab4b0b712fa7261f3a80370b0adbcd0fd7b747253d7edf90b778105be52e933049c78ef00fb4db4c733ece3d46fef8f756018451b6e1300000000000000b8000000000000002900000000800000c6acec26cb23f70700b3df61221ada0443cbfbd5905442c30b117c63ab2f4108bc04a67a0c80a1f37c85620b76f806670f79a58668d78082637a4bad79c3a99bad0910ca48491f2549ac1b58ebde0c270e55dd457c41b9b45f8eb8c460fcb00093a4886c81d216a466bde19b057de84033816f5af65a813bc778f4cc554529a1cb4d04953cadce88bdd273317021b099c19b77448c5a6a4b3e2204a0657d9c671ebaae8c8000000010100000000000000c01000004000000a9f95930a2602d080e6e2e84246b59cf2d98f6bae3c8062498c390a0d486de6efff85f16fae643df3de6b2bc96e54f5103568be898e77d6ef28386a69dcb7963cd7a6d6981484bc4e1c6f5f19c780cb66e1d393c12556308b8f5250cb2d61f09c52e6eb39a4fa40f7248e5dd334c227d81d3021ff8834cc16794179100cd1c31325467dd6e8e0fefb34da057c7463a35d0720430b9dad7018c020e9d2490a58cd663c46f95ff5414a2c9437d5f737a3471c23988a0eab2f4623bd03d70f18f3574c3b4218a59ab10bfba10c3122fd80b7303a54296ad35eaf0ee70833bc3b81c8465dcdfbd6ca3cc3021861509a855c402de562e9c6d9cfab109cef98fdc8ef268eaef31f57fdf12b2580fa52e0fa0ed3330a4d437c60607a296127f20a14543e02ff472f72d3c352854b41151ddd6607323b084fe7ba0b01a38acf6c55e381d2c5095906be28ad6c943bb7a21bfd80352351448e489486b44252da396086dda158a6bf66213bc3506f1d1bc01bc8ad0c0d728e0158df7a88023f5a2ae30c897efd5aaf01803fbcec625e601c505699521324fb59135c1fbd388bc90e63ca6527bebe0185377b46524928edb7d1d2d4b53824feb3bb9f75b1555a9a4a0794d7e773dbe0f19f42d750073b733e89f3298f1786a2f2e0bfa9e8d451d1c3a0a36401aeca92cab6d2eb74d6b391dfdfe6c54c98d75a627068cc916dd3dde01e8b47cd358bc9babde27505a40c292598b8c8f860d725bb2c89584786f3aabaaacf7e020b4a0feca924742cf1a8bdfd566cbe70f2e3389afa4fcc5f2fbc7e681728d70210e9bf41159e5ecee3c3c4d5b42fba03ce6ff22108602b6158536a60828e682fdac65b7a8129157da72a9520ef0d89a720c454ebf693755f99792a543df2b8ac820ed23c6586d348e32df8c87fd81cbed7abd42d79672ee524dcb83cc3f68360f8e9bd0feddf9a3c2c8795908f3f31570b428f36db6806c5a4a9e41b19d26f37ac135ea3adfc869a3fb33ddf0c2f6ce517a5cb69365b594091705b70004d164ec5956d8bd3dfaaeec2d9ce462744007b21f1d6207826ebab95b085eada28b42b78dfd0ba67b1b2e93595a9c527b1c263f0ce15c865dd3898c2a7d3283e9c101533b2efcb55dd9553e89334cdb83b76be4c6f736abff7c37303f9ec6a28d824f4cec0df0f652712de67810d18ed736904f773c3861ae5497f6bd36cc2aea35638a2b18f5a1ef98b40f252b64b5a91519b3a1809d7daf1a33eeedf1caf35433b9ca677e3c7cfb9e60a9ada8e38319409ead78a5ec9f6708886d3b29a5eac01bad1c830a2924616c3b310ec7ed43a542ba6c24d6805a47493ec8f06c106175cd089fdcab8b0729eb875e2b06a0fd3c6de7cba3a24b783287498c999de20db859e5a3fc6a75ba8e347cbaf019cabd6999f2963b0fe80e7e39cd36a8bd832109c7bcf3933770dabbe7924d4836867cdbeedec4077938c49dd731843dfefb15a0fa9463fe1bfa51b3d2d3fd435d65d2b581b37abe6b5d07b0fc669b5ca56d5712c3d2588df3a2a4d9b7c9a36a5d9bc50ee14cddc19335f6831c880a235711b943530ae80b13e71789ffaed7b84f9058b77abc70fc87cabd3773112449d0d610ad8a36cd539f4b2fc4f1e94e79ccc630be3b43e7fdf12de179c0905b70942a55108a62ac486cb6468454f7c5aa8884e7e56057941ba51aaf271882c168b4d01529283f66d2db7f92eb9f23b171427b003a104014e42a6af43e7ee51ef0d1497f29c63608b8c669a4e666167c6c2525df8f84475f613e420b2c7c86c98674e60a259fa981320c0ec60821fc96b002c577151e38701b87a4275b2842dcec8ae823a3ce68a0faf1b3178d077a2cb81aefbd0b6e4c0fc0b4ae600748dceb02fb5d6aa3196e0cd096289b025ee894374007e2971976f175f0fb2413947125abc90a3d515199d9dacd39b112b2b0e265c0aa8dd56a9316ca679a44ea128bd854ebd27919b8cdf79ff83c28968db29a5896ab59c8186efdc58a4b4babfc2229ec406f54b30e882ff4eee78052a6a7096c4223018ca1d9dae881ce649a1c4bb4fb76b26f1d49ea83ac10470a48db28a7eccc6a792b43dbe1e76f582fac1f8d11a33c36cf34f3daa89321a766939f2893c7d35463c0c774aeada565d0ac6ed451a51110e6fb3da0ca698a63a47867ad949173b78b4ce00bcd58b266551046eaed03c1633b441dbd141ca78ece13e2866ee38c8724908a990b42456ae59fd69313ca9a28a817f112487a356e3c948302cc04cdb8c60396b0a91cb9a5a7d5d0959151bb6210aa540c0a28e6cab70ca6e2ba5b3145e52c2f15a0531291d7884336ede060d54a876ace9132c4b94e17bd0fce35babd88fbcd328b62fc00ec25fd280e3fc6eebd1d9a70fbf1672f2402759f8d8687067e36ffeb4ac229e56a9cdbb1cb617dfb6655968ae4eed098576448f304048bcf69e9d9bae70a77ce7f7d5a007277c3dd170362102e80329e1d20966e07de6a6cf50b78dad899c002212623fa9827f12965ed2273bd1b64ebea25a4337ed92af9f54653d1bc6f843a8abcfa2915496289e0b38c47dda9d74552f434f75c307ec19e4c8532a23f869ccd4cf801763f2d0cb1ebc69252d2abe9504cb5520038ef7ab72c5e517487bc419bb91b4d8840ead7de66ad17e2b62a80adc9d16745931732772fe2c42891cd0e25df4f82ce444455e8b494cf1092062a1fde026fef08cf1ee1b8d3798e46e024c096f3a812ca932461a269da03228b97024b0d91604f47a886d6948ce6ecec8b42b9739a4b5691c557cfcfd9c517fcdaf71c4dbd168b0b0bd1d1e8ad544c8815826aef2148efd705e922b7d159e047a0650c30f55808231ca5307260d5b9cc7d4a1a43c05b484dbe1f0493a7cfc6814155c7ce2d67db4af3b607c7fc5c3eeac9860670592ff48c99163f31d67ecdb78e8366e5a215e2b3dbb5238f6d2e4d0206f27282459a98664df691272ec6c3e7ec2f6c748bc84a9490cc785f7540f8387c96be2006f81148d675f4cd28bbfeea60ba0366afdffbf77624bf717b70941d8090f4b4be6a06f7537795edf6e1cf209b210766bd665acc69e5734ea01255fcecc9f572163a89307735d3cb1bf3c4b51db94498bfade0835928f75213f6bcc8336cd3e09fe31cb25852dae39eb5cdb6a498e89b2df67d9c77f286e5702cd8a9d3633b533a9e776155923b9f7adf1905d72d407abe5602ad5f01b654423456e034c562343e341ff7e03a40a16e523de8f07fbfbad047e24eccf51eefde69f9abecde3079998ee5d7b1484d91abea2dd6422dcffa745dbbc3f683f0f918e1f69c360cdd675719d9c0cadf1734bdee60eb1f2789e08a2305045c596e6cffc786c5081353670db3b974f97eefeb1c91a4e422a13bf29ee0220a3e1cc9c68a983f39751db52c7cf84184d82ab1064f2447da7075c4ec10efe8c8959ffdc78f36686bede81a08ddfd93667d54ac05a172bd3f4c387f48724f2a03e7a494243fa2af0550d6d491200098b861bfd50f34c9213c75fc3e3a2632fb4e2987359f0b3082dbdb83e76b69723bd2842c8656f5023202c8b166aa42426e95430e65b52ec0c03dc66d20e88c88ea270e016a905765c0ede37fd3f4958e7cc77db7cecd875a3fc82aaaf35a0627d8a8a59cc5f7b5f566d3a3092bee902599f0a88231fae6f8734258ac1cf0426434c1ac183ac152f8299601423cd2c0603cf566fb51780a77bbdd363a6b493bd271c32460ed153bc648c81bd0e280cee9fdac2a0045eb485a7c6d6a29129421936dbc217d4da0445750cebcdc0257425fac1d39fcb91f359d264ecce2f80a87a85536be26c62b8e531d549a595da6d128912333f5b3224599aa3ad60b58854083970079dc71bcdf3e8d10c0533d84701bf80fdc2131507fc9e7a1cd6ab0fda42c294ec5bf752c80da501efde3eaa4d1c43ea4b8f77a27694bff1eccbe237ce4cc73e6cb16d981a8f275def70a05e0966d0c435005547e87142df35ab65f72d7b140d51a579a6d825510e3611346215183c3509a2c8135238e9f3937de5c658c0787ef82e422abdafffe4a6f9826da46451194c2636c7df6a9d95d5c64777b07df571d30a69cbfcb475fab5df6f43b911e203db94250cb7f347235a64b497c0fb3c0aff57792f1d67530be9a392487f1dd57633f117766823bf386da994359711b1f77fc5130770e9588467656c3822d8cadb28f2d92c6f214192568eec16b598a9c8ba222e1d0b4ea7dcddb11fdf766628ed61c42a3fb551f77022d7580ba7db2a0d0398e278175c7a457169256c1ec8cf5beeec2870462e8463e0618ecc7a1642bbcf864fd1b9a268b4c574b0696cb0fcf5b8a5f3b192458f8c5b5cb9b26e02e256d0326158947a851a3f098f085a5d2006a5d50f6a69e0531ec67487eaf938c56477c21837738569067eb9d899fa8fb9ccafde899506c9b3dc4b79081b363316d1f952df3c4e3b696bcdc2f590d0984a7d4d5ff7424190a108a565050fa636ac7c6d97e3a05c1e508153ed13ad9a1a9a36831267279e949b8896bb62966eb269e047b79d3ca5fabd1f5c9176c03b9ae1185724eca3befc973bf81e19fff559f50d1127d42cd8c3bdd34f54b00129ab8b799576e8f545737c68ce70e2a2a3057e7f7eea61f8bd31eb0546ae3e753a5ed34de30cdc21a29cfd9ccf3ad5c1e9c1671390e9cde6942c2b4e5b5ee1558803de19863bfbdef33885eb1ac8743b444606257b0d1471a630f4837fc1c1a57b168b819f34f0c42d83e028f357794532e491f0ea19695b2ce21c52ad27c7680ef232fcf51ed5074d2310e3ff648ecc238755d250f196e6b1be168e1d6694143e17a34cfbd7018206f74be25eaab7ad910a9f1733ca230be4a59c12b706df7792aed719e9c71a27e26ba62f25bb45e93601f3ff39b37c6e12998264d54d24d78e8942822929170acfdba6067e8f6c97338082e5a419273e310cb412c0e0d95824f75d0b5751d301e76dc09146248c202fe7083803fc77e4314062d3e1ed9e4a05beef1211b7597fce2375ec2cbd16523472cc8cd22893ede3aa0cb2afd6bbbf2a7e38cc7fd91ca6a17f452e1787be02a71a5a6cf59cf18488bbe2a81937c3b2e32123c7355a738aaa83a2b8bdaf8713acfb4962e99aeccbee2a97790b6b7ec5bf7855fb165628221a88d0f88b1d6df5fc72d2a47bc198eb49f8e29733d12e2134e84cca82ca5e57d3b766cc71df08e9a3ca730ff6be4514746dd78e43a73f2232bb49a8a63c24703bfb5b61221160bfcaa1654ba1c4c052fd46e368476d2ecb524c70adc7d3ae0c27ef3950ee6a53ee9b6ad4cb8a445f5a11a1c508d5badd98009f4e55db34e9cf78ae4a141a132279f93d9cb210570809be53cb6874f6809a80a14ae55ba186927e67d3854b197c32d58e55aa84a8261be9ae6b3d796953010f43cf5df3a2543ecefc0121af5385a846566646e67fce669bbe807cf2446081c07a59bf13de9237080524a128fbda66b85190a2b1975320bc9598e966ec24b17270393c6fb5cc8f58dbc756b3d13d6887168bf6e4d43ccc4e45c73c476c62f5f9ca8c68e077a09c23dfe40d5fa81c72774b0dc7d7a74bf488c83ae69e338473f02f5c0234f77272a85496cae5bcec6216c4ac23b20f875162484df888e9897fb20dae6a6a76cc1d760e2ad2dcc6295242a82ed19f6eba6fca4e6d56c7828e82063ea7c0a29bc666416d8413a38d687ea29fb672100e40de6514c1011ae98ab528d05786893a8eea655482f123cadfc6ac74a08498c81fa92bf0dca8c26fe10ab100100000000000016010000030000004d9cce5f08681922973671ad0854b831ec20288abba9f9361bda8c971a5c46c4fd6a17e648078c8a25dab8bb2c3776ad9069ec735d025a763b25a1b1711543271b5a67d3e59343f0d1b550393a039559e773d6f8067d6cfe30bcff18aee3b8363deb4057f0a00542771f5d1fc29580687fd35235aff93ab0243225b21e6782b80f8962547217f499235ad21b360ad3fdda2365482abea7ccfc279da21a1da4330d905f6ef75e284b22a3bf352160658956eb40af75e4a9f72b1abedc68e17310adf25c06c225c793eae7ee7a03ad428ebc7cae2bf9b39fc485cbe348e7cc9c075e3228ba945669e1bf94b498d7c3148ccca5e528622131d12785840000000000f8000000000000000b01000003000000c6580e39ab322f5c497bc989a949a8e0125dfe804b850da5933959728d534f294e83c458214a0d320099fd4c4cd2218f521c3be0e0f321e313b4ae024101afa1b6e7b41f85a7026f0cfbf6ffb1ef97e4dad039cf0bdb94262ac3a873dcab307d6ce4d06d97b9e58169ccc00561314973f846a034b509808f43e7cb7b0f91f8a1351344dc3da758bee8c1114e7d4bae6c9a1b875f1fb79b11c4c6496818373bd19c27673a4a6b6a66fe7917f884578ecd9407eed9291dc8f75e5fa55f506d07d7e9948574a58e7d24f565217a902aa446c51a88b7395e15a588f6ae3d184a754d66fe61ffa5c4580074abdce59dbb3a5e3ee2895595207885d0d2a2607534f532fa899d48de75033f5f0dee5bc21ede0052f2479b22d6d5c1fcaefa497d5ff684ce3aa9f9da0bdcf80b4e1d9a9c3f4cdf9cbc06de6b46d602de39b2ee788432ce939002c9165e91fe3d7b93dbba550b981290e183a1fcc815156df4b15cf0bd28c3aa09d9a46539f7"], 0x13e0}}], 0x4000323, 0xc881) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000000) 1m34.112922626s ago: executing program 37 (id=1225): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) (fail_nth: 2) 1m28.326182092s ago: executing program 38 (id=1239): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x80054) r1 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) syz_emit_ethernet(0x22, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffff3f02aaaaaaaaaabb080601184b14d571f866a4f63654b186dd0600ae6ebae5"], 0x0) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000280)="94", 0xf000}, {0x0}], 0x2) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000000001000001c00128009000100626f6e64000000000c000280fa00090000000000a84896426b0297b1e91c90a4c047fb35897173d71ed8059c0a8b23456f2cb5ca"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) r4 = socket$inet6_sctp(0xa, 0x94008d1befcee113, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, &(0x7f0000000400)) ioctl$SOUND_MIXER_WRITE_RECSRC(r1, 0xc0044dff, &(0x7f0000000440)=0x4) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000480)={0x0, {{0xa, 0x4e23, 0x2, @remote, 0x7ff}}, {{0xa, 0x4e1f, 0x4, @loopback}}}, 0x108) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f00000006c0)=0xfffffffffffffea7) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x230, 0x0, 0x700001b, 0x148, 0xe8, 0x148, 0x198, 0x206, 0x240, 0x198, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xc0, 0xe8, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x3}}}, {{@ip={@loopback, @rand_addr=0x64010102, 0xffffffff, 0xff, 'caif0\x00', 'wg0\x00', {}, {0xff}, 0x1d, 0x0, 0x78}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0xff, {0x9184}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) mkdir(0x0, 0xa5) mount$overlay(0x0, &(0x7f0000000a40)='./bus\x00', &(0x7f0000000a80), 0x0, &(0x7f0000000ac0)) sendmsg$netlink(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000b80)=ANY=[@ANYBLOB="140100002f00010000000000fbdbdf250401f2800d0018006e6c383032313534000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b00a9ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac6433"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg(r5, &(0x7f0000000c80)=[{{&(0x7f0000000cc0)=@generic={0x23, "41ef70a6493f96548c6772e991d2e709da2174d41450df614c7b98d688e661a1b29a8c059b706bc70885b2ff0f4ead40bdbeb46337ca989e950ae12331f19267f8f0ea634b47a8030073e1ec94e2410ce8287e5487e11994c1fa84627b0281e74be1465e31017d6986fb97fcaeda121d2d887c410e05f321a441404adf67"}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000d80)="102788a807ad28d8ec7a40e42a53ebff62a7cebf53fcaebc6c24d10b80846a7102f14cabd9c713036e115a23d1653ac43dc90af4b713546f290b80aa22d9e3", 0x3f}], 0x1, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x13e0}}], 0x4000323, 0xc881) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000000) 1m9.741871558s ago: executing program 7 (id=1294): socket$netlink(0x10, 0x3, 0x14) r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x80}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) ptrace$getregs(0xffffffffffffffff, r1, 0x7, &(0x7f0000000000)=""/100) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480), 0x0, 0xfffffffffffffffe) fanotify_init(0xef0, 0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x1, &(0x7f0000000500)=[{0x6, 0xff, 0x0, 0x7fff0026}]}) r5 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f00000005c0)=[{0x6, 0x0, 0xfe, 0x7fff0007}]}) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000600), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000780)={0x20004, r6, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000007c0)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000800)={r9}) close_range(r4, 0xffffffffffffffff, 0x0) r10 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZEX(r10, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) 1m6.709164977s ago: executing program 5 (id=1296): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB="07151a0000000000674febde8801537f6cb45bee7aa782a59f6b9da92f754e1b41d7d39737caeabfb4a897c4511f03cb", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) sendto(r2, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0xfffffffffffffffa, 0x0) read$msr(r4, &(0x7f0000000540)=""/102392, 0x18ff8) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r6 = fcntl$dupfd(r5, 0x406, r5) sendto$inet(r5, 0x0, 0x0, 0x200047fd, &(0x7f00000004c0)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000019540)=ANY=[@ANYRESDEC=r3, @ANYRESDEC=r3, @ANYRES8=r2, @ANYRESHEX=r4, @ANYRES16=r1, @ANYBLOB="5f885b03bddbe43fc7bdb7600eb5671c3a7454e656e3900b588baab82107a2bccabc2f1aede17266d626ff58cfad1430735fffa810b9ffcecaf9663cd703f456fedd64b1a2f5090ee20dee76c14b0d90f4d288541363239e5e1051ddd4bb1a340dfd97bfa6f7ae7473517d059ca43b94c14962fb81ea3b15651a76a7a33d88e7fcb9967b44db95c0b046cfed3993823e4083f3fb24830d884acce990920e37d891d625b64f35df2874187f9a8f6b5b981af9169b3ce6c2c5a3437d500121fb34bbea1debffedbab54788882ffa136c827d43c5e73ce24aa9cd7c2c990ca6b120cdd8b146c6a17d4e35622058d8a78c4c55b08f1b", @ANYRES16=r5, @ANYBLOB], 0x134}, 0x1, 0x0, 0x0, 0x44811}, 0x40008) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f00000197c0)={0x0, 0x0, &(0x7f0000019800)={&(0x7f0000019840)=ANY=[], 0x1b8}, 0x1, 0x0, 0x0, 0x8}, 0xc4) ptrace$ARCH_SET_GS(0x1e, r0, &(0x7f0000000040), 0x1001) syz_genetlink_get_family_id$tipc2(&(0x7f0000019880), r6) syz_genetlink_get_family_id$tipc2(&(0x7f00000198c0), r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000019680)={&(0x7f00000196c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd7000010000002500000008000300", @ANYRES32=r8, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 1m5.82244476s ago: executing program 7 (id=1297): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r1, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 1m5.068992088s ago: executing program 5 (id=1298): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe8001, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$rds(0x15, 0x5, 0x0) memfd_create(0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r4, &(0x7f0000000340)=""/102400, 0x19000) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) sched_setaffinity(r3, 0x47, &(0x7f0000019340)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019380)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a9401070700000083000000000b09007a15b2c8"], 0x0}, 0x0) sendmmsg$inet(r5, &(0x7f0000019440), 0x0, 0x20008000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000019480)={&(0x7f00000194c0)=@hci={0x1f, 0x300, 0x6}, 0x80, &(0x7f0000019540)=[{&(0x7f0000019580)="62031400d7000000", 0x8}, {&(0x7f00000195c0)="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", 0x117}, {&(0x7f0000019740)="68fc845e992f9239429637c2a63d00cc68f5808c91c9fd392da7fe6dbd", 0x1d}], 0x3}, 0x4041) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000019780), 0x2, 0x0) write$selinux_load(r7, &(0x7f0000019800)=ANY=[@ANYBLOB="45204c696e7578000000f10a8a18e635a5bc211076153bdf3c601cfde53c0f7c9173b1ca13598b6d9eb482beddfad608000000bc1c1496390d518fc49b4a034c89c9964bebe92abf82950984a1043754f1613b2e05910e2f13c8eb63de11b5d4f6c8c76bb09c7687b640133e3d4f0175b4122a10b60c87634696ea71b907d14acea68a366ef4f4c348afefd3c9edd3075ec27a6b77091627ed9f2403dde534664b1767431971ba1fab3547b515949f8a503a18fa8aef1c3cb24ef435f209f0069a76"], 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) socket$igmp6(0xa, 0x3, 0x2) 1m4.891489597s ago: executing program 7 (id=1299): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000440)={0x1c, &(0x7f0000000480)={0x20, 0x18, 0x2, "0200"}, 0x0, 0x0}) openat$nullb(0xffffffffffffff9c, &(0x7f00000003c0), 0x162682, 0x0) r1 = syz_usb_connect(0x0, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000260706140720c140050680102030109026e0001010080fa0904"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000100)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="04023904fffbffffffff0600d9336a3610000000000000000907c17c26f8ffffffffffffffff09010c084a490500ffffffffffff00001057960c08006f2cbcb315d58def93951570dc387e82dcd08d926da7d08ae6c08185feee834eb595dd821eb4abe42b673ccb594e89630d91e896413b3d57eff923a4000000000000"], 0x3c) unshare(0x42020800) r2 = getpid() r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r5, &(0x7f00000006c0), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x42, &(0x7f0000000700)=0x5, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000740)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_DELAY_DIST={0x9, 0x2, "dbf6703f73"}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000580)={'syzkaller0\x00', @multicast}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000001c0)={0x4, 0x0, 0x54000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="042fff01000000000000072dc2a80d3d5f4d68fa488340ff030614171f49512827"], 0x102) syz_ublk_add_dev(r4, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000006c0)=@new_dev={0x1, 0x737, 0x0, 0x0, 0x1000, 0xffffffff, r2}}}, &(0x7f0000000800)) pwritev(r10, &(0x7f0000000a00)=[{&(0x7f0000000840)="e58a731b4db442a6ab05e2442580fc041a604be20002c3f3030539749796dc1b658830d44b0180964909525296da27f88712b6b2dc6fb901eca5892cf0a7ed9bfbb7beba00429ae6358823639c21e2074d1cadaf15ac5884f4c6efc8aa33765eb3ec107855c854bbdfad545bf49aa0f9f49c8b51c0bdbfdbd77bd2ed8d23c6c779598c37", 0x84}, {&(0x7f0000000900)="6322eb534c47d7f033888aa6d7927ab03f91f2fc4fc98cdedb6d", 0x1a}, {&(0x7f0000000940)="c1d1fee679c6d5428cc08f42b8756a38d502931f98af0ca5b66cfca2b67477928c246bc46f7ecf30d9634ea22980f8913617b7562ad3ca2a301cbcdad56449ae39edd26bfcec6f6f30fdcdbb6f8b09512be09542a5a70ea458672c40c53b85837e67ac0ea4d4ba990c3588f237f65205917d4add462b2c8915705dac9002f1d0249508d46e7301821e4c4fc8f638bde920e7861cb01d6dabec7e6dd3e389624deb2adab4241e55a912053895d9ff", 0xae}], 0x3, 0x9, 0x2960) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00') 1m3.077490084s ago: executing program 9 (id=1301): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) getsockname$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f0000000480)={'syztnl1\x00', r1, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x30}, 0x80, 0x0, 0x1, 0x1}}) set_mempolicy(0x3, 0x0, 0x8) syz_open_dev$sg(&(0x7f0000000000), 0x5dc, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f00000010c0)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x80}) ioctl$UFFDIO_REGISTER(r4, 0xc018aa09, &(0x7f00000001c0)={{&(0x7f0000f8d000/0x1000)=nil, 0x1000}}) pselect6(0x40, &(0x7f000001a0c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0x0, 0x0) 1m0.392848842s ago: executing program 7 (id=1302): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB="07151a0000000000674febde8801537f6cb45bee7aa782a59f6b9da92f754e1b41d7d39737caeabfb4a897c4511f03cb", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) sendto(r2, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0xfffffffffffffffa, 0x0) read$msr(r4, &(0x7f0000000540)=""/102392, 0x18ff8) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r6 = fcntl$dupfd(r5, 0x406, r5) sendto$inet(r5, 0x0, 0x0, 0x200047fd, &(0x7f00000004c0)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000019540)=ANY=[@ANYRESDEC=r3, @ANYRESDEC=r3, @ANYRES8=r2, @ANYRESHEX=r4, @ANYRES16=r1, @ANYBLOB="5f885b03bddbe43fc7bdb7600eb5671c3a7454e656e3900b588baab82107a2bccabc2f1aede17266d626ff58cfad1430735fffa810b9ffcecaf9663cd703f456fedd64b1a2f5090ee20dee76c14b0d90f4d288541363239e5e1051ddd4bb1a340dfd97bfa6f7ae7473517d059ca43b94c14962fb81ea3b15651a76a7a33d88e7fcb9967b44db95c0b046cfed3993823e4083f3fb24830d884acce990920e37d891d625b64f35df2874187f9a8f6b5b981af9169b3ce6c2c5a3437d500121fb34bbea1debffedbab54788882ffa136c827d43c5e73ce24aa9cd7c2c990ca6b120cdd8b146c6a17d4e35622058d8a78c4c55b08f1b", @ANYRES16=r5, @ANYBLOB="1278f90e3a9c22"], 0x134}, 0x1, 0x0, 0x0, 0x44811}, 0x40008) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f00000197c0)={0x0, 0x0, &(0x7f0000019800)={&(0x7f0000019840)=ANY=[], 0x1b8}, 0x1, 0x0, 0x0, 0x8}, 0xc4) ptrace$ARCH_SET_GS(0x1e, r0, &(0x7f0000000040), 0x1001) syz_genetlink_get_family_id$tipc2(&(0x7f0000019880), r6) syz_genetlink_get_family_id$tipc2(&(0x7f00000198c0), r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000019680)={&(0x7f00000196c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd7000010000002500000008000300", @ANYRES32=r8, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 59.35038661s ago: executing program 7 (id=1303): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x72f, 0x100, 0x8, 0x3b5}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000004c0)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x3, 0x30f, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x252}}}, &(0x7f0000000300)=0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/virtio/devices/virtio0/device\x00', 0x0, 0x0) read(r6, &(0x7f0000000500), 0x100) syz_genetlink_get_family_id$nbd(&(0x7f0000000500), 0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r7 = io_uring_setup(0x4de8, &(0x7f0000000800)={0x0, 0xd661, 0x400, 0x0, 0x2ff}) syz_emit_ethernet(0x66, &(0x7f0000000140)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0xf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0xc}, {[@noop, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1, 0x1}, {@loopback, 0x200}, {@local}]}]}}}}}}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) socket(0x10, 0x4, 0x80) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, r8) syz_ublk_setup_queues(r5, r4, &(0x7f0000000880)={0x0, 0x49cf, 0x400, 0x0, 0x23, 0x0, r6}, &(0x7f0000000900)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x367d, 0x80, 0x2, 0x14f, 0x0, r6}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9848, 0x10, 0x2, 0x311, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8024, 0x1, 0x1, 0x1dc, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7959, 0x4000, 0x1, 0x172, 0x0, r6}}], 0x4, &(0x7f0000002540)={0x2e, 0x45, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, r8, '\x00', {0x2, 0x847, 0x0, &(0x7f0000001540)=@buf_512="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"}}, &(0x7f00000025c0)) syz_ublk_setup_queues(r5, r4, &(0x7f0000000340)={0x0, 0x6ddb, 0x8, 0x1, 0x2e3, 0x0, r6}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdd52, 0x8, 0x0, 0x22a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf72, 0x8c, 0x5, 0xb3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x40, 0x0, 0x9d7c, 0x0, r9}}], 0x1, &(0x7f00000014c0)={0x2e, 0x12, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r8, '\x00', {0x2, 0x5, 0x0, 0x0}}, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi3\x00', 0x40400, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r10, &(0x7f0000000dc0)={0x1f, 0xfffe}, 0xe) listen(r10, 0x0) getsockopt$bt_BT_DEFER_SETUP(r10, 0x112, 0x7, &(0x7f0000000e00), &(0x7f0000000e40)=0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xc, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) writev(r11, &(0x7f0000000c80)=[{&(0x7f0000000cc0), 0x86}], 0x2) syz_clone(0xc1100, 0x0, 0x19, 0x0, 0x0, 0x0) 58.04212395s ago: executing program 5 (id=1304): setns(0xc9, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) r1 = syz_open_dev$media(0x0, 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc01c7c02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@fallback=r0, r0, 0x2f, 0x0, 0x0, @void, @value=r0}, 0x20) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000580)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f00000005c0)=0x1, 0x4) sendmmsg(r5, &(0x7f0000000600), 0x612, 0x4000010) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {0xee01, 0xee01}}, './file0\x00'}) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, r7, &(0x7f00000000c0)={0x8000000000000000, 0x5, 0x3, 0x8, 0xc16c, 0x3, 0x6, 0x7fffffffffffffff, 0x4}) 57.826811443s ago: executing program 9 (id=1305): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xfffc}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "e7ffff7f00000000"}]}, @NFTA_SET_ELEM_KEY_END={0x10, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "f81f3fe70a58a077"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd8}}, 0x0) (fail_nth: 2) 57.232751433s ago: executing program 9 (id=1306): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB="07151a0000000000674febde8801537f6cb45bee7aa782a59f6b9da92f754e1b41d7d39737caeabfb4a897c4511f03cb", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) sendto(r2, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0xfffffffffffffffa, 0x0) read$msr(r4, &(0x7f0000000540)=""/102392, 