last executing test programs: 6m56.298051668s ago: executing program 32 (id=663): socket(0x10, 0x3, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000400)=""/87, &(0x7f0000000480)=""/65, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa0042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) 3m59.032613481s ago: executing program 33 (id=1245): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800000, 0x13, r0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000040, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff07bbbf7f00931c07b2fd"], 0x1c}}, 0x0) recvmmsg$unix(r1, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) 3m27.979481943s ago: executing program 4 (id=1336): setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf8, 0x34424752, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r2) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r4, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r2, 0x0, 0x20000000) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r1, &(0x7f0000007700), 0x318, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="8580f83288e1aaaaaaaaaa1c08004515001c00670000020290780a010102e000000111819078640101007c65203e060021a4c1abbe74810f1be31409f8c241eaa688a9d650ba59d8880f43e4b2270c82"], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000006d0001000000000000001c0c0000000086c6ac2187f82061cdaafd56a05551374d7a8b446275ee235ca9385f3d18354cc838292b7fa5c40482390800412d8b557cf8a4eaaa532eadf15326c45c05d949887400de5e35ce60cd7d9612ce95dd67c7c65684eee10938c94da6d5ff0fabf80fb6e60772dfb5eee128bf9857b524e4a8ef140fda0a22eaa2d13f36de059b4ec79e7d6df33703d5fe7a95e66018000610b707658ab695a224863c5e257215a47fac762727351695fa7309c6907e0134", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c5) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3) umount2(&(0x7f0000000380)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@nfs_export_on}], [{@func={'func', 0x3d, 'FILE_CHECK'}}]}) 3m27.297517411s ago: executing program 4 (id=1339): socket$l2tp(0x2, 0x2, 0x73) (async) r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f00000000c0)={0x1, {0xf8000002, 0x8b8, 0xc4f, 0x6}}) (async) write$UHID_INPUT(r1, &(0x7f0000000000)={0x9, {"a2e3ad214fc752f91b5d090932f70e0dd038e7ff7fc6e5539b324c078b089b3434076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b353b0d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509301815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195358bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) 3m10.923929957s ago: executing program 34 (id=1339): socket$l2tp(0x2, 0x2, 0x73) (async) r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f00000000c0)={0x1, {0xf8000002, 0x8b8, 0xc4f, 0x6}}) (async) write$UHID_INPUT(r1, &(0x7f0000000000)={0x9, {"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", 0x1000}}, 0x1006) 2m45.751983323s ago: executing program 1 (id=1462): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000"], 0x128}, 0x4004000) r1 = msgget$private(0x0, 0x193) msgsnd(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="01"], 0x8, 0x0) msgsnd(r1, &(0x7f0000000300)=ANY=[@ANYRES8], 0x3f9, 0x0) msgrcv(r1, &(0x7f00000002c0), 0x8, 0x0, 0x800) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$radio(&(0x7f0000000280), 0x2, 0x2) write(0xffffffffffffffff, &(0x7f0000000100)='file read /etc/passwd 0ask.ui!=0 exec.argv[0]=\"sh\" exec.envp[\"PATH\"]=\"/bin\"\n', 0x4c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x2c000010) ptrace$pokeuser(0x6, 0x0, 0x0, 0x3db) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1200000004000000040000001100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000091490054937e6f12a45f9f351a380313eafd10529764e8c41d6977c2b01cd54751b70963b8ba60b6b94834419299"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="18080000d0ff0000000000003e00000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180200000020782500000000002020207b1bf8ff00000000bfa100000000000007010000f8ffffffb702050008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 2m45.554661601s ago: executing program 1 (id=1463): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='0123:abcd:a6d', 0xd) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$NILFS_IOCTL_RESIZE(r1, 0x40086e8b, &(0x7f0000000000)=0x9) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x358, 0xffff8881f5c0a000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) 2m45.393690959s ago: executing program 1 (id=1464): r0 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x9, 0x4c032, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r1 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r1], 0x0) setrlimit(0x7, &(0x7f0000000140)={0x4, 0x100}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0xb, @local}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004051}, 0x4008000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0001100", @ANYRES16=r2, @ANYBLOB="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"], 0x5f0}, 0x1, 0x0, 0x0, 0x41}, 0x20000004) r3 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0xc3, &(0x7f0000000100), &(0x7f0000000140)=0x4) 2m43.937912124s ago: executing program 6 (id=1470): socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = gettid() tkill(r4, 0x2a) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009965, 0xffffffffffffffff, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfe, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uac1.usb0/p_chmask\x00', 0x141842, 0x10) 2m34.568330898s ago: executing program 35 (id=1442): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x92}, 0x0) socket$inet(0x2, 0x3, 0x101) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000009000100100000001c0005800a000400aaaaaaaaaa2d00000a0004003426f7b68ed1000008000500", @ANYRES32=r4], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfc) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x401, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000280)=@n={0x3, 0x81, @generic=0x7f, 0x4}) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x6, 0x244c, 0xffffffffffffffff, 0x101, 0x0, 0xfffffffc}) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f00000000c0)=0xb0000) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000080)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x81, 0xfffffffffffffff9, 0x0, 0x0, 0x3}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r6, 0x7a4, &(0x7f0000000000)={{@host}, 0x2000000, 0x0, 0x0, 0xfffffffc}) fcntl$getown(r1, 0x9) write$UHID_INPUT(r5, &(0x7f0000000e40)={0x8, {"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", 0x1000}}, 0x1006) 2m28.53047834s ago: executing program 36 (id=1464): r0 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x9, 0x4c032, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r1 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r1], 0x0) setrlimit(0x7, &(0x7f0000000140)={0x4, 0x100}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0xb, @local}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004051}, 0x4008000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0001100", @ANYRES16=r2, @ANYBLOB="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"], 0x5f0}, 0x1, 0x0, 0x0, 0x41}, 0x20000004) r3 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0xc3, &(0x7f0000000100), &(0x7f0000000140)=0x4) 2m27.459459927s ago: executing program 37 (id=1470): socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = gettid() tkill(r4, 0x2a) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009965, 0xffffffffffffffff, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfe, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uac1.usb0/p_chmask\x00', 0x141842, 0x10) 2m12.410684621s ago: executing program 9 (id=1499): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x11, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) socket$kcm(0x29, 0x2, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000000), 0x5, 0x4000) ioctl$HIDIOCGRDESCSIZE(r3, 0x80044801, &(0x7f0000000240)) getsockname$packet(r1, 0x0, &(0x7f0000000200)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = io_uring_setup(0x47, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x80008, 0xc1}) r5 = io_uring_setup(0x74ff, &(0x7f0000000100)={0x0, 0xe850, 0x40, 0x2, 0x77, 0x0, r4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r9, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="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"}) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r5, 0x1e, &(0x7f0000000200)={r4, 0x1, 0x6, 0xcec, 0xfffffff7}, 0x1) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x439, 0x10000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x69801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 1m55.456196384s ago: executing program 38 (id=1499): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x11, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) socket$kcm(0x29, 0x2, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000000), 0x5, 0x4000) ioctl$HIDIOCGRDESCSIZE(r3, 0x80044801, &(0x7f0000000240)) getsockname$packet(r1, 0x0, &(0x7f0000000200)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = io_uring_setup(0x47, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x80008, 0xc1}) r5 = io_uring_setup(0x74ff, &(0x7f0000000100)={0x0, 0xe850, 0x40, 0x2, 0x77, 0x0, r4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r9, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="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"}) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r5, 0x1e, &(0x7f0000000200)={r4, 0x1, 0x6, 0xcec, 0xfffffff7}, 0x1) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x439, 0x10000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x69801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 1m37.199323648s ago: executing program 0 (id=1622): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000440)={0x14, &(0x7f0000000300)={0x20, 0x7, 0xd2, {0xd2, 0xf, "f83eb5d372edb44cea476ab2c11691a59dc4a8117ccb6236b1983fca8c4a4f6338720c9413479f7e66b6af52f0d86b870ae4a5765418b87d45f0c2a326fe487bdfb8638aac810436a9bf82a2a0d163ab61957677abf635de537528f3a9084c7c71896dcd657547db54a9233fe6b889214f05ab11e65d6478f61ae8f5094a874aa312e7903f481ac86c58ed6753c86d561bbda426b94e93799692904df18ef4e55e0ea09d818e97216f3b45717d85ddfbcf330a2f7667c58ff9d58e513d48e85c3cf2482ca8a508351b407eb82654b0c0"}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000540)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="d0d45a9ddc48b8e42a"], &(0x7f00000004c0)={0x0, 0xa, 0x1}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0xf8}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) fcntl$setlease(r2, 0x400, 0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000000)={r4, 0x7, 0x30}, &(0x7f0000000100)=0xc) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000140)={&(0x7f0000001680)=[{0x7, 0x0, 0x1, &(0x7f00000001c0)="ce"}], 0x1}) 1m32.300161052s ago: executing program 0 (id=1632): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="54080000000601080000000000000000070000000900020073797a310000000005000100070000002c00078018001980140002b22e4047f22112852ad09d3c28e0369340fe8000000000000000000000000000bb060005400e1f00000500070088000000"], 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x18b341, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth1_virt_wifi\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r1}, 0x14) r2 = socket(0x200000000000011, 0x2, 0x0) close(0xffffffffffffffff) r3 = socket$inet6(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000005000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000005000)='./sys\x00', &(0x7f0000006000)='sysfs\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000440)={[0xe1, 0x0, 0x0, 0x7f, 0x100000, 0x1, 0x2004c8, 0x80000000, 0x80000000000, 0x3, 0x7, 0x0, 0x20000000000005, 0x0, 0x2, 0xffffffffffffffff], 0x3000, 0x200000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000000)=@arm64) write(0xffffffffffffffff, &(0x7f0000008000)='1', 0x1) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) socket(0xa, 0x80000, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000001900)={0x0, 0x1, 0x6}, 0x10) 1m31.292044051s ago: executing program 0 (id=1638): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r0 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x40002000) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0xf00, &(0x7f0000000040)=[{&(0x7f00000000c0)="5c00000014006b02c84e21100af32c6e0a0675f8d34460400000000000005c1e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d493803792684b71bdd70000b6c0504bb9183132be471b93c91b5d7870743719b4b53cf2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = fcntl$dupfd(r3, 0x406, r2) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r5, &(0x7f00000007c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x11c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x4}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40890}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="000008000100000000003d0000004500004000000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b4802c500d8833c2b75d00050a0006b5fb3e001c000008d588380683910000003fecb4464ccbb24303e968ddae7577c6a4ae1bfe8b6b1371b5e1e2ba60112b5fb1701da05f5fdc9b60305fadeee64b9d0b0200000000000000aa4c241fbb152dcb7982f15f4a385a3f975a5c3c675a7932f1343887866887dc303823e70b7eaec6f283836ff7dc9e8f95f2480c9fef7ec7cec493f04b20b3b9ea5100aa2e66868871"], 0x4e) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$nl_xfrm(0x10, 0x3, 0x6) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000000000)={0xfffffffffffffdac, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00222200000096010006010003000077a317e1d2a9fa3dcd9acf00002a90a07538b3"], 0x0}, 0x0) 1m28.496447937s ago: executing program 0 (id=1648): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x101000, 0x0) close(r1) r2 = fanotify_init(0x8, 0x400) write$binfmt_elf64(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="7f454c4622000051"], 0x40) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) listen(r4, 0x8) close_range(r3, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r7, 0x0, 0x0, 0x2004c080, 0x0, 0x0) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0x8}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./binfmt\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./binfmt/register\x00', &(0x7f0000000340)='nfsd\x00', 0x1180000, 0x0) unlink(&(0x7f0000000040)='./binfmt/register\x00') r9 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp6\x00') preadv(r9, &(0x7f0000000280)=[{&(0x7f00000003c0)=""/252, 0xfc}, {&(0x7f0000000180)=""/215, 0xd7}], 0x2, 0x9, 0x7ffffffe) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dbdc01, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000010401010000010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) sendmsg$NFULNL_MSG_CONFIG(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000001040500f600000000000000030000100500010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x26088888) 1m27.27242762s ago: executing program 0 (id=1651): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='0123:abcd:a6d', 0xd) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x358, 0xffff8881f5c0a000) sendmsg$sock(r1, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000000300)="90b346a967c2dfb03f17d1bbb4f763d74135e4329316ae867ef03e69a98b02e351194a18eabaa4a824161d4fcd9e8adf12ead907592f5007a84869949cdb9eed296e2ff98b1dd5aa87ebd5d03f9ef705d8d8f42ed97ef0ae380ae44fd4c490a5803c3eae1f6b77a72b3796fb836c2f2d003c92615f82281998a5502687355e7d41922f63380c601544b1e4a3a1f2e787c24d67b6120c8f83b16cf9885852262ea85ef3a05b93a8331affb8f84ce8cba1b3da9eff2165ce7f794d892afc34f82cb3703d747ef2699b41ddfe89e2c0c8137d9f51", 0xd3}, {&(0x7f0000000440)="cf059280bbde3826033ff487c6045a178aa46e9fe032d3323a8668cf4df8f2d86327f5cd7043266ce8", 0x29}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000001780)="b93fa0f11059c4444fec2e751e98c5f0cf6f976e70601a8de007dc311045f2a5c609f666b4f04fac3e57a56588412252abb2455a7bec6f6b03cdf5a0599aa2300b64e7667494dfe9f9b44c1a005ccc00f42424e7485d58e8105b3f94c42212f9c9f667d95cb891eb68231f1f2c70e592889e9477e58de04b3d1376c0f914d13f045fdbef7acc5d66ca76aa58dd6a327ccce18a5045fb0be1214130f14d98d5f73f7491c3d2080262f7a100bf318c5fde2b12ed29fd84063d138303f8c99924940945", 0xc2}, {&(0x7f0000001880)="6aacee203484e010ba497acb5f5a2d3aa0d9a0545fa40f7f", 0x18}, {&(0x7f00000018c0)="25fb42f528bd39a3afb9b56b7f46bb949b93399a56044d79d9d1390910a2f40f", 0x20}, {&(0x7f0000001900)="727da2b82c845e7fcc97dd2856eb1b4ea86a4824f4fc75e2577fe120f98d58d21e950e034ee766c04b936c176ffc97f85f6d2067357eb045892edaa8ac950d76c02e3c2bcd5c6abc4010a4042956438cfd1b87c8d2b6200d27f4656fc799a55af15a017498967fb696ac86b70f882cdfeda9f5be13ba3acbffb59464d49b6b4f38554eb1ae488f41d747e10405bdb3483838324ae36b71f635edba9bc290b3cefa31d37deff3cb7f8d7f92cbb526b0a7a7ada89d325d0c0146beed6dacd4f5bf2f621f3a7a853accf9acb0fb9061bde0ac7ca3daf7027e2e04dbe8539917e8550505cdab3e166676afa2c9917464c9c99ccab36e211db0c27dd44b45d11a007aadfa597b7a72dfdf435929d32f57abf88525ea8957131a055c306f614dca71997e8d30ab63e98bf623bbc438ba6b88d6a4e734e51efa2e56296ff81e9fe3cfe603805d61cc6dadb44332efeab8b14819e68b91199f0d071c55f43067bd69f7359d56e0cb18bee4962cc0b9553e373013ca52758e54a072b0c7db9e2c7d187f9394ddf8a1fd6a5f9f5441d7e60f86e1c5cb24c4b9b47b3e2f9a71e9111069a41abdcd171c4397b88bf691b9bb90e6b59b175789bb8d4a325f44b0918b94ac8e8904603f9406557d2c2db6a37ff54a696ca4bc436a788efcfac50d7eeffff03cad5b78d90aa56dadd60c6e0d651f7aa2399a0010aecd7f4758c44877c0d1e9f58d9ca5cc1565c21e70f409342a71e40829773200968ffe75d8a8dc7dbedc74b9ad10f0d1d8a98c97fb151679ea2dac259fd41f67d0ffc38d9a760d0ee55eb5ae7dff6120d794d8b09ad5702b8dba321c693c07cdd63a9da7b7c5e526ff3c8441ba968843be9efd8dd3b4321c8752d8b89f9fe57bd4c78da13b150ee0b3e3960a4fa9d856c376ba60be4433f30e291410df00b4442e20adb0e8ce2fe9847c1dfda1f3075092161f387f3f3e75136854f6a2364495e9d264a5df7f5c0181543541a7f518cb21510d01c80ccb67a014c18c7b32fa1f524e40217de2c11a771b6199a1c2f26ef1b207cfd441a71283adb33875e58dc3bd751664e2c4c60ad0f5d3499c6a6d7e00a198ffd5d756132de781919d3a4543fe7372c4642fe177e1ff66a3378c966c7a1cc9ca6f8459d80e209a55652ab4cbc9db27ba9cd7fd69120115012aa4a1cba6e766393c3d409e8249277f4b48b2cf41f5459b2d6e20b6fca8baadc964958248481a7dea10efb85556e77cc7e081119ad1b902e90424946a52c472362dd090dfbd5284c4f7da469a1e6c6dae36debe75bea4108a2d3d5292f1f8fa135f5e15109ccd62f31abe19a235c437e32c8521efa01d3c8d7370a6337d608993f9160fada8b7fbd1a039b23fb985490bf96aa620c2c4bec9a4aaf7e4b8935420592b9c1cbdaee076beb9a82afefc2665c687ac236df1376a452bb923ed52cdf542fcaa07542da25a747e829ab7ab6e60f4f4290b4bd3f8448568e1a8d9750a96fd79d94954f19ff11bd2616c2b68d347f4cf01e50919c3907c0248d7fe5d47b0de04be713688fec70ae563898da34f9c2bb55099262ebefe85b401706c3eb41bf014c8350413b58f37a34b27e0b1e424fc652c1247bef226c78eae95ca10958db7b259bb2669b518ff7d0ec1177763475695a090a24aedfad105bfa550cdea6c1057b5534e6e3ee5fa59cb0dc50d62361b2d3550ae438527d941bd5526777fce6b7044bfec2df1f1c090f7f80c35ff297974ebd73a49f311df81ec95d5c4d4f3e4502e1dda228202fd97b820f8c97355d49d59bcca6d96aea5a83e2548fb9e1a6c1619c242a67076a9bb3f2177e4f40439d7e67d6bfa0d21b77500d6d0f8526478c0167a194d9c040fec09f66a65f13d901ccc2789766e81b3364a7ccec50a953a62c1b4edd8ed05378f86f68b36d22c3da2c134879a6bc38e14b6595cd740b909a9b6f2322504965498e1e8f1fddcef6033133ca7c978e471ae844b8e83e870bb68e049db122d767f9f9cce2f2076bf41837b35e3e1058c16699010d719a208e8223b88f7dc872a3a6f8809cccf18321fdf99ab98e99cad06b05573c772d7c6cc9e767e6a2c2d95169197133da23e604f7d0b1679ef16f51554fb49bc7f6c2df90a53a82abe0deaeb261b0b0242720bd1a2c6ecc2ebadb0404f2aa919f3ddd2b4eaaef68a2c61b16dbf4a73e97fdfca9f8d06b9e07f34e4e64fefbc810178ed1a49858e3467ccad5b69b5ba5c19044cce1fe0d83fd71640af07d1c289bf854a692d3989d66aec2d3a5b614979f42ad01de6852fa524433331f1b27448582b1429e8a9156129f5df4210af6d04ca3735ae32b501c52a6a89ff3641bb5efc94d969397c682d47ba94b7d21bafb461cbdd40bd4ee9629fa2aa79c8779b2b77d055c3fff4b2bde1a8107279f21eb426b5cdbd39bc61b7b5da0cdf3cdff54880eb0847e7149ebf4d79d45052d83625ac97d32bf9b0bd3c5c52f523c4276123d230f612a839327f2e071673231512c120c6c3c29a9af6f318b9def0aacb6cd8ecaf836287f5145b00d1a7090c5cefb77b2af9ffe93a5d390f543af22a1570ea694d4b3be34df3e7d170f475de48fbf2812af1620521c0d82778ab2e48ff8a7e300de89cfd3cbbfbc1da13d76728ca8cfc145ae8c3ea03f66c1992d67880a944170f96e737a8c8d5169aecee701329583c5c65ec106515106f4bad5542e77f66562fb0f5c4adce4e622f7a76082dab20503a24f5356106df9cc86dcb024fea75bef7053f01713bc250a5da3900be02d1fda30ef784337b4d28a5372428d24ef5f4dfbf77732bee87bb4b2fa5c124d1f324704c3b5a24bc673832ea83d59d67ba0d1d533c0b438ccf6ad3d294c09357819a9171798dde1c1384bb1d7f0333ec2b6328afe6fe2291d27b43f44e79b4983cf01ece62fc328dfef7aed7585f7f24628e42f7977667a48967a56bcc893d521329c99cc846f9c7e2fdc785497028047a5eaf24fbb6ae4b7fe51263d24a5301cdf13cde8a63e9fea6a8721b63011141bd69cfc84496b97430571e865120ec6a2924e2ae24edf1894709fa813bde2c942ad02a77ae719f997cdc1da6160afc43996aa3fdcfd69deda665a2df8248cbb66ba69aa3522ebe3770ccca03c82c4bc9de9f8f15ecc530165f0583d6cceb74065bfd12cdf6a09995a54208e747d496d6192d298ef22c75f119f1454b66e67c83ce87fdd986b7c3510321cce9bd9f8551c985eb5d108af5a62b72144d9a0c5bbece52ef54716d409cfebc952d977122e813e031e6e8a25fda47ac8822302e6efc1927f965b6779af1db77ccff2a3196a5d1f9626ef04733a401dc5cc930f3eb6125431fdb45017879f5ea133aa95f83e925412172be96aca26338c4020e9eb72ced7d749e66807845ff784f7c27c0f1c8bde863cfb27ef3f284849111b06691d7d3776f1d9272e0d85ab8fe6f6083da1e1655c28d7dcf3277c1f4874cee15957b74a6523ffb0c9198af81787a46aa1257b37f0182663c32b5a4895ea07c49d690e1ed36764c958d052cfaf17146df15cc43b862ffdd5bb5aa05f1f05d2a2f53fc2d49dd1f52a0fbc453496cbc5393929dd308acf30ee8bea2eecb8e97eb0c89fa10c08b2a5e81c6b7f6d04d4e4d590f2dbc7260e6d9a5e98dc4a3f3b95669c017dcf29fa95a1390e69693dc2de455ff6120897334c0da3401290d624fd4c89850b3ee4c9e7934d3030ed4aef18ac34b6dfbb6b59969241e8bfdb008923edd4cae4d4ef00770e1277e1da62d127cc236f31d0c4bd79a980e763dae4fa8dba7e55357ffdffa4519237d5a2aef5e9beeb9a4009d1438638b39c3d5213d47e08888557dc679be432b1bb15dd3585a974216626cb085dda3e40b3840219ddc7b58ecd0c18348451920b1620cc30fb0c168b3ffb4c39c5b643d1ed50f277b2d507273409d6e3011717cf53186229806682673ec66d047adf5ef8da229f528ee041f4afd446eacfe22cc202e6eb8cf57c337d668999fd577ef8f9825bc79a61939c1606a2acf3f5686733b8fd0cd8b3b8eec40da44068192d5cf04aad8dbde421460d9cde81e62faec832c3722f6f71fef591a61d69e4b5c296edaff75232149fde58219bfeb0b2706a9c01c4892de9f0360c55f8f7f34d8aacfbb6f2ba5c95e40eabf4f1b1672024e358ae9ee09ad7ad9724cb64db96dd04278bd2459b6f32051874fdee820785a39dc042eade95be7a76371ae969f383754f0cd7fea21d667f84e6f04e0e14feb5e1b2a0bb0909dc49c6d20a9b82452fac40d1335e79ed4bf17523f867723e12ecd4415788d0d97dbb12a918a955ffbade1a3f4b7260d6f871bfda2e793b91042b987883c23a26f6f981776fd7d45f0133a5482c4b8cd594ba19ac7b755d016220c7d95c520aeebecf84f8ea4238dce1db23c1d4181c02bb56ae1e86e232226d332d19457f3459831d5a7feadd6941270e2aa261a03b18de32c78542a2161c8aadeef25d0cfc3716fa30c133e8c20d1e5cdf03784c03c4c3409c478a2522f288feb3ab6520207d3adb4404bdfd98f4b32dd8236b3f75159814271c3ffa49a57e704167ccbf808a77de39df44b959eb9e27e586802dfb67c9ac4f312bffc86a6a8197c6fea261833522a2f428c102bb8ea836c9167b90038796b81c177a8971f9814e88a6d5fd7fc6fadd0f740248b5b45ba0708eb9acb5477643a7f0e500f1e3fd9fc54518a7f6806ca32600f981896b427c5bfc85dc07eebc784e73881c68b0933ecb78e88c77e1ab4549a7c7bf22b7a5f2a53a4ec9cdb3b5f6c902c12539f3f9aa86ea36319c693dcddcd4e3f6acf1bc3bf73bd4d1b339d501fa5431b8293343d02d995d3d209511a02e0edcaf7d9b83a7615e24976dcab3103773d0ecc775858088007524b77da204a9ebda8d3c1fe5ef0e48f2ee04ae80e8d0e34fe3b8937b609ba59aaee7048db5cd2999df0f78156de15f2ee1a52a46366b7b436a1c6c08c3e74b095bd557ffa8953a23f315e5177d5ec9a90ef76743ce97e5da2822e071f0e568070667a11ebb8370e3015676111d10ce42353f74ef6fdafe0609de69521bf36b6d5f6b2fbdbd6e915ad8847722fa67b3f7261e76054393640f0e703f4cf51d06f58fb851b59e82e9f5cd3c1501746219e2d5c87966cf4db11a05c21f9bf75a3e0b183788d65f1f7258b0e0180e28e5f94b1d2a1e2907ec5600750ac89a34bfb975fbc8accb4c71d23880b95ce89c0c691632c1eaaece2ba36bde019e636cf3b36903563d5fac0a79acbdce92a95754901c77d00e2bc08b9c1dfcfa7f3cff248d8d4c6121f8f0d3ae4c910ac6be2dc24be0b37d29dc02f87f4fb669ad5707bafe5b5608af5b176a443d5088693b0c3c335ece2f15f44732ba5d267c04a8b2e27eea2639d2ab488c957ededb50b8a56c14dd1cae8bd83aeb7dca988fd6c788d9d05edcad0dbebeb49447e1a7f64ed89c2156c519077efee95e59c543160ef9e91a157a5b3119096c5476ca9d2876061b8896f9174f19c1a5fd6377b6cd538a1b381752acc34666334ff9dfba1db00c7613dac06fbdcc8e4ff4835a94dda7c37dfea1419d96b14f08d5d799e04d34e62145957dea852519bff9ee91415c9ba404f4e58e146d2ff865e3528e95b7910897427d26b70c2418aecbaee6a1c83d20318ad1b8e11dcc08a56f82cafeb6bb342b095f30863633f345055675c45ea6dbc72f7911589ec9fa01d51ecd41fd54b865ef95c920bbbf928b4b30f4c61de9b30cb168064bd11a9e230d47994661f3b70bd55cfec4babb7c2bdc89376256b", 0x1000}], 0x7, &(0x7f0000002980)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x8000}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x531}}], 0x78}, 0x20004882) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) 1m27.041562328s ago: executing program 0 (id=1653): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x102) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x143440, 0x0) ppoll(&(0x7f00000000c0)=[{r4, 0x1000}, {r3}], 0x2, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c00000002060108000000000000000001000000050005000a000000050001000700040005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000001c00078008001340000000020800124000000b3108000840"], 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe800000"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[], [], 0x2c}) rmdir(&(0x7f00000002c0)='./file2\x00') chdir(&(0x7f0000000040)='./file0\x00') r7 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x42, 0x41) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180), 0x41, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001a00)={0x180, r10, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0x158, 0x8, 0x0, 0x1, [{0x154, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x130, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x6, @loopback={0xfffffffffffffffc}}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x180}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r7) preadv(r7, &(0x7f0000001940)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/223, 0xdf}, {&(0x7f0000001480)=""/232, 0xe8}, {&(0x7f0000001580)=""/91, 