0x18ff8) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r6 = fcntl$dupfd(r5, 0x406, r5) sendto$inet(r5, 0x0, 0x0, 0x200047fd, &(0x7f00000004c0)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000019540)=ANY=[@ANYRESDEC=r3, @ANYRESDEC=r3, @ANYRES8=r2, @ANYRESHEX=r4, @ANYRES16=r1, @ANYBLOB="5f885b03bddbe43fc7bdb7600eb5671c3a7454e656e3900b588baab82107a2bccabc2f1aede17266d626ff58cfad1430735fffa810b9ffcecaf9663cd703f456fedd64b1a2f5090ee20dee76c14b0d90f4d288541363239e5e1051ddd4bb1a340dfd97bfa6f7ae7473517d059ca43b94c14962fb81ea3b15651a76a7a33d88e7fcb9967b44db95c0b046cfed3993823e4083f3fb24830d884acce990920e37d891d625b64f35df2874187f9a8f6b5b981af9169b3ce6c2c5a3437d500121fb34bbea1debffedbab54788882ffa136c827d43c5e73ce24aa9cd7c2c990ca6b120cdd8b146c6a17d4e35622058d8a78c4c55b08f1b", @ANYRES16=r5, @ANYBLOB="1278f90e3a9c22"], 0x134}, 0x1, 0x0, 0x0, 0x44811}, 0x40008) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f00000197c0)={0x0, 0x0, &(0x7f0000019800)={&(0x7f0000019840)=ANY=[], 0x1b8}, 0x1, 0x0, 0x0, 0x8}, 0xc4) ptrace$ARCH_SET_GS(0x1e, r0, &(0x7f0000000040), 0x1001) syz_genetlink_get_family_id$tipc2(&(0x7f0000019880), r6) syz_genetlink_get_family_id$tipc2(&(0x7f00000198c0), r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000019680)={&(0x7f00000196c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd7000010000002500000008000300", @ANYRES32=r8, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 56.509675951s ago: executing program 9 (id=1307): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r1, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 53.406824461s ago: executing program 5 (id=1308): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) r1 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r1, &(0x7f0000000600)=""/102392, 0x18ff8) rt_tgsigqueueinfo(0x0, 0x0, 0x5, &(0x7f0000019600)={0x18, 0x1851, 0x6}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000019680)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) accept$alg(r2, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000019700)) prlimit64(r0, 0xa, &(0x7f00000005c0)={0xdc, 0x8000000000000004}, 0x0) syz_usb_connect(0x0, 0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404406478000010102030109021ca53f010080fa0904030000010100000a240104010a0002"], 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x3, 0x0) ioctl(r3, 0xc4c85513, &(0x7f00000005c0)) 53.122561022s ago: executing program 7 (id=1309): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=@deltfilter={0xe88, 0x2d, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xe58, 0x2, [@TCA_CGROUP_ACT={0xe54, 0x1, [@m_pedit={0xe50, 0x5, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x1c000000, 0x40, 0x4, 0x7, 0x3fe}, 0xb1, 0x3}, [{0x3, 0x2, 0xffffffff, 0x3, 0xd8aa, 0x7}, {0xaa2, 0x6, 0x101, 0x6, 0x2, 0x3}, {0x200000, 0x100, 0x0, 0x5c6, 0x6830, 0x8}, {0x2, 0x311, 0x8, 0x4b, 0x82, 0x8}, {0x7, 0x5, 0x2, 0x212, 0x7, 0xe1}, {0x7, 0x4, 0x8d, 0x1ff, 0x1ff, 0x1000}, {0x200, 0x7, 0xffffffff, 0x9, 0x9}, {0x7, 0xfe4, 0x1, 0x0, 0x624, 0xb513}, {0x8, 0x3, 0x7ff, 0x70, 0x6, 0x8000}, {0xfffffffe, 0x0, 0x3ff, 0xb06, 0x1, 0x6}, {0x5, 0x1, 0xdb, 0x6, 0x2, 0x4}, {0x9, 0x4, 0x519f, 0x5, 0x6, 0x31c4}, {0x7, 0x7, 0x3ff, 0x1, 0x8000, 0x5}, {0x7fffffff, 0x1, 0x5, 0xfe45, 0x5, 0xb}, {0x800bd, 0x5f05, 0x8, 0xf, 0x1, 0xa}, {0x0, 0x8000, 0x3, 0x7, 0xd17, 0x7}, {0xae, 0x7, 0x2, 0x2, 0x9}, {0x6, 0x4, 0xa, 0x3, 0x1, 0x3}, {0x2, 0xa502, 0x3, 0xfffffff7, 0x81, 0x1}, {0x80, 0x8, 0x9, 0x0, 0x0, 0x7}, {0x9, 0x4, 0x1400000, 0x9, 0xad, 0x6}, {0xc, 0xffffff00, 0x5, 0x3, 0x3, 0x3}, {0x7, 0x32da135, 0xb, 0x8, 0xa93c, 0x6}, {0x3e, 0x5bce, 0x4, 0x7ff, 0x80000001, 0x32b}, {0xffffffff, 0x9, 0x100, 0x1, 0xfffffffb, 0x9}, {0x10001, 0x1, 0xe0cc, 0x8, 0x9, 0x2}, {0xf7, 0x5, 0x800, 0x8, 0x7f}, {0xdbeb, 0x8, 0x1, 0x1, 0x1, 0x80000}, {0x5, 0x0, 0xbaf9, 0x4, 0x28000000, 0x9}, {0x0, 0x8, 0x6, 0x9, 0x5, 0xfffffff4}, {0xadfe, 0x9, 0x1, 0x4, 0xfaf, 0x81}, {0x800, 0x5, 0x3, 0x5, 0x5, 0x1e4}, {0x6, 0x7, 0x8, 0x8, 0xad38, 0x6}, {0xa, 0x4467, 0x9, 0x5, 0x401, 0x1}, {0x1ff, 0x400, 0x9, 0x80000001, 0x7ff, 0xb6}, {0x1000, 0xffff8001, 0x40, 0x2, 0x800, 0x3}, {0x9, 0xb, 0x5, 0x9, 0x4, 0x9}, {0x0, 0xe, 0x5, 0x4, 0x9, 0x6}, {0x5, 0x4, 0x6, 0xfffffffe, 0x4, 0xfff}, {0x5, 0x0, 0x1, 0x5a48, 0x6, 0x7ffffff9}, {0xffffffff, 0x80000000, 0x6d, 0x0, 0x8, 0xe}, {0x9, 0xfffffffa, 0xa, 0x6, 0x8, 0x9}, {0x7fff, 0x3, 0x5, 0x3ff, 0x8, 0x7}, {0x10001, 0x7, 0x2, 0x7ff, 0x9, 0x6}, {0x3, 0x9de, 0x4, 0x11, 0x7, 0x9}, {0x3, 0x209, 0x8f, 0xffffdd1a, 0x10, 0x2}, {0x1, 0xa8a9, 0x1, 0x5, 0x7, 0x401}, {0x4, 0xffff, 0x1000, 0x1, 0x6, 0x1}, {0x2a, 0x0, 0x80000000, 0x0, 0xfc, 0x3}, {0xc55b, 0x5, 0xb, 0x8001, 0x4, 0x1ff}, {0x7, 0x6, 0x0, 0x1d, 0x42f, 0x7}, {0xfffffff8, 0x1ff, 0x3, 0x2, 0x7, 0x7}, {0x1, 0x2, 0x5, 0x30, 0xfe68, 0x800}, {0x80000000, 0x2, 0x1, 0x8, 0x0, 0xffffffff}, {0x3, 0x6021db75, 0x7fff, 0x1000, 0xc1, 0x1add65aa}, {0x2, 0x7, 0x4, 0x2, 0xe9, 0x986}, {0xba, 0x8, 0x6, 0x401, 0x4, 0x10}, {0x9, 0x7fffffff, 0xb70f, 0x3c, 0x3, 0xfffffffe}, {0x4, 0x3, 0x4, 0xd, 0xb24, 0x6}, {0xbf, 0x3, 0xbf6, 0xfffeffff, 0x2, 0x3}, {0x3, 0x6, 0x4, 0x7c6, 0x80000001, 0x1}, {0x58e2, 0x1, 0x4, 0x7, 0x3ff, 0x4}, {0x6, 0xb4, 0xeb, 0x3, 0x6, 0xe}, {0xc, 0x1, 0x3, 0xf, 0x7, 0xdb10ee8a}, {0x3, 0xf, 0x81, 0x420d, 0xa, 0xad78}, {0x2, 0x4, 0xfffffffc, 0x401, 0x4, 0x2}, {0x4, 0x4, 0x3, 0xf908, 0x2, 0x400}, {0x800, 0x6, 0x2, 0x4, 0x8e20, 0x4}, {0x7ae4fc5e, 0x3, 0xf, 0xf87, 0x2, 0x1}, {0x2, 0x7, 0xed7e, 0x4, 0x5, 0xdc}, {0x4, 0x154, 0xfffffe00, 0x3ff7ffff, 0x2, 0xa}, {0x6, 0x5, 0x3, 0x3a84, 0x0, 0x1}, {0xeea1, 0x9, 0x55de2144, 0x9, 0x80, 0x7cf}, {0x2, 0x6, 0x8, 0x3, 0x0, 0x7fffffff}, {0x1000, 0x7f, 0x8000, 0xfffffffe, 0x8, 0xd1e}, {0x6, 0x2, 0x6c5, 0xd, 0x4, 0x8}, {0x1, 0x5, 0x10000, 0xc, 0x7ff, 0x5}, {0x4, 0x7, 0x264564e6, 0xea, 0x7fff, 0x1}, {0xa, 0x4, 0x2, 0x3, 0x0, 0x7}, {0x84000000, 0x9, 0x2, 0x8000, 0x5, 0x4}, {0x0, 0x2, 0xa483, 0x9, 0x2, 0x6}, {0x22, 0x2, 0x9, 0x1, 0x3, 0x4}, {0x3, 0x3, 0x7fff, 0x0, 0x46, 0x7fffffff}, {0x6, 0x8, 0xffffc000, 0x1ff, 0x8}, {0xe, 0x1, 0xffffffff, 0x9, 0x9, 0x8}, {0x1000, 0x9, 0xffffffff, 0x100, 0x3ff}, {0x80, 0x1, 0x9, 0x6a59, 0x4, 0x3}, {0x8000, 0x0, 0x100, 0x1, 0x0, 0x4}, {0x0, 0x401, 0xbe5e, 0x0, 0x81, 0xd0}, {0x6, 0xa, 0x146e, 0x43a, 0xe, 0xb08}, {0x7ff, 0x0, 0x4, 0x0, 0x7f, 0x1}, {0xfffffff6, 0x5, 0xe, 0xff, 0x7, 0x6}, {0x0, 0x4c, 0x8, 0xfffffffc, 0x2, 0xd42}, {0xff, 0xfffffffc, 0x2, 0x0, 0xb881, 0x6}, {0x3, 0x8, 0xffffffff, 0xfffffbff, 0x1, 0x96e}, {0x5, 0x6, 0x380000, 0x3, 0x7, 0x2}, {0x0, 0x81, 0x3, 0x1, 0x4, 0x4}, {0x0, 0x7, 0x8, 0x5, 0x3, 0x10}, {0x4, 0x6, 0x3, 0xf, 0xf, 0x9}, {0x7fffffff, 0x8000, 0x3ff, 0x8, 0x505, 0xe3e}, {0x9, 0x1, 0x7, 0xd1, 0x8, 0x1}, {0x4, 0x9da, 0x2, 0x7, 0x9d94bae, 0x101}, {0x6, 0x2, 0x7f, 0x13760, 0x10001, 0x9}, {0x3c, 0x0, 0x409, 0x3, 0xfffeffff}, {0x9, 0x7, 0x0, 0xf5, 0xdc1, 0x7c94}, {0x5, 0x3, 0xfff, 0x5, 0x99, 0x4e}, {0x10, 0x3, 0x8, 0x4516, 0x1, 0xe89c}, {0x21b, 0x9, 0xa, 0x5, 0x7fff}, {0x7f, 0x0, 0x489, 0x1, 0x80000001, 0xe}, {0x5, 0xfffff1f4, 0x7, 0x5, 0x7, 0x9}, {0x4, 0x6, 0x3, 0x5, 0x6, 0x1}, {0xe3e, 0xfffffffd, 0x3, 0x5, 0x8000, 0x2}, {0x101, 0xa2, 0xff, 0xfffffff7, 0x10001, 0x80000000}, {0x14a9, 0x1ff, 0x3, 0x2, 0x7, 0x1}, {0xa82c, 0x570b, 0x9, 0x0, 0x1, 0x5}, {0x2, 0x3, 0x2, 0xffff0000, 0x8, 0x7}, {0x0, 0xd2, 0x1, 0x9, 0x10, 0xfffff000}, {0x5, 0x8, 0x1, 0x0, 0x4, 0x1c5b}, {0x2, 0xffff5a2f, 0x2, 0x5, 0x1, 0x200}, {0x193cfceb, 0x800, 0x3, 0xd, 0x4, 0x5}, {0x8, 0x1fffe, 0x2, 0x9, 0x0, 0xc38c}, {0x9, 0x0, 0x5, 0x4, 0xfffffffd, 0xe0000}, {0xffffffff, 0xec, 0x5, 0x4, 0xc1e7, 0xb64d}, {0x8000, 0x87, 0x7ce, 0x400, 0x0, 0x2d}, {0x9, 0x9, 0x2, 0x18f, 0x3ff, 0x3}, {0x2, 0x5, 0x6, 0xb, 0x7}, {0x81, 0x2, 0x4, 0x0, 0x3, 0x7}, {0x9f8, 0x2, 0x4, 0xe, 0x400, 0x6}], [{0x2}, {0x706c4c185c430530}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x7, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x1}, {}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x5}, {0x4}, {}, {0x5, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x7, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x4}, {0x5}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x4}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0xec1752f8e3477738, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x433dd36a35789fc3}, {}, {0x3}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe88}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="01921dc787e1e2c6e392d42312a882a789eb2703522d73dac3f965884f6ae0294e3fef6b47709081b4a4221539885867f1d34c9b0abbf71da704222ee98e111d8fce52fa6e411262408505e11bdf60f975a2f0b801e543d8c6ea54ab7a18c8", 0x5f, 0xe) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1195, &(0x7f0000000340)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, 0x0, 0x8080) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, 0x0, 0x80) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000480)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000001480), 0x651, 0x0) recvmmsg(r2, &(0x7f00000014c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001580)={&(0x7f00000015c0)=ANY=[@ANYBLOB="2800e900", @ANYRES16=0x0, @ANYBLOB="08002bbd7000ffdbdf253100000008000100300000000c00990005000000110000"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x20002000) recvmsg$unix(0xffffffffffffffff, 0x0, 0x80) prlimit64(0x0, 0x1, 0x0, 0x0) r4 = creat(&(0x7f0000001600)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r4, &(0x7f0000001640)={'#! ', './file0', [{0x20, '\x15\xe6\x8e\\\xfe\x15^\xca\xbb\x88B\xeb\x90FAv\xdc\xbc\x1eiU\b\xc2D\xdb\xca\x9d\xb4oL\xe92\x7f+\f\x0e\xfd\xceTC\x1f;u\x84E\x04\xe3B19xO\xc2\xd4.Mp\xf4\x80{e\x87\xc4V\xe0\x99\x99\x8b\x93I\x8a\xb3\xce*\x9b\xd0X\aA0S\x02k\xdb\x12\v\x9c\x10nY\x85\x92\xf6\x93\xc4%\x0f\x80.\x8d\x9b\x15\x8e\xf4LWr\x14\x9eKh\x97L\xb4\x03\xe9=\x8e\xff\xf0\xb1al\xb6\xc9\xa1/L\x8c7\xa0\x8eD\x1f,\x93`\xc0h\xacjGx\xb8\x9cv\x99bA\xc5]\b\xf8\xa5\x9b\x1c\xeeKB\xdd\xe8\xbboT\x90\x84k\xae\xb5\xfa\xd9\x0f\xd4T<\x0f\xdb\xec\x05HcN\xae;\x87\x00\x00\x00\x00\b\x92\xa7\xdf\x1dS\x00\x8b\x81\xf4\x84X*\xa6e\x922|FO\v\xa6\x17jG\xe3]'}]}, 0xe4) close(r4) r5 = syz_open_procfs(0x0, &(0x7f0000001740)='net/route\x00') pread64(r5, &(0x7f0000003dc0)=""/102356, 0x18fd4, 0xc2a) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f000001cdc0)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f000001ce00)={0x2020}, 0x2020) execve(&(0x7f000001ee40)='./file0\x00', 0x0, &(0x7f000001ee80)={[&(0x7f000001eec0)=' ']}) 52.686095619s ago: executing program 9 (id=1310): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x72f, 0x100, 0x8, 0x3b5}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000004c0)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x3, 0x30f, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x252}}}, &(0x7f0000000300)=0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/virtio/devices/virtio0/device\x00', 0x0, 0x0) read(r6, &(0x7f0000000500), 0x100) syz_genetlink_get_family_id$nbd(&(0x7f0000000500), 0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r7 = io_uring_setup(0x4de8, &(0x7f0000000800)={0x0, 0xd661, 0x400, 0x0, 0x2ff}) syz_emit_ethernet(0x66, &(0x7f0000000140)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0xf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0xc}, {[@noop, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1, 0x1}, {@loopback, 0x200}, {@local}]}]}}}}}}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) socket(0x10, 0x4, 0x80) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, r8) syz_ublk_setup_queues(r5, r4, &(0x7f0000000880)={0x0, 0x49cf, 0x400, 0x0, 0x23, 0x0, r6}, &(0x7f0000000900)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x367d, 0x80, 0x2, 0x14f, 0x0, r6}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9848, 0x10, 0x2, 0x311, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8024, 0x1, 0x1, 0x1dc, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7959, 0x4000, 0x1, 0x172, 0x0, r6}}], 0x4, &(0x7f0000002540)={0x2e, 0x45, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, r8, '\x00', {0x2, 0x847, 0x0, &(0x7f0000001540)=@buf_512="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"}}, &(0x7f00000025c0)) syz_ublk_setup_queues(r5, r4, &(0x7f0000000340)={0x0, 0x6ddb, 0x8, 0x1, 0x2e3, 0x0, r6}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdd52, 0x8, 0x0, 0x22a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf72, 0x8c, 0x5, 0xb3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x40, 0x0, 0x9d7c, 0x0, r9}}], 0x1, &(0x7f00000014c0)={0x2e, 0x12, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r8, '\x00', {0x2, 0x5, 0x0, 0x0}}, 0x0) r10 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi3\x00', 0x40400, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r11, &(0x7f0000000dc0)={0x1f, 0xfffe}, 0xe) listen(r11, 0x0) ioctl$COMEDI_INSN(r10, 0x8028640c, &(0x7f00000002c0)={0x4000000, 0x92, 0x0, 0x0, 0x2}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xc, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) writev(r12, &(0x7f0000000c80)=[{&(0x7f0000000cc0), 0x86}], 0x2) syz_clone(0xc1100, 0x0, 0x19, 0x0, 0x0, 0x0) 52.224909864s ago: executing program 5 (id=1311): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x72f, 0x100, 0x8, 0x3b5}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000004c0)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x3, 0x30f, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x252}}}, &(0x7f0000000300)=0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/virtio/devices/virtio0/device\x00', 0x0, 0x0) read(r6, &(0x7f0000000500), 0x100) syz_genetlink_get_family_id$nbd(&(0x7f0000000500), 0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r7 = io_uring_setup(0x4de8, &(0x7f0000000800)={0x0, 0xd661, 0x400, 0x0, 0x2ff}) syz_emit_ethernet(0x66, &(0x7f0000000140)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0xf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0xc}, {[@noop, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1, 0x1}, {@loopback, 0x200}, {@local}]}]}}}}}}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) socket(0x10, 0x4, 0x80) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, r8) syz_ublk_setup_queues(r5, r4, &(0x7f0000000880)={0x0, 0x49cf, 0x400, 0x0, 0x23, 0x0, r6}, &(0x7f0000000900)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x367d, 0x80, 0x2, 0x14f, 0x0, r6}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9848, 0x10, 0x2, 0x311, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8024, 0x1, 0x1, 0x1dc, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7959, 0x4000, 0x1, 0x172, 0x0, r6}}], 0x4, &(0x7f0000002540)={0x2e, 0x45, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, r8, '\x00', {0x2, 0x847, 0x0, &(0x7f0000001540)=@buf_512="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"}}, &(0x7f00000025c0)) syz_ublk_setup_queues(r5, r4, &(0x7f0000000340)={0x0, 0x6ddb, 0x8, 0x1, 0x2e3, 0x0, r6}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdd52, 0x8, 0x0, 0x22a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf72, 0x8c, 0x5, 0xb3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x40, 0x0, 0x9d7c, 0x0, r9}}], 0x1, &(0x7f00000014c0)={0x2e, 0x12, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r8, '\x00', {0x2, 0x5, 0x0, 0x0}}, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi3\x00', 0x40400, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r10, &(0x7f0000000dc0)={0x1f, 0xfffe}, 0xe) listen(r10, 0x0) getsockopt$bt_BT_DEFER_SETUP(r10, 0x112, 0x7, &(0x7f0000000e00), &(0x7f0000000e40)=0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0) syz_clone(0xc1100, 0x0, 0x19, 0x0, 0x0, 0x0) 50.930068997s ago: executing program 9 (id=1312): mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/vhci\x00', 0x2, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$kcm(0x10, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000400), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000004c0)='maps\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000001400010401000000000000002d000000010000000500020008"], 0x20}}, 0x0) r4 = socket(0x2d, 0x2, 0x0) sendto(r4, 0x0, 0x0, 0x0, &(0x7f00000005c0)=@generic={0x2d, "00000100000008010800"}, 0x80) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000680)={0xaa, 0x180}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000002740)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000027c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002800)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002880)={&(0x7f00000028c0)={0x38, r7, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0xfffffffffffffcab, 0x1, r8}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) 50.38040251s ago: executing program 5 (id=1313): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000300), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000340), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000380)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f00000003c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendmmsg$inet(r5, &(0x7f0000003400)=[{{&(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000700)="c0911ee75112f1d01a9f0f249fd85fe69b78d0f48b73fa4da5674dec1ce0a645ef688281f711fc822a78235c2429f3aef3fdf8abfc0055a20a28878a964aa1d0ac41322a88b47620cf8455dd648ef36ff34101c9591f95e2d3e942d3c54f3654ecfe556fdc42c5a82d46613377ef72bf00188bd5a85ad9384d8e7a9ededd0cb6c752a86346351e57964c7b27d7047e48e0b6c7d5858d633e8d00d321b5ff233109ed3c0868dfd826fb50e5199bad7be76161f00888127074ec", 0xb9}, {&(0x7f00000007c0)="de214a34336c7726181bea5c57a66263733d", 0x12}], 0x2, &(0x7f0000000a80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x51}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x80}}, {{&(0x7f0000000b00)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000030c0)=[{&(0x7f0000000b40)}, {&(0x7f0000000b80)="1ccf9ab723d684f116ae2d7ed418e2a7621edd30243bfc16809663e2f475234ec000c84ec85e6620529a758296b8940f24194a141dc06b70f0aa4332b17b3633dd6abc9a61d849fae229824c35a66b90617cac145a9f7118e7f205f731a48d5f5213b1f3bcb131a75171008156d397cecca2df096b73b11769c892f47cb9002ecb072cbb3c717ee2266ad7590d588d17502801f0776e265ace291ebc6de2b8cfd3868dcf6d4c543da6b1a711d8b5236f4dd2a6dd81a27310165051a4c3f2c2c448918266e20a8b899eae8f366f7a18b68e6ea4378b2f1186093ffacebe9e8e0acb68ac2ed9430326abeb23e0b496", 0xee}, {&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000001c80)="e04042e9f96e2ecc4b304123a3d02254a21b828d38f8c2a6c10846ab936078710fdbb2e8e79d54ab76dc86060a7261b71b7bab1aa8607a746fc2e17c9c3381c341e5241d1ba5d710750cea46b1991f90138213822657c359734df59048a8b945e43713eb9c9116b361e6f5d15655e62611a5cec0927d23e00143be47964706abe5b42e6f118e13f9004f59a9c8541e5d424828287d25b2896feb0b9da73026ddd3f0e946890dbd67b9053e7f476ebfe0f74c101f0df1e51816ed05bbcdf5b6fbc7f8482f5d7dce3cecc87d446580f06685fec3c38851118fa3467dd13f9f23bf6c0fbe21c72a0c21f540a250944e51fe", 0xf0}, {&(0x7f0000001d80)="596293f9a524c85af074c54fa8ff81e9087c891690155e5786eabc2145f5a3053c039a56f3af023603f15d08a7c16b20bc6a1e0ae086401581c31138a20d396031004c8d5b6e1a14efcac3452d8ade98be869570e6a1b50a7ed378b357ad6415c5583fd7e009d8f250f9e20cee8f68e724e620ce5135babd1e39361ba352d092c7e2c39607f8ddeb43af8678f3d1d339004277925193d5ce29784839b783689bd16f3004311125d3e2695fc3b02ddd73cc49f20cec6786d18232e13fa5d6baf865c257f5db1028b798f95afd5bfd3ce01a39680ed2ca4f53a753f5967991bad6372d572bdf", 0xe5}, {&(0x7f0000001e80)="e5265cc6a06d43ea48a71983937076ea25a9aa281cb9dc3f49a74959f7dde5adbb61133c7f0ca1dbd62f5d6edf1625274b3eba7dd7288a42c5a1d8bbf00ab530fa", 0x41}, {&(0x7f0000001f00)="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", 0x1000}, {&(0x7f0000002f00)="c01d57a6ffc213fdad254ffb91d64f3fa17b02caf61b5b897fd9b662cdd442a74158c5d2b2ecef4f75764c01582b50cde77aaf59beb22cfaa65c8e20ecf9ae38a16d225821d1a98b55488d21aa0ebbd1999e1379411a29b407051703bdd4c7bb64cd873420aece02c4cdc29a25ee06bd9b82285486db90b8e6450b0871f73cd1dd2fd3577437f32d43882721e2aa25740921d2d940fc0467ff0d4f96b428de24beaeb5f7ed345de2ff1c9b200974b30f631d4a01b928a248e2e4a750fd66", 0xbe}, {&(0x7f0000003000)="43aa642c925a4bdbff52af450773f6cc763dc49cc9ab5e57d965741c868d74bb5b872df03e302011f05f3c4dbb1ea823599f3b4554c0fced9ae25682eaae041e456c6d9e45ffcecc939817054f152e0ed94825e1e39a17972910acecb36b804a94bfb51634645e0129d9c0a4c1a8ecc9ada15d2847af32ff9a96c4c3ba301c3d732c1520dd3686b3e444715f21d66199bfe17b23f0ced7c1b36b103fde665179d5e08c98e18d", 0xa6}], 0x9, &(0x7f0000000900)=ANY=[@ANYBLOB="54000000000000000000000007000000441cb7000000000500005b1f00000648000000040000000900000004441c4401e000000200000002e0000002000034c6ac1414aaffffffff890a231ac539d1c8121d0000000000001100000000000000000000000100000008000000000000001400000000000000000000000200000008000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB="ffff0000bf1a5e654a6a179c28be047e23ba9f7711eb86a3efad47b0892cf0cdb9d0024e702a32958ccb37be06a9f487c7dc52a0de3d172ef6ad2027a9cc5eb8c8d01125998acd6982cbf329436f24"], 0x128}}], 0x2, 0x81) sendto$inet(r5, &(0x7f0000000400), 0xffffffffffffff94, 0x11, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000540)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000100001acffef0000000000000300000a600000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000340003800c00008008000340000000022400008008000340000000020c00054000000002000000050c0004400000000000000f"], 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 46.065290023s ago: executing program 2 (id=1315): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000700)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000c00)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000c80), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000cc0), 0x4000087, 0x2, 0x0) add_key(0x0, 0x0, &(0x7f0000000d00)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422", 0x4ed, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f000088d000/0x1000)=nil) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000012c0)={0x0, 0x64}}, 0x24040090) syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0xa82, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(r0, 0x8, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x143102) writev(r4, &(0x7f0000000140)=[{&(0x7f00000002c0)='w', 0x1}, {0x0}], 0x2) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000400)='./file0\x00') symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 42.60524946s ago: executing program 2 (id=1316): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB="07151a0000000000674febde8801537f6cb45bee7aa782a59f6b9da92f754e1b41d7d39737caeabfb4a897c4511f03cb", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) sendto(r2, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0xfffffffffffffffa, 0x0) read$msr(r4, &(0x7f0000000540)=""/102392, 0x18ff8) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r6 = fcntl$dupfd(r5, 0x406, r5) sendto$inet(r5, 0x0, 0x0, 0x200047fd, &(0x7f00000004c0)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000019540)=ANY=[@ANYRESDEC=r3, @ANYRESDEC=r3, @ANYRES8=r2, @ANYRESHEX=r4, @ANYRES16=r1, @ANYBLOB="5f885b03bddbe43fc7bdb7600eb5671c3a7454e656e3900b588baab82107a2bccabc2f1aede17266d626ff58cfad1430735fffa810b9ffcecaf9663cd703f456fedd64b1a2f5090ee20dee76c14b0d90f4d288541363239e5e1051ddd4bb1a340dfd97bfa6f7ae7473517d059ca43b94c14962fb81ea3b15651a76a7a33d88e7fcb9967b44db95c0b046cfed3993823e4083f3fb24830d884acce990920e37d891d625b64f35df2874187f9a8f6b5b981af9169b3ce6c2c5a3437d500121fb34bbea1debffedbab54788882ffa136c827d43c5e73ce24aa9cd7c2c990ca6b120cdd8b146c6a17d4e35622058d8a78c4c55b08f1b", @ANYRES16=r5, @ANYBLOB="1278f90e3a9c22"], 0x134}, 0x1, 0x0, 0x0, 0x44811}, 0x40008) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f00000197c0)={0x0, 0x0, &(0x7f0000019800)={&(0x7f0000019840)=ANY=[], 0x1b8}, 0x1, 0x0, 0x0, 0x8}, 0xc4) ptrace$ARCH_SET_GS(0x1e, r0, &(0x7f0000000040), 0x1001) syz_genetlink_get_family_id$tipc2(&(0x7f0000019880), r6) syz_genetlink_get_family_id$tipc2(&(0x7f00000198c0), r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000019680)={&(0x7f00000196c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd7000010000002500000008000300", @ANYRES32=r8, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 41.725961712s ago: executing program 2 (id=1317): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000540)={0x14, &(0x7f00000001c0)=ANY=[], 0x0}, 0x0) r1 = socket$inet(0x2, 0x80803, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="30000000020601080000000000000000030000000900020073797a310000000405000100070000000500050002000000"], 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x3, 0x80000001, 0x2e, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @remote, 0x40, 0x8, 0x100, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', r5, 0x7e3d96076ef0020e, 0x84, 0x84, 0x4038a0b, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, 0x8000, 0x0, 0x80, 0x40002}}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fsmount(0xffffffffffffffff, 0x0, 0x8b) setsockopt(r7, 0x7, 0xfffff112, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7000000010000100"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000500012800e0001006970366772657461700000003c000280140007002001000000000000000000000000000014000600fe80000000000000000000000000001508000100", @ANYRES16=0x0, @ANYBLOB='\b\x00\r'], 0x70}}, 0x24040800) sendto$packet(r2, 0x0, 0x0, 0x15, &(0x7f0000000580)={0x11, 0x88a8, r8, 0x1, 0x0, 0x6, @multicast}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f0000000280)=ANY=[@ANYRES64=r6, @ANYRES8=r3], 0x0}, 0x94) r9 = fsmount(0xffffffffffffffff, 0x0, 0x7f) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e23}, 0xfffffffffffffeed) sendmmsg$unix(r10, &(0x7f00000007c0), 0x400000000000041, 0x0) recvmmsg(r9, &(0x7f0000000800), 0x0, 0x80000102, 0x0) setfsgid(0xee00) 38.235175194s ago: executing program 2 (id=1321): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40) sendto$inet(r0, 0x0, 0x1d, 0x0, 0x0, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000002240)=""/102400, &(0x7f000001b240)=0x19000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000440)={0x0, &(0x7f0000000480)}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0x40082104, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000004c0)=0x6) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x4840, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000540)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x8031, 0xffffffffffffffff, 0xb2e45000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000580), 0x0, 0x0) read$msr(r5, &(0x7f000001d2c0)=""/102368, 0x18fe0) pipe(&(0x7f00000362c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000036300), 0x11000) vmsplice(r6, &(0x7f0000036340)=[{&(0x7f0000036380), 0x3528a9c0}], 0x1, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={0xffffffffffffffff}, 0x4) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0xa0301, 0x0) 37.23296808s ago: executing program 39 (id=1309): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=@deltfilter={0xe88, 0x2d, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xe58, 0x2, [@TCA_CGROUP_ACT={0xe54, 0x1, [@m_pedit={0xe50, 0x5, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x1c000000, 0x40, 0x4, 0x7, 0x3fe}, 0xb1, 0x3}, [{0x3, 0x2, 0xffffffff, 0x3, 0xd8aa, 0x7}, {0xaa2, 0x6, 0x101, 0x6, 0x2, 0x3}, {0x200000, 0x100, 0x0, 0x5c6, 0x6830, 0x8}, {0x2, 0x311, 0x8, 0x4b, 0x82, 0x8}, {0x7, 0x5, 0x2, 0x212, 0x7, 0xe1}, {0x7, 0x4, 0x8d, 0x1ff, 0x1ff, 0x1000}, {0x200, 0x7, 0xffffffff, 0x9, 0x9}, {0x7, 0xfe4, 0x1, 0x0, 0x624, 0xb513}, {0x8, 0x3, 0x7ff, 0x70, 0x6, 0x8000}, {0xfffffffe, 0x0, 0x3ff, 0xb06, 0x1, 0x6}, {0x5, 0x1, 0xdb, 0x6, 0x2, 0x4}, {0x9, 0x4, 0x519f, 0x5, 0x6, 0x31c4}, {0x7, 0x7, 0x3ff, 0x1, 0x8000, 0x5}, {0x7fffffff, 0x1, 0x5, 0xfe45, 0x5, 0xb}, {0x800bd, 0x5f05, 0x8, 0xf, 0x1, 0xa}, {0x0, 0x8000, 0x3, 0x7, 0xd17, 0x7}, {0xae, 0x7, 0x2, 0x2, 0x9}, {0x6, 0x4, 0xa, 0x3, 0x1, 0x3}, {0x2, 0xa502, 0x3, 0xfffffff7, 0x81, 0x1}, {0x80, 0x8, 0x9, 0x0, 0x0, 0x7}, {0x9, 0x4, 0x1400000, 0x9, 0xad, 0x6}, {0xc, 0xffffff00, 0x5, 0x3, 0x3, 0x3}, {0x7, 0x32da135, 0xb, 0x8, 0xa93c, 0x6}, {0x3e, 0x5bce, 0x4, 0x7ff, 0x80000001, 0x32b}, {0xffffffff, 0x9, 0x100, 0x1, 0xfffffffb, 0x9}, {0x10001, 0x1, 0xe0cc, 0x8, 0x9, 0x2}, {0xf7, 0x5, 0x800, 0x8, 0x7f}, {0xdbeb, 0x8, 0x1, 0x1, 0x1, 0x80000}, {0x5, 0x0, 0xbaf9, 0x4, 0x28000000, 0x9}, {0x0, 0x8, 0x6, 0x9, 0x5, 0xfffffff4}, {0xadfe, 0x9, 0x1, 0x4, 0xfaf, 0x81}, {0x800, 0x5, 0x3, 0x5, 0x5, 0x1e4}, {0x6, 0x7, 0x8, 0x8, 0xad38, 0x6}, {0xa, 0x4467, 0x9, 0x5, 0x401, 0x1}, {0x1ff, 0x400, 0x9, 0x80000001, 0x7ff, 0xb6}, {0x1000, 0xffff8001, 0x40, 0x2, 0x800, 0x3}, {0x9, 0xb, 0x5, 0x9, 0x4, 0x9}, {0x0, 0xe, 0x5, 0x4, 0x9, 0x6}, {0x5, 0x4, 0x6, 0xfffffffe, 0x4, 0xfff}, {0x5, 0x0, 0x1, 0x5a48, 0x6, 0x7ffffff9}, {0xffffffff, 0x80000000, 0x6d, 0x0, 0x8, 0xe}, {0x9, 0xfffffffa, 0xa, 0x6, 0x8, 0x9}, {0x7fff, 0x3, 0x5, 0x3ff, 0x8, 0x7}, {0x10001, 0x7, 0x2, 0x7ff, 0x9, 0x6}, {0x3, 0x9de, 0x4, 0x11, 0x7, 0x9}, {0x3, 0x209, 0x8f, 0xffffdd1a, 0x10, 0x2}, {0x1, 0xa8a9, 0x1, 0x5, 0x7, 0x401}, {0x4, 0xffff, 0x1000, 0x1, 0x6, 0x1}, {0x2a, 0x0, 0x80000000, 0x0, 0xfc, 0x3}, {0xc55b, 0x5, 0xb, 0x8001, 0x4, 0x1ff}, {0x7, 0x6, 0x0, 0x1d, 0x42f, 0x7}, {0xfffffff8, 0x1ff, 0x3, 0x2, 0x7, 0x7}, {0x1, 0x2, 0x5, 0x30, 0xfe68, 0x800}, {0x80000000, 0x2, 0x1, 0x8, 0x0, 0xffffffff}, {0x3, 0x6021db75, 0x7fff, 0x1000, 0xc1, 0x1add65aa}, {0x2, 0x7, 0x4, 0x2, 0xe9, 0x986}, {0xba, 0x8, 0x6, 0x401, 0x4, 0x10}, {0x9, 0x7fffffff, 0xb70f, 0x3c, 0x3, 0xfffffffe}, {0x4, 0x3, 0x4, 0xd, 0xb24, 0x6}, {0xbf, 0x3, 0xbf6, 0xfffeffff, 0x2, 0x3}, {0x3, 0x6, 0x4, 0x7c6, 0x80000001, 0x1}, {0x58e2, 0x1, 0x4, 0x7, 0x3ff, 0x4}, {0x6, 0xb4, 0xeb, 0x3, 0x6, 0xe}, {0xc, 0x1, 0x3, 0xf, 0x7, 0xdb10ee8a}, {0x3, 0xf, 0x81, 0x420d, 0xa, 0xad78}, {0x2, 0x4, 0xfffffffc, 0x401, 0x4, 0x2}, {0x4, 0x4, 0x3, 0xf908, 0x2, 0x400}, {0x800, 0x6, 0x2, 0x4, 0x8e20, 0x4}, {0x7ae4fc5e, 0x3, 0xf, 0xf87, 0x2, 0x1}, {0x2, 0x7, 0xed7e, 0x4, 0x5, 0xdc}, {0x4, 0x154, 0xfffffe00, 0x3ff7ffff, 0x2, 0xa}, {0x6, 0x5, 0x3, 0x3a84, 0x0, 0x1}, {0xeea1, 0x9, 0x55de2144, 0x9, 0x80, 0x7cf}, {0x2, 0x6, 0x8, 0x3, 0x0, 0x7fffffff}, {0x1000, 0x7f, 0x8000, 0xfffffffe, 0x8, 0xd1e}, {0x6, 0x2, 0x6c5, 0xd, 0x4, 0x8}, {0x1, 0x5, 0x10000, 0xc, 0x7ff, 0x5}, {0x4, 0x7, 0x264564e6, 0xea, 0x7fff, 0x1}, {0xa, 0x4, 0x2, 0x3, 0x0, 0x7}, {0x84000000, 0x9, 0x2, 0x8000, 0x5, 0x4}, {0x0, 0x2, 0xa483, 0x9, 0x2, 0x6}, {0x22, 0x2, 0x9, 0x1, 0x3, 0x4}, {0x3, 0x3, 0x7fff, 0x0, 0x46, 0x7fffffff}, {0x6, 0x8, 0xffffc000, 0x1ff, 0x8}, {0xe, 0x1, 0xffffffff, 0x9, 0x9, 0x8}, {0x1000, 0x9, 0xffffffff, 0x100, 0x3ff}, {0x80, 0x1, 0x9, 0x6a59, 0x4, 0x3}, {0x8000, 0x0, 0x100, 0x1, 0x0, 0x4}, {0x0, 0x401, 0xbe5e, 0x0, 0x81, 0xd0}, {0x6, 0xa, 0x146e, 0x43a, 0xe, 0xb08}, {0x7ff, 0x0, 0x4, 0x0, 0x7f, 0x1}, {0xfffffff6, 0x5, 0xe, 0xff, 0x7, 0x6}, {0x0, 0x4c, 0x8, 0xfffffffc, 0x2, 0xd42}, {0xff, 0xfffffffc, 0x2, 0x0, 0xb881, 0x6}, {0x3, 0x8, 0xffffffff, 0xfffffbff, 0x1, 0x96e}, {0x5, 0x6, 0x380000, 0x3, 0x7, 0x2}, {0x0, 0x81, 0x3, 0x1, 0x4, 0x4}, {0x0, 0x7, 0x8, 0x5, 0x3, 0x10}, {0x4, 0x6, 0x3, 0xf, 0xf, 0x9}, {0x7fffffff, 0x8000, 0x3ff, 0x8, 0x505, 0xe3e}, {0x9, 0x1, 0x7, 0xd1, 0x8, 0x1}, {0x4, 0x9da, 0x2, 0x7, 0x9d94bae, 0x101}, {0x6, 0x2, 0x7f, 0x13760, 0x10001, 0x9}, {0x3c, 0x0, 0x409, 0x3, 0xfffeffff}, {0x9, 0x7, 0x0, 0xf5, 0xdc1, 0x7c94}, {0x5, 0x3, 0xfff, 0x5, 0x99, 0x4e}, {0x10, 0x3, 0x8, 0x4516, 0x1, 0xe89c}, {0x21b, 0x9, 0xa, 0x5, 0x7fff}, {0x7f, 0x0, 0x489, 0x1, 0x80000001, 0xe}, {0x5, 0xfffff1f4, 0x7, 0x5, 0x7, 0x9}, {0x4, 0x6, 0x3, 0x5, 0x6, 0x1}, {0xe3e, 0xfffffffd, 0x3, 0x5, 0x8000, 0x2}, {0x101, 0xa2, 0xff, 0xfffffff7, 0x10001, 0x80000000}, {0x14a9, 0x1ff, 0x3, 0x2, 0x7, 0x1}, {0xa82c, 0x570b, 0x9, 0x0, 0x1, 0x5}, {0x2, 0x3, 0x2, 0xffff0000, 0x8, 0x7}, {0x0, 0xd2, 0x1, 0x9, 0x10, 0xfffff000}, {0x5, 0x8, 0x1, 0x0, 0x4, 0x1c5b}, {0x2, 0xffff5a2f, 0x2, 0x5, 0x1, 0x200}, {0x193cfceb, 0x800, 0x3, 0xd, 0x4, 0x5}, {0x8, 0x1fffe, 0x2, 0x9, 0x0, 0xc38c}, {0x9, 0x0, 0x5, 0x4, 0xfffffffd, 0xe0000}, {0xffffffff, 0xec, 0x5, 0x4, 0xc1e7, 0xb64d}, {0x8000, 0x87, 0x7ce, 0x400, 0x0, 0x2d}, {0x9, 0x9, 0x2, 0x18f, 0x3ff, 0x3}, {0x2, 0x5, 0x6, 0xb, 0x7}, {0x81, 0x2, 0x4, 0x0, 0x3, 0x7}, {0x9f8, 0x2, 0x4, 0xe, 0x400, 0x6}], [{0x2}, {0x706c4c185c430530}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x7, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x1}, {}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x5}, {0x4}, {}, {0x5, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x7, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x4}, {0x5}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x4}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0xec1752f8e3477738, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x433dd36a35789fc3}, {}, {0x3}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe88}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="01921dc787e1e2c6e392d42312a882a789eb2703522d73dac3f965884f6ae0294e3fef6b47709081b4a4221539885867f1d34c9b0abbf71da704222ee98e111d8fce52fa6e411262408505e11bdf60f975a2f0b801e543d8c6ea54ab7a18c8", 0x5f, 0xe) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1195, &(0x7f0000000340)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, 0x0, 0x8080) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, 0x0, 0x80) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000480)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000001480), 0x651, 0x0) recvmmsg(r2, &(0x7f00000014c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001580)={&(0x7f00000015c0)=ANY=[@ANYBLOB="2800e900", @ANYRES16=0x0, @ANYBLOB="08002bbd7000ffdbdf253100000008000100300000000c00990005000000110000"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x20002000) recvmsg$unix(0xffffffffffffffff, 0x0, 0x80) prlimit64(0x0, 0x1, 0x0, 0x0) r4 = creat(&(0x7f0000001600)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r4, &(0x7f0000001640)={'#! ', './file0', [{0x20, '\x15\xe6\x8e\\\xfe\x15^\xca\xbb\x88B\xeb\x90FAv\xdc\xbc\x1eiU\b\xc2D\xdb\xca\x9d\xb4oL\xe92\x7f+\f\x0e\xfd\xceTC\x1f;u\x84E\x04\xe3B19xO\xc2\xd4.Mp\xf4\x80{e\x87\xc4V\xe0\x99\x99\x8b\x93I\x8a\xb3\xce*\x9b\xd0X\aA0S\x02k\xdb\x12\v\x9c\x10nY\x85\x92\xf6\x93\xc4%\x0f\x80.\x8d\x9b\x15\x8e\xf4LWr\x14\x9eKh\x97L\xb4\x03\xe9=\x8e\xff\xf0\xb1al\xb6\xc9\xa1/L\x8c7\xa0\x8eD\x1f,\x93`\xc0h\xacjGx\xb8\x9cv\x99bA\xc5]\b\xf8\xa5\x9b\x1c\xeeKB\xdd\xe8\xbboT\x90\x84k\xae\xb5\xfa\xd9\x0f\xd4T<\x0f\xdb\xec\x05HcN\xae;\x87\x00\x00\x00\x00\b\x92\xa7\xdf\x1dS\x00\x8b\x81\xf4\x84X*\xa6e\x922|FO\v\xa6\x17jG\xe3]'}]}, 0xe4) close(r4) r5 = syz_open_procfs(0x0, &(0x7f0000001740)='net/route\x00') pread64(r5, &(0x7f0000003dc0)=""/102356, 0x18fd4, 0xc2a) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f000001cdc0)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f000001ce00)={0x2020}, 0x2020) execve(&(0x7f000001ee40)='./file0\x00', 0x0, &(0x7f000001ee80)={[&(0x7f000001eec0)=' ']}) 37.214842178s ago: executing program 2 (id=1324): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x72f, 0x100, 0x8, 0x3b5}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000004c0)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x3, 0x30f, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x252}}}, &(0x7f0000000300)=0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/virtio/devices/virtio0/device\x00', 0x0, 0x0) read(r6, &(0x7f0000000500), 0x100) syz_genetlink_get_family_id$nbd(&(0x7f0000000500), 0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r7 = io_uring_setup(0x4de8, &(0x7f0000000800)={0x0, 0xd661, 0x400, 0x0, 0x2ff}) syz_emit_ethernet(0x66, &(0x7f0000000140)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0xf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0xc}, {[@noop, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1, 0x1}, {@loopback, 0x200}, {@local}]}]}}}}}}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) socket(0x10, 0x4, 0x80) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, r8) syz_ublk_setup_queues(r5, r4, &(0x7f0000000880)={0x0, 0x49cf, 0x400, 0x0, 0x23, 0x0, r6}, &(0x7f0000000900)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x367d, 0x80, 0x2, 0x14f, 0x0, r6}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9848, 0x10, 0x2, 0x311, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8024, 0x1, 0x1, 0x1dc, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7959, 0x4000, 0x1, 0x172, 0x0, r6}}], 0x4, &(0x7f0000002540)={0x2e, 0x45, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, r8, '\x00', {0x2, 0x847, 0x0, &(0x7f0000001540)=@buf_512="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"}}, &(0x7f00000025c0)) syz_ublk_setup_queues(r5, r4, &(0x7f0000000340)={0x0, 0x6ddb, 0x8, 0x1, 0x2e3, 0x0, r6}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdd52, 0x8, 0x0, 0x22a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf72, 0x8c, 0x5, 0xb3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x40, 0x0, 0x9d7c, 0x0, r9}}], 0x1, &(0x7f00000014c0)={0x2e, 0x12, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r8, '\x00', {0x2, 0x5, 0x0, 0x0}}, 0x0) r10 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi3\x00', 0x40400, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r11, &(0x7f0000000dc0)={0x1f, 0xfffe}, 0xe) ioctl$COMEDI_INSN(r10, 0x8028640c, &(0x7f00000002c0)={0x4000000, 0x92, 0x0, 0x0, 0x2}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xc, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) writev(r12, &(0x7f0000000c80)=[{&(0x7f0000000cc0), 0x86}], 0x2) syz_clone(0xc1100, 0x0, 0x19, 0x0, 0x0, 0x0) 36.260983618s ago: executing program 0 (id=1325): mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/f/dwFrameInterval\x00', 0x8001, 0x0) write(r0, &(0x7f0000000540)='6', 0x23) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000100)) symlink(&(0x7f0000000140)='.\x00', &(0x7f00000001c0)='./file0\x00') readlinkat(r0, &(0x7f0000000000)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/f/dwFrameInterval\x00', &(0x7f0000000080)=""/82, 0x52) 35.127966851s ago: executing program 40 (id=1313): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000300), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000340), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000380)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f00000003c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendmmsg$inet(r5, &(0x7f0000003400)=[{{&(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000700)="c0911ee75112f1d01a9f0f249fd85fe69b78d0f48b73fa4da5674dec1ce0a645ef688281f711fc822a78235c2429f3aef3fdf8abfc0055a20a28878a964aa1d0ac41322a88b47620cf8455dd648ef36ff34101c9591f95e2d3e942d3c54f3654ecfe556fdc42c5a82d46613377ef72bf00188bd5a85ad9384d8e7a9ededd0cb6c752a86346351e57964c7b27d7047e48e0b6c7d5858d633e8d00d321b5ff233109ed3c0868dfd826fb50e5199bad7be76161f00888127074ec", 0xb9}, {&(0x7f00000007c0)="de214a34336c7726181bea5c57a66263733d", 0x12}], 0x2, &(0x7f0000000a80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x51}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x80}}, {{&(0x7f0000000b00)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000030c0)=[{&(0x7f0000000b40)}, {&(0x7f0000000b80)="1ccf9ab723d684f116ae2d7ed418e2a7621edd30243bfc16809663e2f475234ec000c84ec85e6620529a758296b8940f24194a141dc06b70f0aa4332b17b3633dd6abc9a61d849fae229824c35a66b90617cac145a9f7118e7f205f731a48d5f5213b1f3bcb131a75171008156d397cecca2df096b73b11769c892f47cb9002ecb072cbb3c717ee2266ad7590d588d17502801f0776e265ace291ebc6de2b8cfd3868dcf6d4c543da6b1a711d8b5236f4dd2a6dd81a27310165051a4c3f2c2c448918266e20a8b899eae8f366f7a18b68e6ea4378b2f1186093ffacebe9e8e0acb68ac2ed9430326abeb23e0b496", 0xee}, {&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000001c80)="e04042e9f96e2ecc4b304123a3d02254a21b828d38f8c2a6c10846ab936078710fdbb2e8e79d54ab76dc86060a7261b71b7bab1aa8607a746fc2e17c9c3381c341e5241d1ba5d710750cea46b1991f90138213822657c359734df59048a8b945e43713eb9c9116b361e6f5d15655e62611a5cec0927d23e00143be47964706abe5b42e6f118e13f9004f59a9c8541e5d424828287d25b2896feb0b9da73026ddd3f0e946890dbd67b9053e7f476ebfe0f74c101f0df1e51816ed05bbcdf5b6fbc7f8482f5d7dce3cecc87d446580f06685fec3c38851118fa3467dd13f9f23bf6c0fbe21c72a0c21f540a250944e51fe", 0xf0}, {&(0x7f0000001d80)="596293f9a524c85af074c54fa8ff81e9087c891690155e5786eabc2145f5a3053c039a56f3af023603f15d08a7c16b20bc6a1e0ae086401581c31138a20d396031004c8d5b6e1a14efcac3452d8ade98be869570e6a1b50a7ed378b357ad6415c5583fd7e009d8f250f9e20cee8f68e724e620ce5135babd1e39361ba352d092c7e2c39607f8ddeb43af8678f3d1d339004277925193d5ce29784839b783689bd16f3004311125d3e2695fc3b02ddd73cc49f20cec6786d18232e13fa5d6baf865c257f5db1028b798f95afd5bfd3ce01a39680ed2ca4f53a753f5967991bad6372d572bdf", 0xe5}, {&(0x7f0000001e80)="e5265cc6a06d43ea48a71983937076ea25a9aa281cb9dc3f49a74959f7dde5adbb61133c7f0ca1dbd62f5d6edf1625274b3eba7dd7288a42c5a1d8bbf00ab530fa", 0x41}, {&(0x7f0000001f00)="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", 0x1000}, {&(0x7f0000002f00)="c01d57a6ffc213fdad254ffb91d64f3fa17b02caf61b5b897fd9b662cdd442a74158c5d2b2ecef4f75764c01582b50cde77aaf59beb22cfaa65c8e20ecf9ae38a16d225821d1a98b55488d21aa0ebbd1999e1379411a29b407051703bdd4c7bb64cd873420aece02c4cdc29a25ee06bd9b82285486db90b8e6450b0871f73cd1dd2fd3577437f32d43882721e2aa25740921d2d940fc0467ff0d4f96b428de24beaeb5f7ed345de2ff1c9b200974b30f631d4a01b928a248e2e4a750fd66", 0xbe}, {&(0x7f0000003000)="43aa642c925a4bdbff52af450773f6cc763dc49cc9ab5e57d965741c868d74bb5b872df03e302011f05f3c4dbb1ea823599f3b4554c0fced9ae25682eaae041e456c6d9e45ffcecc939817054f152e0ed94825e1e39a17972910acecb36b804a94bfb51634645e0129d9c0a4c1a8ecc9ada15d2847af32ff9a96c4c3ba301c3d732c1520dd3686b3e444715f21d66199bfe17b23f0ced7c1b36b103fde665179d5e08c98e18d", 0xa6}], 0x9, &(0x7f0000000900)=ANY=[@ANYBLOB="54000000000000000000000007000000441cb7000000000500005b1f00000648000000040000000900000004441c4401e000000200000002e0000002000034c6ac1414aaffffffff890a231ac539d1c8121d0000000000001100000000000000000000000100000008000000000000001400000000000000000000000200000008000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB="ffff0000bf1a5e654a6a179c28be047e23ba9f7711eb86a3efad47b0892cf0cdb9d0024e702a32958ccb37be06a9f487c7dc52a0de3d172ef6ad2027a9cc5eb8c8d01125998acd6982cbf329436f24"], 0x128}}], 0x2, 0x81) sendto$inet(r5, &(0x7f0000000400), 0xffffffffffffff94, 0x11, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000540)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000100001acffef0000000000000300000a600000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000340003800c00008008000340000000022400008008000340000000020c00054000000002000000050c0004400000000000000f"], 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 35.045157104s ago: executing program 41 (id=1312): mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/vhci\x00', 0x2, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$kcm(0x10, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000400), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000004c0)='maps\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000001400010401000000000000002d000000010000000500020008"], 0x20}}, 0x0) r4 = socket(0x2d, 0x2, 0x0) sendto(r4, 0x0, 0x0, 0x0, &(0x7f00000005c0)=@generic={0x2d, "00000100000008010800"}, 0x80) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000680)={0xaa, 0x180}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000002740)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000027c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002800)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002880)={&(0x7f00000028c0)={0x38, r7, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0xfffffffffffffcab, 0x1, r8}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) 33.91578817s ago: executing program 0 (id=1328): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x34b130198900281b, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@ipv4_newnexthop={0x44, 0x68, 0x800, 0x70bd2d, 0x25dfdbfc, {0x2, 0x0, 0x4}, [@NHA_OIF={0x8}, @NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x9}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xb7c}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x7c8f}]}, @NHA_ID={0x8, 0x1, 0x2}]}, 0xfffffffffffffee8}}, 0x24) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x57}], 0x1, 0x21, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000340)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000003c0), 0x318, 0x0) recvmmsg(r5, &(0x7f0000000400), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x4}, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0xc) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000580)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8417f, 0x3f00) syz_create_resource$binfmt(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'bridge_slave_0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r9, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100005000400800008000000080000000000000092f23bcb70df7cd1a61ac3322eb1d5c117bb2dd0b4419511d1070059e7cff78f5621", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket(0x10, 0x80000, 0x7f) 32.98995821s ago: executing program 2 (id=1329): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r1, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 31.942360399s ago: executing program 0 (id=1330): r0 = openat$loop_ctrl(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = socket(0x10, 0x3, 0x0) unshare(0xc020800) shmget$private(0x0, 0xfffffffffeffffff, 0x4000000, &(0x7f0000ffc000/0x3000)=nil) read$ptp(0xffffffffffffffff, &(0x7f0000000100)=""/23, 0x17) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x2, 0x1000, @empty}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r4, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x400}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c000}, 0x8000) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e1f, 0x22200006, @remote, 0x8}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@arena={0x21, 0x0, 0x0, 0xa, 0x60400, 0x1, 0xc, '\x00', 0x0, r6, 0x5, 0x5, 0x1}, 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c00000000fcdbdf250400100708000800", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004080) 31.589414392s ago: executing program 0 (id=1331): socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000200)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)=""/98, 0x62}], 0x1, &(0x7f00000007c0)=""/106, 0x6a}, 0x100}], 0x40000000000008f, 0x12300, 0x0) (fail_nth: 2) close(r0) 31.300780313s ago: executing program 0 (id=1332): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x72f, 0x100, 0x8, 0x3b5}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000004c0)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x3, 0x30f, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x252}}}, &(0x7f0000000300)=0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/virtio/devices/virtio0/device\x00', 0x0, 0x0) read(r6, &(0x7f0000000500), 0x100) syz_genetlink_get_family_id$nbd(&(0x7f0000000500), 0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r7 = io_uring_setup(0x4de8, &(0x7f0000000800)={0x0, 0xd661, 0x400, 0x0, 0x2ff}) syz_emit_ethernet(0x66, &(0x7f0000000140)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0xf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0xc}, {[@noop, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1, 0x1}, {@loopback, 0x200}, {@local}]}]}}}}}}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) socket(0x10, 0x4, 0x80) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, r8) syz_ublk_setup_queues(r5, r4, &(0x7f0000000880)={0x0, 0x49cf, 0x400, 0x0, 0x23, 0x0, r6}, &(0x7f0000000900)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x367d, 0x80, 0x2, 0x14f, 0x0, r6}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9848, 0x10, 0x2, 0x311, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8024, 0x1, 0x1, 0x1dc, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7959, 0x4000, 0x1, 0x172, 0x0, r6}}], 0x4, &(0x7f0000002540)={0x2e, 0x45, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, r8, '\x00', {0x2, 0x847, 0x0, &(0x7f0000001540)=@buf_512="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"}}, &(0x7f00000025c0)) syz_ublk_setup_queues(r5, r4, &(0x7f0000000340)={0x0, 0x6ddb, 0x8, 0x1, 0x2e3, 0x0, r6}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdd52, 0x8, 0x0, 0x22a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf72, 0x8c, 0x5, 0xb3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x40, 0x0, 0x9d7c, 0x0, r9}}], 0x1, &(0x7f00000014c0)={0x2e, 0x12, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r8, '\x00', {0x2, 0x5, 0x0, 0x0}}, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi3\x00', 0x40400, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r10, &(0x7f0000000dc0)={0x1f, 0xfffe}, 0xe) listen(r10, 0x0) getsockopt$bt_BT_DEFER_SETUP(r10, 0x112, 0x7, &(0x7f0000000e00), &(0x7f0000000e40)=0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xc, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) writev(r11, &(0x7f0000000c80)=[{&(0x7f0000000cc0), 0x86}], 0x2) syz_clone(0xc1100, 0x0, 0x19, 0x0, 0x0, 0x0) 29.487912376s ago: executing program 0 (id=1333): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) prctl$PR_SET_SECCOMP(0x4f, 0x1, 0x0) syz_clone(0x40000080, &(0x7f00000006c0), 0x0, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)="29c35e0420b76cbb1321d2980ff478a2b0658052f6925edb6d44") syz_open_dev$dvb_frontend(0x0, 0x0, 0x882) syz_open_dev$vim2m(&(0x7f00000007c0), 0x7fff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, 0x0, 0x2002c094) sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000840)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f0000000940)=0x84) listen(r2, 0x0) syz_clone(0x0, &(0x7f0000000980), 0x0, 0x0, 0x0, 0x0) r5 = memfd_create(&(0x7f00000009c0)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44cf19aee6cd0fe30bbd451ce6de01c4168ddfbc37e30103000000a51772dabe90cb1ec114c04e6352d8b4f06dc882afa8eb1de0f0475f355cf6db5b238d8b402cfe6b5db37223b75c435fe8c93d163bad9795e580eb1636a7e2186645bac0e31edac75798b46511bc29775ba57fe7a76fad7df32d038a30b28ff6783278aa08b7d9e0e8cd631b4a8100685c08868547070f5340c2fcfc", @ANYRES16=r7, @ANYBLOB="01002abf7001ffdbdf251400000018000180140002006e657464657673696d30000000000000050019000100000008000f0004000000080010000d000000"], 0x44}, 0x1, 0x0, 0x0, 0x4920}, 0x44860) ftruncate(r5, 0x8800000) r8 = socket$alg(0x26, 0x5, 0x0) accept$alg(r8, 0x0, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000fedbdf25690000000104990008000000560000000a0be37371a3541b705bd4c2230006000802110037fff0aaee53a75623b21d7515e5ef9468ee183be0fece32f0965700cdcee5548108147870a546b0d5e0267665b9f000000000bbac92adfcce1dd126d982a7fc5817f4434845dd86feb0c50415a676058147597a168f81559bc97b1246ce07bf47df2a87a49873f3f940368c7a80766097c3d79a824577a99607c1228125551a9f04aafa5107"], 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x8000) sendfile(0xffffffffffffffff, r5, 0x0, 0x1000009) 17.652007274s ago: executing program 42 (id=1329): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r1, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 14.147170226s ago: executing program 43 (id=1333): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) prctl$PR_SET_SECCOMP(0x4f, 0x1, 0x0) syz_clone(0x40000080, &(0x7f00000006c0), 0x0, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)="29c35e0420b76cbb1321d2980ff478a2b0658052f6925edb6d44") syz_open_dev$dvb_frontend(0x0, 0x0, 0x882) syz_open_dev$vim2m(&(0x7f00000007c0), 0x7fff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, 0x0, 0x2002c094) sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000840)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f0000000940)=0x84) listen(r2, 0x0) syz_clone(0x0, &(0x7f0000000980), 0x0, 0x0, 0x0, 0x0) r5 = memfd_create(&(0x7f00000009c0)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44cf19aee6cd0fe30bbd451ce6de01c4168ddfbc37e30103000000a51772dabe90cb1ec114c04e6352d8b4f06dc882afa8eb1de0f0475f355cf6db5b238d8b402cfe6b5db37223b75c435fe8c93d163bad9795e580eb1636a7e2186645bac0e31edac75798b46511bc29775ba57fe7a76fad7df32d038a30b28ff6783278aa08b7d9e0e8cd631b4a8100685c08868547070f5340c2fcfc", @ANYRES16=r7, @ANYBLOB="01002abf7001ffdbdf251400000018000180140002006e657464657673696d30000000000000050019000100000008000f0004000000080010000d000000"], 0x44}, 0x1, 0x0, 0x0, 0x4920}, 0x44860) ftruncate(r5, 0x8800000) r8 = socket$alg(0x26, 0x5, 0x0) accept$alg(r8, 0x0, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000fedbdf25690000000104990008000000560000000a0be37371a3541b705bd4c2230006000802110037fff0aaee53a75623b21d7515e5ef9468ee183be0fece32f0965700cdcee5548108147870a546b0d5e0267665b9f000000000bbac92adfcce1dd126d982a7fc5817f4434845dd86feb0c50415a676058147597a168f81559bc97b1246ce07bf47df2a87a49873f3f940368c7a80766097c3d79a824577a99607c1228125551a9f04aafa5107"], 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x8000) sendfile(0xffffffffffffffff, r5, 0x0, 0x1000009) 9.142007928s ago: executing program 4 (id=1323): r0 = openat$nsim_port_qreset(0xffffffffffffff9c, &(0x7f0000000000)={'/sys/kernel/debug/netdevsim/netdevsim', 0x0, '/ports/', 0x32}, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x7, 