0x5b}, {&(0x7f0000001600)=""/2, 0x2}, {&(0x7f0000001640)=""/246, 0xf6}, {&(0x7f0000001740)=""/254, 0xfe}, {&(0x7f0000001840)=""/151, 0x97}, {&(0x7f0000001900)=""/7, 0x7}], 0x9, 0xd, 0xed) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00f2cd", @ANYRES16=r11, @ANYBLOB="000226bd7000fedbdf251400000008001200feffffff05000c0000000000080011000000000008000900010000000800060007000000"], 0x3c}, 0x1, 0x0, 0x0, 0xc040}, 0x4004) write$vga_arbiter(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="6465636f64657320696f00347afd9d79edb231853717150700d2063efbf104162a8c05efbb80ed12b9a835"], 0xb) r12 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1, r12}}, 0x40) 1m9.805836398s ago: executing program 39 (id=1653): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x102) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x143440, 0x0) ppoll(&(0x7f00000000c0)=[{r4, 0x1000}, {r3}], 0x2, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c00000002060108000000000000000001000000050005000a000000050001000700040005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000001c00078008001340000000020800124000000b3108000840"], 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe800000"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[], [], 0x2c}) rmdir(&(0x7f00000002c0)='./file2\x00') chdir(&(0x7f0000000040)='./file0\x00') r7 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x42, 0x41) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180), 0x41, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001a00)={0x180, r10, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0x158, 0x8, 0x0, 0x1, [{0x154, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x130, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x6, @loopback={0xfffffffffffffffc}}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x180}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r7) preadv(r7, &(0x7f0000001940)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/223, 0xdf}, {&(0x7f0000001480)=""/232, 0xe8}, {&(0x7f0000001580)=""/91, 0x5b}, {&(0x7f0000001600)=""/2, 0x2}, {&(0x7f0000001640)=""/246, 0xf6}, {&(0x7f0000001740)=""/254, 0xfe}, {&(0x7f0000001840)=""/151, 0x97}, {&(0x7f0000001900)=""/7, 0x7}], 0x9, 0xd, 0xed) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00f2cd", @ANYRES16=r11, @ANYBLOB="000226bd7000fedbdf251400000008001200feffffff05000c0000000000080011000000000008000900010000000800060007000000"], 0x3c}, 0x1, 0x0, 0x0, 0xc040}, 0x4004) write$vga_arbiter(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="6465636f64657320696f00347afd9d79edb231853717150700d2063efbf104162a8c05efbb80ed12b9a835"], 0xb) r12 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1, r12}}, 0x40) 1m9.790875763s ago: executing program 8 (id=1703): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x69f7, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xcc6e8ad2141e4e53, 0x401d031, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x2d, 0x9, @void}, 0x10) dup(r1) socket$inet_udp(0x2, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_usb_connect(0x0, 0x91, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010002000000406d04210800010102030109027f0002010080fa09040000010e0100000d240100013f00000000000101"], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x105100, 0x0) socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00'}) r3 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) r4 = io_uring_setup(0x2a8d, &(0x7f0000000240)={0x0, 0x86a1, 0x2, 0x3, 0xc8}) setns(0xc9, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f0000000200), 0x4) close_range(r4, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, &(0x7f00000000c0)={0x0, 0x2}, 0x8) r6 = open(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r6, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$user(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffb) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) 1m6.964691348s ago: executing program 8 (id=1708): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0xcb, 0xe, 0x4, 0x4, 0x2, 0x1002, 0xf1, 0x0, 0x7fffffffffffb, 0x8d, 0xfffffffffffffffe, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x67a64fa265d49713}) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\xf0\x891\xb8R\xe6\x8d\x12\xe5\xe3+\xcd24\xd9\x86\x18\xc4:\xc3\xe0\xac\xed~\x97\a\xbe\xfb\v1d\xbe\xa1\xc1\xc6\xf3\x8eD\x1b\xc7q\x99?9\xf1\xe6\f\xa9\x90\xec:\x037\xe8\x0f\rX6\xf2\x88\x8d\r\xd2\xfc+\x19\x9a}\x9c\xd9\x1a\xef\xf1\x16d>ah\xa2\xa7\x02U\x06\xe1\xe1PY\x90\x17\xf0p\x01*!I\xd3$\xd00C\x88*NA\xc3\x95`\xb2\xf1\xb1\xed\x91\xe4\xcee_9\x1eIpAfN\x99\xa9\v)\x98p\xea[\xc5&D\xe7\xf3\xba/\xcd\xdb\x9dz\xb2\xbf\xc6\xea?\x13(\x15\xc1\tm\xe7t,[\x14|bM\xfa\xeb\x91\xb0\xdfAR\xf3\xe2y\xeb\xffa\v3~\x84\x9aI\xd7\x14J\x9f\x88@e2\xa6\x0f&\xa4(\xcd\xc7\x1f\xbb\x1e\x13\x7f \x85\xe5\xa9\xf0\x14\xc0\f1P\x85\xd4\x01\x00\x88\xfaL\xf1m{\xb6%E\"_\x00\xbdti>\x81\xb5\xcez\xa7\xf8\xc7a8\aI\x9d9P\xe0Z\xfe\x1eX6\x91\xc7\'\x96\xe2\x83\x8d\x93\x03\xc2\xae\x86\x01Y\x98v\x14;&\xaeH\xdcW\xe0\x1d\xa2\x8846\xa0#\x1c\x16\xf9\xa8\x00'/298, &(0x7f0000000300)='\x01\x0e!5\xd8\xf2\x92\x97\x86\xf9\xa8\xe7;\xdff3\x83\xb1a\xc9\xe1\x90\x10@\x1chOK\x98\xae\xd6>\xbaN\x1d_N\xcbdIP2$\xbc\xc9\x89\xb5\n\x90-i%\xe2\x94\fZ\xf1\xed\f\b\x17\x81>\t\xc30-\xe2\xb3\xb0\x98\t\xed\xc8!\xf6\xcd#\xcc\x1bsz\x96\xde\x00\x9d\xaaCq\xc9\xa20xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) memfd_secret(0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003ec0)={0x28, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0xc, 0x145, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @fd=r6}]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1c}]}]}, 0x28}}, 0x2004c000) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[], 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 1m4.924165386s ago: executing program 8 (id=1714): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x19, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x8, 0x40, 0x5, 0x41}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe1000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000200)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b8377a000000d80f300f300fc79d53bf00000f0057000f01c3", 0x61}], 0x1, 0x14, 0x0, 0x0) r5 = memfd_create(&(0x7f0000000600)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x8dy\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x16\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03Gh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba$v\x8e\x9e\xef\xbc\x86f)\x01\xba\xdb\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\xdbU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8fg\xf3\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm4\x19t\xbds\xae\xdf\x1c2\xf79\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4\x83Mav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe4', 0x3) fallocate(r5, 0x0, 0x0, 0x400001) fcntl$addseals(r5, 0x409, 0xc) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x5e, 0x82}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m3.653820388s ago: executing program 8 (id=1718): socket$nl_xfrm(0x10, 0x3, 0x6) kexec_load(0x5, 0x5, &(0x7f0000000480)=[{&(0x7f0000000540)="bf966d733ab2e084373f65b7e6cb5ce6a2dd29a3101d6fd8b8bae63fd984440d6685df4b4ea3a01f825f62fe6f711669d6ff2896eb478cdf4f35c858d1020789da64c54e58619184c87f5be899db2221fd43f20c6ee7c650c34997171af0", 0x5e, 0x0, 0x3}, {&(0x7f0000000400)="4690d921ed257ab9956a77f6", 0xc, 0x5, 0x671f}, {&(0x7f0000000140)="cecf30e51940cff1cdf084767d8e1808faa5121a7e0e4d6a2f57eb2ce72f9034adf8ed99f5c648a7024d5dc6c9638562205c4d8bfc919658628cea7528bf80b25bd1f6848c505e82f1ca9f1676af1317ddc07623a7ce94c20b91c44887168ac9aa2e2eb27403f545f6ceb7481a9bba9e9a3a32cac2472f6c2ebc42929fd61f9762a5dc5c97240bf5d09f1e44e373491f828e3c80c694e8cfde8d43d540fbf05e089252ebe5b8c2015532c938cf60919e55fcf4453c5fa76389f90852ab540d4a97e9a2bb41e31693ed08938f033bd744576a53d4dadfac8ad3b6ad80af", 0xdd, 0x1000000008, 0x6}, {&(0x7f0000000640)="8f19a9a3eb697d3986ee375ca792366e6db322f9846600452528e57c2e5cb02ae9d31fb50b997339d54619bca8f466e72d9b7c9f62b29755d0f51d4e45c61a7f3cfe4894c4f1a99f8288c6a3c07ccc60c24771c990acd7fcf55c685f2649e473e3926b3a15c84e783bbeb5cf4a5c4020e7f3f44aca403afc1e0821f9bee13045c6d49b444d47bbd97a6d2e119048bd3aa9926f935092acba247292b9ee72f0176b7d7b306698d9a09ad2cebb938c4ec4bbcd00"/188, 0xbc, 0x3dc, 0x9}, {&(0x7f0000000700)="fab92ac8864289bdd124ac75419dc474901a1cb21a394d05cb367fcdf1d5545d220dd2a78328b746ba21bd2517aa86d11fbe33a544ec0481936e898070b4034585d4bf7c61b567a651679639f51dd4c0b2a9446a2c2773fbbf6909fdf9a17f11e903e5a96c0e4feccf2b8a356673f469809267c8f175e977028e20752211091e02a1423dcf454ba731", 0x89, 0x9, 0x5}], 0xa0000) socket$nl_generic(0x10, 0x3, 0x10) r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xde@Ip]D\xd6\r\xac\v#co06\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x06X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x9d150a2b232aa630, &(0x7f00000002c0)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000040)={0x2000002}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8971, &(0x7f0000000000)={'netdevsim0\x00', @remote}) gettid() ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r4 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r4, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000a00)={0x70, 0x7, r4, 0x0, 0xfffffffffffffffc, 0x1000}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, &(0x7f0000000140)='\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r5, &(0x7f0000000300)='p:test/event1 ./file0:0x0 arg2=%bx', 0x22) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000440)={&(0x7f0000000100)="d9c37865629563c0ef536c8c0f1df824e9cfb6e8b04243219fde90486309517553dc9bc19520", &(0x7f0000000140)=""/30, &(0x7f0000000280)="d3ae162beee53a7f033411ef84c3e71473fcc1e235dc83d6c3e9252f613680448ea5ad145af63a89f51f76bccdc67509bfc4db795fb4a5bc2278707cbb08d3", &(0x7f0000000340), 0x3, 0x1, 0x4}, 0x38) syz_emit_ethernet(0x11, &(0x7f00000009c0)={@random="000000e3ff00", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @void, {@mpls_uc={0x8847, {[], @llc={@llc={0xfc, 0x2, "02"}}}}}}, 0x0) 1m1.482543577s ago: executing program 8 (id=1724): timer_create(0x6, &(0x7f0000000200)={0x0, 0x2000e, 0x4}, &(0x7f0000000100)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) fcntl$notify(r0, 0x402, 0x80000020) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x2, 0x10001, 0x5, r1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000180)=0x1007e, 0x11fb96e13838704f) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xffffffe8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x47, &(0x7f0000000040)={0x0, 0x6e98, 0xc000, 0x80008, 0x150}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a80000008500000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_out(r4, 0x3, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001840)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000740)=""/183, 0x0, 0x9000}) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2102, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r7, 0x4188aec6, &(0x7f0000003440)={0x0, [{0x0, 0x68, 0x8001, &(0x7f0000000100)="8adb3d85422a8588713df8f093"}, {0x3, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x2c9, 0x0}, {0x2, 0x0, 0x5, 0x0}, {0x0, 0x0, 0x4, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x228, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x1, 0x0, 0x8, 0x0}, {0x1, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x4, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x1, 0x0, 0x7f, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x3, 0x0, 0x101, 0x0}, {0x2, 0x0, 0x3, 0x0}]}) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0xeeef0000}) 1m0.734613317s ago: executing program 7 (id=1726): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001640)={0x2, 0x0, [{0xddfd8000, 0x66, &(0x7f00000016c0)=""/102}, {0x6000, 0x0, &(0x7f0000001580)}]}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000001540)=0x80) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac00000000000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x1) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) r6 = openat(r2, &(0x7f0000000240)='./file1\x00', 0x381003, 0x141) r7 = eventfd(0xf7b2) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000040)={0x0, r7}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) listen(r1, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc2604111, &(0x7f0000000400)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x8, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x401, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) accept(r1, 0x0, 0x0) 1m0.334372098s ago: executing program 7 (id=1729): open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40002) fcntl$dupfd(r0, 0x0, r0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x8000280) syz_open_dev$sndmidi(0x0, 0x2, 0xa440) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) ioctl$EXT4_IOC_MIGRATE(r3, 0xff07) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x1d, 0x0, 0x1}, {0x9c}, {0x3, 0xfd, 0x40}, {0x0, 0x0, 0x0, 0x10000000}, {}, {0x5, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 59.861113249s ago: executing program 7 (id=1732): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000200)="0fc7b10060000064660f380243738fc878c2daa9f4b8010000000f01c1660f388154f500f2e1dc650f01c8660f91bffcffffff0f08", 0x35}], 0x1, 0x46, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xa, &(0x7f00000002c0)=ANY=[@ANYBLOB="1802000000f1ffff1600000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0xe37271715d486fb8, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x24048801}, 0x8000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r7, 0x0, 0x25, 0x0, @val=@netkit={@void, @value=r7}}, 0x1c) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r6, @ANYBLOB="46ff0f00000000001c00128009000100626f6e64000000000c000280050001"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r9, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xab, &(0x7f0000000140)=""/171, 0x41100, 0x2b, '\x00', 0x0, 0x0, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0x0, 0xfffe}, 0x20) 58.394369438s ago: executing program 7 (id=1735): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000340)={0x28, 0x0, r2, 0x0, 0x0, 0x0, 0xdead, 0x67, &(0x7f0000000240)}) 58.221927673s ago: executing program 7 (id=1736): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0xcb, 0xe, 0x4, 0x4, 0x2, 0x1002, 0xf1, 0x0, 0x7fffffffffffb, 0x8d, 0xfffffffffffffffe, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x67a64fa265d49713}) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\xf0\x891\xb8R\xe6\x8d\x12\xe5\xe3+\xcd24\xd9\x86\x18\xc4:\xc3\xe0\xac\xed~\x97\a\xbe\xfb\v1d\xbe\xa1\xc1\xc6\xf3\x8eD\x1b\xc7q\x99?9\xf1\xe6\f\xa9\x90\xec:\x037\xe8\x0f\rX6\xf2\x88\x8d\r\xd2\xfc+\x19\x9a}\x9c\xd9\x1a\xef\xf1\x16d>ah\xa2\xa7\x02U\x06\xe1\xe1PY\x90\x17\xf0p\x01*!I\xd3$\xd00C\x88*NA\xc3\x95`\xb2\xf1\xb1\xed\x91\xe4\xcee_9\x1eIpAfN\x99\xa9\v)\x98p\xea[\xc5&D\xe7\xf3\xba/\xcd\xdb\x9dz\xb2\xbf\xc6\xea?\x13(\x15\xc1\tm\xe7t,[\x14|bM\xfa\xeb\x91\xb0\xdfAR\xf3\xe2y\xeb\xffa\v3~\x84\x9aI\xd7\x14J\x9f\x88@e2\xa6\x0f&\xa4(\xcd\xc7\x1f\xbb\x1e\x13\x7f \x85\xe5\xa9\xf0\x14\xc0\f1P\x85\xd4\x01\x00\x88\xfaL\xf1m{\xb6%E\"_\x00\xbdti>\x81\xb5\xcez\xa7\xf8\xc7a8\aI\x9d9P\xe0Z\xfe\x1eX6\x91\xc7\'\x96\xe2\x83\x8d\x93\x03\xc2\xae\x86\x01Y\x98v\x14;&\xaeH\xdcW\xe0\x1d\xa2\x8846\xa0#\x1c\x16\xf9\xa8\x00'/298, &(0x7f0000000300)='\x01\x0e!5\xd8\xf2\x92\x97\x86\xf9\xa8\xe7;\xdff3\x83\xb1a\xc9\xe1\x90\x10@\x1chOK\x98\xae\xd6>\xbaN\x1d_N\xcbdIP2$\xbc\xc9\x89\xb5\n\x90-i%\xe2\x94\fZ\xf1\xed\f\b\x17\x81>\t\xc30-\xe2\xb3\xb0\x98\t\xed\xc8!\xf6\xcd#\xcc\x1bsz\x96\xde\x00\x9d\xaaCq\xc9\xa20xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) memfd_secret(0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003ec0)={0x28, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0xc, 0x145, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @fd=r6}]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1c}]}]}, 0x28}}, 0x2004c000) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB], 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 56.617239425s ago: executing program 7 (id=1740): r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000032073797a6b616c6c65723000001800128008000100767266000c000280080001"], 0x48}, 0x1, 0x0, 0x0, 0x945}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) syz_open_dev$tty20(0xc, 0x4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) open_tree(0xffffffffffffffff, 0x0, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="600000000206010400000000000000000000000014000780080011400000000005001500030000000500010006000000050005000200000005000400000000000900020073797a300000000011000300686173683a69702c6d61726b00"], 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x40) write$tun(r1, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x82b) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 53.742371533s ago: executing program 4 (id=1702): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r1, &(0x7f00000002c0), 0x0, 0x20004004) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x40400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000240)={'pcl818\x00', [0x6, 0x2c, 0x1, 0xfffffffe, 0x81, 0x1000, 0x889a, 0x20000004, 0x6, 0x1000a, 0x4, 0xb059, 0x100, 0xb6ac, 0x9, 0x54, 0x20000006, 0x10008, 0x40000fe9, 0x401, 0x3, 0x9, 0x4, 0x9, 0x48, 0x3, 0x80, 0x10, 0x83, 0x4000007, 0xff]}) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010105, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000440)={{0x84, @broadcast, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0x6c}, {@rand_addr=0x64010101, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000022a00)={0x4000000, 0x92, 0x0, 0x0, 0x2}) munlockall() write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) bind$inet(0xffffffffffffffff, 0x0, 0x0) 52.365429484s ago: executing program 4 (id=1748): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="1407"], 0xb4}, 0x1, 0x0, 0x0, 0x30000840}, 0x40) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x7, 0x2, 0xe9b, 0x100, 0xd, 0x7f, 0x44233, 0x200, 0x80, 0x941, 0x8001, 0x6, 0x4, 0x4, 0x20000, 0xb], 0x4, 0x84340}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r3 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x194) shutdown(r3, 0x0) quotactl_fd$Q_QUOTAOFF(r3, 0xffffffff80000301, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r3}, 0x8) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r4, 0x1, 0x4, 0x0, {}, [{@pci, {0xd}, {0x8, 0x8e, 0x2}}]}}}, 0x20000008) tee(r5, r3, 0x100000001, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x52, 0x6, 0x40, '\x00', 0x10000}) ioctl$XFS_IOC_GETBMAPA(r3, 0xc020582c, &(0x7f0000000480)={0xe0, 0x2, 0x6, 0x4, 0x80}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 51.266726642s ago: executing program 4 (id=1750): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x0) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f00000000c0)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0xffff}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x84, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x40, 0x12, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x10, 0x3, "f957a52ff03adaf86367015f"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0xd, 0x1, 'connmark\x00'}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xcc}}, 0x20050840) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r6 = fsopen(&(0x7f00000003c0)='hpfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r7, 0x0, 0xf, &(0x7f0000000100)=0xfffffffffffffff9, 0x4) bind$inet(r7, &(0x7f0000000140)={0x2, 0x4e28, @local}, 0x10) 45.062316912s ago: executing program 40 (id=1724): timer_create(0x6, &(0x7f0000000200)={0x0, 0x2000e, 0x4}, &(0x7f0000000100)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) fcntl$notify(r0, 0x402, 0x80000020) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x2, 0x10001, 0x5, r1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000180)=0x1007e, 0x11fb96e13838704f) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xffffffe8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x47, &(0x7f0000000040)={0x0, 0x6e98, 0xc000, 0x80008, 0x150}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a80000008500000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_out(r4, 0x3, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001840)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000740)=""/183, 0x0, 0x9000}) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2102, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r7, 0x4188aec6, &(0x7f0000003440)={0x0, [{0x0, 0x68, 0x8001, &(0x7f0000000100)="8adb3d85422a8588713df8f093"}, {0x3, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x2c9, 0x0}, {0x2, 0x0, 0x5, 0x0}, {0x0, 0x0, 0x4, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x228, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x1, 0x0, 0x8, 0x0}, {0x1, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x4, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x1, 0x0, 0x7f, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x3, 0x0, 0x101, 0x0}, {0x2, 0x0, 0x3, 0x0}]}) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0xeeef0000}) 44.473273093s ago: executing program 4 (id=1761): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = syz_open_dev$video(&(0x7f0000000200), 0xfffffff8, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000180)={0x2, 0x2, 0x6, {0x6, 0x7, 0x2, 0x1000}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe91) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000180)) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001480)=ANY=[@ANYBLOB="180000df25200000000400630000000000000000003d0000"], 0x18}}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000540)={0x48}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, 0x0, &(0x7f00000001c0)) 41.776665106s ago: executing program 3 (id=1770): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x161a01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd70000000", @ANYBLOB="000000000000000000000000000000000000000032000000ff010000000000000000000000000001000000000000000005"], 0x1a4}}, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="1403000030000100000100000400000001"], 0x314}], 0x1}, 0x800) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r11 = dup(r10) syz_open_dev$swradio(&(0x7f00000002c0), 0x1, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) 41.162187927s ago: executing program 3 (id=1771): r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000001740)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000001580)=""/17, 0x11}, {&(0x7f00000015c0)=""/155, 0x9b}, {&(0x7f0000001680)}, {&(0x7f00000016c0)=""/72, 0x48}], 0x6, &(0x7f0000001940)=[{&(0x7f00000017c0)=""/73, 0x49}, {&(0x7f0000001840)=""/208, 0xd0}], 0x2, 0x0) waitid(0x1, r0, 0x0, 0x2, 0x0) 40.735708194s ago: executing program 3 (id=1772): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000002300)=0x0) sendmsg$nl_generic(r0, &(0x7f0000002740)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002700)={&(0x7f0000002340)={0x3a0, 0x2e, 0x2, 0x70bd25, 0x25dfdbff, {0x1c}, [@generic="434f7a7865bc9cdc89b03163caf6347119cd39ea041c91e04a1bcdc9fc57ee3ab65cf5308b7de02e054a13ae4fc419dae20e58618433e23506b613040c8a9f49df3613582597daf544257e39ad127d8e5533b8afec811a7172540154160d60036609558c203ce192886ce585566873f6248b948c", @generic="c309a311970fd81267971356aa8adc2ddc9c8e54e0939e3411367c634d4dbeb53211fdf42bfa5bd9dce4a1490bcf95b1b1932f60fd485c5e8306119a94810ca01d13a379491f8484010eaa4cf8f5f982cefd60b302209f9b9f95d3655304e41b77d8b87085e9ed2d1998aa2d0d805824a368d64f8c6ef0eed7412c9b43ece1622300dae7a9e4f4e4b40c67ebdf640895b88846a9991fee0d0c29d63d5036536f9851565af4", @nested={0xc, 0xde, 0x0, 0x1, [@typed={0x8, 0x76, 0x0, 0x0, @uid=0xee01}]}, @generic="d1858e04da8d8464a3498d858737b32091069df91eef556c1d880e9cb74916a823667ccdd7e68d179f95d4c89d87d38eaf97fabf19d5a1b090292f14bd51baea5665976fb863c6f7c901b207a997bb3ccfd17875e74dd1f840113f055a21b549e50a7732ace29238c0c2894e3a1c4c0f8e3fcabff72ae94469615ce5164936ae370bd56fdeb691d3ebeb35da8aebdbd030958397d6a8702f902b7e33af38e885b3fa4e2d9c73a6f94f275fdde7e50e4872863fe75fc141754c16724608930ecad3755841fb05a5133e1d5e12a1295aa04f18baec88e1d10f4450322386", @generic="1875709b3a8539e08a8c6ba6944d1624834f366cd313cc8881a8bd0d5b8b818f6d27277219c3d4d9e93b708de872fb05e364859435c20252f11904d66bcf7847adc2ddb16e613fcfe58345aa7841fa470bee5cb03ef0b3c702a3b165a8e7a3a157acefe8fad03197e01ca60f42c29bcd98a629b14a9a711f594e35953daf4ece40dc5c17bfc784e45166a91afb9f463482921cf5c101154ae8ad43a4bfac714e64a44c2ac35d", @generic="899d3d779fb51b338d744966034225609eaeda9e948fec673f6e96ff6ebcc6da1b07ab0f4cc63c654698823fd3f00a469de6140ff8e203736ce219c443628b811bab23f89cc26fc81cd2b7c4021640a8bf2afe30b4cdd4e96e9c3fee968b1d08394ab4f1830f85a839140c3bd0589e338f71861d6c0586a96c3d63856bbdfa950200e2b1c462d01cdb1715495bef6f1dd61dd3b0e94de2aec85969484129ed315521998ff31522e1ccb0ebbd97377d201bd7b442ca97543c3d32f387ac8e93bbfc6f89921fea143635206eba66b7e90e", @nested={0xc, 0x32, 0x0, 0x1, [@typed={0x8, 0x73, 0x0, 0x0, @u32=0x8001}]}, @typed={0x8, 0x10b, 0x0, 0x0, @uid=r1}]}, 0x3a0}, 0x1, 0x0, 0x0, 0x812}, 0x20000080) syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904"], 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000002180)={[0xfffffffffffffff7]}, 0x8, 0x80000) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000000280)={0x2020}, 0x2020) syz_usb_connect$uac3(0x6, 0xd6, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x499, 0x1022, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc4, 0x3, 0x1, 0x10, 0x0, 0x0, {0x8, 0xb, 0x2, 0x1, 0x1, 0x20, 0x30, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xb, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x8, 0xba4, 0x8, 0x0, 0x2, 0x0, 0x9, 0x80}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x79, 0x3, 0x9, 0x0, 0x10}, @as_header={0x17, 0x24, 0x1, 0x6a, 0x30fb, 0x1, 0x1002, 0x9, 0x2, 0x40, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x3, 0xb8, 0x6, {0xa, 0x25, 0x25, 0x2, 0x3, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x88, 0x2, 0xda, 0x6, "", "cb3a89"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0x7f, 0x64, 