0x200000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000340), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) ioctl$INCFS_IOC_PERMIT_FILL(r3, 0x40046721, &(0x7f0000000340)={r0}) socket$unix(0x1, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socket$inet(0x2, 0x2, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000540)={0x0, 0x382a, 0x0, 0x2, 0x158}, &(0x7f00000006c0)=0x0, &(0x7f0000000700)=0x0, &(0x7f0000000740)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000780)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000800)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000840)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000880)={0x0, 0x2be0, 0x0, 0x80000005, 0x3b4}, &(0x7f0000000900)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x1, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x8, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x8000, 0x2, 0xe4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x200, 0x0, 0x80000250}}], 0x1, &(0x7f0000000b80)={0x2e, 0x41, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r8, '\x00', {0xfff4, 0x0, 0x0, 0x0}}, 0x0) 8.155449147s ago: executing program 4 (id=1338): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) mount(&(0x7f0000000440)=@nullb, &(0x7f0000000480)='./dev\x00', &(0x7f00000006c0)='omfs\x00', 0x200000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000500), 0xa0000, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000bc0), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) prlimit64(0x0, 0x7, &(0x7f0000000c00)={0xfdfffffffffffffe}, 0x0) syz_io_uring_setup(0x5739, &(0x7f0000000740)={0x0, 0x1, 0x4440e, 0x0, 0x32e}, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./sys\x00', &(0x7f0000000b00)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./sys/block/nullb0/queue/nr_requests\x00', 0x2, 0x0) write(r3, &(0x7f0000000b80)='12', 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x8000) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r4 = socket(0x10, 0x80002, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1800000009000000000000000700000018140000", @ANYRES8=r1, @ANYRES16, @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32=0x1, @ANYBLOB="000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000feffffff8500000006000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7050000080000008500000000"], &(0x7f0000000880)='syzkaller\x00', 0x53, 0x11, &(0x7f00000008c0)=""/17, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[0x1, 0x1], &(0x7f0000000980), 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x4, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18000000fd3f00000000000009000000850000000f0000007a000000000000004174a413c7ac1f8158c93d5d413f1b6d1f65598296b71cfc9b8d2f91e42944ca3fba32917dbbe4f8707665cdf993635af4e958bcbdc8f3b1a06d74d612f01351e9700ccfacd4414dddc161f645c9680147068ffad082114116018a184c8d970d02cd2db54671e4ad115ee9e6d32a39a5b97866cd63dbd079203c885b05c81a46f7f4ae218372fc13f8033a7c1dc466a6fe1b42e6fcfb2006743c9bd84d3ba86d26afa08984c3943843c9e4464b4c483a"], &(0x7f0000000680)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x298, 0x298, 0x0, 0x98, 0x168, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x6, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f0000000700)=@sg0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000100)='ext4\x00', 0x10, 0x0) 7.675026649s ago: executing program 3 (id=1339): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r2) add_key(&(0x7f0000000240)='id_resolver\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)="2da326b77f4ad8324ff6076c6c8903aca644affeddddd027f8ca6bfeebe9854e36c8a0fc991eef52dc95ad8f4dc7cd2f529f2d19dd190b7fdde9d33bc22c84f9819946f5a80c8808760d1e", 0x4b, 0xfffffffffffffffd) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x34, r1, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008080}, 0x4000080) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000019940), 0x3, 0x8e2b038350516919) r5 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_G_SELECTION(r5, 0xc040565e, &(0x7f0000000040)={0x2, 0x0, 0x2, {0x3, 0x5, 0xfff7ae24, 0x3}}) ioctl$USBDEVFS_ALLOC_STREAMS(r4, 0x8008551c, 0x0) 7.603709809s ago: executing program 4 (id=1340): mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x88001, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x1c8, 0x138, 0x1, 0x0, 0xda01, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@mirror={0x0, 0x2888, 0x0, 0x90, 'mirror\x00', {'core 2 1024 sync', 0x20, 0x2, [{0x20, {@ram={'/dev/ram', 0x0}, 0x20, '16'}}, {0x20, {@ram_num={'1:', 0x0}, 0x20, '8'}}], ' 2 handle_errors keep_log'}}]}) mkdir(0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$tmpfs(0x0, 0x0, 0x0, 0x40c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/f/dwFrameInterval\x00', 0x1, 0x0) 7.37693587s ago: executing program 3 (id=1341): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() syz_open_dev$evdev(&(0x7f000001b440), 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r3, &(0x7f0000000340)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019340)={0x0, 0x0, 0x0}, 0x4004045) r4 = add_key(&(0x7f0000019380)='big_key\x00', &(0x7f00000193c0)={'syz', 0x0}, &(0x7f0000019400), 0x0, 0xffffffffffffffff) keyctl$read(0xb, r4, &(0x7f000001a440)=""/4096, 0x1000) 7.376327272s ago: executing program 1 (id=1326): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f00000001c0)={0x1, r2, 0xfffffffa, 0x80000007, 0xb, 0xa, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={r2, 0x0, 0x0, 0x8, 0x400}) (async) syz_emit_ethernet(0x91, &(0x7f0000000240)={@local, @random="3524ecd8031a", @void, {@ipv4={0x800, @dccp={{0x17, 0x4, 0x3, 0x0, 0x83, 0x64, 0x0, 0x1, 0x21, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@cipso={0x86, 0x38, 0x1, [{0x1, 0x7, "95904a73c1"}, {0x2, 0x8, "b4fc6a432437"}, {0x1, 0xb, "26e7c2e5b4b0b653f2"}, {0x6, 0x10, "0ed82d97c2e08613483c9ce2b0e2"}, {0x0, 0x8, "9fafc4cfc8e6"}]}, @lsrr={0x83, 0xf, 0xda, [@local, @empty, @local]}]}}, {{0x4e22, 0x4e20, 0x4, 0x1, 0xd, 0x0, 0x0, 0x6, 0x6, "46978a", 0x5, "420ad5"}, "b6acb7689bce94108050b9423dd8071a23ef20074be433"}}}}}, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x10000, 0x0) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2adc0, 0x1c1, 0x6}, 0x18) (async) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0xfffffffffffffff7, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, 'u', 0x3a, './file0', 0x3a, [0x46, 0x43, 0x4f, 0x43, 0x50]}, 0x38) (async) r3 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x458, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc10c5541, &(0x7f0000000340)=0x2) (async) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f0000000380)) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101240, 0x0) 6.680592213s ago: executing program 3 (id=1342): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000080), 0x0, 0x4000800) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') pread64(r1, &(0x7f0000000840)=""/102400, 0x19000, 0x1000000300) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_usb_connect(0x3, 0x4e, &(0x7f0000000340)=ANY=[@ANYBLOB="12010002000000401107500500000102030109023c0001010080320904000006ff00000007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d0200", @ANYRES16], 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvfrom(r0, &(0x7f0000000180)=""/131, 0xf92e58a67d38802c, 0x2101, 0x0, 0x0) 6.47105822s ago: executing program 1 (id=1343): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000540)={0x14, &(0x7f00000001c0)=ANY=[], 0x0}, 0x0) socket$inet(0x2, 0x80803, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="30000000020601080000000000000000030000000900020073797a310000000405000100070000000500050002000000"], 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x3, 0x80000001, 0x2e, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @remote, 0x40, 0x8, 0x100, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', r4, 0x7e3d96076ef0020e, 0x84, 0x84, 0x4038a0b, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, 0x8000, 0x0, 0x80, 0x40002}}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fsmount(0xffffffffffffffff, 0x0, 0x8b) setsockopt(r5, 0x7, 0xfffff112, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7000000010000100"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000500012800e0001006970366772657461700000003c000280140007002001000000000000000000000000000014000600fe80000000000000000000000000001508000100", @ANYRES16=0x0, @ANYBLOB='\b\x00\r'], 0x70}}, 0x24040800) sendto$packet(r1, 0x0, 0x0, 0x15, &(0x7f0000000580)={0x11, 0x88a8, r6, 0x1, 0x0, 0x6, @multicast}, 0x6e) 6.024798007s ago: executing program 4 (id=1344): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x103841, 0x186) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001840)='/proc/vmstat\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xe2b, 0x2000003, 0x100010, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000240)="94", 0xf000}, {0x0}], 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r3, &(0x7f00000002c0)={&(0x7f0000000380)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x80, &(0x7f0000000440)=[{0x0}], 0x1, &(0x7f0000000480)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) getpid() mount(0x0, &(0x7f0000000580)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r5, &(0x7f0000000640)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='./trace\x00', &(0x7f00000007c0)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./trace/events/clk/clk_rate_request_start/format\x00', 0x0, 0x0) pread64(r6, &(0x7f0000000840)=""/4096, 0x1000, 0x7) r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/bus/pci/rescan\x00', 0x3b9b4aedd61a3686, 0x0) write(r7, &(0x7f00000006c0)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d9", 0x4b) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000740)=0x4382, 0x4) lseek(r0, 0x0, 0x0) 4.583611873s ago: executing program 4 (id=1345): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) r1 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r1, &(0x7f0000000600)=""/102392, 0x18ff8) rt_tgsigqueueinfo(0x0, 0x0, 0x5, &(0x7f0000019600)={0x18, 0x1851, 0x6}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000019680)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) accept$alg(r2, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000019700)) prlimit64(r0, 0xa, &(0x7f00000005c0)={0xdc, 0x8000000000000004}, 0x0) syz_usb_connect(0x0, 0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404406478000010102030109021ca53f010080fa0904030000010100000a240104010a0002"], 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x3, 0x0) ioctl(r3, 0xc4c85513, &(0x7f00000005c0)) 4.172936377s ago: executing program 1 (id=1346): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) r1 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r1, &(0x7f0000000600)=""/102392, 0x18ff8) rt_tgsigqueueinfo(0x0, 0x0, 0x5, &(0x7f0000019600)={0x18, 0x1851, 0x6}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000019680)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) accept$alg(r2, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000019700)) prlimit64(r0, 0xa, &(0x7f00000005c0)={0xdc, 0x8000000000000004}, 0x0) syz_usb_connect(0x0, 0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404406478000010102030109021ca53f010080fa0904030000010100000a240104010a0002"], 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x3, 0x0) ioctl(r3, 0xc4c85513, &(0x7f00000005c0)) 3.011115695s ago: executing program 3 (id=1347): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1, 0xb, &(0x7f0000000f40)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000fc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000001000)=r1, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000001e40)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001e80)={r3, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000001f00)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x79, 0x4) syz_emit_vhci(&(0x7f0000000dc0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x9c}, "6cb9646d152385ec966e26a98752ff46070fe706192fa878d3b3b9f9bfab9d35349922ec2ab2dc47ee9c2271438be3f53b767b39e2dbe34227061b52ce8c148c38e0231104d8fb599460a873ed07b80d69fa3de394a577668a46ca99148cc32d2663b9ab175a260472acd8f71a8615e86aaa539af2bf27010cebdea3938ecd9b8e85608557c18a8bb5688ab56825f490a06dfb893fef07bfb97390af"}, 0xa0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000000240)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x24000084) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="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", 0x148}], 0x1}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000540)=0xdf8, 0x4) writev(r0, &(0x7f0000000580)=[{&(0x7f00000005c0)="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", 0x7e6}], 0x1) 2.008061552s ago: executing program 3 (id=1348): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_hci(r1, 0x0, 0x32, &(0x7f0000000380)=""/1, &(0x7f00000003c0)=0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x59a6b28c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000480)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f00000004c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r6, &(0x7f0000000540)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x47, &(0x7f0000019540)=0x7) r7 = socket(0x10, 0x3, 0x0) io_uring_setup(0x1b56, &(0x7f0000019580)={0x0, 0xd5ee, 0x3801, 0x4, 0x402c1}) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000019600)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0x120, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x3, &(0x7f0000019900), {[{{@ip={@loopback, @private=0xa010101, 0x807fff00, 0xffffffff, 'ip6gretap0\x00', 'vlan0\x00', {0xff}, {}, 0x89, 0x0, 0x20}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0xd930, 0x7, [0x2, 0xf, 0x26, 0x6, 0x2, 0xd, 0x1, 0x17, 0x1e, 0x0, 0x25, 0x3e, 0x27, 0x3, 0x22, 0x3a], 0x0, 0x6, 0x7}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x2, 0x0, 0x2}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0xffd2, 0xa, [0x32, 0x15, 0x1c, 0xb, 0x18, 0x27, 0x16, 0x2d, 0x3b, 0x29, 0x40, 0x37, 0x22, 0x1a, 0xd, 0x28], 0x0, 0x8, 0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x54, r8, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_KEY={0x38, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x18, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x300}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2}]}]}, 0x54}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), r10) sendmsg$NET_DM_CMD_START(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x1c, r11, 0x1, 0x0, 0x0, {0x2}}, 0x1c}}, 0x0) r12 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x38, r12, 0x1, 0x70bd27, 0x25dfdbfb, {0x1, 0x0, 0x700}, [@NLBL_MGMT_A_DOMAIN={0xb, 0x1, 'NET_DM\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4) 1.11537956s ago: executing program 3 (id=1349): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffff0040950b90170001000000010902270001010080fa0904000003ffff000007058102000200070502020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000008c0)={0x9, &(0x7f0000000840)=[{0x3, 0x7f, 0x9, 0x99d}, {0x1, 0xf7, 0x2, 0x8}, {0x5e8, 0xa, 0x10, 0x6}, {0x6, 0x7, 0xff, 0x9}, {0xfffa, 0x7, 0x9, 0x3}, {0x81, 0x5, 0xb}, {0x3, 0x2, 0x48, 0x63}, {0xa, 0x6, 0x3b, 0x2}, {0xf22, 0x5, 0x6, 0xaa7}]}) r3 = openat$kvm(0xffffff9c, &(0x7f0000000a00), 0x8000, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x81) r4 = syz_io_uring_setup(0x7131, &(0x7f0000000700)={0x0, 0x2af2, 0x2, 0x3, 0x397}, &(0x7f0000000780), &(0x7f00000000c0), &(0x7f0000000800)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000a40)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6012000800103afffe8000000000000000000000000000bc1f020000000000000000000000000001860090780100"], 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) rseq(&(0x7f0000000ac0), 0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000b00)={0x1, &(0x7f0000000b40)=[{0x6, 0x8, 0x7, 0x7ffc0001}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = creat(&(0x7f0000000b80)='./file1\x00', 0x4) fcntl$setstatus(r5, 0x4, 0x6000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000bc0), 0x8) mlockall(0x7) madvise(&(0x7f0000056000/0x2000)=nil, 0x2000, 0x11) syz_emit_ethernet(0xcb, &(0x7f0000000240)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01044a", 0x95, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x29, 0xf, "18d6b7e1cb02a0477ce740f3125a8d1fe6d3d24e1a5ab5849c100edb622d4d5e177121a94ffdd2660c54403d2ae37d8ba2847c0f0a8d18da78ccbbc468199dffa8852171784cb3aeee39f3df5e205b3b25cd622d6516e8e5ef728704f56c36664ebc2f793c9654e6bfa5b3045746f86605f7c26383bf6f70f7ad9e"}]}}}}}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x2e) r6 = openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder_logs/state_hashed\x00', 0x0, 0x0) read(r6, &(0x7f0000000140)=""/133, 0x85) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000200)={0x14, 0x0, 0x0}, 0x0) 887.783805ms ago: executing program 6 (id=1334): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB="07151a0000000000674febde8801537f6cb45bee7aa782a59f6b9da92f754e1b41d7d39737caeabfb4a897c4511f03cb", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) sendto(r2, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0xfffffffffffffffa, 0x0) read$msr(r4, &(0x7f0000000540)=""/102392, 0x18ff8) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r6 = fcntl$dupfd(r5, 0x406, r5) sendto$inet(r5, 0x0, 0x0, 0x200047fd, &(0x7f00000004c0)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000019540)=ANY=[@ANYRESDEC=r3, @ANYRESDEC=r3, @ANYRES8=r2, @ANYRESHEX=r4, @ANYRES16=r1, @ANYBLOB="5f885b03bddbe43fc7bdb7600eb5671c3a7454e656e3900b588baab82107a2bccabc2f1aede17266d626ff58cfad1430735fffa810b9ffcecaf9663cd703f456fedd64b1a2f5090ee20dee76c14b0d90f4d288541363239e5e1051ddd4bb1a340dfd97bfa6f7ae7473517d059ca43b94c14962fb81ea3b15651a76a7a33d88e7fcb9967b44db95c0b046cfed3993823e4083f3fb24830d884acce990920e37d891d625b64f35df2874187f9a8f6b5b981af9169b3ce6c2c5a3437d500121fb34bbea1debffedbab54788882ffa136c827d43c5e73ce24aa9cd7c2c990ca6b120cdd8b146c6a17d4e35622058d8a78c4c55b08f1b", @ANYRES16=r5, @ANYBLOB="1278f90e3a9c2266d1f8"], 0x134}, 0x1, 0x0, 0x0, 0x44811}, 0x40008) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f00000197c0)={0x0, 0x0, &(0x7f0000019800)={&(0x7f0000019840)=ANY=[], 0x1b8}, 0x1, 0x0, 0x0, 0x8}, 0xc4) ptrace$ARCH_SET_GS(0x1e, r0, &(0x7f0000000040), 0x1001) syz_genetlink_get_family_id$tipc2(&(0x7f0000019880), r6) syz_genetlink_get_family_id$tipc2(&(0x7f00000198c0), r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000019680)={&(0x7f00000196c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd7000010000002500000008000300", @ANYRES32=r8, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 0s ago: executing program 6 (id=1350): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() syz_open_dev$evdev(&(0x7f000001b440), 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r3, &(0x7f0000000340)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019340)={0x0, 0x0, 0x0}, 0x4004045) r4 = add_key(&(0x7f0000019380)='big_key\x00', &(0x7f00000193c0)={'syz', 0x0}, &(0x7f0000019400), 0x0, 0xffffffffffffffff) keyctl$read(0xb, r4, &(0x7f000001a440)=""/4096, 0x1000) kernel console output (not intermixed with test programs): wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.544502][ T31] audit: type=1400 audit(1794369645.321:1905): avc: denied { write } for pid=10765 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 648.599423][T10663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 648.599432][T10663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 648.599444][T10663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 648.602164][T10663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 648.602173][T10663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 648.602185][T10663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 648.715639][ T1274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.715652][ T1274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.828051][ T1274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.828065][ T1274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.856966][ T31] audit: type=1400 audit(1794369645.631:1906): avc: denied { write } for pid=10780 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 648.889599][ T5627] Bluetooth: hci2: command tx timeout [ 648.938306][T10663] hsr_slave_0: entered promiscuous mode [ 648.947232][T10663] hsr_slave_1: entered promiscuous mode [ 648.947508][T10663] debugfs: 'hsr0' already exists in 'hsr' [ 648.947516][T10663] Cannot create hsr debugfs directory [ 649.025768][ T729] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.025781][ T729] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 649.068329][ T5287] 8021q: adding VLAN 0 to HW filter on device eth7 [ 650.206175][T10797] FAULT_INJECTION: forcing a failure. [ 650.206175][T10797] name failslab, interval 1, probability 0, space 0, times 0 [ 650.206193][T10797] CPU: 0 UID: 0 PID: 10797 Comm: syz.5.1194 Tainted: G L syzkaller #0 PREEMPT(full) [ 650.206208][T10797] Tainted: [L]=SOFTLOCKUP [ 650.206211][T10797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 650.206217][T10797] Call Trace: [ 650.206221][T10797] [ 650.206226][T10797] dump_stack_lvl+0x100/0x190 [ 650.206246][T10797] should_fail_ex.cold+0x5/0xa [ 650.206263][T10797] should_failslab+0xc2/0x120 [ 650.206276][T10797] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 650.206287][T10797] ? __alloc_skb+0x5b7/0x710 [ 650.206300][T10797] ? __alloc_skb+0x140/0x710 [ 650.206314][T10797] __alloc_skb+0x140/0x710 [ 650.206326][T10797] ? __alloc_skb+0x5b7/0x710 [ 650.206338][T10797] ? __pfx___alloc_skb+0x10/0x10 [ 650.206349][T10797] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 650.206365][T10797] netlink_alloc_large_skb+0x69/0x150 [ 650.206381][T10797] netlink_sendmsg+0x755/0x10c0 [ 650.206401][T10797] ? __pfx_netlink_sendmsg+0x10/0x10 [ 650.206419][T10797] ? selinux_socket_sendmsg+0x198/0x2f0 [ 650.206436][T10797] ? ____sys_sendmsg+0xa99/0xc30 [ 650.206451][T10797] ____sys_sendmsg+0xa99/0xc30 [ 650.206466][T10797] ? __pfx_netlink_sendmsg+0x10/0x10 [ 650.206482][T10797] ? __pfx_____sys_sendmsg+0x10/0x10 [ 650.206501][T10797] ? lock_acquire+0x1d1/0x380 [ 650.206516][T10797] ? get_pid_task+0x2a/0x250 [ 650.206527][T10797] ___sys_sendmsg+0x190/0x1e0 [ 650.206538][T10797] ? __pfx____sys_sendmsg+0x10/0x10 [ 650.206548][T10797] ? get_pid_task+0x106/0x250 [ 650.206569][T10797] ? find_held_lock+0x2b/0x80 [ 650.206590][T10797] __sys_sendmsg+0x160/0x210 [ 650.206604][T10797] ? __pfx___sys_sendmsg+0x10/0x10 [ 650.206625][T10797] do_syscall_64+0x123/0x7b0 [ 650.206640][T10797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.206651][T10797] RIP: 0033:0x7f08fafa8f19 [ 650.206660][T10797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 650.206671][T10797] RSP: 002b:00007f08fbe50028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 650.206682][T10797] RAX: ffffffffffffffda RBX: 00007f08fb225fa0 RCX: 00007f08fafa8f19 [ 650.206689][T10797] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000000000000004 [ 650.206695][T10797] RBP: 00007f08fbe50090 R08: 0000000000000000 R09: 0000000000000000 [ 650.206701][T10797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 650.206707][T10797] R13: 00007f08fb226038 R14: 00007f08fb225fa0 R15: 00007ffcb106b3d8 [ 650.206721][T10797] [ 650.642226][T10715] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.642271][T10715] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.642331][T10715] bridge_slave_0: entered allmulticast mode [ 650.643003][T10715] bridge_slave_0: entered promiscuous mode [ 650.680872][T10715] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.680915][T10715] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.680972][T10715] bridge_slave_1: entered allmulticast mode [ 650.681610][T10715] bridge_slave_1: entered promiscuous mode [ 650.793889][T10715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 650.812725][T10715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 650.885603][T10715] team0: Port device team_slave_0 added [ 650.899947][T10715] team0: Port device team_slave_1 added [ 650.968961][ T5627] Bluetooth: hci2: command tx timeout [ 652.022769][T10821] netlink: 'syz.6.1198': attribute type 10 has an invalid length. [ 652.054457][T10715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 652.054468][T10715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 652.054480][T10715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 652.495038][T10828] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1198'. [ 652.590905][ T31] audit: type=1400 audit(1794369649.371:1907): avc: denied { write } for pid=10794 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 652.755718][T10821] team0: Device vxcan0 is CAN, IEEE 802.15.4 or 6LoWPAN. These device types can't be added as a team port [ 652.864870][T10715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 652.864881][T10715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 652.864894][T10715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 653.048941][ T5627] Bluetooth: hci2: command tx timeout [ 653.221432][T10831] comedi comedi3: bad chanlist[0]=0x00000002 chan=2 range length=1 [ 653.373341][T10821] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 653.384767][T10821] netlink: 'syz.6.1198': attribute type 1 has an invalid length. [ 653.384779][T10821] netlink: 220 bytes leftover after parsing attributes in process `syz.6.1198'. [ 653.440848][T10715] hsr_slave_0: entered promiscuous mode [ 653.441254][T10715] hsr_slave_1: entered promiscuous mode [ 653.466112][T10715] debugfs: 'hsr0' already exists in 'hsr' [ 653.466125][T10715] Cannot create hsr debugfs directory [ 653.467858][T10663] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 653.488550][ T31] audit: type=1400 audit(1794369650.261:1908): avc: denied { write } for pid=10836 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 653.525105][T10663] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 653.525521][T10663] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 653.563122][T10663] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 653.636866][T10663] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 653.656895][T10663] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 653.672902][T10663] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 653.693130][T10663] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 653.803652][ T5287] 8021q: adding VLAN 0 to HW filter on device eth8 [ 653.878559][ T5816] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 654.031439][ T5816] usb 6-1: Using ep0 maxpacket: 16 [ 654.034533][ T5816] usb 6-1: New USB device found: idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 654.058710][ T5816] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.058726][ T5816] usb 6-1: Product: syz [ 654.058734][ T5816] usb 6-1: Manufacturer: syz [ 654.058746][ T5816] usb 6-1: SerialNumber: syz [ 654.061245][ T5816] usb 6-1: config 0 descriptor?? [ 654.064382][ T5816] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 654.161486][T10663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 654.516202][ T5816] ssu100 6-1:0.0: probe with driver ssu100 failed with error -110 [ 654.776378][ T5893] block nbd0: Possible stuck request ffff8880291fe000: control (read@0,1024B). Runtime 150 seconds [ 654.776404][ T5893] block nbd0: Possible stuck request ffff8880291fe1c0: control (read@1024,1024B). Runtime 150 seconds [ 654.776417][ T5893] block nbd0: Possible stuck request ffff8880291fe380: control (read@2048,2048B). Runtime 150 seconds [ 655.204055][T10663] 8021q: adding VLAN 0 to HW filter on device team0 [ 655.444029][ T5816] usb 6-1: USB disconnect, device number 2 [ 655.482466][ T1458] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.482511][ T1458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 655.486013][ T8344] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.486057][ T8344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.587887][T10715] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 655.606446][T10715] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 655.641466][T10715] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 655.642945][T10715] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 655.679627][T10715] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 655.694233][T10715] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 655.706473][T10715] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 655.723990][T10715] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 655.766764][ T31] audit: type=1400 audit(1794369652.541:1909): avc: denied { write } for pid=10849 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 655.911342][T10873] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1203'. [ 656.033499][ T31] audit: type=1400 audit(1794369652.811:1910): avc: denied { write } for pid=10874 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 656.082421][T10715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 656.137499][T10715] 8021q: adding VLAN 0 to HW filter on device team0 [ 656.164917][T10061] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.164963][T10061] bridge0: port 1(bridge_slave_0) entered forwarding state [ 656.290695][T10061] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.290746][T10061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 656.291121][ T31] audit: type=1400 audit(1794369653.071:1911): avc: denied { setopt } for pid=10882 comm="syz.5.