0xc2}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xb7b, 0xaff, 0x9, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x8d, 0xc, 0x7d, {0xa, 0x25, 0x25, 0x1ffc0000, 0x0, 0x80}}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x9, 0x9a, 0x7, 0x87, 0x6}, 0x160, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, [{0x47, &(0x7f00000002c0)=ANY=[@ANYBLOB="4703522a825c5f4c7d6b15dc521d60b60e04c7f8b983b160ca802e1d1e3cd22778f95850758a2e0c8d267cd1002409dfc81de5f500000000000000047d47e66569411000000000"]}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1001}}, {0xff, &(0x7f0000000380)=@string={0xff, 0x3, "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"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x42c}}, {0xaa, &(0x7f0000000580)=ANY=[@ANYBLOB="aa03a2fc8312ba0fc7bb9b95b855c7147726e331305b80320252d225d78672dfb41674a98295f12b0053557e1adaf298ec93500b8ce774b5771f6e2063fee7431fc568ffc26bdd25db1b6c621c5b96a5a90c749d4987d3a3f381702861ea8012184ff0d0d23e6d2655e6f2f8322cc00400000000000000947b7ef3d9ac56b5979f0ead8102445e3c007b6619fe914a9fc59c500c60c71750168197851a07abd82681570dcdda51a0597d"]}, {0x3b, &(0x7f0000000640)=@string={0x3b, 0x3, "3a7852236e21e6df863db5b5198753474b0dfdd706637cc20cd802c9976fba16bafe719328dda2e865c5b06e6a62fd26ccd30b17ced212811a"}}]}) 40.373962509s ago: executing program 2 (id=1773): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3ffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) signalfd(0xffffffffffffffff, 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r4, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000a00)={0x70, 0x7, r4, 0x0, 0xfffffffffffffffc, 0x1000}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, &(0x7f0000000140)='\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r5, &(0x7f0000000300)='p:test/event1 ./file0:0x0 arg2=%bx', 0x22) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000440)={&(0x7f0000000100)="d9c37865629563c0ef536c8c0f1df824e9cfb6e8b04243219fde90486309517553dc9bc19520", &(0x7f0000000140)=""/30, &(0x7f0000000280)="d3ae162beee53a7f033411ef84c3e71473fcc1e235dc83d6c3e9252f613680448ea5ad145af63a89f51f76bccdc67509bfc4db795fb4a5bc2278707cbb08d3", &(0x7f0000000340), 0x3, 0x1, 0x4}, 0x38) syz_emit_ethernet(0x11, &(0x7f00000009c0)={@random="000000e3ff00", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @void, {@mpls_uc={0x8847, {[], @llc={@llc={0xfc, 0x2, "02"}}}}}}, 0x0) 39.26849732s ago: executing program 41 (id=1740): r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000032073797a6b616c6c65723000001800128008000100767266000c000280080001"], 0x48}, 0x1, 0x0, 0x0, 0x945}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) syz_open_dev$tty20(0xc, 0x4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) open_tree(0xffffffffffffffff, 0x0, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="600000000206010400000000000000000000000014000780080011400000000005001500030000000500010006000000050005000200000005000400000000000900020073797a300000000011000300686173683a69702c6d61726b00"], 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x40) write$tun(r1, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x82b) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 39.055359138s ago: executing program 2 (id=1775): keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0xee01) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc2900, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendfile(r0, r1, 0x0, 0x201f00) 38.54278861s ago: executing program 3 (id=1776): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="540000001000010428d370000000000000000000", @ANYRES32=0x0, @ANYBLOB="8884010000000000340012800b00010067656e65766500002400028004000600050009000100000014000700000000000000000000000000003b72d5"], 0x54}, 0x1, 0x0, 0x0, 0x2000c830}, 0x4080) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal', 0x2, 0x1) r2 = syz_open_dev$vim2m(&(0x7f0000000200), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x7, @meta={0x4f31434d, 0x74caed65, 0x89ad, 0xf061, 0x1be22754}}) set_mempolicy(0x3, 0x0, 0x6) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) syz_open_dev$MSR(&(0x7f0000000240), 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000008cc0)=""/102396, 0x18ffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prlimit64(0x0, 0x5, &(0x7f00000001c0)={0x8, 0x140008b}, 0x0) syz_usb_connect(0x3, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040402000420001000000010902190001010080320904000001ff000000070582"], 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r5, &(0x7f0000007700), 0x318, 0xfc0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000240)=0x1) 38.388760178s ago: executing program 2 (id=1777): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000340)={0x28, 0x0, 0x0, r2, 0x0, 0x0, 0xdead, 0x67, &(0x7f0000000240)}) 38.21677678s ago: executing program 2 (id=1778): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$9p_virtio(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000), 0x1000004, &(0x7f00000000c0)={'trans=virtio,', {[{@dfltgid}]}}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@hyper, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) mmap(&(0x7f00000c2000/0x4000)=nil, 0x4000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000540)={{@local, 0x2}, 0x0, 0x9, 0xffffffff, 0x40}) 37.991846103s ago: executing program 2 (id=1779): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r0 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x40002000) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0xf00, &(0x7f0000000040)=[{&(0x7f00000000c0)="5c00000014006b02c84e21100af32c6e0a0675f8d34460400000000000005c1e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d493803792684b71bdd70000b6c0504bb9183132be471b93c91b5d7870743719b4b53cf2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = fcntl$dupfd(r3, 0x406, r2) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r4) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x11c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x4}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40890}, 0x4000) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="000008000100000000003d0000004500004000000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b4802c500d8833c2b75d00050a0006b5fb3e001c000008d588380683910000003fecb4464ccbb24303e968ddae7577c6a4ae1bfe8b6b1371b5e1e2ba60112b5fb1701da05f5fdc9b60305fadeee64b9d0b0200000000000000aa4c241fbb152dcb7982f15f4a385a3f975a5c3c675a7932f1343887866887dc303823e70b7eaec6f283836ff7dc9e8f95f2480c9fef7ec7cec493f04b20b3b9ea5100aa2e66868871"], 0x4e) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000000)={0xfffffffffffffdac, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00222200000096010006010003000077a317e1d2a9fa3dcd9acf00002a90a07538b3"], 0x0}, 0x0) 36.54961478s ago: executing program 3 (id=1781): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='0123:abcd:a6d', 0xd) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, &(0x7f0000000000)=0x9) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x358, 0xffff8881f5c0a000) sendmsg$sock(r0, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000000300)="90b346a967c2dfb03f17d1bbb4f763d74135e4329316ae867ef03e69a98b02e351194a18eabaa4a824161d4fcd9e8adf12ead907592f5007a84869949cdb9eed296e2ff98b1dd5aa87ebd5d03f9ef705d8d8f42ed97ef0ae380ae44fd4c490a5803c3eae1f6b77a72b3796fb836c2f2d003c92615f82281998a5502687355e7d41922f63380c601544b1e4a3a1f2e787c24d67b6120c8f83b16cf9885852262ea85ef3a05b93a8331affb8f84ce8cba1b3da9eff2165ce7f794d892afc34f82cb3703d747ef2699b41ddfe89e2c0c8137d9f51", 0xd3}, {&(0x7f0000000440)="cf059280bbde3826033ff487c6045a178aa46e9fe032d3323a8668cf4df8f2d86327f5cd7043266ce8", 0x29}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000001780)="b93fa0f11059c4444fec2e751e98c5f0cf6f976e70601a8de007dc311045f2a5c609f666b4f04fac3e57a56588412252abb2455a7bec6f6b03cdf5a0599aa2300b64e7667494dfe9f9b44c1a005ccc00f42424e7485d58e8105b3f94c42212f9c9f667d95cb891eb68231f1f2c70e592889e9477e58de04b3d1376c0f914d13f045fdbef7acc5d66ca76aa58dd6a327ccce18a5045fb0be1214130f14d98d5f73f7491c3d2080262f7a100bf318c5fde2b12ed29fd84063d138303f8c99924940945", 0xc2}, {&(0x7f0000001880)="6aacee203484e010ba497acb5f5a2d3aa0d9a0545fa40f7f", 0x18}, {&(0x7f00000018c0)="25fb42f528bd39a3afb9b56b7f46bb949b93399a56044d79d9d1390910a2f40f", 0x20}, {&(0x7f0000001900)="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", 0x1000}], 0x7, &(0x7f0000002980)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x8000}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x531}}], 0x78}, 0x20004882) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) 36.316761645s ago: executing program 3 (id=1782): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d0001000000000904000005030015000921050000012205000905810320000000070905020310"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800000008048236db37cff60c9511fc0bbda16ec966fa9ba10e6ebfb5671e6bb9"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000034c0)={&(0x7f0000001140)=[{0x8, 0x8800, 0x0, 0x0}], 0x1}) init_module(&(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x8, 0x81, 0x3d, 0x8000000000000000, 0x2, 0x3, 0x6, 0x230, 0x40, 0x13f, 0x4, 0x4, 0x38, 0x1, 0x7fff, 0x3, 0x6}, [{0x4, 0x4, 0x1, 0x7, 0x9, 0x1, 0x3, 0xe}], "1264f4ee3ab6183e1df6500916bfd6a15adf356a8d0094957db972fe28e8a6f9dae8677456c2555dc389299d54fc4b1dd7c5c894d5caa32c960717d749557641ceea7d974223cc216f3183526b6c55cada9bc0697fb14d39a06ec1cc5b356f64aace29a7ad9074ddeaf7c7a0708423ed3d414cd5663f814bd51b0d21235913b930fde9499a46ba94cbeabf3704b58ed5a58662872f43a4a831c698f1acd479f1f0c554b1a732ebb0"}, 0x120, &(0x7f0000000240)='/dev/i2c-#\x00') syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000040)="8102") syz_usb_ep_read(r0, 0x2, 0xa4, &(0x7f0000000180)=""/164) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000240)={'sit0\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x8, 0x10, 0x3, 0xb, {{0x5, 0x4, 0x1, 0x3, 0x14, 0x68, 0x0, 0xc, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @rand_addr=0x64010102}}}}) bind$inet(r2, &(0x7f0000000000)={0x2, 0x2382, @loopback}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f00000004000000040000001000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000b60f61ac99515d6d00000000000000000040000000000000000000"], 0x48) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r5, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2a, &(0x7f0000000080)={0x24, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r9, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x56) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r4, &(0x7f0000000240), &(0x7f0000000280)=@udp=r2}, 0x20) 35.366022786s ago: executing program 2 (id=1785): ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000500)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x1a, 0x0, &(0x7f0000000340)) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, 0x0, 0x0, &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000011) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd) ioctl$TCFLSH(r5, 0x540b, 0x1) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) set_mempolicy(0x3, &(0x7f0000000380)=0x3, 0x9) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r8 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) ftruncate(r8, 0xffff) fcntl$addseals(r8, 0x409, 0x7) r9 = ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000000)={r8, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r9, 0x40086200, &(0x7f0000000080)=0x1) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r10, 0xffffffffffffffff, 0x0) 30.834118519s ago: executing program 1 (id=1774): r0 = socket$packet(0x11, 0x2, 0x300) shutdown(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) add_key(&(0x7f0000000000)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x1, &(0x7f0000001080)=[0xee01]) unshare(0x22020600) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r5) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4800) 29.774155385s ago: executing program 1 (id=1791): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='0123:abcd:a6d', 0xd) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$NILFS_IOCTL_RESIZE(r1, 0x40086e8b, &(0x7f0000000000)=0x9) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x358, 0xffff8881f5c0a000) sendmsg$sock(r1, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000000300)="90b346a967c2dfb03f17d1bbb4f763d74135e4329316ae867ef03e69a98b02e351194a18eabaa4a824161d4fcd9e8adf12ead907592f5007a84869949cdb9eed296e2ff98b1dd5aa87ebd5d03f9ef705d8d8f42ed97ef0ae380ae44fd4c490a5803c3eae1f6b77a72b3796fb836c2f2d003c92615f82281998a5502687355e7d41922f63380c601544b1e4a3a1f2e787c24d67b6120c8f83b16cf9885852262ea85ef3a05b93a8331affb8f84ce8cba1b3da9eff2165ce7f794d892afc34f82cb3703d747ef2699b41ddfe89e2c0c8137d9f51", 0xd3}, {&(0x7f0000000440)="cf059280bbde3826033ff487c6045a178aa46e9fe032d3323a8668cf4df8f2d86327f5cd7043266ce8", 0x29}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000001780)="b93fa0f11059c4444fec2e751e98c5f0cf6f976e70601a8de007dc311045f2a5c609f666b4f04fac3e57a56588412252abb2455a7bec6f6b03cdf5a0599aa2300b64e7667494dfe9f9b44c1a005ccc00f42424e7485d58e8105b3f94c42212f9c9f667d95cb891eb68231f1f2c70e592889e9477e58de04b3d1376c0f914d13f045fdbef7acc5d66ca76aa58dd6a327ccce18a5045fb0be1214130f14d98d5f73f7491c3d2080262f7a100bf318c5fde2b12ed29fd84063d138303f8c99924940945", 0xc2}, {&(0x7f0000001880)="6aacee203484e010ba497acb5f5a2d3aa0d9a0545fa40f7f", 0x18}, {&(0x7f00000018c0)="25fb42f528bd39a3afb9b56b7f46bb949b93399a56044d79d9d1390910a2f40f", 0x20}, {&(0x7f0000001900)="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", 0x1000}], 0x7, &(0x7f0000002980)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x8000}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x531}}], 0x78}, 0x20004882) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) 29.59959326s ago: executing program 1 (id=1792): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x20, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4}]}, @CTA_EXPECT_NAT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40810}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = userfaultfd(0x80001) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, 0x9132, 0xffffffffffffffff, 0x9aa9b000) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x408}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 28.139718697s ago: executing program 42 (id=1761): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = syz_open_dev$video(&(0x7f0000000200), 0xfffffff8, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000180)={0x2, 0x2, 0x6, {0x6, 0x7, 0x2, 0x1000}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe91) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000180)) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001480)=ANY=[@ANYBLOB="180000df25200000000400630000000000000000003d0000"], 0x18}}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000540)={0x48}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, 0x0, &(0x7f00000001c0)) 20.022948964s ago: executing program 43 (id=1782): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d0001000000000904000005030015000921050000012205000905810320000000070905020310"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800000008048236db37cff60c9511fc0bbda16ec966fa9ba10e6ebfb5671e6bb9"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000034c0)={&(0x7f0000001140)=[{0x8, 0x8800, 0x0, 0x0}], 0x1}) init_module(&(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x8, 0x81, 0x3d, 0x8000000000000000, 0x2, 0x3, 0x6, 0x230, 0x40, 0x13f, 0x4, 0x4, 0x38, 0x1, 0x7fff, 0x3, 0x6}, [{0x4, 0x4, 0x1, 0x7, 0x9, 0x1, 0x3, 0xe}], "1264f4ee3ab6183e1df6500916bfd6a15adf356a8d0094957db972fe28e8a6f9dae8677456c2555dc389299d54fc4b1dd7c5c894d5caa32c960717d749557641ceea7d974223cc216f3183526b6c55cada9bc0697fb14d39a06ec1cc5b356f64aace29a7ad9074ddeaf7c7a0708423ed3d414cd5663f814bd51b0d21235913b930fde9499a46ba94cbeabf3704b58ed5a58662872f43a4a831c698f1acd479f1f0c554b1a732ebb0"}, 0x120, &(0x7f0000000240)='/dev/i2c-#\x00') syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000040)="8102") syz_usb_ep_read(r0, 0x2, 0xa4, &(0x7f0000000180)=""/164) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000240)={'sit0\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x8, 0x10, 0x3, 0xb, {{0x5, 0x4, 0x1, 0x3, 0x14, 0x68, 0x0, 0xc, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @rand_addr=0x64010102}}}}) bind$inet(r2, &(0x7f0000000000)={0x2, 0x2382, @loopback}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f00000004000000040000001000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000b60f61ac99515d6d00000000000000000040000000000000000000"], 0x48) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r5, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2a, &(0x7f0000000080)={0x24, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r9, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x56) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r4, &(0x7f0000000240), &(0x7f0000000280)=@udp=r2}, 0x20) 19.002105966s ago: executing program 44 (id=1785): ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000500)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x1a, 0x0, &(0x7f0000000340)) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, 0x0, 0x0, &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000011) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd) ioctl$TCFLSH(r5, 0x540b, 0x1) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) set_mempolicy(0x3, &(0x7f0000000380)=0x3, 0x9) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r8 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) ftruncate(r8, 0xffff) fcntl$addseals(r8, 0x409, 0x7) r9 = ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000000)={r8, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r9, 0x40086200, &(0x7f0000000080)=0x1) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r10, 0xffffffffffffffff, 0x0) 12.948171433s ago: executing program 45 (id=1792): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x20, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4}]}, @CTA_EXPECT_NAT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40810}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = userfaultfd(0x80001) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, 0x9132, 0xffffffffffffffff, 0x9aa9b000) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x408}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 12.87247173s ago: executing program 6 (id=1794): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9defcb4}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xfffffffe}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3406c096) futex(&(0x7f0000000000)=0x2, 0xc, 0x1, 0x0, &(0x7f0000000080)=0x2, 0x2) openat$null(0xffffffffffffff9c, 0x0, 0x51ad96a181f630bf, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400000000905000500020000000500010006"], 0x58}}, 0x4080) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) modify_ldt$write2(0x11, &(0x7f0000000200)={0x77b, 0x0, 0x0, 0x1}, 0x10) modify_ldt$read(0x0, &(0x7f0000002140)=""/4098, 0xfffffffffffffe8e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, 0x0, 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(r3, 0x40186e8d, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, 0xbffffffd, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x4, 0x9, 0x567a5030, 0xb5f}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11.198016406s ago: executing program 6 (id=1813): syz_emit_ethernet(0x5e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x9, 0x4, 0x0, 0x3c, 0x50, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@rr={0x7, 0xb, 0x7, [@dev={0xac, 0x14, 0x14, 0x3a}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x3, 0x93}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x3, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x33) ioctl$BLKZEROOUT(r0, 0xc01070ce, &(0x7f0000000040)={0x1, 0xffff}) 10.891761165s ago: executing program 6 (id=1815): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9defcb4}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xfffffffe}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3406c096) futex(&(0x7f0000000000)=0x2, 0xc, 0x1, 0x0, &(0x7f0000000080)=0x2, 0x2) openat$null(0xffffffffffffff9c, 0x0, 0x51ad96a181f630bf, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400000000905000500020000000500010006"], 0x58}}, 0x4080) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) modify_ldt$write2(0x11, &(0x7f0000000200)={0x77b, 0x0, 0x0, 0x1}, 0x10) modify_ldt$read(0x0, &(0x7f0000002140)=""/4098, 0xfffffffffffffe8e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, 0x0, 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(r3, 0x40186e8d, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, 0xbffffffd, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x4, 0x9, 0x567a5030, 0xb5f}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) 8.246987988s ago: executing program 5 (id=1818): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0xc47) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYRES32=0x2, @ANYRESOCT], 0x60}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) (async) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000a00)='./my_configfs/dlm/cluster1/cluster_name\x00', 0x2, 0x0) (async) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r8, &(0x7f00000001c0)={0x1f, @none, 0x20}, 0xa) (async) close(r8) (async) write(r2, &(0x7f0000000380)="0000007374657231008fc81d7edb1daed53f3f5538f76df607891b05b5f16eb54d557c9a073310f4a85a4f5641f7b83327ffc49f595fd0c77bfa926e2936749a75b22a09f10723be8e4af8a79ec4e8a00dee1c4f6b6f1e1dcf2d5d06f2", 0x5d) write$P9_RREADLINK(r7, &(0x7f00000000c0)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async) r9 = getpgrp(0x0) sched_setaffinity(r9, 0x8, &(0x7f0000000040)=0x5) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000000)=0x6) open_tree(0xffffffffffffffff, 0x0, 0x8c01) 7.874337522s ago: executing program 6 (id=1819): r0 = msgget$private(0x0, 0x193) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x17, 0x4, @thr={&(0x7f0000000000)="b0befcab137faef50a71eba616cdb1d21d2bacc4a78c6f0fc1fff9e1f89d8907e6f4c782a9edceced55443021ddd7b39", &(0x7f0000000040)="bd4a54ca2e2f56ac23fae5356d16368050f030a785ca654cb6787563a4da8bda0d297a40d0c524ff77f0be39eb98bd9eae13c669bf3eddd27436cd9864b8d6bb5b19"}}, &(0x7f0000000100)=0x0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r2, 0x52b242d) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) keyctl$join(0x1, &(0x7f0000000140)={'syz', 0x3}) timer_settime(r1, 0x0, &(0x7f0000000140)={{0x77359400}}, &(0x7f0000000180)) msgsnd(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\b'], 0x23, 0x0) msgctl$IPC_RMID(r0, 0x0) 7.68994734s ago: executing program 6 (id=1820): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001600010028bdf100fedbdf350a107100", @ANYRES32, @ANYBLOB="08000900c000000014"], 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x4000040) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000b00000000000500000014000500200100000000000000000100000000001c0009"], 0x4c}}, 0x40000) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfc) write$sndseq(r0, &(0x7f0000000000)=[{0x9c, 0x77, 0x0, 0xe8, @tick=0x2040, {}, {}, @raw32={[0x0, 0x3]}}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x32b, @tick=0x440, 0xff, {}, 0x0, 0x0, 0x4b}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) close(r2) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = openat(0xffffffffffffffff, 0x0, 0x246101, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r6 = socket$xdp(0x2c, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'hsr0\x00'}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00}, 0x94) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000000000b0000000000000000000000090200"/62], 0x0, 0x3e}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r8, 0x20, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1c, 0xe, &(0x7f0000001700)=ANY=[@ANYRES16=r7], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9}, 0x94) 6.790417066s ago: executing program 5 (id=1821): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3ffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) signalfd(0xffffffffffffffff, 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r4, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r3, 0x3ba0, &(0x7f00000001c0)={0x48, 0x8, r5, 0x0, 0x1, 0x1, &(0x7f00000002c0)='N', 0x5}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, &(0x7f0000000140)='\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r6, &(0x7f0000000300)='p:test/event1 ./file0:0x0 arg2=%bx', 0x22) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000440)={&(0x7f0000000100)="d9c37865629563c0ef536c8c0f1df824e9cfb6e8b04243219fde90486309517553dc9bc19520", &(0x7f0000000140)=""/30, &(0x7f0000000280)="d3ae162beee53a7f033411ef84c3e71473fcc1e235dc83d6c3e9252f613680448ea5ad145af63a89f51f76bccdc67509bfc4db795fb4a5bc2278707cbb08d3", &(0x7f0000000340), 0x3, 0x1, 0x4}, 0x38) syz_emit_ethernet(0x11, &(0x7f00000009c0)={@random="000000e3ff00", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @void, {@mpls_uc={0x8847, {[], @llc={@llc={0xfc, 0x2, "02"}}}}}}, 0x0) 5.489779664s ago: executing program 5 (id=1822): mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_emit_ethernet(0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3208004a00003c006700000206907864010001ac1414aa44143cf17f000001000000027f0000010000020500004e228b8c82fd989efdaff67d877eb77cb8894d337708e3f09e6c0fc7dacf317cc92c365680a8a077ad141c407dcd78", @ANYRES32=0x41424344, @ANYBLOB], 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0x401}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x6, 0xcc, &(0x7f0000000600)=""/204, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x6}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x5c}}, 0x20084884) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0x1ff) read(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x0, 0x3000008, 0x11, 0xffffffffffffffff, 0x20000000) syz_ublk_setup_io_uring(0x372f, &(0x7f0000000000)={0x0, 0xfef0, 0x40009, 0x3, 0x96}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) 4.416041051s ago: executing program 5 (id=1823): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9defcb4}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xfffffffe}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3406c096) futex(&(0x7f0000000000)=0x2, 0xc, 0x1, 0x0, &(0x7f0000000080)=0x2, 0x2) openat$null(0xffffffffffffff9c, 0x0, 0x51ad96a181f630bf, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400000000905000500020000000500010006"], 0x58}}, 0x4080) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) modify_ldt$write2(0x11, &(0x7f0000000200)={0x77b, 0x0, 0x0, 0x1}, 0x10) modify_ldt$read(0x0, &(0x7f0000002140)=""/4098, 0xfffffffffffffe8e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, 0x0, 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(r3, 0x40186e8d, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, 0xbffffffd, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x4, 0x9, 0x567a5030, 0xb5f}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) io_setup(0x8, &(0x7f0000000600)) 3.469573265s ago: executing program 5 (id=1824): socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0001000000000000000000"], 0x18}, 0x4008804) r1 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xf, 0x8000, 0x20000, 0x0, 0xcd, 0x0, 0x4}, 0x9c) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r4, &(0x7f0000000340)={0x6, 0x20, 0x3, 0x0, 0x1}, 0x8) rseq(0x0, 0x0, 0x0, 0x0) openat$udambuf(0xffffff9c, 0x0, 0x2) syz_usb_connect$sierra_net(0x6, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xd, 0x2, 0x400, 0x2, 0x2, 0x7}, {0x9, 0x5, 0x80, 0x2, 0x3ff, 0x8, 0x0, 0x2}, {0x9, 0x5, 0x1, 0x3, 0x200, 0xe6, 0x9, 0x3}}}}}}]}}, 0x0) r5 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e80489680000010203010902200001010080fa0904000002ff00000007058102000200070502020002"], 0x0) syz_usb_ep_read(r5, 0x2, 0x0, 0x0) syz_usb_ep_write(r5, 0x81, 0x0, 0x0) syz_usb_ep_read(r5, 0x2, 0x0, 0x0) syz_usb_ep_write(r5, 0x81, 0x1c, &(0x7f0000000400)="575004000000000200f4000001020304050600"/28) syz_usb_control_io(r5, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x40, 0x30, 0x19, 'D'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 0s ago: executing program 5 (id=1825): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000140)="00008634", 0x4) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) close(r1) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0xf8, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x34ff, 0x2, 0x4, 0x0, 0x22}, [@proto={0x5, 0x19, 0x32}]}, 0xf8}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCBRK(r6, 0x5428) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000000c0)={0x2, 0x3, 0x1, 0x0, 0x0, [{{r2}, 0x5}]}) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000740)={'virt_wifi0\x00', &(0x7f0000000680)=@ethtool_rx_ntuple={0x35, {0x9, @esp_ip4_spec={@broadcast, @local, 0x5, 0xff}, @ah_ip4_spec={@remote, @local, 0xa, 0x6}, 0x1, 0xa50, 0x7, 0x40, 0xffffffffffffffff}}}) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480100001a000100feffffff00010000ac1e0101000000000000000000000000fc010000000000000000000000000001000107174e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x148}}, 0x844) kernel console output (not intermixed with test programs): ol event. [ 641.462635][T12801] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 641.466153][T12801] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 641.473452][T12801] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 641.488457][T12801] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 641.490542][T12801] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 641.511028][T12801] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 641.529099][ T10] m920x_read = error: -19 [ 641.529114][ T10] dvb-usb: error while querying for an remote control event. [ 641.644441][ T10] m920x_read = error: -19 [ 641.644457][ T10] dvb-usb: error while querying for an remote control event. [ 641.764895][ T10] m920x_read = error: -19 [ 641.764911][ T10] dvb-usb: error while querying for an remote control event. [ 641.766081][T12801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 641.800937][T12801] 8021q: adding VLAN 0 to HW filter on device team0 [ 641.814161][ T5977] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.814217][ T5977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 641.832029][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.832084][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 641.882907][ T10] m920x_read = error: -19 [ 641.882923][ T10] dvb-usb: error while querying for an remote control event. [ 642.002806][ T5713] m920x_read = error: -19 [ 642.002823][ T5713] dvb-usb: error while querying for an remote control event. [ 642.122745][ T10] m920x_read = error: -19 [ 642.122762][ T10] dvb-usb: error while querying for an remote control event. [ 642.159683][ T5743] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 642.265815][ T10] m920x_read = error: -19 [ 642.265832][ T10] dvb-usb: error while querying for an remote control event. [ 642.317138][ T5743] usb 4-1: Using ep0 maxpacket: 8 [ 642.317572][ T5743] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 642.330549][ T5743] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 642.330567][ T5743] usb 4-1: config 0 has no interfaces? [ 642.330584][ T5743] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.332049][ T5743] usb 4-1: config 0 descriptor?? [ 642.405806][ T5743] m920x_read = error: -19 [ 642.405823][ T5743] dvb-usb: error while querying for an remote control event. [ 642.528923][ T5743] m920x_read = error: -19 [ 642.528939][ T5743] dvb-usb: error while querying for an remote control event. [ 642.613093][ T5331] usb 4-1: USB disconnect, device number 24 [ 642.641336][ T5743] m920x_read = error: -19 [ 642.641352][ T5743] dvb-usb: error while querying for an remote control event. [ 642.767712][ T5743] m920x_read = error: -19 [ 642.767731][ T5743] dvb-usb: error while querying for an remote control event. [ 642.880183][ T5331] m920x_read = error: -19 [ 642.880201][ T5331] dvb-usb: error while querying for an remote control event. [ 642.995039][T12801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 643.002176][ T5743] m920x_read = error: -19 [ 643.002191][ T5743] dvb-usb: error while querying for an remote control event. [ 643.118282][ T979] m920x_read = error: -19 [ 643.118300][ T979] dvb-usb: error while querying for an remote control event. [ 643.239155][ T5743] m920x_read = error: -19 [ 643.239173][ T5743] dvb-usb: error while querying for an remote control event. [ 643.356721][ T5743] m920x_read = error: -19 [ 643.356737][ T5743] dvb-usb: error while querying for an remote control event. [ 643.476586][ T5331] m920x_read = error: -19 [ 643.476601][ T5331] dvb-usb: error while querying for an remote control event. [ 643.510006][T12801] veth0_vlan: entered promiscuous mode [ 643.527642][T12801] veth1_vlan: entered promiscuous mode [ 643.592154][T12801] veth0_macvtap: entered promiscuous mode [ 643.596159][ T5331] m920x_read = error: -19 [ 643.596183][ T5331] dvb-usb: error while querying for an remote control event. [ 643.603613][T12801] veth1_macvtap: entered promiscuous mode [ 643.655424][T12801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 643.664188][T12801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 643.715577][ T5743] m920x_read = error: -19 [ 643.715592][ T5743] dvb-usb: error while querying for an remote control event. [ 643.772043][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.782582][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.785358][T11805] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.785492][T11805] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.799949][T12801] ieee80211 phy31: Selected rate control algorithm 'minstrel_ht' [ 643.834648][ T5713] m920x_read = error: -19 [ 643.834664][ T5713] dvb-usb: error while querying for an remote control event. [ 643.925891][ T5977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.925906][ T5977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.929201][T12801] ieee80211 phy32: Selected rate control algorithm 'minstrel_ht' [ 643.956230][ T10] m920x_read = error: -19 [ 643.956246][ T10] dvb-usb: error while querying for an remote control event. [ 643.995756][ T5977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.995772][ T5977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.072370][ T10] m920x_read = error: -19 [ 644.072385][ T10] dvb-usb: error while querying for an remote control event. [ 644.099435][T13035] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 644.104587][ T5598] Bluetooth: hci3: command 0x0406 tx timeout [ 644.191409][ T10] m920x_read = error: -19 [ 644.191425][ T10] dvb-usb: error while querying for an remote control event. [ 645.288125][ T5331] m920x_read = error: -19 [ 645.288142][ T5331] dvb-usb: error while querying for an remote control event. [ 645.307178][ T5977] IPVS: starting estimator thread 0... [ 645.405022][ T5331] m920x_read = error: -19 [ 645.405039][ T5331] dvb-usb: error while querying for an remote control event. [ 645.405079][T13041] IPVS: using max 70 ests per chain, 168000 per kthread [ 645.524456][ T5331] m920x_read = error: -19 [ 645.524473][ T5331] dvb-usb: error while querying for an remote control event. [ 645.643478][ T5743] m920x_read = error: -19 [ 645.643495][ T5743] dvb-usb: error while querying for an remote control event. [ 645.658096][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 645.658107][ T29] audit: type=1400 audit(1787467240.492:1385): avc: denied { getattr } for pid=13045 comm="syz.2.1747" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=46728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 645.674420][T13044] kvm: pic: non byte write [ 645.762612][ T5331] m920x_read = error: -19 [ 645.762628][ T5331] dvb-usb: error while querying for an remote control event. [ 645.887682][ T5331] m920x_read = error: -19 [ 645.887699][ T5331] dvb-usb: error while querying for an remote control event. [ 646.021995][ T5331] m920x_read = error: -19 [ 646.022012][ T5331] dvb-usb: error while querying for an remote control event. [ 646.136676][ T5743] m920x_read = error: -19 [ 646.136693][ T5743] dvb-usb: error while querying for an remote control event. [ 646.253987][ T5331] m920x_read = error: -19 [ 646.254005][ T5331] dvb-usb: error while querying for an remote control event. [ 646.375143][ T979] m920x_read = error: -19 [ 646.375160][ T979] dvb-usb: error while querying for an remote control event. [ 646.492957][ T5743] m920x_read = error: -19 [ 646.492974][ T5743] dvb-usb: error while querying for an remote control event. [ 646.611687][ T5743] m920x_read = error: -19 [ 646.611705][ T5743] dvb-usb: error while querying for an remote control event. [ 646.729248][ T5743] m920x_read = error: -19 [ 646.729266][ T5743] dvb-usb: error while querying for an remote control event. [ 646.736845][ T29] audit: type=1400 audit(1787467241.479:1386): avc: denied { relabelfrom } for pid=13052 comm="syz.4.1750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 646.736876][ T29] audit: type=1400 audit(1787467241.479:1387): avc: denied { relabelto } for pid=13052 comm="syz.4.1750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 646.843586][ T29] audit: type=1400 audit(1787467241.581:1388): avc: denied { name_bind } for pid=13052 comm="syz.4.1750" src=20008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 646.847100][ T979] m920x_read = error: -19 [ 646.847115][ T979] dvb-usb: error while querying for an remote control event. [ 646.987258][ T979] m920x_read = error: -19 [ 646.987274][ T979] dvb-usb: error while querying for an remote control event. [ 647.110648][ T5743] m920x_read = error: -19 [ 647.110665][ T5743] dvb-usb: error while querying for an remote control event. [ 647.136985][ T29] audit: type=1400 audit(1787467241.848:1389): avc: denied { create } for pid=13055 comm="syz.2.1751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 647.244321][ T5743] m920x_read = error: -19 [ 647.244339][ T5743] dvb-usb: error while querying for an remote control event. [ 648.122316][ T979] m920x_read = error: -19 [ 648.122334][ T979] dvb-usb: error while querying for an remote control event. [ 648.207848][ T29] audit: type=1400 audit(1787467242.845:1390): avc: denied { mounton } for pid=13059 comm="syz.3.1753" path="/60/sys" dev="tmpfs" ino=352 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 648.234181][ T5331] m920x_read = error: -19 [ 648.234196][ T5331] dvb-usb: error while querying for an remote control event. [ 648.355300][ T5331] m920x_read = error: -19 [ 648.355317][ T5331] dvb-usb: error while querying for an remote control event. [ 648.439691][ T5743] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 648.472508][ T5331] m920x_read = error: -19 [ 648.472526][ T5331] dvb-usb: error while querying for an remote control event. [ 648.487559][ T10] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 648.595169][ T5331] m920x_read = error: -19 [ 648.595186][ T5331] dvb-usb: error while querying for an remote control event. [ 648.608613][ T5743] usb 3-1: Using ep0 maxpacket: 8 [ 648.609110][ T5743] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 648.610636][ T5743] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 648.610652][ T5743] usb 3-1: config 0 has an invalid interface number: 149 but max is -1 [ 648.610665][ T5743] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 648.610678][ T5743] usb 3-1: config 0 has no interface number 0 [ 648.610694][ T5743] usb 3-1: too many endpoints for config 0 interface 149 altsetting 215: 148, using maximum allowed: 30 [ 648.610715][ T5743] usb 3-1: config 0 interface 149 altsetting 215 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 648.610731][ T5743] usb 3-1: config 0 interface 149 altsetting 215 endpoint 0x84 has invalid wMaxPacketSize 0 [ 648.610744][ T5743] usb 3-1: config 0 interface 149 altsetting 215 has 1 endpoint descriptor, different from the interface descriptor's value: 148 [ 648.610759][ T5743] usb 3-1: config 0 interface 149 has no altsetting 0 [ 648.612662][ T5743] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.612676][ T5743] usb 3-1: Product: syz [ 648.612693][ T5743] usb 3-1: Manufacturer: syz [ 648.613163][ T5743] usb 3-1: SerialNumber: syz [ 648.614598][ T5743] usb 3-1: config 0 descriptor?? [ 648.615842][ T5743] hub 3-1:0.149: bad descriptor, ignoring hub [ 648.615856][ T5743] hub 3-1:0.149: probe with driver hub failed with error -5 [ 648.620364][ T5743] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.149/input/input30 [ 648.648239][ T10] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 648.652696][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 648.652722][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 648.652736][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 648.652751][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 648.652774][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.712015][ T5743] m920x_read = error: -19 [ 648.712031][ T5743] dvb-usb: error while querying for an remote control event. [ 648.846243][ T5743] m920x_read = error: -19 [ 648.846274][ T5743] dvb-usb: error while querying for an remote control event. [ 648.963507][ T10] m920x_read = error: -19 [ 648.963525][ T10] dvb-usb: error while querying for an remote control event. [ 649.085905][ T10] m920x_read = error: -19 [ 649.085922][ T10] dvb-usb: error while querying for an remote control event. [ 649.204642][ T10] m920x_read = error: -19 [ 649.204660][ T10] dvb-usb: error while querying for an remote control event. [ 649.322820][ T5331] m920x_read = error: -19 [ 649.322838][ T5331] dvb-usb: error while querying for an remote control event. [ 649.441682][ T10] m920x_read = error: -19 [ 649.441700][ T10] dvb-usb: error while querying for an remote control event. [ 649.558474][ T5331] m920x_read = error: -19 [ 649.558492][ T5331] dvb-usb: error while querying for an remote control event. [ 649.680352][ T5331] m920x_read = error: -19 [ 649.680370][ T5331] dvb-usb: error while querying for an remote control event. [ 649.798801][ T5331] m920x_read = error: -19 [ 649.798818][ T5331] dvb-usb: error while querying for an remote control event. [ 649.916272][ T5331] m920x_read = error: -19 [ 649.916289][ T5331] dvb-usb: error while querying for an remote control event. [ 650.038587][ T5331] m920x_read = error: -19 [ 650.038604][ T5331] dvb-usb: error while querying for an remote control event. [ 650.156587][ T5331] m920x_read = error: -19 [ 650.156605][ T5331] dvb-usb: error while querying for an remote control event. [ 650.277348][ T10] m920x_read = error: -19 [ 650.277365][ T10] dvb-usb: error while querying for an remote control event. [ 650.280528][ T4916] Bluetooth: hci2: hcon ffff8880372f4000 sent 1 < count 6 [ 650.280593][ T4916] Bluetooth: hci2: hcon ffff8880372f4000 sent 0 < count 1024 [ 650.285585][ T29] audit: type=1400 audit(1787467244.764:1391): avc: denied { bind } for pid=13059 comm="syz.3.1753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 650.288250][T13070] Unsupported ieee802154 address type: 0 [ 650.391545][ T5331] m920x_read = error: -19 [ 650.391565][ T5331] dvb-usb: error while querying for an remote control event. [ 650.391851][ T10] usb 3-1: USB disconnect, device number 36 [ 650.510258][ T5713] m920x_read = error: -19 [ 650.510274][ T5713] dvb-usb: error while querying for an remote control event. [ 650.631987][ T10] m920x_read = error: -19 [ 650.632004][ T10] dvb-usb: error while querying for an remote control event. [ 650.749114][ T10] m920x_read = error: -19 [ 650.749132][ T10] dvb-usb: error while querying for an remote control event. [ 650.870940][ T10] m920x_read = error: -19 [ 650.870958][ T10] dvb-usb: error while querying for an remote control event. [ 650.989399][ T10] m920x_read = error: -19 [ 650.989416][ T10] dvb-usb: error while querying for an remote control event. [ 651.111942][ T10] m920x_read = error: -19 [ 651.111960][ T10] dvb-usb: error while querying for an remote control event. [ 651.227871][ T10] m920x_read = error: -19 [ 651.227890][ T10] dvb-usb: error while querying for an remote control event. [ 651.345172][ T10] m920x_read = error: -19 [ 651.345189][ T10] dvb-usb: error while querying for an remote control event. [ 651.438330][ T10] usb 4-1: USB disconnect, device number 25 [ 651.476405][ T5713] m920x_read = error: -19 [ 651.476423][ T5713] dvb-usb: error while querying for an remote control event. [ 651.605702][ T5743] m920x_read = error: -19 [ 651.605719][ T5743] dvb-usb: error while querying for an remote control event. [ 651.723456][ T10] m920x_read = error: -19 [ 651.723484][ T10] dvb-usb: error while querying for an remote control event. [ 651.842695][ T10] m920x_read = error: -19 [ 651.842712][ T10] dvb-usb: error while querying for an remote control event. [ 651.963111][ T10] m920x_read = error: -19 [ 651.963130][ T10] dvb-usb: error while querying for an remote control event. [ 652.081337][ T10] m920x_read = error: -19 [ 652.081354][ T10] dvb-usb: error while querying for an remote control event. [ 652.200560][ T5743] m920x_read = error: -19 [ 652.200578][ T5743] dvb-usb: error while querying for an remote control event. [ 652.319422][ T5743] m920x_read = error: -19 [ 652.319439][ T5743] dvb-usb: error while querying for an remote control event. [ 652.438722][ T5331] m920x_read = error: -19 [ 652.438747][ T5331] dvb-usb: error while querying for an remote control event. [ 652.558378][ T5331] m920x_read = error: -19 [ 652.558395][ T5331] dvb-usb: error while querying for an remote control event. [ 652.684665][ T5331] m920x_read = error: -19 [ 652.684683][ T5331] dvb-usb: error while querying for an remote control event. [ 652.797522][ T5331] m920x_read = error: -19 [ 652.797545][ T5331] dvb-usb: error while querying for an remote control event. [ 652.915599][ T5331] m920x_read = error: -19 [ 652.915615][ T5331] dvb-usb: error while querying for an remote control event. [ 652.959779][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 652.959813][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 652.960787][ T29] audit: type=1400 audit(1787467247.228:1392): avc: denied { bind } for pid=13085 comm="syz.3.1759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 652.960816][ T29] audit: type=1400 audit(1787467247.228:1393): avc: denied { name_bind } for pid=13085 comm="syz.3.1759" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 652.960839][ T29] audit: type=1400 audit(1787467247.228:1394): avc: denied { node_bind } for pid=13085 comm="syz.3.1759" saddr=172.20.20.170 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 653.000329][ T29] audit: type=1400 audit(1787467247.265:1395): avc: denied { map } for pid=13085 comm="syz.3.1759" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 653.035906][ T5331] m920x_read = error: -19 [ 653.035922][ T5331] dvb-usb: error while querying for an remote control event. [ 653.047519][ T5598] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 653.054365][ T5598] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 653.056125][ T5598] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 653.060092][ T5598] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 653.060387][ T5598] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 653.156790][ T5331] m920x_read = error: -19 [ 653.156806][ T5331] dvb-usb: error while querying for an remote control event. [ 653.273918][ T979] m920x_read = error: -19 [ 653.273934][ T979] dvb-usb: error while querying for an remote control event. [ 653.346564][T13097] netlink: 'syz.2.1760': attribute type 16 has an invalid length. [ 653.346580][T13097] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1760'. [ 653.393976][ T979] m920x_read = error: -19 [ 653.393992][ T979] dvb-usb: error while querying for an remote control event. [ 653.511786][ T979] m920x_read = error: -19 [ 653.511803][ T979] dvb-usb: error while querying for an remote control event. [ 653.630875][ T979] m920x_read = error: -19 [ 653.630892][ T979] dvb-usb: error while querying for an remote control event. [ 653.750336][ T5743] m920x_read = error: -19 [ 653.750352][ T5743] dvb-usb: error while querying for an remote control event. [ 653.869672][ T5743] m920x_read = error: -19 [ 653.869689][ T5743] dvb-usb: error while querying for an remote control event. [ 653.946266][ T5331] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 653.959275][ T29] audit: type=1400 audit(1787467248.150:1396): avc: denied { write } for pid=13094 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 653.988483][ T5743] m920x_read = error: -19 [ 653.988500][ T5743] dvb-usb: error while querying for an remote control event. [ 654.108292][ T5743] m920x_read = error: -19 [ 654.108309][ T5743] dvb-usb: error while querying for an remote control event. [ 654.109628][ T5331] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 654.118038][ T5331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.118057][ T5331] usb 3-1: Product: syz [ 654.118066][ T5331] usb 3-1: Manufacturer: syz [ 654.118076][ T5331] usb 3-1: SerialNumber: syz [ 654.121919][ T5331] usb 3-1: config 0 descriptor?? [ 654.139576][T13126] FAULT_INJECTION: forcing a failure. [ 654.139576][T13126] name failslab, interval 1, probability 0, space 0, times 0 [ 654.139604][T13126] CPU: 0 UID: 0 PID: 13126 Comm: syz.3.1763 Not tainted syzkaller #0 PREEMPT(full) [ 654.139618][T13126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 654.139625][T13126] Call Trace: [ 654.139630][T13126] [ 654.139635][T13126] dump_stack_lvl+0x100/0x190 [ 654.139656][T13126] should_fail_ex.cold+0x5/0xa [ 654.139672][T13126] should_failslab+0xc2/0x120 [ 654.139684][T13126] __kmalloc_noprof+0xfc/0x820 [ 654.139700][T13126] ? rcu_is_watching+0x13/0xc0 [ 654.139713][T13126] ? tomoyo_realpath_from_path+0xb6/0x690 [ 654.139730][T13126] tomoyo_realpath_from_path+0xb6/0x690 [ 654.139745][T13126] tomoyo_path_number_perm+0x23c/0x580 [ 654.139761][T13126] ? tomoyo_path_number_perm+0x22e/0x580 [ 654.139778][T13126] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 654.139810][T13126] ? find_held_lock+0x2b/0x80 [ 654.139824][T13126] ? hook_file_ioctl_common+0x140/0x440 [ 654.139841][T13126] ? __fget_files+0x21f/0x3d0 [ 654.139863][T13126] security_file_ioctl+0xd3/0x230 [ 654.139882][T13126] __x64_sys_ioctl+0xb7/0x210 [ 654.139899][T13126] do_syscall_64+0x123/0x790 [ 654.139918][T13126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.139930][T13126] RIP: 0033:0x7f54b3d9e0d9 [ 654.139941][T13126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.139952][T13126] RSP: 002b:00007f54b4d23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 654.139963][T13126] RAX: ffffffffffffffda RBX: 00007f54b4026090 RCX: 00007f54b3d9e0d9 [ 654.139971][T13126] RDX: 0000200000000540 RSI: 00000000000007a4 RDI: 0000000000000003 [ 654.139978][T13126] RBP: 00007f54b4d23090 R08: 0000000000000000 R09: 0000000000000000 [ 654.139985][T13126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 654.139992][T13126] R13: 00007f54b4026128 R14: 00007f54b4026090 R15: 00007ffc245ed3e8 [ 654.140008][T13126] [ 654.145875][ T29] audit: type=1400 audit(1787467248.326:1397): avc: denied { write } for pid=13124 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 654.146113][T13126] ERROR: Out of memory at tomoyo_realpath_from_path. [ 654.227357][ T5743] m920x_read = error: -19 [ 654.227375][ T5743] dvb-usb: error while querying for an remote control event. [ 654.346222][ T5743] m920x_read = error: -19 [ 654.346240][ T5743] dvb-usb: error while querying for an remote control event. [ 654.467208][ T5743] m920x_read = error: -19 [ 654.467226][ T5743] dvb-usb: error while querying for an remote control event. [ 654.588150][ T5743] m920x_read = error: -19 [ 654.588167][ T5743] dvb-usb: error while querying for an remote control event. [ 654.636751][T13088] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.636803][T13088] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.636898][T13088] bridge_slave_0: entered allmulticast mode [ 654.640874][T13088] bridge_slave_0: entered promiscuous mode [ 654.644878][T13088] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.646257][T13088] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.646339][T13088] bridge_slave_1: entered allmulticast mode [ 654.651796][ T5331] usb 3-1: USB disconnect, device number 37 [ 654.655885][T13088] bridge_slave_1: entered promiscuous mode [ 654.780488][ T5743] m920x_read = error: -19 [ 654.780504][ T5743] dvb-usb: error while querying for an remote control event. [ 654.785994][T13088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 654.823545][T13088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 654.900259][ T5743] m920x_read = error: -19 [ 654.900275][ T5743] dvb-usb: error while querying for an remote control event. [ 654.906827][T13088] team0: Port device team_slave_0 added [ 654.908223][T13088] team0: Port device team_slave_1 added [ 654.969978][T13138] overlay: Unknown parameter 'func' [ 654.971791][T13088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 654.971802][T13088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.971816][T13088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 654.972766][T13088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 654.972775][T13088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.972790][T13088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 655.020179][ T5743] m920x_read = error: -19 [ 655.020194][ T5743] dvb-usb: error while querying for an remote control event. [ 655.071068][T13088] hsr_slave_0: entered promiscuous mode [ 655.071589][T13088] hsr_slave_1: entered promiscuous mode [ 655.071905][T13088] debugfs: 'hsr0' already exists in 'hsr' [ 655.071918][T13088] Cannot create hsr debugfs directory [ 655.089508][ T29] audit: type=1400 audit(1787467249.193:1398): avc: denied { write } for pid=13131 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 655.137836][ T5331] m920x_read = error: -19 [ 655.137853][ T5331] dvb-usb: error while querying for an remote control event. [ 655.233781][ T29] audit: type=1400 audit(1787467249.322:1399): avc: denied { write } for pid=13151 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 655.257343][ T5331] m920x_read = error: -19 [ 655.257359][ T5331] dvb-usb: error while querying for an remote control event. [ 655.291335][ T4916] Bluetooth: hci9: command tx timeout [ 655.377613][ T5331] m920x_read = error: -19 [ 655.377629][ T5331] dvb-usb: error while querying for an remote control event. [ 655.496004][ T5713] m920x_read = error: -19 [ 655.496020][ T5713] dvb-usb: error while querying for an remote control event. [ 655.594639][T13163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1768'. [ 655.616716][ T5331] m920x_read = error: -19 [ 655.616735][ T5331] dvb-usb: error while querying for an remote control event. [ 655.632076][T13088] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.736204][ T5743] m920x_read = error: -19 [ 655.736220][ T5743] dvb-usb: error while querying for an remote control event. [ 655.791468][T13088] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.853688][ T5331] m920x_read = error: -19 [ 655.853704][ T5331] dvb-usb: error while querying for an remote control event. [ 655.912873][T13088] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.934422][ T29] audit: type=1400 audit(1787467249.977:1400): avc: denied { write } for pid=13159 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 655.940073][ T5713] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 655.973900][ T5331] m920x_read = error: -19 [ 655.973916][ T5331] dvb-usb: error while querying for an remote control event. [ 656.028139][T13088] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.096892][ T5743] m920x_read = error: -19 [ 656.096909][ T5743] dvb-usb: error while querying for an remote control event. [ 656.125102][ T5713] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 656.131791][ T5713] usb 3-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 656.131837][ T5713] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 656.131853][ T5713] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 656.131867][ T5713] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 656.131883][ T5713] usb 3-1: config 0 interface 0 has no altsetting 0 [ 656.131902][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.134759][ T5713] usb 3-1: config 0 descriptor?? [ 656.143468][ T29] audit: type=1400 audit(1787467250.162:1401): avc: denied { write } for pid=13180 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 656.210674][ T5743] m920x_read = error: -19 [ 656.210691][ T5743] dvb-usb: error while querying for an remote control event. [ 656.331169][ T5743] m920x_read = error: -19 [ 656.331188][ T5743] dvb-usb: error while querying for an remote control event. [ 656.453143][ T5743] m920x_read = error: -19 [ 656.453164][ T5743] dvb-usb: error while querying for an remote control event. [ 656.572504][ T5743] m920x_read = error: -19 [ 656.572521][ T5743] dvb-usb: error while querying for an remote control event. [ 656.598254][ T5713] ryos 0003:1E7D:3138.0028: hidraw1: USB HID v0.00 Device [HID 1e7d:3138] on usb-dummy_hcd.2-1/input0 [ 656.606273][T13088] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 656.632330][T13088] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 656.633326][T13088] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 656.639188][T13088] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 656.651497][T13088] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 656.687377][ T5743] m920x_read = error: -19 [ 656.687393][ T5743] dvb-usb: error while querying for an remote control event. [ 656.696579][T13088] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 656.697269][T13088] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 656.713446][T13088] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 656.809843][ T5331] m920x_read = error: -19 [ 656.809859][ T5331] dvb-usb: error while querying for an remote control event. [ 656.815087][ T5331] usb 3-1: USB disconnect, device number 38 [ 656.927416][ T5743] m920x_read = error: -19 [ 656.927432][ T5743] dvb-usb: error while querying for an remote control event. [ 656.956987][T13088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 656.998064][T13088] 8021q: adding VLAN 0 to HW filter on device team0 [ 657.009466][ T3338] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.009521][ T3338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 657.042340][ T5979] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.042394][ T5979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 657.046822][ T5743] m920x_read = error: -19 [ 657.046835][ T5743] dvb-usb: error while querying for an remote control event. [ 657.166868][ T5331] m920x_read = error: -19 [ 657.166885][ T5331] dvb-usb: error while querying for an remote control event. [ 657.310618][ T5331] m920x_read = error: -19 [ 657.310634][ T5331] dvb-usb: error while querying for an remote control event. [ 657.426955][ T5743] m920x_read = error: -19 [ 657.426971][ T5743] dvb-usb: error while querying for an remote control event. [ 657.448031][ T5331] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 657.543415][ T4916] Bluetooth: hci9: command tx timeout [ 657.543528][ T5743] m920x_read = error: -19 [ 657.543540][ T5743] dvb-usb: error while querying for an remote control event. [ 657.609194][ T5331] usb 4-1: Using ep0 maxpacket: 32 [ 657.609842][ T5331] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 657.610707][ T5331] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 657.612340][ T5331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.612355][ T5331] usb 4-1: Product: syz [ 657.612365][ T5331] usb 4-1: Manufacturer: syz [ 657.612374][ T5331] usb 4-1: SerialNumber: syz [ 657.662477][ T5743] m920x_read = error: -19 [ 657.662505][ T5743] dvb-usb: error while querying for an remote control event. [ 657.774385][ T5331] usb 4-1: config 0 descriptor?? [ 657.781663][ T5743] m920x_read = error: -19 [ 657.781678][ T5743] dvb-usb: error while querying for an remote control event. [ 657.851448][ T5331] smsc75xx 4-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 657.851566][ T5331] smsc75xx 4-1:0.0: probe with driver smsc75xx failed with error -22 [ 658.189102][ T5713] m920x_read = error: -19 [ 658.189118][ T5713] dvb-usb: error while querying for an remote control event. [ 658.494086][ T5331] m920x_read = error: -19 [ 658.494112][ T5331] dvb-usb: error while querying for an remote control event. [ 658.605496][ T5743] m920x_read = error: -19 [ 658.605513][ T5743] dvb-usb: error while querying for an remote control event. [ 658.631770][ T5743] usb 4-1: USB disconnect, device number 26 [ 658.724864][ T5713] m920x_read = error: -19 [ 658.724881][ T5713] dvb-usb: error while querying for an remote control event. [ 658.845757][ T5743] m920x_read = error: -19 [ 658.845774][ T5743] dvb-usb: error while querying for an remote control event. [ 658.963023][ T10] m920x_read = error: -19 [ 658.963041][ T10] dvb-usb: error while querying for an remote control event. [ 658.977078][T13088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 659.058072][ T5598] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 659.070948][ T5598] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 659.072192][ T5598] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 659.073561][ T5598] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 659.073861][ T5598] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 659.082343][ T10] m920x_read = error: -19 [ 659.082357][ T10] dvb-usb: error while querying for an remote control event. [ 659.202623][ T10] m920x_read = error: -19 [ 659.202640][ T10] dvb-usb: error while querying for an remote control event. [ 659.321694][ T5331] m920x_read = error: -19 [ 659.321712][ T5331] dvb-usb: error while querying for an remote control event. [ 659.441320][ T10] m920x_read = error: -19 [ 659.441338][ T10] dvb-usb: error while querying for an remote control event. [ 659.537120][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 659.537132][ T29] audit: type=1400 audit(1787467253.290:1404): avc: denied { write } for pid=13236 comm="syz.3.1776" name="binder0" dev="binder" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 659.559962][ T5331] m920x_read = error: -19 [ 659.559979][ T5331] dvb-usb: error while querying for an remote control event. [ 659.680996][ T5743] m920x_read = error: -19 [ 659.681013][ T5743] dvb-usb: error while querying for an remote control event. [ 659.795290][T13088] veth0_vlan: entered promiscuous mode [ 659.798639][ T5713] m920x_read = error: -19 [ 659.798654][ T5713] dvb-usb: error while querying for an remote control event. [ 659.798795][ T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 659.798893][ T5598] Bluetooth: hci9: command tx timeout [ 659.815873][T13088] veth1_vlan: entered promiscuous mode [ 659.890225][T13088] veth0_macvtap: entered promiscuous mode [ 659.909574][T13088] veth1_macvtap: entered promiscuous mode [ 659.916938][ T5713] m920x_read = error: -19 [ 659.916952][ T5713] dvb-usb: error while querying for an remote control event. [ 659.958526][T13088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 659.961870][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=4200, bcdDevice= 1.00 [ 659.965121][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 659.965146][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.968454][ T10] em28xx 4-1:1.0: New device @ 480 Mbps (2040:4200, interface 0, class 0) [ 659.968475][ T10] em28xx 4-1:1.0: Video interface 0 found: [ 659.993892][T13088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 660.044275][ T5713] m920x_read = error: -19 [ 660.044292][ T5713] dvb-usb: error while querying for an remote control event. [ 660.144977][ T5979] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.145193][ T5979] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.145372][ T5979] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.145394][ T5979] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.155306][ T5743] m920x_read = error: -19 [ 660.155321][ T5743] dvb-usb: error while querying for an remote control event. [ 660.227642][T13238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1776'. [ 660.231412][T13088] ieee80211 phy33: Selected rate control algorithm 'minstrel_ht' [ 660.276403][ T9] m920x_read = error: -19 [ 660.276419][ T9] dvb-usb: error while querying for an remote control event. [ 660.279798][T13238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1776'. [ 660.280036][T13238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1776'. [ 660.280246][T13238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1776'. [ 660.280370][T13238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1776'. [ 660.367227][T13088] ieee80211 phy34: Selected rate control algorithm 'minstrel_ht' [ 660.367531][ T5977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 660.367543][ T5977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 660.373282][ T10] em28xx 4-1:1.0: unknown em28xx chip ID (0) [ 660.394579][ T9] m920x_read = error: -19 [ 660.394594][ T9] dvb-usb: error while querying for an remote control event. [ 660.431259][ T5979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 660.431274][ T5979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 660.456429][ T10] em28xx 4-1:1.0: reading from i2c device at 0xa0 failed (error=-5) [ 660.456450][ T10] em28xx 4-1:1.0: board has no eeprom [ 660.481486][ T5713] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 660.513502][ T5720] m920x_read = error: -19 [ 660.513518][ T5720] dvb-usb: error while querying for an remote control event. [ 660.524078][ T10] em28xx 4-1:1.0: Identified as Hauppauge WinTV USB 2 (card=4) [ 660.524097][ T10] em28xx 4-1:1.0: analog set to bulk mode. [ 660.524616][ T5720] em28xx 4-1:1.0: Registering V4L2 extension [ 660.538181][ T10] usb 4-1: USB disconnect, device number 27 [ 660.541234][ T10] em28xx 4-1:1.0: Disconnecting em28xx [ 660.632200][ T5721] m920x_read = error: -19 [ 660.632216][ T5721] dvb-usb: error while querying for an remote control event. [ 660.644350][ T5713] usb 3-1: Using ep0 maxpacket: 16 [ 660.644789][ T5713] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 660.645722][ T5713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 660.645747][ T5713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 660.645761][ T5713] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 660.645785][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.647150][ T5713] usb 3-1: config 0 descriptor?? [ 660.752201][ T5331] m920x_read = error: -19 [ 660.752217][ T5331] dvb-usb: error while querying for an remote control event. [ 660.901817][ T5331] m920x_read = error: -19 [ 660.901834][ T5331] dvb-usb: error while querying for an remote control event. [ 660.956515][T13228] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.956565][T13228] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.956650][T13228] bridge_slave_0: entered allmulticast mode [ 661.051101][ T5721] m920x_read = error: -19 [ 661.051120][ T5721] dvb-usb: error while querying for an remote control event. [ 661.059903][ T5720] em28xx 4-1:1.0: Config register raw data: 0xffffffed [ 661.059958][ T5720] em28xx 4-1:1.0: AC97 chip type couldn't be determined [ 661.059966][ T5720] em28xx 4-1:1.0: No AC97 audio processor [ 661.060185][ T5720] em28xx 4-1:1.0: em28xx_v4l2_init: em28xx_write_reg - msp34xx(1) failed! error [-19] [ 661.060339][ T5720] em28xx 4-1:1.0: Registering input extension [ 661.063729][T13228] bridge_slave_0: entered promiscuous mode [ 661.075399][T13228] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.075452][T13228] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.075546][T13228] bridge_slave_1: entered allmulticast mode [ 661.083221][T13228] bridge_slave_1: entered promiscuous mode [ 661.248835][T13277] audit: audit_lost=64 audit_rate_limit=0 audit_backlog_limit=64 [ 661.248868][T13277] audit: out of memory in audit_log_start [ 661.251690][T13277] o2cb: This node has not been configured. [ 661.251699][T13277] o2cb: Cluster check failed. Fix errors before retrying. [ 661.251714][T13277] (syz.5.1780,13277,0):user_dlm_register:674 ERROR: status = -22 [ 661.251737][T13277] (syz.5.1780,13277,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 661.252636][ T5331] m920x_read = error: -19 [ 661.252670][ T5331] dvb-usb: error while querying for an remote control event. [ 661.252731][ T29] audit: type=1400 audit(1787467254.868:1405): avc: denied { add_name } for pid=13274 comm="syz.5.1780" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 661.252761][ T29] audit: type=1400 audit(1787467254.886:1406): avc: denied { create } for pid=13274 comm="syz.5.1780" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 661.252784][ T29] audit: type=1400 audit(1787467254.886:1407): avc: denied { associate } for pid=13274 comm="syz.5.1780" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 661.270417][ T5713] microsoft 0003:045E:07DA.0029: unknown main item tag 0x0 [ 661.270455][ T5713] microsoft 0003:045E:07DA.0029: unknown main item tag 0x0 [ 661.270471][ T5713] microsoft 0003:045E:07DA.0029: ignoring exceeding usage max [ 661.288024][ T5713] microsoft 0003:045E:07DA.0029: unknown main item tag 0x0 [ 661.288047][ T5713] microsoft 0003:045E:07DA.0029: unknown main item tag 0x0 [ 661.288066][ T5713] microsoft 0003:045E:07DA.0029: unsupported Resolution Multiplier 0 [ 661.289095][ T5713] microsoft 0003:045E:07DA.0029: implement() called with n (56) > 32! (kworker/0:4) [ 661.333886][T13228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 661.340455][T13228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 661.358307][ T5598] Bluetooth: hci10: command tx timeout [ 661.374596][ T5743] m920x_read = error: -19 [ 661.374610][ T5743] dvb-usb: error while querying for an remote control event. [ 661.379532][ T5720] rc_core: IR keymap rc-hauppauge not found [ 661.379549][ T5720] Registered IR keymap rc-empty [ 661.475198][T13228] team0: Port device team_slave_0 added [ 661.482493][T13228] team0: Port device team_slave_1 added [ 661.526289][ T5713] microsoft 0003:045E:07DA.0029: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 661.546584][ T5743] m920x_read = error: -19 [ 661.546599][ T5743] dvb-usb: error while querying for an remote control event. [ 661.550691][ T5713] usb 3-1: USB disconnect, device number 39 [ 661.552460][ T5720] rc rc0: Hauppauge WinTV USB 2 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/rc/rc0 [ 661.557330][ T5720] input: Hauppauge WinTV USB 2 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/rc/rc0/input31 [ 661.666345][ T5721] m920x_read = error: -19 [ 661.666363][ T5721] dvb-usb: error while querying for an remote control event. [ 661.769577][ T5720] em28xx 4-1:1.0: Input extension successfully initialized [ 661.778706][ T10] em28xx 4-1:1.0: Closing input extension [ 661.783438][T13282] fido_id[13282]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 661.809452][ T5721] m920x_read = error: -19 [ 661.809468][ T5721] dvb-usb: error while querying for an remote control event. [ 661.926773][ T5721] m920x_read = error: -19 [ 661.926789][ T5721] dvb-usb: error while querying for an remote control event. [ 661.938616][T13228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 661.938628][T13228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.938643][T13228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 661.939668][T13228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 661.939678][T13228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.939693][T13228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 662.052113][ T5598] Bluetooth: hci9: command tx timeout [ 662.072134][ T5720] m920x_read = error: -19 [ 662.072150][ T5720] dvb-usb: error while querying for an remote control event. [ 662.110790][T13228] hsr_slave_0: entered promiscuous mode [ 662.111263][T13228] hsr_slave_1: entered promiscuous mode [ 662.116105][T13228] debugfs: 'hsr0' already exists in 'hsr' [ 662.116119][T13228] Cannot create hsr debugfs directory [ 662.213945][T13284] rdma_rxe: rxe_newlink: failed to add syz_tun [ 662.259472][ T5721] m920x_read = error: -19 [ 662.259488][ T5721] dvb-usb: error while querying for an remote control event. [ 662.377731][ T5720] m920x_read = error: -19 [ 662.377747][ T5720] dvb-usb: error while querying for an remote control event. [ 662.382006][ T10] em28xx: Freeing device [ 662.496641][ T5721] m920x_read = error: -19 [ 662.496657][ T5721] dvb-usb: error while querying for an remote control event. [ 662.615776][ T5721] m920x_read = error: -19 [ 662.615792][ T5721] dvb-usb: error while querying for an remote control event. [ 662.665941][T13293] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 662.735415][ T5713] m920x_read = error: -19 [ 662.735431][ T5713] dvb-usb: error while querying for an remote control event. [ 662.860061][ T5713] m920x_read = error: -19 [ 662.860076][ T5713] dvb-usb: error while querying for an remote control event. [ 662.875979][T13297] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13297 comm=syz.5.1787 [ 662.960564][T13297] jffs2: notice: (13297) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 662.974341][ T5713] m920x_read = error: -19 [ 662.974356][ T5713] dvb-usb: error while querying for an remote control event. [ 662.976728][T13228] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.096087][ T10] m920x_read = error: -19 [ 663.096104][ T10] dvb-usb: error while querying for an remote control event. [ 663.211578][ T10] m920x_read = error: -19 [ 663.211594][ T10] dvb-usb: error while querying for an remote control event. [ 663.214406][T13228] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.253468][T13300] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1788'. [ 663.332019][ T10] m920x_read = error: -19 [ 663.332034][ T10] dvb-usb: error while querying for an remote control event. [ 663.370649][T13228] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.450411][ T5713] m920x_read = error: -19 [ 663.450426][ T5713] dvb-usb: error while querying for an remote control event. [ 663.490926][T13228] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.569819][ T5713] m920x_read = error: -19 [ 663.569835][ T5713] dvb-usb: error while querying for an remote control event. [ 663.616894][ T5598] Bluetooth: hci10: command tx timeout [ 663.689013][ T5331] m920x_read = error: -19 [ 663.689029][ T5331] dvb-usb: error while querying for an remote control event. [ 663.720638][ T5720] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 663.807964][ T5331] m920x_read = error: -19 [ 663.807981][ T5331] dvb-usb: error while querying for an remote control event. [ 663.895108][ T5720] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 663.895904][ T5720] usb 6-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 663.895930][ T5720] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 663.895945][ T5720] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 663.895959][ T5720] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 663.895975][ T5720] usb 6-1: config 0 interface 0 has no altsetting 0 [ 663.895993][ T5720] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.897497][ T5720] usb 6-1: config 0 descriptor?? [ 663.927079][ T5713] m920x_read = error: -19 [ 663.927095][ T5713] dvb-usb: error while querying for an remote control event. [ 664.069954][T13228] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 664.081224][T13228] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 664.081754][T13228] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 664.090976][ T5713] m920x_read = error: -19 [ 664.090991][ T5713] dvb-usb: error while querying for an remote control event. [ 664.120346][T13228] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 664.123291][T13228] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 664.137969][T13228] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 664.138510][T13228] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 664.157713][T13228] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 664.222848][ T5713] m920x_read = error: -19 [ 664.222864][ T5713] dvb-usb: error while querying for an remote control event. [ 664.351529][ T5331] m920x_read = error: -19 [ 664.351544][ T5331] dvb-usb: error while querying for an remote control event. [ 664.384539][T13228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 664.422464][T13228] 8021q: adding VLAN 0 to HW filter on device team0 [ 664.430691][ T3338] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.430770][ T3338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 664.464878][ T5980] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.464936][ T5980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 664.486219][ T5720] ryos 0003:1E7D:3138.002A: hidraw0: USB HID v0.00 Device [HID 1e7d:3138] on usb-dummy_hcd.5-1/input0 [ 664.515463][ T5713] m920x_read = error: -19 [ 664.515479][ T5713] dvb-usb: error while querying for an remote control event. [ 664.530457][T13228] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 664.648809][ T5713] m920x_read = error: -19 [ 664.648825][ T5713] dvb-usb: error while querying for an remote control event. [ 664.694299][ T5713] usb 6-1: USB disconnect, device number 18 [ 664.765080][ T5331] m920x_read = error: -19 [ 664.765096][ T5331] dvb-usb: error while querying for an remote control event. [ 664.881532][ T5720] m920x_read = error: -19 [ 664.881549][ T5720] dvb-usb: error while querying for an remote control event. [ 665.000395][ T5713] m920x_read = error: -19 [ 665.000410][ T5713] dvb-usb: error while querying for an remote control event. [ 665.119747][ T5331] m920x_read = error: -19 [ 665.119763][ T5331] dvb-usb: error while querying for an remote control event. [ 665.238510][ T5331] m920x_read = error: -19 [ 665.238525][ T5331] dvb-usb: error while querying for an remote control event. [ 665.362534][ T5331] m920x_read = error: -19 [ 665.362551][ T5331] dvb-usb: error while querying for an remote control event. [ 665.374691][T13228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 665.446734][T13228] veth0_vlan: entered promiscuous mode [ 665.460956][T13228] veth1_vlan: entered promiscuous mode [ 665.479526][ T5331] m920x_read = error: -19 [ 