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 657.036069][T10894] FAULT_INJECTION: forcing a failure. [ 657.036069][T10894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 657.036089][T10894] CPU: 0 UID: 0 PID: 10894 Comm: syz.6.1207 Tainted: G L syzkaller #0 PREEMPT(full) [ 657.036103][T10894] Tainted: [L]=SOFTLOCKUP [ 657.036107][T10894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 657.036113][T10894] Call Trace: [ 657.036117][T10894] [ 657.036122][T10894] dump_stack_lvl+0x100/0x190 [ 657.036143][T10894] should_fail_ex.cold+0x5/0xa [ 657.036160][T10894] _copy_to_user+0x32/0xd0 [ 657.036175][T10894] simple_read_from_buffer+0xcb/0x170 [ 657.036190][T10894] proc_fail_nth_read+0x1af/0x230 [ 657.036206][T10894] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 657.036222][T10894] ? rw_verify_area+0xce/0x6d0 [ 657.036238][T10894] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 657.036252][T10894] vfs_read+0x1e4/0xb30 [ 657.036264][T10894] ? lock_acquire+0x1d1/0x380 [ 657.036278][T10894] ? __fget_files+0x34/0x3d0 [ 657.036291][T10894] ? __pfx_vfs_read+0x10/0x10 [ 657.036301][T10894] ? find_held_lock+0x2b/0x80 [ 657.036313][T10894] ? __fget_files+0x215/0x3d0 [ 657.036328][T10894] ? __fget_files+0x21f/0x3d0 [ 657.036345][T10894] ksys_read+0x12a/0x250 [ 657.036356][T10894] ? __pfx_ksys_read+0x10/0x10 [ 657.036371][T10894] do_syscall_64+0x123/0x7b0 [ 657.036386][T10894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.036397][T10894] RIP: 0033:0x7f514cf6974e [ 657.036406][T10894] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 657.036417][T10894] RSP: 002b:00007f514debdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 657.036427][T10894] RAX: ffffffffffffffda RBX: 00007f514debe6c0 RCX: 00007f514cf6974e [ 657.036434][T10894] RDX: 000000000000000f RSI: 00007f514debe0a0 RDI: 0000000000000004 [ 657.036440][T10894] RBP: 00007f514debe090 R08: 0000000000000000 R09: 0000000000000000 [ 657.036447][T10894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 657.036453][T10894] R13: 00007f514d226038 R14: 00007f514d225fa0 R15: 00007ffdc6581388 [ 657.036467][T10894] [ 659.127036][T10903] /dev/sg0: Can't lookup blockdev [ 659.454262][T10663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 659.515768][ T31] audit: type=1400 audit(1794369656.291:1912): avc: denied { write } for pid=10892 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 660.522323][ T31] audit: type=1400 audit(1794369657.301:1913): avc: denied { write } for pid=10931 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 660.631192][T10715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 661.062314][T10663] veth0_vlan: entered promiscuous mode [ 661.116160][T10663] veth1_vlan: entered promiscuous mode [ 661.217343][T10663] veth0_macvtap: entered promiscuous mode [ 661.247471][T10663] veth1_macvtap: entered promiscuous mode [ 661.310951][T10663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 661.412092][T10663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 661.501770][T10398] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.501998][T10398] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.502156][T10398] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.533584][T10398] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.213000][T10715] veth0_vlan: entered promiscuous mode [ 662.354242][T10715] veth1_vlan: entered promiscuous mode [ 662.369776][ T8343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.369790][ T8343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.449411][ T31] audit: type=1400 audit(1794369659.231:1914): avc: denied { write } for pid=10940 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 662.524517][T10315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.524532][T10315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.615484][T10715] veth0_macvtap: entered promiscuous mode [ 662.644877][T10715] veth1_macvtap: entered promiscuous mode [ 662.717310][T10715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 662.740674][T10715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 662.799001][ T1504] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.800285][ T1504] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.800304][ T1504] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.850006][T10315] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.885202][ T31] audit: type=1400 audit(1794369659.661:1915): avc: denied { write } for pid=10964 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 663.105201][T10315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.105215][T10315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.178882][ T11] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 663.300936][T10315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.300950][T10315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.338977][ T11] usb 7-1: New USB device found: idVendor=0711, idProduct=0550, bcdDevice=0.00 [ 663.339699][ T11] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 65280, setting to 1024 [ 663.339718][ T11] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 1024 [ 663.379896][ T11] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.379912][ T11] usb 7-1: Product: syz [ 663.379920][ T11] usb 7-1: Manufacturer: syz [ 663.379928][ T11] usb 7-1: SerialNumber: syz [ 663.386013][T10966] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 663.427450][ T11] usb 7-1: USB2VGA dongle found at address 2 [ 663.445182][ T11] usb 7-1: Allocated 8 output buffers [ 663.446842][T10973] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 663.600808][ T11] usb 7-1: Failed to early initialize device [ 663.631137][ T11] usb 7-1: USB disconnect, device number 2 [ 664.878196][ T31] audit: type=1400 audit(1794369661.651:1916): avc: denied { write } for pid=10971 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 665.138010][T11004] comedi comedi3: bad chanlist[0]=0x00000002 chan=2 range length=1 [ 665.148401][T11002] FAULT_INJECTION: forcing a failure. [ 665.148401][T11002] name failslab, interval 1, probability 0, space 0, times 0 [ 665.148420][T11002] CPU: 0 UID: 0 PID: 11002 Comm: syz.9.1218 Tainted: G L syzkaller #0 PREEMPT(full) [ 665.148436][T11002] Tainted: [L]=SOFTLOCKUP [ 665.148440][T11002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 665.148446][T11002] Call Trace: [ 665.148450][T11002] [ 665.148455][T11002] dump_stack_lvl+0x100/0x190 [ 665.148477][T11002] should_fail_ex.cold+0x5/0xa [ 665.148499][T11002] should_failslab+0xc2/0x120 [ 665.148513][T11002] __kmalloc_noprof+0xfc/0x840 [ 665.148524][T11002] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 665.148537][T11002] ? relay_open_buf.part.0+0xfe/0xb70 [ 665.148557][T11002] relay_open_buf.part.0+0xfe/0xb70 [ 665.148578][T11002] relay_open+0x7b9/0xa00 [ 665.148614][T11002] blk_trace_setup_prepare+0x35c/0x6c0 [ 665.148633][T11002] blk_trace_setup+0x217/0x440 [ 665.148651][T11002] ? __pfx_blk_trace_setup+0x10/0x10 [ 665.148667][T11002] ? vsnprintf+0x4c5/0x1300 [ 665.148684][T11002] ? __pfx_vsnprintf+0x10/0x10 [ 665.148706][T11002] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 665.148724][T11002] ? do_vfs_ioctl+0x241/0x13f0 [ 665.148737][T11002] blk_trace_ioctl+0x245/0x320 [ 665.148756][T11002] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 665.148777][T11002] blkdev_ioctl+0x17c/0x6f0 [ 665.148791][T11002] ? __pfx_blkdev_ioctl+0x10/0x10 [ 665.148802][T11002] ? selinux_file_ioctl+0x1e0/0x290 [ 665.148813][T11002] ? selinux_file_ioctl+0x1e7/0x290 [ 665.148824][T11002] ? __pfx_blkdev_ioctl+0x10/0x10 [ 665.148837][T11002] __x64_sys_ioctl+0x18e/0x210 [ 665.148849][T11002] do_syscall_64+0x123/0x7b0 [ 665.148863][T11002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.148874][T11002] RIP: 0033:0x7fd041ba8f19 [ 665.148884][T11002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 665.148893][T11002] RSP: 002b:00007fd042a73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 665.148904][T11002] RAX: ffffffffffffffda RBX: 00007fd041e25fa0 RCX: 00007fd041ba8f19 [ 665.148910][T11002] RDX: 00002000000003c0 RSI: 00000000c0481273 RDI: 0000000000000005 [ 665.148917][T11002] RBP: 00007fd041c37f6d R08: 0000000000000000 R09: 0000000000000000 [ 665.148923][T11002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 665.148929][T11002] R13: 00007fd041e26038 R14: 00007fd041e25fa0 R15: 00007fff0fcbc458 [ 665.148943][T11002] [ 665.522168][ T31] audit: type=1400 audit(1794369662.301:1917): avc: denied { write } for pid=11003 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 665.600259][ T31] audit: type=1400 audit(1794369662.381:1918): avc: denied { write } for pid=11007 comm="syz.8.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 665.952733][T11019] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1213'. [ 666.226648][T11024] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1222'. [ 666.281342][T11025] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input46 [ 666.475696][ T31] audit: type=1400 audit(1794369663.251:1919): avc: denied { mounton } for pid=11027 comm="syz.5.1223" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 667.652023][T11034] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1224'. [ 667.777147][ T31] audit: type=1400 audit(1794369664.551:1920): avc: denied { unmount } for pid=10497 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 670.080727][T11053] FAULT_INJECTION: forcing a failure. [ 670.080727][T11053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 670.080747][T11053] CPU: 0 UID: 0 PID: 11053 Comm: syz.5.1231 Tainted: G L syzkaller #0 PREEMPT(full) [ 670.080762][T11053] Tainted: [L]=SOFTLOCKUP [ 670.080766][T11053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 670.080772][T11053] Call Trace: [ 670.080776][T11053] [ 670.080780][T11053] dump_stack_lvl+0x100/0x190 [ 670.080801][T11053] should_fail_ex.cold+0x5/0xa [ 670.080818][T11053] strncpy_from_user+0x3b/0x2d0 [ 670.080836][T11053] do_getname+0x78/0x390 [ 670.080853][T11053] user_path_at+0x26/0x60 [ 670.080866][T11053] __x64_sys_mount+0x1fb/0x310 [ 670.080883][T11053] ? __pfx___x64_sys_mount+0x10/0x10 [ 670.080903][T11053] do_syscall_64+0x123/0x7b0 [ 670.080918][T11053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.080929][T11053] RIP: 0033:0x7f08fafa8f19 [ 670.080938][T11053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 670.080948][T11053] RSP: 002b:00007f08fbe50028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 670.080959][T11053] RAX: ffffffffffffffda RBX: 00007f08fb225fa0 RCX: 00007f08fafa8f19 [ 670.080966][T11053] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000000 [ 670.080972][T11053] RBP: 00007f08fbe50090 R08: 0000000000000000 R09: 0000000000000000 [ 670.080978][T11053] R10: 00000000000a00a1 R11: 0000000000000246 R12: 0000000000000001 [ 670.080984][T11053] R13: 00007f08fb226038 R14: 00007f08fb225fa0 R15: 00007ffcb106b3d8 [ 670.080998][T11053] [ 671.134993][T11071] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1233'. [ 671.164550][T11070] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1234'. [ 671.426735][T11059] comedi comedi3: bad chanlist[0]=0x00000002 chan=2 range length=1 [ 673.679000][ T9154] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 673.835971][ T9154] usb 6-1: New USB device found: idVendor=0525, idProduct=a4a8, bcdDevice=0.41 [ 673.838329][ T9154] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 673.838344][ T9154] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 673.838356][ T9154] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 673.885759][ T9154] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 673.885774][ T9154] usb 6-1: Product: syz [ 673.885782][ T9154] usb 6-1: Manufacturer: syz [ 673.885789][ T9154] usb 6-1: SerialNumber: syz [ 674.140485][ T9154] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 674.426469][ T9237] usb 6-1: USB disconnect, device number 3 [ 674.437703][ T9237] usblp0: removed [ 674.685511][T11102] /dev/sg0: Can't lookup blockdev [ 676.202649][T11110] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 676.202675][T11110] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 676.227831][ T31] audit: type=1400 audit(1794369673.011:1921): avc: denied { append } for pid=11104 comm="syz.9.1244" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 680.110030][ T11] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 680.208417][ T31] audit: type=1400 audit(1794369676.981:1922): avc: denied { create } for pid=11131 comm="syz.7.1252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 680.269278][ T11] usb 10-1: New USB device found: idVendor=0711, idProduct=0550, bcdDevice=0.00 [ 680.270013][ T11] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 65280, setting to 1024 [ 680.270029][ T11] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 1024 [ 680.303725][ T11] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.303739][ T11] usb 10-1: Product: syz [ 680.303747][ T11] usb 10-1: Manufacturer: syz [ 680.303755][ T11] usb 10-1: SerialNumber: syz [ 680.320492][T11124] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 680.332489][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 680.332515][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 680.367444][ T11] usb 10-1: USB2VGA dongle found at address 2 [ 680.380384][ T11] usb 10-1: Allocated 8 output buffers [ 680.442006][ T31] audit: type=1400 audit(1794369677.221:1923): avc: denied { map } for pid=11131 comm="syz.7.1252" path="/dev/usbmon8" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 680.442036][ T31] audit: type=1400 audit(1794369677.221:1924): avc: denied { execute } for pid=11131 comm="syz.7.1252" path="/dev/usbmon8" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 680.455037][ T31] audit: type=1400 audit(1794369677.221:1925): avc: denied { ioctl } for pid=11131 comm="syz.7.1252" path="/dev/usbmon8" dev="devtmpfs" ino=739 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 680.572579][ T11] usb 10-1: Failed to early initialize device [ 680.609767][ T11] usb 10-1: USB disconnect, device number 2 [ 680.883527][T11141] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1248'. [ 681.075254][ T31] audit: type=1400 audit(1794369677.851:1926): avc: denied { write } for pid=11120 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 682.210039][ T31] audit: type=1400 audit(1794369678.991:1927): avc: denied { write } for pid=11145 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 683.614647][ T5626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 683.625664][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 683.627000][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 683.643978][ T5626] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 683.646132][ T5626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 683.777906][T11166] overlayfs: missing 'lowerdir' [ 684.420228][T11166] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 684.812647][ T4956] block nbd0: Possible stuck request ffff8880291fe000: control (read@0,1024B). Runtime 180 seconds [ 684.812671][ T4956] block nbd0: Possible stuck request ffff8880291fe1c0: control (read@1024,1024B). Runtime 180 seconds [ 684.812684][ T4956] block nbd0: Possible stuck request ffff8880291fe380: control (read@2048,2048B). Runtime 180 seconds [ 685.278958][ T31] audit: type=1400 audit(1794369682.061:1928): avc: denied { write } for pid=11156 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 685.768559][ T5626] Bluetooth: hci3: command tx timeout [ 686.089751][T11179] CIFS: Attempting to mount //127.0.0.1/share [ 686.235812][T10061] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.535707][T10061] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.551372][ T31] audit: type=1400 audit(1794369683.331:1929): avc: denied { write } for pid=11184 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 686.665024][T11179] CIFS: VFS: cifs_mount failed w/return code = -112 [ 686.817568][T10061] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.041257][T10061] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.174816][T11160] rxe_eth0 speed is unknown, defaulting to 1000 [ 688.267082][ T5626] Bluetooth: hci3: command tx timeout [ 688.553765][T11206] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1259'. [ 688.590036][T10061] bridge_slave_1: left allmulticast mode [ 688.590053][T10061] bridge_slave_1: left promiscuous mode [ 688.590224][T10061] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.646137][T10061] bridge_slave_0: left allmulticast mode [ 688.646155][T10061] bridge_slave_0: left promiscuous mode [ 688.646253][T10061] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.659745][T11214] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input47 [ 689.110884][ T9237] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 689.435081][ T9237] usb 6-1: Using ep0 maxpacket: 32 [ 689.571874][ T9237] usb 6-1: New USB device found: idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 689.646748][ T9237] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.646763][ T9237] usb 6-1: Product: syz [ 689.646771][ T9237] usb 6-1: Manufacturer: syz [ 689.646779][ T9237] usb 6-1: SerialNumber: syz [ 689.678896][ T9237] usb 6-1: config 0 descriptor?? [ 689.703928][ T9237] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 689.704013][ T9237] dvb-usb: bulk message failed: -22 (4/0) [ 689.704022][ T9237] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 689.704068][ T9237] dvb-usb: bulk message failed: -22 (5/0) [ 689.704074][ T9237] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 689.754035][ T9237] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 689.771048][ T9237] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 689.771074][ T9237] usb 6-1: media controller created [ 689.843504][ T9237] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 689.921030][T11211] dvb-usb: bulk message failed: -22 (7/0) [ 689.921044][T11211] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 689.921068][T11211] ttusb2: i2c transfer failed. [ 689.992747][ T31] audit: type=1400 audit(1794369686.771:1930): avc: denied { write } for pid=11192 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 690.025585][ T9237] usb 6-1: selecting invalid altsetting 3 [ 690.025598][ T9237] ttusb2: set interface to alts=3 failed [ 690.040558][T11217] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1264'. [ 690.123467][ T5627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 690.127749][ T5627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 690.152133][ T5627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 690.154040][ T5627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 690.155866][ T5627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 690.281722][ T9237] DVB: Unable to find symbol tda10086_attach() [ 690.281732][ T9237] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 690.282610][ T9237] dvb-usb: bulk message failed: -22 (4/0) [ 690.282621][ T9237] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 690.282668][ T9237] dvb-usb: bulk message failed: -22 (5/0) [ 690.282675][ T9237] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 690.282701][ T9237] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 690.328610][ T5627] Bluetooth: hci3: command tx timeout [ 690.592654][ T31] audit: type=1400 audit(1794369687.371:1931): avc: denied { write } for pid=11231 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 690.702006][ T10] usb 6-1: USB disconnect, device number 4 [ 690.782773][ T10] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 690.823160][T10061] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 690.852317][T10061] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 690.865580][T10061] bond0 (unregistering): Released all slaves [ 690.885045][T10061] bond1 (unregistering): Released all slaves [ 691.293347][T11239] /dev/sg0: Can't lookup blockdev [ 691.840724][T11254] syzkaller0: entered promiscuous mode [ 691.840746][T11254] syzkaller0: entered allmulticast mode [ 691.925282][T11254] FAULT_INJECTION: forcing a failure. [ 691.925282][T11254] name failslab, interval 1, probability 0, space 0, times 0 [ 691.925301][T11254] CPU: 0 UID: 0 PID: 11254 Comm: syz.9.1269 Tainted: G L syzkaller #0 PREEMPT(full) [ 691.925316][T11254] Tainted: [L]=SOFTLOCKUP [ 691.925319][T11254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 691.925326][T11254] Call Trace: [ 691.925330][T11254] [ 691.925335][T11254] dump_stack_lvl+0x100/0x190 [ 691.925356][T11254] should_fail_ex.cold+0x5/0xa [ 691.925373][T11254] should_failslab+0xc2/0x120 [ 691.925387][T11254] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 691.925398][T11254] ? __alloc_skb+0x5b7/0x710 [ 691.925410][T11254] ? __alloc_skb+0x140/0x710 [ 691.925433][T11254] __alloc_skb+0x140/0x710 [ 691.925444][T11254] ? __alloc_skb+0x5b7/0x710 [ 691.925456][T11254] ? __pfx___alloc_skb+0x10/0x10 [ 691.925469][T11254] ? is_bpf_text_address+0x8a/0x1a0 [ 691.925483][T11254] ? bpf_ksym_find+0x128/0x1c0 [ 691.925499][T11254] alloc_skb_with_frags+0xdb/0x750 [ 691.925516][T11254] ? __lock_acquire+0x5c0/0x1f40 [ 691.925532][T11254] sock_alloc_send_pskb+0x86a/0x9e0 [ 691.925548][T11254] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 691.925560][T11254] ? find_held_lock+0x2b/0x80 [ 691.925571][T11254] ? dev_get_by_index+0x180/0x380 [ 691.925585][T11254] ? dev_get_by_index+0x180/0x380 [ 691.925602][T11254] packet_sendmsg+0x1d94/0x4f80 [ 691.925620][T11254] ? sock_has_perm+0x254/0x320 [ 691.925636][T11254] ? __pfx_sock_has_perm+0x10/0x10 [ 691.925655][T11254] ? __pfx_packet_sendmsg+0x10/0x10 [ 691.925667][T11254] ? __might_fault+0xc5/0x140 [ 691.925683][T11254] ? selinux_socket_sendmsg+0x198/0x2f0 [ 691.925700][T11254] __sys_sendto+0x492/0x4e0 [ 691.925712][T11254] ? __pfx_packet_sendmsg+0x10/0x10 [ 691.925724][T11254] ? __pfx___sys_sendto+0x10/0x10 [ 691.925740][T11254] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 691.925759][T11254] ? ksys_write+0x1ac/0x250 [ 691.925770][T11254] ? __pfx_ksys_write+0x10/0x10 [ 691.925786][T11254] __x64_sys_sendto+0xe0/0x1c0 [ 691.925797][T11254] ? do_syscall_64+0xae/0x7b0 [ 691.925809][T11254] ? lockdep_hardirqs_on+0x7d/0x110 [ 691.925821][T11254] do_syscall_64+0x123/0x7b0 [ 691.925835][T11254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.925846][T11254] RIP: 0033:0x7fd041ba8f19 [ 691.925855][T11254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 691.925865][T11254] RSP: 002b:00007fd042a73028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 691.925876][T11254] RAX: ffffffffffffffda RBX: 00007fd041e25fa0 RCX: 00007fd041ba8f19 [ 691.925883][T11254] RDX: 0000000000000036 RSI: 0000200000000600 RDI: 0000000000000006 [ 691.925889][T11254] RBP: 00007fd042a73090 R08: 0000200000000640 R09: 0000000000000014 [ 691.925895][T11254] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 691.925901][T11254] R13: 00007fd041e26038 R14: 00007fd041e25fa0 R15: 00007fff0fcbc458 [ 691.925915][T11254] [ 692.121560][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 692.322226][ T5627] Bluetooth: hci0: command tx timeout [ 692.416782][ T5627] Bluetooth: hci3: command tx timeout [ 692.437910][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 692.439354][ T10] usb 6-1: New USB device found: idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 692.520358][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.520374][ T10] usb 6-1: Product: syz [ 692.520382][ T10] usb 6-1: Manufacturer: syz [ 692.520389][ T10] usb 6-1: SerialNumber: syz [ 692.557787][ T10] usb 6-1: config 0 descriptor?? [ 692.591052][ T10] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 693.019236][ T10] ssu100 6-1:0.0: probe with driver ssu100 failed with error -110 [ 693.917784][T10061] hsr_slave_0: left promiscuous mode [ 693.930097][T10061] hsr_slave_1: left promiscuous mode [ 693.930487][T10061] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 693.930498][T10061] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 693.956634][T10061] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 693.956647][T10061] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 694.031101][T10061] veth1_macvtap: left promiscuous mode [ 694.031125][T10061] veth0_macvtap: left promiscuous mode [ 694.031185][T10061] veth1_vlan: left promiscuous mode [ 694.031219][T10061] veth0_vlan: left promiscuous mode [ 694.077343][ T31] audit: type=1400 audit(1794369690.851:1932): avc: denied { write } for pid=11245 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 694.293218][ T31] audit: type=1400 audit(1794369691.071:1933): avc: denied { write } for pid=11288 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 694.331026][ T5627] Bluetooth: hci0: command tx timeout [ 694.630907][T10061] team0 (unregistering): Port device team_slave_1 removed [ 694.652826][T10061] team0 (unregistering): Port device team_slave_0 removed [ 694.849590][ T9154] usb 6-1: USB disconnect, device number 5 [ 694.874001][T11225] rxe_eth0 speed is unknown, defaulting to 1000 [ 695.298554][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 695.331178][T11160] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.331221][T11160] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.331291][T11160] bridge_slave_0: entered allmulticast mode [ 695.342862][T11160] bridge_slave_0: entered promiscuous mode [ 695.372538][T11160] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.373539][T11160] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.373613][T11160] bridge_slave_1: entered allmulticast mode [ 695.407822][T11160] bridge_slave_1: entered promiscuous mode [ 695.450640][ T10] usb 8-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 695.451353][ T10] usb 8-1: config 0 has an invalid interface number: 50 but max is 0 [ 695.451366][ T10] usb 8-1: config 0 has no interface number 0 [ 695.451384][ T10] usb 8-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 695.452823][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.452836][ T10] usb 8-1: Product: syz [ 695.452844][ T10] usb 8-1: Manufacturer: syz [ 695.452851][ T10] usb 8-1: SerialNumber: syz [ 695.454029][ T10] usb 8-1: config 0 descriptor?? [ 695.544793][ T10] yurex 8-1:0.50: USB YUREX device now attached to Yurex #0 [ 695.705859][T10061] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.725727][ T31] audit: type=1400 audit(1794369692.501:1934): avc: denied { write } for pid=11294 comm="syz.7.1273" name="strings" dev="configfs" ino=21119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 695.729409][ T31] audit: type=1400 audit(1794369692.501:1935): avc: denied { write } for pid=11294 comm="syz.7.1273" name="0x409" dev="configfs" ino=36495 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 695.856813][T11160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 695.897170][T11160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 696.591226][ T5627] Bluetooth: hci0: command tx timeout [ 696.708196][T10061] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.766460][ T31] audit: type=1400 audit(1794369693.541:1936): avc: denied { map } for pid=11317 comm="syz.5.1276" path="/dev/sg0" dev="devtmpfs" ino=869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 696.793102][ T31] audit: type=1400 audit(1794369693.571:1937): avc: denied { execute } for pid=11317 comm="syz.5.1276" path="/dev/sg0" dev="devtmpfs" ino=869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 696.835073][T11318] netlink: 'syz.5.1276': attribute type 21 has an invalid length. [ 696.853228][ T31] audit: type=1400 audit(1794369693.631:1938): avc: denied { write } for pid=11296 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 696.924043][T11160] team0: Port device team_slave_0 added [ 696.996832][T10061] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.804863][T11324] SELinux: failed to load policy [ 697.805320][ T31] audit: type=1400 audit(1794369694.581:1939): avc: denied { load_policy } for pid=11323 comm="syz.5.1278" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 697.847585][T11160] team0: Port device team_slave_1 added [ 697.905821][ T31] audit: type=1400 audit(1794369694.681:1940): avc: denied { write } for pid=11322 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 698.029506][T11160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 698.029531][T11160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 698.029543][T11160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 698.139528][ T9237] usb 8-1: USB disconnect, device number 2 [ 698.155021][ T9237] yurex 8-1:0.50: USB YUREX #0 now disconnected [ 698.181370][T10061] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.245333][ T5287] 8021q: adding VLAN 0 to HW filter on device eth9 [ 698.276212][T11160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 698.276223][T11160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 698.276235][T11160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 698.443645][T11160] hsr_slave_0: entered promiscuous mode [ 698.444033][T11160] hsr_slave_1: entered promiscuous mode [ 698.462727][T11160] debugfs: 'hsr0' already exists in 'hsr' [ 698.462739][T11160] Cannot create hsr debugfs directory [ 698.648968][ T5627] Bluetooth: hci0: command tx timeout [ 699.180243][T10061] bridge_slave_1: left allmulticast mode [ 699.180258][T10061] bridge_slave_1: left promiscuous mode [ 699.180347][T10061] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.212851][T10061] bridge_slave_0: left allmulticast mode [ 699.212866][T10061] bridge_slave_0: left promiscuous mode [ 699.212960][T10061] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.440650][ T31] audit: type=1400 audit(1794369697.221:1941): avc: denied { connect } for pid=11350 comm="syz.7.1282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 701.324955][ T31] audit: type=1400 audit(1794369698.101:1942): avc: denied { listen } for pid=11350 comm="syz.7.1282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 701.352018][ T31] audit: type=1400 audit(1794369698.131:1943): avc: denied { read } for pid=11350 comm="syz.7.1282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 701.484408][ T31] audit: type=1400 audit(1794369698.261:1944): avc: denied { write } for pid=11338 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 701.709634][T11369] FAULT_INJECTION: forcing a failure. [ 701.709634][T11369] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 701.709653][T11369] CPU: 0 UID: 0 PID: 11369 Comm: syz.7.1284 Tainted: G L syzkaller #0 PREEMPT(full) [ 701.709668][T11369] Tainted: [L]=SOFTLOCKUP [ 701.709672][T11369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 701.709678][T11369] Call Trace: [ 701.709682][T11369] [ 701.709687][T11369] dump_stack_lvl+0x100/0x190 [ 701.709709][T11369] should_fail_ex.cold+0x5/0xa [ 701.709725][T11369] should_fail_alloc_page+0xeb/0x140 [ 701.709740][T11369] prepare_alloc_pages+0x1f0/0x5b0 [ 701.709755][T11369] __alloc_frozen_pages_noprof+0x1b9/0x31e0 [ 701.709771][T11369] ? bpf_ksym_find+0x128/0x1c0 [ 701.709786][T11369] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 701.709802][T11369] ? is_bpf_text_address+0x94/0x1a0 [ 701.709816][T11369] ? kernel_text_address+0x8d/0x100 [ 701.709828][T11369] ? __kernel_text_address+0xd/0x30 [ 701.709840][T11369] ? unwind_get_return_address+0x59/0xa0 [ 701.709853][T11369] ? __lock_acquire+0x5c0/0x1f40 [ 701.709868][T11369] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 701.709889][T11369] ? __lock_acquire+0x5c0/0x1f40 [ 701.709909][T11369] ? lock_acquire+0x1d1/0x380 [ 701.709923][T11369] ? page_table_check_set+0x1aa/0x630 [ 701.709937][T11369] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 701.709955][T11369] ? policy_nodemask+0xed/0x5e0 [ 701.709970][T11369] alloc_pages_mpol+0x201/0x560 [ 701.709984][T11369] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 701.709998][T11369] ? lock_acquire+0x1d1/0x380 [ 701.710014][T11369] folio_alloc_mpol_noprof+0x36/0x260 [ 701.710030][T11369] vma_alloc_folio_noprof+0xed/0x1d0 [ 701.710045][T11369] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 701.710065][T11369] do_anonymous_page+0xac9/0x2050 [ 701.710082][T11369] ? __pfx_do_anonymous_page+0x10/0x10 [ 701.710093][T11369] ? rcu_read_unlock+0x2d/0xb0 [ 701.710106][T11369] ? rcu_read_unlock+0x2d/0xb0 [ 701.710121][T11369] __handle_mm_fault+0x1eeb/0x2f40 [ 701.710137][T11369] ? __pfx___handle_mm_fault+0x10/0x10 [ 701.710149][T11369] ? __pfx_follow_page_pte+0x10/0x10 [ 701.710163][T11369] ? __pfx___css_rstat_updated+0x10/0x10 [ 701.710186][T11369] handle_mm_fault+0x363/0xa30 [ 701.710201][T11369] __get_user_pages+0x7ca/0x1d50 [ 701.710221][T11369] ? __pfx___get_user_pages+0x10/0x10 [ 701.710242][T11369] faultin_page_range+0x1f1/0x9e0 [ 701.710258][T11369] ? lock_acquire+0x1d1/0x380 [ 701.710274][T11369] madvise_do_behavior+0x354/0x510 [ 701.710289][T11369] ? __pfx_madvise_do_behavior+0x10/0x10 [ 701.710303][T11369] ? down_read+0x136/0x4c0 [ 701.710323][T11369] do_madvise+0x238/0x290 [ 701.710336][T11369] ? __pfx_do_madvise+0x10/0x10 [ 701.710353][T11369] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 701.710372][T11369] ? ksys_write+0x1ac/0x250 [ 701.710383][T11369] ? __pfx_ksys_write+0x10/0x10 [ 701.710396][T11369] __x64_sys_madvise+0xa9/0x110 [ 701.710410][T11369] ? lockdep_hardirqs_on+0x7d/0x110 [ 701.710422][T11369] do_syscall_64+0x123/0x7b0 [ 701.710436][T11369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.710447][T11369] RIP: 0033:0x7f5cc6da8f19 [ 701.710456][T11369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 701.710471][T11369] RSP: 002b:00007f5cc7c72028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 701.710482][T11369] RAX: ffffffffffffffda RBX: 00007f5cc7026090 RCX: 00007f5cc6da8f19 [ 701.710489][T11369] RDX: 0000000000000017 RSI: 0000000000800000 RDI: 00002000000ec000 [ 701.710495][T11369] RBP: 00007f5cc7c72090 R08: 0000000000000000 R09: 0000000000000000 [ 701.710502][T11369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 701.710508][T11369] R13: 00007f5cc7026128 R14: 00007f5cc7026090 R15: 00007ffd003466a8 [ 701.710522][T11369] [ 702.136111][T10061] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 702.147153][ T4992] udevd[4992]: worker [9300] /devices/virtual/block/nbd0 timeout; kill it [ 702.147195][ T4992] udevd[4992]: seq 13690 '/devices/virtual/block/nbd0' killed [ 702.169835][T10061] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 702.173837][T10061] bond0 (unregistering): Released all slaves [ 702.197293][ T31] audit: type=1400 audit(1794369698.971:1945): avc: denied { write } for pid=11366 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 702.519916][T11380] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1286'. [ 702.551357][ T31] audit: type=1400 audit(1794369699.331:1946): avc: denied { setattr } for pid=11379 comm="syz.9.1286" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=36898 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 702.676149][ T5287] 8021q: adding VLAN 0 to HW filter on device eth10 [ 702.790185][T11225] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.790229][T11225] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.790299][T11225] bridge_slave_0: entered allmulticast mode [ 702.795627][T11225] bridge_slave_0: entered promiscuous mode [ 702.837514][T11225] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.837580][T11225] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.837638][T11225] bridge_slave_1: entered allmulticast mode [ 702.862942][T11225] bridge_slave_1: entered promiscuous mode [ 702.992082][T11391] FAULT_INJECTION: forcing a failure. [ 702.992082][T11391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 702.992101][T11391] CPU: 0 UID: 0 PID: 11391 Comm: syz.5.1288 Tainted: G L syzkaller #0 PREEMPT(full) [ 702.992115][T11391] Tainted: [L]=SOFTLOCKUP [ 702.992119][T11391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 702.992125][T11391] Call Trace: [ 702.992129][T11391] [ 702.992134][T11391] dump_stack_lvl+0x100/0x190 [ 702.992156][T11391] should_fail_ex.cold+0x5/0xa [ 702.992175][T11391] _copy_from_user+0x2e/0xd0 [ 702.992189][T11391] kstrtouint_from_user+0xd6/0x1d0 [ 702.992206][T11391] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 702.992224][T11391] ? crypto_larval_wait+0x2c0/0x340 [ 702.992244][T11391] proc_fail_nth_write+0x83/0x220 [ 702.992259][T11391] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 702.992278][T11391] vfs_write+0x2aa/0x1040 [ 702.992290][T11391] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 702.992306][T11391] ? __pfx_vfs_write+0x10/0x10 [ 702.992317][T11391] ? do_sys_openat2+0x105/0x1d0 [ 702.992332][T11391] ? __pfx_do_sys_openat2+0x10/0x10 [ 702.992355][T11391] ksys_write+0x12a/0x250 [ 702.992366][T11391] ? __pfx_ksys_write+0x10/0x10 [ 702.992381][T11391] do_syscall_64+0x123/0x7b0 [ 702.992396][T11391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.992408][T11391] RIP: 0033:0x7f08faf6974e [ 702.992417][T11391] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 702.992427][T11391] RSP: 002b:00007f08fbe4ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 702.992438][T11391] RAX: ffffffffffffffda RBX: 00007f08fbe506c0 RCX: 00007f08faf6974e [ 702.992445][T11391] RDX: 0000000000000001 RSI: 00007f08fbe500a0 RDI: 0000000000000004 [ 702.992451][T11391] RBP: 00007f08fbe50090 R08: 0000000000000000 R09: 0000000000000000 [ 702.992463][T11391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 702.992469][T11391] R13: 00007f08fb226038 R14: 00007f08fb225fa0 R15: 00007ffcb106b3d8 [ 702.992483][T11391] [ 703.502605][T11385] usb251xb 0-0002: supply vdd not found, using dummy regulator [ 703.652031][ T31] audit: type=1400 audit(1794369700.431:1947): avc: denied { map } for pid=11394 comm="syz.5.1289" path="pipe:[36970]" dev="pipefs" ino=36970 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 704.000061][T11406] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1291'. [ 704.085709][T11385] usb251xb 0-0002: configuring block 0 failed: -5 [ 704.085727][T11385] usb251xb 0-0002: Failed to connect hub (-5) [ 704.237383][T10061] hsr_slave_0: left promiscuous mode [ 704.252435][T10061] hsr_slave_1: left promiscuous mode [ 704.252846][T10061] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 704.252857][T10061] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 704.310526][T10061] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 704.310541][T10061] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 704.367636][T10061] veth1_macvtap: left promiscuous mode [ 704.367660][T10061] veth0_macvtap: left promiscuous mode [ 704.367798][T10061] veth1_vlan: left promiscuous mode [ 704.367829][T10061] veth0_vlan: left promiscuous mode [ 706.734889][T11385] usb251xb 0-0002: probe with driver usb251xb failed with error -5 [ 706.804379][T11385] i2c i2c-0: new_device: Instantiated device usb2512b at 0x02 [ 709.566530][ T31] audit: type=1400 audit(1794369706.341:1948): avc: denied { remount } for pid=11426 comm="syz.5.1295" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 709.945798][ T31] audit: type=1400 audit(1794369706.721:1949): avc: denied { write } for pid=11410 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 711.733142][T10061] team0 (unregistering): Port device team_slave_1 removed [ 711.830205][T10061] team0 (unregistering): Port device team_slave_0 removed [ 711.892641][ T31] audit: type=1400 audit(1794369708.671:1950): avc: denied { write } for pid=11445 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 712.259237][ T9237] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 712.412572][ T9237] usb 8-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 712.425219][ T9237] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 712.425236][ T9237] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 712.456725][ T9237] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.456742][ T9237] usb 8-1: Product: syz [ 712.456750][ T9237] usb 8-1: Manufacturer: syz [ 712.456758][ T9237] usb 8-1: SerialNumber: syz [ 712.518105][T11225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 712.584575][ T5287] 8021q: adding VLAN 0 to HW filter on device eth11 [ 712.643292][T11225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.575906][T11448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.576136][T11448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.660568][ T9237] usb 8-1: failed to set cport flags for port 0 [ 713.660595][ T9237] greybus greybus1: 0/0:0: failed to enable host cport: -110 [ 713.782484][ T9237] es2_ap_driver 8-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 713.907700][T11225] team0: Port device team_slave_0 added [ 713.981005][T11225] team0: Port device team_slave_1 added [ 714.343036][T11453] syzkaller0: entered promiscuous mode [ 714.343051][T11453] syzkaller0: entered allmulticast mode [ 714.345123][T11455] tipc: Started in network mode [ 714.345139][T11455] tipc: Node identity 0ed6ac07215d, cluster identity 4711 [ 714.375632][T11455] tipc: Enabled bearer , priority 0 [ 714.387762][T11225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 714.387773][T11225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.387785][T11225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 714.458226][T11446] tipc: Resetting bearer [ 714.590554][T11446] tipc: Disabling bearer [ 714.677698][T11225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 714.677709][T11225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.677723][T11225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 714.688929][ T9237] usb 8-1: USB disconnect, device number 3 [ 714.894138][ T4956] block nbd0: Possible stuck request ffff8880291fe000: control (read@0,1024B). Runtime 210 seconds [ 714.894163][ T4956] block nbd0: Possible stuck request ffff8880291fe1c0: control (read@1024,1024B). Runtime 210 seconds [ 714.894176][ T4956] block nbd0: Possible stuck request ffff8880291fe380: control (read@2048,2048B). Runtime 210 seconds [ 716.215077][T11461] syz.5.1298 (11461) used greatest stack depth: 18296 bytes left [ 716.259750][T11225] hsr_slave_0: entered promiscuous mode [ 716.260166][T11225] hsr_slave_1: entered promiscuous mode [ 716.290638][T11225] debugfs: 'hsr0' already exists in 'hsr' [ 716.290651][T11225] Cannot create hsr debugfs directory [ 716.339060][ T5825] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 716.499557][ T5825] usb 6-1: Using ep0 maxpacket: 16 [ 716.500000][ T5825] usb 6-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 716.517192][ T5825] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 716.517210][ T5825] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 716.517221][ T5825] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 716.517241][ T5825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.354781][ T5825] usb 6-1: config 0 descriptor?? [ 717.777552][ T5825] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 717.777572][ T5825] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 717.817067][ T5825] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0025/input/input49 [ 717.875315][ T5825] microsoft 0003:045E:07DA.0025: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 717.975536][T11459] SELinux: policydb magic number 0x694c2045 does not match expected magic number 0xf97cff8c [ 717.975564][T11459] SELinux: failed to load policy [ 717.999302][ T5825] usb 6-1: USB disconnect, device number 6 [ 718.200271][T11475] fido_id[11475]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 718.261509][ T31] audit: type=1400 audit(1794369715.041:1951): avc: denied { write } for pid=11460 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 718.482583][T11160] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 718.521990][T11160] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 718.527160][T11160] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 718.565181][T11160] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 718.567335][T11160] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 718.646418][T11160] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 718.758259][ T31] audit: type=1400 audit(1794369715.531:1952): avc: denied { write } for pid=11480 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 719.042010][T11483] FAULT_INJECTION: forcing a failure. [ 719.042010][T11483] name failslab, interval 1, probability 0, space 0, times 0 [ 719.042031][T11483] CPU: 0 UID: 0 PID: 11483 Comm: syz.9.1305 Tainted: G L syzkaller #0 PREEMPT(full) [ 719.042046][T11483] Tainted: [L]=SOFTLOCKUP [ 719.042050][T11483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 719.042056][T11483] Call Trace: [ 719.042061][T11483] [ 719.042065][T11483] dump_stack_lvl+0x100/0x190 [ 719.042088][T11483] should_fail_ex.cold+0x5/0xa [ 719.042105][T11483] should_failslab+0xc2/0x120 [ 719.042118][T11483] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 719.042128][T11483] ? __alloc_skb+0x5b7/0x710 [ 719.042141][T11483] ? __alloc_skb+0x140/0x710 [ 719.042156][T11483] __alloc_skb+0x140/0x710 [ 719.042167][T11483] ? __alloc_skb+0x5b7/0x710 [ 719.042179][T11483] ? __pfx___alloc_skb+0x10/0x10 [ 719.042195][T11483] netlink_alloc_large_skb+0x69/0x150 [ 719.042211][T11483] netlink_sendmsg+0x755/0x10c0 [ 719.042228][T11483] ? __pfx_netlink_sendmsg+0x10/0x10 [ 719.042245][T11483] ? selinux_socket_sendmsg+0x198/0x2f0 [ 719.042262][T11483] ? ____sys_sendmsg+0xa99/0xc30 [ 719.042277][T11483] ____sys_sendmsg+0xa99/0xc30 [ 719.042292][T11483] ? __pfx_netlink_sendmsg+0x10/0x10 [ 719.042307][T11483] ? __pfx_____sys_sendmsg+0x10/0x10 [ 719.042326][T11483] ? lock_acquire+0x1d1/0x380 [ 719.042341][T11483] ? get_pid_task+0x2a/0x250 [ 719.042352][T11483] ___sys_sendmsg+0x190/0x1e0 [ 719.042363][T11483] ? __pfx____sys_sendmsg+0x10/0x10 [ 719.042373][T11483] ? get_pid_task+0x106/0x250 [ 719.042388][T11483] ? find_held_lock+0x2b/0x80 [ 719.042407][T11483] __sys_sendmsg+0x160/0x210 [ 719.042421][T11483] ? __pfx___sys_sendmsg+0x10/0x10 [ 719.042449][T11483] do_syscall_64+0x123/0x7b0 [ 719.042464][T11483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.042475][T11483] RIP: 0033:0x7fd041ba8f19 [ 719.042484][T11483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 719.042494][T11483] RSP: 002b:00007fd042a73028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 719.042505][T11483] RAX: ffffffffffffffda RBX: 00007fd041e25fa0 RCX: 00007fd041ba8f19 [ 719.042512][T11483] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 719.042518][T11483] RBP: 00007fd042a73090 R08: 0000000000000000 R09: 0000000000000000 [ 719.042525][T11483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 719.042531][T11483] R13: 00007fd041e26038 R14: 00007fd041e25fa0 R15: 00007fff0fcbc458 [ 719.042544][T11483] [ 719.513801][T11225] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.267527][T11160] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 720.303922][T11160] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 720.323984][ T5287] 8021q: adding VLAN 0 to HW filter on device eth12 [ 720.707555][T11225] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.991620][T11225] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.175819][T11160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 721.533603][T11225] bond0: (slave netdevsim0): Releasing backup interface [ 721.551691][T11225] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.718312][T11160] 8021q: adding VLAN 0 to HW filter on device team0 [ 721.773532][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.773582][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 721.805459][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.805509][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 723.359900][ T31] audit: type=1400 audit(1794369720.141:1953): avc: denied { write } for pid=11496 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 723.895413][ T31] audit: type=1400 audit(1794369720.671:1954): avc: denied { write } for pid=11520 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 724.205876][ T5287] 8021q: adding VLAN 0 to HW filter on device eth13 [ 724.241951][T11225] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 724.273264][T11225] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 724.273711][T11225] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 724.312808][T11225] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 724.332207][T11529] comedi comedi3: bad chanlist[0]=0x00000002 chan=2 range length=1 [ 724.333859][T11225] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 724.362465][T11225] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 724.364667][T11225] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 724.413864][T11225] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 724.867430][T11225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 724.953992][T11225] 8021q: adding VLAN 0 to HW filter on device team0 [ 725.002501][ T8343] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.002549][ T8343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 725.070756][ T8343] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.070808][ T8343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 725.726968][T11160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 725.980302][T11160] veth0_vlan: entered promiscuous mode [ 726.041186][T11160] veth1_vlan: entered promiscuous mode [ 726.133510][ T31] audit: type=1400 audit(1794369722.911:1955): avc: denied { write } for pid=11542 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 726.282975][T11160] veth0_macvtap: entered promiscuous mode [ 726.357718][T11160] veth1_macvtap: entered promiscuous mode [ 726.466610][T11160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 726.507100][T11160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 