665.479542][ T5331] dvb-usb: error while querying for an remote control event. [ 665.595688][ T5720] m920x_read = error: -19 [ 665.595706][ T5720] dvb-usb: error while querying for an remote control event. [ 665.714927][ T5331] m920x_read = error: -19 [ 665.714943][ T5331] dvb-usb: error while querying for an remote control event. [ 665.834182][ T5720] m920x_read = error: -19 [ 665.834199][ T5720] dvb-usb: error while querying for an remote control event. [ 665.866667][ T5598] Bluetooth: hci10: command tx timeout [ 665.954179][ T10] m920x_read = error: -19 [ 665.954196][ T10] dvb-usb: error while querying for an remote control event. [ 666.187946][ T5720] m920x_read = error: -19 [ 666.187963][ T5720] dvb-usb: error while querying for an remote control event. [ 666.304331][ T5720] m920x_read = error: -19 [ 666.304349][ T5720] dvb-usb: error while querying for an remote control event. [ 666.423785][ T5720] m920x_read = error: -19 [ 666.423804][ T5720] dvb-usb: error while querying for an remote control event. [ 666.495997][T13228] veth0_macvtap: entered promiscuous mode [ 666.499172][T13228] veth1_macvtap: entered promiscuous mode [ 666.534275][T13228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 666.538809][ T5713] m920x_read = error: -19 [ 666.538838][ T5713] dvb-usb: error while querying for an remote control event. [ 666.553276][T13228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 666.660403][ T5713] m920x_read = error: -19 [ 666.660419][ T5713] dvb-usb: error while querying for an remote control event. [ 666.661077][ T5978] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.666866][ T5978] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.700034][ T5977] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.700656][ T5977] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.709589][T13228] ieee80211 phy35: Selected rate control algorithm 'minstrel_ht' [ 666.783689][ T5743] m920x_read = error: -19 [ 666.783705][ T5743] dvb-usb: error while querying for an remote control event. [ 666.796122][ T5978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.796138][ T5978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.819648][T13228] ieee80211 phy36: Selected rate control algorithm 'minstrel_ht' [ 666.879070][ T29] audit: type=1400 audit(1787467260.072:1408): avc: denied { append } for pid=13323 comm="syz.5.1790" name="001" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 666.890195][ T5977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.890209][ T5977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.903867][ T5743] m920x_read = error: -19 [ 666.903882][ T5743] dvb-usb: error while querying for an remote control event. [ 667.021443][ T5331] m920x_read = error: -19 [ 667.021460][ T5331] dvb-usb: error while querying for an remote control event. [ 667.204582][ T5743] m920x_read = error: -19 [ 667.204600][ T5743] dvb-usb: error while querying for an remote control event. [ 667.405556][T13327] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1774'. [ 667.407630][ T5743] m920x_read = error: -19 [ 667.407643][ T5743] dvb-usb: error while querying for an remote control event. [ 667.525055][ T5331] m920x_read = error: -19 [ 667.525071][ T5331] dvb-usb: error while querying for an remote control event. [ 667.647815][ T5331] m920x_read = error: -19 [ 667.647830][ T5331] dvb-usb: error while querying for an remote control event. [ 667.763946][ T5331] m920x_read = error: -19 [ 667.763961][ T5331] dvb-usb: error while querying for an remote control event. [ 667.884937][ T5331] m920x_read = error: -19 [ 667.884986][ T5331] dvb-usb: error while querying for an remote control event. [ 668.020078][ T5331] m920x_read = error: -19 [ 668.020095][ T5331] dvb-usb: error while querying for an remote control event. [ 668.121055][ T5598] Bluetooth: hci10: command tx timeout [ 668.135521][ T5713] m920x_read = error: -19 [ 668.135536][ T5713] dvb-usb: error while querying for an remote control event. [ 668.254519][ T5331] m920x_read = error: -19 [ 668.254535][ T5331] dvb-usb: error while querying for an remote control event. [ 668.393781][ T5713] m920x_read = error: -19 [ 668.393798][ T5713] dvb-usb: error while querying for an remote control event. [ 668.511380][ T5713] m920x_read = error: -19 [ 668.511396][ T5713] dvb-usb: error while querying for an remote control event. [ 668.630666][ T10] m920x_read = error: -19 [ 668.630683][ T10] dvb-usb: error while querying for an remote control event. [ 668.749777][ T10] m920x_read = error: -19 [ 668.749793][ T10] dvb-usb: error while querying for an remote control event. [ 668.870195][ T5331] m920x_read = error: -19 [ 668.870211][ T5331] dvb-usb: error while querying for an remote control event. [ 668.994672][ T10] m920x_read = error: -19 [ 668.994689][ T10] dvb-usb: error while querying for an remote control event. [ 669.110576][ T10] m920x_read = error: -19 [ 669.110593][ T10] dvb-usb: error while querying for an remote control event. [ 669.228632][ T10] m920x_read = error: -19 [ 669.228647][ T10] dvb-usb: error while querying for an remote control event. [ 669.347574][ T5331] m920x_read = error: -19 [ 669.347590][ T5331] dvb-usb: error while querying for an remote control event. [ 669.465145][ T10] m920x_read = error: -19 [ 669.465161][ T10] dvb-usb: error while querying for an remote control event. [ 669.586713][ T10] m920x_read = error: -19 [ 669.586730][ T10] dvb-usb: error while querying for an remote control event. [ 669.703841][ T10] m920x_read = error: -19 [ 669.703857][ T10] dvb-usb: error while querying for an remote control event. [ 669.822519][ T10] m920x_read = error: -19 [ 669.822535][ T10] dvb-usb: error while querying for an remote control event. [ 669.832449][T13344] xt_hashlimit: size too large, truncated to 1048576 [ 669.937675][T13345] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.942634][ T10] m920x_read = error: -19 [ 669.942650][ T10] dvb-usb: error while querying for an remote control event. [ 670.046094][T13345] bridge_slave_0 (unregistering): left allmulticast mode [ 670.046114][T13345] bridge_slave_0 (unregistering): left promiscuous mode [ 670.046962][T13345] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.082495][ T10] m920x_read = error: -19 [ 670.082510][ T10] dvb-usb: error while querying for an remote control event. [ 670.102141][ T4916] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 670.115782][ T4916] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 670.116402][ T4916] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 670.117522][ T4916] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 670.117853][ T4916] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 670.202070][ T10] m920x_read = error: -19 [ 670.202095][ T10] dvb-usb: error while querying for an remote control event. [ 670.322102][ T5331] m920x_read = error: -19 [ 670.322119][ T5331] dvb-usb: error while querying for an remote control event. [ 670.495147][ T10] m920x_read = error: -19 [ 670.495163][ T10] dvb-usb: error while querying for an remote control event. [ 670.620424][ T5331] m920x_read = error: -19 [ 670.620440][ T5331] dvb-usb: error while querying for an remote control event. [ 670.732805][ T5743] m920x_read = error: -19 [ 670.732822][ T5743] dvb-usb: error while querying for an remote control event. [ 670.853144][ T5331] m920x_read = error: -19 [ 670.853160][ T5331] dvb-usb: error while querying for an remote control event. [ 670.975629][ T5331] m920x_read = error: -19 [ 670.975645][ T5331] dvb-usb: error while querying for an remote control event. [ 671.091170][ T5331] m920x_read = error: -19 [ 671.091186][ T5331] dvb-usb: error while querying for an remote control event. [ 671.209668][ T5331] m920x_read = error: -19 [ 671.209684][ T5331] dvb-usb: error while querying for an remote control event. [ 671.332047][ T5331] m920x_read = error: -19 [ 671.332063][ T5331] dvb-usb: error while querying for an remote control event. [ 671.395867][T13361] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 671.448768][ T10] m920x_read = error: -19 [ 671.448784][ T10] dvb-usb: error while querying for an remote control event. [ 671.569496][ T10] m920x_read = error: -19 [ 671.569511][ T10] dvb-usb: error while querying for an remote control event. [ 671.687813][ T5331] m920x_read = error: -19 [ 671.687830][ T5331] dvb-usb: error while querying for an remote control event. [ 671.805960][ T10] m920x_read = error: -19 [ 671.805978][ T10] dvb-usb: error while querying for an remote control event. [ 671.925367][ T10] m920x_read = error: -19 [ 671.925383][ T10] dvb-usb: error while querying for an remote control event. [ 672.044189][ T5331] m920x_read = error: -19 [ 672.044207][ T5331] dvb-usb: error while querying for an remote control event. [ 672.164095][ T5331] m920x_read = error: -19 [ 672.164114][ T5331] dvb-usb: error while querying for an remote control event. [ 672.283313][ T5743] m920x_read = error: -19 [ 672.283331][ T5743] dvb-usb: error while querying for an remote control event. [ 672.371622][ T5598] Bluetooth: hci11: command tx timeout [ 672.486988][ T5743] m920x_read = error: -19 [ 672.487006][ T5743] dvb-usb: error while querying for an remote control event. [ 672.602423][ T10] m920x_read = error: -19 [ 672.602452][ T10] dvb-usb: error while querying for an remote control event. [ 672.716559][ T10] m920x_read = error: -19 [ 672.716575][ T10] dvb-usb: error while querying for an remote control event. [ 672.835346][ T5743] m920x_read = error: -19 [ 672.835362][ T5743] dvb-usb: error while querying for an remote control event. [ 672.887890][T13347] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.887943][T13347] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.888041][T13347] bridge_slave_0: entered allmulticast mode [ 672.888921][T13347] bridge_slave_0: entered promiscuous mode [ 672.902978][T13347] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.904787][T13347] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.906443][T13347] bridge_slave_1: entered allmulticast mode [ 672.912231][T13347] bridge_slave_1: entered promiscuous mode [ 672.967365][ T10] m920x_read = error: -19 [ 672.967383][ T10] dvb-usb: error while querying for an remote control event. [ 673.028612][T13347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 673.042023][T13347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 673.051690][T13366] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 673.053368][T13366] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 673.053658][T13366] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 673.053996][T13366] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 673.055308][T13366] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 673.055616][T13366] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 673.055907][T13366] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 673.056270][T13366] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 673.056602][T13366] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 673.056900][T13366] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 673.087610][ T5743] m920x_read = error: -19 [ 673.087635][ T5743] dvb-usb: error while querying for an remote control event. [ 673.170114][T13366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24937 sclass=netlink_route_socket pid=13366 comm=syz.5.1797 [ 673.171631][T13347] team0: Port device team_slave_0 added [ 673.181047][T13347] team0: Port device team_slave_1 added [ 673.203962][ T5743] m920x_read = error: -19 [ 673.203977][ T5743] dvb-usb: error while querying for an remote control event. [ 673.271812][T13347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 673.271825][T13347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.271840][T13347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 673.277556][T13347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 673.277567][T13347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.277582][T13347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 673.323625][ T10] m920x_read = error: -19 [ 673.323640][ T10] dvb-usb: error while querying for an remote control event. [ 673.442242][ T10] m920x_read = error: -19 [ 673.442258][ T10] dvb-usb: error while querying for an remote control event. [ 673.452251][T13347] hsr_slave_0: entered promiscuous mode [ 673.462116][T13347] hsr_slave_1: entered promiscuous mode [ 673.462455][T13347] debugfs: 'hsr0' already exists in 'hsr' [ 673.462468][T13347] Cannot create hsr debugfs directory [ 673.561542][ T5743] m920x_read = error: -19 [ 673.561558][ T5743] dvb-usb: error while querying for an remote control event. [ 673.685480][ T5743] m920x_read = error: -19 [ 673.685495][ T5743] dvb-usb: error while querying for an remote control event. [ 673.737852][T13371] Cannot find set identified by id 0 to match [ 673.800760][ T5743] m920x_read = error: -19 [ 673.800775][ T5743] dvb-usb: error while querying for an remote control event. [ 673.919730][ T5331] m920x_read = error: -19 [ 673.919746][ T5331] dvb-usb: error while querying for an remote control event. [ 674.032339][ T10] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 674.039247][ T5331] m920x_read = error: -19 [ 674.039262][ T5331] dvb-usb: error while querying for an remote control event. [ 674.158506][ T5331] m920x_read = error: -19 [ 674.158522][ T5331] dvb-usb: error while querying for an remote control event. [ 674.234538][ T10] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 674.245829][ T10] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 674.245848][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 674.255669][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 674.255688][ T10] usb 6-1: SerialNumber: syz [ 674.257488][T13347] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.276938][ T5331] m920x_read = error: -19 [ 674.276954][ T5331] dvb-usb: error while querying for an remote control event. [ 674.402789][ T5713] m920x_read = error: -19 [ 674.402805][ T5713] dvb-usb: error while querying for an remote control event. [ 674.512269][T13371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.512554][T13371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.515228][ T5331] m920x_read = error: -19 [ 674.515242][ T5331] dvb-usb: error while querying for an remote control event. [ 674.639574][ T5331] m920x_read = error: -19 [ 674.639597][ T5331] dvb-usb: error while querying for an remote control event. [ 674.641319][ T5598] Bluetooth: hci11: command tx timeout [ 674.688187][T13347] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.757294][ T5713] m920x_read = error: -19 [ 674.757317][ T5713] dvb-usb: error while querying for an remote control event. [ 674.761034][T13371] netlink: 'syz.5.1798': attribute type 10 has an invalid length. [ 674.761067][T13371] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1798'. [ 674.761179][T13371] team0: entered promiscuous mode [ 674.761211][T13371] team_slave_0: entered promiscuous mode [ 674.761319][T13371] team_slave_1: entered promiscuous mode [ 674.761424][T13371] team0: entered allmulticast mode [ 674.761433][T13371] team_slave_0: entered allmulticast mode [ 674.761443][T13371] team_slave_1: entered allmulticast mode [ 674.761884][T13371] bridge0: port 1(team0) entered blocking state [ 674.761931][T13371] bridge0: port 1(team0) entered disabled state [ 674.826472][T13371] bridge0: port 1(team0) entered blocking state [ 674.828085][T13371] bridge0: port 1(team0) entered forwarding state [ 674.878460][ T5331] m920x_read = error: -19 [ 674.878477][ T5331] dvb-usb: error while querying for an remote control event. [ 674.902354][ T10] usb 6-1: invalid UAC_HEADER (v1) [ 674.969351][T13347] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.014006][ T5331] m920x_read = error: -19 [ 675.014023][ T5331] dvb-usb: error while querying for an remote control event. [ 675.069275][ T10] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 675.124690][ T10] usb 6-1: USB disconnect, device number 19 [ 675.138810][ T5713] m920x_read = error: -19 [ 675.138827][ T5713] dvb-usb: error while querying for an remote control event. [ 675.172529][ T5608] udevd[5608]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 675.195970][T13347] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.259784][ T5331] m920x_read = error: -19 [ 675.259800][ T5331] dvb-usb: error while querying for an remote control event. [ 675.372563][ T10] m920x_read = error: -19 [ 675.372580][ T10] dvb-usb: error while querying for an remote control event. [ 675.492537][ T10] m920x_read = error: -19 [ 675.492553][ T10] dvb-usb: error while querying for an remote control event. [ 675.610703][ T5713] m920x_read = error: -19 [ 675.610720][ T5713] dvb-usb: error while querying for an remote control event. [ 675.729043][ T10] m920x_read = error: -19 [ 675.729059][ T10] dvb-usb: error while querying for an remote control event. [ 675.852395][ T5331] m920x_read = error: -19 [ 675.852412][ T5331] dvb-usb: error while querying for an remote control event. [ 675.976485][ T5331] m920x_read = error: -19 [ 675.976502][ T5331] dvb-usb: error while querying for an remote control event. [ 676.073310][T13347] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 676.087405][ T5331] m920x_read = error: -19 [ 676.087420][ T5331] dvb-usb: error while querying for an remote control event. [ 676.089260][T13347] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 676.089708][T13347] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 676.094856][T13347] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 676.095521][T13347] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 676.123208][T13347] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 676.123972][T13347] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 676.133727][T13347] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 676.206857][ T5713] m920x_read = error: -19 [ 676.206873][ T5713] dvb-usb: error while querying for an remote control event. [ 676.325575][ T5713] m920x_read = error: -19 [ 676.325592][ T5713] dvb-usb: error while querying for an remote control event. [ 676.356528][T13347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 676.389760][T13347] 8021q: adding VLAN 0 to HW filter on device team0 [ 676.897640][ T5713] m920x_read = error: -19 [ 676.897658][ T5713] dvb-usb: error while querying for an remote control event. [ 676.899070][T12802] Bluetooth: hci11: command tx timeout [ 676.936460][ T5977] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.936518][ T5977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 676.939684][ T5977] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.939736][ T5977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 677.011804][ T5743] m920x_read = error: -19 [ 677.011820][ T5743] dvb-usb: error while querying for an remote control event. [ 677.127239][ T9] m920x_read = error: -19 [ 677.127255][ T9] dvb-usb: error while querying for an remote control event. [ 677.246742][ T9] m920x_read = error: -19 [ 677.246758][ T9] dvb-usb: error while querying for an remote control event. [ 677.365637][ T5713] m920x_read = error: -19 [ 677.365653][ T5713] dvb-usb: error while querying for an remote control event. [ 677.404705][ T4916] Bluetooth: hci6: command 0x0406 tx timeout [ 677.498854][ T5713] m920x_read = error: -19 [ 677.498871][ T5713] dvb-usb: error while querying for an remote control event. [ 677.616969][ T5713] m920x_read = error: -19 [ 677.616986][ T5713] dvb-usb: error while querying for an remote control event. [ 677.734407][ T5713] m920x_read = error: -19 [ 677.734423][ T5713] dvb-usb: error while querying for an remote control event. [ 677.855240][ T9] m920x_read = error: -19 [ 677.855256][ T9] dvb-usb: error while querying for an remote control event. [ 677.982857][ T5713] m920x_read = error: -19 [ 677.982875][ T5713] dvb-usb: error while querying for an remote control event. [ 678.108321][ T5331] m920x_read = error: -19 [ 678.108337][ T5331] dvb-usb: error while querying for an remote control event. [ 678.221738][ T9] m920x_read = error: -19 [ 678.221755][ T9] dvb-usb: error while querying for an remote control event. [ 678.331173][ T4916] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 678.340480][ T4916] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 678.341253][ T5331] m920x_read = error: -19 [ 678.341266][ T5331] dvb-usb: error while querying for an remote control event. [ 678.341673][ T4916] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 678.342161][ T4916] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 678.342458][ T4916] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 678.460370][ T5331] m920x_read = error: -19 [ 678.460388][ T5331] dvb-usb: error while querying for an remote control event. [ 678.579386][ T5331] m920x_read = error: -19 [ 678.579403][ T5331] dvb-usb: error while querying for an remote control event. [ 678.710821][ T5331] m920x_read = error: -19 [ 678.710838][ T5331] dvb-usb: error while querying for an remote control event. [ 678.784116][ T5979] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.829345][ T5331] m920x_read = error: -19 [ 678.829363][ T5331] dvb-usb: error while querying for an remote control event. [ 678.930962][T13347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 678.947895][ T10] m920x_read = error: -19 [ 678.947910][ T10] dvb-usb: error while querying for an remote control event. [ 679.072395][ T9] m920x_read = error: -19 [ 679.072412][ T9] dvb-usb: error while querying for an remote control event. [ 679.087307][ T29] audit: type=1400 audit(1787467271.329:1409): avc: denied { append } for pid=13401 comm="syz.5.1801" name="sysname" dev="proc" ino=4026533934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 679.133148][ T4916] Bluetooth: hci11: command tx timeout [ 679.188271][ T9] m920x_read = error: -19 [ 679.188288][ T9] dvb-usb: error while querying for an remote control event. [ 679.192228][ T29] audit: type=1400 audit(1787467271.430:1410): avc: denied { mounton } for pid=13401 comm="syz.5.1801" path="/16/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 679.287002][ T5979] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.309122][ T9] m920x_read = error: -19 [ 679.309138][ T9] dvb-usb: error while querying for an remote control event. [ 679.338894][ T5598] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 679.348244][ T5598] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 679.349687][ T5598] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 679.351074][ T5598] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 679.351357][ T5598] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 679.426566][ T9] m920x_read = error: -19 [ 679.426583][ T9] dvb-usb: error while querying for an remote control event. [ 679.561116][ T9] m920x_read = error: -19 [ 679.561133][ T9] dvb-usb: error while querying for an remote control event. [ 679.615671][ T5979] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.674156][ T9] m920x_read = error: -19 [ 679.674171][ T9] dvb-usb: error while querying for an remote control event. [ 679.793174][ T5331] m920x_read = error: -19 [ 679.793190][ T5331] dvb-usb: error while querying for an remote control event. [ 680.006157][ T5331] m920x_read = error: -19 [ 680.006173][ T5331] dvb-usb: error while querying for an remote control event. [ 680.119279][ T9] m920x_read = error: -19 [ 680.119296][ T9] dvb-usb: error while querying for an remote control event. [ 680.160488][ T5979] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.238799][ T9] m920x_read = error: -19 [ 680.238815][ T9] dvb-usb: error while querying for an remote control event. [ 680.357378][ T10] m920x_read = error: -19 [ 680.357393][ T10] dvb-usb: error while querying for an remote control event. [ 680.393731][T13347] veth0_vlan: entered promiscuous mode [ 680.413929][T13347] veth1_vlan: entered promiscuous mode [ 680.477372][ T5743] m920x_read = error: -19 [ 680.477387][ T5743] dvb-usb: error while querying for an remote control event. [ 680.519830][ T5598] Bluetooth: hci2: command tx timeout [ 680.596388][ T5743] m920x_read = error: -19 [ 680.596404][ T5743] dvb-usb: error while querying for an remote control event. [ 680.714480][ T5743] m920x_read = error: -19 [ 680.714497][ T5743] dvb-usb: error while querying for an remote control event. [ 680.833903][T13347] veth0_macvtap: entered promiscuous mode [ 680.836711][ T5743] m920x_read = error: -19 [ 680.836724][ T5743] dvb-usb: error while querying for an remote control event. [ 680.886039][T13347] veth1_macvtap: entered promiscuous mode [ 680.954296][ T9] m920x_read = error: -19 [ 680.954311][ T9] dvb-usb: error while querying for an remote control event. [ 681.073079][ T9] m920x_read = error: -19 [ 681.073095][ T9] dvb-usb: error while querying for an remote control event. [ 681.161545][T13437] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 681.192014][ T10] m920x_read = error: -19 [ 681.192029][ T10] dvb-usb: error while querying for an remote control event. [ 681.259305][T13347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 681.310611][ T9] m920x_read = error: -19 [ 681.310627][ T9] dvb-usb: error while querying for an remote control event. [ 681.378827][ T5979] bridge_slave_1: left allmulticast mode [ 681.378846][ T5979] bridge_slave_1: left promiscuous mode [ 681.378967][ T5979] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.385215][ T5979] bridge_slave_0: left allmulticast mode [ 681.385233][ T5979] bridge_slave_0: left promiscuous mode [ 681.385337][ T5979] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.430525][ T5713] m920x_read = error: -19 [ 681.430541][ T5713] dvb-usb: error while querying for an remote control event. [ 681.552394][ T10] m920x_read = error: -19 [ 681.552410][ T10] dvb-usb: error while querying for an remote control event. [ 681.561865][ T5598] Bluetooth: hci12: command tx timeout [ 681.668880][ T10] m920x_read = error: -19 [ 681.668896][ T10] dvb-usb: error while querying for an remote control event. [ 681.789391][ T5721] m920x_read = error: -19 [ 681.789406][ T5721] dvb-usb: error while querying for an remote control event. [ 681.907957][ T10] m920x_read = error: -19 [ 681.907973][ T10] dvb-usb: error while querying for an remote control event. [ 681.947915][ T29] audit: type=1400 audit(1787467273.968:1411): avc: denied { write } for pid=13438 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 682.028680][ T5721] m920x_read = error: -19 [ 682.028697][ T5721] dvb-usb: error while querying for an remote control event. [ 682.145448][ T5721] m920x_read = error: -19 [ 682.145465][ T5721] dvb-usb: error while querying for an remote control event. [ 682.154301][ T5979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 682.158941][ T29] audit: type=1400 audit(1787467274.171:1412): avc: denied { write } for pid=13453 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 682.160638][ T5979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 682.163091][ T5979] bond0 (unregistering): Released all slaves [ 682.206477][T13347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 682.265759][ T10] m920x_read = error: -19 [ 682.265775][ T10] dvb-usb: error while querying for an remote control event. [ 682.318552][ T3338] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.318966][ T3338] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.318987][ T3338] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.319008][ T3338] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.385553][ T5713] m920x_read = error: -19 [ 682.385574][ T5713] dvb-usb: error while querying for an remote control event. [ 682.486877][ T5260] 8021q: adding VLAN 0 to HW filter on device eth5 [ 682.502628][ T5713] m920x_read = error: -19 [ 682.502643][ T5713] dvb-usb: error while querying for an remote control event. [ 682.623986][ T5721] m920x_read = error: -19 [ 682.624002][ T5721] dvb-usb: error while querying for an remote control event. [ 682.743209][ T5721] m920x_read = error: -19 [ 682.743224][ T5721] dvb-usb: error while querying for an remote control event. [ 682.778472][ T5598] Bluetooth: hci2: command tx timeout [ 682.867923][ T10] m920x_read = error: -19 [ 682.867938][ T10] dvb-usb: error while querying for an remote control event. [ 682.956021][ T5598] Bluetooth: hci7: command 0x0406 tx timeout [ 682.985661][ T10] m920x_read = error: -19 [ 682.985678][ T10] dvb-usb: error while querying for an remote control event. [ 683.074492][ T5979] hsr_slave_0: left promiscuous mode [ 683.077999][ T5979] hsr_slave_1: left promiscuous mode [ 683.078450][ T5979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 683.078463][ T5979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 683.078855][ T5979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 683.078866][ T5979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 683.098065][ T5979] veth1_macvtap: left promiscuous mode [ 683.098089][ T5979] veth0_macvtap: left promiscuous mode [ 683.098139][ T5979] veth1_vlan: left promiscuous mode [ 683.098173][ T5979] veth0_vlan: left promiscuous mode [ 683.100234][ T5743] m920x_read = error: -19 [ 683.100247][ T5743] dvb-usb: error while querying for an remote control event. [ 683.221189][ T10] m920x_read = error: -19 [ 683.221205][ T10] dvb-usb: error while querying for an remote control event. [ 683.338284][ T10] m920x_read = error: -19 [ 683.338301][ T10] dvb-usb: error while querying for an remote control event. [ 683.457368][ T10] m920x_read = error: -19 [ 683.457385][ T10] dvb-usb: error while querying for an remote control event. [ 683.576397][ T5743] m920x_read = error: -19 [ 683.576413][ T5743] dvb-usb: error while querying for an remote control event. [ 683.695836][ T10] m920x_read = error: -19 [ 683.695852][ T10] dvb-usb: error while querying for an remote control event. [ 683.699836][ T5979] team0 (unregistering): Port device team_slave_1 removed [ 683.719909][ T5979] team0 (unregistering): Port device team_slave_0 removed [ 683.817000][ T4916] Bluetooth: hci12: command tx timeout [ 683.817095][ T10] m920x_read = error: -19 [ 683.817107][ T10] dvb-usb: error while querying for an remote control event. [ 683.934699][ T10] m920x_read = error: -19 [ 683.934715][ T10] dvb-usb: error while querying for an remote control event. [ 683.952623][T13347] ieee80211 phy37: Selected rate control algorithm 'minstrel_ht' [ 684.007034][T13395] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.007093][T13395] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.007179][T13395] bridge_slave_0: entered allmulticast mode [ 684.008015][T13395] bridge_slave_0: entered promiscuous mode [ 684.053907][ T9] m920x_read = error: -19 [ 684.053923][ T9] dvb-usb: error while querying for an remote control event. [ 684.151711][T13395] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.151763][T13395] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.151865][T13395] bridge_slave_1: entered allmulticast mode [ 684.154495][T13395] bridge_slave_1: entered promiscuous mode [ 684.173857][ T5743] m920x_read = error: -19 [ 684.173875][ T5743] dvb-usb: error while querying for an remote control event. [ 684.241078][ T3338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.241093][ T3338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.291007][ T5743] m920x_read = error: -19 [ 684.291022][ T5743] dvb-usb: error while querying for an remote control event. [ 684.326212][T13395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.333769][T13468] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 684.339146][T13347] ieee80211 phy38: Selected rate control algorithm 'minstrel_ht' [ 684.365487][T13395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.411000][ T5743] m920x_read = error: -19 [ 684.411016][ T5743] dvb-usb: error while querying for an remote control event. [ 684.532664][ T5743] m920x_read = error: -19 [ 684.532680][ T5743] dvb-usb: error while querying for an remote control event. [ 684.570472][T13395] team0: Port device team_slave_0 added [ 684.577712][T13395] team0: Port device team_slave_1 added [ 684.621333][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.621348][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.624527][T13474] 9p: Bad value for 'rfdno' [ 684.648485][ T10] m920x_read = error: -19 [ 684.648500][ T10] dvb-usb: error while querying for an remote control event. [ 684.769191][ T10] m920x_read = error: -19 [ 684.769207][ T10] dvb-usb: error while querying for an remote control event. [ 684.818207][T13395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.818221][T13395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.818236][T13395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.819366][T13395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.819377][T13395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.819392][T13395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.893197][ T5721] m920x_read = error: -19 [ 684.893213][ T5721] dvb-usb: error while querying for an remote control event. [ 685.073298][ T5721] m920x_read = error: -19 [ 685.073317][ T5721] dvb-usb: error while querying for an remote control event. [ 685.074969][ T4916] Bluetooth: hci2: command tx timeout [ 685.191335][ T9] m920x_read = error: -19 [ 685.191351][ T9] dvb-usb: error while querying for an remote control event. [ 685.207549][T13484] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 685.207823][ T29] audit: type=1400 audit(1787467276.985:1413): avc: denied { mounton } for pid=13483 comm="syz.5.1811" path="/23/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 685.258391][T13395] hsr_slave_0: entered promiscuous mode [ 685.258896][T13395] hsr_slave_1: entered promiscuous mode [ 685.259233][T13395] debugfs: 'hsr0' already exists in 'hsr' [ 685.259246][T13395] Cannot create hsr debugfs directory [ 685.287459][ T29] audit: type=1400 audit(1787467277.049:1414): avc: denied { write } for pid=13464 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 685.309767][ T5743] m920x_read = error: -19 [ 685.309783][ T5743] dvb-usb: error while querying for an remote control event. [ 685.340903][T13407] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.340956][T13407] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.341054][T13407] bridge_slave_0: entered allmulticast mode [ 685.343582][T13407] bridge_slave_0: entered promiscuous mode [ 685.412957][T13407] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.413007][T13407] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.413107][T13407] bridge_slave_1: entered allmulticast mode [ 685.413938][T13407] bridge_slave_1: entered promiscuous mode [ 685.429936][ T5743] m920x_read = error: -19 [ 685.429952][ T5743] dvb-usb: error while querying for an remote control event. [ 685.584538][ T5743] m920x_read = error: -19 [ 685.584556][ T5743] dvb-usb: error while querying for an remote control event. [ 685.700103][ T5743] m920x_read = error: -19 [ 685.700119][ T5743] dvb-usb: error while querying for an remote control event. [ 685.726762][ T5598] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 685.730851][ T5598] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 685.731507][ T5598] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 685.731953][ T5598] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 685.736707][ T5598] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 685.774424][ T29] audit: type=1400 audit(1787467277.501:1415): avc: denied { write } for pid=13493 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 685.821991][ T5721] m920x_read = error: -19 [ 685.822007][ T5721] dvb-usb: error while querying for an remote control event. [ 685.935504][T13407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 685.948315][ T5721] m920x_read = error: -19 [ 685.948332][ T5721] dvb-usb: error while querying for an remote control event. [ 686.088731][ T5598] Bluetooth: hci12: command tx timeout [ 686.089168][ T5721] m920x_read = error: -19 [ 686.089181][ T5721] dvb-usb: error while querying for an remote control event. [ 686.170749][ T5979] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.199900][ T5721] m920x_read = error: -19 [ 686.199918][ T5721] dvb-usb: error while querying for an remote control event. [ 686.294920][T13407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 686.309224][ T5260] 8021q: adding VLAN 0 to HW filter on device eth6 [ 686.319055][ T10] m920x_read = error: -19 [ 686.319070][ T10] dvb-usb: error while querying for an remote control event. [ 686.440757][ T5721] m920x_read = error: -19 [ 686.440774][ T5721] dvb-usb: error while querying for an remote control event. [ 686.494898][ T5979] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.558305][ T10] m920x_read = error: -19 [ 686.558322][ T10] dvb-usb: error while querying for an remote control event. [ 686.596364][T13407] team0: Port device team_slave_0 added [ 686.602257][T13407] team0: Port device team_slave_1 added [ 686.661268][T13506] FAULT_INJECTION: forcing a failure. [ 686.661268][T13506] name failslab, interval 1, probability 0, space 0, times 0 [ 686.661291][T13506] CPU: 0 UID: 0 PID: 13506 Comm: syz.5.1812 Not tainted syzkaller #0 PREEMPT(full) [ 686.661305][T13506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 686.661312][T13506] Call Trace: [ 686.661316][T13506] [ 686.661321][T13506] dump_stack_lvl+0x100/0x190 [ 686.661343][T13506] should_fail_ex.cold+0x5/0xa [ 686.661359][T13506] should_failslab+0xc2/0x120 [ 686.661371][T13506] __kmalloc_noprof+0xfc/0x820 [ 686.661389][T13506] ? tomoyo_encode2+0xfb/0x3c0 [ 686.661404][T13506] tomoyo_encode2+0xfb/0x3c0 [ 686.661418][T13506] tomoyo_encode+0x29/0x50 [ 686.661428][T13506] tomoyo_realpath_from_path+0x18c/0x690 [ 686.661443][T13506] tomoyo_path_number_perm+0x23c/0x580 [ 686.661459][T13506] ? tomoyo_path_number_perm+0x22e/0x580 [ 686.661476][T13506] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 686.661508][T13506] ? find_held_lock+0x2b/0x80 [ 686.661523][T13506] ? hook_file_ioctl_common+0x140/0x440 [ 686.661539][T13506] ? __fget_files+0x21f/0x3d0 [ 686.661560][T13506] security_file_ioctl+0xd3/0x230 [ 686.661578][T13506] __x64_sys_ioctl+0xb7/0x210 [ 686.661594][T13506] do_syscall_64+0x123/0x790 [ 686.661613][T13506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.661626][T13506] RIP: 0033:0x7fb0e439e0d9 [ 686.661636][T13506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 686.661647][T13506] RSP: 002b:00007fb0e5260028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 686.661658][T13506] RAX: ffffffffffffffda RBX: 00007fb0e4625fa0 RCX: 00007fb0e439e0d9 [ 686.661666][T13506] RDX: 0000200000000200 RSI: 00000000c0845657 RDI: 0000000000000003 [ 686.661673][T13506] RBP: 00007fb0e5260090 R08: 0000000000000000 R09: 0000000000000000 [ 686.661680][T13506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 686.661687][T13506] R13: 00007fb0e4626038 R14: 00007fb0e4625fa0 R15: 00007ffc5b176788 [ 686.661703][T13506] [ 686.661717][T13506] ERROR: Out of memory at tomoyo_realpath_from_path. [ 686.675749][ T10] m920x_read = error: -19 [ 686.675764][ T10] dvb-usb: error while querying for an remote control event. [ 686.782295][T13509] sd 0:0:1:0: PR command failed: 1026 [ 686.782337][T13509] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 686.782361][T13509] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 686.794596][ T10] m920x_read = error: -19 [ 686.794610][ T10] dvb-usb: error while querying for an remote control event. [ 686.812797][ T5979] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.920670][ T10] m920x_read = error: -19 [ 686.920686][ T10] dvb-usb: error while querying for an remote control event. [ 686.947627][T13407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 686.947641][T13407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 686.947656][T13407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 686.963691][T13407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 686.963704][T13407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 686.963719][T13407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 686.989013][T13512] FAULT_INJECTION: forcing a failure. [ 686.989013][T13512] name failslab, interval 1, probability 0, space 0, times 0 [ 686.989035][T13512] CPU: 0 UID: 0 PID: 13512 Comm: syz.5.1814 Not tainted syzkaller #0 PREEMPT(full) [ 686.989049][T13512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 686.989057][T13512] Call Trace: [ 686.989061][T13512] [ 686.989066][T13512] dump_stack_lvl+0x100/0x190 [ 686.989086][T13512] should_fail_ex.cold+0x5/0xa [ 686.989100][T13512] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 686.989115][T13512] should_failslab+0xc2/0x120 [ 686.989126][T13512] kmem_cache_alloc_noprof+0x91/0x6a0 [ 686.989144][T13512] ? skb_clone+0x190/0x400 [ 686.989165][T13512] skb_clone+0x190/0x400 [ 686.989181][T13512] netlink_deliver_tap+0xaed/0xcc0 [ 686.989199][T13512] netlink_unicast+0x62b/0x850 [ 686.989216][T13512] ? __pfx_netlink_unicast+0x10/0x10 [ 686.989234][T13512] netlink_sendmsg+0x8b0/0xda0 [ 686.989251][T13512] ? __pfx_netlink_sendmsg+0x10/0x10 [ 686.989267][T13512] ? selinux_socket_sendmsg+0x198/0x2f0 [ 686.989287][T13512] ____sys_sendmsg+0xa4d/0xbe0 [ 686.989298][T13512] ? __pfx_netlink_sendmsg+0x10/0x10 [ 686.989314][T13512] ? __pfx_____sys_sendmsg+0x10/0x10 [ 686.989333][T13512] ___sys_sendmsg+0x190/0x1e0 [ 686.989347][T13512] ? __pfx____sys_sendmsg+0x10/0x10 [ 686.989360][T13512] ? get_pid_task+0x106/0x250 [ 686.989381][T13512] ? find_held_lock+0x2b/0x80 [ 686.989405][T13512] __sys_sendmsg+0x160/0x210 [ 686.989421][T13512] ? __pfx___sys_sendmsg+0x10/0x10 [ 686.989446][T13512] do_syscall_64+0x123/0x790 [ 686.989465][T13512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.989478][T13512] RIP: 0033:0x7fb0e439e0d9 [ 686.989488][T13512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 686.989499][T13512] RSP: 002b:00007fb0e5260028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 686.989511][T13512] RAX: ffffffffffffffda RBX: 00007fb0e4625fa0 RCX: 00007fb0e439e0d9 [ 686.989519][T13512] RDX: 0000000000000804 RSI: 0000200000000540 RDI: 0000000000000003 [ 686.989526][T13512] RBP: 00007fb0e5260090 R08: 0000000000000000 R09: 0000000000000000 [ 686.989533][T13512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 686.989540][T13512] R13: 00007fb0e4626038 R14: 00007fb0e4625fa0 R15: 00007ffc5b176788 [ 686.989556][T13512] [ 687.046503][ T5721] m920x_read = error: -19 [ 687.046520][ T5721] dvb-usb: error while querying for an remote control event. [ 687.138430][ T5979] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.162931][ T5721] m920x_read = error: -19 [ 687.162947][ T5721] dvb-usb: error while querying for an remote control event. [ 687.283172][ T5721] m920x_read = error: -19 [ 687.283188][ T5721] dvb-usb: error while querying for an remote control event. [ 687.283426][ T5598] Bluetooth: hci2: command tx timeout [ 687.401345][ T5721] m920x_read = error: -19 [ 687.401361][ T5721] dvb-usb: error while querying for an remote control event. [ 687.554535][ T9] m920x_read = error: -19 [ 687.554552][ T9] dvb-usb: error while querying for an remote control event. [ 687.685026][ T5721] m920x_read = error: -19 [ 687.685043][ T5721] dvb-usb: error while querying for an remote control event. [ 687.818967][ T9] m920x_read = error: -19 [ 687.818984][ T9] dvb-usb: error while querying for an remote control event. [ 687.952738][ T9] m920x_read = error: -19 [ 687.975641][ T5598] Bluetooth: hci8: command tx timeout [ 688.227881][ T9] dvb-usb: error while querying for an remote control event. [ 688.322845][ T5598] Bluetooth: hci12: command tx timeout [ 688.471878][ T9] m920x_read = error: -19 [ 688.471895][ T9] dvb-usb: error while querying for an remote control event. [ 688.516250][T13395] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.584173][ T10] m920x_read = error: -19 [ 688.584191][ T10] dvb-usb: error while querying for an remote control event. [ 688.703975][ T10] m920x_read = error: -19 [ 688.703991][ T10] dvb-usb: error while querying for an remote control event. [ 688.816983][T13407] hsr_slave_0: entered promiscuous mode [ 688.819434][T13407] hsr_slave_1: entered promiscuous mode [ 688.819760][T13407] debugfs: 'hsr0' already exists in 'hsr' [ 688.819782][T13407] Cannot create hsr debugfs directory [ 688.822456][ T5721] m920x_read = error: -19 [ 688.822469][ T5721] dvb-usb: error while querying for an remote control event. [ 689.535823][ T5721] m920x_read = error: -19 [ 689.535842][ T5721] dvb-usb: error while querying for an remote control event. [ 689.564800][ T29] audit: type=1400 audit(1787467280.999:1416): avc: denied { write } for pid=13517 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 689.646899][ T5721] m920x_read = error: -19 [ 689.646915][ T5721] dvb-usb: error while querying for an remote control event. [ 689.764047][ T5743] m920x_read = error: -19 [ 689.764064][ T5743] dvb-usb: error while querying for an remote control event. [ 689.784685][T13395] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.800336][ T29] audit: type=1400 audit(1787467281.220:1417): avc: denied { write } for pid=13539 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 689.883619][ T5743] m920x_read = error: -19 [ 689.883635][ T5743] dvb-usb: error while querying for an remote control event. [ 690.002436][ T5721] m920x_read = error: -19 [ 690.002451][ T5721] dvb-usb: error while querying for an remote control event. [ 690.122209][ T9] m920x_read = error: -19 [ 690.122226][ T9] dvb-usb: error while querying for an remote control event. [ 690.162617][T13395] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.192290][ T5260] 8021q: adding VLAN 0 to HW filter on device eth7 [ 690.230731][ T5598] Bluetooth: hci8: command tx timeout [ 690.241491][ T5721] m920x_read = error: -19 [ 690.241507][ T5721] dvb-usb: error while querying for an remote control event. [ 690.360655][ T5721] m920x_read = error: -19 [ 690.360671][ T5721] dvb-usb: error while querying for an remote control event. [ 690.411779][T13395] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.492899][ T5721] m920x_read = error: -19 [ 690.492926][ T5721] dvb-usb: error while querying for an remote control event. [ 690.525988][ T5979] bridge_slave_1: left allmulticast mode [ 690.526008][ T5979] bridge_slave_1: left promiscuous mode [ 690.526126][ T5979] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.527588][ T5979] bridge_slave_0: left allmulticast mode [ 690.527609][ T5979] bridge_slave_0: left promiscuous mode [ 690.527704][ T5979] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.610832][ T10] m920x_read = error: -19 [ 690.610849][ T10] dvb-usb: error while querying for an remote control event. [ 690.728761][ T10] m920x_read = error: -19 [ 690.728777][ T10] dvb-usb: error while querying for an remote control event. [ 690.847774][ T10] m920x_read = error: -19 [ 690.847790][ T10] dvb-usb: error while querying for an remote control event. [ 690.968914][ T5743] m920x_read = error: -19 [ 690.968941][ T5743] dvb-usb: error while querying for an remote control event. [ 691.087006][ T10] m920x_read = error: -19 [ 691.087023][ T10] dvb-usb: error while querying for an remote control event. [ 691.104465][ T5979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 691.105866][ T5979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 691.110732][ T5979] bond0 (unregistering): Released all slaves [ 691.207428][ T5743] m920x_read = error: -19 [ 691.207446][ T5743] dvb-usb: error while querying for an remote control event. [ 691.325190][ T5743] m920x_read = error: -19 [ 691.325208][ T5743] dvb-usb: error while querying for an remote control event. [ 691.443870][ T5743] m920x_read = error: -19 [ 691.443888][ T5743] dvb-usb: error while querying for an remote control event. [ 691.562907][ T10] m920x_read = error: -19 [ 691.562923][ T10] dvb-usb: error while querying for an remote control event. [ 691.682396][ T10] m920x_read = error: -19 [ 691.682414][ T10] dvb-usb: error while querying for an remote control event. [ 691.801380][ T5743] m920x_read = error: -19 [ 691.801407][ T5743] dvb-usb: error while querying for an remote control event. [ 692.068818][ T5743] m920x_read = error: -19 [ 692.068836][ T5743] dvb-usb: error while querying for an remote control event. [ 692.185186][ T9] m920x_read = error: -19 [ 692.185204][ T9] dvb-usb: error while querying for an remote control event. [ 692.239091][ T29] audit: type=1400 audit(1787467283.471:1418): avc: denied { write } for pid=13549 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 692.306696][ T5721] m920x_read = error: -19 [ 692.306714][ T5721] dvb-usb: error while querying for an remote control event. [ 692.421436][ T9] m920x_read = error: -19 [ 692.421456][ T9] dvb-usb: error while querying for an remote control event. [ 692.492297][ T5598] Bluetooth: hci8: command tx timeout [ 692.597134][ T5743] m920x_read = error: -19 [ 692.597151][ T5743] dvb-usb: error while querying for an remote control event. [ 692.627876][ T29] audit: type=1400 audit(1787467283.831:1419): avc: denied { write } for pid=13570 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 692.784179][ T29] audit: type=1400 audit(1787467283.970:1420): avc: denied { write } for pid=13569 comm="syz.5.1822" name="functions" dev="configfs" ino=17053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 692.784260][ T5743] m920x_read = error: -19 [ 692.784271][ T5743] dvb-usb: error while querying for an remote control event. [ 692.897359][ T5721] m920x_read = error: -19 [ 692.897383][ T5721] dvb-usb: error while querying for an remote control event. [ 692.971159][ T5260] 8021q: adding VLAN 0 to HW filter on device eth8 [ 692.989950][ T5979] hsr_slave_0: left promiscuous mode [ 692.991875][ T5979] hsr_slave_1: left promiscuous mode [ 692.992303][ T5979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 692.992316][ T5979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 692.992729][ T5979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 692.992740][ T5979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 693.001895][ T5979] veth1_macvtap: left promiscuous mode [ 693.001919][ T5979] veth0_macvtap: left promiscuous mode [ 693.003610][ T5979] veth1_vlan: left promiscuous mode [ 693.003651][ T5979] veth0_vlan: left promiscuous mode [ 693.021556][ T5721] m920x_read = error: -19 [ 693.021570][ T5721] dvb-usb: error while querying for an remote control event. [ 693.136847][ T5721] m920x_read = error: -19 [ 693.136863][ T5721] dvb-usb: error while querying for an remote control event. [ 693.255339][ T5721] m920x_read = error: -19 [ 693.255355][ T5721] dvb-usb: error while querying for an remote control event. [ 693.405050][ T5721] m920x_read = error: -19 [ 693.405067][ T5721] dvb-usb: error while querying for an remote control event. [ 693.447271][ T5979] team0 (unregistering): Port device team_slave_1 removed [ 693.463540][ T5979] team0 (unregistering): Port device team_slave_0 removed [ 693.517299][ T5721] m920x_read = error: -19 [ 693.517318][ T5721] dvb-usb: error while querying for an remote control event. [ 693.646099][ T5721] m920x_read = error: -19 [ 693.646127][ T5721] dvb-usb: error while querying for an remote control event. [ 693.779499][ T5721] m920x_read = error: -19 [ 693.779515][ T5721] dvb-usb: error while querying for an remote control event. [ 693.882857][T13395] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 693.896398][ T5721] m920x_read = error: -19 [ 693.896414][ T5721] dvb-usb: error while querying for an remote control event. [ 693.920414][T13395] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 693.935564][T13395] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 693.943697][T13395] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 693.944442][T13395] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 693.949780][T13395] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 694.009241][T13395] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 694.011119][T13395] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 694.014216][ T5721] m920x_read = error: -19 [ 694.014229][ T5721] dvb-usb: error while querying for an remote control event. [ 694.114532][T13494] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.114587][T13494] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.114683][T13494] bridge_slave_0: entered allmulticast mode [ 694.115494][T13494] bridge_slave_0: entered promiscuous mode [ 694.133216][ T5743] m920x_read = error: -19 [ 694.133231][ T5743] dvb-usb: error while querying for an remote control event. [ 694.251215][ T5721] m920x_read = error: -19 [ 694.251234][ T5721] dvb-usb: error while querying for an remote control event. [ 694.372368][ T5720] m920x_read = error: -19 [ 694.372383][ T5720] dvb-usb: error while querying for an remote control event. [ 694.489194][ T5720] m920x_read = error: -19 [ 694.489210][ T5720] dvb-usb: error while querying for an remote control event. [ 694.496676][T13494] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.496728][T13494] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.496832][T13494] bridge_slave_1: entered allmulticast mode [ 694.497671][T13494] bridge_slave_1: entered promiscuous mode [ 694.569590][T13494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 694.609503][ T5721] m920x_read = error: -19 [ 694.609518][ T5721] dvb-usb: error while querying for an remote control event. [ 694.727838][ T5743] m920x_read = error: -19 [ 694.727854][ T5743] dvb-usb: error while querying for an remote control event. [ 694.737438][ T29] audit: type=1400 audit(1787467285.769:1421): avc: denied { write } for pid=13590 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 694.740271][ T4916] Bluetooth: hci8: command tx timeout [ 694.753035][T13494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 694.858254][ T5720] m920x_read = error: -19 [ 694.858271][ T5720] dvb-usb: error while querying for an remote control event. [ 694.879689][ T5721] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 694.898330][ T29] audit: type=1400 audit(1787467285.926:1422): avc: denied { write } for pid=13606 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 694.981200][ T5713] m920x_read = error: -19 [ 694.981215][ T5713] dvb-usb: error while querying for an remote control event. [ 695.045714][ T5260] 8021q: adding VLAN 0 to HW filter on device eth9 [ 695.053212][ T5721] usb 6-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 0.00 [ 695.055677][T13494] team0: Port device team_slave_0 added [ 695.057920][ T5721] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.057937][ T5721] usb 6-1: Product: syz [ 695.057947][ T5721] usb 6-1: Manufacturer: syz [ 695.057957][ T5721] usb 6-1: SerialNumber: syz [ 695.097068][ T5720] m920x_read = error: -19 [ 695.097084][ T5720] dvb-usb: error while querying for an remote control event. [ 695.199418][T13494] team0: Port device team_slave_1 added [ 695.215994][ T5720] m920x_read = error: -19 [ 695.216008][ T5720] dvb-usb: error while querying for an remote control event. [ 695.291779][ T5721] kalmia 6-1:1.0 (unnamed net_device) (uninitialized): Did not send all of init packet. Bytes sent: 0 [ 695.295500][T13494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 695.295511][T13494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.295527][T13494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 695.300008][ T5721] kalmia 6-1:1.0 (unnamed net_device) (uninitialized): Unexpected init result length: 0 [ 695.336589][ T5743] m920x_read = error: -19 [ 695.336617][ T5743] dvb-usb: error while querying for an remote control event. [ 695.366733][T13494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 695.366746][T13494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.366762][T13494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 695.453784][ T5331] m920x_read = error: -19 [ 695.453800][ T5331] dvb-usb: error while querying for an remote control event. [ 695.525927][ T5721] kalmia 6-1:1.0 (unnamed net_device) (uninitialized): Did not send all of init packet. Bytes sent: 0 [ 695.575154][ T5713] m920x_read = error: -19 [ 695.575170][ T5713] dvb-usb: error while querying for an remote control event. [ 695.690365][ T5721] kalmia 6-1:1.0 wwan0: register 'kalmia' at usb-dummy_hcd.5-1, Samsung Kalmia LTE USB dongle, 00:00:01:02:03:04 [ 695.692326][ T5331] m920x_read = error: -19 [ 695.692340][ T5331] dvb-usb: error while querying for an remote control event. [ 695.798765][T13494] hsr_slave_0: entered promiscuous mode [ 695.799282][T13494] hsr_slave_1: entered promiscuous mode [ 695.799617][T13494] debugfs: 'hsr0' already exists in 'hsr' [ 695.799629][T13494] Cannot create hsr debugfs directory [ 695.813562][ T5331] m920x_read = error: -19 [ 695.813586][ T5331] dvb-usb: error while querying for an remote control event. [ 695.943291][ T9] m920x_read = error: -19 [ 695.943309][ T9] dvb-usb: error while querying for an remote control event. [ 695.989028][ T29] audit: type=1400 audit(1787467286.931:1423): avc: denied { write } for pid=13610 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 696.066014][ T9] m920x_read = error: -19 [ 696.066029][ T9] dvb-usb: error while querying for an remote control event. [ 696.099902][T13395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 696.145870][ T29] audit: type=1400 audit(1787467287.070:1424): avc: denied { write } for pid=13621 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 696.162216][T13395] 8021q: adding VLAN 0 to HW filter on device team0 [ 696.173316][T11805] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.173371][T11805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 696.179086][T11805] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.179139][T11805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 696.184241][ T5721] m920x_read = error: -19 [ 696.184255][ T5721] dvb-usb: error while querying for an remote control event. [ 696.310206][ T5331] m920x_read = error: -19 [ 696.310221][ T5331] dvb-usb: error while querying for an remote control event. [ 696.328813][ T5260] 8021q: adding VLAN 0 to HW filter on device eth10 [ 696.329926][T13407] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 696.332770][T13407] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 696.336209][T13407] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 696.340626][T13407] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 696.350997][T13407] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 696.361073][T13407] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 696.397857][T13407] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 696.404043][T13407] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 696.429353][ T5331] m920x_read = error: -19 [ 696.429368][ T5331] dvb-usb: error while querying for an remote control event. [ 696.550707][ T5721] m920x_read = error: -19 [ 696.550733][ T5721] dvb-usb: error while querying for an remote control event. [ 696.667658][ T10] m920x_read = error: -19 [ 696.667675][ T10] dvb-usb: error while querying for an remote control event. [ 696.683551][T13494] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.787381][ T10] m920x_read = error: -19 [ 696.787398][ T10] dvb-usb: error while querying for an remote control event. [ 696.903662][T13494] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.910493][ T10] m920x_read = error: -19 [ 696.910508][ T10] dvb-usb: error while querying for an remote control event. [ 696.988917][T13407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 697.027626][ T9] m920x_read = error: -19 [ 697.027642][ T9] dvb-usb: error while querying for an remote control event. [ 697.029614][T13407] 8021q: adding VLAN 0 to HW filter on device team0 [ 697.094589][T13494] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.118497][ T3256] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.118552][ T3256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.124805][ T3256] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.124859][ T3256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.145494][ T10] m920x_read = error: -19 [ 697.145509][ T10] dvb-usb: error while querying for an remote control event. [ 697.240789][T13494] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.265398][ T10] m920x_read = error: -19 [ 697.265413][ T10] dvb-usb: error while querying for an remote control event. [ 697.310550][T13407] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 697.386492][ T9] m920x_read = error: -19 [ 697.386509][ T9] dvb-usb: error while querying for an remote control event. [ 697.504067][ T10] m920x_read = error: -19 [ 697.504084][ T10] dvb-usb: error while querying for an remote control event. [ 697.554115][ T29] audit: type=1400 audit(1787467288.371:1425): avc: denied { write } for pid=13635 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 697.622320][ T5721] m920x_read = error: -19 [ 697.622337][ T5721] dvb-usb: error while querying for an remote control event. [ 697.740620][ T10] m920x_read = error: -19 [ 697.740635][ T10] dvb-usb: error while querying for an remote control event. [ 697.803566][ T29] audit: type=1400 audit(1787467288.602:1426): avc: denied { write } for pid=13655 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 697.808903][ T5331] usb 6-1: USB disconnect, device number 20 [ 697.810086][ T5331] kalmia 6-1:1.0 wwan0: unregister 'kalmia' usb-dummy_hcd.5-1, Samsung Kalmia LTE USB dongle [ 697.860072][ T10] m920x_read = error: -19 [ 697.860088][ T10] dvb-usb: error while querying for an remote control event. [ 697.913037][T13395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 698.003001][ T10] m920x_read = error: -19 [ 698.003017][ T10] dvb-usb: error while querying for an remote control event. [ 698.103463][ T5260] 8021q: adding VLAN 0 to HW filter on device eth11 [ 698.120886][ T9] m920x_read = error: -19 [ 698.120901][ T9] dvb-usb: error while querying for an remote control event. [ 698.239096][ T10] m920x_read = error: -19 [ 698.239113][ T10] dvb-usb: error while querying for an remote control event. [ 698.323081][T13494] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 698.340724][T13494] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 698.341565][T13494] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 698.353071][T13494] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 698.356868][T13494] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 698.358860][ T5331] m920x_read = error: -19 [ 698.358873][ T5331] dvb-usb: error while querying for an remote control event. [ 698.371728][T13494] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 698.377496][T13494] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 698.385859][T13494] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 698.478040][ T9] m920x_read = error: -19 [ 698.478057][ T9] dvb-usb: error while querying for an remote control event. [ 698.596717][ T9] m920x_read = error: -19 [ 698.596732][ T9] dvb-usb: error while querying for an remote control event. [ 698.639726][T13395] veth0_vlan: entered promiscuous mode [ 698.676439][T13494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 698.678791][T13395] veth1_vlan: entered promiscuous mode [ 698.716956][ T5721] m920x_read = error: -19 [ 698.716972][ T5721] dvb-usb: error while querying for an remote control event. [ 698.742088][T13494] 8021q: adding VLAN 0 to HW filter on device team0 [ 698.757990][T13395] veth0_macvtap: entered promiscuous mode [ 698.765042][ T5979] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.765097][ T5979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 698.775158][T13395] veth1_macvtap: entered promiscuous mode [ 698.786139][ T5979] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.786194][ T5979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 698.848273][ T10] m920x_read = error: -19 [ 698.848288][ T10] dvb-usb: error while querying for an remote control event. [ 698.848866][T13395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 698.868920][T13395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 698.882929][ T3256] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.883116][ T3256] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.883218][ T3256] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.883306][ T3256] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.967123][ T5743] m920x_read = error: -19 [ 698.967139][ T5743] dvb-usb: error while querying for an remote control event. [ 698.969705][T13407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 699.056228][T13395] ieee80211 phy39: Selected rate control algorithm 'minstrel_ht' [ 699.088461][ T10] m920x_read = error: -19 [ 699.088478][ T10] dvb-usb: error while querying for an remote control event. [ 699.204152][ T5743] m920x_read = error: -19 [ 699.204168][ T5743] dvb-usb: error while querying for an remote control event. [ 699.219877][T13395] ieee80211 phy40: Selected rate control algorithm 'minstrel_ht' [ 699.220303][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.220315][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.260324][T13407] veth0_vlan: entered promiscuous mode [ 699.263511][T13407] veth1_vlan: entered promiscuous mode [ 699.323757][ T5721] m920x_read = error: -19 [ 699.323773][ T5721] dvb-usb: error while querying for an remote control event. [ 699.345576][ T3338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.345590][ T3338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.390707][T13407] veth0_macvtap: entered promiscuous mode [ 699.411812][T13407] veth1_macvtap: entered promiscuous mode [ 699.413683][ T29] audit: type=1400 audit(1787467290.096:1427): avc: denied { write } for pid=13679 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 699.421271][ T30] INFO: task syz.5.1442:11429 blocked for more than 143 seconds. [ 699.421286][ T30] Not tainted syzkaller #0 [ 699.421293][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 699.421299][ T30] task:syz.5.1442 state:D stack:26184 pid:11429 tgid:11427 ppid:8398 task_flags:0x400140 flags:0x00080002 [ 699.422324][ T30] Call Trace: [ 699.422330][ T30] [ 699.422338][ T30] __schedule+0x1259/0x6920 [ 699.422359][ T30] ? __lock_acquire+0x4c5/0x1ec0 [ 699.422387][ T30] ? __pfx___schedule+0x10/0x10 [ 699.422401][ T30] ? find_held_lock+0x2b/0x80 [ 699.422416][ T30] ? schedule+0x225/0x2c0 [ 699.422435][ T30] schedule+0xdd/0x2c0 [ 699.422451][ T30] schedule_timeout+0x1b2/0x280 [ 699.422466][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 699.422484][ T30] ? __down_common+0x369/0x8b0 [ 699.422503][ T30] ? rcu_is_watching+0x13/0xc0 [ 699.422520][ T30] __down_common+0x371/0x8b0 [ 699.422542][ T30] ? __pfx___down_common+0x10/0x10 [ 699.422562][ T30] ? _raw_spin_lock_irqsave+0x52/0x60 [ 699.422580][ T30] ? __pfx_vcs_open+0x10/0x10 [ 699.422595][ T30] down+0x74/0xa0 [ 699.422612][ T30] console_lock+0x5b/0xa0 [ 699.422623][ T30] vcs_open+0x64/0xc0 [ 699.422637][ T30] chrdev_open+0x234/0x6a0 [ 699.422657][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 699.422676][ T30] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 699.422703][ T30] do_dentry_open+0x6ab/0x14d0 [ 699.422720][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 699.422742][ T30] vfs_open+0x82/0x3f0 [ 699.422757][ T30] path_openat+0x19fa/0x2440 [ 699.422778][ T30] ? __pfx_path_openat+0x10/0x10 [ 699.422815][ T30] do_file_open+0x20e/0x430 [ 699.422836][ T30] ? __pfx_do_file_open+0x10/0x10 [ 699.422866][ T30] ? _raw_spin_unlock+0x28/0x50 [ 699.422881][ T30] ? alloc_fd+0x471/0x7a0 [ 699.422898][ T30] do_sys_openat2+0x10f/0x1e0 [ 699.422911][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 699.422931][ T30] __x64_sys_openat+0x12d/0x210 [ 699.422945][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 699.422965][ T30] do_syscall_64+0x123/0x790 [ 699.422985][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.422998][ T30] RIP: 0033:0x7f7a2a59e0d9 [ 699.423009][ T30] RSP: 002b:00007f7a2b515028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 699.423022][ T30] RAX: ffffffffffffffda RBX: 00007f7a2a825fa0 RCX: 00007f7a2a59e0d9 [ 699.423030][ T30] RDX: 0000000000000401 RSI: 0000200000000a40 RDI: ffffffffffffff9c [ 699.423039][ T30] RBP: 00007f7a2a635024 R08: 0000000000000000 R09: 0000000000000000 [ 699.423047][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 699.423055][ T30] R13: 00007f7a2a826038 R14: 00007f7a2a825fa0 R15: 00007ffdf24935f8 [ 699.423072][ T30] [ 699.423079][ T30] INFO: task syz.6.1470:11509 blocked for more than 143 seconds. [ 699.423088][ T30] Not tainted syzkaller #0 [ 699.423094][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 699.423100][ T30] task:syz.6.1470 state:D stack:28088 pid:11509 tgid:11507 ppid:10482 task_flags:0x400140 flags:0x00080002 [ 699.423141][ T30] Call Trace: [ 699.423145][ T30] [ 699.423153][ T30] __schedule+0x1259/0x6920 [ 699.423169][ T30] ? __lock_acquire+0x4c5/0x1ec0 [ 699.423195][ T30] ? __pfx___schedule+0x10/0x10 [ 699.423210][ T30] ? find_held_lock+0x2b/0x80 [ 699.423224][ T30] ? schedule+0x225/0x2c0 [ 699.423242][ T30] schedule+0xdd/0x2c0 [ 699.423258][ T30] schedule_timeout+0x1b2/0x280 [ 699.423272][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 699.423291][ T30] ? __down_common+0x369/0x8b0 [ 699.423309][ T30] ? rcu_is_watching+0x13/0xc0 [ 699.423326][ T30] __down_common+0x371/0x8b0 [ 699.423347][ T30] ? __pfx___down_common+0x10/0x10 [ 699.423365][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 699.423380][ T30] ? _raw_spin_lock_irqsave+0x52/0x60 [ 699.423400][ T30] down+0x74/0xa0 [ 699.423417][ T30] console_lock+0x5b/0xa0 [ 699.423428][ T30] vt_ioctl+0x1d51/0x3150 [ 699.423444][ T30] ? __pfx_vt_ioctl+0x10/0x10 [ 699.423457][ T30] ? tomoyo_path_number_perm+0x28f/0x580 [ 699.423478][ T30] ? tomoyo_path_number_perm+0x188/0x580 [ 699.423498][ T30] ? __pfx_futex_wait+0x10/0x10 [ 699.423516][ T30] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 699.423536][ T30] ? tty_jobctrl_ioctl+0x152/0xce0 [ 699.423550][ T30] ? __pfx_vt_ioctl+0x10/0x10 [ 699.423564][ T30] tty_ioctl+0x26a/0x1640 [ 699.423583][ T30] ? __pfx_tty_ioctl+0x10/0x10 [ 699.423599][ T30] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 699.423620][ T30] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 699.423649][ T30] ? selinux_file_ioctl+0x13b/0x290 [ 699.423666][ T30] ? selinux_file_ioctl+0xb6/0x290 [ 699.423685][ T30] ? __pfx_tty_ioctl+0x10/0x10 [ 699.423703][ T30] __x64_sys_ioctl+0x18e/0x210 [ 699.423721][ T30] do_syscall_64+0x123/0x790 [ 699.423740][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.423753][ T30] RIP: 0033:0x7f6a4fb9e0d9 [ 699.423763][ T30] RSP: 002b:00007f6a5099d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 699.423775][ T30] RAX: ffffffffffffffda RBX: 00007f6a4fe26090 RCX: 00007f6a4fb9e0d9 [ 699.423783][ T30] RDX: 00002000000006c0 RSI: 000000000000560a RDI: 0000000000000008 [ 699.423791][ T30] RBP: 00007f6a4fc35024 R08: 0000000000000000 R09: 0000000000000000 [ 699.423798][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 699.423806][ T30] R13: 00007f6a4fe26128 R14: 00007f6a4fe26090 R15: 00007ffe2109ac78 [ 699.423823][ T30] [ 699.423872][ T30] [ 699.423872][ T30] Showing all locks held in the system: [ 699.423880][ T30] locks held by kworker/0:1/10: 3, last CPU#0: [ 699.423890][ T30] #0: ffff88801c053140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 699.423926][ T30] #1: ffffc900000f7d08 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 699.423960][ T30] #2: ffff88807fe8c250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1b8/0x6330 [ 699.423993][ T30] locks held by kworker/u8:1/13: 3, on CPU#0: [ 699.424002][ T30] #0: ffff888033f23940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 699.424036][ T30] #1: ffffc90000127d08 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 699.424070][ T30] #2: ffffffff90cbf380 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11f/0x1360 [ 699.424107][ T30] locks held by rcu_tasks_kthre/28: 1, on CPU#0: [ 699.424116][ T30] #0: ffffffff8ede94c8 (rcu_tasks.tasks_gp_mutex){+.+.}-{4:4}, at: rcu_tasks_one_gp+0x61f/0xd90 [ 699.424150][ T30] locks held by khungtaskd/30: 1, last CPU#0: [ 699.424159][ T30] #0: ffffffff8ede9d40 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 699.424206][ T30] locks held by kworker/0:3/5331: 3, on CPU#0: [ 699.424215][ T30] #0: ffff88801c053140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 699.424249][ T30] #1: ffffc900037cfd08 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 699.424283][ T30] #2: ffff88805811b250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1b8/0x6330 [ 699.424315][ T30] locks held by getty/5354: 2, on CPU#1: [ 699.424324][ T30] #0: ffff888037ad50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 699.424356][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 699.424389][ T30] locks held by kworker/0:6/5721: 3, on CPU#0: [ 699.424398][ T30] #0: ffff88801c053140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 699.424431][ T30] #1: ffffc90004fafd08 (netdev_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 699.424465][ T30] #2: ffffffff90cbf380 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x71/0x880 [ 699.424496][ T30] locks held by kworker/u8:14/5979: 2, last CPU#0: [ 699.424505][ T30] #0: ffff88801c08c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 699.424538][ T30] #1: ffffc90005c27d08 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 699.424575][ T30] locks held by syz.4.1339/10972: 6, last CPU#0: [ 699.424584][ T30] #0: ffff88807f8980a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 699.424616][ T30] #1: ffff88807f898128 (&tty->atomic_write_lock){+.+.}-{4:4}, at: file_tty_write.isra.0+0x24b/0x890 [ 699.424651][ T30] #2: ffff88807f8982c8 (&tty->termios_rwsem){++++}-{4:4}, at: n_tty_write+0x1b8/0x1160 [ 699.424681][ T30] #3: ffffc90003893370 (&ldata->output_lock){+.+.}-{4:4}, at: n_tty_write+0x54c/0x1160 [ 699.424711][ T30] #4: ffffffff8edd6100 (console_lock){+.+.}-{0:0}, at: con_write+0x84/0xb0 [ 699.424746][ T30] #5: ffffffff8edd6178 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfd/0xf10 [ 699.424781][ T30] locks held by syz.8.1724/12898: 2, on CPU#0: [ 699.424790][ T30] #0: ffffffff8fba0ca0 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 [ 699.424824][ T30] #1: ffff8880999bb1b0 (&tty->legacy_mutex){+.+.}-{4:4}, at: tty_init_dev.part.0+0x39/0x470 [ 699.424860][ T30] locks held by syz.7.1740/12985: 1, on CPU#0: [ 699.424869][ T30] #0: ffffffff8fba0ca0 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 [ 699.424904][ T30] locks held by syz.4.1761/13103: 1, on CPU#0: [ 699.424912][ T30] #0: ffffffff8fba0ca0 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 [ 699.424947][ T30] locks held by syz.2.1785/13291: 1, on CPU#0: [ 699.424956][ T30] #0: ffffffff8fba0ca0 (tty_mutex){+.+.}-{4:4}, at: ptmx_open+0x11a/0x360 [ 699.424988][ T30] locks held by syz-executor/13395: 2, last CPU#0: [ 699.424997][ T30] #0: ffff888077b36308 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: do_lock_mount.part.0+0x536/0xb10 [ 699.425031][ T30] #1: ffffffff8f054028 (namespace_sem){++++}-{4:4}, at: do_lock_mount.part.0+0x542/0xb10 [ 699.425060][ T30] locks held by syz-executor/13407: 1, last CPU#0: [ 699.425069][ T30] #0: ffffffff90cbf380 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xac3/0x2620 [ 699.425108][ T30] locks held by syz.6.1820/13544: 1, on CPU#0: [ 699.425117][ T30] #0: ffffffff8fba0ca0 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 [ 699.425153][ T30] locks held by syz.5.1825/13659: 1, on CPU#0: [ 699.425162][ T30] #0: ffffffff8fba0ca0 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 [ 699.425197][ T30] locks held by dhcpcd-run-hook/13679: 1, last CPU#0: [ 699.425206][ T30] #0: ffffffff8ede9d40 (rcu_read_lock){....}-{1:3}, at: path_init+0xac1/0x1ab0 [ 699.425238][ T30] [ 699.425242][ T30] ============================================= [ 699.425242][ T30] [ 699.425252][ T30] NMI backtrace for cpu 0 [ 699.425260][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 699.425272][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 699.425279][ T30] Call Trace: [ 699.425284][ T30] [ 699.425288][ T30] dump_stack_lvl+0x100/0x190 [ 699.425305][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 699.425323][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 699.425343][ T30] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 699.425359][ T30] sys_info+0x141/0x190 [ 699.425371][ T30] watchdog+0xcb1/0x1030 [ 699.425385][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 699.425400][ T30] ? __pfx_watchdog+0x10/0x10 [ 699.425418][ T30] ? __kthread_parkme+0x18f/0x230 [ 699.425432][ T30] ? kthread+0x13a/0x450 [ 699.425444][ T30] ? __pfx_watchdog+0x10/0x10 [ 699.425460][ T30] kthread+0x373/0x450 [ 699.425474][ T30] ? __pfx_kthread+0x10/0x10 [ 699.425488][ T30] ret_from_fork+0x730/0xd60 [ 699.425500][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 699.425512][ T30] ? __switch_to+0x800/0x10f0 [ 699.425527][ T30] ? __pfx_kthread+0x10/0x10 [ 699.425541][ T30] ret_from_fork_asm+0x1a/0x30 [ 699.425561][ T30] [ 699.425575][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 699.425583][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 699.425595][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 699.425603][ T30] Call Trace: [ 699.425607][ T30] [ 699.425611][ T30] dump_stack_lvl+0x100/0x190 [ 699.425628][ T30] vpanic+0x553/0x970 [ 699.425640][ T30] ? __pfx_vpanic+0x10/0x10 [ 699.425651][ T30] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 699.425666][ T30] ? rcu_is_watching+0x13/0xc0 [ 699.425681][ T30] panic+0xd1/0xe0 [ 699.425692][ T30] ? __pfx_panic+0x10/0x10 [ 699.425704][ T30] ? nmi_cpu_backtrace+0x79/0x200 [ 699.425719][ T30] ? nmi_trigger_cpumask_backtrace+0x206/0x2a0 [ 699.425733][ T30] ? watchdog.cold+0x1ec/0x234 [ 699.425748][ T30] watchdog.cold+0x1fd/0x234 [ 699.425764][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 699.425780][ T30] ? __pfx_watchdog+0x10/0x10 [ 699.425798][ T30] ? __kthread_parkme+0x18f/0x230 [ 699.425811][ T30] ? kthread+0x13a/0x450 [ 699.425824][ T30] ? __pfx_watchdog+0x10/0x10 [ 699.425841][ T30] kthread+0x373/0x450 [ 699.425854][ T30] ? __pfx_kthread+0x10/0x10 [ 699.425870][ T30] ret_from_fork+0x730/0xd60 [ 699.425882][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 699.425894][ T30] ? __switch_to+0x800/0x10f0 [ 699.425908][ T30] ? __pfx_kthread+0x10/0x10 [ 699.425923][ T30] ret_from_fork_asm+0x1a/0x30 [ 699.425942][ T30] [ 699.425988][ T30] Kernel Offset: disabled