726.631134][ T1349] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.631177][ T1349] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.631194][ T1349] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.631211][ T1349] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.717306][ T31] audit: type=1400 audit(1794369723.491:1956): avc: denied { write } for pid=11566 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 727.081471][ T1402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.081485][ T1402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.167203][ T5287] 8021q: adding VLAN 0 to HW filter on device eth14 [ 727.295880][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.295895][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.717768][T11225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 727.932776][T11225] veth0_vlan: entered promiscuous mode [ 727.974980][T11225] veth1_vlan: entered promiscuous mode [ 728.135129][T11225] veth0_macvtap: entered promiscuous mode [ 728.173793][T11225] veth1_macvtap: entered promiscuous mode [ 728.282958][T11225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 729.077573][T11225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 729.369799][T10061] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.375960][ T8342] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.376195][ T8342] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.376214][ T8342] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.697586][ T1504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.697601][ T1504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 730.817802][ T31] audit: type=1400 audit(1794369727.591:1957): avc: denied { write } for pid=11574 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 731.977359][ T1274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.977373][ T1274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 735.000789][ T31] audit: type=1400 audit(1794369731.781:1958): avc: denied { write } for pid=11596 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 735.314073][ T5287] 8021q: adding VLAN 0 to HW filter on device eth15 [ 736.571086][ T31] audit: type=1400 audit(1794369733.351:1959): avc: denied { write } for pid=11606 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 736.901646][ T31] audit: type=1400 audit(1794369733.681:1960): avc: denied { write } for pid=11620 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 737.060135][ T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 737.122828][ T5287] 8021q: adding VLAN 0 to HW filter on device eth16 [ 737.219063][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 737.219490][ T10] usb 3-1: New USB device found: idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 737.228130][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.228148][ T10] usb 3-1: Product: syz [ 737.228163][ T10] usb 3-1: Manufacturer: syz [ 737.228171][ T10] usb 3-1: SerialNumber: syz [ 737.268863][ T10] usb 3-1: config 0 descriptor?? [ 737.283392][ T10] gspca_main: se401-2.14.0 probing 047d:5003 [ 737.621310][T11631] /dev/sg0: Can't lookup blockdev [ 737.788441][T11622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1317'. [ 738.189211][ T31] audit: type=1400 audit(1794369734.961:1961): avc: denied { write } for pid=11624 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 738.190634][T11638] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1320'. [ 738.352207][ T10] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 738.352255][ T10] se401 3-1:0.0: probe with driver se401 failed with error -71 [ 738.358093][ T10] usb 3-1: USB disconnect, device number 24 [ 738.591562][ T31] audit: type=1400 audit(1794369735.371:1962): avc: denied { write } for pid=11642 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 739.584542][ T31] audit: type=1400 audit(1794369736.361:1963): avc: denied { connect } for pid=11649 comm="syz.0.1322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 740.600597][ T5626] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 740.614477][ T5626] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 740.632779][ T5626] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 740.643409][ T5626] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 740.643681][ T5626] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 741.437525][ T31] audit: type=1400 audit(1794369738.211:1964): avc: denied { write } for pid=11651 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 741.771291][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 741.829990][ T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.861377][ T31] audit: type=1400 audit(1794369738.641:1965): avc: denied { write } for pid=11675 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 742.123993][ T5627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 742.128024][ T5627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 742.154246][ T5627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 742.154990][ T5627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 742.155233][ T5627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 742.222916][ T5627] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 742.239640][ T5627] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 742.241303][ T5627] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 742.242730][ T5627] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 742.245587][ T5627] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 742.475497][T11689] comedi comedi3: bad chanlist[0]=0x00000002 chan=2 range length=1 [ 742.498423][ T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.722771][ T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.729034][ T5626] Bluetooth: hci6: command tx timeout [ 742.881532][T11658] rxe_eth0 speed is unknown, defaulting to 1000 [ 743.057252][ T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.557410][ T31] audit: type=1400 audit(1794369740.331:1966): avc: denied { write } for pid=11686 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 743.978701][ T31] audit: type=1400 audit(1794369740.751:1967): avc: denied { write } for pid=11720 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 744.187623][ T13] bridge_slave_1: left allmulticast mode [ 744.187643][ T13] bridge_slave_1: left promiscuous mode [ 744.187750][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.225368][ T13] bridge_slave_0: left allmulticast mode [ 744.225385][ T13] bridge_slave_0: left promiscuous mode [ 744.225497][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.248718][ T5626] Bluetooth: hci1: command tx timeout [ 744.329221][ T5626] Bluetooth: hci7: command tx timeout [ 744.773982][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 744.790605][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 744.804207][ T13] bond0 (unregistering): Released all slaves [ 744.813723][ T5626] Bluetooth: hci6: command tx timeout [ 744.864153][ T31] audit: type=1400 audit(1794369741.641:1968): avc: denied { bind } for pid=11724 comm="syz.0.1330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 744.864477][ T31] audit: type=1400 audit(1794369741.641:1969): avc: denied { name_bind } for pid=11724 comm="syz.0.1330" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 744.864499][ T31] audit: type=1400 audit(1794369741.641:1970): avc: denied { node_bind } for pid=11724 comm="syz.0.1330" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 744.969591][ T4956] block nbd0: Possible stuck request ffff8880291fe000: control (read@0,1024B). Runtime 240 seconds [ 744.969616][ T4956] block nbd0: Possible stuck request ffff8880291fe1c0: control (read@1024,1024B). Runtime 240 seconds [ 744.969630][ T4956] block nbd0: Possible stuck request ffff8880291fe380: control (read@2048,2048B). Runtime 240 seconds [ 745.018364][T11682] rxe_eth0 speed is unknown, defaulting to 1000 [ 745.079945][ T13] tipc: Left network mode [ 745.220312][ T31] audit: type=1400 audit(1794369741.991:1971): avc: denied { read } for pid=11728 comm="syz.0.1331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 745.773318][T11678] rxe_eth0 speed is unknown, defaulting to 1000 [ 746.217042][ T31] audit: type=1400 audit(1794369742.991:1972): avc: denied { write } for pid=11726 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 746.329225][ T5626] Bluetooth: hci1: command tx timeout [ 746.408934][ T5626] Bluetooth: hci7: command tx timeout [ 746.586174][ T31] audit: type=1400 audit(1794369743.361:1973): avc: denied { write } for pid=11753 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 746.889891][ T5626] Bluetooth: hci6: command tx timeout [ 746.895882][T11658] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.895928][T11658] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.895988][T11658] bridge_slave_0: entered allmulticast mode [ 746.926744][T11658] bridge_slave_0: entered promiscuous mode [ 746.945678][T11658] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.957119][T11658] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.957209][T11658] bridge_slave_1: entered allmulticast mode [ 746.981899][T11658] bridge_slave_1: entered promiscuous mode [ 747.246629][ T13] hsr_slave_0: left promiscuous mode [ 747.258873][ T13] hsr_slave_1: left promiscuous mode [ 747.259304][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 747.259321][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 747.289110][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 747.289124][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 747.327438][ T13] veth1_macvtap: left promiscuous mode [ 747.327461][ T13] veth0_macvtap: left promiscuous mode [ 747.327528][ T13] veth1_vlan: left promiscuous mode [ 747.327559][ T13] veth0_vlan: left promiscuous mode [ 747.776592][ T31] audit: type=1400 audit(1794369744.551:1974): avc: denied { write } for pid=11757 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 748.065842][ T31] audit: type=1400 audit(1794369744.841:1975): avc: denied { write } for pid=11769 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 748.342644][ T13] team0 (unregistering): Port device team_slave_1 removed [ 748.398027][ T13] team0 (unregistering): Port device team_slave_0 removed [ 748.408843][ T5626] Bluetooth: hci1: command tx timeout [ 748.490816][ T5626] Bluetooth: hci7: command tx timeout [ 748.804282][T11658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 748.842239][T11658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 748.969730][ T5626] Bluetooth: hci6: command tx timeout [ 748.997383][T11401] syz.5.1289 (11401) used greatest stack depth: 17552 bytes left [ 749.173968][ T31] audit: type=1400 audit(1794369745.951:1976): avc: denied { write } for pid=11771 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 749.218064][T11658] team0: Port device team_slave_0 added [ 749.277584][T11682] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.277628][T11682] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.277693][T11682] bridge_slave_0: entered allmulticast mode [ 749.323566][T11682] bridge_slave_0: entered promiscuous mode [ 749.332122][T11658] team0: Port device team_slave_1 added [ 749.416019][T11682] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.416065][T11682] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.416170][T11682] bridge_slave_1: entered allmulticast mode [ 749.416835][T11682] bridge_slave_1: entered promiscuous mode [ 749.526218][T11658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 749.526229][T11658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.526241][T11658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 749.614683][ T31] audit: type=1400 audit(1794369746.391:1977): avc: denied { write } for pid=11786 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 749.670767][T11658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 749.670779][T11658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.670791][T11658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 749.780258][T11682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 749.843931][T11682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 750.002733][T11682] team0: Port device team_slave_0 added [ 750.021056][T11658] hsr_slave_0: entered promiscuous mode [ 750.034393][T11658] hsr_slave_1: entered promiscuous mode [ 750.034670][T11658] debugfs: 'hsr0' already exists in 'hsr' [ 750.034679][T11658] Cannot create hsr debugfs directory [ 750.235065][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.322701][T11682] team0: Port device team_slave_1 added [ 750.461343][T11682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 750.461355][T11682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 750.461367][T11682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 750.501746][ T5626] Bluetooth: hci1: command tx timeout [ 750.569669][ T5626] Bluetooth: hci7: command tx timeout [ 750.575735][T11682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 750.575747][T11682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 750.575759][T11682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 750.682147][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.774886][ T31] audit: type=1400 audit(1794369747.551:1978): avc: denied { write } for pid=11790 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 750.926596][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.991859][T11682] hsr_slave_0: entered promiscuous mode [ 750.995921][T11682] hsr_slave_1: entered promiscuous mode [ 750.996250][T11682] debugfs: 'hsr0' already exists in 'hsr' [ 750.996258][T11682] Cannot create hsr debugfs directory [ 751.024248][ T31] audit: type=1400 audit(1794369747.811:1979): avc: denied { write } for pid=11803 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 751.160385][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.265356][T11678] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.265405][T11678] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.265459][T11678] bridge_slave_0: entered allmulticast mode [ 751.268019][T11678] bridge_slave_0: entered promiscuous mode [ 751.301062][T11678] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.301105][T11678] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.301167][T11678] bridge_slave_1: entered allmulticast mode [ 751.306671][T11678] bridge_slave_1: entered promiscuous mode [ 751.495794][T11678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 751.547474][T11678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 751.759935][T11678] team0: Port device team_slave_0 added [ 751.874650][ T31] audit: type=1400 audit(1794369748.651:1980): avc: denied { write } for pid=11807 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 751.990580][T11658] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.089713][T11678] team0: Port device team_slave_1 added [ 752.116892][ T31] audit: type=1400 audit(1794369748.891:1981): avc: denied { write } for pid=11818 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 752.377309][T11658] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.413137][T11678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 752.413148][T11678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 752.413160][T11678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 752.426221][T11678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 752.426232][T11678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 752.426245][T11678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 752.692554][T11658] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.913687][ T13] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.052754][T11658] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.107817][ T31] audit: type=1400 audit(1794369749.881:1982): avc: denied { write } for pid=11820 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 753.164327][T11678] hsr_slave_0: entered promiscuous mode [ 753.164811][T11678] hsr_slave_1: entered promiscuous mode [ 753.165075][T11678] debugfs: 'hsr0' already exists in 'hsr' [ 753.165084][T11678] Cannot create hsr debugfs directory [ 753.236328][ T13] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.372133][ T31] audit: type=1400 audit(1794369750.151:1983): avc: denied { write } for pid=11831 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 753.482788][ T13] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.661909][T11682] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.748098][ T13] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.853735][T11682] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.070407][T11682] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.366496][T11682] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.395727][ T31] audit: type=1400 audit(1794369751.171:1984): avc: denied { write } for pid=11833 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 754.533756][ T13] bridge_slave_1: left allmulticast mode [ 754.533773][ T13] bridge_slave_1: left promiscuous mode [ 754.533882][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.535133][ T13] bridge_slave_0: left allmulticast mode [ 754.535145][ T13] bridge_slave_0: left promiscuous mode [ 754.535225][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.610907][ T13] bridge_slave_1: left allmulticast mode [ 754.610924][ T13] bridge_slave_1: left promiscuous mode [ 754.611016][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.652016][ T13] bridge_slave_0: left allmulticast mode [ 754.652032][ T13] bridge_slave_0: left promiscuous mode [ 754.652133][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.742189][ T31] audit: type=1400 audit(1794369751.521:1985): avc: denied { write } for pid=11844 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 755.177860][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 755.194599][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 755.196832][ T13] bond0 (unregistering): Released all slaves [ 755.451882][ T31] audit: type=1400 audit(1794369752.231:1986): avc: denied { write } for pid=11846 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 755.563905][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 755.583528][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 755.585791][ T13] bond0 (unregistering): Released all slaves [ 755.693093][ T31] audit: type=1400 audit(1794369752.471:1987): avc: denied { write } for pid=11857 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 756.195204][T11682] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 756.217412][T11682] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 756.229517][T11682] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 756.246896][T11682] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 756.323270][T11682] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 756.336993][T11682] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 756.337498][T11682] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 756.360101][T11682] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 756.592003][ T31] audit: type=1400 audit(1794369753.371:1988): avc: denied { write } for pid=11859 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 756.860914][ T31] audit: type=1400 audit(1794369753.641:1989): avc: denied { write } for pid=11876 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 756.919537][T11658] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 756.980639][T11658] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 756.982958][T11658] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 757.010191][T11658] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 757.030728][T11658] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 757.070026][T11658] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 757.070473][T11658] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 757.143535][T11658] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 757.493411][ T13] hsr_slave_0: left promiscuous mode [ 757.493689][ T13] hsr_slave_1: left promiscuous mode [ 757.494029][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 757.494039][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 757.494388][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 757.494397][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 757.545462][ T13] hsr_slave_0: left promiscuous mode [ 757.545792][ T13] hsr_slave_1: left promiscuous mode [ 757.546118][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 757.546127][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 757.546459][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 757.546468][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 757.629082][ T13] veth1_macvtap: left promiscuous mode [ 757.629106][ T13] veth0_macvtap: left promiscuous mode [ 757.629163][ T13] veth1_vlan: left promiscuous mode [ 757.629193][ T13] veth0_vlan: left promiscuous mode [ 757.629822][ T13] veth1_macvtap: left promiscuous mode [ 757.629837][ T13] veth0_macvtap: left promiscuous mode [ 757.629898][ T13] veth1_vlan: left promiscuous mode [ 757.629926][ T13] veth0_vlan: left promiscuous mode [ 758.213266][ T13] team0 (unregistering): Port device team_slave_1 removed [ 758.237371][ T13] team0 (unregistering): Port device team_slave_0 removed [ 758.722847][ T13] team0 (unregistering): Port device team_slave_1 removed [ 758.744187][ T13] team0 (unregistering): Port device team_slave_0 removed [ 759.145956][T11682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 759.345405][T11682] 8021q: adding VLAN 0 to HW filter on device team0 [ 759.380114][ T1274] bridge0: port 1(bridge_slave_0) entered blocking state [ 759.380161][ T1274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 759.425457][ T5627] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 759.443772][ T5627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 759.447748][ T5627] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 759.467381][ T5627] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 759.467655][ T5627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 759.671263][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 759.671319][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 759.963161][T11658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 760.042286][ T31] audit: type=1400 audit(1794369756.821:1990): avc: denied { write } for pid=11888 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 760.187728][T11658] 8021q: adding VLAN 0 to HW filter on device team0 [ 760.263888][T10061] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.263935][T10061] bridge0: port 1(bridge_slave_0) entered forwarding state [ 760.295938][T10398] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.295988][T10398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 760.406897][ T31] audit: type=1400 audit(1794369757.181:1991): avc: denied { write } for pid=11907 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 760.490167][T11678] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 760.493329][T11678] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 760.496865][T11678] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 760.522776][T11678] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 760.574011][T11678] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 760.592630][T11678] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 760.610846][T11678] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 760.632819][T11678] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 760.803264][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.842546][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 760.925086][T11892] rxe_eth0 speed is unknown, defaulting to 1000 [ 761.053108][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.220541][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.357426][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.513153][T11678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 761.529715][ T5626] Bluetooth: hci2: command tx timeout [ 761.628103][T11682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 761.762214][T11678] 8021q: adding VLAN 0 to HW filter on device team0 [ 761.805680][ T13] bridge_slave_1: left allmulticast mode [ 761.805698][ T13] bridge_slave_1: left promiscuous mode [ 761.805803][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.828806][ T13] bridge_slave_0: left allmulticast mode [ 761.828822][ T13] bridge_slave_0: left promiscuous mode [ 761.828924][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.041529][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 762.044089][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 762.044674][ T13] bond0 (unregistering): Released all slaves [ 762.115075][T10862] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.115123][T10862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 762.182921][T10862] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.182968][T10862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 762.365235][T11658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 762.453206][T11682] veth0_vlan: entered promiscuous mode [ 762.654225][T11682] veth1_vlan: entered promiscuous mode [ 762.841650][ T5627] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 762.844958][ T5627] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 762.847167][ T5627] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 762.873237][ T5627] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 762.873485][ T5627] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 762.913811][ T13] hsr_slave_0: left promiscuous mode [ 762.914095][ T13] hsr_slave_1: left promiscuous mode [ 762.914421][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 762.914431][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 762.916271][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 762.916280][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 762.964802][ T13] veth1_macvtap: left promiscuous mode [ 762.964825][ T13] veth0_macvtap: left promiscuous mode [ 762.964883][ T13] veth1_vlan: left promiscuous mode [ 762.964914][ T13] veth0_vlan: left promiscuous mode [ 763.231441][ T13] team0 (unregistering): Port device team_slave_1 removed [ 763.235843][ T13] team0 (unregistering): Port device team_slave_0 removed [ 763.329398][T11892] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.329442][T11892] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.329516][T11892] bridge_slave_0: entered allmulticast mode [ 763.330341][T11892] bridge_slave_0: entered promiscuous mode [ 763.366796][T11892] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.366846][T11892] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.366902][T11892] bridge_slave_1: entered allmulticast mode [ 763.367565][T11892] bridge_slave_1: entered promiscuous mode [ 763.537602][T11892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 763.600542][T11892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 763.609101][ T5627] Bluetooth: hci2: command tx timeout [ 763.650987][T11682] veth0_macvtap: entered promiscuous mode [ 763.693791][T11892] team0: Port device team_slave_0 added [ 763.711200][T11682] veth1_macvtap: entered promiscuous mode [ 763.726687][T11892] team0: Port device team_slave_1 added [ 763.843600][T11682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 763.861838][T11682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 763.865720][T11892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 763.865731][T11892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 763.865744][T11892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 763.866589][T11892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 763.866596][T11892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 763.866608][T11892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 764.053415][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.089710][T10061] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.089974][T10061] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.090050][T10061] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.090126][T10061] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.149960][T11658] veth0_vlan: entered promiscuous mode [ 764.187634][T11658] veth1_vlan: entered promiscuous mode [ 764.207971][T11892] hsr_slave_0: entered promiscuous mode [ 764.208367][T11892] hsr_slave_1: entered promiscuous mode [ 764.225438][T11892] debugfs: 'hsr0' already exists in 'hsr' [ 764.225450][T11892] Cannot create hsr debugfs directory [ 764.335316][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.428046][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.496417][T11950] rxe_eth0 speed is unknown, defaulting to 1000 [ 764.561098][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.645629][ T1274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.645644][ T1274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.711364][T11658] veth0_macvtap: entered promiscuous mode [ 764.767187][T11658] veth1_macvtap: entered promiscuous mode [ 764.794109][T11678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 764.866984][T10862] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.866999][T10862] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.900601][T11658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 764.903485][T11658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 764.969780][ T5627] Bluetooth: hci3: command tx timeout [ 765.049897][ T1274] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.050146][ T1274] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.050166][ T1274] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.050183][ T1274] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.100852][ T13] bridge_slave_1: left allmulticast mode [ 765.100868][ T13] bridge_slave_1: left promiscuous mode [ 765.100987][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.104961][ T13] bridge_slave_0: left allmulticast mode [ 765.104976][ T13] bridge_slave_0: left promiscuous mode [ 765.105074][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.253094][T11975] openvswitch: netlink: Actions may not be safe on all matching packets [ 765.345856][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 765.347015][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 765.372241][ T13] bond0 (unregistering): Released all slaves [ 765.535669][T11678] veth0_vlan: entered promiscuous mode [ 765.678316][T11678] veth1_vlan: entered promiscuous mode [ 765.689067][ T5627] Bluetooth: hci2: command tx timeout [ 766.032045][T10862] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.032060][T10862] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.094691][T11678] veth0_macvtap: entered promiscuous mode [ 766.148866][ T5816] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 766.166753][T11678] veth1_macvtap: entered promiscuous mode [ 766.271876][ T31] audit: type=1400 audit(1794369763.051:1992): avc: denied { write } for pid=11980 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 766.318630][ T5816] usb 4-1: Using ep0 maxpacket: 16 [ 766.325556][ T5816] usb 4-1: unable to get BOS descriptor or descriptor too short [ 766.325582][ T5816] usb 4-1: New USB device found: idVendor=1004, idProduct=61aa, bcdDevice=1e.de [ 766.326313][ T5816] usb 4-1: config 7 has an invalid interface number: 130 but max is 0 [ 766.326326][ T5816] usb 4-1: config 7 has no interface number 0 [ 766.326340][ T5816] usb 4-1: config 7 interface 130 has no altsetting 0 [ 766.327742][ T5816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.327755][ T5816] usb 4-1: Product: syz [ 766.327762][ T5816] usb 4-1: Manufacturer: syz [ 766.327770][ T5816] usb 4-1: SerialNumber: syz [ 766.444031][T10061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.444060][T10061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.513527][ T13] hsr_slave_0: left promiscuous mode [ 766.514452][ T13] hsr_slave_1: left promiscuous mode [ 766.514878][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 766.514888][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 766.516227][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 766.516238][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 766.566016][ T13] veth1_macvtap: left promiscuous mode [ 766.566040][ T13] veth0_macvtap: left promiscuous mode [ 766.566110][ T13] veth1_vlan: left promiscuous mode [ 766.566143][ T13] veth0_vlan: left promiscuous mode [ 766.594038][ T31] audit: type=1400 audit(1794369763.381:1993): avc: denied { write } for pid=11996 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 766.680857][ T31] audit: type=1400 audit(1794369763.461:1994): avc: denied { write } for pid=11985 comm="syz.3.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 766.956988][ T13] team0 (unregistering): Port device team_slave_1 removed [ 766.981509][ T13] team0 (unregistering): Port device team_slave_0 removed [ 767.046863][ T31] audit: type=1400 audit(1794369763.821:1995): avc: denied { write } for pid=11999 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 767.048792][ T5627] Bluetooth: hci3: command tx timeout [ 767.200065][T11678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 767.220494][ T31] audit: type=1400 audit(1794369764.001:1996): avc: denied { write } for pid=12010 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 767.327460][T11678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 767.502386][T11950] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.502507][T11950] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.505168][T11950] bridge_slave_0: entered allmulticast mode [ 767.506451][T11950] bridge_slave_0: entered promiscuous mode [ 767.558994][T10314] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.559024][T10314] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.559042][T10314] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.559074][T10314] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.600408][T11950] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.600473][T11950] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.600549][T11950] bridge_slave_1: entered allmulticast mode [ 767.601288][T11950] bridge_slave_1: entered promiscuous mode [ 767.687392][T11892] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 767.711570][T11892] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 767.712039][T11892] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 767.715353][T11892] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 768.017799][ T5627] Bluetooth: hci2: command tx timeout [ 768.046265][T11892] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 768.060079][T11892] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 768.061513][T11950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 768.094590][T11892] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 768.111597][T11892] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 768.134096][T11950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 768.210635][T11950] team0: Port device team_slave_0 added [ 768.236203][T11950] team0: Port device team_slave_1 added [ 768.300405][T11950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 768.300416][T11950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 768.300442][T11950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 768.303554][T11950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 768.303565][T11950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 768.303577][T11950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 768.471102][ T1274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 768.471116][ T1274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 768.556513][ T31] audit: type=1400 audit(1794369765.331:1997): avc: denied { write } for pid=12017 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 768.590539][T11950] hsr_slave_0: entered promiscuous mode [ 768.593803][T11950] hsr_slave_1: entered promiscuous mode [ 768.594705][T11950] debugfs: 'hsr0' already exists in 'hsr' [ 768.594714][T11950] Cannot create hsr debugfs directory [ 768.717067][T12039] /dev/sg0: Can't lookup blockdev [ 768.763746][ T1274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 768.763760][ T1274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 768.805531][ T31] audit: type=1400 audit(1794369765.581:1998): avc: denied { write } for pid=12040 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 768.961916][ T5816] usb 4-1: No union descriptors [ 768.988624][ T5816] usb 4-1: USB disconnect, device number 33 [ 769.086078][T12044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1339'. [ 769.086438][T11892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 769.129414][ T5627] Bluetooth: hci3: command tx timeout [ 769.183723][T11892] 8021q: adding VLAN 0 to HW filter on device team0 [ 769.213720][T10398] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.213768][T10398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 769.214556][T10398] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.214610][T10398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 770.048089][T12048] device-mapper: table: 248:9: ram8 too small for target: start=16, len=10376, dev_size=8192 [ 770.048104][T12048] device-mapper: core: Cannot calculate initial queue limits [ 770.048108][T12048] device-mapper: ioctl: unable to set up device queue for new table. [ 770.559907][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 770.581778][ T31] audit: type=1400 audit(1794369767.361:1999): avc: denied { write } for pid=12046 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 770.709843][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 770.711715][ T10] usb 2-1: New USB device found: idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 770.737949][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.737964][ T10] usb 2-1: Product: syz [ 770.737971][ T10] usb 2-1: Manufacturer: syz [ 770.737979][ T10] usb 2-1: SerialNumber: syz [ 770.757126][ T10] usb 2-1: config 0 descriptor?? [ 770.768690][ T10] gspca_main: se401-2.14.0 probing 047d:5003 [ 771.208989][ T5627] Bluetooth: hci3: command tx timeout [ 771.879109][T12068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1343'. [ 771.905972][ T31] audit: type=1400 audit(1794369768.681:2000): avc: denied { write } for pid=12080 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 772.506942][ T10] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 772.506987][ T10] se401 2-1:0.0: probe with driver se401 failed with error -71 [ 772.531286][T11950] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 772.535284][ T10] usb 2-1: USB disconnect, device number 16 [ 772.566629][T11950] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 772.567018][T11950] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 772.597275][T11950] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 772.597694][T11950] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 772.623817][T11950] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 772.638242][T11950] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 772.655684][T11950] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 772.688915][ T5816] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 772.802827][T11892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 772.838905][ T5816] usb 4-1: New USB device found: idVendor=0711, idProduct=0550, bcdDevice=0.00 [ 772.839808][ T5816] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 65280, setting to 1024 [ 772.839824][ T5816] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 1024 [ 772.842476][ T5816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.842489][ T5816] usb 4-1: Product: syz [ 772.842497][ T5816] usb 4-1: Manufacturer: syz [ 772.842505][ T5816] usb 4-1: SerialNumber: syz [ 772.845708][T12098] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 772.847506][T11950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 772.891186][ T9154] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 772.922060][ T5816] usb 4-1: USB2VGA dongle found at address 34 [ 773.013203][T11950] 8021q: adding VLAN 0 to HW filter on device team0 [ 773.017388][ T5816] usb 4-1: Allocated 8 output buffers [ 773.037334][T10398] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.037384][T10398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 773.069591][ T9154] usb 5-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 773.070674][ T9154] usb 5-1: config index 0 descriptor too short (expected 42268, got 28) [ 773.070689][ T9154] usb 5-1: config 1 has too many interfaces: 63, using maximum allowed: 32 [ 773.070700][ T9154] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 63 [ 773.070712][ T9154] usb 5-1: config 1 has no interface number 0 [ 773.076778][ T5816] usb 4-1: Failed to early initialize device [ 773.098039][ T9154] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.098054][ T9154] usb 5-1: Product: syz [ 773.098062][ T9154] usb 5-1: Manufacturer: syz [ 773.098069][ T9154] usb 5-1: SerialNumber: syz [ 773.177874][T10061] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.177920][T10061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 773.193165][ T5816] usb 4-1: USB disconnect, device number 34 [ 773.215496][ T9154] usb 5-1: 3:0 : does not exist [ 773.226611][ T9154] usb 5-1: 3:0 : does not exist [ 773.260741][ T31] audit: type=1400 audit(1794369770.041:2001): avc: denied { write } for pid=12088 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 773.335452][T11950] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 773.528305][ T31] audit: type=1400 audit(1794369770.301:2002): avc: denied { write } for pid=12121 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 773.638891][ T9154] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 773.777330][T12131] Dead loop on virtual device lo (net 228), fix it urgently! [ 773.777430][T12131] Dead loop on virtual device lo (net 228), fix it urgently! [ 773.777510][T12131] Dead loop on virtual device lo (net 228), fix it urgently! [ 773.777692][T12131] Dead loop on virtual device lo (net 228), fix it urgently! [ 773.777807][T12131] Dead loop on virtual device lo (net 228), fix it urgently! [ 773.777881][T12131] Dead loop on virtual device lo (net 228), fix it urgently! [ 773.778077][T12131] Dead loop on virtual device lo (net 228), fix it urgently! [ 773.778158][T12131] Dead loop on virtual device lo (net 228), fix it urgently! [ 773.778233][T12131] Dead loop on virtual device lo (net 228), fix it urgently! [ 773.795104][ T9154] usb 2-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 773.803828][ T9154] usb 2-1: config index 0 descriptor too short (expected 42268, got 28) [ 773.803844][ T9154] usb 2-1: config 1 has too many interfaces: 63, using maximum allowed: 32 [ 773.803855][ T9154] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 63 [ 773.803866][ T9154] usb 2-1: config 1 has no interface number 0 [ 773.822045][ T9154] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.822061][ T9154] usb 2-1: Product: syz [ 773.822083][ T9154] usb 2-1: Manufacturer: syz [ 773.822091][ T9154] usb 2-1: SerialNumber: syz [ 773.847809][T12131] Dead loop on virtual device lo (net 228), fix it urgently! [ 773.981538][ T9154] usb 2-1: 3:0 : does not exist [ 773.981568][ T9154] usb 2-1: 3:0 : does not exist [ 774.029128][T11892] veth0_vlan: entered promiscuous mode [ 774.061367][T11892] veth1_vlan: entered promiscuous mode [ 774.156722][T11892] veth0_macvtap: entered promiscuous mode [ 774.174214][T11892] veth1_macvtap: entered promiscuous mode [ 774.224115][T11892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 774.257911][T11892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 774.300284][ T8344] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.300517][ T8344] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.300536][ T8344] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.300568][ T8344] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.521165][ T8344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 774.521178][ T8344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 774.621358][T10061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 774.621372][T10061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 774.724634][ T31] audit: type=1400 audit(1794369771.501:2003): avc: denied { write } for pid=12129 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 774.726823][T11950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 775.503445][T12152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1348'. [ 775.569989][ T4956] block nbd0: Possible stuck request ffff8880291fe000: control (read@0,1024B). Runtime 270 seconds [ 775.570014][ T4956] block nbd0: Possible stuck request ffff8880291fe1c0: control (read@1024,1024B). Runtime 270 seconds [ 775.570027][ T4956] block nbd0: Possible stuck request ffff8880291fe380: control (read@2048,2048B). Runtime 270 seconds [ 775.805991][ T31] audit: type=1400 audit(1794369772.581:2004): avc: denied { write } for pid=12156 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 776.954011][T11950] veth0_vlan: entered promiscuous mode [ 776.969958][ T33] INFO: task syz.4.1169:10450 blocked for more than 143 seconds. [ 776.969976][ T33] Tainted: G L syzkaller #0 [ 776.969982][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 776.969987][ T33] task:syz.4.1169 state:D stack:28152 pid:10450 tgid:10449 ppid:5636 task_flags:0x400040 flags:0x00080002 [ 776.970016][ T33] Call Trace: [ 776.970021][ T33] [ 776.970028][ T33] __schedule+0x125e/0x6a40 [ 776.970059][ T33] ? __lock_acquire+0x5c0/0x1f40 [ 776.970079][ T33] ? do_raw_spin_lock+0x128/0x260 [ 776.970094][ T33] ? __pfx___schedule+0x10/0x10 [ 776.970104][ T33] ? find_held_lock+0x2b/0x80 [ 776.970116][ T33] ? schedule+0x225/0x2c0 [ 776.970129][ T33] schedule+0xdd/0x2c0 [ 776.970146][ T33] schedule_preempt_disabled+0x13/0x30 [ 776.970158][ T33] __mutex_lock+0xcca/0x1c10 [ 776.970171][ T33] ? sync_bdevs+0x169/0x4d0 [ 776.970196][ T33] ? sync_bdevs+0x228/0x4d0 [ 776.970208][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 776.970226][ T33] ? __pfx_kobject_get_unless_zero+0x10/0x10 [ 776.970243][ T33] ? iput.part.0+0x1a0/0x1050 [ 776.970253][ T33] ? sync_bdevs+0xd7/0x4d0 [ 776.970267][ T33] ? sync_bdevs+0x169/0x4d0 [ 776.970276][ T33] sync_bdevs+0x169/0x4d0 [ 776.970289][ T33] ksys_sync+0xb0/0xf0 [ 776.970306][ T33] ? __pfx_ksys_sync+0x10/0x10 [ 776.970336][ T33] ? do_syscall_64+0xae/0x7b0 [ 776.970350][ T33] __do_sys_sync+0xe/0x20 [ 776.970366][ T33] do_syscall_64+0x123/0x7b0 [ 776.970380][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.970392][ T33] RIP: 0033:0x7f29aa1a8f19 [ 776.970401][ T33] RSP: 002b:00007f29ab00c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 776.970411][ T33] RAX: ffffffffffffffda RBX: 00007f29aa425fa0 RCX: 00007f29aa1a8f19 [ 776.970419][ T33] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 776.970425][ T33] RBP: 00007f29aa425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 776.970431][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 776.970438][ T33] R13: 00007f29aa426038 R14: 00007f29aa425fa0 R15: 00007ffe235dff58 [ 776.970452][ T33] [ 776.970489][ T33] [ 776.970489][ T33] Showing all locks held in the system: [ 776.970497][ T33] locks held by khungtaskd/33: 1, on CPU#0: [ 776.970505][ T33] #0: ffffffff8ffed020 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 776.970558][ T33] locks held by getty/5381: 2, last CPU#0: [ 776.970565][ T33] #0: ffff88802caa50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 776.970609][ T33] #1: ffffc900032362e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1540 [ 776.970642][ T33] locks held by kworker/0:6/5825: 3, last CPU#0: [ 776.970650][ T33] #0: ffff88813ff36d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 776.970675][ T33] #1: ffffc9000445fd08 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 776.970700][ T33] #2: ffff88805791a258 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1b8/0x6330 [ 776.970745][ T33] locks held by kworker/0:4/9154: 3, on CPU#0: [ 776.970752][ T33] #0: ffff88813ff36d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 776.970778][ T33] #1: ffffc90007377d08 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 776.970803][ T33] #2: ffff88802bc60258 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1b8/0x6330 [ 776.970831][ T33] locks held by udevd/9300: 1, last CPU#0: [ 776.970838][ T33] #0: ffff888028b8d350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x426/0xe50 [ 776.970876][ T33] locks held by syz.4.1169/10450: 1, last CPU#0: [ 776.970884][ T33] #0: ffff888028b8d350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x169/0x4d0 [ 776.970909][ T33] locks held by syz-executor/11682: 1, on CPU#0: [ 776.970917][ T33] #0: ffff88807dab4478 (sb_writers#6){.+.+}-{0:0}, at: filename_unlinkat+0x1ad/0x770 [ 776.970950][ T33] locks held by syz-executor/11892: 2, on CPU#0: [ 776.970957][ T33] #0: ffff88802b4be478 (sb_writers#6){.+.+}-{0:0}, at: filename_unlinkat+0x1ad/0x770 [ 776.970987][ T33] #1: ffffffff8ffed020 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 776.971025][ T33] locks held by syz-executor/11950: 1, on CPU#0: [ 776.971032][ T33] #0: ffffffff8ffed020 (rcu_read_lock){....}-{1:3}, at: is_module_text_address+0x1f/0x220 [ 776.971058][ T33] locks held by syz.4.1345/12090: 2, last CPU#0: [ 776.971065][ T33] #0: ffff88807763e1b8 (&card->controls_rwsem){++++}-{4:4}, at: snd_ctl_elem_write+0x32/0x500 [ 776.971095][ T33] #1: ffff88807c926088 (&mixer->lock){+.+.}-{4:4}, at: snd_us16x08_eq_put+0x1b1/0x9c0 [ 776.971124][ T33] locks held by syz.1.1346/12109: 1, last CPU#0: [ 776.971149][ T33] #0: ffff88807763e1b8 (&card->controls_rwsem){++++}-{4:4}, at: snd_ctl_elem_write+0x32/0x500 [ 776.971178][ T33] locks held by sed/12168: 4, on CPU#0: [ 776.971185][ T33] #0: ffff88805f60b808 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 776.971210][ T33] #1: ffffffff8ffed020 (rcu_read_lock){....}-{1:3}, at: do_fault+0x9a8/0x1890 [ 776.971233][ T33] #2: ffffffff8ffed020 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x1d7/0x1f10 [ 776.971262][ T33] #3: ffffffff8ffed020 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x9a/0x470 [ 776.971304][ T33] [ 776.971307][ T33] ============================================= [ 776.971307][ T33] [ 776.971311][ T33] NMI backtrace for cpu 0 [ 776.971320][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 776.971334][ T33] Tainted: [L]=SOFTLOCKUP [ 776.971337][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 776.971343][ T33] Call Trace: [ 776.971347][ T33] [ 776.971351][ T33] dump_stack_lvl+0x100/0x190 [ 776.971369][ T33] nmi_cpu_backtrace.cold+0x12d/0x151 [ 776.971381][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 776.971396][ T33] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 776.971410][ T33] sys_info+0x141/0x190 [ 776.971424][ T33] watchdog+0xd0f/0x10c0 [ 776.971439][ T33] ? __pfx_watchdog+0x10/0x10 [ 776.971450][ T33] ? __kthread_parkme+0x18f/0x230 [ 776.971466][ T33] ? kthread+0x13a/0x450 [ 776.971475][ T33] ? __pfx_watchdog+0x10/0x10 [ 776.971484][ T33] kthread+0x373/0x450 [ 776.971494][ T33] ? __pfx_kthread+0x10/0x10 [ 776.971505][ T33] ret_from_fork+0x730/0xd60 [ 776.971519][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 776.971533][ T33] ? __switch_to+0x800/0x10e0 [ 776.971543][ T33] ? __pfx_kthread+0x10/0x10 [ 776.971555][ T33] ret_from_fork_asm+0x1a/0x30 [ 776.971573][ T33] [ 776.971598][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 777.611231][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 777.621874][ T33] Tainted: [L]=SOFTLOCKUP [ 777.626165][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 777.636189][ T33] Call Trace: [ 777.639443][ T33] [ 777.642345][ T33] dump_stack_lvl+0x100/0x190 [ 777.647001][ T33] vpanic+0x2dc/0x6f8 [ 777.650952][ T33] panic+0xd1/0xe0 [ 777.654642][ T33] ? __pfx_panic+0x10/0x10 [ 777.659038][ T33] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 777.665161][ T33] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 777.671281][ T33] ? watchdog.cold+0x20/0x26d [ 777.675928][ T33] watchdog.cold+0x31/0x26d [ 777.680404][ T33] ? __pfx_watchdog+0x10/0x10 [ 777.685051][ T33] ? __kthread_parkme+0x18f/0x230 [ 777.690051][ T33] ? kthread+0x13a/0x450 [ 777.694274][ T33] ? __pfx_watchdog+0x10/0x10 [ 777.698921][ T33] kthread+0x373/0x450 [ 777.702958][ T33] ? __pfx_kthread+0x10/0x10 [ 777.707519][ T33] ret_from_fork+0x730/0xd60 [ 777.712084][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 777.717179][ T33] ? __switch_to+0x800/0x10e0 [ 777.721827][ T33] ? __pfx_kthread+0x10/0x10 [ 777.726389][ T33] ret_from_fork_asm+0x1a/0x30 [ 777.731132][ T33] [ 777.734176][ T33] Kernel Offset: disabled [ 777.738473][ T33] Rebooting in 86400 seconds..